last executing test programs: 23m34.934844629s ago: executing program 32 (id=131): syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2d, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @dest_unreach={0x3, 0x11, 0x0, 0x0, 0x4, 0xccce, {0x5, 0x4, 0x2, 0x1, 0x8, 0x67, 0x3, 0xe7, 0x33, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}}}}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004041) r0 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r1 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x3, {0x11, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0xf602, 0x6, 0xfffffff3, 0x0, 0x0, 0x0, '\x00', 0xfffffffffffffffe, 0x0, 0x1ff, 0x0, {}, {0x5, 0x2}, {0xfffffffffffffffb, 0x4}, {0x5}, 0x60, 0x0, 0x7fff}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x8000000000000000, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000340)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f00000002c0)=0x8, 0x4) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r2, 0x200c}, {r3, 0x3847798a360dc35d}], 0x2, &(0x7f0000000100)={r4, r5+10000000}, &(0x7f0000000140)={[0x2b]}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000005e0000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) 13m42.21191025s ago: executing program 0 (id=2280): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 13m41.275614511s ago: executing program 0 (id=2287): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000100)={0xdf, 0x0, 0x2000}) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000726000/0x13000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, 0x0, &(0x7f0000000300)) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x0, 0x0, 0x1000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x4000000, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2], [0x5, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x42ac, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xfffffffe, 0x0, 0x0, 0x2, 0x20000000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff], [0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x526d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800000, 0x1, 0xfffffffd, 0x0, 0x4, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956, 0x6, 0x1]}, 0x45c) socket(0x10, 0x803, 0x0) 13m40.728570266s ago: executing program 0 (id=2289): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000480), 0x201, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(r1, 0x3b64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r4, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0xffffffff80002000, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x50) fcntl$setpipe(r4, 0x407, 0x100000) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs(r5, &(0x7f00000000c0)='wchan\x00') pread64(r3, &(0x7f0000000780)=""/185, 0xb9, 0x2) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000080)={r6}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="04010000100007000000000000000000fe880000000000000000000000000001e094ec010000000000000000000000004e200000000000000a0000006c0000002b8a99b25ca1676e32a547a0a494099530b6f3ee7abfccdf41158d78c52d2a51a9ce02137714476804816b2e5d0e648fd735a025", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000042b000000fc0000000000000000000000000000000000000000000000ffffffffffffffff020000000000000000000000000000000000001000000000ad0000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a0000000000000000040002000400740000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000280)={0x3, 0xa2a, 0x2, {0x7, @sdr={0x47314356, 0x9}}, 0x101}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x4d, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0x990a23, 0xfffffffd}) open(&(0x7f0000000240)='./file0\x00', 0x22842, 0x120) 13m40.508510591s ago: executing program 0 (id=2291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x20, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x4010) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a05125000000000000109022400010000e80b0904000001030002000921fd7f000122e30109058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x83, 0x1, "d2"}, 0x0, 0x0}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x62) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r7, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1, &(0x7f0000000400)=""/17, 0x11}, 0x8000}], 0x1, 0x2102, 0x0) write$binfmt_misc(r7, &(0x7f0000000340), 0x2000011a) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r8 = open_tree(r4, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xe, {[@local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 13m37.251455937s ago: executing program 0 (id=2307): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x10}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x9, 0x2, 0x200, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000006c0)={0x1c, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe, {0xb}, [@nested={0x8, 0xe, 0x0, 0x1, [@nested={0x4, 0x151}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000004) 13m36.526607618s ago: executing program 0 (id=2309): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 13m36.007559398s ago: executing program 33 (id=2309): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 12m52.325417334s ago: executing program 2 (id=2491): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x20, 0x10, 0x437, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, 0x40489}}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@mcast1, 0x18006b, r3}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r10, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r10, 0x40083, 0x4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x7ff}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_LINK={0x8, 0x1, r10}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24048014}, 0x4040) write$binfmt_misc(r7, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000400)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) 12m51.709584384s ago: executing program 2 (id=2495): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000012c0)='bic', 0x3) (async, rerun: 32) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000740)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x40, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @dest_unreach={0x1, 0x5, 0x0, 0x80, '\x00', {0xa, 0x6, "d30d09", 0x9d, 0x3c, 0x1, @mcast1, @private2, [@srh={0x2c, 0x0, 0x4, 0x0, 0xc, 0x40, 0x9}, @hopopts={0x2b}]}}}}}}}, 0x0) (async, rerun: 64) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x40, 0x0}}]}, &(0x7f0000000180)=0x10) (async, rerun: 64) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 64) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) (async) syz_open_dev$usbmon(0x0, 0x0, 0x0) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000000c0)={0x0, 'geneve1\x00', {}, 0xffff}) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xfffffffa, 0x0, 0x20000, 0x1}) (async) writev(r2, &(0x7f0000000140)=[{&(0x7f00000010c0)="580000001400192340834b80040d8c560a067f0202ff00000000000000941fd3b6a59118908ea08c0325010ebc080000000000000000f0fffeffe80900530000f5dd00000010000100040c100d0000010000000000007ab9000000000000000000ec4df55cfa0bed2b1590804f4e3b55d9be43d6aa05b0527e23d316b0886dce12562ef090dc997624f645b8a135c42672e358e4c7eb7b9b5cebd4adabf8d4e97b3a29a95e5757cda941629cb94e0aa976cf43194a2cb0b26265d0577dfd953573cf2a444624ce", 0xc7}], 0x1) shutdown(0xffffffffffffffff, 0x1) 12m51.207514858s ago: executing program 2 (id=2498): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r1, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}, 0x1, 0xffffffffffffffe4}, 0x0) 12m50.674665088s ago: executing program 2 (id=2500): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000040002800800", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x884) 12m49.146040463s ago: executing program 2 (id=2508): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64) sendfile(r1, r2, 0x0, 0xffffffff004) (async) close(r1) (async) r3 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0xff09) 12m48.63771725s ago: executing program 2 (id=2511): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39a}) ioctl$OCFS2_IOC_INFO(r0, 0x80106f05, &(0x7f000000a2c0)={&(0x7f000000a100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007c80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0xbf, 0xffffffffffffffa4}, {0xa, 0xcece}, {0x8, 0x2}, {0x800, 0x8000000000000001}, {0xffffffffce1b73eb, 0x9}, {0xa}, {0xabb, 0x7}, {0xd19, 0xb68}, {0x589, 0x7f}, {0x401, 0xffffffff}, {0x1}, {0x80000000, 0x7f}, {0x0, 0xfffffffffffffff9}, {0x5, 0x80}, {0x1, 0x5}, {0x6, 0x2}, {0x4f7, 0x7f}, {0x5, 0x5}, {0x3, 0x4}, {0x9, 0xf}, {0x4, 0x2}, {0x3, 0x7224}, {0x7, 0xda1}, {0x1, 0x2}, {0x6, 0x1000}, {0xfffffffffffffc01, 0x6}, {0x101, 0x7}, {0x100, 0x4}, {0xe, 0x6}, {0x10000, 0x8000000000000001}, {0x1, 0x80000000}, {0x764, 0x200}, {0x3ff, 0x8}, {0x800, 0x4}, {0xffff, 0x100000000}, {0x1, 0x2}, {0x8001, 0x820f}, {0xcb, 0x4}, {0xffffffffffff8001, 0x4}, {0x200, 0x3}, {0x2, 0x9}, {0x0, 0x2}, {0xc7, 0xfff}, {0x2, 0x2}, {0x4, 0x7}, {0x80000001}, {0xfffffffffffffff7, 0x6}, {0x8, 0x2}, {0x2}, {0x1, 0x8000000000000000}, {0x6, 0x7fffffff}, {0x8000, 0x9}, {0x0, 0x4ef}, {0x8ca, 0x7}, {0x8000000000000000, 0x1}, {0x200000000000000, 0x5}, {0xffffffff, 0x4}, {0x9, 0x5}, {0x4ba0, 0xc54b}, {0x6, 0x5}, {0x1, 0x400}, {0x8000000000000000, 0x7}, {0x5, 0x7}, {0x3, 0x2}, {0xfffffffffffffff8, 0x1}, {0x1, 0x2}, {0x2030000, 0xe3}, {0x8, 0x6}, {0x1, 0x177}, {0x3, 0xc}, {0x8, 0xf}, {0x2, 0x200}, {0x2, 0x80000000}, {0x9, 0x7fff}, {0x2, 0x1ff}, {0x2, 0x8}, {0x4, 0x5}, {0x4, 0xffffffff}, {0x1, 0x803}, {0x94, 0x2541}, {0x4010000000000000, 0x100000001}, {0x5, 0x5}, {0xd, 0x2}, {0x70d, 0x4}, {0x7fff, 0xfa20}, {0x100000001, 0x28c9}, {0x80, 0x3}, {0x6b6c, 0x19dd}, {0x7ff, 0xfff}, {0x8, 0x6}, {0x5}, {0x7, 0x7}, {0x0, 0x80000000}, {0x9, 0xb0}, {0x200, 0x40}, {0x1, 0xfdf}, {0x1, 0xe6a}, {0x2, 0x6435}, {0x7fff, 0x5}, {0xec, 0x100000000}, {0xffffffffffffe0c5, 0x9}, {0x4, 0x210}, {0x3, 0x6}, {0x9, 0x9}, {0x3, 0xc1}, {0x4}, {0x10000, 0xfffffffffffffffd}, {0x0, 0x2}, {0x100, 0x2}, {0x29b23aa3, 0xffffffff}, {0x7}, {0xb22, 0x97f6}, {0x3, 0x654}, {0x1, 0x1}, {0x74}, {0x8, 0x8000000000000004}, {0x6, 0xce0}, {0xfffffffffffffc01, 0x100000000}, {0x10000, 0x3}, {0x100000001, 0x1}, {0x400, 0x892}, {0x7, 0x7fffffff}, {0x2, 0x90ea}, {0x5, 0x49debf5a}, {0x8, 0x8}, {0x4, 0x7}, {0x6, 0x1ff}, {0x2, 0x1c2}, {0xdf9, 0x40}, {0x0, 0x8}, {0xfffffffffffffffe, 0xfffffffffffffffd}, {0x9, 0x7fffffffffffffff}, {0x2, 0xd4}, {0x4, 0x9}, {0x617, 0xffffffff80000000}, {0xe926, 0x7}, {0x39d, 0x60000000}, {0x9, 0x7}, {0x1ff, 0xffffffffffff8b2c}, {0x9, 0x9}, {0x6}, {0x881, 0x795}, {0x10000, 0x3}, {0x7, 0xfffffffffffffff7}, {0x0, 0xffffffffffffffff}, {0xb5, 0x6}, {0x2, 0xe}, {0x87, 0x5}, {0x9, 0x2}, {}, {0x1, 0x1d95}, {0xffffffffffffff1e, 0x8000}, {0x1, 0x8}, {0x8001, 0x4}, {0x1, 0x6}, {0x401, 0x40}, {0xd7fa, 0xffffffffffffff01}, {0x7, 0x3}, {0xfffffffffffffffa, 0x242}, {0x0, 0x20fb}, {0x7, 0x7}, {0x1, 0xfffffffffffffffe}, {0xfffffffffffff000, 0x5}, {0xe}, {0xffffffffffffffff, 0x10000}, {0x6, 0x100000000}, {0x3ff}, {0x3, 0x5}, {0x5, 0xae3}, {0x6, 0x100000001}, {0x101, 0x6}, {0x5, 0x378c66fb}, {0x81, 0x1e0}, {0x9, 0x40}, {0x8, 0x6}, {0x5, 0x3}, {0xc4, 0x2}, {0xd6}, {0x81, 0x15f8}, {0x1ff, 0x4}, {0xb, 0x80000000}, {0x6, 0xfba}, {0x4, 0x9}, {0xe000, 0x8000000000000001}, {0xf}, {0x8, 0x6}, {0x9, 0x611}, {0x5cf, 0x3ff}, {0x4, 0x5}, {0xb4, 0x6}, {0x9d, 0x9dc170c}, {0x0, 0x5}, {0x5, 0x7}, {0xfffffffffffff800}, {0x4, 0x72}, {0x4, 0x807}, {0x8, 0x80000008db5}, {0x6, 0x3}, {0x5, 0xffffffffffffffff}, {0x9, 0x1}, {0x2, 0x4}, {0xffffffff, 0x80}, {0x1, 0x1}, {0x3, 0x2}, {0x5, 0x429}, {0x6, 0x4}, {0xfff, 0xf63}, {0x7, 0x6d58996e}, {0xfffffffffffffffe, 0x8001}, {0xd052, 0x76}, {0x7fff, 0xe41}, {0x43e6, 0x8}, {0x101, 0xb}, {0x9, 0x6}, {0x10000, 0x3}, {0x0, 0x1}, {0x2, 0x5}, {0x7, 0xa}, {0x7fff, 0xfc}, {0x8852, 0x8}, {0x8, 0x8000000000000001}, {0x4, 0x7}, {0x6, 0x1}, {0x8, 0xd4fe451}, {0xff, 0x2}, {0x6}, {0x15a, 0x8}, {0x679873eb, 0xfffffffffffff8ed}, {0x1000000000, 0xffffffffffff54e9}, {0x34800, 0x1ff}, {0x8000, 0x6}, {0x4}, {0x7ffd}, {0x4, 0x3e}, {0x6, 0xfffffffffffffffa}, {0x400, 0xff}, {0x2, 0x3}, {0x9, 0x68}, {0x5, 0x8}, {0xfffffffffffffff7, 0x8}, {0x8, 0x3}, {0x9, 0x1581}, {0x40, 0x8557}, {0x8, 0x6}, {0x1, 0x7}, {0x9, 0x9}, {0x25, 0x9}, {0x1ff, 0xffffffffffffffff}, {0x32d, 0xffffffffffffffaa}, {0xad2a, 0xf95}, {0x2, 0xf}, {0xa, 0x2}, {0xb, 0xffffffffffffffff}, {0x8}, {0xffffffff, 0xffffffffffffffff}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r2) sched_getattr(0xffffffffffffffff, &(0x7f0000000140)={0x38}, 0x38, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mmap$xdp(&(0x7f000057b000/0x1000)=nil, 0x1000, 0x1, 0x20032, 0xffffffffffffffff, 0x80000000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x38, 0x90, 0xc9, 0x8, 0x16ca, 0x1502, 0xa579, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 12m33.318130066s ago: executing program 34 (id=2511): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39a}) ioctl$OCFS2_IOC_INFO(r0, 0x80106f05, &(0x7f000000a2c0)={&(0x7f000000a100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007c80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0xbf, 0xffffffffffffffa4}, {0xa, 0xcece}, {0x8, 0x2}, {0x800, 0x8000000000000001}, {0xffffffffce1b73eb, 0x9}, {0xa}, {0xabb, 0x7}, {0xd19, 0xb68}, {0x589, 0x7f}, {0x401, 0xffffffff}, {0x1}, {0x80000000, 0x7f}, {0x0, 0xfffffffffffffff9}, {0x5, 0x80}, {0x1, 0x5}, {0x6, 0x2}, {0x4f7, 0x7f}, {0x5, 0x5}, {0x3, 0x4}, {0x9, 0xf}, {0x4, 0x2}, {0x3, 0x7224}, {0x7, 0xda1}, {0x1, 0x2}, {0x6, 0x1000}, {0xfffffffffffffc01, 0x6}, {0x101, 0x7}, {0x100, 0x4}, {0xe, 0x6}, {0x10000, 0x8000000000000001}, {0x1, 0x80000000}, {0x764, 0x200}, {0x3ff, 0x8}, {0x800, 0x4}, {0xffff, 0x100000000}, {0x1, 0x2}, {0x8001, 0x820f}, {0xcb, 0x4}, {0xffffffffffff8001, 0x4}, {0x200, 0x3}, {0x2, 0x9}, {0x0, 0x2}, {0xc7, 0xfff}, {0x2, 0x2}, {0x4, 0x7}, {0x80000001}, {0xfffffffffffffff7, 0x6}, {0x8, 0x2}, {0x2}, {0x1, 0x8000000000000000}, {0x6, 0x7fffffff}, {0x8000, 0x9}, {0x0, 0x4ef}, {0x8ca, 0x7}, {0x8000000000000000, 0x1}, {0x200000000000000, 0x5}, {0xffffffff, 0x4}, {0x9, 0x5}, {0x4ba0, 0xc54b}, {0x6, 0x5}, {0x1, 0x400}, {0x8000000000000000, 0x7}, {0x5, 0x7}, {0x3, 0x2}, {0xfffffffffffffff8, 0x1}, {0x1, 0x2}, {0x2030000, 0xe3}, {0x8, 0x6}, {0x1, 0x177}, {0x3, 0xc}, {0x8, 0xf}, {0x2, 0x200}, {0x2, 0x80000000}, {0x9, 0x7fff}, {0x2, 0x1ff}, {0x2, 0x8}, {0x4, 0x5}, {0x4, 0xffffffff}, {0x1, 0x803}, {0x94, 0x2541}, {0x4010000000000000, 0x100000001}, {0x5, 0x5}, {0xd, 0x2}, {0x70d, 0x4}, {0x7fff, 0xfa20}, {0x100000001, 0x28c9}, {0x80, 0x3}, {0x6b6c, 0x19dd}, {0x7ff, 0xfff}, {0x8, 0x6}, {0x5}, {0x7, 0x7}, {0x0, 0x80000000}, {0x9, 0xb0}, {0x200, 0x40}, {0x1, 0xfdf}, {0x1, 0xe6a}, {0x2, 0x6435}, {0x7fff, 0x5}, {0xec, 0x100000000}, {0xffffffffffffe0c5, 0x9}, {0x4, 0x210}, {0x3, 0x6}, {0x9, 0x9}, {0x3, 0xc1}, {0x4}, {0x10000, 0xfffffffffffffffd}, {0x0, 0x2}, {0x100, 0x2}, {0x29b23aa3, 0xffffffff}, {0x7}, {0xb22, 0x97f6}, {0x3, 0x654}, {0x1, 0x1}, {0x74}, {0x8, 0x8000000000000004}, {0x6, 0xce0}, {0xfffffffffffffc01, 0x100000000}, {0x10000, 0x3}, {0x100000001, 0x1}, {0x400, 0x892}, {0x7, 0x7fffffff}, {0x2, 0x90ea}, {0x5, 0x49debf5a}, {0x8, 0x8}, {0x4, 0x7}, {0x6, 0x1ff}, {0x2, 0x1c2}, {0xdf9, 0x40}, {0x0, 0x8}, {0xfffffffffffffffe, 0xfffffffffffffffd}, {0x9, 0x7fffffffffffffff}, {0x2, 0xd4}, {0x4, 0x9}, {0x617, 0xffffffff80000000}, {0xe926, 0x7}, {0x39d, 0x60000000}, {0x9, 0x7}, {0x1ff, 0xffffffffffff8b2c}, {0x9, 0x9}, {0x6}, {0x881, 0x795}, {0x10000, 0x3}, {0x7, 0xfffffffffffffff7}, {0x0, 0xffffffffffffffff}, {0xb5, 0x6}, {0x2, 0xe}, {0x87, 0x5}, {0x9, 0x2}, {}, {0x1, 0x1d95}, {0xffffffffffffff1e, 0x8000}, {0x1, 0x8}, {0x8001, 0x4}, {0x1, 0x6}, {0x401, 0x40}, {0xd7fa, 0xffffffffffffff01}, {0x7, 0x3}, {0xfffffffffffffffa, 0x242}, {0x0, 0x20fb}, {0x7, 0x7}, {0x1, 0xfffffffffffffffe}, {0xfffffffffffff000, 0x5}, {0xe}, {0xffffffffffffffff, 0x10000}, {0x6, 0x100000000}, {0x3ff}, {0x3, 0x5}, {0x5, 0xae3}, {0x6, 0x100000001}, {0x101, 0x6}, {0x5, 0x378c66fb}, {0x81, 0x1e0}, {0x9, 0x40}, {0x8, 0x6}, {0x5, 0x3}, {0xc4, 0x2}, {0xd6}, {0x81, 0x15f8}, {0x1ff, 0x4}, {0xb, 0x80000000}, {0x6, 0xfba}, {0x4, 0x9}, {0xe000, 0x8000000000000001}, {0xf}, {0x8, 0x6}, {0x9, 0x611}, {0x5cf, 0x3ff}, {0x4, 0x5}, {0xb4, 0x6}, {0x9d, 0x9dc170c}, {0x0, 0x5}, {0x5, 0x7}, {0xfffffffffffff800}, {0x4, 0x72}, {0x4, 0x807}, {0x8, 0x80000008db5}, {0x6, 0x3}, {0x5, 0xffffffffffffffff}, {0x9, 0x1}, {0x2, 0x4}, {0xffffffff, 0x80}, {0x1, 0x1}, {0x3, 0x2}, {0x5, 0x429}, {0x6, 0x4}, {0xfff, 0xf63}, {0x7, 0x6d58996e}, {0xfffffffffffffffe, 0x8001}, {0xd052, 0x76}, {0x7fff, 0xe41}, {0x43e6, 0x8}, {0x101, 0xb}, {0x9, 0x6}, {0x10000, 0x3}, {0x0, 0x1}, {0x2, 0x5}, {0x7, 0xa}, {0x7fff, 0xfc}, {0x8852, 0x8}, {0x8, 0x8000000000000001}, {0x4, 0x7}, {0x6, 0x1}, {0x8, 0xd4fe451}, {0xff, 0x2}, {0x6}, {0x15a, 0x8}, {0x679873eb, 0xfffffffffffff8ed}, {0x1000000000, 0xffffffffffff54e9}, {0x34800, 0x1ff}, {0x8000, 0x6}, {0x4}, {0x7ffd}, {0x4, 0x3e}, {0x6, 0xfffffffffffffffa}, {0x400, 0xff}, {0x2, 0x3}, {0x9, 0x68}, {0x5, 0x8}, {0xfffffffffffffff7, 0x8}, {0x8, 0x3}, {0x9, 0x1581}, {0x40, 0x8557}, {0x8, 0x6}, {0x1, 0x7}, {0x9, 0x9}, {0x25, 0x9}, {0x1ff, 0xffffffffffffffff}, {0x32d, 0xffffffffffffffaa}, {0xad2a, 0xf95}, {0x2, 0xf}, {0xa, 0x2}, {0xb, 0xffffffffffffffff}, {0x8}, {0xffffffff, 0xffffffffffffffff}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r2) sched_getattr(0xffffffffffffffff, &(0x7f0000000140)={0x38}, 0x38, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mmap$xdp(&(0x7f000057b000/0x1000)=nil, 0x1000, 0x1, 0x20032, 0xffffffffffffffff, 0x80000000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x38, 0x90, 0xc9, 0x8, 0x16ca, 0x1502, 0xa579, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 6m46.086514884s ago: executing program 6 (id=3712): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000000000000000006df2500000400", @ANYRES32=0x0, @ANYBLOB="0000000006a701002400128009000100626f6e64000000001400028008001400ffffffff0800130002000000"], 0x44}, 0x1, 0x0, 0x0, 0x24040090}, 0x4000844) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x2d) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010003704000000000500000000000000", @ANYRES32=r2, @ANYBLOB="c3040580000000002800128008000100677265001c00028005000a000000000008000700ac1414aa0500130001"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) (async, rerun: 32) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r8], 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 6m45.205440261s ago: executing program 6 (id=3714): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private2}}, &(0x7f0000000280)=0xe8) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x26, 0x800, 0x70bd2a, 0x25dfdbfb, {0x6}, [@nested={0x28, 0x149, 0x0, 0x1, [@typed={0x8, 0x96, 0x0, 0x0, @uid=r1}, @typed={0x14, 0x120, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x8, 0xf2, 0x0, 0x0, @uid=r2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20004004) (async) ioctl$XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000380)={0x0, 0xe0, "d988635bb7e5e699630691d51e20d540565e64837c6a2a85b64703e563440a3daf10810239eeba33b84f60881637a03257ed100226f5052ce199e68c31804dab34b8258d3a601f48ac7d5c0748d4cc73aea61a60697ae23ed683d5afa7da3afefbfbce0ceeb978cd34aeeeb5ffd0438f922149df82635c942288b63dec97e5f56f570340de0172a5385990ae14c75d856b4d02dabcc7526a2c98defea713c57c1d4470dd9f3bb5d625cfa4a4764c64efabdb14fe6b274b9ac5d08b617b872a1e359adce23727b47824113f546ccb2d79f7016cbff40cae2d370d513951db214b"}, &(0x7f0000000480)=0xe8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0)={r3, 0x6}, &(0x7f0000000500)=0x8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, 0xffffffffffffffff}}, './file0\x00'}) (async) getresgid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)=0x0) mount$fuse(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x100000, &(0x7f00000006c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xad62}}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x61, 0x0, 0x63, 0x30, 0x62, 0x35, 0x66], 0x2d, [0x65, 0x65, 0x64, 0x36], 0x2d, [0xb069b37030ba3a54, 0x37, 0x39, 0x65], 0x2d, [0x34, 0x39, 0x30, 0x32], 0x2d, [0x30, 0x22, 0x65, 0x65, 0x37, 0x66, 0x31, 0x63]}}}, {@pcr={'pcr', 0x3d, 0x1c}}, {@smackfsroot={'smackfsroot', 0x3d, '.%^D&$/#:\''}}, {@subj_user={'subj_user', 0x3d, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, {@fscontext={'fscontext', 0x3d, 'root'}}]}}) (async) r6 = openat2(r4, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x80901, 0x80, 0x30}, 0x18) (async, rerun: 32) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r4, 0xc0106450, &(0x7f0000000880)={0x0, 0x1, 0x2}) (async, rerun: 32) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r4, 0xc0186445, &(0x7f00000008c0)={0xfffffffffffffff5, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r4, 0xc0186445, &(0x7f0000000900)={0x4, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r4, 0xc0186445, &(0x7f0000000940)={0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r4, 0xc0186445, &(0x7f0000000980)={0x40, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_SYNC(r6, 0xc010644f, &(0x7f0000000ac0)={{0x18, 0x9, &(0x7f00000009c0)=[{0x0, 0x1, 0x5c, 0x5}, {r7, 0x0, 0x7fffffff, 0xd}, {r8, 0x1, 0x1, 0x1}, {r9, 0x0, 0xf, 0x4}, {r10, 0x0, 0x4, 0x7}, {0x0, 0x0, 0x8, 0x3}, {0x0, 0x0, 0x6, 0x98b9}, {r11, 0x1, 0x6, 0x4c}, {0x0, 0x1, 0x6, 0x7}]}}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r6) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x50, r12, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4008010) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000c80)={0x0, @multicast1, @local}, &(0x7f0000000cc0)=0xc) (async) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000d00), &(0x7f0000000d40), 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)) (async) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r14, 0x71b53000) (async) r15 = semget$private(0x0, 0x3, 0x2) semop(r15, &(0x7f0000000e00)=[{0x1, 0x5, 0x800}, {0x4}, {0x4, 0x511, 0x800}, {0x3, 0x2, 0x800}, {0x4, 0x4, 0x3000}, {0x0, 0xfff2, 0x1000}], 0x6) (async) sendmsg$nl_route(r4, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)=@can_newroute={0x4c, 0x18, 0x10, 0x70bd25, 0x25dfdbfc, {0x1d, 0x1, 0x1}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x4}, 0x2, 0x1, 0x0, 0x0, "41589afda3e8a4d3"}, 0x4}}, @CGW_DST_IF={0x8, 0xa, r13}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "94884989bcfe5408"}, 0x2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x24044800) (async) r16 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r16, 0xc0086420, &(0x7f0000000fc0)) (async) ioctl$DRM_IOCTL_ADD_BUFS(r6, 0xc0206416, &(0x7f0000001000)={0xfffffffc, 0xc, 0x81, 0x10001, 0x6aa0590937e50e0c, 0x59}) 6m44.946517609s ago: executing program 6 (id=3717): lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0x46, 0x3, 0x57, "842098ed69618213e3b14040bcdb7ebb", "2cf90d2122de337f4c188549b58de67bc6e56c407602784917025907cc2b58fb64734e3fb0a2f54b71e6e6867a8d030f81"}, 0x46, 0x0) (async, rerun: 32) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8) (async, rerun: 32) getgroups(0x6, &(0x7f0000000280)=[0xee00, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xee01]) chown(&(0x7f0000000100)='./file0\x00', r0, r4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0xe) syz_open_dev$sndmidi(&(0x7f0000000300), 0x9, 0x24000) (async) setgroups(0x5, &(0x7f0000000340)=[r1, r4, r2, r3, r3]) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000bfd000/0x400000)=nil) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r6, 0x4068aea3, &(0x7f0000000380)={0x9f, 0x0, 0x1}) (async, rerun: 32) r7 = accept4(0xffffffffffffffff, &(0x7f0000000400)=@ieee802154={0x24, @long}, &(0x7f0000000480)=0x80, 0x0) (rerun: 32) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) symlinkat(&(0x7f0000000540)='./file0\x00', r5, &(0x7f0000000580)='./file0\x00') (async, rerun: 64) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000005c0), 0x44280, 0x0) (rerun: 64) fallocate(r8, 0x28, 0x7, 0x2) (async, rerun: 64) getresgid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) (async, rerun: 64) accept$unix(r8, &(0x7f00000006c0), &(0x7f0000000740)=0x6e) (async, rerun: 64) ioctl$VHOST_VDPA_GET_VRING_NUM(r8, 0x8002af76, &(0x7f0000000780)) (rerun: 64) mbind(&(0x7f0000f3f000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000007c0)=0x3, 0x8, 0x5) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000800)={0x6, 0x50000, 0x8, r8}) chown(&(0x7f0000000840)='./file0\x00', r0, r4) close(r7) (async, rerun: 32) getxattr(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)=@random={'osx.', '\x00'}, &(0x7f0000000900)=""/79, 0x4f) (async, rerun: 32) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000980)=@sg0, r0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000b40)={0x14, &(0x7f00000009c0)={0x40, 0xa, 0x94, {0x94, 0xa, "a5864bc311d9054066eeda140d8330dd5bd88eab1e5636da94d63144ec9bf6a0f54db17e49a655484967398f5ffd246d3988c7845a5387d47749b09bf833144c9263cbac33ffc788cf19dbca11b5630a806f9e806905a50db7216288a21f86db1b889a842f17c15b3fd55050516b20fa5cd456024b830b5885d745e38deca1d3570c9db258a1a9e12ba0e5507f7922a89d79"}}, &(0x7f0000000a80)={0x0, 0x3, 0xb5, @string={0xb5, 0x3, "a98a7ee6a8b2e53e3f635e97bf00673164cfa24b4c72fad9885132af8c3098fad802cf92796bcc3bf4d865ddfaeedddecd1e1d1ce5edfa72327059ea69137a51ca5e02fee62ae6fde7b27d82531ce4304c2832db71dbb874f9108a9870762a4760eee3c364cd16ccdddcb774f41ffd6ad2b2192df4873947f3b574e68e604298ef91e3cc54c382f9fd6e6dda914513b81ab26893303730b69899a0492c4b45dcad6f5d603a7ca750dcd12623d54f8e7b488ef6"}}}, &(0x7f0000000dc0)={0x34, &(0x7f0000000b80)={0x20, 0x15, 0xf4, "0323a46b837b341b0a6c3280d3936566fdf1e388b4c8b62e58c6b465006475e8df7dccdc46a8924cac5d6de06bd87d0509973ae9f27d4c7cf51c21ecccf546c0e43625256dd10fb822b7e0119c87312a4f5c4fe1e1804d70c98856ea5226f584e7a05bb622143cd5d324c5118e3623cf42a73e4563bccd96a54245ade28b778dacc810b2e4f61f53f203e87cada7fbf7967b1b9f5a63ee06aa22810de0bef0a524f90889cc03e4b62b0c4fac0e4867d3d66669eb745a4617636048605ce066b64509fb83b3cf88887609225ace48bb39864ee9547b51d1929a28a58f8eabc645fcd37d035d6471ca04be782b9b1a15885577402a"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000d00)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000d40)={0x40, 0xa0, 0x4, 0x6}, &(0x7f0000000d80)={0xc0, 0xa2, 0x2f, "35a0e9f1feb97806ac1276e2fadd9f2ac93ffad423287550bf5724a57732aea6babe3147b65b3c44ccff853524f13b"}}) (async) connect$vsock_stream(r8, &(0x7f0000000e00)={0x28, 0x0, 0x0, @hyper}, 0x10) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000e40), 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000ec0)='net/psched\x00') 6m44.589681488s ago: executing program 6 (id=3718): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(r3, &(0x7f0000000140)='.\x00', r2, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x220) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000700)='mountinfo\x00') (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) (async) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) move_mount(r3, &(0x7f0000000140)='.\x00', r2, &(0x7f0000000300)='./file0\x00', 0x41) (async) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x220) (async) 6m44.408450575s ago: executing program 6 (id=3719): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'syztnl0\x00', 0x0}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x0, 0x55, 0x80, 0x0, 0xb49, 0x200000000002, 0x7, 0x1a, 0xfffffffa}, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d10300000c000440000000002df31ab30c000080080003400000000204000080140000001100010000000000000000000700000ac26ace305335312242b352734fc29a515106d04cea0e2579babea46c30300a9c28052b22f74c984fda6390fdb731ccf9ceeaf391abd9b62dca52cbfbea0df85d7497f055480fa7658a59097a3d31f094fd4df74970002699ef37044e80b892f9b7df"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet_sctp(0x2, 0x5, 0x84) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) io_setup(0x61, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x40, r6, 0x0, 0x0, 0x36, 0x0, 0x2}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) 6m43.875407129s ago: executing program 6 (id=3722): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x2) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r3, 0x4) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) connect$inet6(r1, 0x0, 0x0) close(r0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000140), 0x400000000000287, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r10 = fanotify_init(0x202, 0x400) fanotify_mark(r10, 0x21, 0x2, r9, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) close(r6) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x38, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_addr={0x44, 0x4, 0x2a, 0x1, 0xd}]}}, {{0x11, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x5, 0x1, 0x3, 0xfffffff3, 0x4}]}}}}}}}, 0x0) 6m42.918010516s ago: executing program 35 (id=3722): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x2) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r3, 0x4) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) connect$inet6(r1, 0x0, 0x0) close(r0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000140), 0x400000000000287, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r10 = fanotify_init(0x202, 0x400) fanotify_mark(r10, 0x21, 0x2, r9, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) close(r6) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x38, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_addr={0x44, 0x4, 0x2a, 0x1, 0xd}]}}, {{0x11, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x5, 0x1, 0x3, 0xfffffff3, 0x4}]}}}}}}}, 0x0) 5m15.752804345s ago: executing program 8 (id=3977): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) syz_emit_ethernet(0xc3, &(0x7f00000006c0)={@local, @empty, @val={@void, {0x8100, 0x5, 0x1, 0x1}}, {@mpls_uc={0x8847, {[{0xa9e60}, {0x4, 0x0, 0x1}, {0xc20}, {0xffffa, 0x0, 0x1}, {0x7}, {}, {0x9}, {0xffff, 0x0, 0x1}], @llc={@llc={0xf6, 0xaa, "8df5", "b23ec7e031c5b784bc1a6a85849a89f65a135c51d076170eed8fd9aacbc3ce754064da7307cef188125611f60d497413d67e67c86e30a74888f4ec676706b947b4a41a15b4db9a1ef3aaf416948a71932bc6a1892312b138dd6324d0d04bf2d74c0c46db1d962b8248548e32c0b836562851746bda7aa8e72e4721dcd086ec69939e9b6c15e7451e42506605c4"}}}}}}, &(0x7f00000007c0)={0x1, 0x1, [0xf7f, 0x1c, 0x15f, 0x8aa]}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r0, 0x21) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) syz_io_uring_setup(0x4000000b, &(0x7f00000002c0)={0x0, 0x4200002b, 0x800, 0x1, 0x100020b}, &(0x7f0000000200), &(0x7f00000000c0), &(0x7f0000000000)) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f00000005c0)='blacklist\x00', &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, r3) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '\xa9\x06\x00\x00\x00\x00\x00\x00'}, 0x20, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r4 = socket$netlink(0x10, 0x3, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c00028008000500010000001400070000"], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80"], 0x38}}, 0x0) sendmsg$SOCK_DESTROY(r4, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x4000081}, 0x4004880) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m15.116914147s ago: executing program 8 (id=3981): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85220000c}], 0x1) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) syz_fuse_handle_req(r3, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000041c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bind$can_raw(r4, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc1105511, 0x0) sendmsg$can_raw(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40810}, 0x20000000) read(r4, &(0x7f0000002340)=""/232, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000) 5m14.054645301s ago: executing program 8 (id=3985): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r3 = timerfd_create(0x6, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000080)) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) ioctl$BLKFINISHZONE(r5, 0x40101288, &(0x7f0000000140)={0xc0f, 0x11ab76a6}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000180)={0x9, 0x6, 0xe2, 0xffffffff, 0x7ff}) r7 = signalfd4(r6, &(0x7f00000001c0)={[0x61ee]}, 0x8, 0x80000) ioctl$XFS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000200)) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) unshare(0x100) close_range(r5, r7, 0x2) tee(r6, 0xffffffffffffffff, 0x7f, 0x0) setsockopt$packet_int(r5, 0x107, 0x12, &(0x7f0000000240)=0x6, 0x4) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000280)=0x1) ioctl$F2FS_IOC_FLUSH_DEVICE(r8, 0x4008f50a, &(0x7f00000002c0)={0x6, 0x6}) r9 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000000340)={0xa, @sliced={0x4, [0x2, 0x7, 0x9, 0x7, 0x7, 0x1, 0xfff, 0x401, 0x3, 0x5, 0x6, 0x9, 0x80, 0x0, 0x3, 0xffff, 0x2, 0x0, 0x8001, 0x4, 0x6, 0x4, 0x8000, 0x3674, 0x4, 0x80, 0x3, 0x9, 0xb86, 0x223e, 0x2, 0x2, 0x3, 0x7fff, 0xb, 0x7, 0xb, 0x1, 0x6, 0x400, 0x6, 0x13a0, 0x3, 0x8001, 0xd, 0x4, 0x81, 0x8001], 0x80000000}}) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/8, 0x8, 0x1, &(0x7f0000000480)=""/15, 0xf}, &(0x7f0000000500)=0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000540)={{0x2, 0x0, 0x39a0, 0xa6684fa9694d265f}}) connect$unix(r5, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0xf, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c846}, 0x4000) mmap$usbmon(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x9, 0x4010, r1, 0xb6fa) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000700), &(0x7f0000000740)={0x0, 0xfb, 0xa4, 0x4, 0x6, "169a92cf91ed3cee93799677d4c22ca3", "45ba485f64c7b5791f7aa46838975e9114218376194353f703446c996b2db29a1a5e36b35cc1b80b39cb09bffd0cafce1b014b756bff1f64d1e824b89671d4cf2f320e837b3d579166d544e491f47a690d7d7f2b885b34cb0cb52ffde0d7841711080a02d9a1b297640c76c690183a803b403b11d11a41b2f5de2d282893ae91d65f5ea57b98994acb6c2cf2cddd42"}, 0xa4, 0x1) sync_file_range(r0, 0x80, 0xfffffffffffffff9, 0x5) 5m13.718449731s ago: executing program 8 (id=3988): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000007c0)=[{r1, 0x4100}], 0x1, 0x0, 0x0, 0x0) close(r0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x7, 0x8, 0xc}, 0x50) syz_open_dev$vim2m(&(0x7f0000000180), 0x5bc, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x4e45732a10f03f0a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) accept4$alg(r6, 0x0, 0x0, 0x80800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r7], 0xc4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c0099000b0000001f0000000800a00002000000000000000500006a000000f2123dce23"], 0x40}}, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r2, 0x4068aea3, &(0x7f0000000040)={0xce, 0x0, r3}) 5m13.339042s ago: executing program 8 (id=3990): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000008bd2805090000000000010902240001000080000904f301010300020009211508fe0122070009058103"], 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mountinfo\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1]) move_mount(r5, &(0x7f0000000140)='.\x00', r4, &(0x7f0000000300)='./file0\x00', 0x41) socket(0x10, 0x3, 0x0) epoll_create1(0x0) epoll_create1(0x0) 5m10.521470024s ago: executing program 8 (id=3998): ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000000)) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1477, 0x1024, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x60, 0x40, 0x7f, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x3, 0x8, {0x9, 0x21, 0x1f, 0x3, 0x1, {0x22, 0x9c9}}, {{{0x9, 0x5, 0x81, 0x3, 0x30, 0x4, 0x6, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xf8, 0xa, 0x4}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x3, 0xf, 0x8, 0x8, 0x9}, 0x3a, &(0x7f00000000c0)={0x5, 0xf, 0x3a, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0xd, 0x2, 0x86}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x0, 0x3, 0x9, 0x26}, @ssp_cap={0x18, 0x10, 0xa, 0x78, 0x3, 0xd, 0xf00, 0xfffc, [0xff3f, 0xffc0c0, 0xffff00]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x90, 0x57, 0xff, 0xe}]}, 0x3, [{0x3f, &(0x7f0000000100)=@string={0x3f, 0x3, "f0753c718686e31dbff05a6771839508c261a123ad191c7c380fc577a0adfba128e8de81cce6fb4dbf4fb37669f61f0f14af0f74474037b94570d13b6b"}}, {0x20, &(0x7f0000000140)=@string={0x20, 0x3, "35527cd55ff179e36514e5efc42622d8195b52758318265b8af606d75bce"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3c0a}}]}) (async) io_destroy(0x0) r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x6cb, 0x81a7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x100, 0x1, "", [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x8, 0x40, 0x1, {0x22, 0x753}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x10, 0x5e, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xa8, 0x3, 0x53}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x4, 0x1f, 0x81, 0xff, 0x4}, 0x45, &(0x7f0000000280)={0x5, 0xf, 0x45, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0xbf, 0xa, 0x3, 0x2}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "b727ff1bb79318ac5dc71ea100c3a859"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "c8b8830801735dafecb3fc469c949589"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1, 0x9}]}, 0x9, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3801}}, {0x88, &(0x7f0000000480)=@string={0x88, 0x3, "ca8c5571ffd6cd566725ff0aacaa5daad7c71fddda091900c4ca7831502f1ef61ed8fc5ba8890c847517cebb4933fb813e3eb9722c5eb06f4dc8c9264d37a741f38a41bd70e6104c918f048c5064e3d7a70ecacdc6e513035bab0c8a8ee90f46a5755ac7eed681c272930fa99eb800047f33fc6041df1dbf114157be87a3223fac2e04f27491"}}, {0x5d, &(0x7f0000000540)=@string={0x5d, 0x3, "d9613989db835082cf74239e7f57430eafd32fc3fd000c9d4471b6409e76a46cf6b63cf77a8c3f3eec6e5c1b309161566574b44313d7fb525f355799caca0429098fe4911d9f461b6dca319c58ebcb88d81f17a79d445d2ca9e294"}}, {0x58, &(0x7f00000005c0)=@string={0x58, 0x3, "de81cdc17344755e0825db2732c26a64cbf2ce57bb576db05e6c8c65575204d8d01e85161491c267df72443626f9a570c277758dc5d1b934cdcdf638a925311d309c7a07acdd86adce2751a20cfc9c56fb579097e77a"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000900)={0x24, &(0x7f0000000700)={0x0, 0x23, 0x99, {0x99, 0xd, "ee0c50c547cdc95d01590d3a237631813947cbd8a6780041478cf7df6534e7751fea1bbea9f9b4ebe6d53b031222428783ae12b330a01804e70e3f1aaee1b7681273501d74d9352961be1ce8ed0ed80c9d23932536b2ea7bcdb138559a0aca1b9bd3b96464fd62575bfd4f94229145f27bad763cd08c17170171e668eea0348eecc0c22d3966dd2f3049fcb94bc1f952b9e1c558cd154c"}}, &(0x7f00000007c0)={0x0, 0x3, 0x7c, @string={0x7c, 0x3, "c1cffcac4fee99640806bf75e855478aee2b6c7579bfb8f3d48f898806cbb677b0242cfb1c392067ba1f0b87e1d291e3c50045bfae7b06dabf505ed076bea2dac25d86c269665104a80382e704f6c2ff2e576f4193d64aff5d615347e41a58a294c69de5e6562b6f58ac3d40dee12444b3e612d4955f0c26929e"}}, &(0x7f0000000880)={0x0, 0x22, 0x1b, {[@global=@item_4={0x3, 0x1, 0x7, "cab978dd"}, @global=@item_012={0x1, 0x1, 0x2, "ca"}, @local=@item_4={0x3, 0x2, 0x2, "608141f5"}, @local=@item_4={0x3, 0x2, 0x9, "d542a9cf"}, @local=@item_012={0x1, 0x2, 0x9, "81"}, @main=@item_012={0x2, 0x0, 0xc, "3a0e"}, @global=@item_4={0x3, 0x1, 0x9, "7562c290"}]}}, &(0x7f00000008c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x81, 0x9, 0x1, {0x22, 0xe4e}}}}, &(0x7f0000000b40)={0x2c, &(0x7f0000000940)={0x40, 0xc, 0xa4, "34536e65fb230992838695cf117b222d0464d824595a4bc6bd3127c1dc9af1c1a4d9037eaa2c6b9f923f057b6aaa62e81cd42465f0dfed7a80fa8a881f7e5b5191b9328423349171b722016447602d79aca332aa1ce7a896d54a7807bbb36b4bfb773a013c6169d1b83643a4b678666efe7cc1c7c51e39b37213fa0277fb5273bb82c25c840d5e63f739d6764ef147d9953220370ff767d199cb8952021bc6974fcbfa23"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000a80)={0x20, 0x1, 0x76, "a067846a224b3805e8e2bf3114d2cfe33102cd19e3fae240be0a2fc34ffa942b04f71e6c1e3a2832f7fd46ee2ea24490f0397b55227f38a5564d57cf2b90216b899a1255cba109ae2ad7ae9426018e1ff773938567aedba66c41965fd5e3fca92da38e5de2257a70946ddcaf9fb5523b16c39f270c83"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0xd3}}) (async) r1 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$ARCH_GET_CPUID(0x1e, r1, 0x0, 0x1011) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff}) (async, rerun: 32) r3 = syz_usb_connect$midi(0x2, 0xcc, &(0x7f0000000bc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x1, 0x1, 0xb, 0x40, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x20, 0x5, [@midi_out_jack={0x9, 0x24, 0x3, 0x1, 0xfc, 0x1, [{0xfe, 0x31}], 0x8}, @midi_out_jack={0x19, 0x24, 0x3, 0x0, 0xcd, 0x9, [{0x7, 0x4}, {0xcc, 0x8}, {0x8, 0x80}, {0x17, 0x8}, {0xa, 0x7}, {0x8, 0xb9}, {0xe, 0x1}, {0x8, 0x4}, {0x40, 0x9}], 0x3}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xa, 0x25}, @midi_out_jack={0x13, 0x24, 0x3, 0x3, 0xc6, 0x6, [{0x41, 0x7f}, {0x80, 0x6}, {0x7, 0x4}, {0xbf, 0x4}, {0xc, 0x5}, {0xbb, 0x9}], 0x24}, @ms_header={0x7, 0x24, 0x1, 0x7, 0x7}], [{{0x9, 0x5, 0x80, 0xc, 0x10, 0x0, 0xf, 0x5f, {0x4}}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x6, 0x3, 0x3, {0x8, 0x25, 0x1, 0x4, "12e81cf8"}}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x6, 0xff, 0xf, {0xa, 0x25, 0x1, 0x6, "4e4c11f17c13"}}}, {{0x9, 0x5, 0xe, 0x10, 0x410, 0x6, 0x8, 0x7, {0x7, 0x25, 0x1, 0x3, "f58cff"}}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x5, 0x0, 0x10, {0xf, 0x25, 0x1, 0xb, "c4f17b7ba7b7f2fbcf90bb"}}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x0, 0x4, 0x4, {0x4}}}]}}}}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x200, 0x9, 0x4, 0x3, 0x8, 0xd}, 0x4e, &(0x7f0000000d00)={0x5, 0xf, 0x4e, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x3, 0xf00, 0x3, [0xf]}, @ss_container_id={0x14, 0x10, 0x4, 0x28, "46aedac7dc236f9918ee658567810dd0"}, @ssp_cap={0x10, 0x10, 0xa, 0x6f, 0x1, 0x9, 0x0, 0x3, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xb6, 0x80, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0xfb, 0x3, 0x0, 0xe}]}, 0x5, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x44c}}, {0x51, &(0x7f0000000dc0)=@string={0x51, 0x3, "409b0e2bb4888a282f5aebb05708027dace93425e239643ed3cd945149c827497b4eeef4a5dc5a061c17e835bd0e109312ed1db776f97bfeebd242260b487118c0bf2b860c337276b0a6148637f97b"}}, {0x5d, &(0x7f0000000e40)=@string={0x5d, 0x3, "a7f38262c09ebb0af992c665b932ba74c46f0b874aad8aff7ffc76933c145dc0dba070ec74fb82bdbd5256a2a2c66f95766d966b5158e750c1674f6c01801ac26deeb9b2af06acf230bd3ed8850d0fc37b66a8bdbaac641b0336f5"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x440a}}]}) syz_usb_control_io$lan78xx(r3, &(0x7f0000001040)={0x14, &(0x7f0000000fc0)={0x0, 0x0, 0x8, {0x8, 0x11, "7db701b329d2"}}, &(0x7f0000001000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}}, &(0x7f0000001280)={0x34, &(0x7f0000001080)={0x40, 0x2e, 0x97, "6063f145f5cfda5e17f5144f040fafb2bcd4d72527dbeaa4e193efce0001ccc2876f09048a90d948ed81b21ba177af29e1bd9b4a8a88564e8f9d66472843f4e493ef3fef4de233919705fba9ff71d0e76e7ced3b53219728c402e507b933663e57d07637b30a80cd8fc4a3d44c1107ac3a95c3350e3c8072362b28ec232c05b81fb7d8cfeb0e410c7124b544552a696a46484ea6c2999e"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001180)={0x0, 0x8, 0x1}, &(0x7f00000011c0)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000001200)={0x40, 0xa0, 0x4, 0x6}, &(0x7f0000001240)={0xc0, 0xa2, 0x2f, "7486e181e0644f62f1c3f01c93ce402e89195f6ef723ed7799939db1d5250dacfb1a355b6645ecece0d6057342363c"}}) (async) recvmsg(r2, &(0x7f0000001880)={&(0x7f00000012c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001340)=""/3, 0x3}, {&(0x7f0000001380)=""/67, 0x43}, {&(0x7f0000001400)=""/84, 0x54}, {&(0x7f0000001480)=""/227, 0xe3}, {&(0x7f0000001580)=""/109, 0x6d}, {&(0x7f0000001600)=""/218, 0xda}, {&(0x7f0000001700)=""/84, 0x54}], 0x7, &(0x7f0000001800)=""/89, 0x59}, 0x121) (async, rerun: 64) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000019c0)={0x14, &(0x7f00000018c0)={0x40, 0x21, 0x82, {0x82, 0x23, "b740d3da6c06ed6b9f9dfde45e14a6247ceece5bb1ea70af47feb8f36f9825c8ffdfda2f5411dec72e93711d2ba735f73952dcb63dda0a9b2fc2bf64ba62771444d846896feb05c0699def575cd63a370726461b3e11ba2d5c6a510b25886bd885b40922971257bd5b5f185b20af3086822e7d0cb4d22cb15d6e3fc05ae21446"}}, &(0x7f0000001980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x813}}}, &(0x7f0000001c00)={0x44, &(0x7f0000001a00)={0x0, 0x6, 0x4, "bedbfca3"}, &(0x7f0000001a40)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001a80)={0x0, 0x8, 0x1, 0xc5}, &(0x7f0000001ac0)={0x20, 0x81, 0x3, "a7ec5e"}, &(0x7f0000001b00)={0x20, 0x82, 0x3, "d298ab"}, &(0x7f0000001b40)={0x20, 0x83, 0x2, "a259"}, &(0x7f0000001b80)={0x20, 0x84, 0x4, "7660b631"}, &(0x7f0000001bc0)={0x20, 0x85, 0x3, '\f[J'}}) (rerun: 64) r4 = syz_usb_connect$uac2(0x4, 0xc2, &(0x7f0000001c80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x582, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb0, 0x3, 0x1, 0x4, 0x30, 0x1, {0x8, 0xb, 0x0, 0x0, 0x1, 0x2, 0x20, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xf801, 0x9, 0x19, 0x4}, [@input_terminal={0x10, 0x24, 0x2, 0x3, 0x405, 0x2, 0x0, 0x7, 0x59, 0x7, 0x4, 0xa6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x0, 0x4, "a270"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x2}, @as_header={0x10, 0x24, 0x1, 0xd4, 0x6, 0x0, 0x2, 0xad, 0xe6180000, 0x3}, @as_header={0x10, 0x24, 0x1, 0x3, 0x81, 0x3, 0x1002, 0xe0, 0x8, 0xde}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x7, 0x8d, 0x80, {0x8, 0x25, 0x1, 0x85, 0x3f, 0x81, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0xff}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0x1, 0x78, {0x8, 0x25, 0x1, 0x0, 0x30, 0xd2, 0x7}}}}}}}}]}}, &(0x7f0000002040)={0xa, &(0x7f0000001d80)={0xa, 0x6, 0x110, 0x8, 0x0, 0x2f, 0x40, 0x7}, 0x44, &(0x7f0000001dc0)={0x5, 0xf, 0x44, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x1, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x5, 0x5, 0xd13}, @ext_cap={0x7, 0x10, 0x2, 0xf4f6bee7ba464b5a, 0x4, 0x0, 0x8000}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x1, 0x0, 0x5, [0xc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "b850635e99269599f2070fddfcbd6221"}]}, 0x5, [{0x4, &(0x7f0000001e40)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000001e80)=@lang_id={0x4, 0x3, 0xc0f}}, {0x4, &(0x7f0000001ec0)=@lang_id={0x4, 0x3, 0x44f}}, {0xca, &(0x7f0000001f00)=@string={0xca, 0x3, "4eef3ef6b25d79799773d79a96806ea84d7656c148058663fb7a574e00d8c38c2fb0563db2e2652a913f279fa4e4b8d5a0385cb72d3e876344d73ee521147d452585d12dc36c3abf7aa574a953d568307ec18e97dd8bff78624c5bd4f84e436adf0fab46728dbc3f43ed13128e04a25fb454ab7253ae05d2ef2953ed953454d59330e9c6120139931ca264ba3107417eeb21f7a10b183afa38d2fa0f5d0473f426d7da501765aaa10e19f4b4e268e4b7cf2a24164a45330eb7816959b3202f37f75bb57b90d557c5"}}, {0x4, &(0x7f0000002000)=@lang_id={0x4, 0x3, 0x448}}]}) syz_usb_control_io(r4, &(0x7f00000023c0)={0x2c, &(0x7f00000020c0)={0x20, 0x11, 0xca, {0xca, 0x30, "fd6b2500e6928aab8542fbfd9c96ff6a20530bcfaf01d91a482a250d305cbf5ad7fd8f2a4a3609bc2ad04601a8efe76cc589bec9d6f8aa1a5ef0cee7fc6f9fee290f2d98d01f79b9b3769fe17334531673d78ea438d1c004f2fc3db9bc053029753539b3524208a1f4f932e9a4f17265c818422d95efca85592a1902726bd64f2e30981e351a974e5afd18a1b980d88f5167d114d23326bf453524b77ee35748917c1bea3043aefc061f4fdb98006c8b95d4c2dd5974351db1931dd12e5585581ffe93e1701c25d2"}}, &(0x7f00000021c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x421}}, &(0x7f0000002200)={0x0, 0xf, 0x12d, {0x5, 0xf, 0x12d, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x5, 0xf, 0x7fff, 0x1}, @generic={0xd4, 0x10, 0x3, "6c6f21a5359c2248d8461876ce1a1d2ebb76c2ebe1fef8831b06be6a872accee7bbca616583b368323aa0a76b3008a518f796d829a360446112d971cbd85148fc26daa877a128a0dc004c75fae408a0e2a67406e3b33691a63d7ca1c1110c6760c275b2651d34c075a2629089315053ada1fb4ad21a8cf8b85135b208dcdbe4b06bc9fb3b75739dff269431dcd02b498f2da7e9ca4865a673aa0fa4ad55467a2924364be02be0fc6b4985051855dc35c629c2de9c9d9d2186eca1240dd5d35fcac7eb2b01aa6f0a1c6aff5985708c62503"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x51, 0x3, 0x2}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x40, 0xf0f, 0x78a6, [0xff0000, 0x0, 0xffc000, 0xf, 0xff3ff0]}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x9, 0xf, 0x2, [0x188, 0x3f00, 0x3fc0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8}]}}, &(0x7f0000002340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x3, 0x3, 0x57, "3c4da7f6", "8b4d8e3e"}}, &(0x7f0000002380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf1, 0x4, 0x2, 0xd, 0x2, 0x8}}}, &(0x7f00000028c0)={0x84, &(0x7f0000002400)={0x20, 0x9, 0xf3, "cc0ad1f14041e38f8dd7cf34f7c80d6d9196db79bb447867e3fe7098b9ad59b1cf198360699a85bf1581e67764a6b82770cddb9218cdeda0a89d595333f036cd682cd58a1199c43f5e6715a7eeb2acb217e9ef4bef039630d78bf3e83a21e55655c70a19dbc6f0110d976e2608642efc58239cf5af52c49f26c33f611d9a2e1a2d2c15839c9a46ab8dbf35016379e437e4fe27191d8ea0ea67a3a6f7ebeb2254b8f2d5db67b692e8419204332c5efbb17b1d381bddfafd3bfc8eee35526b767576c3298b784f3fc23357bb51ab106681b02dd4c351ce080f99af5107b0c21e629478f4e94139330cf309b1297c304cd9311209"}, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000002540)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000002580)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000025c0)={0x20, 0x0, 0x4, {0x140, 0x40}}, &(0x7f0000002600)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000002640)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000002680)={0x40, 0xb, 0x2, "0112"}, &(0x7f00000026c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000002700)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000002740)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000002780)={0x40, 0x19, 0x2, "79cc"}, &(0x7f00000027c0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000002800)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000002840)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000002880)={0x40, 0x21, 0x1, 0x7f}}) (async) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000002980)) syz_usb_control_io$hid(r0, &(0x7f0000002bc0)={0x24, &(0x7f0000002a00)={0x20, 0x1, 0xc3, {0xc3, 0xc, "a26ee2f744a85f45ee865d03fa9ca8fca930fd60169356878d93d01d3ce76cfdb0ade33fadf665948dcc94e29ad7ad6d275ddb66e101ace5aae0fe77a216931294527c75ce829dd8f024e37bdc2ffccaaeb828752e0da34c0bff002892e790c67604f0bfa8f67228e0f2767ffff99ef367a897da4fe0457b6538377f4f5eb23a0fe4548b2289294d1008b9cec44246f03bc28101b8516545cc924ceb987fdb45f3d2d78b85fb7b85890ac78c7d4f1d7df9b66c51b90d3cd748dc0dfd678e23959f"}}, &(0x7f0000002b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}, &(0x7f0000002b40)={0x0, 0x22, 0x8, {[@main=@item_012={0x0, 0x0, 0x9}, @global=@item_012={0x0, 0x1, 0xa}, @local=@item_012={0x0, 0x2, 0x1}, @local=@item_012={0x2, 0x2, 0x3, "cf58"}, @global=@item_012={0x1, 0x1, 0x8, "aa"}]}}, &(0x7f0000002b80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0xc08}}}}, &(0x7f0000002ec0)={0x2c, &(0x7f0000002c00)={0x40, 0x1, 0xed, "bb6b0f4397ae56e3144906de458a23c4a7a830cfa61e96043907b80f405a7ddea17908fdb6d15659338a7ef75b376f7f243ae278b0adc36ca9a1e4053a7237cf703b12315f4493ef0c745627c0dbabe968cc39de7cb29858a9b27ed1dade72dbb811042dca52625912f887fc22766274330e3e9304a58659cb4e4c15a19c4fcaed258094f200a244322e8d14b614d5a1e69ae9868b0812356b0479e4bcbfbc16bb952e799aae46909e64c2f14b9c47fe392494d7d2fe76b1144aa92c0b12179b271338fa0f7c367d6b572d04c81d4a8afdf52d1427e1acf6d70d54fc59bbf510dedacf0a03fad23333b1455eba"}, &(0x7f0000002d00)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000002d40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000002d80)={0x20, 0x1, 0xfa, "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"}, &(0x7f0000002e80)={0x20, 0x3, 0x1}}) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000003000)={r2, &(0x7f0000002f00)='\xbb\xbb\xbb\xbb\xbb\xbb', 0x80, &(0x7f0000002f40)={@align=0x359e, {0x7, 0x2, 0x7, 0x3}}, 0x1, &(0x7f0000002f80), &(0x7f0000002fc0)=0xffe00000}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r5, 0x4018aee3, &(0x7f0000003040)=@attr_pmu_init) tkill(r1, 0x6) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f0000003080)={0xd, 0x0, 0x1, {0xffff, 0x7ff, 0x1, 0x1}}) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000031c0)={0x14, &(0x7f00000030c0)={0x0, 0x21, 0x86, {0x86, 0x21, "b5cca07cc96eaca86195e8a3845c335180378aee4d1ae1ff74429b5819677accb4baf807d68c2cdc746d101e4f21b215938cdeb90be0fe4c28d8162f67c3d17387a6fb50d00c035b7b1a2f233cf5b7459941793e17bda791fc4a490589af3239b9ee96708178acc076167403aaa975a4a293097087bf36f78acfa4e19d1f4d073e2fad9b"}}, &(0x7f0000003180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000032c0)={0x1c, &(0x7f0000003200)={0x20, 0xb, 0x35, "f5033fbafcc3eae5a1c3ccc299e5e5d1a7f53812ccecdc7e0f2c4f2a2dd253a8f79e3d1640bb75d353b3a8e1a9bdb2fa2128b4b281"}, &(0x7f0000003240)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000003280)={0x0, 0x8, 0x1, 0xa3}}) (async) syz_usb_control_io$uac3(r3, &(0x7f0000003480)={0x14, &(0x7f0000003300)={0x0, 0x11, 0xcf, {0xcf, 0x3, "18f476e013742ddd728ea6741d9f3547e7667760feeac72811d0c89fd556a61be76195c6cc02a53bd2f76dee439c6f92f9f38c007e0d8c3627a10bd66cbed322cf29950f5278de54339669386c3b45b8dc145786d52d2b41f651f0896f399df1299ca3301dfbbb00eb75ec0d85b4977bf4d07e8ff24bdf87d3426b298332ed89be8db6e50858479478c91749a01ea0b2b86e7969dbe1e76cc88807da9e5a921e61a864d01758bc69eb3debbf20f0a493bcf90784313707007d510a8e04badf407d1b2e8acb26896cafcbde0f76"}}, &(0x7f0000003400)={0x0, 0x3, 0x47, @string={0x47, 0x3, "1c7edb2525d9e2eb1a44fce7028ee0508e3e757e558761c052c112a29c4488b5544a2d7b513480b2a59f467a48f8b51e34a1b2bdc26021445f8d938b2963938d076574342a"}}}, &(0x7f0000003740)={0x44, &(0x7f00000034c0)={0x40, 0x18, 0x94, "8459842505aa54650ff300b4071dece1fb6000c64dacf3f4dd6e7e075a7f0b84cfe1a8025e8f77be773852c2aa0915ccdc40f6620645bf61ddf572055e3f23aeba178f877c52d6cc52bdc9196d9ecaa31d95d418716ab80617b37fbfcca9d44b54ca6f9a8490feffa244b6958c723434bc0288e8666a5334343f97288449da2d1044dfb86e9d70cd1ac45df834dc1bb438831a61"}, &(0x7f0000003580)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000035c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000003600)={0x20, 0x81, 0x1, "c7"}, &(0x7f0000003640)={0x20, 0x82, 0x3, "f4992f"}, &(0x7f0000003680)={0x20, 0x83, 0x3, "78e700"}, &(0x7f00000036c0)={0x20, 0x84, 0x2, "b8eb"}, &(0x7f0000003700)={0x20, 0x85, 0x3, "0ca33d"}}) (async) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000037c0)) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000003800)={0x1ff, 0x0, 0xfec00000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) (rerun: 32) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000003840)) (async) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000003900)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000003940)={0x48, 0x5, r6}) (async) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000003b00)={0x14, &(0x7f00000039c0)={0x20, 0x10, 0xdc, {0xdc, 0x6, "6caf32d51f36f23e6ae76b80a67b0649436dd30449074bc08bdf2e5dd3f9f1b4b35390e56f4305751502c25b0eda4aff0b3f803dd9350a72f6d54606426420cfcbd9c6e705508967536bc154a2b00c1048971dfdb2751b2362356927a73b61f7b6688d1630981ba0ad7028e7dc4b53290e53c5296a21609c45b5f0d9c62bc1b226e6f995084b0c5fc9996e6fa7589e44cbb5b3e785257de538af616c12f6684fe8225d036e44405a1925632eaa30b3b80cd102e9ca0c29bc8d24b07a2b4220dd49f8e7df923dea596abd3fe796716a9e1828090769a18dd38b90"}}, &(0x7f0000003ac0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003dc0)={0x44, &(0x7f0000003b40)={0x60, 0x15, 0x82, "68eaba737fb52b225292212a3482d88117ca44cb0208463e99884875f1647414a60a49d9c30bd56daa22b8b9f4b6358b0e54ae8ca545b0e5d9b13908e5b4675aadd2513f6576dc506e4f02b7b97e139a00495d05ec1bf934d67e01db59218d84cffcd12cca5eb5720614048d01824ef55d21612f32b3eab1bbfd748d1fc0cfd62be0"}, &(0x7f0000003c00)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000003c40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000003c80)={0x20, 0x80, 0x1c, {0x4, 0x8, 0x8, 0x0, 0x2e, 0x3496, 0x401, 0xb593, 0x2, 0x4, 0x4, 0x9}}, &(0x7f0000003cc0)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000003d00)={0x20, 0x83, 0x2}, &(0x7f0000003d40)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000003d80)={0x20, 0x89, 0x2}}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000003e40), 0x2, 0x0) (async, rerun: 32) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000004900)={0x14, &(0x7f0000004880)={0x0, 0x2, 0x30, {0x30, 0x21, "efd102c3e9f60763c4575ff91b3149e2d11cfd0615361a312ee89f7246106bcc3b91857420ba65dcd32501491f95"}}, &(0x7f00000048c0)={0x0, 0x3, 0xe, @string={0xe, 0x3, "a8f4fb6a99ac5950ed4d71ea"}}}, &(0x7f0000004b80)={0x44, &(0x7f0000004940)={0x20, 0x16, 0x5f, "f1ada1fa0ed2dc61a50ce91462f0c9a70589645c2a42a26b89fd1655c0157af1c2050cb595573c6982291da297d586a5425949cf588629bcf1b8cd7f39cb686a3bfcce05e60594274bed00d9ef06bf404c23bb868ce856d6e9f9ca8943a996"}, &(0x7f00000049c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000004a00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000004a40)={0x20, 0x81, 0x2, "85f9"}, &(0x7f0000004a80)={0x20, 0x82, 0x1, 'L'}, &(0x7f0000004ac0)={0x20, 0x83, 0x1, "ec"}, &(0x7f0000004b00)={0x20, 0x84, 0x2, "881b"}, &(0x7f0000004b40)={0x20, 0x85, 0x3, "19cc11"}}) (rerun: 32) 5m10.393704389s ago: executing program 36 (id=3998): ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000000)) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1477, 0x1024, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x60, 0x40, 0x7f, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x3, 0x8, {0x9, 0x21, 0x1f, 0x3, 0x1, {0x22, 0x9c9}}, {{{0x9, 0x5, 0x81, 0x3, 0x30, 0x4, 0x6, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xf8, 0xa, 0x4}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x3, 0xf, 0x8, 0x8, 0x9}, 0x3a, &(0x7f00000000c0)={0x5, 0xf, 0x3a, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0xd, 0x2, 0x86}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x0, 0x3, 0x9, 0x26}, @ssp_cap={0x18, 0x10, 0xa, 0x78, 0x3, 0xd, 0xf00, 0xfffc, [0xff3f, 0xffc0c0, 0xffff00]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x90, 0x57, 0xff, 0xe}]}, 0x3, [{0x3f, &(0x7f0000000100)=@string={0x3f, 0x3, "f0753c718686e31dbff05a6771839508c261a123ad191c7c380fc577a0adfba128e8de81cce6fb4dbf4fb37669f61f0f14af0f74474037b94570d13b6b"}}, {0x20, &(0x7f0000000140)=@string={0x20, 0x3, "35527cd55ff179e36514e5efc42622d8195b52758318265b8af606d75bce"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3c0a}}]}) (async) io_destroy(0x0) r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x6cb, 0x81a7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x100, 0x1, "", [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x8, 0x40, 0x1, {0x22, 0x753}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x10, 0x5e, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xa8, 0x3, 0x53}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x4, 0x1f, 0x81, 0xff, 0x4}, 0x45, &(0x7f0000000280)={0x5, 0xf, 0x45, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0xbf, 0xa, 0x3, 0x2}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "b727ff1bb79318ac5dc71ea100c3a859"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "c8b8830801735dafecb3fc469c949589"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1, 0x9}]}, 0x9, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3801}}, {0x88, &(0x7f0000000480)=@string={0x88, 0x3, "ca8c5571ffd6cd566725ff0aacaa5daad7c71fddda091900c4ca7831502f1ef61ed8fc5ba8890c847517cebb4933fb813e3eb9722c5eb06f4dc8c9264d37a741f38a41bd70e6104c918f048c5064e3d7a70ecacdc6e513035bab0c8a8ee90f46a5755ac7eed681c272930fa99eb800047f33fc6041df1dbf114157be87a3223fac2e04f27491"}}, {0x5d, &(0x7f0000000540)=@string={0x5d, 0x3, "d9613989db835082cf74239e7f57430eafd32fc3fd000c9d4471b6409e76a46cf6b63cf77a8c3f3eec6e5c1b309161566574b44313d7fb525f355799caca0429098fe4911d9f461b6dca319c58ebcb88d81f17a79d445d2ca9e294"}}, {0x58, &(0x7f00000005c0)=@string={0x58, 0x3, "de81cdc17344755e0825db2732c26a64cbf2ce57bb576db05e6c8c65575204d8d01e85161491c267df72443626f9a570c277758dc5d1b934cdcdf638a925311d309c7a07acdd86adce2751a20cfc9c56fb579097e77a"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000900)={0x24, &(0x7f0000000700)={0x0, 0x23, 0x99, {0x99, 0xd, "ee0c50c547cdc95d01590d3a237631813947cbd8a6780041478cf7df6534e7751fea1bbea9f9b4ebe6d53b031222428783ae12b330a01804e70e3f1aaee1b7681273501d74d9352961be1ce8ed0ed80c9d23932536b2ea7bcdb138559a0aca1b9bd3b96464fd62575bfd4f94229145f27bad763cd08c17170171e668eea0348eecc0c22d3966dd2f3049fcb94bc1f952b9e1c558cd154c"}}, &(0x7f00000007c0)={0x0, 0x3, 0x7c, @string={0x7c, 0x3, "c1cffcac4fee99640806bf75e855478aee2b6c7579bfb8f3d48f898806cbb677b0242cfb1c392067ba1f0b87e1d291e3c50045bfae7b06dabf505ed076bea2dac25d86c269665104a80382e704f6c2ff2e576f4193d64aff5d615347e41a58a294c69de5e6562b6f58ac3d40dee12444b3e612d4955f0c26929e"}}, &(0x7f0000000880)={0x0, 0x22, 0x1b, {[@global=@item_4={0x3, 0x1, 0x7, "cab978dd"}, @global=@item_012={0x1, 0x1, 0x2, "ca"}, @local=@item_4={0x3, 0x2, 0x2, "608141f5"}, @local=@item_4={0x3, 0x2, 0x9, "d542a9cf"}, @local=@item_012={0x1, 0x2, 0x9, "81"}, @main=@item_012={0x2, 0x0, 0xc, "3a0e"}, @global=@item_4={0x3, 0x1, 0x9, "7562c290"}]}}, &(0x7f00000008c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x81, 0x9, 0x1, {0x22, 0xe4e}}}}, &(0x7f0000000b40)={0x2c, &(0x7f0000000940)={0x40, 0xc, 0xa4, "34536e65fb230992838695cf117b222d0464d824595a4bc6bd3127c1dc9af1c1a4d9037eaa2c6b9f923f057b6aaa62e81cd42465f0dfed7a80fa8a881f7e5b5191b9328423349171b722016447602d79aca332aa1ce7a896d54a7807bbb36b4bfb773a013c6169d1b83643a4b678666efe7cc1c7c51e39b37213fa0277fb5273bb82c25c840d5e63f739d6764ef147d9953220370ff767d199cb8952021bc6974fcbfa23"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000a80)={0x20, 0x1, 0x76, "a067846a224b3805e8e2bf3114d2cfe33102cd19e3fae240be0a2fc34ffa942b04f71e6c1e3a2832f7fd46ee2ea24490f0397b55227f38a5564d57cf2b90216b899a1255cba109ae2ad7ae9426018e1ff773938567aedba66c41965fd5e3fca92da38e5de2257a70946ddcaf9fb5523b16c39f270c83"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0xd3}}) (async) r1 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$ARCH_GET_CPUID(0x1e, r1, 0x0, 0x1011) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff}) (async, rerun: 32) r3 = syz_usb_connect$midi(0x2, 0xcc, &(0x7f0000000bc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x1, 0x1, 0xb, 0x40, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x20, 0x5, [@midi_out_jack={0x9, 0x24, 0x3, 0x1, 0xfc, 0x1, [{0xfe, 0x31}], 0x8}, @midi_out_jack={0x19, 0x24, 0x3, 0x0, 0xcd, 0x9, [{0x7, 0x4}, {0xcc, 0x8}, {0x8, 0x80}, {0x17, 0x8}, {0xa, 0x7}, {0x8, 0xb9}, {0xe, 0x1}, {0x8, 0x4}, {0x40, 0x9}], 0x3}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xa, 0x25}, @midi_out_jack={0x13, 0x24, 0x3, 0x3, 0xc6, 0x6, [{0x41, 0x7f}, {0x80, 0x6}, {0x7, 0x4}, {0xbf, 0x4}, {0xc, 0x5}, {0xbb, 0x9}], 0x24}, @ms_header={0x7, 0x24, 0x1, 0x7, 0x7}], [{{0x9, 0x5, 0x80, 0xc, 0x10, 0x0, 0xf, 0x5f, {0x4}}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x6, 0x3, 0x3, {0x8, 0x25, 0x1, 0x4, "12e81cf8"}}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x6, 0xff, 0xf, {0xa, 0x25, 0x1, 0x6, "4e4c11f17c13"}}}, {{0x9, 0x5, 0xe, 0x10, 0x410, 0x6, 0x8, 0x7, {0x7, 0x25, 0x1, 0x3, "f58cff"}}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x5, 0x0, 0x10, {0xf, 0x25, 0x1, 0xb, "c4f17b7ba7b7f2fbcf90bb"}}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x0, 0x4, 0x4, {0x4}}}]}}}}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x200, 0x9, 0x4, 0x3, 0x8, 0xd}, 0x4e, &(0x7f0000000d00)={0x5, 0xf, 0x4e, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x3, 0xf00, 0x3, [0xf]}, @ss_container_id={0x14, 0x10, 0x4, 0x28, "46aedac7dc236f9918ee658567810dd0"}, @ssp_cap={0x10, 0x10, 0xa, 0x6f, 0x1, 0x9, 0x0, 0x3, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xb6, 0x80, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0xfb, 0x3, 0x0, 0xe}]}, 0x5, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x44c}}, {0x51, &(0x7f0000000dc0)=@string={0x51, 0x3, "409b0e2bb4888a282f5aebb05708027dace93425e239643ed3cd945149c827497b4eeef4a5dc5a061c17e835bd0e109312ed1db776f97bfeebd242260b487118c0bf2b860c337276b0a6148637f97b"}}, {0x5d, &(0x7f0000000e40)=@string={0x5d, 0x3, "a7f38262c09ebb0af992c665b932ba74c46f0b874aad8aff7ffc76933c145dc0dba070ec74fb82bdbd5256a2a2c66f95766d966b5158e750c1674f6c01801ac26deeb9b2af06acf230bd3ed8850d0fc37b66a8bdbaac641b0336f5"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x440a}}]}) syz_usb_control_io$lan78xx(r3, &(0x7f0000001040)={0x14, &(0x7f0000000fc0)={0x0, 0x0, 0x8, {0x8, 0x11, "7db701b329d2"}}, &(0x7f0000001000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}}, &(0x7f0000001280)={0x34, &(0x7f0000001080)={0x40, 0x2e, 0x97, "6063f145f5cfda5e17f5144f040fafb2bcd4d72527dbeaa4e193efce0001ccc2876f09048a90d948ed81b21ba177af29e1bd9b4a8a88564e8f9d66472843f4e493ef3fef4de233919705fba9ff71d0e76e7ced3b53219728c402e507b933663e57d07637b30a80cd8fc4a3d44c1107ac3a95c3350e3c8072362b28ec232c05b81fb7d8cfeb0e410c7124b544552a696a46484ea6c2999e"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001180)={0x0, 0x8, 0x1}, &(0x7f00000011c0)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000001200)={0x40, 0xa0, 0x4, 0x6}, &(0x7f0000001240)={0xc0, 0xa2, 0x2f, "7486e181e0644f62f1c3f01c93ce402e89195f6ef723ed7799939db1d5250dacfb1a355b6645ecece0d6057342363c"}}) (async) recvmsg(r2, &(0x7f0000001880)={&(0x7f00000012c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001340)=""/3, 0x3}, {&(0x7f0000001380)=""/67, 0x43}, {&(0x7f0000001400)=""/84, 0x54}, {&(0x7f0000001480)=""/227, 0xe3}, {&(0x7f0000001580)=""/109, 0x6d}, {&(0x7f0000001600)=""/218, 0xda}, {&(0x7f0000001700)=""/84, 0x54}], 0x7, &(0x7f0000001800)=""/89, 0x59}, 0x121) (async, rerun: 64) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000019c0)={0x14, &(0x7f00000018c0)={0x40, 0x21, 0x82, {0x82, 0x23, "b740d3da6c06ed6b9f9dfde45e14a6247ceece5bb1ea70af47feb8f36f9825c8ffdfda2f5411dec72e93711d2ba735f73952dcb63dda0a9b2fc2bf64ba62771444d846896feb05c0699def575cd63a370726461b3e11ba2d5c6a510b25886bd885b40922971257bd5b5f185b20af3086822e7d0cb4d22cb15d6e3fc05ae21446"}}, &(0x7f0000001980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x813}}}, &(0x7f0000001c00)={0x44, &(0x7f0000001a00)={0x0, 0x6, 0x4, "bedbfca3"}, &(0x7f0000001a40)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001a80)={0x0, 0x8, 0x1, 0xc5}, &(0x7f0000001ac0)={0x20, 0x81, 0x3, "a7ec5e"}, &(0x7f0000001b00)={0x20, 0x82, 0x3, "d298ab"}, &(0x7f0000001b40)={0x20, 0x83, 0x2, "a259"}, &(0x7f0000001b80)={0x20, 0x84, 0x4, "7660b631"}, &(0x7f0000001bc0)={0x20, 0x85, 0x3, '\f[J'}}) (rerun: 64) r4 = syz_usb_connect$uac2(0x4, 0xc2, &(0x7f0000001c80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x582, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb0, 0x3, 0x1, 0x4, 0x30, 0x1, {0x8, 0xb, 0x0, 0x0, 0x1, 0x2, 0x20, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xf801, 0x9, 0x19, 0x4}, [@input_terminal={0x10, 0x24, 0x2, 0x3, 0x405, 0x2, 0x0, 0x7, 0x59, 0x7, 0x4, 0xa6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x0, 0x4, "a270"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x2}, @as_header={0x10, 0x24, 0x1, 0xd4, 0x6, 0x0, 0x2, 0xad, 0xe6180000, 0x3}, @as_header={0x10, 0x24, 0x1, 0x3, 0x81, 0x3, 0x1002, 0xe0, 0x8, 0xde}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x7, 0x8d, 0x80, {0x8, 0x25, 0x1, 0x85, 0x3f, 0x81, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0xff}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0x1, 0x78, {0x8, 0x25, 0x1, 0x0, 0x30, 0xd2, 0x7}}}}}}}}]}}, &(0x7f0000002040)={0xa, &(0x7f0000001d80)={0xa, 0x6, 0x110, 0x8, 0x0, 0x2f, 0x40, 0x7}, 0x44, &(0x7f0000001dc0)={0x5, 0xf, 0x44, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x1, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x5, 0x5, 0xd13}, @ext_cap={0x7, 0x10, 0x2, 0xf4f6bee7ba464b5a, 0x4, 0x0, 0x8000}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x1, 0x0, 0x5, [0xc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "b850635e99269599f2070fddfcbd6221"}]}, 0x5, [{0x4, &(0x7f0000001e40)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000001e80)=@lang_id={0x4, 0x3, 0xc0f}}, {0x4, &(0x7f0000001ec0)=@lang_id={0x4, 0x3, 0x44f}}, {0xca, &(0x7f0000001f00)=@string={0xca, 0x3, "4eef3ef6b25d79799773d79a96806ea84d7656c148058663fb7a574e00d8c38c2fb0563db2e2652a913f279fa4e4b8d5a0385cb72d3e876344d73ee521147d452585d12dc36c3abf7aa574a953d568307ec18e97dd8bff78624c5bd4f84e436adf0fab46728dbc3f43ed13128e04a25fb454ab7253ae05d2ef2953ed953454d59330e9c6120139931ca264ba3107417eeb21f7a10b183afa38d2fa0f5d0473f426d7da501765aaa10e19f4b4e268e4b7cf2a24164a45330eb7816959b3202f37f75bb57b90d557c5"}}, {0x4, &(0x7f0000002000)=@lang_id={0x4, 0x3, 0x448}}]}) syz_usb_control_io(r4, &(0x7f00000023c0)={0x2c, &(0x7f00000020c0)={0x20, 0x11, 0xca, {0xca, 0x30, "fd6b2500e6928aab8542fbfd9c96ff6a20530bcfaf01d91a482a250d305cbf5ad7fd8f2a4a3609bc2ad04601a8efe76cc589bec9d6f8aa1a5ef0cee7fc6f9fee290f2d98d01f79b9b3769fe17334531673d78ea438d1c004f2fc3db9bc053029753539b3524208a1f4f932e9a4f17265c818422d95efca85592a1902726bd64f2e30981e351a974e5afd18a1b980d88f5167d114d23326bf453524b77ee35748917c1bea3043aefc061f4fdb98006c8b95d4c2dd5974351db1931dd12e5585581ffe93e1701c25d2"}}, &(0x7f00000021c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x421}}, &(0x7f0000002200)={0x0, 0xf, 0x12d, {0x5, 0xf, 0x12d, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x5, 0xf, 0x7fff, 0x1}, @generic={0xd4, 0x10, 0x3, "6c6f21a5359c2248d8461876ce1a1d2ebb76c2ebe1fef8831b06be6a872accee7bbca616583b368323aa0a76b3008a518f796d829a360446112d971cbd85148fc26daa877a128a0dc004c75fae408a0e2a67406e3b33691a63d7ca1c1110c6760c275b2651d34c075a2629089315053ada1fb4ad21a8cf8b85135b208dcdbe4b06bc9fb3b75739dff269431dcd02b498f2da7e9ca4865a673aa0fa4ad55467a2924364be02be0fc6b4985051855dc35c629c2de9c9d9d2186eca1240dd5d35fcac7eb2b01aa6f0a1c6aff5985708c62503"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x51, 0x3, 0x2}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x40, 0xf0f, 0x78a6, [0xff0000, 0x0, 0xffc000, 0xf, 0xff3ff0]}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x9, 0xf, 0x2, [0x188, 0x3f00, 0x3fc0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8}]}}, &(0x7f0000002340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x3, 0x3, 0x57, "3c4da7f6", "8b4d8e3e"}}, &(0x7f0000002380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf1, 0x4, 0x2, 0xd, 0x2, 0x8}}}, &(0x7f00000028c0)={0x84, &(0x7f0000002400)={0x20, 0x9, 0xf3, "cc0ad1f14041e38f8dd7cf34f7c80d6d9196db79bb447867e3fe7098b9ad59b1cf198360699a85bf1581e67764a6b82770cddb9218cdeda0a89d595333f036cd682cd58a1199c43f5e6715a7eeb2acb217e9ef4bef039630d78bf3e83a21e55655c70a19dbc6f0110d976e2608642efc58239cf5af52c49f26c33f611d9a2e1a2d2c15839c9a46ab8dbf35016379e437e4fe27191d8ea0ea67a3a6f7ebeb2254b8f2d5db67b692e8419204332c5efbb17b1d381bddfafd3bfc8eee35526b767576c3298b784f3fc23357bb51ab106681b02dd4c351ce080f99af5107b0c21e629478f4e94139330cf309b1297c304cd9311209"}, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000002540)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000002580)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000025c0)={0x20, 0x0, 0x4, {0x140, 0x40}}, &(0x7f0000002600)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000002640)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000002680)={0x40, 0xb, 0x2, "0112"}, &(0x7f00000026c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000002700)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000002740)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000002780)={0x40, 0x19, 0x2, "79cc"}, &(0x7f00000027c0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000002800)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000002840)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000002880)={0x40, 0x21, 0x1, 0x7f}}) (async) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000002980)) syz_usb_control_io$hid(r0, &(0x7f0000002bc0)={0x24, &(0x7f0000002a00)={0x20, 0x1, 0xc3, {0xc3, 0xc, "a26ee2f744a85f45ee865d03fa9ca8fca930fd60169356878d93d01d3ce76cfdb0ade33fadf665948dcc94e29ad7ad6d275ddb66e101ace5aae0fe77a216931294527c75ce829dd8f024e37bdc2ffccaaeb828752e0da34c0bff002892e790c67604f0bfa8f67228e0f2767ffff99ef367a897da4fe0457b6538377f4f5eb23a0fe4548b2289294d1008b9cec44246f03bc28101b8516545cc924ceb987fdb45f3d2d78b85fb7b85890ac78c7d4f1d7df9b66c51b90d3cd748dc0dfd678e23959f"}}, &(0x7f0000002b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}, &(0x7f0000002b40)={0x0, 0x22, 0x8, {[@main=@item_012={0x0, 0x0, 0x9}, @global=@item_012={0x0, 0x1, 0xa}, @local=@item_012={0x0, 0x2, 0x1}, @local=@item_012={0x2, 0x2, 0x3, "cf58"}, @global=@item_012={0x1, 0x1, 0x8, "aa"}]}}, &(0x7f0000002b80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0xc08}}}}, &(0x7f0000002ec0)={0x2c, &(0x7f0000002c00)={0x40, 0x1, 0xed, "bb6b0f4397ae56e3144906de458a23c4a7a830cfa61e96043907b80f405a7ddea17908fdb6d15659338a7ef75b376f7f243ae278b0adc36ca9a1e4053a7237cf703b12315f4493ef0c745627c0dbabe968cc39de7cb29858a9b27ed1dade72dbb811042dca52625912f887fc22766274330e3e9304a58659cb4e4c15a19c4fcaed258094f200a244322e8d14b614d5a1e69ae9868b0812356b0479e4bcbfbc16bb952e799aae46909e64c2f14b9c47fe392494d7d2fe76b1144aa92c0b12179b271338fa0f7c367d6b572d04c81d4a8afdf52d1427e1acf6d70d54fc59bbf510dedacf0a03fad23333b1455eba"}, &(0x7f0000002d00)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000002d40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000002d80)={0x20, 0x1, 0xfa, "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"}, &(0x7f0000002e80)={0x20, 0x3, 0x1}}) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000003000)={r2, &(0x7f0000002f00)='\xbb\xbb\xbb\xbb\xbb\xbb', 0x80, &(0x7f0000002f40)={@align=0x359e, {0x7, 0x2, 0x7, 0x3}}, 0x1, &(0x7f0000002f80), &(0x7f0000002fc0)=0xffe00000}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r5, 0x4018aee3, &(0x7f0000003040)=@attr_pmu_init) tkill(r1, 0x6) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f0000003080)={0xd, 0x0, 0x1, {0xffff, 0x7ff, 0x1, 0x1}}) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000031c0)={0x14, &(0x7f00000030c0)={0x0, 0x21, 0x86, {0x86, 0x21, "b5cca07cc96eaca86195e8a3845c335180378aee4d1ae1ff74429b5819677accb4baf807d68c2cdc746d101e4f21b215938cdeb90be0fe4c28d8162f67c3d17387a6fb50d00c035b7b1a2f233cf5b7459941793e17bda791fc4a490589af3239b9ee96708178acc076167403aaa975a4a293097087bf36f78acfa4e19d1f4d073e2fad9b"}}, &(0x7f0000003180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000032c0)={0x1c, &(0x7f0000003200)={0x20, 0xb, 0x35, "f5033fbafcc3eae5a1c3ccc299e5e5d1a7f53812ccecdc7e0f2c4f2a2dd253a8f79e3d1640bb75d353b3a8e1a9bdb2fa2128b4b281"}, &(0x7f0000003240)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000003280)={0x0, 0x8, 0x1, 0xa3}}) (async) syz_usb_control_io$uac3(r3, &(0x7f0000003480)={0x14, &(0x7f0000003300)={0x0, 0x11, 0xcf, {0xcf, 0x3, "18f476e013742ddd728ea6741d9f3547e7667760feeac72811d0c89fd556a61be76195c6cc02a53bd2f76dee439c6f92f9f38c007e0d8c3627a10bd66cbed322cf29950f5278de54339669386c3b45b8dc145786d52d2b41f651f0896f399df1299ca3301dfbbb00eb75ec0d85b4977bf4d07e8ff24bdf87d3426b298332ed89be8db6e50858479478c91749a01ea0b2b86e7969dbe1e76cc88807da9e5a921e61a864d01758bc69eb3debbf20f0a493bcf90784313707007d510a8e04badf407d1b2e8acb26896cafcbde0f76"}}, &(0x7f0000003400)={0x0, 0x3, 0x47, @string={0x47, 0x3, "1c7edb2525d9e2eb1a44fce7028ee0508e3e757e558761c052c112a29c4488b5544a2d7b513480b2a59f467a48f8b51e34a1b2bdc26021445f8d938b2963938d076574342a"}}}, &(0x7f0000003740)={0x44, &(0x7f00000034c0)={0x40, 0x18, 0x94, "8459842505aa54650ff300b4071dece1fb6000c64dacf3f4dd6e7e075a7f0b84cfe1a8025e8f77be773852c2aa0915ccdc40f6620645bf61ddf572055e3f23aeba178f877c52d6cc52bdc9196d9ecaa31d95d418716ab80617b37fbfcca9d44b54ca6f9a8490feffa244b6958c723434bc0288e8666a5334343f97288449da2d1044dfb86e9d70cd1ac45df834dc1bb438831a61"}, &(0x7f0000003580)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000035c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000003600)={0x20, 0x81, 0x1, "c7"}, &(0x7f0000003640)={0x20, 0x82, 0x3, "f4992f"}, &(0x7f0000003680)={0x20, 0x83, 0x3, "78e700"}, &(0x7f00000036c0)={0x20, 0x84, 0x2, "b8eb"}, &(0x7f0000003700)={0x20, 0x85, 0x3, "0ca33d"}}) (async) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000037c0)) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000003800)={0x1ff, 0x0, 0xfec00000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) (rerun: 32) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000003840)) (async) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000003900)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000003940)={0x48, 0x5, r6}) (async) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000003b00)={0x14, &(0x7f00000039c0)={0x20, 0x10, 0xdc, {0xdc, 0x6, "6caf32d51f36f23e6ae76b80a67b0649436dd30449074bc08bdf2e5dd3f9f1b4b35390e56f4305751502c25b0eda4aff0b3f803dd9350a72f6d54606426420cfcbd9c6e705508967536bc154a2b00c1048971dfdb2751b2362356927a73b61f7b6688d1630981ba0ad7028e7dc4b53290e53c5296a21609c45b5f0d9c62bc1b226e6f995084b0c5fc9996e6fa7589e44cbb5b3e785257de538af616c12f6684fe8225d036e44405a1925632eaa30b3b80cd102e9ca0c29bc8d24b07a2b4220dd49f8e7df923dea596abd3fe796716a9e1828090769a18dd38b90"}}, &(0x7f0000003ac0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003dc0)={0x44, &(0x7f0000003b40)={0x60, 0x15, 0x82, "68eaba737fb52b225292212a3482d88117ca44cb0208463e99884875f1647414a60a49d9c30bd56daa22b8b9f4b6358b0e54ae8ca545b0e5d9b13908e5b4675aadd2513f6576dc506e4f02b7b97e139a00495d05ec1bf934d67e01db59218d84cffcd12cca5eb5720614048d01824ef55d21612f32b3eab1bbfd748d1fc0cfd62be0"}, &(0x7f0000003c00)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000003c40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000003c80)={0x20, 0x80, 0x1c, {0x4, 0x8, 0x8, 0x0, 0x2e, 0x3496, 0x401, 0xb593, 0x2, 0x4, 0x4, 0x9}}, &(0x7f0000003cc0)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000003d00)={0x20, 0x83, 0x2}, &(0x7f0000003d40)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000003d80)={0x20, 0x89, 0x2}}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000003e40), 0x2, 0x0) (async, rerun: 32) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000004900)={0x14, &(0x7f0000004880)={0x0, 0x2, 0x30, {0x30, 0x21, "efd102c3e9f60763c4575ff91b3149e2d11cfd0615361a312ee89f7246106bcc3b91857420ba65dcd32501491f95"}}, &(0x7f00000048c0)={0x0, 0x3, 0xe, @string={0xe, 0x3, "a8f4fb6a99ac5950ed4d71ea"}}}, &(0x7f0000004b80)={0x44, &(0x7f0000004940)={0x20, 0x16, 0x5f, "f1ada1fa0ed2dc61a50ce91462f0c9a70589645c2a42a26b89fd1655c0157af1c2050cb595573c6982291da297d586a5425949cf588629bcf1b8cd7f39cb686a3bfcce05e60594274bed00d9ef06bf404c23bb868ce856d6e9f9ca8943a996"}, &(0x7f00000049c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000004a00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000004a40)={0x20, 0x81, 0x2, "85f9"}, &(0x7f0000004a80)={0x20, 0x82, 0x1, 'L'}, &(0x7f0000004ac0)={0x20, 0x83, 0x1, "ec"}, &(0x7f0000004b00)={0x20, 0x84, 0x2, "881b"}, &(0x7f0000004b40)={0x20, 0x85, 0x3, "19cc11"}}) (rerun: 32) 1m55.679309717s ago: executing program 9 (id=4586): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'syztnl0\x00', 0x0}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x0, 0x55, 0x80, 0x0, 0xb49, 0x200000000002, 0x7, 0x1a, 0xfffffffa}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040) sendmsg$NFT_BATCH(r4, 0x0, 0x40) socket$inet_sctp(0x2, 0x5, 0x84) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) io_setup(0x61, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x40, r6, 0x0, 0x0, 0x36, 0x0, 0x2}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) 1m55.376093201s ago: executing program 9 (id=4587): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x7, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/image_size', 0x400000, 0x63) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) socket$inet6(0xa, 0x1, 0xffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r5, 0x331, 0xffffffff, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r6, 0x0, 0x2) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300040008001b0000000000d135ce265d3d0eb28849ac24c10195f8380b969cdae835c680ea9cea07a81f9288"], 0x28}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0xffffffffffffffe4, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}, @typed={0x8, 0x17, 0x0, 0x0, @u32=0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1m49.55868174s ago: executing program 9 (id=4601): r0 = socket(0xa, 0x3, 0x87) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg$unix(r1, &(0x7f0000001880)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/63, 0x3f}, {&(0x7f0000000380)=""/159, 0x9f}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/136, 0x88}, {&(0x7f0000001500)=""/219, 0xdb}, {&(0x7f0000001600)=""/49, 0x31}], 0x6, &(0x7f00000016c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}], 0x1, 0x20, &(0x7f00000018c0)={0x0, 0x989680}) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, &(0x7f0000002300)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x6}, {0x8, 0x2}, {0x8, 0x4}, {}, {0x8, 0x1}, {0x8, 0x5, 0xee01}]}, 0x54, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_clone(0x48240000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001940)=ANY=[@ANYRESDEC=r5, @ANYRESDEC=0x0, @ANYBLOB="01003bfd7000ffdbd725450e0001006e657464657673486d000000"], 0x3c}, 0x1, 0x0, 0x0, 0x404c050}, 0x4800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r6}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 1m47.187686664s ago: executing program 9 (id=4605): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000200)=0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180)=0x9) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f0000000000)={0x3, 0x9, 0x8, 0x5, 0x7}) 1m46.855814577s ago: executing program 9 (id=4608): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000a081000418e00000004fcff", 0x58}], 0x1) 1m46.635205274s ago: executing program 9 (id=4610): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@updpolicy={0xb8, 0x19, 0x200, 0x70bd25, 0x25dfdbfe, {{@in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x4e21, 0x2, 0x4e22, 0x2, 0x2, 0x20, 0x80, 0x5e}, {0x400, 0x2, 0x0, 0x6, 0x2, 0x9d, 0xff, 0xc088}, {0xffffffff, 0x0, 0x8001}, 0x9, 0x6e6bba, 0x0, 0x0, 0x3, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x8801}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000020}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)=@migrate={0x110, 0x21, 0x70a, 0x70bd25, 0x25dfdbfb, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x5, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x33}, 0x6e6bb3, 0x2}, [@sec_ctx={0xaa, 0x8, {0xa6, 0x8, 0x1, 0x1, 0x9e, "ff37ef035a4f605faf76bace92a2092229cfa82e96ab1d5cb54c5b45e193909bf66ff51063db9d0dc94112cb2284150d1b760699f276d773823b3dbefca11c49fe926c9ecbac3298c4a5f50b033aee610d039e00ebe68a46bda18a4a0ec69e7dedf4e7b9704213d5b5cce076154526c1516c52e91e16f11c8e738d18f13fc44ef06d7c0aedbf0ae08bf992063332302f1ae79c957896a2122ca11f9c6e21"}}, @lastused={0xc, 0xf, 0x7}, @etimer_thresh={0x8, 0xc, 0x9}]}, 0x110}, 0x1, 0x0, 0x0, 0x40}, 0x4) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transaction_log\x00', 0x6, 0x0) r4 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x491, 0x0, 0x5}]}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'ip6gre0\x00', {0x2, 0x0, @initdev}}) r6 = accept(r0, &(0x7f00000000c0)=@ax25={{0x3, @null}, [@null, @rose, @remote, @rose, @rose, @rose, @default, @bcast]}, &(0x7f0000000140)=0x80) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000180)=0x9, 0x4) 1m31.369613219s ago: executing program 37 (id=4610): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@updpolicy={0xb8, 0x19, 0x200, 0x70bd25, 0x25dfdbfe, {{@in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x4e21, 0x2, 0x4e22, 0x2, 0x2, 0x20, 0x80, 0x5e}, {0x400, 0x2, 0x0, 0x6, 0x2, 0x9d, 0xff, 0xc088}, {0xffffffff, 0x0, 0x8001}, 0x9, 0x6e6bba, 0x0, 0x0, 0x3, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x8801}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000020}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)=@migrate={0x110, 0x21, 0x70a, 0x70bd25, 0x25dfdbfb, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x5, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x33}, 0x6e6bb3, 0x2}, [@sec_ctx={0xaa, 0x8, {0xa6, 0x8, 0x1, 0x1, 0x9e, "ff37ef035a4f605faf76bace92a2092229cfa82e96ab1d5cb54c5b45e193909bf66ff51063db9d0dc94112cb2284150d1b760699f276d773823b3dbefca11c49fe926c9ecbac3298c4a5f50b033aee610d039e00ebe68a46bda18a4a0ec69e7dedf4e7b9704213d5b5cce076154526c1516c52e91e16f11c8e738d18f13fc44ef06d7c0aedbf0ae08bf992063332302f1ae79c957896a2122ca11f9c6e21"}}, @lastused={0xc, 0xf, 0x7}, @etimer_thresh={0x8, 0xc, 0x9}]}, 0x110}, 0x1, 0x0, 0x0, 0x40}, 0x4) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transaction_log\x00', 0x6, 0x0) r4 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x491, 0x0, 0x5}]}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'ip6gre0\x00', {0x2, 0x0, @initdev}}) r6 = accept(r0, &(0x7f00000000c0)=@ax25={{0x3, @null}, [@null, @rose, @remote, @rose, @rose, @rose, @default, @bcast]}, &(0x7f0000000140)=0x80) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000180)=0x9, 0x4) 8.19650829s ago: executing program 3 (id=4943): socket(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x21000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000380)='\x02\xc3\xf6\xddM\xd6\x8dwE)\x83\xe1\x1f\x9c\xf5q', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20000000000, 0xfffffffffffffffd, 0x10000000, 0x3}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r5, 0x0) landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) r6 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbee2, 0x11, r6, 0x39526000) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex;De', 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000007, 0x200000005c832, r0, 0x9dc0d000) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000004c0)={@empty, @multicast1, 0x0}, &(0x7f0000000500)=0xc) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x4103, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x880) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.946113932s ago: executing program 7 (id=4944): syz_usb_connect(0x5, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x70, 0x54, 0x7b, 0x20, 0x15a4, 0x9035, 0x93ce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8b, 0x4b, 0x28, 0x6, "", [{{0x9, 0x4, 0x92, 0xe, 0x0, 0xe, 0x66, 0x97, 0x4}}]}}]}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@local, @random="fad1e048716e", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @multicast1, @random="14afc8fc925f", @dev={0xac, 0x14, 0x14, 0x19}}}}}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x7f, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 7.140699269s ago: executing program 5 (id=4947): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) write$P9_RFSYNC(r0, &(0x7f00000001c0)={0x7, 0x33, 0x2}, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000140)={0x30000, 0x8000}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYRES16=r1], 0x50}}, 0x40040) 6.803616149s ago: executing program 5 (id=4950): sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='A', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c) r0 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x248000) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000300)={0x2000, 0x8000}) close(r0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000700)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x20}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) connect$l2tp6(r6, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r6, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYBLOB="0c5c345d72b223e53812b1294d1b925f81e78db09ad96496487c4de34b3a1b"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000044) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x410, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x340, 0xffffffff, 0xffffffff, 0x340, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xffffffff, 0x164d2c527ac5db29], [], 'team_slave_1\x00', 'vlan1\x00', {}, {}, 0x0, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x2e}, [0x0, 0xff], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x2b}, 0x0, 0x230, 0x270, 0x0, {}, [@common=@srh={{0x30}, {0xd1, 0x8, 0x8, 0x8, 0xf, 0x4c, 0x400}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x52, 0x1, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x4, 0x1, 0x9, 0x9, 0x80000000, 0x5, 0x0, 0x80000000]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x470) pipe(&(0x7f0000000040)) 5.162733647s ago: executing program 4 (id=4951): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x3000) ftruncate(r0, 0x51a9497) openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000180)=0xffff0018) ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0x2}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0xc, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000085}, 0x8800) 4.957246603s ago: executing program 1 (id=4952): socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) fanotify_init(0x20, 0x101000) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3f}, 0x1c) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2a803) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000280)={0x2, 0x100004, 0x20}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05030500", 0x4, 0x8004, &(0x7f0000000140)={0x11, 0x88a8, r6, 0x1, 0x8, 0x6, @multicast}, 0x14) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000300)=r8) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r8}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000002d80)=""/53, 0x0, 0x7000}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000880)=""/91}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) 4.816857808s ago: executing program 7 (id=4953): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x5) socket(0x10, 0x80002, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000540)=@userptr={0x40, 0x1, 0x4, 0x440, 0x7, {}, {0x2, 0x0, 0x3, 0x4, 0x5, 0x3, "ed0db417"}, 0x6, 0x2, {&(0x7f0000000500)}, 0x5, 0x0, r2}) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)="11", 0x1}], 0x2}}], 0x1, 0x4404c880) sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r4, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89ff, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0x600000}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000a58000000060a010400000000000000000a0000010900010073313d2fcfbe6242eac6398008000100666962001c0002800800014000000014080002400000000208000340000000120900020073797a3200000000140000887a828100000000000aa707ba81c53b11a71a32a942d53dada4ecee74f7462abe76f68a3f9bdf32c06019436f0e04605241"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010004b0400000000000000007a00000095c23a1f85afee38e7a20b69cdb2c1bc593c2b8abbec95c450f728764e91e91f6a166440c5ed4562711d6618ec837820115a7f954acc9bb6b807a45af3cf1706a3ac973916b16a26b635ad680ff527b2a533806b26a1837a3d7defc57b45e679df097180fc3eee24d145d3520945f41cab68d7d98ea61a75983cff87f1d4a4e37806a04a911012d1c3d3fbef89f2116ffec75872e0706fe87ea8d3667fcb9c2cb7ec129762534ef6ce93009d1542e05579c135325490ed323def4f889eea26c07b1c66ac7ce251e2c21243547e41b2d12d66e1887d88d4fb18f4f59ecb23fbc88833c0598f", @ANYRES32=0x0, @ANYBLOB="1040000000000000380012800b0001006272696467650000280002800500160002000000080001000900000006000600020000000c001e000500000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x400c000}, 0x24008014) 4.210104741s ago: executing program 4 (id=4954): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=ANY=[@ANYBLOB="00010000160001052cbd7000fedbdf25fc020000000000000000000000000001e00000020000000000000000000000004e2a00064e24fffa0200802088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14140a000000000000000000000000000004d5330000fafd8000000000000000000000000000bbff01000000000000a2000000000000080700000000000000fcffffffffffffff00000000000000000400000000000000ff7f000000000000fe48000000000000040000000000000009000000000000000005000000f8ffffff0900000026bd7000000000000a00027f010000000000000003000000de000000080016000000008045110224efd08c"], 0x100}, 0x1, 0x0, 0x0, 0x4075}, 0x4000020) 4.208793564s ago: executing program 7 (id=4955): syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x29, 0x5, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x119, 0x9, 0x0, 0x33) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000e8ffffffffff0b000000480005800800010065756800070002"], 0x5c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x434143, 0x1bf) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0xe060400) unshare(0x2c060000) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) 3.846427351s ago: executing program 4 (id=4956): accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x800) (async) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x800) clock_gettime(0x0, &(0x7f0000000040)) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={r1, r2/1000+10000}, 0x10) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, 0xffffffffffffffff}) mremap(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000100)=0x5, 0x4) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000100)=0x5, 0x4) ioctl$NILFS_IOCTL_SET_SUINFO(r3, 0x40186e8d, &(0x7f00000001c0)={&(0x7f0000000140)=[{0xd2b, 0x0, 0x0, {0xffffffff, 0xffffffff, 0x2}}, {0x1, 0x2, 0x0, {0xbb, 0x1, 0x1}}, {0xffff, 0x1, 0x0, {0x2, 0x4, 0x1}}], 0x3, 0x20, 0x8f1, 0xba}) (async) ioctl$NILFS_IOCTL_SET_SUINFO(r3, 0x40186e8d, &(0x7f00000001c0)={&(0x7f0000000140)=[{0xd2b, 0x0, 0x0, {0xffffffff, 0xffffffff, 0x2}}, {0x1, 0x2, 0x0, {0xbb, 0x1, 0x1}}, {0xffff, 0x1, 0x0, {0x2, 0x4, 0x1}}], 0x3, 0x20, 0x8f1, 0xba}) ioctl$XFS_IOC_SET_RESBLKS(r3, 0xc0105872, &(0x7f0000000200)={0x5, 0x8}) socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) (async) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) epoll_create1(0x80000) (async) epoll_create1(0x80000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) getsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000300)=0x9) r6 = getuid() stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000440)={0x3eee, 0x101, {}, {0xee00}, 0x6, 0x5}) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000440)={0x3eee, 0x101, {}, {0xee00}, 0x6, 0x5}) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@private2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000580)=0xe8) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000780)=0xe8) r12 = getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000800)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, r3, {0x0, 0x0}}, './file0\x00'}) getresgid(&(0x7f0000000880), &(0x7f00000008c0)=0x0, &(0x7f0000000900)) fsetxattr$system_posix_acl(r3, &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x1}, [{0x2, 0x5, r6}, {0x2, 0x4, r7}, {0x2, 0x1, r8}, {0x2, 0x2, r9}, {0x2, 0x4, r10}, {0x2, 0x0, r11}, {0x2, 0x6, r12}], {0x4, 0x1}, [{0x8, 0x1, r13}, {0x8, 0x2, r15}, {0x8, 0x2, r16}], {0x10, 0x1}, {0x20, 0x4}}, 0x74, 0x2) sendmsg$TIPC_NL_BEARER_ENABLE(r14, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a00)={0x178, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2000}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "6d129ab234f1c148bd909dece8d7e89260a5474686787606"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b81169d820a407d1560677d2abfa6dfdddbe7ed0485a"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "9637b58d39aa07f9135749ea307620702de247e96d392a628974"}}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4a000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff801}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x80c4}, 0x4040000) gettid() (async) gettid() sendmsg$IPSET_CMD_LIST(r14, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x44, 0x7, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000d80)={0x3, &(0x7f0000000d40)=[{0x7ff, 0x6, 0x81, 0xfffffffc}, {0xfc01, 0x4, 0xe, 0x7f}, {0x86b, 0xa, 0x5, 0x9}]}) 3.83664826s ago: executing program 5 (id=4957): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) (async, rerun: 64) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x2, 0xffff, 0x0, 0x0, {[@generic={0x13, 0xd, "cc3438886c3354a45e5e28"}, @mss={0x2, 0x4, 0xfffe}]}}}}}}}, 0x0) (rerun: 64) r1 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) (async) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/62, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) (async) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) (async) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x30) (async) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xb) ioctl$FICLONE(r3, 0x40049409, r4) (async, rerun: 32) landlock_restrict_self(r2, 0x0) (async, rerun: 32) landlock_restrict_self(r2, 0x0) (async) landlock_restrict_self(r2, 0xc) (async) landlock_restrict_self(r2, 0x4) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.428654612s ago: executing program 4 (id=4958): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x40, 0x1, 0x1}, 0x18, 0x0) (rerun: 64) landlock_restrict_self(r2, 0xc) (async, rerun: 32) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (rerun: 32) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0xb, 0x0, 0xfffffe0000000000, 0xfa11, 0x7fffffff}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r3) (async) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) (async) connect$inet6(r5, &(0x7f00000004c0)={0xa, 0x0, 0x3, @mcast2, 0x7}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000500)='batadv0\x00', 0x10) (async, rerun: 64) sendto$inet6(r5, &(0x7f0000000140)="62b73a5d", 0x4, 0x3b04, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) r6 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_TUNER(r6, 0xc054561d, &(0x7f0000000200)={0x0, "836d11f8a2f7337496bff2b4d43d400ebf870e7cf92542da0cbdf188dede83ee", 0x2, 0x20, 0x2, 0x4, 0x10, 0x0, 0x0, 0x800006}) (async, rerun: 32) r7 = socket(0x15, 0x5, 0x0) (rerun: 32) getsockopt(r7, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x8, 0x5, 0x3, 0x6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x2402c0d5) (async) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000003100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_open_dev$char_usb(0xc, 0xb4, 0x6) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000100)={0x5, 0x4, 0x236a, 0x4, 0x3}, 0x14) (async) syz_usb_connect$uac1(0x1, 0x0, 0x0, &(0x7f0000011700)={0x0, 0x0, 0x0, 0x0}) 3.202026734s ago: executing program 5 (id=4959): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x307103, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = eventfd2(0x8, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x8000}], 0x1, 0x0, 0x0, 0x0) read(r2, &(0x7f0000000480)=""/82, 0x52) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x5, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000040)={0x4, r3, 0x1}) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x9c8a, 0x0, 0x17fffffffffffc}, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="c0e243", 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000100)={r5}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x1000) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 3.176137711s ago: executing program 4 (id=4960): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000140)={0x30000, 0x8000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 2.908571028s ago: executing program 3 (id=4961): unshare(0x6a040000) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006c042b20800000000000000003010902"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001f00780404000000fcfbdf25000000006c0783364dcdef0d27438478ccd1df", @ANYRESDEC=r4, @ANYRESHEX=r4], 0x50}}, 0xc080) 2.510641999s ago: executing program 4 (id=4962): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000634fc991daf8e19ab26dfefb324000001810000000000904000009030000000921000000012222880d5842c77ce70d5f35e64dfb000000a4a23562"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) 2.250226385s ago: executing program 5 (id=4963): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x24000420) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) read(r1, &(0x7f0000000640)=""/215, 0xd7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x9, &(0x7f00000007c0)=ANY=[@ANYBLOB="18220000", @ANYRES32, @ANYBLOB="000000000300000018340000050000000000000000000000809404"], 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x1e, 0x1, 0x3) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYRESOCT=r7], 0x4) sendmmsg$inet(r7, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b1596d35ebe1d3443aa78fb40209dcfa4666bbcc6ca80810e4d7cf28a3ef8da37545132057476c8adc3906a07f6082bc4e4771b1f84d1eb323d4f9320e33ea3d4b4c1c259db0e63f82409d07fa54d3ecdfc9cd635c1bcd7a5efead4eb3486842c600b735d0ea4bdfbff59", 0x12f}, {&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d0000000086b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d59e5ac2d704fa2595b5d36400d0b2d119796726a223f5739e45568cfdbdb3064d01bf9cd033e5e0907b2eb410b7cf31951394c2477f106d42cc844ffbf8a9ea581be003", 0xf3}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225", 0x11}, {&(0x7f0000002300)="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", 0x112}], 0x2}}], 0x2, 0x2090) r8 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_aout(r8, &(0x7f0000000080)=ANY=[], 0xfffffee2) readv(r9, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/168, 0xa8}], 0x1) splice(r8, 0x0, r10, 0x0, 0x807, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000000c0)=0xf7, 0x4) sendto$inet(r7, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7fff, 0x81, 0x6, 0x4, 0x82}, 0x6, 0x0, 0x0, 0x6, 0x10, 0x29, 0x18, 0x19, 0x5, 0xff, {0x9, 0xb0, 0xb2, 0xebc9, 0xfffffff7, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x80) write$cgroup_devices(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="1e0308004d8c71ef288563"], 0xffdd) 2.013184737s ago: executing program 1 (id=4964): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x8}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}], 0x4c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x42024, 0x28d89}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 1.734475597s ago: executing program 1 (id=4965): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x5) socket(0x10, 0x80002, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000540)=@userptr={0x40, 0x1, 0x4, 0x440, 0x7, {}, {0x2, 0x0, 0x3, 0x4, 0x5, 0x3, "ed0db417"}, 0x6, 0x2, {&(0x7f0000000500)}, 0x5, 0x0, r2}) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)="11", 0x1}], 0x2}}], 0x1, 0x4404c880) sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r4, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89ff, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0x600000}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000a58000000060a010400000000000000000a0000010900010073313d2fcfbe6242eac6398008000100666962001c0002800800014000000014080002400000000208000340000000120900020073797a3200000000140000887a828100000000000aa707ba81c53b11a71a32a942d53dada4ecee74f7462abe76f68a3f9bdf32c06019436f0e04605241"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010004b0400000000000000007a00000095c23a1f85afee38e7a20b69cdb2c1bc593c2b8abbec95c450f728764e91e91f6a166440c5ed4562711d6618ec837820115a7f954acc9bb6b807a45af3cf1706a3ac973916b16a26b635ad680ff527b2a533806b26a1837a3d7defc57b45e679df097180fc3eee24d145d3520945f41cab68d7d98ea61a75983cff87f1d4a4e37806a04a911012d1c3d3fbef89f2116ffec75872e0706fe87ea8d3667fcb9c2cb7ec129762534ef6ce93009d1542e05579c135325490ed323def4f889eea26c07b1c66ac7ce251e2c21243547e41b2d12d66e1887d88d4fb18f4f59ecb23fbc88833c0598f", @ANYRES32=0x0, @ANYBLOB="1040000000000000380012800b0001006272696467650000280002800500160002000000080001000900000006000600020000000c001e000500000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x400c000}, 0x24008014) 1.646137717s ago: executing program 7 (id=4966): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) unshare(0x2040400) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000140)) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xff05, 0x0, 0xfffffffc, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x6}, @IFLA_GRE_TOS={0x5, 0x9, 0x4}]}}}]}, 0x40}}, 0x0) (async) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000040)=0x200000000) (async) r6 = dup2(r4, r4) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000300)=""/107, 0x0, 0xeeef0000}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x6) read$FUSE(r6, &(0x7f00000016c0)={0x2020}, 0x2020) (async) write$vhost_msg_v2(r6, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000280)=""/128, 0x80, 0x0, 0x1, 0x2}}, 0x48) (async) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000040)={0x400002, r3}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1.046573345s ago: executing program 1 (id=4967): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r2, 0xe01, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000ffc000/0x4000)=nil], 0x0, &(0x7f0000001680), 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x6e21, 0x80000001, @empty, 0xffffeff3}, 0x1c) listen(r0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) bind$can_raw(r3, &(0x7f0000000080), 0x10) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f00000001c0)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x121881, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = epoll_create1(0x0) epoll_pwait2(r7, &(0x7f0000000640)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x305) accept4(r0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd6003000000182c00fe0180000000000000000000000000bbfe800202003400000000cc4b8e000000000000f7000000000000"], 0x0) flock(r5, 0x1) 930.548013ms ago: executing program 7 (id=4968): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x16) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x5, 0xdddd1000, 0x2000, &(0x7f0000485000/0x2000)=nil}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x3c, 0x64, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x10, 0x0, 0x0, 0x2d9, {[@exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) 853.273585ms ago: executing program 5 (id=4969): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_usb_connect(0x5, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x110, 0xe6, 0x18, 0xf7, 0x8, 0xcf2, 0x6250, 0x8b16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x81, 0x8, 0xa0, 0x75, "", [{{0x9, 0x4, 0xa4, 0x3, 0x0, 0x82, 0x41, 0x46, 0x10}}]}}]}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x468fe4e8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4048000) 795.71386ms ago: executing program 7 (id=4970): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000002010104000000000000520000000008300019802c0001"], 0x44}, 0x1, 0x0, 0x0, 0x8050}, 0x40) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000080)=0x4, 0x4) syz_usb_connect(0x5, 0xd53, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x68, 0x45, 0x5c, 0x8, 0xb553, 0xa4e4, 0x47b6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd41, 0x4, 0xb0, 0x5, 0x60, 0x49, "", [{{0x9, 0x4, 0x1f, 0x89, 0xd, 0x7, 0x1, 0x3, 0x10, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x41}, [@extension_unit={0xa, 0x24, 0x8, 0x1, 0x0, 0xf, "439628"}, @feature_unit={0xd, 0x24, 0x6, 0x4, 0x3, 0x3, [0x4, 0x3, 0x3], 0x8}, @processing_unit={0x7, 0x24, 0x7, 0x4, 0x3, 0xc}, @mixer_unit={0x6, 0x24, 0x4, 0x1, 0x42, "f8"}, @processing_unit={0xa, 0x24, 0x7, 0x3, 0x6, 0x3, "155695"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x1ff, 0x2, 0x1, 0x6a}]}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "e305"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x0, 0x7, 0x81}, [@mdlm={0x15, 0x24, 0x12, 0x1}, @acm={0x4}]}], [{{0x9, 0x5, 0x2, 0x1, 0x40, 0x3, 0x5, 0x9}}, {{0x9, 0x5, 0x7, 0xc, 0x40, 0x3, 0x10, 0x0, [@generic={0xb2, 0x5, "7a6e3205bdefc4e31a113287c50332a36595eddc5fe77ca0ab0b0bf1727b57a7c55dbbe235cec5254c5ffc47500620bae00f30afa9cb6449ae3753201015621e1b850ab7607acaafa18598f4b3bab4bdfd2a8f01cae68aaf42f6c9dbfafbae658357ea2d1c63b26d6622c66b60959bb313fa609ac129b0c3e3174251120b5d35372b2538feebc0c43320ff0745995de94fd3f110b861c59a8b1d967b1e79e2b015dd70167ab2358fd6ec885f9124e67f"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x89}]}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x9, 0x3, 0xfd, [@generic={0x79, 0x23, "a72599e8917dc275572bc5d1ad4baf6a2367692704ec01634d7a75e200ed91a3179faa1f4f3306ca4328e357b4b8302338babd888ec7fdd04b558cc472476851c32e8768b72b0971045f55ee9d43bc7a1070e63a462331986a256bf9a28e70c81034e0d72b6ac49b267924b18065e1ca80ff23956638d4"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x2}]}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x8, 0x8, 0xb, [@generic={0xcb, 0xf, "bbaed995b0e11ebef1ed6ed3b002b85b32158cc6931abd8bc0245358a20d02797f3c8020867911e34b117e60efa20b899f78ba53253eb1a4b784f9999fdee49265a02a4cbd04029b293f14e92e12bc08200145ff39dd4f428a9afb8d6604c52f8ac6359a20a4f8f9a4358119193da57b9b5cace5835429a31b0015235fc747a29392aece3bc308227fae8a0901fd6143ee09b7f7f7d7837cca45effe5661cb960555df1f3849764c829f04611a2ae41d29d376c496b3f5013306f09815683d4cbc45ab11795e44a06b"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x5}]}}, {{0x9, 0x5, 0x6, 0x1, 0x3ff, 0x1, 0x8, 0x6, [@generic={0xa2, 0x5, "53c5135e3a551e5c871b1329edc91b159c363ca3aec1a8e7d633e34d115ce96d937306c763bc6d1930401bc85d00473a021a1c349d09b1de02936a4da2ddc351b13444cc4f37a63cb2731bede76862689b9b3bebb2ea42c89dcc4f85bcefc35f5c6013f074ac1af270d53610f13f15dc15b79208847ea7e09fa3a6b09b572e887a220a79ab628bfa8620b0f9e8ee99d9703ebab62d6f898b351041bc7f57df29"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x200}]}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0xc, 0x6}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x2, 0x8, 0x1, [@generic={0x5c, 0xb, "5a8b4ceba9fcc4bf492d8a6234ab785568dcfd78d9305a2538d34a2d1de455a9026d6fa599e844f7a57b8a552aaa84f2fefdfbedc8a1013fd43bcc985798c517925c0c03faabda935e183b3c5686e1c1cb76417fc4dc15d035c4"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x40, 0x6, 0x2, 0xe2, [@generic={0xfd, 0x21, "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"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x10, 0x6, 0x7, 0x9, [@generic={0x5b, 0xc, "85d154744ba762e42b71b477d1c72e570df641b90ef69084dd8872f705078935817ade7f51efe15921ca6acd41769b4691654e3255a828fec899a00486293a86ca850ff472fef6215506a48c40d9ed05367e649c3b3498146b"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x7ff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x2, 0x81, 0x5}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x7, 0x6, 0x0, [@generic={0x32, 0x11, "1cd72dbedad7a990871521f2e11f3c8fa8f4df1c5e0e4cc5af946b335372772a9e485d0fa2627bab28460209f8d2d7bf"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x80, 0x7, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x40, 0x30}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x8000}]}}, {{0x9, 0x5, 0x1, 0x2, 0x20, 0x5, 0x5, 0xb5}}]}}, {{0x9, 0x4, 0x28, 0x0, 0x7, 0xff, 0x5, 0x31, 0xfb, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "fcad"}, {0x5, 0x24, 0x0, 0x2d}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0x3, 0x8, 0xcd}, {0x6, 0x24, 0x1a, 0x4, 0xdc3b17f6e90e85cc}, [@network_terminal={0x7, 0x24, 0xa, 0x9e, 0xf6, 0xff, 0xf0}]}, @uac_control={{0xa, 0x24, 0x1, 0x0, 0x4b}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x201, 0x4, 0x6, 0x0, 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x404, 0x3, 0xf7, 0xa7b, 0x25, 0x7f}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x200, 0x2, 0x6, 0x5, 0x2, 0x3b}, @feature_unit={0xb, 0x24, 0x6, 0x4, 0x5, 0x2, [0x5, 0x6], 0x4}, @processing_unit={0x9, 0x24, 0x7, 0x3, 0x6, 0x5, "9a46"}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x4, 0x1, [0x1], 0x35}]}], [{{0x9, 0x5, 0x6, 0x10, 0x8, 0x2, 0xb9, 0xc7}}, {{0x9, 0x5, 0xd, 0x2, 0x600, 0x3, 0x10, 0x82, [@generic={0xda, 0xb, "9789df3f6a7e1123684b8233869305ba525f9ca09b7100e410a76e49fe72647a05eb2640d9d493b72be9b1b907072b54fbcd839eeb0ef5a60fa82f7c675f2c7813f4002eb9ff14f7f2652c404cc3ecaf09398d0230f8801644006e403a2cd43e386fb6752ac0d21433de8948494515c59af753fbc100ec747364e72ece43ba277d8275ace6635f4164229985a86b7daff9bc25b0d3d6f925c992d52700c0acb95f608baaaf090e5043d4b30c249e4bef288bb2861fc49b11b705bbc78d2dba0078b2e33501b94c02558c17847a0a02019ab6b5429dde22b9"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x11, 0x6}]}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x1c, 0x40, 0x4}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x10, 0x18, 0x93}}, {{0x9, 0x5, 0xe, 0x2, 0x8, 0x5, 0x0, 0xc, [@generic={0x41, 0x24, "cdb5a4c8f5746e6d899c69a954af22f343647b31e7c7f55dc49fb164feb2a3c00c4f7feec1355c60ed38e79dc0344c1ada2cd990cccf712b376d9cb5c74654"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x6, 0x6, 0x3}}, {{0x9, 0x5, 0x6, 0x3, 0x200, 0x2, 0x3, 0x3, [@generic={0x6c, 0xe, "e1fb80615cf13bf3f3d344de8fd7098e6ddef68d862d6cb9270560efa1ccf3f929bd9c3e6bf41994b473598953eecb4c76389ba6052d019944bab22f1f51175509c0840ab45f49de651dab2b08369e8a9a2701c0bc3c49a9dabb49eb3c29130b7f6fb6524fffec0df73d"}]}}]}}, {{0x9, 0x4, 0x9a, 0x2, 0xd, 0x76, 0xea, 0x75, 0x0, [], [{{0x9, 0x5, 0x2, 0xc, 0x8, 0x6, 0x0, 0xf6, [@generic={0x9, 0x0, "91f1e8ebdcdb42"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x1ff}]}}, {{0x9, 0x5, 0x2, 0x1a, 0x20, 0xff, 0xe, 0x6, [@generic={0x5f, 0xc, "293591c4d1510e6ae9d0c0316cdb91df82b8de60442c1978579cd43428124f1c05bc8d31eb45e3ae2f9fab62717648f1c4f2374af390787b36f2ab1cb3e32b10c378c618c2bb93c33e2ca0d2f315ff03395cfc1b904aeba7cba379f1c1"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x400, 0x4, 0x1, 0x5, [@generic={0xa6, 0xf, "881a4bcd6c104064aa0014658328bfdc2c10136c50fe8c818299902156ab721eedc6a146ace390e388606edbd6f108d8ca2ce361ff773e5bae1c20ec1fe5e499f2717ad0d23ed07785044dfb813795bd66d082a75d4c306382dd400bdada9147cc64b879110c9b47cd847ed05dd62243d23bfc475812024b340a72369629d81d9b8509de04c26370daf08aebd91f517cd187f93075354fc00daadc10b15a9cc63be2a616"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x200, 0x7, 0xef, 0x2}}, {{0x9, 0x5, 0x4, 0x8, 0x650, 0x6, 0x2f, 0xb, [@generic={0x13, 0x11, "93ede21328da0b5bce248c70d73dd3d60e"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0x62, 0x6, 0x7a, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x7b}]}}, {{0x9, 0x5, 0x9, 0x8, 0x8, 0x5f, 0x0, 0x49, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x100}, @generic={0x5d, 0xb, "32aef2f51de5242de9242fda73bb903ff16d1daa968b36d642eb1124f0189260aad504d89a170dd7741a3138101b16fbc7f09e3eb3029e20aff1f2d4b5c7c9cf7695e34de514e5ee4a578937d02af9bf38e039b4883de14dfb6ae7"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x20, 0x0, 0xca, 0x2, [@generic={0x4d, 0x11, "d569c65655077162cce83f3ceeb0ede5b276c538b0de3b6d59a53cfe19e5673c4614073ba077e9354784678cbb82ef824381f751ebb75ec334497db543891f93d6311ecd8dd8f99588ded9"}, @generic={0x69, 0x8, "9370352875f3a4494228755c2d27ba827d85275d1d96ecf9624ad2910996a5c68772c2d6440a8b17f4583a0fd3e90a7fed3b1f8cd7966ef793e44ad08c744bbf30748fae067bd85b421ca015013d228251a60a04670cc74bc3dc50d37992d7e830b3f5ba032dbd"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x0, 0x4, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x10, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xfd, 0x5}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x1, 0x0, 0x40, [@generic={0x88, 0x22, "0bb9866400e3811426850578d057042c956312fe22553c7b12845b8c4ad9630ae621313e48638340b65831ab249bd062afc2f266d08e3a07c126e4d7b48e364cc29d557dbf380743e54bd1f071de12bfad2dd3faa966bc62d6b8721d34d02a51b42a5aba58fd6b3c31e3891a812282886b5a8b3b1a433c96af0c294cd34d845ef2592b46feb4"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x3ff}]}}, {{0x9, 0x5, 0xf, 0x1d, 0x200, 0x9, 0x10, 0xff}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0xa, 0x4, 0x1, [@generic={0x29, 0x6, "52ec7f1d54192f4aa88ee252884f07f99391c601cdec360cd66b2a035765593eee066c78e5d2cc"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x40, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x4}]}}]}}, {{0x9, 0x4, 0x28, 0x7f, 0x4, 0xff, 0x5, 0x10, 0x0, [], [{{0x9, 0x5, 0xc, 0x3, 0x200, 0x7, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc8, 0x1}]}}, {{0x9, 0x5, 0x1, 0x3, 0x8, 0x8, 0x3, 0x5}}, {{0x9, 0x5, 0x80, 0xc, 0x400, 0x48, 0xea, 0x0, [@generic={0xd8, 0x30, "41c28ae6b387fc108fab5f06d66c6decb52e6af4ca3b043ecf6105822cc552ca2b64271556271269eb18ca8f88c2f97aa59cee1392714cf732d06006e1392081d688ffcb396c3e71899e61b7d4c7ffed437bbc2e1062727f81013754309198a69ba80b05595f47d5e21034d44fa24943c85693b4ec53c0a7628989bfa4437d122757c789b6ce4c2fc21117d230ff892e38167567ba186d926e59997df23f70362b75889a0bd9e28326ec97e300077292d1e6fa611b30e77afd608b2e133426cefb48d46ac3a7da6614c6722416d2d5e539abf83d0441"}, @generic={0xb1, 0xc, "47d721805b447e5939b0415c96ed0aecc4d18be19fe4103339a098a5e4a5edec5dd211a8e20bb050e6d7095154579ce9da87764eebd7b9000b5a03e9d7a6058ac21e5fd639c9d17195369ebfb2e57bee48344fdf51d93612e81ad8fbdf5f08d19b590989f8c15899c34d8b41b429b29defca18640177f560f169e35455414d2a0e35c453fb27a7dae614558f9e4ea080e4a18a935e1d168627de4ecb8ef267bd809a6efe98318752aea8d8b57509dc"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0xad}}]}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0xe, &(0x7f0000000000)=@string={0xe, 0x3, "c7eda543c600452d2cc94137"}}, {0x7, &(0x7f00000001c0)=@string={0x7, 0x3, "3e640c7bdf"}}]}) 657.842039ms ago: executing program 1 (id=4971): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x280340, 0xad, 0x2}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000057000/0x2000)=nil, 0x2000, 0x2, 0x50, r1, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) 540.79491ms ago: executing program 1 (id=4972): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00') getdents(r0, &(0x7f0000000000)=""/182, 0xb6) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000002c0)={r1, &(0x7f0000000040)='/dev/amidi#\x00', 0x480000, &(0x7f0000000200)={@_ha_fsid={[0x2, 0x9]}, {0x3, 0x8, 0x401, 0x40000}}, 0x38, &(0x7f0000000240), &(0x7f0000000280)=0xc6}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) r2 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0xc0245720, 0x0) ioctl$CEC_TRANSMIT(r2, 0xc0386105, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 447.71833ms ago: executing program 3 (id=4973): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000006c0)=@userptr={0x0, 0x1, 0x4, 0xffffff7f, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7b964305"}, 0x0, 0x2, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r2, 0x6f2d, 0x0) 271.188638ms ago: executing program 3 (id=4974): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="ed2e8b672e890f030329d095abaa960000b890a4f084ef66bafc0c6d8f29126966ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x75}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85220000c}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r3 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x202000) 99.348174ms ago: executing program 3 (id=4975): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0x2) write$dsp(r1, &(0x7f00000001c0)='B', 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4) read$char_usb(r2, &(0x7f0000000040)=""/236, 0xec) close(r1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x3, 0x3, 0x8, 0x1, 0xa8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000880)={r4, 0xffffffffffffffff, 0x31, 0x0, @val=@tcx}, 0x1c) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x34, r7, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4090}, 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x10f602, 0x52abe154ad664fa4) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000000)) 0s ago: executing program 3 (id=4976): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x6, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x40085507, &(0x7f0000000000)=0x10) sendto$inet(r4, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) recvfrom(r4, &(0x7f00000022c0)=""/4089, 0xff9, 0x42, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x3ca1, 0x1f480, 0x0, 0x399}) add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r7, 0x4b20, 0x6933, 0x50, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201) kernel console output (not intermixed with test programs): attempt power cycle [ 1406.672407][T20520] usb 5-1: new low-speed USB device number 48 using dummy_hcd [ 1406.705150][T20520] usb 5-1: device descriptor read/8, error -71 [ 1406.962643][T20520] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 1407.034266][T20520] usb 5-1: device descriptor read/8, error -71 [ 1407.056459][T14881] usb 10-1: USB disconnect, device number 31 [ 1407.162794][T20520] usb usb5-port1: unable to enumerate USB device [ 1407.367235][ T7860] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1407.462554][T14881] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1407.532617][ T7860] usb 4-1: Using ep0 maxpacket: 32 [ 1407.570631][ T7860] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1407.594921][ T7860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.619757][ T7860] usb 4-1: Product: syz [ 1407.634187][ T7860] usb 4-1: Manufacturer: syz [ 1407.646018][T14881] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1407.672420][ T7860] usb 4-1: SerialNumber: syz [ 1407.674546][T14881] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1407.710304][T14881] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1407.736764][T14881] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1407.754174][T14881] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.765588][ T7860] usb 4-1: config 0 descriptor?? [ 1407.778274][T14881] usb 10-1: Product: syz [ 1407.789104][T23880] syzkaller0: entered promiscuous mode [ 1407.794134][T14881] usb 10-1: Manufacturer: syz [ 1407.809719][T14881] usb 10-1: SerialNumber: syz [ 1407.822211][T23880] syzkaller0: entered allmulticast mode [ 1407.847419][T14881] usb 10-1: config 0 descriptor?? [ 1407.865517][T23878] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1407.882671][T23878] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1407.899465][T14881] usb 10-1: ucan: probing device on interface #0 [ 1408.110008][T14881] usb 10-1: ucan: could not read protocol version, ret=-71 [ 1408.134979][T14881] usb 10-1: ucan: probe failed; try to update the device firmware [ 1408.165243][T14881] usb 10-1: USB disconnect, device number 32 [ 1408.210193][ T7860] airspy 4-1:0.0: Board ID: 00 [ 1408.232842][ T7860] airspy 4-1:0.0: Firmware version: [ 1408.772975][T20520] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1408.814997][T23876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1408.839410][T23876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.074066][T20520] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1409.088295][T20520] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.099035][T20520] usb 5-1: Product: syz [ 1409.104845][T20520] usb 5-1: Manufacturer: syz [ 1409.109632][T20520] usb 5-1: SerialNumber: syz [ 1409.201790][T20520] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1409.230281][ T808] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1409.280297][ T7860] airspy 4-1:0.0: Registered as swradio24 [ 1409.297166][ T7860] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1409.492570][T14881] usb 4-1: USB disconnect, device number 5 [ 1409.935999][T20520] usb 5-1: USB disconnect, device number 50 [ 1410.205680][T23899] FAULT_INJECTION: forcing a failure. [ 1410.205680][T23899] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.232368][T23899] CPU: 1 UID: 0 PID: 23899 Comm: syz.3.4559 Tainted: G L syzkaller #0 PREEMPT(full) [ 1410.232404][T23899] Tainted: [L]=SOFTLOCKUP [ 1410.232412][T23899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1410.232424][T23899] Call Trace: [ 1410.232433][T23899] [ 1410.232443][T23899] dump_stack_lvl+0xe8/0x150 [ 1410.232473][T23899] should_fail_ex+0x412/0x560 [ 1410.232504][T23899] should_failslab+0xa8/0x100 [ 1410.232533][T23899] ? skb_clone+0x212/0x3a0 [ 1410.232560][T23899] kmem_cache_alloc_noprof+0x87/0x650 [ 1410.232595][T23899] ? __netlink_lookup+0xc6/0x8b0 [ 1410.232628][T23899] skb_clone+0x212/0x3a0 [ 1410.232659][T23899] __netlink_deliver_tap+0x404/0x850 [ 1410.232697][T23899] ? netlink_deliver_tap+0x2e/0x1b0 [ 1410.232726][T23899] netlink_deliver_tap+0x19c/0x1b0 [ 1410.232753][T23899] netlink_unicast+0x730/0x8e0 [ 1410.232789][T23899] netlink_sendmsg+0x813/0xb40 [ 1410.232826][T23899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1410.232856][T23899] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1410.232886][T23899] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1410.232918][T23899] ____sys_sendmsg+0x972/0x9f0 [ 1410.232944][T23899] ? __might_fault+0xaf/0x130 [ 1410.232977][T23899] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1410.233014][T23899] ? import_iovec+0x73/0xa0 [ 1410.233048][T23899] ___sys_sendmsg+0x2a5/0x360 [ 1410.233074][T23899] ? __lock_acquire+0x6b5/0x2cf0 [ 1410.233103][T23899] ? __pfx____sys_sendmsg+0x10/0x10 [ 1410.233169][T23899] ? __fget_files+0x2a/0x420 [ 1410.233193][T23899] ? __fget_files+0x3a0/0x420 [ 1410.233229][T23899] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1410.233260][T23899] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1410.233297][T23899] ? __pfx_ksys_write+0x10/0x10 [ 1410.233334][T23899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.233358][T23899] do_syscall_64+0x15f/0xf80 [ 1410.233383][T23899] ? trace_irq_disable+0x3b/0x140 [ 1410.233413][T23899] ? clear_bhb_loop+0x40/0x90 [ 1410.233440][T23899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.233461][T23899] RIP: 0033:0x7f316f99cdd9 [ 1410.233483][T23899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1410.233501][T23899] RSP: 002b:00007f3170844028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1410.233525][T23899] RAX: ffffffffffffffda RBX: 00007f316fc15fa0 RCX: 00007f316f99cdd9 [ 1410.233541][T23899] RDX: 0000000004000020 RSI: 00002000000035c0 RDI: 0000000000000003 [ 1410.233554][T23899] RBP: 00007f3170844090 R08: 0000000000000000 R09: 0000000000000000 [ 1410.233567][T23899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1410.233588][T23899] R13: 00007f316fc16038 R14: 00007f316fc15fa0 R15: 00007f316fd3fa48 [ 1410.233622][T23899] [ 1410.262424][T23899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4559'. [ 1410.312652][ T808] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1410.312885][ T808] ath9k_htc: Failed to initialize the device [ 1410.318777][T20520] usb 5-1: ath9k_htc: USB layer deinitialized [ 1410.982866][T14881] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1411.152526][T14881] usb 4-1: Using ep0 maxpacket: 8 [ 1411.167888][T14881] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1411.185096][T14881] usb 4-1: language id specifier not provided by device, defaulting to English [ 1411.197073][T14881] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1411.212369][T14881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.230711][T14881] usb 4-1: Product: ҝ태㠉ꐕꐠ⊳퉙쁱빳릡糡 [ 1411.242953][T14881] usb 4-1: Manufacturer: 쩾蜚핬⵷㠃㟱뚵툿 [ 1411.249325][T20520] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1411.261568][T14881] usb 4-1: SerialNumber: syz [ 1411.420135][T20520] usb 5-1: Using ep0 maxpacket: 32 [ 1411.451332][T20520] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1411.462714][T20520] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1411.521764][T14881] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1411.539959][T20520] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1411.550256][T20520] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.558660][T20520] usb 5-1: Product: syz [ 1411.563478][T20520] usb 5-1: Manufacturer: syz [ 1411.568150][T20520] usb 5-1: SerialNumber: syz [ 1411.667548][T14881] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1411.769806][T14881] usb 4-1: USB disconnect, device number 6 [ 1411.863669][T22858] udevd[22858]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1411.877082][T20520] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1411.887187][T20520] usb 5-1: unit 255 not found! [ 1412.009980][T20520] usb 5-1: disable ehci-hcd to run US-144 [ 1412.046167][T20520] usb 5-1: disable ehci-hcd to run US-144 [ 1412.062711][T20520] usb 5-1: USB disconnect, device number 51 [ 1412.198114][T22858] udevd[22858]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1412.452921][T14881] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1412.621366][T14881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1412.642473][T14881] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1412.662225][T14881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.698184][T14881] usb 4-1: config 0 descriptor?? [ 1412.713715][T23907] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1412.840345][T23911] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4563'. [ 1413.193318][T14881] hid-picolcd 0003:04D8:C002.004F: unknown main item tag 0x0 [ 1413.206980][T14881] hid-picolcd 0003:04D8:C002.004F: unknown main item tag 0x0 [ 1413.214881][T14881] hid-picolcd 0003:04D8:C002.004F: unknown main item tag 0x0 [ 1413.224845][T14881] hid-picolcd 0003:04D8:C002.004F: unknown main item tag 0x0 [ 1413.260895][T14881] hid-picolcd 0003:04D8:C002.004F: unknown main item tag 0x0 [ 1413.268759][T14881] hid-picolcd 0003:04D8:C002.004F: unknown main item tag 0x0 [ 1413.277212][T14881] hid-picolcd 0003:04D8:C002.004F: unknown main item tag 0x0 [ 1413.285005][T14881] hid-picolcd 0003:04D8:C002.004F: unknown main item tag 0x0 [ 1413.316625][T14881] hid-picolcd 0003:04D8:C002.004F: unknown main item tag 0x0 [ 1413.324694][T14881] hid-picolcd 0003:04D8:C002.004F: unknown main item tag 0x0 [ 1413.361454][T14881] hid-picolcd 0003:04D8:C002.004F: item fetching failed at offset 481/483 [ 1413.371598][T14881] hid-picolcd 0003:04D8:C002.004F: device report parse failed [ 1413.404901][T14881] hid-picolcd 0003:04D8:C002.004F: probe with driver hid-picolcd failed with error -22 [ 1413.419940][T23907] input: syz1 as /devices/virtual/input/input162 [ 1413.575316][T14881] usb 4-1: USB disconnect, device number 7 [ 1417.912943][T21826] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1418.084367][T21826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1418.096049][T21826] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1418.108943][T21826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.150049][T21826] usb 4-1: config 0 descriptor?? [ 1418.184308][T23921] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1418.629593][T21826] hid_parser_main: 430 callbacks suppressed [ 1418.629617][T21826] hid-picolcd 0003:04D8:C002.0050: unknown main item tag 0x0 [ 1418.662943][T21826] hid-picolcd 0003:04D8:C002.0050: unknown main item tag 0x0 [ 1418.678600][T21826] hid-picolcd 0003:04D8:C002.0050: unknown main item tag 0x0 [ 1418.692434][T21826] hid-picolcd 0003:04D8:C002.0050: unknown main item tag 0x0 [ 1418.709800][T21826] hid-picolcd 0003:04D8:C002.0050: unknown main item tag 0x0 [ 1418.733676][T21826] hid-picolcd 0003:04D8:C002.0050: unknown main item tag 0x0 [ 1418.743991][T21826] hid-picolcd 0003:04D8:C002.0050: unknown main item tag 0x0 [ 1418.763090][T21826] hid-picolcd 0003:04D8:C002.0050: unknown main item tag 0x0 [ 1418.782167][T21826] hid-picolcd 0003:04D8:C002.0050: unknown main item tag 0x0 [ 1418.790062][T21826] hid-picolcd 0003:04D8:C002.0050: unknown main item tag 0x0 [ 1418.828063][T21826] hid-picolcd 0003:04D8:C002.0050: reserved main item tag 0xd [ 1418.985298][T21826] hid-picolcd 0003:04D8:C002.0050: No report with id 0x11 found [ 1419.007304][T21826] usb 4-1: USB disconnect, device number 8 [ 1419.598828][ T30] audit: type=1326 audit(1777654409.160:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23924 comm="syz.3.4566" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316f99cdd9 code=0x7ffc0000 [ 1419.600047][T23925] fuse: Unknown parameter '' [ 1419.636892][ T30] audit: type=1326 audit(1777654409.160:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23924 comm="syz.3.4566" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316f99cdd9 code=0x7ffc0000 [ 1419.665127][ T30] audit: type=1326 audit(1777654409.160:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23924 comm="syz.3.4566" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f316f99bc47 code=0x7ffc0000 [ 1419.690707][ T30] audit: type=1326 audit(1777654409.160:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23924 comm="syz.3.4566" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f316f99e04a code=0x7ffc0000 [ 1419.718426][ T30] audit: type=1326 audit(1777654409.230:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23924 comm="syz.3.4566" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316f99cdd9 code=0x7ffc0000 [ 1419.746492][ T30] audit: type=1326 audit(1777654409.230:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23924 comm="syz.3.4566" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316f99cdd9 code=0x7ffc0000 [ 1419.771701][ T30] audit: type=1326 audit(1777654409.260:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23924 comm="syz.3.4566" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f316f99cdd9 code=0x7ffc0000 [ 1419.823976][ T30] audit: type=1326 audit(1777654409.260:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23924 comm="syz.3.4566" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316f99cdd9 code=0x7ffc0000 [ 1419.849040][ T30] audit: type=1326 audit(1777654409.260:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23924 comm="syz.3.4566" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f316f99cdd9 code=0x7ffc0000 [ 1419.876982][ T30] audit: type=1326 audit(1777654409.260:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23924 comm="syz.3.4566" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316f99cdd9 code=0x7ffc0000 [ 1420.384109][T23930] input: syz0 as /devices/virtual/input/input163 [ 1420.577810][T23937] netlink: 'syz.3.4570': attribute type 3 has an invalid length. [ 1420.599900][T23937] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4570'. [ 1420.873491][ T808] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1420.882406][T21826] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1420.942555][T20520] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1421.033270][T21826] usb 10-1: Using ep0 maxpacket: 16 [ 1421.043678][T21826] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1421.044400][ T808] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.076125][ T808] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1421.076819][T21826] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.131118][ T808] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1421.131129][T21826] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1421.134438][T21826] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1421.141219][T20520] usb 5-1: Using ep0 maxpacket: 32 [ 1421.171387][ T808] usb 4-1: config 1 interface 1 altsetting 157 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 1421.186204][ T808] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1421.195930][T20520] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1421.202582][T21826] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.205694][T20520] usb 5-1: config 0 has no interface number 0 [ 1421.221875][ T808] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1421.234217][T21826] usb 10-1: Product: syz [ 1421.238654][T21826] usb 10-1: Manufacturer: syz [ 1421.244468][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.255720][T21826] usb 10-1: SerialNumber: syz [ 1421.264842][T20520] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1421.277005][ T808] usb 4-1: Product: syz [ 1421.283185][T20520] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.291937][ T808] usb 4-1: Manufacturer: syz [ 1421.301748][ T808] usb 4-1: SerialNumber: syz [ 1421.309818][T21826] usb 10-1: 0:2 : does not exist [ 1421.317378][T20520] usb 5-1: Product: syz [ 1421.335933][T20520] usb 5-1: Manufacturer: syz [ 1421.340821][ T808] usb 4-1: selecting invalid altsetting 0 [ 1421.352433][T20520] usb 5-1: SerialNumber: syz [ 1421.360299][ T808] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1421.381860][T20520] usb 5-1: config 0 descriptor?? [ 1421.403879][ T808] usb 4-1: selecting invalid altsetting 0 [ 1421.413004][T20520] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1421.425042][ T808] usbtest 4-1:1.1: probe with driver usbtest failed with error -22 [ 1421.606031][ T808] usb 4-1: USB disconnect, device number 9 [ 1421.658578][T20520] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1421.708058][T20520] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1422.072407][ T808] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1422.115460][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1422.124242][T20520] usb 5-1: USB disconnect, device number 52 [ 1422.157439][T20520] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1422.209957][T23952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.219903][T20520] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1422.253218][T23952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.261975][T20520] quatech2 5-1:0.51: device disconnected [ 1422.268186][ T808] usb 4-1: Using ep0 maxpacket: 32 [ 1422.288879][ T808] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1422.319815][ T808] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1422.358868][ T808] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1422.385822][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.406969][ T808] usb 4-1: Product: syz [ 1422.418956][ T808] usb 4-1: Manufacturer: syz [ 1422.429654][ T808] usb 4-1: SerialNumber: syz [ 1423.032992][T14881] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1423.136904][T23960] [U] v [ 1423.219413][T14881] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.256535][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.261941][T14881] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1423.263453][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.300373][T23963] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4577'. [ 1423.305640][T14881] usb 5-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 1423.349747][T14881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.380400][T14881] usb 5-1: Product: syz [ 1423.390542][T14881] usb 5-1: Manufacturer: syz [ 1423.400642][T14881] usb 5-1: SerialNumber: syz [ 1423.536229][T23971] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4580'. [ 1423.547126][T23971] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4580'. [ 1423.558971][T23971] netlink: 'syz.7.4580': attribute type 14 has an invalid length. [ 1423.567879][T23971] netlink: 'syz.7.4580': attribute type 11 has an invalid length. [ 1423.655550][T23972] netlink: 'syz.3.4579': attribute type 10 has an invalid length. [ 1423.785622][T23972] team0: Port device veth0_to_hsr added [ 1423.876921][T21826] usb 10-1: 1:0: failed to get current value for ch 0 (-22) [ 1423.964366][ T808] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1423.967629][T21826] usb 10-1: USB disconnect, device number 33 [ 1423.986110][ T808] usb 4-1: unit 255 not found! [ 1424.125876][ T808] usb 4-1: disable ehci-hcd to run US-144 [ 1424.147820][ T808] usb 4-1: disable ehci-hcd to run US-144 [ 1424.161092][ T808] usb 4-1: USB disconnect, device number 10 [ 1424.222896][T23946] udevd[23946]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1424.413644][T14881] usb 5-1: USB disconnect, device number 53 [ 1424.505302][T23958] udevd[23958]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1424.618504][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1424.618524][ T30] audit: type=1326 audit(1777654414.180:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.3.4583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f316f99ca6b code=0x7ffc0000 [ 1424.672718][ T808] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1424.693948][ T30] audit: type=1326 audit(1777654414.250:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.3.4583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f316f99ca6b code=0x7ffc0000 [ 1424.719206][ T30] audit: type=1326 audit(1777654414.250:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.3.4583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f316f99ca6b code=0x7ffc0000 [ 1424.744491][ T30] audit: type=1326 audit(1777654414.250:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.3.4583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f316f99ca6b code=0x7ffc0000 [ 1424.775905][ T30] audit: type=1326 audit(1777654414.340:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.3.4583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f316f99ca6b code=0x7ffc0000 [ 1424.852643][ T808] usb 4-1: Using ep0 maxpacket: 16 [ 1424.861546][ T30] audit: type=1326 audit(1777654414.420:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.3.4583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f316f99ca6b code=0x7ffc0000 [ 1424.863682][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.900895][ T30] audit: type=1326 audit(1777654414.420:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.3.4583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f316f99ca6b code=0x7ffc0000 [ 1424.902756][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1424.939688][ T808] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1424.963377][ T30] audit: type=1326 audit(1777654414.420:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.3.4583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f316f99ca6b code=0x7ffc0000 [ 1424.969224][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.017104][ T30] audit: type=1326 audit(1777654414.420:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.3.4583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f316f99ca6b code=0x7ffc0000 [ 1425.042816][T14881] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1425.071391][ T808] usb 4-1: config 0 descriptor?? [ 1425.108959][ T30] audit: type=1326 audit(1777654414.420:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.3.4583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f316f99ca6b code=0x7ffc0000 [ 1425.217605][T14881] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1425.235370][T14881] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1425.262774][T14881] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1425.306432][T14881] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 1425.316979][T14881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.342840][T14881] usb 5-1: Product: syz [ 1425.356596][T14881] usb 5-1: Manufacturer: syz [ 1425.371942][T14881] usb 5-1: SerialNumber: syz [ 1425.606211][T23986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.625695][T23986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.670919][T14881] usb 5-1: Can't get UAC3 power state for id 10 [ 1425.694697][T14881] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 1425.719002][T23982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.726866][T14881] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1425.743553][T23982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.753674][T14881] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1425.782328][T14881] usb 5-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 1425.872854][T21826] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1425.886298][ T808] usbhid 4-1:0.0: can't add hid device: -32 [ 1425.893263][ T808] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1426.022407][T21826] usb 10-1: Using ep0 maxpacket: 16 [ 1426.028313][T14881] usb 5-1: USB disconnect, device number 54 [ 1426.064175][T21826] usb 10-1: config 0 has no interfaces? [ 1426.124742][T21826] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1426.128182][T23922] udevd[23922]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1426.182777][T21826] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1426.216018][T21826] usb 10-1: Manufacturer: syz [ 1426.317942][T21826] usb 10-1: config 0 descriptor?? [ 1426.636770][T24003] netlink: 'syz.5.4589': attribute type 16 has an invalid length. [ 1426.676259][T24003] netlink: 'syz.5.4589': attribute type 17 has an invalid length. [ 1426.712732][T14881] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1426.890619][T14881] usb 5-1: Using ep0 maxpacket: 32 [ 1426.955663][T14881] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1427.007385][T14881] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1427.088005][T14881] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1427.109748][T14881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.173870][T14881] usb 5-1: Product: syz [ 1427.201933][T14881] usb 5-1: Manufacturer: syz [ 1427.222847][T14881] usb 5-1: SerialNumber: syz [ 1427.330522][T23994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1427.457186][T23994] 8021q: adding VLAN 0 to HW filter on device team0 [ 1427.489863][T14881] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1427.510378][T24014] netlink: 'syz.7.4591': attribute type 4 has an invalid length. [ 1427.533303][T14881] usb 5-1: unit 255 not found! [ 1427.599529][T23994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1427.650133][T14881] usb 5-1: disable ehci-hcd to run US-144 [ 1427.680917][T20520] usb 4-1: USB disconnect, device number 11 [ 1427.710771][T14881] usb 5-1: disable ehci-hcd to run US-144 [ 1427.783150][T14881] usb 5-1: USB disconnect, device number 55 [ 1427.891810][T23998] udevd[23998]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1428.397420][ T5695] usb 4-1: [UEAGLE-ATM] firmware is not available [ 1428.406387][ T10] usb 4-1: [UEAGLE-ATM] firmware is not available [ 1428.463099][T23994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1428.500832][T23994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1428.566133][T23994] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1428.592873][T23994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1428.644960][T23994] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1429.016884][T18545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.024124][T18545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1429.078562][T18545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.085931][T18545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1429.126393][T24041] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4594'. [ 1429.617570][ T808] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1429.802585][ T808] usb 4-1: Using ep0 maxpacket: 32 [ 1429.821053][ T808] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1429.839580][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.864033][ T808] usb 4-1: Product: syz [ 1429.873372][ T808] usb 4-1: Manufacturer: syz [ 1429.884940][ T808] usb 4-1: SerialNumber: syz [ 1429.911647][ T808] usb 4-1: config 0 descriptor?? [ 1429.928089][ T808] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1430.208745][T24042] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4594'. [ 1431.107432][T20520] usb 10-1: USB disconnect, device number 34 [ 1431.473547][T24060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1431.933372][ T808] gspca_ov534_9: reg_r err -110 [ 1432.223327][ T808] gspca_ov534_9: Unknown sensor 0000 [ 1432.223425][ T808] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 1432.298423][ T808] usb 4-1: USB disconnect, device number 12 [ 1432.693001][ T808] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1432.872515][ T808] usb 4-1: Using ep0 maxpacket: 32 [ 1432.892483][ T808] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1432.932431][ T808] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1432.974604][ T808] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1433.010489][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.037523][ T808] usb 4-1: Product: syz [ 1433.057495][ T808] usb 4-1: Manufacturer: syz [ 1433.070029][ T808] usb 4-1: SerialNumber: syz [ 1433.326444][ T808] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1433.365724][ T808] usb 4-1: unit 255 not found! [ 1433.628163][ T808] usb 4-1: disable ehci-hcd to run US-144 [ 1433.665216][ T808] usb 4-1: disable ehci-hcd to run US-144 [ 1433.708119][ T808] usb 4-1: USB disconnect, device number 13 [ 1433.830122][T23998] udevd[23998]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1434.004172][ T5695] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 1434.196522][ T5695] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1434.246304][ T5695] usb 5-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1434.272511][ T5695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.309139][ T5695] usb 5-1: config 0 descriptor?? [ 1434.354780][ T5695] dvb-usb: found a 'TeVii S662' in warm state. [ 1434.387311][ T5695] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1434.407476][ T5695] dvb-usb: bulk message failed: -22 (2/0) [ 1434.471486][ T5695] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1434.574379][ T5695] dvb-usb: TeVii S662 error while loading driver (-19) [ 1434.621748][ T5695] usb 5-1: USB disconnect, device number 56 [ 1434.792733][T14881] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1434.954527][T14881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1434.984597][T14881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1434.996846][T24105] binder: 24104:24105 ioctl c0306201 200000001040 returned -14 [ 1435.010805][T14881] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1435.057538][T14881] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1435.088052][T14881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.123324][T14881] usb 4-1: config 0 descriptor?? [ 1435.574164][T24103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.601547][T24103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.661130][T24121] tipc: Enabled bearer , priority 0 [ 1435.673606][T14881] plantronics 0003:047F:FFFF.0051: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1435.697440][T24121] syzkaller0: entered promiscuous mode [ 1435.715889][T24121] syzkaller0: entered allmulticast mode [ 1435.873750][T24121] tipc: Resetting bearer [ 1435.907640][T14881] usb 4-1: USB disconnect, device number 14 [ 1435.933548][T24120] tipc: Resetting bearer [ 1436.010090][T24120] tipc: Disabling bearer [ 1436.457020][ T808] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1436.622519][ T808] usb 5-1: Using ep0 maxpacket: 32 [ 1436.644781][ T808] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1436.662472][ T808] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1436.686276][ T808] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1436.702354][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.710435][ T808] usb 5-1: Product: syz [ 1436.716096][ T808] usb 5-1: Manufacturer: syz [ 1436.720781][ T808] usb 5-1: SerialNumber: syz [ 1436.949288][ T808] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1436.972998][ T808] usb 5-1: unit 255 not found! [ 1437.044746][ T808] usb 5-1: disable ehci-hcd to run US-144 [ 1437.069729][ T808] usb 5-1: disable ehci-hcd to run US-144 [ 1437.089794][ T808] usb 5-1: USB disconnect, device number 57 [ 1437.181663][T23998] udevd[23998]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1437.408880][T24133] syzkaller1: entered promiscuous mode [ 1437.422388][T24133] syzkaller1: entered allmulticast mode [ 1437.692382][ T808] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1437.862934][ T808] usb 4-1: Using ep0 maxpacket: 16 [ 1437.883365][ T808] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1437.912324][ T808] usb 4-1: config 0 has no interface number 0 [ 1437.931290][ T808] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1437.963387][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.012647][ T808] usb 4-1: Product: syz [ 1438.032346][ T808] usb 4-1: Manufacturer: syz [ 1438.038137][ T808] usb 4-1: SerialNumber: syz [ 1438.104303][ T808] usb 4-1: config 0 descriptor?? [ 1438.339978][ T808] uvcvideo 4-1:0.105: probe with driver uvcvideo failed with error -22 [ 1438.372517][ T808] usb 4-1: USB disconnect, device number 15 [ 1438.647175][T24148] loop7: detected capacity change from 0 to 16384 [ 1439.010492][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 1439.010513][ T30] audit: type=1326 audit(1777654428.570:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24151 comm="syz.5.4625" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb54019cdd9 code=0x0 [ 1439.082846][ C0] blk_print_req_error: 10 callbacks suppressed [ 1439.082884][ C0] I/O error, dev loop7, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1439.102300][ C0] I/O error, dev loop7, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1439.111683][ C0] buffer_io_error: 10 callbacks suppressed [ 1439.111701][ C0] Buffer I/O error on dev loop7, logical block 3, async page read [ 1439.132003][T24149] loop7: detected capacity change from 16384 to 0 [ 1439.139149][ C0] I/O error, dev loop7, sector 4992 op 0x0:(READ) flags 0x80700 phys_seg 15 prio class 2 [ 1439.800206][T24167] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4629'. [ 1439.926531][T24170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4630'. [ 1440.539630][T24182] netlink: 'syz.5.4634': attribute type 46 has an invalid length. [ 1440.965448][T24186] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1441.422335][ T808] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 1441.582575][ T808] usb 4-1: device descriptor read/64, error -71 [ 1441.852591][ T808] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1442.012891][ T808] usb 4-1: device descriptor read/64, error -71 [ 1442.143425][ T808] usb usb4-port1: attempt power cycle [ 1442.503378][ T808] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1442.544676][ T808] usb 4-1: device descriptor read/8, error -71 [ 1442.782955][T14881] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 1442.803900][ T808] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1442.874989][ T808] usb 4-1: device descriptor read/8, error -71 [ 1442.985377][T14881] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1443.003542][ T808] usb usb4-port1: unable to enumerate USB device [ 1443.010291][T14881] usb 5-1: not running at top speed; connect to a high speed hub [ 1443.043756][T14881] usb 5-1: config 8 has an invalid interface number: 3 but max is 0 [ 1443.063409][T14881] usb 5-1: config 8 has no interface number 0 [ 1443.084329][T14881] usb 5-1: config 8 interface 3 has no altsetting 0 [ 1443.101616][T14881] usb 5-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=1d.22 [ 1443.122641][T14881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.142817][T14881] usb 5-1: Product: syz [ 1443.152380][T14881] usb 5-1: Manufacturer: syz [ 1443.163975][T14881] usb 5-1: SerialNumber: syz [ 1443.434741][T24201] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4639'. [ 1443.495265][T24201] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4639'. [ 1443.584446][T24218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4639'. [ 1444.400379][T14881] gspca_main: pac7311-2.14.0 probing 093a:2603 [ 1444.436041][T14881] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 1444.474703][T14881] pac7311 5-1:8.3: probe with driver pac7311 failed with error -71 [ 1444.515288][T14881] usb 5-1: USB disconnect, device number 58 [ 1444.883781][T24230] input: syz0 as /devices/virtual/input/input164 [ 1447.319033][T24257] vivid-007: ================= START STATUS ================= [ 1447.362573][T24257] vivid-007: Enable Output Cropping: true [ 1447.415022][T24257] vivid-007: Enable Output Composing: true [ 1447.440617][T24257] vivid-007: Enable Output Scaler: true [ 1447.462124][T24257] vivid-007: Tx RGB Quantization Range: Automatic [ 1447.482941][T24257] vivid-007: Transmit Mode: HDMI [ 1447.492721][T24257] vivid-007: Hotplug Present: 0x00000000 [ 1447.508705][T24257] vivid-007: RxSense Present: 0x00000000 [ 1447.529011][T24257] vivid-007: EDID Present: 0x00000000 [ 1447.542590][T24257] vivid-007: ================== END STATUS ================== [ 1448.072405][ T5695] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1448.233721][ T5695] usb 4-1: Using ep0 maxpacket: 16 [ 1448.250275][ T5695] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1448.272858][ T5695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.301686][ T5695] usb 4-1: config 0 descriptor?? [ 1448.331912][ T5695] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1449.169054][T24260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4656'. [ 1449.223895][ T5695] gspca_sonixj: reg_r err -71 [ 1449.228871][ T5695] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1449.285823][ T5695] usb 4-1: USB disconnect, device number 20 [ 1449.674753][ T5638] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1449.701108][ T5638] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1449.718224][ T5638] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1449.730984][ T5638] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1449.740699][ T5638] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1450.178157][T24289] netlink: 'syz.7.4666': attribute type 9 has an invalid length. [ 1450.275875][ T30] audit: type=1326 audit(1777654439.840:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.5.4664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54019cdd9 code=0x7ffc0000 [ 1450.332601][ T7839] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1450.369372][ T30] audit: type=1326 audit(1777654439.840:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.5.4664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54019cdd9 code=0x7ffc0000 [ 1450.469160][ T30] audit: type=1326 audit(1777654439.850:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.5.4664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb54019cdd9 code=0x7ffc0000 [ 1450.502603][ T7839] usb 4-1: Using ep0 maxpacket: 8 [ 1450.512687][ T7839] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.531371][ T7839] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 1450.540906][ T7839] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 1450.553020][ T7839] usb 4-1: Product: syz [ 1450.557504][ T7839] usb 4-1: Manufacturer: syz [ 1450.563022][ T7839] usb 4-1: SerialNumber: syz [ 1450.600379][ T7839] usb 4-1: config 0 descriptor?? [ 1450.631292][ T30] audit: type=1326 audit(1777654439.850:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.5.4664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54019cdd9 code=0x7ffc0000 [ 1450.667041][ T7839] gspca_main: conex-2.14.0 probing 0572:0041 [ 1450.757739][ T30] audit: type=1326 audit(1777654439.850:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.5.4664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fb54019cdd9 code=0x7ffc0000 [ 1450.845485][T24283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1450.864304][T24283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1450.926725][ T30] audit: type=1326 audit(1777654439.850:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.5.4664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54019cdd9 code=0x7ffc0000 [ 1451.054364][ T30] audit: type=1326 audit(1777654439.880:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.5.4664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb54019cdd9 code=0x7ffc0000 [ 1451.139344][ T30] audit: type=1326 audit(1777654439.880:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.5.4664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54019cdd9 code=0x7ffc0000 [ 1451.224119][ T30] audit: type=1326 audit(1777654439.880:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.5.4664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54019cdd9 code=0x7ffc0000 [ 1451.370223][ T30] audit: type=1326 audit(1777654439.890:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.5.4664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb54019cdd9 code=0x7ffc0000 [ 1451.493774][ T7839] usb 4-1: USB disconnect, device number 21 [ 1451.687087][T24278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.732832][T24278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.768063][T24278] bridge_slave_0: entered allmulticast mode [ 1451.804681][T24278] bridge_slave_0: entered promiscuous mode [ 1451.814143][ T5638] Bluetooth: hci6: command tx timeout [ 1451.890745][T24278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.916573][T24278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1451.947697][T24278] bridge_slave_1: entered allmulticast mode [ 1451.980120][T24278] bridge_slave_1: entered promiscuous mode [ 1452.155881][T24278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1452.201590][T24278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1452.322598][T14881] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1452.357242][T24278] team0: Port device team_slave_0 added [ 1452.379277][T24278] team0: Port device team_slave_1 added [ 1452.479667][T24278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1452.490775][T14881] usb 4-1: Using ep0 maxpacket: 32 [ 1452.505595][T24278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1452.563268][T14881] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1452.574397][T14881] usb 4-1: config 0 has no interface number 0 [ 1452.588455][T24278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1452.605635][T14881] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1452.615876][T14881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.627810][T24278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1452.635294][T14881] usb 4-1: Product: syz [ 1452.639824][T24278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1452.666734][T14881] usb 4-1: Manufacturer: syz [ 1452.672934][T14881] usb 4-1: SerialNumber: syz [ 1452.680000][T14881] usb 4-1: config 0 descriptor?? [ 1452.690878][T14881] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1452.708744][T24278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1452.860812][T24278] hsr_slave_0: entered promiscuous mode [ 1452.883680][T24278] hsr_slave_1: entered promiscuous mode [ 1452.896273][T24310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.910077][T24310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.927122][T24278] debugfs: 'hsr0' already exists in 'hsr' [ 1452.948149][T24278] Cannot create hsr debugfs directory [ 1452.957669][T14881] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1452.998586][T14881] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1453.550349][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1453.551538][T20520] usb 4-1: USB disconnect, device number 22 [ 1453.646700][T20520] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1453.705834][T20520] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1453.765545][T20520] quatech2 4-1:0.51: device disconnected [ 1453.894338][ T5638] Bluetooth: hci6: command tx timeout [ 1454.542387][T20520] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1454.572398][ T808] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1454.734404][T20520] usb 4-1: Using ep0 maxpacket: 16 [ 1454.769963][T20520] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1454.780653][ T808] usb 5-1: Using ep0 maxpacket: 32 [ 1454.800678][ T808] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1454.818232][T20520] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1454.842521][ T808] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1454.858364][T20520] usb 4-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 1454.897796][T20520] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.916307][ T808] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1454.939286][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.948164][T20520] usb 4-1: config 0 descriptor?? [ 1454.980986][ T808] usb 5-1: Product: syz [ 1454.996970][ T808] usb 5-1: Manufacturer: syz [ 1455.012542][ T808] usb 5-1: SerialNumber: syz [ 1455.263288][T14881] usb 4-1: USB disconnect, device number 23 [ 1455.322115][ T808] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1455.637315][ T808] usb 5-1: disable ehci-hcd to run US-144 [ 1455.687701][ T808] usb 5-1: USB disconnect, device number 59 [ 1455.983260][ T5638] Bluetooth: hci6: command tx timeout [ 1456.000152][T23998] udevd[23998]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1456.993243][ T7839] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1457.155608][ T7839] usb 4-1: not running at top speed; connect to a high speed hub [ 1457.186543][ T7839] usb 4-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 1457.226592][ T7839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.266552][ T7839] usb 4-1: Product: 叄؈癝䮛⡔嘮瑚쪗迓ഝ暴ষᠽ 쏫驡㫇翹寮攇齑뫖큁定閚軯궺륮 [ 1457.308422][ T7839] usb 4-1: Manufacturer: 扅뽈廏ꂤ綐섚㡀訄傇沕垬ꔗ냫莽쎼삥郴軽⌞縓֕ᝀ슴仑띷儺⠆왫湐例汕㵊迮䶥㇙믴譏녇邶㼤Ṫ鄒ௌ戸寁尕償軁꥾৫ગ忣쒦綩Ꚋ읒绔ᵅ먓孖థ㸆ڹᖁ輋￱闰欿ꬊ [ 1457.387510][ T7839] usb 4-1: SerialNumber: Љ [ 1457.561433][T24361] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1457.645188][T24351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1457.687156][T24351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1457.704273][T24361] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4681'. [ 1457.741657][T24278] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1457.787070][T24278] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1457.787869][ T7839] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1457.837651][T24278] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1457.878322][T24278] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1457.900008][T24278] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1457.943578][T24278] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1457.989176][T24278] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1458.019370][T24278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1458.052450][ T5638] Bluetooth: hci6: command tx timeout [ 1458.061688][ T7839] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1458.151381][ T7839] usb 4-1: USB disconnect, device number 24 [ 1458.269530][T23998] udevd[23998]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1458.483138][T24278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1458.574418][T24278] 8021q: adding VLAN 0 to HW filter on device team0 [ 1458.629932][T21282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1458.637250][T21282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1458.706338][T10897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1458.713831][T10897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1458.802804][ T5695] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 1458.977812][ T5695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1459.010687][ T5695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1459.048384][ T5695] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1459.049724][T24278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1459.070373][ T5695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.108918][ T5695] usb 4-1: config 0 descriptor?? [ 1459.351376][T24278] veth0_vlan: entered promiscuous mode [ 1459.409835][T24278] veth1_vlan: entered promiscuous mode [ 1459.578378][ T5695] hid_parser_main: 453 callbacks suppressed [ 1459.581552][ T5695] isku 0003:1E7D:319C.0052: unknown main item tag 0x0 [ 1459.614188][T24278] veth0_macvtap: entered promiscuous mode [ 1459.642154][ T5695] isku 0003:1E7D:319C.0052: unknown main item tag 0x0 [ 1459.668143][T24278] veth1_macvtap: entered promiscuous mode [ 1459.679394][ T5695] isku 0003:1E7D:319C.0052: unknown main item tag 0x0 [ 1459.707716][ T5695] isku 0003:1E7D:319C.0052: unknown main item tag 0x0 [ 1459.727754][ T5695] isku 0003:1E7D:319C.0052: unknown main item tag 0x0 [ 1459.759093][ T5695] isku 0003:1E7D:319C.0052: unknown main item tag 0x0 [ 1459.774381][T24381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.800233][ T5695] isku 0003:1E7D:319C.0052: unknown main item tag 0x0 [ 1459.811602][T24381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.853272][T20520] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 1459.868644][T24278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1459.886086][ T5695] isku 0003:1E7D:319C.0052: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 1459.948958][ T5695] isku 0003:1E7D:319C.0052: couldn't init struct isku_device [ 1459.978249][T24278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1460.030684][ T5695] isku 0003:1E7D:319C.0052: couldn't install keyboard [ 1460.090558][T20520] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1460.120426][T18545] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.140933][ T5695] isku 0003:1E7D:319C.0052: probe with driver isku failed with error -32 [ 1460.142052][T20520] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1460.208384][T18545] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.238166][ T5695] usb 4-1: USB disconnect, device number 25 [ 1460.284898][T20520] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1460.326639][T18545] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.335869][T20520] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 156, setting to 64 [ 1460.389484][T18545] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.403279][T20520] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1460.477308][T20520] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1460.526611][T20520] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.571715][T20520] usb 5-1: Product: syz [ 1460.643052][T20520] usb 5-1: Manufacturer: syz [ 1460.683965][T20520] usb 5-1: SerialNumber: syz [ 1460.756424][T24393] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1460.832114][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1460.969225][T20520] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input166 [ 1461.219981][T18545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1461.309812][T18545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1461.486280][T18545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1461.525068][T18545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1462.153538][ T808] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1462.353016][ T808] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1462.415130][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.442394][ T808] usb 2-1: Product: syz [ 1462.460999][ T808] usb 2-1: Manufacturer: syz [ 1462.473605][ T808] usb 2-1: SerialNumber: syz [ 1462.497552][ T808] usb 2-1: config 0 descriptor?? [ 1462.541686][ T808] ch341 2-1:0.0: ch341-uart converter detected [ 1462.817363][ T808] usb 2-1: failed to receive control message: -71 [ 1462.857630][ T808] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1462.921383][ T808] usb 2-1: USB disconnect, device number 9 [ 1462.976273][ T808] ch341 2-1:0.0: device disconnected [ 1463.385764][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1463.582761][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1463.606680][ T24] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1463.637636][ T24] usb 4-1: config 0 has no interface number 0 [ 1463.678038][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1463.720863][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.764074][ T24] usb 4-1: Product: syz [ 1463.782936][ T24] usb 4-1: Manufacturer: syz [ 1463.809880][ T24] usb 4-1: SerialNumber: syz [ 1463.868601][ T24] usb 4-1: config 0 descriptor?? [ 1464.267133][T20520] imon:send_packet: packet tx failed (-71) [ 1464.322493][T20520] imon 5-1:155.0: panel buttons/knobs setup failed [ 1464.333386][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1464.366194][T20520] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1464.409334][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1464.428264][T20520] (id 0x00) [ 1464.489957][T24447] tipc: Started in network mode [ 1464.518500][T24447] tipc: Node identity e6ba08207655, cluster identity 4711 [ 1464.579083][T24447] tipc: Enabled bearer , priority 0 [ 1464.635958][T24450] syzkaller0: entered promiscuous mode [ 1464.683382][T20520] rc_core: IR keymap rc-imon-pad not found [ 1464.690449][T24450] syzkaller0: entered allmulticast mode [ 1464.699758][T20520] Registered IR keymap rc-empty [ 1464.730169][T20520] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1464.767299][T24447] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4693'. [ 1464.770161][T20520] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1464.784029][T24456] fuse: Bad value for 'fd' [ 1464.814706][T24447] tipc: Resetting bearer [ 1464.867942][T24445] tipc: Resetting bearer [ 1464.878809][T20520] imon:send_packet: packet tx failed (-71) [ 1464.933273][T20520] imon 5-1:155.0: remote input dev register failed [ 1464.951914][T20520] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 1464.984946][T24445] tipc: Disabling bearer [ 1465.058519][T20520] imon 5-1:155.0: unable to initialize intf0, err 0 [ 1465.100274][T20520] imon:imon_probe: failed to initialize context! [ 1465.128777][T20520] imon 5-1:155.0: unable to register, err -19 [ 1465.171975][T20520] usb 5-1: USB disconnect, device number 60 [ 1465.673495][T24469] tap0: tun_chr_ioctl cmd 1074812118 [ 1466.087779][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -61 [ 1466.129848][ T24] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 1466.432772][ T24] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1466.602395][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1466.616720][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1466.668694][ T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1466.702409][ T24] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1466.712514][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.720712][ T24] usb 5-1: Product: syz [ 1466.725665][ T24] usb 5-1: Manufacturer: syz [ 1466.730399][ T24] usb 5-1: SerialNumber: syz [ 1466.796725][T24497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1466.842865][T24497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1466.897642][T24497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1466.927705][T24497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1466.992188][ T24] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1467.002322][T20520] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1467.167077][T20520] usb 2-1: device descriptor read/64, error -71 [ 1467.205640][ T24] usb 5-1: disable ehci-hcd to run US-144 [ 1467.231567][ T24] usb 5-1: USB disconnect, device number 61 [ 1467.420320][T23998] udevd[23998]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1467.458156][T24508] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1467.607157][T21826] usb 4-1: USB disconnect, device number 26 [ 1467.712825][T20520] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1467.735847][T24513] fuse: Bad value for 'fd' [ 1467.792761][T24519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4708'. [ 1467.873985][T20520] usb 2-1: device descriptor read/64, error -71 [ 1468.002930][T20520] usb usb2-port1: attempt power cycle [ 1468.362329][T20520] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1468.403646][T24536] fuse: Bad value for 'fd' [ 1468.407205][T20520] usb 2-1: device descriptor read/8, error -71 [ 1468.682393][T20520] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1468.766438][T20520] usb 2-1: device descriptor read/8, error -71 [ 1468.781880][T24544] netlink: 'syz.4.4713': attribute type 1 has an invalid length. [ 1468.891170][T24547] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4713'. [ 1468.912845][T20520] usb usb2-port1: unable to enumerate USB device [ 1469.803634][T20520] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1469.983889][T20520] usb 5-1: Using ep0 maxpacket: 32 [ 1469.994188][T20520] usb 5-1: config 1 interface 1 altsetting 33 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1470.022825][T20520] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1470.035700][T20520] usb 5-1: config 1 interface 1 has no altsetting 1 [ 1470.050207][T20520] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1470.071571][T20520] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.106514][T20520] usb 5-1: Product: syz [ 1470.123847][T20520] usb 5-1: Manufacturer: syz [ 1470.134865][T20520] usb 5-1: SerialNumber: syz [ 1470.262677][ T29] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1470.445947][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 1470.454647][T20520] usb 5-1: 1:33 : UAC_AS_GENERAL descriptor not found [ 1470.488115][ T29] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1470.518118][T20520] usb 5-1: unit 255 not found! [ 1470.528018][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.564399][ T29] usb 4-1: Product: syz [ 1470.578457][ T29] usb 4-1: Manufacturer: syz [ 1470.591603][ T29] usb 4-1: SerialNumber: syz [ 1470.643567][ T29] usb 4-1: config 0 descriptor?? [ 1470.682038][ T29] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1470.735348][T24581] fuse: Bad value for 'fd' [ 1470.831064][T20520] usb 5-1: disable ehci-hcd to run US-144 [ 1470.902148][T20520] usb 5-1: disable ehci-hcd to run US-144 [ 1470.966039][T20520] usb 5-1: USB disconnect, device number 62 [ 1471.272197][T23998] udevd[23998]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1472.125724][ T29] gspca_topro: reg_w err -71 [ 1472.183567][ T29] gspca_topro: Sensor soi763a [ 1472.239219][ T29] usb 4-1: USB disconnect, device number 27 [ 1475.399761][T24680] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 1475.443979][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035fa9c00: rx timeout, send abort [ 1475.944972][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803d269400: rx timeout, send abort [ 1475.955697][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035fa9c00: abort rx timeout. Force session deactivation [ 1475.982597][T20520] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1476.205005][T20520] usb 5-1: Using ep0 maxpacket: 8 [ 1476.234376][T20520] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1476.269775][T20520] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 1476.288724][T20520] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.311230][T20520] usb 5-1: config 4 has no interface number 0 [ 1476.347823][T20520] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1476.367887][T20520] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.453904][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803d269400: abort rx timeout. Force session deactivation [ 1476.544522][T21826] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1476.709487][T21826] usb 4-1: Using ep0 maxpacket: 8 [ 1476.796659][T21826] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1476.831071][T21826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1476.907158][T21826] usb 4-1: Product: syz [ 1476.927883][T21826] usb 4-1: Manufacturer: syz [ 1476.943241][T21826] usb 4-1: SerialNumber: syz [ 1476.971333][T21826] usb 4-1: config 0 descriptor?? [ 1476.998829][T21826] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1477.319899][T21826] gspca_sn9c2028: read1 error 0 [ 1477.866335][T21826] gspca_sn9c2028: read1 error -110 [ 1477.897816][T21826] gspca_sn9c2028: read1 error -32 [ 1477.932697][T21826] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -32 [ 1478.002989][T21826] usb 4-1: USB disconnect, device number 28 [ 1478.429108][T20520] uvcvideo 5-1:4.147: probe with driver uvcvideo failed with error -22 [ 1478.475685][T20520] usb 5-1: USB disconnect, device number 63 [ 1479.258610][T24732] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4751'. [ 1479.307829][T24732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4751'. [ 1479.486283][T24738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4751'. [ 1479.792472][ T5695] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1479.954052][ T5695] usb 5-1: device descriptor read/64, error -71 [ 1480.084931][T21282] bridge_slave_1: left allmulticast mode [ 1480.110822][T21282] bridge_slave_1: left promiscuous mode [ 1480.133588][T21282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.203404][T21282] bridge_slave_0: left allmulticast mode [ 1480.233168][ T5695] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1480.238724][T21282] bridge_slave_0: left promiscuous mode [ 1480.259481][T21282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.404970][ T5695] usb 5-1: device descriptor read/64, error -71 [ 1480.549899][ T5695] usb usb5-port1: attempt power cycle [ 1480.962818][ T5695] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1481.043882][ T5695] usb 5-1: device descriptor read/8, error -71 [ 1481.322939][ T5695] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1481.381166][ T5695] usb 5-1: device descriptor read/8, error -71 [ 1481.459541][T21282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1481.520113][ T5695] usb usb5-port1: unable to enumerate USB device [ 1481.579070][T21282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1481.618692][T21282] bond0 (unregistering): Released all slaves [ 1481.665708][T21282] bond1 (unregistering): Released all slaves [ 1482.317796][T24788] netlink: 'syz.3.4759': attribute type 6 has an invalid length. [ 1482.414837][T24788] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4759'. [ 1483.102382][ T24] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1483.352589][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1483.388367][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1483.520803][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1483.568695][ T24] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1483.604874][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.638815][ T24] usb 5-1: Product: syz [ 1483.703889][ T24] usb 5-1: Manufacturer: syz [ 1483.744963][ T24] usb 5-1: SerialNumber: syz [ 1483.773726][ T24] usb 5-1: config 0 descriptor?? [ 1483.790002][T21282] hsr_slave_0: left promiscuous mode [ 1483.866188][T21282] hsr_slave_1: left promiscuous mode [ 1483.897713][T21282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1483.940522][T21282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1483.992920][T21282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1484.028212][T21282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1484.070616][ T24] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input168 [ 1484.332198][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1484.362040][ T24] imon:send_packet: packet tx failed (-71) [ 1484.403859][ T24] imon 5-1:0.0: panel buttons/knobs setup failed [ 1484.611380][T24831] netlink: zone id is out of range [ 1484.640180][T24831] netlink: zone id is out of range [ 1484.685360][T24831] netlink: zone id is out of range [ 1484.698703][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.708442][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.723915][ T24] rc_core: IR keymap rc-imon-pad not found [ 1484.747428][ T24] Registered IR keymap rc-empty [ 1484.765673][T24831] netlink: zone id is out of range [ 1484.779100][ T24] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1484.798579][T24831] netlink: zone id is out of range [ 1484.824791][T24831] netlink: zone id is out of range [ 1484.857126][ T24] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1484.884247][T24831] netlink: zone id is out of range [ 1484.894853][ T24] imon:send_packet: packet tx failed (-71) [ 1484.906096][T24831] netlink: zone id is out of range [ 1484.951095][T24831] netlink: zone id is out of range [ 1484.959518][ T24] imon 5-1:0.0: remote input dev register failed [ 1484.981547][T24831] netlink: zone id is out of range [ 1484.994901][ T24] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 1485.265014][ T24] imon 5-1:0.0: unable to initialize intf0, err 0 [ 1485.295720][ T24] imon:imon_probe: failed to initialize context! [ 1485.325574][ T24] imon 5-1:0.0: unable to register, err -19 [ 1485.395916][ T24] usb 5-1: USB disconnect, device number 68 [ 1485.782418][ T24] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1485.975512][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1486.005640][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1486.048658][ T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1486.157306][ T24] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1486.191321][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.215491][ T24] usb 5-1: Product: syz [ 1486.228975][ T24] usb 5-1: Manufacturer: syz [ 1486.256327][T21282] team0 (unregistering): Port device team_slave_1 removed [ 1486.272416][ T24] usb 5-1: SerialNumber: syz [ 1486.371997][T21282] team0 (unregistering): Port device team_slave_0 removed [ 1486.558596][ T24] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1486.718351][ T24] usb 5-1: disable ehci-hcd to run US-144 [ 1486.747291][ T24] usb 5-1: USB disconnect, device number 69 [ 1486.945186][T23998] udevd[23998]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1487.570536][T24855] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4775'. [ 1487.654343][ T29] usb 5-1: new low-speed USB device number 70 using dummy_hcd [ 1487.795537][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1487.852803][ T29] usb 5-1: Invalid ep0 maxpacket: 64 [ 1487.971626][ T24] usb 2-1: config 0 has an invalid interface number: 15 but max is 0 [ 1488.014308][ T24] usb 2-1: config 0 has no interface number 0 [ 1488.022131][ T29] usb 5-1: new low-speed USB device number 71 using dummy_hcd [ 1488.041751][ T24] usb 2-1: config 0 interface 15 has no altsetting 0 [ 1488.082957][ T24] usb 2-1: New USB device found, idVendor=19d2, idProduct=ff58, bcdDevice=36.5e [ 1488.116010][T24868] netlink: 'syz.7.4777': attribute type 1 has an invalid length. [ 1488.119634][T21282] IPVS: stop unused estimator thread 0... [ 1488.127143][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.177029][ T24] usb 2-1: Product: syz [ 1488.185378][ T24] usb 2-1: Manufacturer: syz [ 1488.193870][ T24] usb 2-1: SerialNumber: syz [ 1488.208803][ T24] usb 2-1: config 0 descriptor?? [ 1488.214487][ T29] usb 5-1: Invalid ep0 maxpacket: 64 [ 1488.227666][ T29] usb usb5-port1: attempt power cycle [ 1488.234075][T24875] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4777'. [ 1488.456991][T24878] macvlan2: entered promiscuous mode [ 1488.464781][ T24] option 2-1:0.15: GSM modem (1-port) converter detected [ 1488.481365][T24873] xt_TCPMSS: Only works on TCP SYN packets [ 1488.500351][ T24] usb 2-1: USB disconnect, device number 14 [ 1488.512189][ T24] option 2-1:0.15: device disconnected [ 1488.530246][T24878] macvlan2: entered allmulticast mode [ 1488.569591][T24878] bond5: entered promiscuous mode [ 1488.605081][T24878] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1488.621080][ T29] usb 5-1: new low-speed USB device number 72 using dummy_hcd [ 1488.665808][ T29] usb 5-1: Invalid ep0 maxpacket: 64 [ 1488.740406][T24878] bond5: left promiscuous mode [ 1488.822732][ T29] usb 5-1: new low-speed USB device number 73 using dummy_hcd [ 1488.901786][ T29] usb 5-1: Invalid ep0 maxpacket: 64 [ 1488.938645][ T29] usb usb5-port1: unable to enumerate USB device [ 1489.035202][T24890] netlink: 304 bytes leftover after parsing attributes in process `syz.5.4781'. [ 1489.384404][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1490.852524][T24922] kAFS: unable to lookup cell '' [ 1490.871517][T24922] kAFS: unable to lookup cell '(,c' [ 1491.013012][ T29] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1491.183048][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 1491.199864][ T29] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1491.234391][ T29] usb 4-1: config 0 has no interface number 0 [ 1491.265033][ T29] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1491.320203][ T29] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1491.376180][ T29] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1491.403454][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.438044][ T29] usb 4-1: Product: syz [ 1491.457129][ T29] usb 4-1: Manufacturer: syz [ 1491.475713][ T29] usb 4-1: SerialNumber: syz [ 1491.524375][ T29] usb 4-1: config 0 descriptor?? [ 1491.544892][T24920] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1491.573618][T24920] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1491.816098][T24920] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1491.847248][T24920] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1491.890616][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1492.285674][ T29] asix 4-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 1492.354628][ T29] asix 4-1:0.251: probe with driver asix failed with error -524 [ 1492.494189][ T29] usb 4-1: USB disconnect, device number 29 [ 1493.097448][T24941] FAULT_INJECTION: forcing a failure. [ 1493.097448][T24941] name failslab, interval 1, probability 0, space 0, times 0 [ 1493.144894][T24941] CPU: 1 UID: 0 PID: 24941 Comm: syz.5.4790 Tainted: G L syzkaller #0 PREEMPT(full) [ 1493.144930][T24941] Tainted: [L]=SOFTLOCKUP [ 1493.144938][T24941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1493.144950][T24941] Call Trace: [ 1493.144958][T24941] [ 1493.144968][T24941] dump_stack_lvl+0xe8/0x150 [ 1493.144999][T24941] should_fail_ex+0x412/0x560 [ 1493.145032][T24941] should_failslab+0xa8/0x100 [ 1493.145067][T24941] __kmalloc_noprof+0xe8/0x760 [ 1493.145095][T24941] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1493.145129][T24941] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1493.145159][T24941] ? tomoyo_domain+0xd7/0x130 [ 1493.145192][T24941] ? tomoyo_path_number_perm+0x219/0x630 [ 1493.145217][T24941] tomoyo_path_number_perm+0x246/0x630 [ 1493.145245][T24941] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1493.145267][T24941] ? __lock_acquire+0x6b5/0x2cf0 [ 1493.145349][T24941] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1493.145397][T24941] ? __fget_files+0x2a/0x420 [ 1493.145427][T24941] ? __fget_files+0x2a/0x420 [ 1493.145450][T24941] ? __fget_files+0x3a0/0x420 [ 1493.145474][T24941] ? __fget_files+0x2a/0x420 [ 1493.145503][T24941] security_file_ioctl+0xc3/0x2a0 [ 1493.145528][T24941] __se_sys_ioctl+0x47/0x170 [ 1493.145557][T24941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.145581][T24941] do_syscall_64+0x15f/0xf80 [ 1493.145604][T24941] ? trace_irq_disable+0x3b/0x140 [ 1493.145634][T24941] ? clear_bhb_loop+0x40/0x90 [ 1493.145660][T24941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.145682][T24941] RIP: 0033:0x7fb54019cdd9 [ 1493.145703][T24941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1493.145722][T24941] RSP: 002b:00007fb5410c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1493.145746][T24941] RAX: ffffffffffffffda RBX: 00007fb540416090 RCX: 00007fb54019cdd9 [ 1493.145768][T24941] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1493.145781][T24941] RBP: 00007fb5410c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1493.145794][T24941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1493.145808][T24941] R13: 00007fb540416128 R14: 00007fb540416090 R15: 00007fb54053fa48 [ 1493.145843][T24941] [ 1493.148431][T24941] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1494.496026][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1494.607354][T24975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4797'. [ 1495.262144][T24985] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4798'. [ 1496.062554][ T5695] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1496.146423][T24975] netlink: 'syz.1.4797': attribute type 11 has an invalid length. [ 1496.181814][T24975] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.4797'. [ 1496.231478][T24975] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4797'. [ 1496.255413][T25007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4801'. [ 1496.277228][ T5695] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1496.322526][ T5695] usb 4-1: config 114 has an invalid interface number: 240 but max is 0 [ 1496.360088][ T5695] usb 4-1: config 114 has no interface number 0 [ 1496.403691][ T5695] usb 4-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 1496.459035][ T5695] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 1496.499510][ T5695] usb 4-1: config 114 interface 240 has no altsetting 0 [ 1496.606677][ T5695] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 1496.656352][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.702688][ T5695] usb 4-1: Product: syz [ 1496.720503][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1496.725655][ T5695] usb 4-1: Manufacturer: syz [ 1496.758402][ T5695] usb 4-1: SerialNumber: syz [ 1496.840757][T24996] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1497.141593][ T5695] ir_usb 4-1:114.240: required endpoints missing [ 1497.195843][ T5695] usb 4-1: USB disconnect, device number 30 [ 1497.288317][T25023] FAULT_INJECTION: forcing a failure. [ 1497.288317][T25023] name failslab, interval 1, probability 0, space 0, times 0 [ 1497.313357][T25023] CPU: 0 UID: 0 PID: 25023 Comm: syz.1.4805 Tainted: G L syzkaller #0 PREEMPT(full) [ 1497.313394][T25023] Tainted: [L]=SOFTLOCKUP [ 1497.313400][T25023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1497.313417][T25023] Call Trace: [ 1497.313426][T25023] [ 1497.313436][T25023] dump_stack_lvl+0xe8/0x150 [ 1497.313467][T25023] should_fail_ex+0x412/0x560 [ 1497.313496][T25023] should_failslab+0xa8/0x100 [ 1497.313528][T25023] __kmalloc_noprof+0xe8/0x760 [ 1497.313556][T25023] ? tomoyo_encode+0x28b/0x550 [ 1497.313589][T25023] tomoyo_encode+0x28b/0x550 [ 1497.313623][T25023] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1497.313653][T25023] ? tomoyo_domain+0xd7/0x130 [ 1497.313685][T25023] ? tomoyo_path_number_perm+0x219/0x630 [ 1497.313709][T25023] tomoyo_path_number_perm+0x246/0x630 [ 1497.313736][T25023] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1497.313759][T25023] ? __lock_acquire+0x6b5/0x2cf0 [ 1497.313799][T25023] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1497.313846][T25023] ? __fget_files+0x2a/0x420 [ 1497.313874][T25023] ? __fget_files+0x2a/0x420 [ 1497.313898][T25023] ? __fget_files+0x3a0/0x420 [ 1497.313920][T25023] ? __fget_files+0x2a/0x420 [ 1497.313949][T25023] security_file_ioctl+0xc3/0x2a0 [ 1497.313974][T25023] __se_sys_ioctl+0x47/0x170 [ 1497.314004][T25023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.314027][T25023] do_syscall_64+0x15f/0xf80 [ 1497.314051][T25023] ? trace_irq_disable+0x3b/0x140 [ 1497.314081][T25023] ? clear_bhb_loop+0x40/0x90 [ 1497.314107][T25023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.314128][T25023] RIP: 0033:0x7f9990f9cdd9 [ 1497.314149][T25023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1497.314167][T25023] RSP: 002b:00007f9991ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1497.314199][T25023] RAX: ffffffffffffffda RBX: 00007f9991216090 RCX: 00007f9990f9cdd9 [ 1497.314216][T25023] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1497.314229][T25023] RBP: 00007f9991ec8090 R08: 0000000000000000 R09: 0000000000000000 [ 1497.314242][T25023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1497.314254][T25023] R13: 00007f9991216128 R14: 00007f9991216090 R15: 00007f999133fa48 [ 1497.314288][T25023] [ 1497.315899][T25023] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1497.942427][ T7858] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1498.110186][ T7858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1498.142278][ T7858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1498.172326][ T7858] usb 5-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 1498.202342][ T7858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.231571][ T7858] usb 5-1: config 0 descriptor?? [ 1498.798937][T25048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1498.835390][T25030] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4807'. [ 1498.854067][T25048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1498.856761][ T7858] usbhid 5-1:0.0: can't add hid device: -71 [ 1498.914018][ T7858] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1498.947158][ T7858] usb 5-1: USB disconnect, device number 74 [ 1499.049376][T21826] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1499.237720][T21826] usb 2-1: Using ep0 maxpacket: 32 [ 1499.253962][T21826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1499.278222][T21826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1499.290863][T21826] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1499.304751][T21826] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1499.319854][T21826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.350153][T21826] usb 2-1: config 0 descriptor?? [ 1499.500919][T25058] netlink: 'syz.4.4813': attribute type 1 has an invalid length. [ 1499.575671][T21826] usbhid 2-1:0.0: can't add hid device: -71 [ 1499.590225][T21826] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1499.620808][T25058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4813'. [ 1499.646882][T21826] usb 2-1: USB disconnect, device number 15 [ 1499.695682][T25058] macvlan2: entered promiscuous mode [ 1499.702371][T25058] macvlan2: entered allmulticast mode [ 1499.728602][T25058] bond7: entered promiscuous mode [ 1499.743293][T25058] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1499.824749][T25058] bond7: left promiscuous mode [ 1500.039535][T25066] bond4: (slave lo): Releasing backup interface [ 1500.047937][T25066] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1500.153990][T25066] bridge_slave_0: left allmulticast mode [ 1500.179228][T25066] bridge_slave_0: left promiscuous mode [ 1500.207121][T25066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.241090][T25068] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4815'. [ 1500.282473][T25066] bridge_slave_1: left allmulticast mode [ 1500.303620][T25066] bridge_slave_1: left promiscuous mode [ 1500.320984][T25066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.379495][T25066] .`: (slave bond_slave_0): Releasing backup interface [ 1500.421976][T25066] .`: (slave bond_slave_1): Releasing backup interface [ 1500.495549][T25066] team0: Port device team_slave_0 removed [ 1500.559955][T25066] team0: Port device team_slave_1 removed [ 1500.579122][T25066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1500.600029][T25066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1500.627704][T25066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1500.648029][T25066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1500.706021][T25066] team0: Port device veth0_to_hsr removed [ 1500.730431][T25066] net_ratelimit: 2 callbacks suppressed [ 1500.730456][T25066] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1501.394368][T21826] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1501.574521][T21826] usb 2-1: Using ep0 maxpacket: 32 [ 1501.596897][T21826] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1501.605767][T21826] usb 2-1: config 0 has no interface number 0 [ 1501.621909][T21826] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1501.643640][T21826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.663756][T21826] usb 2-1: Product: syz [ 1501.668952][T21826] usb 2-1: Manufacturer: syz [ 1501.676692][T21826] usb 2-1: SerialNumber: syz [ 1501.695641][T21826] usb 2-1: config 0 descriptor?? [ 1501.711199][T21826] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1501.720592][T21826] usb 2-1: selecting invalid altsetting 1 [ 1501.727112][T21826] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1501.747187][T21826] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1501.772964][T21826] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1501.781384][T21826] usb 2-1: media controller created [ 1501.809759][T21826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1502.123229][T21826] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1502.200796][T21826] usb 2-1: USB disconnect, device number 16 [ 1502.832621][T21826] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1503.036868][T21826] usb 4-1: config 0 has no interfaces? [ 1503.052399][T21826] usb 4-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 1503.061882][T21826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.070555][T21826] usb 4-1: Product: syz [ 1503.075737][T21826] usb 4-1: Manufacturer: syz [ 1503.081592][T21826] usb 4-1: SerialNumber: syz [ 1503.109759][T21826] usb 4-1: config 0 descriptor?? [ 1503.426979][T14881] usb 4-1: USB disconnect, device number 31 [ 1503.464662][T25115] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1503.585328][T25115] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4828'. [ 1506.292552][ T7858] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1506.472841][ T7858] usb 2-1: Using ep0 maxpacket: 8 [ 1506.495259][ T7858] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1506.536082][ T7858] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1506.569160][ T7858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.616675][ T7858] usb 2-1: Product: syz [ 1506.643063][ T7858] usb 2-1: Manufacturer: syz [ 1506.655627][ T7858] usb 2-1: SerialNumber: syz [ 1506.701250][ T7858] usb 2-1: config 0 descriptor?? [ 1506.734422][T25152] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4837'. [ 1506.735972][ T7858] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1506.797399][ T7858] usb 2-1: setting power ON [ 1506.830937][ T7858] dvb-usb: bulk message failed: -22 (2/0) [ 1506.861525][ T7858] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1506.909188][ T7858] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1506.960748][ T7858] usb 2-1: media controller created [ 1507.039524][ T7858] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1507.108306][T25152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4837'. [ 1507.209572][ T7858] usb 2-1: selecting invalid altsetting 6 [ 1507.240089][ T7858] usb 2-1: digital interface selection failed (-22) [ 1507.268653][ T7858] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1507.296592][T25151] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4837'. [ 1507.337156][ T7858] usb 2-1: setting power OFF [ 1507.371452][ T7858] dvb-usb: bulk message failed: -22 (2/0) [ 1507.407991][ T7858] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1507.446797][ T7858] (NULL device *): no alternate interface [ 1507.665102][ T7858] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1507.733064][ T7858] usb 2-1: USB disconnect, device number 17 [ 1507.919308][T25162] ALSA: mixer_oss: invalid OSS volume '' [ 1508.743253][ T29] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1508.798903][T25183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1508.847991][T25183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1508.941171][ T29] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1508.979781][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.006560][ T29] usb 2-1: config 0 descriptor?? [ 1510.117119][T25208] netlink: 'syz.5.4849': attribute type 1 has an invalid length. [ 1510.250957][T25208] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1510.438603][T25217] netlink: 'syz.3.4850': attribute type 21 has an invalid length. [ 1511.585953][ T10] usb 2-1: USB disconnect, device number 18 [ 1512.317041][T25252] syzkaller0: entered promiscuous mode [ 1512.337929][T25252] syzkaller0: entered allmulticast mode [ 1513.045040][T25281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4863'. [ 1513.073270][T25281] netlink: 'syz.5.4863': attribute type 30 has an invalid length. [ 1513.093994][T25281] netlink: 'syz.5.4863': attribute type 29 has an invalid length. [ 1513.134052][T25281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4863'. [ 1513.383118][ T10] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 1513.543402][ T10] usb 4-1: device descriptor read/64, error -71 [ 1513.802547][ T10] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 1513.952662][ T10] usb 4-1: device descriptor read/64, error -71 [ 1514.094753][ T10] usb usb4-port1: attempt power cycle [ 1514.483063][ T10] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 1514.556549][ T10] usb 4-1: device descriptor read/8, error -71 [ 1514.791378][T25321] syzkaller0: entered allmulticast mode [ 1514.826474][ T10] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1514.879002][ T29] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1514.898255][ T10] usb 4-1: device descriptor read/8, error -71 [ 1515.032957][ T10] usb usb4-port1: unable to enumerate USB device [ 1515.103789][ T29] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1515.144812][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.210693][ T29] usb 2-1: config 0 descriptor?? [ 1515.481421][ T29] usbhid 2-1:0.0: can't add hid device: -71 [ 1515.507473][T25332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1515.519702][ T29] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1515.540712][T25332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1515.564504][ T29] usb 2-1: USB disconnect, device number 19 [ 1516.062453][ T29] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1516.227109][ T29] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1516.259460][T25340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4875'. [ 1516.270051][ T29] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1516.279451][T25340] netlink: 'syz.5.4875': attribute type 30 has an invalid length. [ 1516.301413][T25340] netlink: 'syz.5.4875': attribute type 29 has an invalid length. [ 1516.302379][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.323812][T25340] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4875'. [ 1516.352832][T25340] FAULT_INJECTION: forcing a failure. [ 1516.352832][T25340] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.360302][ T29] usb 2-1: config 0 descriptor?? [ 1516.402419][T25340] CPU: 1 UID: 0 PID: 25340 Comm: syz.5.4875 Tainted: G L syzkaller #0 PREEMPT(full) [ 1516.402457][T25340] Tainted: [L]=SOFTLOCKUP [ 1516.402465][T25340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1516.402478][T25340] Call Trace: [ 1516.402488][T25340] [ 1516.402498][T25340] dump_stack_lvl+0xe8/0x150 [ 1516.402530][T25340] should_fail_ex+0x412/0x560 [ 1516.402564][T25340] should_failslab+0xa8/0x100 [ 1516.402595][T25340] ? security_inode_alloc+0x39/0x310 [ 1516.402624][T25340] kmem_cache_alloc_noprof+0x87/0x650 [ 1516.402661][T25340] security_inode_alloc+0x39/0x310 [ 1516.402692][T25340] inode_init_always_gfp+0x9c8/0xda0 [ 1516.402725][T25340] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1516.402747][T25340] alloc_inode+0x82/0x1b0 [ 1516.402772][T25340] new_inode+0x22/0x170 [ 1516.402803][T25340] __debugfs_create_file+0xb8/0x400 [ 1516.402840][T25340] debugfs_create_file_full+0x3f/0x60 [ 1516.402877][T25340] ref_tracker_dir_debugfs+0x197/0x360 [ 1516.402906][T25340] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1516.402964][T25340] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 1516.403000][T25340] ? alloc_netdev_mqs+0xa8/0x1210 [ 1516.403035][T25340] ? __raw_spin_lock_init+0x45/0x100 [ 1516.403068][T25340] alloc_netdev_mqs+0x274/0x1210 [ 1516.403097][T25340] ? __pfx_vxlan_setup+0x10/0x10 [ 1516.403132][T25340] rtnl_create_link+0x31f/0xd70 [ 1516.403180][T25340] rtnl_newlink_create+0x277/0xb70 [ 1516.403207][T25340] ? __pfx___nla_validate_parse+0x10/0x10 [ 1516.403248][T25340] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1516.403279][T25340] ? __pfx___mutex_lock+0x10/0x10 [ 1516.403319][T25340] ? ns_capable+0x89/0xe0 [ 1516.403346][T25340] rtnl_newlink+0x166a/0x1bb0 [ 1516.403389][T25340] ? __pfx_rtnl_newlink+0x10/0x10 [ 1516.403420][T25340] ? __lock_acquire+0x6b5/0x2cf0 [ 1516.403446][T25340] ? __lock_acquire+0x6b5/0x2cf0 [ 1516.403480][T25340] ? unwind_next_frame+0xa6/0x2550 [ 1516.403515][T25340] ? unwind_next_frame+0xa6/0x2550 [ 1516.403544][T25340] ? is_bpf_text_address+0x26/0x2b0 [ 1516.403579][T25340] ? is_bpf_text_address+0x26/0x2b0 [ 1516.403607][T25340] ? __lock_acquire+0x6b5/0x2cf0 [ 1516.403634][T25340] ? kernel_text_address+0xa5/0xe0 [ 1516.403665][T25340] ? __kernel_text_address+0xd/0x30 [ 1516.403693][T25340] ? unwind_get_return_address+0x4d/0x90 [ 1516.403718][T25340] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1516.403747][T25340] ? arch_stack_walk+0xfb/0x150 [ 1516.403782][T25340] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1516.403821][T25340] ? __pfx_rtnl_newlink+0x10/0x10 [ 1516.403845][T25340] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1516.403868][T25340] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 1516.403895][T25340] ? netlink_sendmsg+0x5d4/0xb40 [ 1516.403922][T25340] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1516.403946][T25340] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1516.403972][T25340] ? __lock_acquire+0x6b5/0x2cf0 [ 1516.404009][T25340] netlink_rcv_skb+0x232/0x4b0 [ 1516.404036][T25340] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1516.404061][T25340] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1516.404102][T25340] ? netlink_deliver_tap+0x2e/0x1b0 [ 1516.404128][T25340] ? netlink_deliver_tap+0x2e/0x1b0 [ 1516.404161][T25340] netlink_unicast+0x75c/0x8e0 [ 1516.404206][T25340] netlink_sendmsg+0x813/0xb40 [ 1516.404243][T25340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1516.404274][T25340] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1516.404303][T25340] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1516.404335][T25340] ____sys_sendmsg+0x972/0x9f0 [ 1516.404363][T25340] ? __might_fault+0xaf/0x130 [ 1516.404398][T25340] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1516.404436][T25340] ? import_iovec+0x73/0xa0 [ 1516.404470][T25340] ___sys_sendmsg+0x2a5/0x360 [ 1516.404496][T25340] ? __lock_acquire+0x6b5/0x2cf0 [ 1516.404525][T25340] ? __pfx____sys_sendmsg+0x10/0x10 [ 1516.404594][T25340] ? __fget_files+0x2a/0x420 [ 1516.404617][T25340] ? __fget_files+0x3a0/0x420 [ 1516.404654][T25340] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1516.404685][T25340] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1516.404724][T25340] ? __pfx_ksys_write+0x10/0x10 [ 1516.404762][T25340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.404783][T25340] do_syscall_64+0x15f/0xf80 [ 1516.404807][T25340] ? trace_irq_disable+0x3b/0x140 [ 1516.404834][T25340] ? clear_bhb_loop+0x40/0x90 [ 1516.404858][T25340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.404878][T25340] RIP: 0033:0x7fb54019cdd9 [ 1516.404899][T25340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1516.404915][T25340] RSP: 002b:00007fb5410e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1516.404938][T25340] RAX: ffffffffffffffda RBX: 00007fb540415fa0 RCX: 00007fb54019cdd9 [ 1516.404954][T25340] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1516.404967][T25340] RBP: 00007fb5410e9090 R08: 0000000000000000 R09: 0000000000000000 [ 1516.404980][T25340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1516.404993][T25340] R13: 00007fb540416038 R14: 00007fb540415fa0 R15: 00007fb54053fa48 [ 1516.405029][T25340] [ 1516.902091][T25340] debugfs: out of free dentries, can not create file 'netdev@ffff888055814658' [ 1517.447440][ T29] plantronics 0003:047F:FFFF.0053: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1517.876752][T25352] bridge_slave_0: left allmulticast mode [ 1517.902115][T25352] bridge_slave_0: left promiscuous mode [ 1517.911747][T25353] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4877'. [ 1517.918531][T25352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.988665][T25352] bridge_slave_1: left allmulticast mode [ 1518.024388][T25352] bridge_slave_1: left promiscuous mode [ 1518.048484][T25352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.086608][T25352] team0: Port device team_slave_0 removed [ 1518.116461][T25352] team0: Port device team_slave_1 removed [ 1518.134497][T25352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1518.149007][T25352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1518.166483][T25352] team0: Port device veth0_to_hsr removed [ 1518.173989][T25352] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1518.181584][ C0] plantronics 0003:047F:FFFF.0053: Event data for report 0 was too short (4043 vs 2) [ 1518.230947][T25356] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4878'. [ 1518.393627][ T29] usb 2-1: USB disconnect, device number 20 [ 1518.613464][T14881] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 1518.775945][T14881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1518.787465][T14881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1518.799368][T14881] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1518.812749][T14881] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1518.822019][T14881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.835698][T14881] usb 4-1: config 0 descriptor?? [ 1518.851802][T25359] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 1519.327150][T14881] gt683r_led 0003:1770:FF00.0054: unknown main item tag 0x3 [ 1519.378810][T14881] gt683r_led 0003:1770:FF00.0054: unknown main item tag 0x4 [ 1519.443975][T14881] gt683r_led 0003:1770:FF00.0054: item fetching failed at offset 36/40 [ 1519.471900][T14881] gt683r_led 0003:1770:FF00.0054: hid parsing failed [ 1519.509437][T14881] gt683r_led 0003:1770:FF00.0054: probe with driver gt683r_led failed with error -22 [ 1519.972539][T25388] fuse: Unknown parameter 'ootmode' [ 1520.217795][ T29] usb 4-1: USB disconnect, device number 36 [ 1520.490821][T25398] netlink: 'syz.3.4888': attribute type 3 has an invalid length. [ 1520.581285][T25401] bond4: (slave lo): Releasing backup interface [ 1520.624071][T25401] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1520.658534][T25402] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4889'. [ 1520.718629][T25401] team0: left allmulticast mode [ 1520.740233][T25401] team_slave_1: left allmulticast mode [ 1520.763231][T25401] team0: left promiscuous mode [ 1520.784615][T25401] team_slave_1: left promiscuous mode [ 1520.802744][T25401] bridge0: port 3(team0) entered disabled state [ 1520.834052][T25401] bridge_slave_0: left allmulticast mode [ 1520.845611][T25401] bridge_slave_0: left promiscuous mode [ 1520.862798][T25401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1520.903993][T25401] bridge_slave_1: left allmulticast mode [ 1520.928676][T25401] bridge_slave_1: left promiscuous mode [ 1520.951705][T25401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1520.989778][T25401] bond0: (slave bond_slave_0): Releasing backup interface [ 1521.018511][T25401] bond0: (slave bond_slave_1): Releasing backup interface [ 1521.081846][T25401] team0: Port device team_slave_1 removed [ 1521.116464][T25401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1521.167942][T25401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1521.206489][T25401] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1521.675031][T25412] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4891'. [ 1521.695457][T25411] openvswitch: netlink: Message has 8 unknown bytes. [ 1521.712154][T25411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4892'. [ 1522.054706][T10897] wlan0: Trigger new scan to find an IBSS to join [ 1522.262521][ T29] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1522.283026][T20520] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1522.442361][T20520] usb 2-1: device descriptor read/64, error -71 [ 1522.462318][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 1522.481504][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1522.539502][ T29] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1522.588888][ T29] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1522.621438][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.641854][ T29] usb 5-1: Product: syz [ 1522.647693][ T29] usb 5-1: Manufacturer: syz [ 1522.655537][ T29] usb 5-1: SerialNumber: syz [ 1522.721413][T20520] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1522.866097][T20520] usb 2-1: device descriptor read/64, error -71 [ 1522.920499][ T29] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 1522.931030][ T29] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1522.993067][T20520] usb usb2-port1: attempt power cycle [ 1523.086692][ T29] usb 5-1: 2:1 : can't get High Capability descriptor [ 1523.288099][ T29] usb 5-1: USB disconnect, device number 75 [ 1523.353330][T20520] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1523.385623][T20520] usb 2-1: device descriptor read/8, error -71 [ 1523.653217][T20520] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1523.672371][ T24] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1523.680719][T20520] usb 2-1: device descriptor read/8, error -71 [ 1523.803030][T20520] usb usb2-port1: unable to enumerate USB device [ 1523.834251][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1523.858352][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1523.871092][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1523.884497][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1523.894162][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.906611][ T24] usb 4-1: config 0 descriptor?? [ 1524.170795][T25437] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1524.200466][T25437] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4901'. [ 1524.538998][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 1524.553918][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1524.574469][ T24] usb 4-1: USB disconnect, device number 37 [ 1525.298731][T25453] xt_hashlimit: size too large, truncated to 1048576 [ 1525.379223][T25455] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4906'. [ 1526.255238][T25467] netlink: 'syz.4.4908': attribute type 1 has an invalid length. [ 1526.266773][T25467] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4908'. [ 1526.318833][T25469] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1526.407839][T25469] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4909'. [ 1526.865595][T25478] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4912'. [ 1526.897095][T25477] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1526.999772][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1526.999794][ T30] audit: type=1326 audit(1777654516.560:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25479 comm="syz.7.4913" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaeff9cdd9 code=0x7ffc0000 [ 1527.031961][T21282] wlan0: Trigger new scan to find an IBSS to join [ 1527.100663][ T30] audit: type=1326 audit(1777654516.560:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25479 comm="syz.7.4913" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaeff9cdd9 code=0x7ffc0000 [ 1527.136781][T25472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4910'. [ 1527.208714][ T30] audit: type=1326 audit(1777654516.560:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25479 comm="syz.7.4913" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaeff9cdd9 code=0x7ffc0000 [ 1527.307440][T25472] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1527.346088][T25481] macvlan1: entered allmulticast mode [ 1527.349467][ T30] audit: type=1326 audit(1777654516.560:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25479 comm="syz.7.4913" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fbaeff9cdd9 code=0x7ffc0000 [ 1527.403788][T25481] veth1_vlan: entered allmulticast mode [ 1527.459684][ T30] audit: type=1326 audit(1777654516.560:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25479 comm="syz.7.4913" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaeff9cdd9 code=0x7ffc0000 [ 1527.543009][T25481] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 1527.585672][ T30] audit: type=1326 audit(1777654516.560:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25479 comm="syz.7.4913" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaeff9cdd9 code=0x7ffc0000 [ 1527.700385][ T30] audit: type=1326 audit(1777654516.570:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25479 comm="syz.7.4913" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaeff9cdd9 code=0x7ffc0000 [ 1527.729006][ T30] audit: type=1326 audit(1777654516.570:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25479 comm="syz.7.4913" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaeff9cdd9 code=0x7ffc0000 [ 1527.875632][ T30] audit: type=1326 audit(1777654516.570:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25479 comm="syz.7.4913" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbaeff5d60e code=0x7ffc0000 [ 1528.013454][T18545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1528.069595][ T30] audit: type=1326 audit(1777654516.570:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25479 comm="syz.7.4913" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaeff9cdd9 code=0x7ffc0000 [ 1528.154124][ T7858] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1528.253635][T25503] input: syz0 as /devices/virtual/input/input171 [ 1528.274244][T25504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4918'. [ 1528.394511][ T7858] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 1528.466125][ T7858] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1528.488515][ T7858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.534897][ T7858] usb 5-1: Product: syz [ 1528.549424][ T7858] usb 5-1: Manufacturer: syz [ 1528.562560][ T7858] usb 5-1: SerialNumber: syz [ 1528.795223][T25499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1528.867817][T25499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1528.925094][ T7858] usb 5-1: found format II with max.bitrate = 9, frame size=2 [ 1528.940511][T25513] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4921'. [ 1528.956144][ T7858] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1528.996900][ T7858] usb 5-1: found format II with max.bitrate = 9, frame size=2 [ 1529.024012][ T7858] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1529.063153][ T7858] usb 5-1: unit 4 not found! [ 1529.076319][T25516] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4921'. [ 1529.254934][ T7858] usb 5-1: USB disconnect, device number 76 [ 1529.524919][T23995] udevd[23995]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1529.967161][T25523] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1529.995975][T25527] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4924'. [ 1530.922531][T25546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4930'. [ 1531.429654][T25557] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4933'. [ 1531.478323][T25558] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4934'. [ 1531.603687][T25558] fuse: Bad value for 'group_id' [ 1531.625669][T25558] fuse: Bad value for 'group_id' [ 1531.818323][T25562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4935'. [ 1531.828314][T25562] netlink: 'syz.4.4935': attribute type 30 has an invalid length. [ 1531.844316][T25562] netlink: 'syz.4.4935': attribute type 29 has an invalid length. [ 1531.858226][T25562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4935'. [ 1532.298663][T25575] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1532.555112][T25581] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4942'. [ 1533.345110][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 1533.345132][ T30] audit: type=1326 audit(1777654522.910:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25603 comm="syz.1.4946" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9990f9cdd9 code=0x7ffc0000 [ 1533.393533][T25604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4946'. [ 1533.442665][ T30] audit: type=1326 audit(1777654522.940:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25603 comm="syz.1.4946" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9990f9cdd9 code=0x7ffc0000 [ 1533.543141][ T30] audit: type=1326 audit(1777654522.940:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25603 comm="syz.1.4946" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9990f9cdd9 code=0x7ffc0000 [ 1533.628783][ T30] audit: type=1326 audit(1777654522.940:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25603 comm="syz.1.4946" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9990f9cdd9 code=0x7ffc0000 [ 1533.633421][T25608] netlink: 'syz.5.4947': attribute type 29 has an invalid length. [ 1533.805228][ T30] audit: type=1326 audit(1777654522.950:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25603 comm="syz.1.4946" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f9990f9cdd9 code=0x7ffc0000 [ 1533.901997][T25610] kvm: pic: non byte read [ 1533.914435][T25610] kvm: pic: non byte read [ 1533.926319][T25610] kvm: pic: non byte read [ 1533.935227][ T30] audit: type=1326 audit(1777654522.950:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25603 comm="syz.1.4946" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9990f9cdd9 code=0x7ffc0000 [ 1533.950521][T25610] kvm: pic: non byte read [ 1534.071085][ T30] audit: type=1326 audit(1777654522.950:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25603 comm="syz.1.4946" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9990f9cdd9 code=0x7ffc0000 [ 1534.103209][ T10] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1534.130059][ T30] audit: type=1326 audit(1777654522.950:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25603 comm="syz.1.4946" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9990f9cdd9 code=0x7ffc0000 [ 1534.205411][ T30] audit: type=1326 audit(1777654522.950:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25603 comm="syz.1.4946" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9990f9cdd9 code=0x7ffc0000 [ 1534.245021][ T30] audit: type=1326 audit(1777654522.950:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25603 comm="syz.1.4946" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f9990f9cdd9 code=0x7ffc0000 [ 1534.286150][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1534.307201][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1534.323097][T25620] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4950'. [ 1534.371324][ T10] usb 5-1: config 1 interface 2 altsetting 29 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1534.385810][T25620] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1534.436569][ T10] usb 5-1: config 1 interface 2 has no altsetting 1 [ 1534.471421][ T10] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1534.485235][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.513875][ T10] usb 5-1: Product: syz [ 1534.518228][ T10] usb 5-1: Manufacturer: syz [ 1534.523692][ T10] usb 5-1: SerialNumber: syz [ 1534.758759][ T10] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1534.920723][ T10] usb 5-1: disable ehci-hcd to run US-144 [ 1535.000193][ T10] usb 5-1: USB disconnect, device number 77 [ 1536.265613][T25631] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1536.676181][T25637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4954'. [ 1537.689359][T25657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4960'. [ 1537.748196][T25657] netlink: 'syz.4.4960': attribute type 30 has an invalid length. [ 1537.826501][T25657] netlink: 'syz.4.4960': attribute type 29 has an invalid length. [ 1537.880473][T25657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4960'. [ 1538.153222][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1538.312948][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1538.323514][ T10] usb 4-1: config 0 has no interfaces? [ 1538.333698][ T10] usb 4-1: New USB device found, idVendor=0080, idProduct=0000, bcdDevice= 0.00 [ 1538.346485][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1538.356614][ T10] usb 4-1: SerialNumber: syz [ 1538.365854][ T10] usb 4-1: config 0 descriptor?? [ 1538.472355][T20520] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1538.622325][T20520] usb 5-1: device descriptor read/64, error -71 [ 1538.674241][T25663] xt_hashlimit: size too large, truncated to 1048576 [ 1538.882337][T20520] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1539.044288][T20520] usb 5-1: device descriptor read/64, error -71 [ 1539.116616][T25677] bridge_slave_0: left allmulticast mode [ 1539.158233][T25677] bridge_slave_0: left promiscuous mode [ 1539.166811][T25677] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.182821][T20520] usb usb5-port1: attempt power cycle [ 1539.207805][T25677] bridge_slave_1: left allmulticast mode [ 1539.222392][T25677] bridge_slave_1: left promiscuous mode [ 1539.243408][T25677] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.292969][T25677] bond0: (slave bond_slave_0): Releasing backup interface [ 1539.319496][T25677] bond0: (slave bond_slave_1): Releasing backup interface [ 1539.361972][T25677] team0: Port device team_slave_0 removed [ 1539.405819][T25677] team0: Port device team_slave_1 removed [ 1539.420558][T25677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1539.431011][T25677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1539.441449][T25677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1539.452090][T25677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1539.469456][T25677] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1539.552379][T20520] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1539.613679][T20520] usb 5-1: device descriptor read/8, error -71 [ 1539.690803][ T10] usb 4-1: USB disconnect, device number 38 [ 1539.872352][T20520] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1539.913864][T20520] usb 5-1: device descriptor read/8, error -71 [ 1539.964492][T25690] netlink: 'syz.7.4970': attribute type 1 has an invalid length. [ 1540.043151][T20520] usb usb5-port1: unable to enumerate USB device [ 1540.512363][T20520] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1540.695298][T20520] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1540.712401][T20520] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1540.736406][T20520] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 514, setting to 64 [ 1540.754073][T20520] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1540.772732][T20520] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1540.791298][T20520] usb 2-1: Manufacturer: syz [ 1540.800240][T20520] usb 2-1: config 0 descriptor?? [ 1540.811070][T20520] smsusb:smsusb_probe: board id=9, interface number 0 [ 1540.822444][T20520] smsusb:siano_media_device_register: media controller created [ 1540.836308][T20520] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 1540.844875][T20520] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 1540.859167][T20520] ------------[ cut here ]------------ [ 1540.864729][T20520] !PageLargeKmalloc(page) [ 1540.864748][T20520] WARNING: mm/slub.c:6471 at free_large_kmalloc+0x9b/0x110, CPU#1: kworker/1:4/20520 [ 1540.879042][T20520] Modules linked in: [ 1540.883455][T20520] CPU: 1 UID: 0 PID: 20520 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1540.894610][T20520] Tainted: [L]=SOFTLOCKUP [ 1540.899003][T20520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1540.909344][T20520] Workqueue: usb_hub_wq hub_event [ 1540.916054][T20520] RIP: 0010:free_large_kmalloc+0x9b/0x110 [ 1540.922315][T20520] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 36 d8 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 9d fd fb 8d 5b 41 5e 5d e9 df 66 02 ff [ 1540.942752][T20520] RSP: 0018:ffffc90005426b20 EFLAGS: 00010206 [ 1540.948895][T20520] RAX: 00000000ff000000 RBX: ffffea00028ad880 RCX: 0000000000000001 [ 1540.957253][T20520] RDX: ffffc90018ed8000 RSI: ffff8880a2b62000 RDI: ffffea00028ad880 [ 1540.965870][T20520] RBP: 0000000000000000 R08: ffff88807563dd03 R09: 1ffff1100eac7ba0 [ 1540.973942][T20520] R10: dffffc0000000000 R11: ffffed100eac7ba1 R12: 1ffff1100f915482 [ 1540.981944][T20520] R13: 0000000000000000 R14: ffff88807563dd60 R15: dffffc0000000000 [ 1540.990159][T20520] FS: 0000000000000000(0000) GS:ffff888125390000(0000) knlGS:0000000000000000 [ 1540.999271][T25706] tipc: Started in network mode [ 1540.999304][T25706] tipc: Node identity 76319efebfb2, cluster identity 4711 [ 1540.999476][T25706] tipc: Enabled bearer , priority 0 [ 1541.009269][T25696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4972'. [ 1541.011986][T20520] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1541.031526][T25696] netlink: 'syz.1.4972': attribute type 30 has an invalid length. [ 1541.035426][T20520] CR2: 00007f316fc17dac CR3: 000000007f0b8000 CR4: 00000000003526f0 [ 1541.035457][T20520] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 1541.035473][T20520] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1541.035488][T20520] Call Trace: [ 1541.035499][T20520] [ 1541.035513][T20520] usb_free_urb+0xd0/0x120 [ 1541.035554][T20520] smsusb_term_device+0x1d7/0x3e0 [ 1541.035605][T20520] smsusb_probe+0x1aba/0x2280 [ 1541.088597][T20520] ? __pfx_smsusb_probe+0x10/0x10 [ 1541.094787][T20520] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1541.098438][T25707] syzkaller0: entered promiscuous mode [ 1541.100688][T20520] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1541.111913][T20520] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 1541.117660][T20520] usb_probe_interface+0x659/0xc70 [ 1541.120475][T25707] syzkaller0: entered allmulticast mode [ 1541.123001][T20520] ? __pfx_usb_probe_interface+0x10/0x10 [ 1541.123035][T20520] really_probe+0x267/0xaf0 [ 1541.123072][T20520] __driver_probe_device+0x1ef/0x380 [ 1541.123103][T20520] driver_probe_device+0x4f/0x240 [ 1541.123137][T20520] __device_attach_driver+0x279/0x430 [ 1541.123170][T20520] bus_for_each_drv+0x258/0x2f0 [ 1541.123204][T20520] ? __pfx___device_attach_driver+0x10/0x10 [ 1541.165780][T20520] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1541.171248][T20520] ? lockdep_hardirqs_on+0x7a/0x110 [ 1541.176593][T20520] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1541.182480][T20520] __device_attach+0x2c5/0x450 [ 1541.182520][T20520] ? __pfx___device_attach+0x10/0x10 [ 1541.182556][T20520] ? _raw_spin_unlock+0x28/0x50 [ 1541.182584][T20520] device_initial_probe+0xa1/0xd0 [ 1541.182614][T20520] bus_probe_device+0x12a/0x220 [ 1541.182659][T20520] device_add+0x7e9/0xbb0 [ 1541.182688][T20520] usb_set_configuration+0x1a87/0x2110 [ 1541.182746][T20520] usb_generic_driver_probe+0x8d/0x150 [ 1541.182774][T20520] usb_probe_device+0x1c4/0x3b0 [ 1541.182806][T20520] ? __pfx_usb_probe_device+0x10/0x10 [ 1541.182831][T20520] really_probe+0x267/0xaf0 [ 1541.182867][T20520] __driver_probe_device+0x1ef/0x380 [ 1541.182899][T20520] driver_probe_device+0x4f/0x240 [ 1541.182933][T20520] __device_attach_driver+0x279/0x430 [ 1541.182966][T20520] bus_for_each_drv+0x258/0x2f0 [ 1541.183001][T20520] ? __pfx___device_attach_driver+0x10/0x10 [ 1541.183030][T20520] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1541.183066][T20520] ? lockdep_hardirqs_on+0x7a/0x110 [ 1541.183092][T20520] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1541.183116][T20520] __device_attach+0x2c5/0x450 [ 1541.287059][T20520] ? __pfx___device_attach+0x10/0x10 [ 1541.292481][T20520] ? _raw_spin_unlock+0x28/0x50 [ 1541.297407][T20520] device_initial_probe+0xa1/0xd0 [ 1541.302806][T20520] bus_probe_device+0x12a/0x220 [ 1541.307858][T20520] device_add+0x7e9/0xbb0 [ 1541.312285][T20520] usb_new_device+0xa08/0x16f0 [ 1541.317299][T20520] ? __pfx_usb_new_device+0x10/0x10 [ 1541.322662][T20520] ? _raw_spin_unlock_irq+0x23/0x50 [ 1541.328010][T20520] hub_event+0x2a1c/0x4f30 [ 1541.332917][T20520] ? do_raw_spin_unlock+0xf5/0x210 [ 1541.338364][T20520] ? __pfx_hub_event+0x10/0x10 [ 1541.343352][T20520] ? process_scheduled_works+0xa70/0x1860 [ 1541.349225][T20520] ? process_scheduled_works+0xa70/0x1860 [ 1541.355172][T20520] ? process_scheduled_works+0xa70/0x1860 [ 1541.360965][T20520] process_scheduled_works+0xb5d/0x1860 [ 1541.366680][T20520] ? __pfx_process_scheduled_works+0x10/0x10 [ 1541.372777][T20520] ? assign_work+0x3d5/0x5e0 [ 1541.377440][T20520] worker_thread+0xa53/0xfc0 [ 1541.382101][T20520] kthread+0x388/0x470 [ 1541.386297][T20520] ? __pfx_worker_thread+0x10/0x10 [ 1541.391765][T20520] ? __pfx_kthread+0x10/0x10 [ 1541.396470][T20520] ret_from_fork+0x514/0xb70 [ 1541.401285][T20520] ? __pfx_ret_from_fork+0x10/0x10 [ 1541.406572][T20520] ? __switch_to+0xc79/0x1410 [ 1541.411412][T20520] ? __pfx_kthread+0x10/0x10 [ 1541.416543][T20520] ret_from_fork_asm+0x1a/0x30 [ 1541.421552][T20520] [ 1541.424748][T20520] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1541.432064][T20520] CPU: 1 UID: 0 PID: 20520 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1541.443220][T20520] Tainted: [L]=SOFTLOCKUP [ 1541.447577][T20520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1541.457934][T20520] Workqueue: usb_hub_wq hub_event [ 1541.463018][T20520] Call Trace: [ 1541.466330][T20520] [ 1541.469288][T20520] vpanic+0x56c/0xa60 [ 1541.473313][T20520] ? __pfx__printk+0x10/0x10 [ 1541.478016][T20520] ? __pfx_vpanic+0x10/0x10 [ 1541.482543][T20520] ? is_bpf_text_address+0x292/0x2b0 [ 1541.487865][T20520] ? is_bpf_text_address+0x26/0x2b0 [ 1541.493081][T20520] panic+0xc5/0xd0 [ 1541.496823][T20520] ? __pfx_panic+0x10/0x10 [ 1541.501261][T20520] ? ret_from_fork_asm+0x1a/0x30 [ 1541.506317][T20520] __warn+0x315/0x4c0 [ 1541.510422][T20520] ? free_large_kmalloc+0x9b/0x110 [ 1541.515679][T20520] ? free_large_kmalloc+0x9b/0x110 [ 1541.520945][T20520] __report_bug+0x29a/0x540 [ 1541.525485][T20520] ? device_initial_probe+0xa1/0xd0 [ 1541.530712][T20520] ? bus_probe_device+0x12a/0x220 [ 1541.535798][T20520] ? device_add+0x7e9/0xbb0 [ 1541.540323][T20520] ? free_large_kmalloc+0x9b/0x110 [ 1541.545640][T20520] ? __pfx___report_bug+0x10/0x10 [ 1541.550758][T20520] ? usb_new_device+0xa08/0x16f0 [ 1541.555748][T20520] ? hub_event+0x2a1c/0x4f30 [ 1541.560350][T20520] ? process_scheduled_works+0xb5d/0x1860 [ 1541.566436][T20520] ? smscore_unregister_device+0x651/0x780 [ 1541.572283][T20520] ? free_large_kmalloc+0x9b/0x110 [ 1541.577423][T20520] report_bug+0x16a/0x220 [ 1541.581768][T20520] ? free_large_kmalloc+0x9b/0x110 [ 1541.586907][T20520] ? free_large_kmalloc+0x9d/0x110 [ 1541.592034][T20520] handle_bug+0x9c/0x200 [ 1541.596293][T20520] exc_invalid_op+0x1a/0x50 [ 1541.600817][T20520] asm_exc_invalid_op+0x1a/0x20 [ 1541.605676][T20520] RIP: 0010:free_large_kmalloc+0x9b/0x110 [ 1541.611415][T20520] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 36 d8 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 9d fd fb 8d 5b 41 5e 5d e9 df 66 02 ff [ 1541.631122][T20520] RSP: 0018:ffffc90005426b20 EFLAGS: 00010206 [ 1541.637211][T20520] RAX: 00000000ff000000 RBX: ffffea00028ad880 RCX: 0000000000000001 [ 1541.645206][T20520] RDX: ffffc90018ed8000 RSI: ffff8880a2b62000 RDI: ffffea00028ad880 [ 1541.653192][T20520] RBP: 0000000000000000 R08: ffff88807563dd03 R09: 1ffff1100eac7ba0 [ 1541.661174][T20520] R10: dffffc0000000000 R11: ffffed100eac7ba1 R12: 1ffff1100f915482 [ 1541.669172][T20520] R13: 0000000000000000 R14: ffff88807563dd60 R15: dffffc0000000000 [ 1541.677177][T20520] usb_free_urb+0xd0/0x120 [ 1541.681622][T20520] smsusb_term_device+0x1d7/0x3e0 [ 1541.686685][T20520] smsusb_probe+0x1aba/0x2280 [ 1541.691480][T20520] ? __pfx_smsusb_probe+0x10/0x10 [ 1541.696529][T20520] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1541.702098][T20520] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1541.707925][T20520] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 1541.713586][T20520] usb_probe_interface+0x659/0xc70 [ 1541.718724][T20520] ? __pfx_usb_probe_interface+0x10/0x10 [ 1541.724363][T20520] really_probe+0x267/0xaf0 [ 1541.728915][T20520] __driver_probe_device+0x1ef/0x380 [ 1541.734221][T20520] driver_probe_device+0x4f/0x240 [ 1541.739269][T20520] __device_attach_driver+0x279/0x430 [ 1541.744666][T20520] bus_for_each_drv+0x258/0x2f0 [ 1541.749541][T20520] ? __pfx___device_attach_driver+0x10/0x10 [ 1541.755453][T20520] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1541.760843][T20520] ? lockdep_hardirqs_on+0x7a/0x110 [ 1541.766151][T20520] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1541.771980][T20520] __device_attach+0x2c5/0x450 [ 1541.776767][T20520] ? __pfx___device_attach+0x10/0x10 [ 1541.782164][T20520] ? _raw_spin_unlock+0x28/0x50 [ 1541.787048][T20520] device_initial_probe+0xa1/0xd0 [ 1541.792091][T20520] bus_probe_device+0x12a/0x220 [ 1541.797064][T20520] device_add+0x7e9/0xbb0 [ 1541.801432][T20520] usb_set_configuration+0x1a87/0x2110 [ 1541.807015][T20520] usb_generic_driver_probe+0x8d/0x150 [ 1541.812499][T20520] usb_probe_device+0x1c4/0x3b0 [ 1541.817409][T20520] ? __pfx_usb_probe_device+0x10/0x10 [ 1541.822879][T20520] really_probe+0x267/0xaf0 [ 1541.827404][T20520] __driver_probe_device+0x1ef/0x380 [ 1541.832705][T20520] driver_probe_device+0x4f/0x240 [ 1541.837746][T20520] __device_attach_driver+0x279/0x430 [ 1541.843231][T20520] bus_for_each_drv+0x258/0x2f0 [ 1541.848226][T20520] ? __pfx___device_attach_driver+0x10/0x10 [ 1541.854317][T20520] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1541.859711][T20520] ? lockdep_hardirqs_on+0x7a/0x110 [ 1541.864925][T20520] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1541.870742][T20520] __device_attach+0x2c5/0x450 [ 1541.875523][T20520] ? __pfx___device_attach+0x10/0x10 [ 1541.880997][T20520] ? _raw_spin_unlock+0x28/0x50 [ 1541.885865][T20520] device_initial_probe+0xa1/0xd0 [ 1541.890903][T20520] bus_probe_device+0x12a/0x220 [ 1541.895867][T20520] device_add+0x7e9/0xbb0 [ 1541.900222][T20520] usb_new_device+0xa08/0x16f0 [ 1541.905022][T20520] ? __pfx_usb_new_device+0x10/0x10 [ 1541.910251][T20520] ? _raw_spin_unlock_irq+0x23/0x50 [ 1541.915463][T20520] hub_event+0x2a1c/0x4f30 [ 1541.919894][T20520] ? do_raw_spin_unlock+0xf5/0x210 [ 1541.925153][T20520] ? __pfx_hub_event+0x10/0x10 [ 1541.929960][T20520] ? process_scheduled_works+0xa70/0x1860 [ 1541.935695][T20520] ? process_scheduled_works+0xa70/0x1860 [ 1541.941425][T20520] ? process_scheduled_works+0xa70/0x1860 [ 1541.947252][T20520] process_scheduled_works+0xb5d/0x1860 [ 1541.952848][T20520] ? __pfx_process_scheduled_works+0x10/0x10 [ 1541.958867][T20520] ? assign_work+0x3d5/0x5e0 [ 1541.963470][T20520] worker_thread+0xa53/0xfc0 [ 1541.968120][T20520] kthread+0x388/0x470 [ 1541.972211][T20520] ? __pfx_worker_thread+0x10/0x10 [ 1541.977351][T20520] ? __pfx_kthread+0x10/0x10 [ 1541.981958][T20520] ret_from_fork+0x514/0xb70 [ 1541.986654][T20520] ? __pfx_ret_from_fork+0x10/0x10 [ 1541.991779][T20520] ? __switch_to+0xc79/0x1410 [ 1541.996484][T20520] ? __pfx_kthread+0x10/0x10 [ 1542.001119][T20520] ret_from_fork_asm+0x1a/0x30 [ 1542.005914][T20520] [ 1542.009757][T20520] Kernel Offset: disabled [ 1542.014083][T20520] Rebooting in 86400 seconds..