last executing test programs: 13m39.246045314s ago: executing program 0 (id=221): syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6009000000083a01fe0700000000000000000000000000bbff02000000000000000000000000867b2100907800800002"], 0x0) 13m38.902708531s ago: executing program 0 (id=223): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f00000001c0)='net/ipv6_route\x00') openat(r3, &(0x7f0000001000)='nfsd.fh/channel\x00', 0x2, 0x0) mknodat$loop(r3, &(0x7f00000003c0)='nfsd.fh/channel\x00', 0x100, 0x1) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="120110010000000879521ebcb4c496f0505800110000000000000109022400030000100009040000fe0300010009210100fc012228000905810320040881029857bb325dc8cb443cf5f83efb698a35d68c4431d2717b1ae09c374fe58a705be784646495e303bc2d2e09167a7cc7f80d5933228f9503fd82b08fab391bbaf490a01c766696f159eea9191b689c58e56d394db8422b762591fd9e67d30e2d7c4b5ee1f23c774ad1a1bd642e88c50f5fcf2163a54feb84c2d23428757156023242d9bcdb5a31c785760b5e33e57c08000000000000004cc2d0c987bdbc99ac2c76c0e9d815ebc2009f9231edaa0950df0f15241f24a47dd110123e000000"], 0x0) r5 = timerfd_create(0x0, 0x80000) timerfd_settime(r5, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000000080)={{0x294, 0x5}, 0x100, 'nfsd.fh/channel\x00'}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000300)=""/130) syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, &(0x7f0000000240)={0x0, 0x21, 0xb1, {0xb1, 0x23, "83efb930f0187ff0478fa22a61a54607b71ea9e442359c479c37f525cde38bf4fd6ef4366b4847f315614b7440a44a19fcced202f40500af0fb73cf6130bee55d6e0edd8ee4f01914087f146b329468e49d70c67e85af725dbf9db550920928b67f15c758a7fa3cb3a6147dc24eee08198dbd91e467d515eaf65cc02e386d6b9f7f787939d111a8d1ae37cf0bb6cb39d8611fe6f4e1d4c8ac17793901090554a14dd5a2c55f233bc2d748c4a365519"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 13m35.699054692s ago: executing program 0 (id=235): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = semget$private(0x0, 0x6, 0x60) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x4bc6}, 0xf) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x4}, 0x0) (async) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f00000002c0)={0x0, 0x91db, 0x2000, 0x4, 0x3b0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004"], 0x48) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) (async) sendto(r2, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) semtimedop(r0, &(0x7f0000000180), 0x0, 0x0) semop(r0, &(0x7f00000001c0), 0x0) (async) semop(r0, &(0x7f00000001c0), 0x0) semop(r0, &(0x7f0000000200)=[{0x0, 0xffff, 0x1000}], 0x1) (async) semop(r0, &(0x7f0000000200)=[{0x0, 0xffff, 0x1000}], 0x1) semtimedop(0xffffffffffffffff, &(0x7f0000000100), 0x0, &(0x7f0000000180)) (async) semtimedop(0xffffffffffffffff, &(0x7f0000000100), 0x0, &(0x7f0000000180)) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30bc, 0x8, 0x2, 0x15d}, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000140)) (async) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30bc, 0x8, 0x2, 0x15d}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0x0, 0x0, 0x4d}}}, &(0x7f0000000480)) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000005c0)={{}, 0x0, 0x1e, @inherit={0x0, 0x0}, @name="002986c14bf7599f8c296aca1f6d4312a2c8678ed9645f39a437ab51d171387b8c29544a331d62c4a60a5823c2b16ae85c6781f618c3b3519e5605f01b77888a9b5add44bc448345ed3f64c53abffdf61f49806788ea5e751973a1f4bc073ad272b9fb005528a84bcb385c9f3aa558e106bd524e8862013bf8a862a4a504c9de0529048be3aa3ba552b33235501a89f979f5f284b2e4bc595a0b252253665fb22e02e888c9f67add92f49a9d3de152a40e1ff0c025ab0044ee6055d9f991f98d04845519ce346362aad219d25df10888ff27419b2079b27ce38ef00b95077d3bb8baa9bd6165faf8fc29e336f70f506927ddddc64f991b24a8a32b6e697d102cbd31d28d6da35377d0edee1fdb69541ddf63e6b729df308639c546fe7de7a9d016c897b56b0bb14e1e4a4017231198f3122fe17f3e7923ec33fe6777460c50d2c02618263f611d28498986cc2e2b5166bfa9950fec28761f54c242a02efec870a12df6c21221a95a745c4e48defa0a39b4d73549de867b44ba3280427a83f49bad189d78fdca02ad5fd772dc34d4006281bdb9988e2ffa26f2041dd6e1a6c677fc50a670ce9cf5f14b8c13630e5663698823505a98458359bfa88d90ae391458a87ee72cbbe71bdc9360b0fc57f61713ae67833da5a4b6f7d09fe0f53d07995e99a69fa0f9a4383ad30c8306ea4bca31eab0957b6ea92ea02fc2259fa0937054908cb80406b50489a108e1b75ea14d47c24d73000000000000000483e280df3f84c1c42000631648a5b7c99e330a15586b361a1a502b7a2b503bec56a6690808bceb6a7216bf287ee916dcaf284bdb831de7bf7e89050683eb8463c2b16f165290456ae10745c80348be8d620e71116a3808bbcf27715a4e921fae1fb91775966208226966414b1f4e135643f4e46b51022f0eb63bb01ba00365c78d53bd5e9bbc5f0175dd1174e86656ca5795de9ce6c17cb72f5a2c120f64ec80d06b4828d5228324a58340914f911c48c736061a1b15fbcd6f8ebd231485f605560120d41d3cb3f267e8e14a09ab02d4300fc70113548b2a5185b6fe9245f92fd76c4afdf834d2385e72e886c195ca5f6280f3387f74814cdeb006faf2eaf6e2da48582f51cc1766410effed5e9ae5ff4974eb08df66c65ce59ab3dffad696c35fa6b045ce1314f37c804b2376553372e466f7d32fe69ab1b90c32e3d0221584462c387898b4f0742d21dd7dd670daa43f2c068cf6b576fd94c137cc01c88fbd0b49b8422833d0be27dbd8c07898d237d131510a87c5448761e2892d7e1eb58a9c5044b62b781b564d1759d9652a8a32f6b9a5231e44526fed9e5330c8aba9f7f8565d4e3e13b83dc9500486866bb2355fca7582ddad58cc022bfc854c81125ec24a2ba1c833b273ca3a906a82ebf7d23a2a028256daf54b8096e3073c0dc8d9b5d7d63ffd63fafcf9ee7ba7491f585d3d2dcfb3861c842cd1a4f541466a225b0d9b954be1fd5bad08c6cbe38d539bf33ad15f6bddb84f540ce6c5f7befd7ada3d510e4aa28506675689d2edb306599caeaa70e22f7ea9906125afeb53387ad31278d74b63bb9e9fb76f10bc85d903cde2e77a803ae628ca11b8d5a448035c5d87bf0c4511b87a97fef7d77f72b8922ef0155e11ad5e4eea0f53550410b48529de3a395ac77330b69e200a081794fb65b3e82bc8d4123899df531ddcc4ea8d4de365d0f7b364af33763366577987380b066a68c88747cf88673bab5219a619d2ee76400ce5e6cfc13343761cd45fd75553a7b67da4f84169af7b56316ee8b38525f7899d3eb6db6b28920acb6e93d8206e9473bc007a1a2a5625018a0b369f29c88656a5d6094029b0113644d362b2e99213b6b061dccacb3cc5e9e0688359f1f55aa67da790abb63ced30cea2c0d2abea0552219e2eb058ec0c876532ac353108f8a8691602b607024aac70801d98dd5406b156bfe5087c4fbe6903a67bbcde153a17cb4c514c6ad911a6333f2e03a6d272c8ebacd8155f31b1d7d155087cf1d4a15b2c24c252ca6b5a76cb5944276a8fd50e68406225e9c2d104db2b2c194191eb60c47cc58765bbbcd0f44d9f8ecd79e9f2c6ad2a6243f4ae00682008444455bfac90fb5705f7633ffc23ebebdeeb034081c8d2296e31a4bd70f43a8aea74a5975ee2f5bf4ef9800954bb5bf81aa93fcb1aa7e29125c9097cc3d376178bd176cce3b2d0b9bae47a5aac88f6be6bfff33e0933522ed64254ac9782c6e6c17434bdb57fe414509405cd302ccc6056931bf7ddfc579ddc2c4c1fcb03dc6a998882c0445084992aa94768b4d1848b09735ed8ac2e869b2f87acf88bf3dba379a579ea5292541a9211421ba1f657416ef6af75a6f5849ba659509e086431b90941f7e0bd6b70b3406be9049e8bd8afa52a9c45838babce52b3f01a46ca04d4183ae267207224df01dd59d28d89b52ef9fb290b6b9aaaa58f991e916119f8aafc158c852f047f28c1603bcc2d7221b2363559b4d05aef4a42154ab8440dd87014bc263c9b493b02df0c52afc6878935ef9d5cd15f32f52d592ee29ee618a6e946fe0f923bde946af99f41211f26adc52e0f905a75344aee1922f00985cbc86be29d3c141cea3a5977257d000f5bfe9e547fe67b8aa4951cb3330805bf57eb6300b48a081cf67d45ca9fc480cf48f2c00824b5d2fab57d8238c7c4df99e23c5f558d8c0bb92f9ab36f1ee6ced62cfb0a7ab032645155f24d862f52e247816daa250365f34649025b99210b2c787169d1370de0ae2244ae9a8d61d654fe9c8bc7e89cb16c4094bee0572d5c509bc2d63305720d0f3640d7b8ecf70f69aac4c5a147fc50cf885571dbdd9488f312139d837b9da40bd7b4e0f51c4114ad6fc1849d51ffdaa49134a5dcab60eca1de568bf1b4a2778089bc95dcf87c9214eab29333b734b6bfe702d670f96fd5b94afdd9f4459ff37851e86e90c1fe96a4611b4998b10dfa939af7fc1d17875394c6f6bf03f5cd12e2ac7acd3019c5b4fe0963175a976e292547a54c77add8fd1282822a617a8c8501d4ffa84dfe85833fdb7bd0e87e7423a91003e8d0b00e09198b306503451702c1c96fae7ec8bfb3eb9b0798c76bd0444e5b2e524aea635c9f023cee4915bf8ce7b48a9987f5c3cb53952c43ee5d41813f86cf733535bce9824c898f666a61422a56922612fae93e9e6c3cb92d757468bc84dc365b5492506008b229f65b503d48b045c0e28e1d0071f7b09f753320c740505b3f8cc36ef505c7b68b88726a39bd0cb2a6cabbac3d45746be0401fad9ea18cf5573f818715b0a64ccc8bdeb44a434516065598bad01186776ffaa77cd54c2c21425eda0314e15ca5292209c5c920d035413720f794a6448d7d4939e46b6eb30badc25d72f3979def7cbd43de6c3835097459097275fa8256be85109d1ec1df696aa1ed3fa7a3658841fff80ece99dd5bf201f2a1188fe5549c48a1822b1eac03c925a446c0c2479aa6ec47514ccef2f04a057ef3681bf6ed9feffd9fc8a8dd32d06426b9439a9b88ec4b1213137cf40451abfcfa9b836589e9e5f3f76cfb5af1469531e0b815cb674633dea8d8ba12772abc8ba67597e1755d4ffac0448492b2a159039a4a78e36182d68314ceea85fff5cdee99c3f3a1537d732424d77a51ca92fdf717fdd8084a9fe5b22dbdd4e263ad433691f1c0756bed13872f84d398b6f2e3e921aee22523fbeb984b87ac010d165f9fefb183a2e0437a21e36a5b557511ec980c9972fccf7e31ebb165f52b48e8a53ff087de4a302334f2fa9d543b0b7a6dc8df2bbff85b4b042403156faa4ef92ca084e308bfae20f20cf3a26891d9790a894635de85a5589116b364d7987933e2eb5944ca265ef53d5b707793743f68f7de7b05eb9d204f197c83a19da8857fcee9aaf81e156c716bbf35bc247fddd402b9061427b4cb8c2ffcf5b9356b09700e55e4cc541c632fb10422f633e864c1151fe74577d3d0be720f86a7f90f2b3a971cceeddfa5264fe018055355b9f8342b89d81c0f7d31b9e8e736b66915c17814591be941b118be01d587f1f9739f624864c577341958988000ea93a693c4992e0b5f8cd7074199dacd94f4783a2e69b6e55ba1760dfb40cd99d6520ddddd0f9edf8952f1ea82876a2d55a12e2b16bb01e93d3de36b4161132898f1b1376856f380fa504191edacd330b46540aee8d129b8d614739ed21199011dec796b03ee9276812217e3453b9155def1e1b9a21c381bc8a9ad9de898726a537687425ca55fb69a45810612266c0d904e5da7576c697a8dcf997f72dec7a3d195f97c51132db128136539342f155516a713eec350760350f1e92433693f0988033c6573c0bc12d72f842bdf90615060698967927161f32b8148590aa33026255b81986617addf4162a91f530e0d6ea04c81d15cf556bd31d5fcb8dcd44aa84a1fd26ed0ef5c091c2a09e7bab19c1b4a627607159b1d42da4a11d6fd0e8773908796ccb7a18ddabcd5f341a0f938e597af5a587dc3c2cb9c5e345598c6befb1e151699192a43306d10d59a5d254b34d67a17d53253ee3e07a6514ea74c4cc3e1380821f263f20d223169e8b0bfa9a69a8fe949ea34d943db774d5fccea7b81ddbd3b11ddd70e32b91de4b81755615295126ee38d61ca63cc0af0cf003ec6f0f1990e0cc749785d1cf66073f87c670ed9b01b9fd4e229e11500acde6d171a6e99e0cd72e400ace77be465298d2b47bb0e73a15db48c3c40b372d70aabad7a0b497e7ff5d8fd3197af4f00252e0d5d363a4c104c259613a39877cdb3906264f23af469e5000ef978b365be607af2f431eec2f2a32c43fee3b0a25a352151ce6b082a089d56f6b322963003090b28985f90a004c7859f76f429eae26b1e2de06e9b00c41bd0921cdeb5dd104d149a9c45ed1788b6fb628e09a8a2292d33de2635c77c0ddb6f615f4ecadeae92e8821ae0b75972368aa8484eaf993f64297d587ff9a86dc75988136396cd61d0e73617d0220be852cddfc04c6f9d88261a2b7efa44474ad63980e1c4b30d9bdd7cd46e7b563247f6ddf1024f718f943284927d85fb531c1e8d6658ab032ce4f11aff6df95f7b9a708e1c1c749028814dc200959b3196b5fe031443d685347be93117bb0a5aa726d6624277be6649cf7304f5b02fcc34c9616053483c00080000e2a5b77a994ee32c3577124a699d8af1cab9fb7c352a286663e956d61235cd39c583a22ed492919a0eb8eadfa3de8a0ead3c4fbebb11396bde337fb856d30935792b9b80bb1dd22011264f4eb3b196ed225e43e664c08659a5586b3753b18ae4dfcff970983e8423778da33998dbb5aba16ff6ab684d2529d818820423a2dadf5d6162f02e5300ea8a1b53b0c2cb22fa97a53236e639a5017c110f2e5d4537e64b656055755b1d7d2a27bfe86b055c432ac8974fb35e543a5ad0ff2581da7845f12e381815e49c075267aa3422518cb0dc96804bb79b8c77479d4fd69175e199a323532aaea079435fcd7710e175047b28f808ada368b3ed20da9f94b5c7bcc8ef6c0389e0e7d39d448a345d3d63dc1e1afd14505a66c1c72de25e8d2ecec6171c127409efd687dcf29f29094ce93f78e73f8eebad53886a9840509a2ea404b81c0a73890acc5e5e02f2d6182f24869997dd1ed6752402d22e0a9f0200"}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000005c0)={{}, 0x0, 0x1e, @inherit={0x0, 0x0}, @name="002986c14bf7599f8c296aca1f6d4312a2c8678ed9645f39a437ab51d171387b8c29544a331d62c4a60a5823c2b16ae85c6781f618c3b3519e5605f01b77888a9b5add44bc448345ed3f64c53abffdf61f49806788ea5e751973a1f4bc073ad272b9fb005528a84bcb385c9f3aa558e106bd524e8862013bf8a862a4a504c9de0529048be3aa3ba552b33235501a89f979f5f284b2e4bc595a0b252253665fb22e02e888c9f67add92f49a9d3de152a40e1ff0c025ab0044ee6055d9f991f98d04845519ce346362aad219d25df10888ff27419b2079b27ce38ef00b95077d3bb8baa9bd6165faf8fc29e336f70f506927ddddc64f991b24a8a32b6e697d102cbd31d28d6da35377d0edee1fdb69541ddf63e6b729df308639c546fe7de7a9d016c897b56b0bb14e1e4a4017231198f3122fe17f3e7923ec33fe6777460c50d2c02618263f611d28498986cc2e2b5166bfa9950fec28761f54c242a02efec870a12df6c21221a95a745c4e48defa0a39b4d73549de867b44ba3280427a83f49bad189d78fdca02ad5fd772dc34d4006281bdb9988e2ffa26f2041dd6e1a6c677fc50a670ce9cf5f14b8c13630e5663698823505a98458359bfa88d90ae391458a87ee72cbbe71bdc9360b0fc57f61713ae67833da5a4b6f7d09fe0f53d07995e99a69fa0f9a4383ad30c8306ea4bca31eab0957b6ea92ea02fc2259fa0937054908cb80406b50489a108e1b75ea14d47c24d73000000000000000483e280df3f84c1c42000631648a5b7c99e330a15586b361a1a502b7a2b503bec56a6690808bceb6a7216bf287ee916dcaf284bdb831de7bf7e89050683eb8463c2b16f165290456ae10745c80348be8d620e71116a3808bbcf27715a4e921fae1fb91775966208226966414b1f4e135643f4e46b51022f0eb63bb01ba00365c78d53bd5e9bbc5f0175dd1174e86656ca5795de9ce6c17cb72f5a2c120f64ec80d06b4828d5228324a58340914f911c48c736061a1b15fbcd6f8ebd231485f605560120d41d3cb3f267e8e14a09ab02d4300fc70113548b2a5185b6fe9245f92fd76c4afdf834d2385e72e886c195ca5f6280f3387f74814cdeb006faf2eaf6e2da48582f51cc1766410effed5e9ae5ff4974eb08df66c65ce59ab3dffad696c35fa6b045ce1314f37c804b2376553372e466f7d32fe69ab1b90c32e3d0221584462c387898b4f0742d21dd7dd670daa43f2c068cf6b576fd94c137cc01c88fbd0b49b8422833d0be27dbd8c07898d237d131510a87c5448761e2892d7e1eb58a9c5044b62b781b564d1759d9652a8a32f6b9a5231e44526fed9e5330c8aba9f7f8565d4e3e13b83dc9500486866bb2355fca7582ddad58cc022bfc854c81125ec24a2ba1c833b273ca3a906a82ebf7d23a2a028256daf54b8096e3073c0dc8d9b5d7d63ffd63fafcf9ee7ba7491f585d3d2dcfb3861c842cd1a4f541466a225b0d9b954be1fd5bad08c6cbe38d539bf33ad15f6bddb84f540ce6c5f7befd7ada3d510e4aa28506675689d2edb306599caeaa70e22f7ea9906125afeb53387ad31278d74b63bb9e9fb76f10bc85d903cde2e77a803ae628ca11b8d5a448035c5d87bf0c4511b87a97fef7d77f72b8922ef0155e11ad5e4eea0f53550410b48529de3a395ac77330b69e200a081794fb65b3e82bc8d4123899df531ddcc4ea8d4de365d0f7b364af33763366577987380b066a68c88747cf88673bab5219a619d2ee76400ce5e6cfc13343761cd45fd75553a7b67da4f84169af7b56316ee8b38525f7899d3eb6db6b28920acb6e93d8206e9473bc007a1a2a5625018a0b369f29c88656a5d6094029b0113644d362b2e99213b6b061dccacb3cc5e9e0688359f1f55aa67da790abb63ced30cea2c0d2abea0552219e2eb058ec0c876532ac353108f8a8691602b607024aac70801d98dd5406b156bfe5087c4fbe6903a67bbcde153a17cb4c514c6ad911a6333f2e03a6d272c8ebacd8155f31b1d7d155087cf1d4a15b2c24c252ca6b5a76cb5944276a8fd50e68406225e9c2d104db2b2c194191eb60c47cc58765bbbcd0f44d9f8ecd79e9f2c6ad2a6243f4ae00682008444455bfac90fb5705f7633ffc23ebebdeeb034081c8d2296e31a4bd70f43a8aea74a5975ee2f5bf4ef9800954bb5bf81aa93fcb1aa7e29125c9097cc3d376178bd176cce3b2d0b9bae47a5aac88f6be6bfff33e0933522ed64254ac9782c6e6c17434bdb57fe414509405cd302ccc6056931bf7ddfc579ddc2c4c1fcb03dc6a998882c0445084992aa94768b4d1848b09735ed8ac2e869b2f87acf88bf3dba379a579ea5292541a9211421ba1f657416ef6af75a6f5849ba659509e086431b90941f7e0bd6b70b3406be9049e8bd8afa52a9c45838babce52b3f01a46ca04d4183ae267207224df01dd59d28d89b52ef9fb290b6b9aaaa58f991e916119f8aafc158c852f047f28c1603bcc2d7221b2363559b4d05aef4a42154ab8440dd87014bc263c9b493b02df0c52afc6878935ef9d5cd15f32f52d592ee29ee618a6e946fe0f923bde946af99f41211f26adc52e0f905a75344aee1922f00985cbc86be29d3c141cea3a5977257d000f5bfe9e547fe67b8aa4951cb3330805bf57eb6300b48a081cf67d45ca9fc480cf48f2c00824b5d2fab57d8238c7c4df99e23c5f558d8c0bb92f9ab36f1ee6ced62cfb0a7ab032645155f24d862f52e247816daa250365f34649025b99210b2c787169d1370de0ae2244ae9a8d61d654fe9c8bc7e89cb16c4094bee0572d5c509bc2d63305720d0f3640d7b8ecf70f69aac4c5a147fc50cf885571dbdd9488f312139d837b9da40bd7b4e0f51c4114ad6fc1849d51ffdaa49134a5dcab60eca1de568bf1b4a2778089bc95dcf87c9214eab29333b734b6bfe702d670f96fd5b94afdd9f4459ff37851e86e90c1fe96a4611b4998b10dfa939af7fc1d17875394c6f6bf03f5cd12e2ac7acd3019c5b4fe0963175a976e292547a54c77add8fd1282822a617a8c8501d4ffa84dfe85833fdb7bd0e87e7423a91003e8d0b00e09198b306503451702c1c96fae7ec8bfb3eb9b0798c76bd0444e5b2e524aea635c9f023cee4915bf8ce7b48a9987f5c3cb53952c43ee5d41813f86cf733535bce9824c898f666a61422a56922612fae93e9e6c3cb92d757468bc84dc365b5492506008b229f65b503d48b045c0e28e1d0071f7b09f753320c740505b3f8cc36ef505c7b68b88726a39bd0cb2a6cabbac3d45746be0401fad9ea18cf5573f818715b0a64ccc8bdeb44a434516065598bad01186776ffaa77cd54c2c21425eda0314e15ca5292209c5c920d035413720f794a6448d7d4939e46b6eb30badc25d72f3979def7cbd43de6c3835097459097275fa8256be85109d1ec1df696aa1ed3fa7a3658841fff80ece99dd5bf201f2a1188fe5549c48a1822b1eac03c925a446c0c2479aa6ec47514ccef2f04a057ef3681bf6ed9feffd9fc8a8dd32d06426b9439a9b88ec4b1213137cf40451abfcfa9b836589e9e5f3f76cfb5af1469531e0b815cb674633dea8d8ba12772abc8ba67597e1755d4ffac0448492b2a159039a4a78e36182d68314ceea85fff5cdee99c3f3a1537d732424d77a51ca92fdf717fdd8084a9fe5b22dbdd4e263ad433691f1c0756bed13872f84d398b6f2e3e921aee22523fbeb984b87ac010d165f9fefb183a2e0437a21e36a5b557511ec980c9972fccf7e31ebb165f52b48e8a53ff087de4a302334f2fa9d543b0b7a6dc8df2bbff85b4b042403156faa4ef92ca084e308bfae20f20cf3a26891d9790a894635de85a5589116b364d7987933e2eb5944ca265ef53d5b707793743f68f7de7b05eb9d204f197c83a19da8857fcee9aaf81e156c716bbf35bc247fddd402b9061427b4cb8c2ffcf5b9356b09700e55e4cc541c632fb10422f633e864c1151fe74577d3d0be720f86a7f90f2b3a971cceeddfa5264fe018055355b9f8342b89d81c0f7d31b9e8e736b66915c17814591be941b118be01d587f1f9739f624864c577341958988000ea93a693c4992e0b5f8cd7074199dacd94f4783a2e69b6e55ba1760dfb40cd99d6520ddddd0f9edf8952f1ea82876a2d55a12e2b16bb01e93d3de36b4161132898f1b1376856f380fa504191edacd330b46540aee8d129b8d614739ed21199011dec796b03ee9276812217e3453b9155def1e1b9a21c381bc8a9ad9de898726a537687425ca55fb69a45810612266c0d904e5da7576c697a8dcf997f72dec7a3d195f97c51132db128136539342f155516a713eec350760350f1e92433693f0988033c6573c0bc12d72f842bdf90615060698967927161f32b8148590aa33026255b81986617addf4162a91f530e0d6ea04c81d15cf556bd31d5fcb8dcd44aa84a1fd26ed0ef5c091c2a09e7bab19c1b4a627607159b1d42da4a11d6fd0e8773908796ccb7a18ddabcd5f341a0f938e597af5a587dc3c2cb9c5e345598c6befb1e151699192a43306d10d59a5d254b34d67a17d53253ee3e07a6514ea74c4cc3e1380821f263f20d223169e8b0bfa9a69a8fe949ea34d943db774d5fccea7b81ddbd3b11ddd70e32b91de4b81755615295126ee38d61ca63cc0af0cf003ec6f0f1990e0cc749785d1cf66073f87c670ed9b01b9fd4e229e11500acde6d171a6e99e0cd72e400ace77be465298d2b47bb0e73a15db48c3c40b372d70aabad7a0b497e7ff5d8fd3197af4f00252e0d5d363a4c104c259613a39877cdb3906264f23af469e5000ef978b365be607af2f431eec2f2a32c43fee3b0a25a352151ce6b082a089d56f6b322963003090b28985f90a004c7859f76f429eae26b1e2de06e9b00c41bd0921cdeb5dd104d149a9c45ed1788b6fb628e09a8a2292d33de2635c77c0ddb6f615f4ecadeae92e8821ae0b75972368aa8484eaf993f64297d587ff9a86dc75988136396cd61d0e73617d0220be852cddfc04c6f9d88261a2b7efa44474ad63980e1c4b30d9bdd7cd46e7b563247f6ddf1024f718f943284927d85fb531c1e8d6658ab032ce4f11aff6df95f7b9a708e1c1c749028814dc200959b3196b5fe031443d685347be93117bb0a5aa726d6624277be6649cf7304f5b02fcc34c9616053483c00080000e2a5b77a994ee32c3577124a699d8af1cab9fb7c352a286663e956d61235cd39c583a22ed492919a0eb8eadfa3de8a0ead3c4fbebb11396bde337fb856d30935792b9b80bb1dd22011264f4eb3b196ed225e43e664c08659a5586b3753b18ae4dfcff970983e8423778da33998dbb5aba16ff6ab684d2529d818820423a2dadf5d6162f02e5300ea8a1b53b0c2cb22fa97a53236e639a5017c110f2e5d4537e64b656055755b1d7d2a27bfe86b055c432ac8974fb35e543a5ad0ff2581da7845f12e381815e49c075267aa3422518cb0dc96804bb79b8c77479d4fd69175e199a323532aaea079435fcd7710e175047b28f808ada368b3ed20da9f94b5c7bcc8ef6c0389e0e7d39d448a345d3d63dc1e1afd14505a66c1c72de25e8d2ecec6171c127409efd687dcf29f29094ce93f78e73f8eebad53886a9840509a2ea404b81c0a73890acc5e5e02f2d6182f24869997dd1ed6752402d22e0a9f0200"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="b40000000001050500000000000000000a0000003c0002802c00018013000300fe80000000000000000000000000003814000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c0001c014000300"], 0xb4}}, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, 0x0, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r9) 13m34.652620284s ago: executing program 0 (id=240): syz_usb_connect(0x3, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40b113420000010000000109024a0001010080fa0904000008ffffff000705810200020007058202000200070583020002000705840340000107050102000200070502020002000705030200020007050402000200"], 0x0) (async) nanosleep(&(0x7f0000000300)={0x3}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000780)="5505ae09aa72616584e7c5a91b77597ee5a6e0b629e7715d910942a2d8013b68c277f3df04b5e68b3215407e5ebe685dda35fe2a112045bf3e666eb0f979d4dcec775ff7ab352c71c528f39a88d5cfa9b9b18edd95466836af088fc7e2543bbcf960293b0d", 0x1}, {0x0}, {&(0x7f0000000540)="2800e92d0e4e699bdfa2d2572027017e2820e721cd13d5c98e96474424094acfc4abff95145abd6d11fe190dc080e9559d725851c9", 0xffffff7f}, {&(0x7f0000000580)="edc9463b69d9d57b2e11517c9f4d90c00e7f11ee39d3a5094125962818bc84da61cdce3e9e159f213ce6bfb5229af5c2234d73c77ed04a6bcec6cdc71cd7ac85a42463141bda64c4e7320ee1f1b973219e633115128c6cab33a1d6abaa9924e4d9a4b9912c2af86ce191e02e735718fab9be05c08c594b09d3214a83d6d54332148c8af16a9283574c62cc4ae765410e6ef30f9c7349d865d27769543d0735580313813e38839eeeab760c7c747ecd2dabb4e414f3d02f9940cabb43f3b988b495837c5da3e6bb9862eafe8bd88ba520c391691b38240fa9241916851ff12a18eb01de129bff9819d7428e8e6100", 0xee}, {&(0x7f0000000680)="aeadcd74904a5da247", 0x9}], 0x5}, 0x0) recvmsg$can_bcm(r1, &(0x7f0000006c00)={0x0, 0x0, 0x0}, 0x41) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000004200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002800), &(0x7f0000002840)='./file0\x00', 0x4002, &(0x7f0000002ac0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}}, 0x1, 0x0, 0x0) futex(&(0x7f0000000080)=0x2, 0x4, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)=0x1, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$nl_generic(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000201000008000100000000000500590001000000"], 0x24}}, 0x0) 13m31.441843968s ago: executing program 0 (id=248): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd29, 0x25dfdbfe, {0x2, 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x3}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x1}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x2c}}, 0x4c050) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unlinkat(r4, &(0x7f0000000280)='./file0/file0\x00', 0x200) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b00010000000109040000"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x28, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, 0x8093, 0x8268}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) read$char_usb(r6, &(0x7f0000000480)=""/74, 0x4a) r10 = syz_open_dev$vim2m(&(0x7f0000000180), 0x5bc, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000100)={0x37, 0x2, 0x28, "3bd9e810020007cf00e89a00000000a5bdd3d940007e00", 0x34343459}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 13m31.122831162s ago: executing program 0 (id=252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r3) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f00000000c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x6) getsockopt$inet6_int(r6, 0x29, 0x42, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x1c, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffe0}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001340)=@newtfilter={0xec, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xc}, {0x1}, {0x300, 0x10}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xbc, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_connmark={0x34, 0x6, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_CGROUP_EMATCHES={0x80, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x3fff, 0x0, 0x0, {{0xfffa, 0x9, 0x6}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x4, 0x2, 0x846}, {0x37a2, 0x2, 0x2, "8d2e"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x9}, {0x1, 0x7ff, 0x1, 0x5, 0xc, 0x1, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5, 0x7, 0x8}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x6, 0x3, 0x81}, {0xe7, 0x4, 0x8, 0x9}}}]}]}]}}]}, 0xec}}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x200}}]}}]}, 0x48}}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x8, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x8001, 0xfffffbff}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r11 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r11, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000001140)={[&(0x7f0000000180)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0) r12 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r12, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r2, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)='\x00', 0x14}], 0x1}, 0x4011) 13m30.613445265s ago: executing program 32 (id=252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r3) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f00000000c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x6) getsockopt$inet6_int(r6, 0x29, 0x42, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x1c, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffe0}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001340)=@newtfilter={0xec, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xc}, {0x1}, {0x300, 0x10}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xbc, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_connmark={0x34, 0x6, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_CGROUP_EMATCHES={0x80, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x3fff, 0x0, 0x0, {{0xfffa, 0x9, 0x6}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x4, 0x2, 0x846}, {0x37a2, 0x2, 0x2, "8d2e"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x9}, {0x1, 0x7ff, 0x1, 0x5, 0xc, 0x1, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5, 0x7, 0x8}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x6, 0x3, 0x81}, {0xe7, 0x4, 0x8, 0x9}}}]}]}]}}]}, 0xec}}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x200}}]}}]}, 0x48}}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x8, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x8001, 0xfffffbff}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r11 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r11, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000001140)={[&(0x7f0000000180)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0) r12 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r12, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r2, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)='\x00', 0x14}], 0x1}, 0x4011) 10m44.768944256s ago: executing program 5 (id=965): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) write$sndseq(r0, &(0x7f0000000640)=[{0x84, 0x77, 0x0, 0x1, @tick, {}, {}, @result={0x7, 0x7}}, {0x44, 0x9, 0xad, 0x1, @time={0x3d8e}, {0x5d, 0x61}, {0x5, 0xbb}, @time=@tick=0x4}, {0xde, 0xad, 0xf8, 0x9, @tick=0x9, {0xd, 0x80}, {0x6, 0xfc}, @result={0x6, 0x8000}}, {0x5, 0x7f, 0x0, 0x7, @time={0xa, 0x84}, {0x4, 0x5}, {0xcd}, @control={0x9, 0xfffffffb, 0x4}}, {0xd, 0x2, 0x40, 0x2, @time={0x7, 0x6af}, {}, {0x40, 0x2b}, @connect={{0x8, 0x1}, {0x7, 0xe}}}], 0x8c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x217, @time={0xfffffffd, 0x5}, 0x0, {}, 0x67, 0x2}) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) munlockall() listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x8003, 0x9, 0x651, 0x2, 0x1, 0x8}, &(0x7f0000000100)=0x9c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000e70000004ae89a6ba219539f3acca4a97d423ce3ee5c67375df6a95e279b570390f8e3d453f98273139f0dddf1e7d18ae48c15227490c03fc17f3c6ba46e9d6a6df68490f40223306b6eb7993bcad1d288d72afd6ead48ed39fd298190386fb5153adaad18c3f4db482d5507246ae83424ab692840ef8596ff67afc86c3de3172d2ec500ea72948ccf861b43c12b36dad53265516b3965bbf6ec74bf7756179d51eb429153c4157fbd650fe88a528ed92d9aaed5f6c576d42c1609136394372891c7f8e0d4e3891cef78dbea5fb900"/254], &(0x7f0000000280)=0x10b) io_setup(0x8, &(0x7f0000000600)=0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70200000000000085000000510000"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r7 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x2, 0x80, {}, {0x0, 0xb846941ed94b4582, 0xff, 0x80, 0x0, 0xfe, "8200"}, 0x2002000, 0x2, {}, 0x20800}) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x401, @media='eth\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r8, 0x0}]) 10m44.328301546s ago: executing program 5 (id=966): write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x4a, 0x3, 0x1, 0x3, 0x7ff, 0x2, 0x3, 0x4, 0x33e, 0x38, 0x2e6, 0x7097, 0x3fe, 0x20, 0x1, 0x7, 0x8, 0x7}, [{0x7, 0x6, 0x0, 0x4, 0x3, 0xffffffff, 0xa}]}, 0x58) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000200)={'wlan1\x00', @random="9ffff7070600"}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080), &(0x7f0000000180)=0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='net/wireless\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') name_to_handle_at(r2, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="15"], &(0x7f0000001500), 0x200) read$FUSE(r1, &(0x7f00000095c0)={0x2020}, 0x2020) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x8001, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x8044) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000000a40)="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", 0x2000, &(0x7f0000003140)={&(0x7f0000002a40)={0x50, 0x0, 0x4, {0x7, 0x2d, 0xffc, 0x200, 0x1, 0x5, 0x400000, 0xffff, 0x0, 0x0, 0x8, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, &(0x7f0000002e80)={0x10, 0xfffffffffffffffe, 0x7fffffff}, 0xfffffffffffffffc, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40e80489680001010203010902200001010080fa0904000002ffffff0007058102000200"], 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r4, 0x8b1b, &(0x7f0000000000)={'wlan0\x00', @broadcast}) socket(0x10, 0x803, 0x0) 10m43.128690346s ago: executing program 5 (id=968): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x410, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x1fd}) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYRES16=r1], 0x48}}, 0x40800) sendmsg$inet(r1, &(0x7f0000000a40)={&(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000480), 0x0, &(0x7f0000000800)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0xac, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4c, 0xe1, 0x3, 0xa, [{@loopback, 0x80000001}, {@rand_addr=0x64010102, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@multicast2, 0x2}, {@multicast1, 0x7}, {@loopback, 0x5}, {@multicast2, 0x8}, {@local, 0x5}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x44}]}, @generic={0x82, 0x4, "d2f4"}, @timestamp_addr={0x44, 0x1c, 0x88, 0x1, 0x4, [{@private=0xa010101, 0x5}, {@loopback, 0x5}, {@rand_addr=0x64010102, 0xb7a5}]}, @lsrr={0x83, 0x17, 0x5d, [@multicast1, @multicast2, @multicast2, @empty, @remote]}, @timestamp_addr={0x44, 0xc, 0x88, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3d2}]}, @ra={0x94, 0x4}, @end, @lsrr={0x83, 0x7, 0x9d, [@private=0xa010100]}, @end]}}}, @ip_retopts={{0x88, 0x0, 0x7, {[@lsrr={0x83, 0x1f, 0xa, [@private=0xa010101, @broadcast, @remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @loopback]}, @ra={0x94, 0x4}, @generic={0x89, 0x8, "88ace7b38d9c"}, @ssrr={0x89, 0xb, 0x59, [@private=0xa010101, @empty]}, @end, @lsrr={0x83, 0xf, 0xc3, [@loopback, @private=0xa010100, @multicast1]}, @ra={0x94, 0x4}, @generic={0x44, 0x11, "4f1a6c98cfd9b625bbbac79e0de808"}, @timestamp={0x44, 0x1c, 0xd4, 0x0, 0xb, [0x401, 0x9, 0x53, 0x5, 0x3, 0xfba4]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp_addr={0x44, 0x44, 0x2c, 0x1, 0x0, [{@broadcast, 0x2}, {@multicast2, 0x4}, {@broadcast, 0x7ff}, {@local, 0xda9f}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x1}, {@multicast1, 0x5a}, {@multicast2, 0x101}, {@broadcast, 0x8}]}, @timestamp_prespec={0x44, 0x4, 0x46, 0x3, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x208}, 0x40044) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="50000000480011012abd7000fedbdf250a006000aa5b5e2aadf445a53385bbd4d7078af161d95072914aedffd9a86b96dc5041b68ea7c87aa75a17c79070404b3d75dfa6fa53b6186b71b5524a61f8525e88fc9a97ec72f1531d5a30a65b83113566b7d58a839256293d26a30313fdb63122c2f8b2f86baea08306b65c4c365f2b3c7dc456ac5361eb54450d1f3a63b296e3224c706c7f366f1a81ac608b78a1c94ef1a4d9cf02264215fa10b4df7260f45a9d5658d4b49b7ba7c4cf", @ANYRES32=0x0, @ANYBLOB="02000000080002000700000008000200070000000800020003000100080002000000000014000100ff"], 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000e80)={0x1, 0x1, 0xb, 0x1c, 0xfd, &(0x7f0000000a80)}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000200)=0xc) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000300)={0xa, 0x20e3, 0x0, @private0}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r9}) write$tun(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="010530000a002800060000006000000000301140fe800000000000000000000000000001fe8000"/50], 0x64) close_range(r0, 0xffffffffffffffff, 0x0) 10m41.794598377s ago: executing program 5 (id=976): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) write$sndseq(r0, &(0x7f0000000640)=[{0x84, 0x77, 0x0, 0x1, @tick, {}, {}, @result={0x7, 0x7}}, {0x44, 0x9, 0xad, 0x1, @time={0x3d8e}, {0x5d, 0x61}, {0x5, 0xbb}, @time=@tick=0x4}, {0xde, 0xad, 0xf8, 0x9, @tick=0x9, {0xd, 0x80}, {0x6, 0xfc}, @result={0x6, 0x8000}}, {0x5, 0x7f, 0x0, 0x7, @time={0xa, 0x84}, {0x4, 0x5}, {0xcd}, @control={0x9, 0xfffffffb, 0x4}}, {0xd, 0x2, 0x40, 0x2, @time={0x7, 0x6af}, {}, {0x40, 0x2b}, @connect={{0x8, 0x1}, {0x7, 0xe}}}], 0x8c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x217, @time={0xfffffffd, 0x5}, 0x0, {}, 0x67, 0x2}) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) munlockall() listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x8003, 0x9, 0x651, 0x2, 0x1, 0x8}, &(0x7f0000000100)=0x9c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000e70000004ae89a6ba219539f3acca4a97d423ce3ee5c67375df6a95e279b570390f8e3d453f98273139f0dddf1e7d18ae48c15227490c03fc17f3c6ba46e9d6a6df68490f40223306b6eb7993bcad1d288d72afd6ead48ed39fd298190386fb5153adaad18c3f4db482d5507246ae83424ab692840ef8596ff67afc86c3de3172d2ec500ea72948ccf861b43c12b36dad53265516b3965bbf6ec74bf7756179d51eb429153c4157fbd650fe88a528ed92d9aaed5f6c576d42c1609136394372891c7f8e0d4e3891cef78dbea5fb900"/254], &(0x7f0000000280)=0x10b) io_setup(0x8, &(0x7f0000000600)=0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf090000"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r7 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x2, 0x80, {}, {0x0, 0xb846941ed94b4582, 0xff, 0x80, 0x0, 0xfe, "8200"}, 0x2002000, 0x2, {}, 0x20800}) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x401, @media='eth\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r8, 0x0}]) 10m40.84651723s ago: executing program 5 (id=977): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x149442, 0x0) ftruncate(r0, 0x200002) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x41a2c3, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0xfffffffd, 0x51}, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4002, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x10}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x5, 0x4, 0xff, 0x0, 0xfe, 0x6, 0x7f, 0x6e3}, {0x1, 0x3, 0x38, 0x5, 0x84, 0xa, 0x3, 0x50, 0x0, 0x6d, 0x0, 0x6, 0x4}], 0xffbfffff}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xff, 0x2, 0x2, 0x200, 0x4002004c8, 0x1004, 0x8000000000000000, 0xc585, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000011000/0x1000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000340)="9a10edb00036f30fc7376766c744240045e900006766c7442402f10000006766c744240600000000670f011424ba4200ecb823018ed80f01cf9a0000890066f20ff013660fc732660f388200", 0x4c}], 0x1, 0xc, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000340)="9a10edb00036f30fc7376766c744240045e900006766c7442402f10000006766c744240600000000670f011424ba4200ecb823018ed80f01cf9a0000890066f20ff013660fc732660f388200", 0x4c}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) syz_io_uring_submit(0x0, r4, r5, &(0x7f0000000280)=@IORING_OP_READV_FIXED={0x3c, 0x2, 0x0, @fd=r0, 0xc, &(0x7f00000009c0)=[{&(0x7f00000008c0)=""/212, 0xd4}], 0x1, 0x5, 0x0, {0x3, 0x0, 0x7f, '\x00', &(0x7f0000000b00)={0xb7e, 0x400, 0xc1, &(0x7f0000000a00)="ea7d257d58119a134ea1b44ccf74d3bdfb6b4b2ff21f474e61bce1885fdaffd85106d6ca366fb9cf6198454997a94e3d1139e7376e3cd608e5e329237fb5257712b1ebc2a797026f112481870f1182142c8aed1e1410dd4a175e4a29efb68dde8db7ef2337cea593d802b483504ab3bdb03d7fd4b4832696e7e09aff7e33a9742792c028137e63f89a1d9bb7e5e222eec3793e2226ae351c31ffe59c76db467be6c9b310cac199ba7bac82533f054d57b6b262fde1a69dac6723592af95dd13891", 0x11b87951}, 0xe18}}) (async) syz_io_uring_submit(0x0, r4, r5, &(0x7f0000000280)=@IORING_OP_READV_FIXED={0x3c, 0x2, 0x0, @fd=r0, 0xc, &(0x7f00000009c0)=[{&(0x7f00000008c0)=""/212, 0xd4}], 0x1, 0x5, 0x0, {0x3, 0x0, 0x7f, '\x00', &(0x7f0000000b00)={0xb7e, 0x400, 0xc1, &(0x7f0000000a00)="ea7d257d58119a134ea1b44ccf74d3bdfb6b4b2ff21f474e61bce1885fdaffd85106d6ca366fb9cf6198454997a94e3d1139e7376e3cd608e5e329237fb5257712b1ebc2a797026f112481870f1182142c8aed1e1410dd4a175e4a29efb68dde8db7ef2337cea593d802b483504ab3bdb03d7fd4b4832696e7e09aff7e33a9742792c028137e63f89a1d9bb7e5e222eec3793e2226ae351c31ffe59c76db467be6c9b310cac199ba7bac82533f054d57b6b262fde1a69dac6723592af95dd13891", 0x11b87951}, 0xe18}}) io_uring_enter(r3, 0x4002000, 0xfffffffd, 0x71, 0x0, 0x0) write$P9_RSTATu(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/514, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01], 0x20e) 10m39.794882882s ago: executing program 5 (id=981): socket$netlink(0x10, 0x3, 0x0) add_key$keyring(0x0, &(0x7f0000001240)={'syz', 0x3}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0xfffffce9) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000340)) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f00000004c0)={0x14, &(0x7f0000000380)={0x0, 0x22, 0xc8, {0xc8, 0x8, "fe9d6b90082d9565173c9a869399774d0d742512020a348a09e8fa5cf026b8329cd450f167548ffc785e54bf430da5f10a6a5495ed541ceb2e7d192fd41aabd9cc4017ca0d4dd2e329af77eeaf805e660c3b20385afaf3a5ae2e57edbf0f9cf04a06b7beef0472c3016fd0f89cef04ab49a14506aed887d5823ae88ce194994b4f4de8c9948247935328ccdd8728ed7a4d7a43c9e0c1af5b64070c975b8c9c724bbf29c4eeec3a3d1cf2b1319fd38fb5d985c257a651df399df98be5e9768617c5dcfadbbfad"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}}, &(0x7f0000000840)={0x44, &(0x7f0000000500)={0x40, 0x1, 0xd6, "51892a80f0cb509f8dc6186b494dcf776a0a13bfb136eb1f498b238d762aa65a3e82d047061cc525b5278667be7a7be54bda81330adbb9695ad00d1ae4a11fbae0acce509f29d799f7c3ba5988b71e5d6b427404fccf3950d7b685a78919e189dd5926cdcd0543e7d1462b72983465d48bb3ec142798ce5ff6737b450201bfd1448909f84ff3b9b2cce2019e65b9498bae02eacf28ea4d89d28730d4b4099a8684633940c88b750624b1dbc94a21feb1ba4efee40cd0a54212df136c30585a48569d904c01212f35a154a025625e2e94601854afb799"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000680)={0x20, 0x81, 0x3, "0aab57"}, &(0x7f0000000140)=ANY=[@ANYBLOB="2045000000000019ee4f9c2aa2d5e3e362ddae86ffae913777d2d4f72901bc9ff140e27eb33bac1dead8a2903083bc7842df1fb4cd954951663833426b3bcd638e7b3fd1d42b294b33b29ef18c475e1052931f0e4c12ec591c7ce0d193044e7a1e32ac79c8889716bdafcf8690eb09966bca867ca8db6718fb6cca1ca3709c002ed8dee40cd2f0c332860af210885a8721d9c4ef8464b182f8da43a746e6b995e05bba9f30e5364f7bcbe9221890e69de659dcec613e13810ac0444d11ab682d"], &(0x7f0000000700)={0x20, 0x83, 0x3, "d4b582"}, &(0x7f00000007c0)={0x20, 0x84, 0x4, "d48ba92a"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "3fe6a3"}}) r3 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000600000008000000080040000000", @ANYRES32=0x0, @ANYRES32], 0x50) open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x30000) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000000080)) syz_usb_connect$midi(0x3, 0x56, &(0x7f0000000740)=ANY=[@ANYBLOB="1201000200000040392ad43f40000102030109024400010100800109040000020103000007240100011600062402010100092403010201010100090581020002000000052501010209"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) 10m24.188721281s ago: executing program 33 (id=981): socket$netlink(0x10, 0x3, 0x0) add_key$keyring(0x0, &(0x7f0000001240)={'syz', 0x3}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0xfffffce9) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000340)) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f00000004c0)={0x14, &(0x7f0000000380)={0x0, 0x22, 0xc8, {0xc8, 0x8, "fe9d6b90082d9565173c9a869399774d0d742512020a348a09e8fa5cf026b8329cd450f167548ffc785e54bf430da5f10a6a5495ed541ceb2e7d192fd41aabd9cc4017ca0d4dd2e329af77eeaf805e660c3b20385afaf3a5ae2e57edbf0f9cf04a06b7beef0472c3016fd0f89cef04ab49a14506aed887d5823ae88ce194994b4f4de8c9948247935328ccdd8728ed7a4d7a43c9e0c1af5b64070c975b8c9c724bbf29c4eeec3a3d1cf2b1319fd38fb5d985c257a651df399df98be5e9768617c5dcfadbbfad"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}}, &(0x7f0000000840)={0x44, &(0x7f0000000500)={0x40, 0x1, 0xd6, "51892a80f0cb509f8dc6186b494dcf776a0a13bfb136eb1f498b238d762aa65a3e82d047061cc525b5278667be7a7be54bda81330adbb9695ad00d1ae4a11fbae0acce509f29d799f7c3ba5988b71e5d6b427404fccf3950d7b685a78919e189dd5926cdcd0543e7d1462b72983465d48bb3ec142798ce5ff6737b450201bfd1448909f84ff3b9b2cce2019e65b9498bae02eacf28ea4d89d28730d4b4099a8684633940c88b750624b1dbc94a21feb1ba4efee40cd0a54212df136c30585a48569d904c01212f35a154a025625e2e94601854afb799"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000680)={0x20, 0x81, 0x3, "0aab57"}, &(0x7f0000000140)=ANY=[@ANYBLOB="2045000000000019ee4f9c2aa2d5e3e362ddae86ffae913777d2d4f72901bc9ff140e27eb33bac1dead8a2903083bc7842df1fb4cd954951663833426b3bcd638e7b3fd1d42b294b33b29ef18c475e1052931f0e4c12ec591c7ce0d193044e7a1e32ac79c8889716bdafcf8690eb09966bca867ca8db6718fb6cca1ca3709c002ed8dee40cd2f0c332860af210885a8721d9c4ef8464b182f8da43a746e6b995e05bba9f30e5364f7bcbe9221890e69de659dcec613e13810ac0444d11ab682d"], &(0x7f0000000700)={0x20, 0x83, 0x3, "d4b582"}, &(0x7f00000007c0)={0x20, 0x84, 0x4, "d48ba92a"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "3fe6a3"}}) r3 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000600000008000000080040000000", @ANYRES32=0x0, @ANYRES32], 0x50) open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x30000) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000000080)) syz_usb_connect$midi(0x3, 0x56, &(0x7f0000000740)=ANY=[@ANYBLOB="1201000200000040392ad43f40000102030109024400010100800109040000020103000007240100011600062402010100092403010201010100090581020002000000052501010209"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) 27.282491622s ago: executing program 4 (id=2559): r0 = socket(0x200000000000011, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x840, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x12, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@ipv6_newnexthop={0x48, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}, @NHA_RES_GROUP_IDLE_TIMER={0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80}]}]}, 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) recvmmsg(r0, &(0x7f00000061c0)=[{{&(0x7f0000000540)=@x25, 0x80, &(0x7f00000039c0)=[{&(0x7f00000005c0)=""/130, 0x82}, {&(0x7f0000000680)=""/68, 0x44}, {&(0x7f0000000700)=""/199, 0xc7}, {0x0}, {0x0}, {&(0x7f0000000300)=""/2, 0x2}, {0x0}, {&(0x7f0000000340)=""/3, 0x3}, {&(0x7f00000029c0)=""/4096, 0x1000}], 0x9, &(0x7f0000003a80)=""/73, 0x49}, 0xfffffff9}, {{&(0x7f0000003b00)=@alg, 0x80, &(0x7f0000004e40)=[{&(0x7f0000003b80)=""/4096, 0x1000}, {0x0}, {0x0}], 0x3, &(0x7f0000004e80)=""/4096, 0x1000}, 0xfff}, {{&(0x7f0000005e80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000006100)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000005fc0)=""/224, 0xe0}, {&(0x7f00000060c0)=""/28, 0x1c}], 0x12}, 0x53}], 0x3, 0x40, 0x0) unshare(0x6a040000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) pread64(r5, &(0x7f0000001840)=""/4096, 0x1000, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b00000000008000000000000000000000000800010001000000"], 0x20}}, 0x4000000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = epoll_create1(0x80000) r10 = fcntl$dupfd(r8, 0x0, r8) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000080)={0x20000000}) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = getpid() kcmp$KCMP_EPOLL_TFD(r12, r11, 0x7, r10, &(0x7f0000000100)={r9, r10, 0x500}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) 13.168733477s ago: executing program 1 (id=2589): syz_open_dev$video4linux(&(0x7f0000000140), 0x4000000000000000, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000001200)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3bf8cc0134fb55a63817f6bac437682ed4c30147c2d86997f970ba094a19b0de4904bf83ff6fc3f0e46aba38692387ce1", 0x4}, 0x4c) gettid() timer_create(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 12.987345009s ago: executing program 6 (id=2591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0) 12.710675827s ago: executing program 1 (id=2592): unshare(0x60000000) unshare(0x10480) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) io_uring_setup(0x671d, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$vim2m(0x0, 0x7, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x4a82, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x100) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000080)={{0x2, 0xcaa94196ebb29860, 0xbf65, 0x401, 'syz0\x00', 0xfffff001}, 0x0, [0x1000, 0x8, 0x1d, 0x2, 0x2, 0x554, 0x5, 0xf553, 0x4, 0xe4f, 0xf27d, 0xfffffffffffffffb, 0x26, 0x4, 0xd43, 0xc615, 0xff, 0x4, 0xffffffffffffffff, 0xf87, 0x8001, 0x83, 0xe0, 0x8, 0x7, 0x8, 0x9, 0x4, 0xd0, 0xad0, 0x80, 0x5, 0x101, 0x4, 0x4, 0x2, 0x3, 0x2, 0x110, 0x4, 0x3, 0x5, 0x7fff, 0x2, 0x2, 0x7, 0xfffffffffffff30a, 0x0, 0x8, 0x1, 0x1, 0x4, 0x7, 0x8, 0x4c9, 0x9000000000, 0x3, 0x0, 0x6, 0x8001, 0x0, 0x9, 0x9, 0x5, 0x1, 0xffffffff, 0x81, 0x80000001, 0x3, 0xc39, 0x10001, 0xc, 0x2, 0xc4bb, 0x8, 0xe000000, 0x37, 0x0, 0x3, 0x7ff, 0x8, 0x6, 0x7f, 0x3, 0x80, 0x7, 0x200, 0x5c6, 0x63a, 0xba2, 0x0, 0x2, 0x5, 0xffffffffffffa0e5, 0x8000000000000001, 0x5, 0x1e1, 0x6, 0x800, 0x0, 0x4, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x4, 0x9, 0x40, 0x8, 0x80, 0x1, 0xffffffffffffffff, 0x6, 0x0, 0x1be, 0x26, 0x3, 0x9, 0x80000000f, 0x9, 0x8, 0xf6, 0x200, 0x7, 0x7fffffffffffffff, 0xf5d, 0x3, 0x9]}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) set_mempolicy(0x8000, &(0x7f0000000380)=0xfff, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x41, 0x1ff) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000e083, 0x0) 12.442498773s ago: executing program 6 (id=2593): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1ff) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x2000, 0x2000003, 0x12, r0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x4}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x100000000) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) statx(r0, &(0x7f0000000000)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x4000, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r6, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x18) 11.324820328s ago: executing program 6 (id=2597): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@gettaction={0x84, 0x32, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfd4}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) read$FUSE(r2, &(0x7f0000004500)={0x2020}, 0x2020) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000280)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000004001000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006", 0x4d}], 0x1) mq_unlink(0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="050007000000000071110000000000000000000005000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socket(0x40000000015, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 9.110304191s ago: executing program 1 (id=2599): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="2b8dd1c4ae56087a5279500c6050f33293ae9da5980a6edd0c0623e5bbeff92c711c1b2a73cbdd6df2dba1da89f5a0", 0x2f}], 0x1, 0x0, 0x110, 0x40000}, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00800000000000020000000000ffef00", "f4bd000000801900", [0x8, 0xffffffff9673e359]}}) 8.54724737s ago: executing program 1 (id=2600): r0 = fsopen(&(0x7f0000000480)='adfs\x00', 0x0) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x20, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@dstopts={0x32, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x41}}]}]}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) preadv2(r2, &(0x7f0000000000)=[{&(0x7f0000002240)=""/253, 0xfd}], 0x1, 0x1b39, 0x6d, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0400000001, 0xfa11, 0xffffffff}, 0x0) r5 = creat(&(0x7f0000001340)='./file0\x00', 0xecf86c37d53049cc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pwritev2(r5, &(0x7f0000000380)=[{&(0x7f00000002c0)="2271c71d2a165c0337e8655fb3b9734395b65553eb0a65594df4b723dfbfedce32133c46144e43d7598d83829233bc720e34b6e1bfe3321a2d8a4480100d92bb9b56ede77808f604a7b3bc20a499f149076ee44a4604c50beb3ff4064fe46fcdbac8d59f8f41ec33ba83e3d81d9bb8ed88902565a272269a80d6751801a245b0105edf17c00c30fc5addf7407e64c3", 0x8f}], 0x1, 0x7f, 0x3cdc, 0x10) syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00') fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 7.418070781s ago: executing program 2 (id=2601): syz_open_dev$video4linux(&(0x7f0000000140), 0x4000000000000000, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000001200)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3bf8cc0134fb55a63817f6bac437682ed4c30147c2d86997f970ba094a19b0de4904bf83ff6fc3f0e46aba38692387ce1", 0x4}, 0x4c) gettid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 6.623297064s ago: executing program 3 (id=2603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r3 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='secret\x00\xa0\x95=K4\xe8\xad`W\xd1+\x18\x9a\x99\v\xfa,9\x15M\xee\xe7\xb7d\x9f\x1f\xd8\xa2\x89Y\xf0\xa2;b\x96TkG\x7fh\xd3p}\x19_Z>I\xd4/\xd4\x84\xca\xf7Y\xa1y\'Ujl$J\x1b9\xcf\xben\x93\xa1\xe7c\xed\xfd\xd8p\xea\xbc\x8d\"\xe3\xbaS\xba\xb7Jv\xbas\xd0\xb1\xdf\x17\xc5\x7f|\xc65\v>\xa8n\v\xbe\r\x13\x845\x18\x87\x87q\xe1\x9e{~\x9f\xf7\x1a\xe2L\x1a\xec\xd7\xe2\xd8\x85\x96\x1a\b7\xb7\x99\x1e`\xbaS\xae\xe16\xe6\x1f\xc7\xae\x11H;JK\xb4\xdex\xee\x9e2Z\xe7\x85YQ\\ }\xb3\xae7T\xb9\x83\x11\x06\xff\xac]\x023\xe8.tG\x10\xe5%\x1f\f\xdaD\x94\xe0\x9d\xda\xaf\xe1w\xc8R\x83\x84\xb1\xcc\xedu\f1c\xd4u\x8eH\xbd\x85\xf7\xb8\xcd<`z\xa0P\xeer\xec\xac\xb3\xf08\xe9>\x983d\x88\x19\x1a\x85\xbb\x88\xca0\xdf?k\xb9\xf3k\xb9m\xaf4\x9f\x14H}\x0e\xf3`X\xbf\x99\x98\xfa~g}y\xb1U\xa6\xaf\xf6C\a\xb7\x85):\xf4\xc7P\x81\xae2\xf7d\xfa\xd2}\x92\x83\x9c\xa2c\x1b\x91 +?+\xb7\xae^*b\xb1\x18\x86\x8a\x11\x06B\xa8\xfcmrhzA\xadS\xda\xd5a%Y\xe9\xfb\f\x9f!\xf5\v$\xd8,`At1\xc4\a\x13}\x0e\x88c\xb0\xfc,\xc3\x8a\x171\x03\x00\x00\x004\xd8\x9a\x17\x18\x16\xf7\xe4\x9e\xf0\xf3\x9f2\xc2Q\x89\xd7\xcc\xe8\xac5\x12\xaa\f\x18}#\xb9\xd1/\xed\xdb\xc2R()\x87\x8a6\x05U\xaaS\xd11\x83k\xa6\xb8g\x01Ur{\xa0\x13\xc9O\xbc\xe5:!bv](\xa1\x1b\xe0\xda\xc712h\a\xd3\x85g\x17\v\x87\x8d\x0e\xf7\xf69h\xd1w3\x14Z\xa7\xa1\xf3[\xa5c\x80\xf7\xdc{\xf6\x9f=\x98\\\x88o\x7f\xaf=^\xb9\x9c\xf1\xea\x18\x9d\x1d6*\xe5\x96\x05\xeb>}8\x82\xa8<\xc0\x9b\xe3\xf5\x8fi\xc2\xbat\xf2pK4\xf0q\x11\xb18\x18M\b0\xa4q\xc5Soma:@S\xde\xe0Hu\v\xac\xd9\x9d\x7f\x91\x0eN\r\x80\xd5\xa2\x11\xc8,\x98t\xb7\x01F. \xd52\xdb\xce>\xb6[\xd1#A\x0f\x88\xc2Bn4\x83\xd9\xc8H\a\xc3\xb5\xb1\x7f\xca\x8c\x1bjQ\xc8\xb6\x91\x1dC\x1b\x85K2H\xa9eh\xc6m', &(0x7f00000007c0)='\x86=/9\xfdAQBv=K9e\xc7;M\x13\x9a-\r\xffS)@\xd1\xde[8?\xc7\xc8\x12\xd0;\xeaA\xee0l\xf9`c\xb9E\xcfv\x9a\x9e\x88\xa9F\xaf\xab\x98\xdcK\x1e\xb1\xdb\xd0\xf2):\xf1\xbdW\xad<\x17\xb7\xf1f]\xd4l?\xa5\xc2 nU\xab\xdc\xd0\xd6\xf6\xb9\x00\x00\x00\x00\x982\x17I\x04*n\xe6xM\xe36\xc4\b\x97\xb2$\xa9\x9a\x19\x05\xf6\x84Mz\xa6\x12n\xb3\xd1%\xa1%D\r^tT\x93\x8b\xc7*\xbe\x1b\x1b\x91\x82\x00\x00\x00\x00\x00\x00\xebo\xf5h\xef\xa1\xdd\xf3\x995\xa2Jl\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcdY\x96\xae\xc3Y\xea2\x92s\xe3Bb\x94\x15V\xb8F\x19=\xaf+\xa9<\xfeA\x91t\xd8\xa2\x8f4\xc7\xb9\x9d\xd6\xc6\x05\x00\x99\xb2\x8e;\x02\xed\xfcuW\xe1\x06\xf3 \x8d\xecy\t\x7f@\x1c!\xb1\x01\x00@Q:G<\xd3\xd7\xa8\xf4\x03m\xb6\xac\xe2\xa6c\x05\xfa\xdb`\x91L$\x8b2\x16\xf0\x8a=\x83\x85\xa0\xed\xcaX\xb4\xb0\xe8\xbf\x95n\xf8\xed>\x82Y\xab\x9b-|\xc7\x00\x00\x00\x00\x00\x00\x00\x00P\xf3\xaa\xa72\xf6\xf0\xe7M)\t\xc8\x82g\xaaR\x0e\x94\xb8b\x19 \f\xf81\xd5\x84\xd4\x17\x1c\x9e\x1a\x99\xf3M\xc0\xc6 \xad&\x03\xa1\xed\xa9\xd7\xe9o;\x1b\xaf\b\xdeU\xed\x04!\x813\xdeR\x92u\xcfi\x907$\xb6P\xf9\x90\xebK0\xce\xb2\xda:\xe3u=\xe8gw\xc6\xf9Y$\x90/3#\xe2\x99\x9d\f\xb0\x1b\x9c\xb8\x89H YE\xb5\xb7\xb4[3J\xf1g#\xab\xfe\'Q\xf6\x83\xa6\xab\xf9\xfb\xd8\x04us\xc7\xf8_\x8f\xd9,\x00\x8d\xcce>^\x98\x8f\xb4\xe6I\x1f\xc1\xfd-\xa6\x93j>\x1f\x0f\x01\x19\xcb\xdc?\xa3r\xa0\xcdv\x12\xb8\x8bB<\x9c\x86\xbe\xdcFN\x19\xa5\f!w\x18x\xad\xdfRQ\x1d\xc1\'\xd4\x16{\xd2\xadDR\xa6Y\xc8\xfe8\xdf\x88\x9c\x8f\x90\xff6{\xc2E;isd\xc9\xfb\xe6\v\xd7\xd6\xff\x115\xbb\x9c\x14\x83V\xe4\x9fd\xd7\x1b\x1a\n\xd8\xc1\xe5\x86\xc6\xfc\xba\xb3\xac\xfb\xb6\xcd\x1a\xbd\xcf\xbaA\xf1\xfe\x82\x88v\xd0\xb1#\x1d\xfed\xb3\xac\xd9\x85\xf6a\xffU&\x15\xb7\xc5\xc4\xe6\xc0\x85\xca,F\xa2\xb3\xa4\xfc\x85\xf0\xca\x8f\xb5\x00', 0x0) 6.312930072s ago: executing program 3 (id=2604): r0 = socket(0x9, 0x3, 0xfffffffe) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd(0x8000) r5 = eventfd(0xa) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000180)={r4, 0x7, 0x0, r5}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r5, 0x7, 0x2, r4}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000000)='hsr0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r7, &(0x7f0000000000)={&(0x7f0000000140)={0xa, 0xd, 0xa, @local}, 0x1c, &(0x7f00000002c0)}, 0x20008b88) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xffff, 0xfff3}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x44000) r10 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001001bb866effc1fe894cda19b873f388e00000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e6572000000480002800800024000000084080003400000000708000580040001006d657461000000001400028008000140000000090800024000000010820900010073797a30000000000900020073797a"], 0xb0}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r11, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="2c010000130001"], 0x12c}], 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) 6.24872106s ago: executing program 2 (id=2605): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000002c0)=0x200000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) unshare(0x2040400) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r3, &(0x7f0000000080)}, 0x20) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa, r2, 0x800000}, 0x10) 5.667988402s ago: executing program 3 (id=2606): unshare(0x26020480) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000002180)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x8, 0xdc74, 0x3d4e17}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r4 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x440, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {0x8}, {0xa, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x414, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xe698d26a90974041}, @TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x8f, 0x0, 0xfffffbff, 0x5, 0x10000, 0x4e3, 0x3, 0x5, 0x140c, 0x3ff, 0xc08, 0x800, 0x0, 0x1, 0x1000, 0xff, 0x9, 0x80000000, 0x4, 0x7, 0x4, 0x7, 0xffd, 0x40, 0xce, 0x8, 0x200, 0x7, 0x100, 0x7, 0x6, 0x2, 0x3cf, 0x0, 0x3, 0x1, 0x2f, 0xffffffc0, 0x4, 0x7, 0x6, 0x2, 0x7, 0x8, 0x7, 0x0, 0x1, 0x401, 0x10000, 0x9, 0x1, 0x3, 0x9, 0x9, 0xfff, 0x5, 0xed71, 0x65b4, 0xfffff248, 0x1, 0x3ff, 0x7, 0x0, 0xa, 0x9, 0x8, 0x7f, 0x267, 0x0, 0x8, 0x10000, 0x1, 0xfffffffb, 0x0, 0x9, 0x0, 0x9, 0xa, 0x8001, 0x9, 0x7ff, 0xfffffff9, 0xfffffff7, 0x3, 0x4, 0x401, 0x8, 0x8, 0x9, 0x2, 0x3, 0x3ff, 0x5, 0x7, 0x4, 0x9, 0x62b, 0xc, 0x5, 0xa60, 0xb4f0, 0x6, 0x9, 0xffff, 0x8, 0x5, 0x5, 0xfb, 0x8, 0x5, 0xfffff0d0, 0x1, 0x3cfd, 0x10, 0x23, 0xfffffff9, 0xffffffff, 0x639, 0xffff, 0x81, 0x0, 0x10001, 0x10, 0x81, 0x0, 0x1, 0x3, 0x6, 0xffffffff, 0x200, 0x91b0, 0x0, 0x1, 0xfffffffb, 0x10000, 0x7, 0x8, 0x6, 0xa63, 0x3ff, 0x7, 0x4, 0x7ffc, 0x9, 0xff, 0x401, 0x726d, 0x11, 0x9, 0x8, 0x1, 0x3, 0xffff8000, 0x0, 0xdb, 0xace, 0xb, 0x549a, 0x1e, 0x3, 0x4, 0x1ff, 0x38, 0x6, 0x8, 0x4, 0x1, 0x7, 0x7, 0x10, 0xd48d, 0x1, 0x1, 0x10, 0x5, 0xe3, 0x6, 0x3, 0xb, 0x9, 0x9, 0x9, 0xffffffff, 0x4, 0x8b01, 0xbf19, 0x7, 0xfffbff57, 0x80, 0xffffff9a, 0xff, 0x6, 0x5, 0x6, 0x423, 0xfee2, 0x80000001, 0x9, 0x80, 0xa0, 0x4, 0xb, 0x4a, 0xa, 0x7033, 0x3, 0x2, 0x5a1, 0x2, 0xa6, 0x7, 0xffffffff, 0x8, 0x6, 0x3, 0x8cff, 0x7, 0x6, 0x2, 0x7, 0x6, 0x0, 0x2, 0x0, 0x7, 0x8, 0x1000, 0x5b, 0x8, 0x3, 0xfffffffc, 0x3285b265, 0x7, 0x2a, 0xa883acfa, 0x5, 0x7, 0xfffff000, 0x3, 0x10001, 0x9, 0x1c, 0xe, 0x3ff, 0x3, 0x5, 0x80, 0x15, 0xf, 0x403, 0x6, 0x9, 0x7fff, 0x1, 0x25]}]}}]}, 0x440}, 0x1, 0x0, 0x0, 0x40098}, 0x4000) ioctl$KVM_GET_SREGS2(r3, 0x8140aecc, &(0x7f0000000400)) 5.621606416s ago: executing program 6 (id=2607): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8935, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r4, 0x851, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1, 0x1}) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@mcast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@loopback}}, &(0x7f0000000480)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000300)=0x0) r10 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, r9, r10) r11 = geteuid() fsmount(r4, 0x1, 0xc) r12 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r12) sendmsg$netlink(r12, &(0x7f0000000bc0)={&(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="e80000003d00000126bd7000fedbdf25a8652cda1c78b2c995f7ef22e71fb5d4d1c91431425e6182bc684d8d4cbe842291046f23396c7f66b5287ff9326efb77904d1f1f38dcba407c75344dae330dba884dbdd024fd5ba1dc89fe67a520b4558966f2fe89ed4be683e6102b8ac64e830ae5fc2e5a538fe22badb59fbbfeabeed2625abd98c42d9ae9be0b4000c091cbf51ad59887f496cfbe4bbc4f6b3b28fef36ab0d0b45ebc933d593e17e6fb922afbb599a93c7f27e70d0baf51c62944d944bad5bf32f7c60c0007000006000000000000091938c23f5a051c409e1d1b2c6e1982db5a6a7fa2"], 0xe8}, {&(0x7f0000000340)={0x24, 0x31, 0x200, 0x70bd26, 0x25dfdbff, "", [@generic="6c8655c12edcf368e28fa6cc20d6d0d088961e32"]}, 0x24}, {&(0x7f00000004c0)={0xf0, 0x40, 0x10, 0x70bd26, 0x25dfdbfb, "", [@generic="14e55211cb46d3d2f49a9d93c9cc1597124223ed310b0a05039215f32b42a2da276b46d883f120ed8419f3c22d53f411c7481d96b2673f5523b0adc044", @generic="114bbe9c93a3e9d631b691a450ee68b271b411ba94fca05b497a30a7a5013f45df5d8b0c13f8f21529df6a79a9693cf333b9e5fa895457a1f7ce6e7a2b5db0c1852f9d27becb5f1bf917fa82b5410392f1127fd288b6fad3ddb91c1f038a7afb4d44b7653a981eab96e1", @typed={0x8, 0x12d, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x70, 0x0, 0x0, @u32}, @typed={0x8, 0x31, 0x0, 0x0, @uid=r8}, @typed={0x14, 0x53, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0xc, 0xad, 0x0, 0x0, @u64=0x7}]}, 0xf0}, {&(0x7f00000005c0)={0xec, 0x34, 0x6, 0x70bd27, 0x25dfdbfb, "", [@generic="c8ee78c9ff9be7bbe68a73b918a66bb2455c77325787dab69ff525131aa62501b46ba985b040a4b0dc52c679ca0a0acb7a55404e05312ddad08a1288768c9fd2d3f2b88a7e10cb0c8f74b5a64847a9894ba52aba63419cb8e32c832c94013459e10d6bdfe3f79966c795cb5b6669f7a09de0519b786391e4469cc1fcf0da532468c18194f8fd8898c274d0a3b779722f315f6c65285da93a9ee003623ce9f696d50f4c99f80997ca1e39a504e1f472847a31b88504d19998782213c588ac69f234a43b2722e0dba253ffa99a1172cc8d34", @typed={0x8, 0x16a, 0x0, 0x0, @uid}]}, 0xec}, {&(0x7f0000000c00)={0x3b0, 0x21, 0x200, 0x70bd27, 0x25dfdbfd, "", [@generic="20dd6516db5c52124833402bc4f4301aa426072d93697b94a69dc05e7573b06c431ecff74d525c65693e56d2c2f9ea1df0c28b634c70f6af50fbc19b70ca43a90077e53f956587b3e4bf07cf7979f3f8d05d6e5718a26ca7bb71261302f40f66ad97fb81b26c81dace8cd0a2d40c6a1ba16826368d86612b766081f2235222552e6a7510b6ce52bccfcd936f446b4bfb8f454140fefc0def4e4d5a66893764f16ea3e797a5e47a716b9a156a5878731c4a51c57e43b376c9223dd77c16e3b255d991c09e53c90407a251f20dcee69f7d6788f17d0c70a119f3", @typed={0x8, 0x51, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x6, 0x132, 0x0, 0x0, @str=']\x00'}, @typed={0x8, 0x124, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x14a, 0x158, 0x0, 0x1, [@typed={0x14, 0x15, 0x0, 0x0, @ipv6=@mcast1}, @generic="68f3a26768e362c1d8a1806271518229e1f20bf0a677d711c18afea1e23608949ebdc54d35530eccf36610859da8b761fa91d0bef243f293b71955e28c5b854d27246c707a2666ee874e9a77d8809c80f38e840d7e921b5b4619038953ff2b35812cfb4763a128865b44", @generic="57c8486fa06761fcf6ca0c5b52d0b4b3a25636f8d7a60cb3f2c8330a5bcbc428100f729ff3f678c3585614e3b88d130f0fdd3219de755d687f2bb86a75063a14c5f4e1f5755ace4f7a977bf020b3f1dd1359936538134a0cf8c3dab44dccfa58c5eb9e6b96f2ad23612ab59a69c6f35cb4fc29ee65b8c6aac3f4a7dedca6797106daefc86804420de3e2639dfca1d4c3435e60da9313c8ce933295d408fd5f0a66a8549a831e3dab87feccb26c4879d73498295d0606542d4332d8ebe5643e264bce0f148a1392cb"]}, @generic="81a01c75df08777bf769431f218b68f3f67f57441e337e609f4337a79faabac8936616deaffb6970f10f837974b8b54836a9be54f5a67e78c73c59d89495089c4cc3b12dbb564a4cd9be2dff478f2c4fe123d327495c2c882026009b8a81cc6364752309a21dc72b850a1722bd22afc0d181155d4757c0ac4bcd064171da89e7d65d4cb3f99cb346893f74967c7762aecaaef2d21b0091bee54026ba520f71fd073d0e80ca4533c945d8cf638ebdef94b637e7d5cc9ce76843c975962f8d6e18e01eefbefe2428ce9aad7a5239309a2a800ce887c5970fea3049a3589c0e8ebe46653cef375f1754d5058076da", @typed={0x14, 0xae, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="a9ae468af1462978f5e54df3830a5c452dbf54b3c3d3afd66172cff155a066531a9c2756672c018884b480d7e82591860464e9fc04cbae7fc3f3cb42915c3c9d1701a1dd30bbb8856207c3daa79255aed3e273455b662213a9ce1ac92c6b5ef586"]}, 0x3b0}, {&(0x7f00000015c0)={0x10c4, 0x27, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x8, 0x106, 0x0, 0x0, @uid=r11}, @nested={0x10a9, 0xc7, 0x0, 0x1, [@generic="400cc6da734f6160c40e8ac43cb72777459df654f1320ffb611b85b241f80d77e7c7964883a14a604e7af3522e768ec3c8c041504151c8b1a9ec9665316ecaf9a41fdc89cd40cf07e5cea6754db16fc27f4768ae5ac5ab683e5d24e40592b31e0c6e1709c11fac5de618fcb9bc172ebd58d00c567e2aaebc84155c19fd3a1a7cd90fb1686d1962cd9b65344bc35cedba52999a66c247098a4071a0da2b7944b48a97f185d1c1d160050842c29c8085f8fe55539447bf1127456b5cd44155e74bcd5d64cbfccf943c4dfafb14c67e330b285249f37fa67880c030113a8ce4d214663e553a2633372969dc8ac2ddb8366a90b46dea4f0b3ceeb8ebfcfbe76c57d27ff1622fba87d3587f22c0eef08c09e0967ab44b1ca07cf19fce0a93232639dae8956b12dd2cbdcd0b4ea37642ec1f8c6d1eb5b70ce0b86b4ccf44f3c85cb2d24ac6cb6b8a786d3b75fafbb51030faa944d4613b0d04a4c1cdbde83a8c43e0e3dbc9fccb4107109ec3d3f36da0c53902d08ad1d050da5bd96a117fbc4fddd094b3d78b292db59e1a23b78f11f62de0f02f3a75f6ed038cecab0b8d969145aa065cbf743100c3e8249f5c3561ed5e59447654903be109dd47fd294df244a2a95e454e09a74eda04e7917c46d359b6e813fa0705d4ea5dd40204726debbd2670ebb9aa616f4aa8cfe6a9e013d74ae621684e13dfbc1627d55270c533ef5805b6464c06409ab7030ef385f2ccdbd87808609f51980e404f962a2af7e4d30e9c36a97f794e4136dedec44ca9df9a8db469c3000f123f0439d749f64d2bb599634e9c6abcee3c7a587ee7879bef374bbd36d15956292bc09f2b3e39b6a163d6d6123bb50bafd48a6e6568cf578125f1b3ba2581d21deefd500271ba49853565ad3d20c966d354729a3aaa535d64ae32dea09955f427cc7af5664807b91dc080c127840f0bc34237bc0a71bb5281da470008294ec46ecff7ab2c2681c4413af3a07d66b28e5e525a8d66c360fae20a09735f022e52a588d2fc9789fdee95440e7433c123ab7073ee4d2b6f6738bd3048abe0c284541124b654320f584abb3f508f9aabff3f98b07ee787da5ab288d06fddfeb59c9f9a885ac82b535ee2c70e30c0c3d6be041c94ddd48ce325260baa5142a85efbc96ccde7af5f9ff45ee46b7f60c8cf01564939733b6241258110096ed0cedf50d7a73d48b64736d28397d7a3a290b6c2bb85e4b294f8ab60faa591efe0b7a8b66957cb7506600437daeaa54b2b8ea3bbece4fb1abb1e0ebf5dc0c822853aab3f7f1de0342a05877a97502d0be5b0ea5f2160b244e831dc43026f2df17b6a6c597146d047db7dd82ea48d0d1d28e4e3f24b90b0d6074aeffa7531e1002da34df0845eae2cb567d1d5e0b632e7da0712d9b97bd33d7017ba418dff8c72ee6462fb99a25d767a3ad77bf4cf4e76f2b13d82f98612e89e78d26c8daba89da9d311ff907a79ba5b2f8504a8a4cc72193b4304a547e9635fb0bdd0a5b521c419d4beddc3d907f2b1d690559211c9d1c22e62095c38b775b695097f08352e51a0c817e3e1125f60488dd2065971680f24161ae590725f4157aacc299e5e704fab022f085acac63348be22a244ceb42e2589372104ab8daa53caacae17757859b4ef8fb2ce2be834f204155ceb13592b7021a5682ebc9838b2118c2369ce9cea42b60a41894d215170266b93e465450303b620770846d13fad444d2fb0ca7ec1d84d65b510398d00d878043980ab978f3e4e6cb3c4d8d1486760ba2f3a8ee91087735d070185f6c9a4b81e745e4e7f4d9972736dbfdbda1981ecf529fccf164f7e1b0002f1c87dbd14c5fa96aec89f491a0f86a05de2d407211f8f7fe7b2ae3fd21b6a95aa2e19e5fae8aeab65e9c495f7daf86a4d37c7541d213dc913c25974b284b3b61b81ee0ba8c6ee533a4786bdec4bc8567b929147e823e8858f29e0460ddab2ba8018cc276dab09aef0ac8e301381c03325efa79ac02ce348aeef1ff7d78485008ed2933c09f3bf0a9382f4d82284f1e5fb079e2496342a966cf5812af950717d0f6c044f7fe9e40fba41723e7af879c6c76d00b5491b866539765526baac6c89ced4bbd79fb27c281a5515aa507c0951990b53481fe73862fa48cd1ccae98decd1a40dfb4deeda527f6899cec072d37f67b3c9defb80fb20e38b3ffab805cce5b38f23b6975a1b9ab60aed3e33610e4b92a19e850704c070c890c8ccec68000afe0c0f8a6ef2f57035199a8847e5f523117d6b8afcb5293babf25cb2fa5ad6910caaae428ef49c329862384c25ef07ad3c2d698d847b327cffe3e42f91fe4b58d1f54ded766d27902a5b9cfa8250df5802697b2bd82a7bae641271a705d15f840c2ce159705081765a77c0e225398ee23845484ad21272c740c1d495a03a67d2f85b67e7b1693b8307d404a640143502ef6ead5cf94c12826e2a901e41aa01d3908da148746cbdcb33eda57baff1ce71355c7f0fa24c60939d92afca99df2ed77d823f464d3443247654743e3d6f51bba869dcc00cda1144211b52db85cbb35ccc89053a046614e086298f43b1d87dd52b84ced0fbe589cc6435ccc68c98171e841fa277fd0c3d401b5f1f071b591cc4e3cf5476ea292230fe1f2a22fba5ecf7a9074710421b2988892a40f6256dc7956de7c4302f841e9901afb1b76825f1f875baea7e537f11e0449e2dff3f179ea93ba6fc6e0d06ec0f43d89b6f16ece689871b4e761486d6e09828a76982fd3bacbcd481ff7bae199538b4eb7267d8f0a9632751f010c166ad0ec67fc0e16990e36589a24f0a99efcaade81b1181f3cfb51abc961b0702fb032ffd5ba49f02de26c33827617558b56bba53e47c0034f25c43c89988026257f315926ad24e8ac52ade1ca6d67a77cbaf19f77e6e8eafec6127adb85ca9f0eacb85935acdd4fe917acacc3f4f558bcc4d56dc4f4af01e624ca9e65c6e82770da4217adf1c4296eab02ad868c15e366f3889e97be9f0a845ed69f0cba264c57ba19898edeb94cf2454ab73e542913e3b0d13c825f8fbf1537b25909d5c8a4a1ed5a4eeeee5187671839a143ff28213efd9700d6b1a6840229cb54b306b6102762229dd60e2540c10f807f3a64b2b3ec181d2f4dba1c3598e48576a170ff417e1b1f7710011616e862dd6cdb5d66b433d6591f3f611be2cc262d9b27618bd322a192649e39d62604cd11f96e86e4682b06015a1a56075ff87eb52a59298b1f6ce0fe27b350ab68e162ba28b126c9b752998b5ea280b0cb65dbe8546035840b6fad3841e9ebf82c3b1dccfd509b1a8bc7358f616b19c78d5d222076b15b3bc1356003afc57ff3cbe9097a828f6ffbae30bab36d14479fc716d68336a1eb5f6a25ae58cfd27b9594264ee5745b0d87c76099cbdeb7372b6472bf0ddb0adeaa9a51ec236a30cd7d179c77e00f46198411316830a70b47a7d2f95f5a23c8c3cffc0540b39901486738405056c0ac11b948333754253ff5c884003b9ff4e03e96655c64bac12ea000f8beffb2f1c9a469312b0e260a92868375367fbe7c14b09557d238203bef336295cd5fd08d521841faa416df1c1b8f98a49e9d4ed6d0dfcf51c634989bd0b275db0ac43c0d3a40d46cb8c07c4ceed9ce3a7387a53f47c222d0222385e35aa09749d9ac34827960df23080a8bca02f1fb35179cc9866f111b4a3c0a35552ba519e56fb955a2fcc8a0b717e10541f7957342e1bd36041b1f86112d7203ea1a49304c19b4c84da41992cc25174dd0a6cb56845a38c9b10a25ac967418e3018b9487148c2f6bd1cff037575f2759f85edfcf534c571655d62e4104fb838fdea8cf71168e0c0cd0bfeeb736ef8ddf4b47a052fb9726ef537ac26e00f25cc0d2f3e932bac95ae2ce5919527a262da14d10be6f26206148ccd792491b2e754d14e8e41dfa8d6011026b4cd1c455794906fd85b764bf98b493841838695cc6b4a51a40c059b41f1c793b9383bb79d363d645fce81ecf803add7e39824277d8479c5df4f0b69d40f4708cae8656b67b42c5547693637007376be40533f1c49a6f19f3e927fff23986380d537936403d645fab22f5025414e3aecc77e81da81618b8a2930e64b59be5f72ad4d6e8baa8d0b66adb14a617f21938832814f2795d6927bc9ee7919217362a4c14a173cbf38a4e2b4311d436aca61d2d0bb16cc762d71f68529bb85cb6d9a5b5c1dc81bfbef0a416389687ed0132aecc0f58dce5385db1c6dd34793a7cab4a610299ce9ace3b881a2f5db579d735fdad03a3a4665987e20a9dc5fb9e10608ed66ba38a836f2c586c90c70759e793e9c63b38e70509025a5f54ce07b5066950b54d506ba0b0ebe49ae2c4d0854413fcb7c208d0202494928646e5970e72820481d77abd50ade2da12e17a27365bbd092111f6689ed6b731f8b70c50c35084997425ffd81893b67aa98c8dc69d31006707dca54f7ad8c94502210e0fc690122dff90e4a0de1453079270dd71ec5acb2db94db4f91c309c3b56f224fe425c748299625b2d0cf5276c29b7c40f2e6bad953b676eed8e0158a5e33538819d8c5f92e5ddc2d95dcca4cea4eb958d6592baf4c54be2f9f3c3990afd4674a03cb55ee6b86edb7df43318f47d1d519eb1f42da5601d990de77ddfb72c9133d9d4d5a905edd46b02dbb041e6b1d9f11252a46636bd1760af0e033dc527dda7551356c843d87d622864d45459faa240553ea469e423134e42c87183efdddd9d9e3b78126d160a3c2efdc161b550e57d1608473f5996caf2a932adc2dbce30dbf797575e185602e65bd1e7dda4b7b01bbbf977e418a1ac9f5caecd48c0cb79d631d5a9ba3bfa9b881f12eebf1f31fa3fdd90016d905781e36c7915a0a10c93276ab2d0cb57cc4fa46b745ef5e0a1ea5594f589b86897cd641fb76c1f1b4551b7c648a493aae8b4adaf2ae250f3d8e8478ca6813b1c0addeb6aef76854761a3404b194b89e5d99c349da2d479f3e601fc9ca255ede21edd6154db5d5ac59364aef3b5e81e79ca0191550161cbfafa4e757a867af2d601af312265a2dfba395d824dc92c4a2c088999105dfeb753fdbe65946655f58453214a5760c2961b373f2b7ad1d9eedae6bce1d910f4099e1f3b8317756165bf60b9bea28885a37c4326e10b2668d615b54a5576085ef63f7c954835df2b3124539ee9eb54e4423cf985c7d0c252c899560218401d9ab1d3b3905a6b85e9a6620df36ba843b781355617914e501215ff77d23f441a6bffc38276ba6db67fe9fc79c2a843422b80fe97ae4b18e58a232c9e97a57cb36de6b897d3185507491bab779df41887e4276324e6e81e2cc8af2abcef7eb98f427e27b83f253c95e46943338e9540de3f0fd0f61b003ee926d8774469fa6e59f2c9848d6763dd6f537d59d128ff1f665a17af2022c01306d60dd8a3c4888eff0a718495cedae7e084210f77eb839ce3f709a4aa726ea259b53cbdf33e9f4e8a79b7033888cddd7f0f7f4ef87fcac956e0bb263f530567ed1e675393cbbc8a62ca6c6546343933bf9caf832d25f9538946241e1d23ea5b8ca77f09a1b5b75ecfb94e4cdf49eaf6853c36ebac9444d0c1918a9fb1512e85d3a856bc7c4a226979b56cd22ad33d99958f7bacba6a7b71e1dd37cdf46e7e51b51498400f501e8a3b2fc048aea36a3490c992d4d93df4444a0c3ea2327e14fdfeb18506370fbd170746f3595d64b4781f9a5906aca05bf7df2fe38abaef99e81d613c3592d7fa099fd41fa1cb5bb005c8919f7044a889b1ca790e1ed6352dac820", @generic="0237a55aa5a27aca52eb6290e04438d0b38c05b00b3f640cf3334965360c64458f7cde357b1e760731a062f0157cc578900e429bab0fd9271ee909c4bc659c3ae3f0838b9fa76e254d6564cb6af1844d30b205d05e2529c19c320b1bb8be4c021a7fe1a27f0a9400e1ca988a8b0fe650e192cf9dafde449ffb6abfdfe39d928a771b5fa8068f81675b4ed08c72fe06c4de575ce8ee3bb0b3d3abcd84b5ecc99fd9ca45d4e9"]}]}, 0x10c4}], 0x6, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r6, r3, r5, r2, r5]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r7, r3, r7, r6, r3, r7]}}], 0x70, 0x48954}, 0x4000000) r13 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) ioctl$SCSI_IOCTL_GET_PCI(r13, 0x5393, &(0x7f0000000000)) r14 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$TUNSETOFFLOAD(r14, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r7, 0x40047440, &(0x7f0000001200)) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) 4.94108594s ago: executing program 1 (id=2608): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)=0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x8, 0x11, 0x8, 0x3, 0x7405f6fe, 0x0}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_connect(0x5, 0x29a, &(0x7f0000000540)=ANY=[@ANYBLOB="12010002fe398a20cd060401093501020301090288020102015004090433ff0ee08e618209050908000003030714242294a5017e325b534164bd522c06c43903380725010c08060009050503ff0304070409050e0020000701f8a1037e0611e838454c0480aafb052b5effab929863d52bdb44f762960f0ef991ce8904a3baa0c0b5994a9279ae2fc8b636f02b7d1322f3ee801890fe8cf6f452e9e0629bd7e3dda1610056ba64509aa480b723e5d2b1edc33ca9851bbe0fd63fda464794c94f56d5f8d1fe32dfa81a6e6e1a68c28dd79da9c460623b9b0a33a126509576f7ce61c5978ca563a37dd2f28d8cef4dbf7bf8d63529a2091aeb50245709050010000201060a0725010c09010009050e020004c008052306b4f13a48a7207766dab5517abbacef0f92aa767c3057e7f793ac2cde279eb3607609050e04ff030c0e0d09050b004000072959072501040004000905020020000703031f096188cf1bb21e7bce3902397d85dd0e4938a74c082e2a167761645d06ad090501100002055a000725010003070007250104eeff00090504020002fb060328319efba2ee29401c9afb80b6cfac17ff31744ffca282f590ea307d4975e54138d6c2856f0ca35c09050e000002f5040409050000400009070007250100020900090502004000d2007c0725010cc301010725010c010200090507f840000001029805b407"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0xfd, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x2f4}]}, 0x34}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) ioctl$XFS_IOC_GETBMAP(r2, 0xc0205826, &(0x7f0000000280)={0x9, 0x3fe000000000, 0x9, 0x6, 0x3}) r6 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000880)={&(0x7f0000000780)="f97811ad17f245b792070ae52b547bd2db8ac2f1969cdae9b2a78ebfabbaeaf9d0d59dc0106684e48248a05d355763ebffd065f9bc89cf9525217ca5d657bea5549e8ba352814b3b2d2dce16eb5046244e9e892cce9f3e7c9d21397390f61e3a8ab024d8cb59279ea572a9b457087449eb5353c7a30a3fad2aa3cdb15a94f5080807e9dee0a2b107bae3c10db7442819bde60108e5e57f43b33b85aaf29421b75db58fa12c2621c8919c68ba02203c77c8d933516c4257685a4d2a4d57d9839fa4d3", 0xc2, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r6, 0xc00464be, &(0x7f00000008c0)={r7}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) fsopen(&(0x7f0000000100)='cifs\x00', 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0xe0, 0x6, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xb6, 0xe3, 0x5}}}}}]}}]}}, &(0x7f00000006c0)={0xffffffffffffff66, &(0x7f0000000380)={0xa, 0x6, 0x201, 0x0, 0x3, 0x2, 0x18, 0x3}, 0x19, &(0x7f00000003c0)={0x5, 0xf, 0x19, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0xdd, 0xff, 0xd}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x8}, @ptm_cap={0x3}]}, 0x7, [{0xe5, &(0x7f0000000400)=@string={0xe5, 0x3, "88c889edd4dd9d2a0eaedd1672f93baa406c795919ca6340c48a90cbc4323249d7b88d68ae9ae40cdc904aa567a9dcd258aaa311d322de483caff7cb8ea9c9344d2ad60783b772fa662c24140bcbd85cb37c9cf197792813381e0be1ecca288afa58116370ca429771b55e96d44fe81cef85ed241bae56e055bd1b0049f72aa44f2fb0532dbbda3c076cdb0f6d5b0333e0e5ba66f2a4ee54c68719311a7305c8ace3fca2e680c8f02c8bc0f8b07a259df137a21ffd509bc333d8b274443effd758e9c38586ff3be70a4b749f63249a93bf000a9a22eb5b41f2bec0dc21b4087f445482"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1409}}, {0x66, &(0x7f0000000580)=@string={0x63, 0x3, "69edd4460c61bbf6e50a794ade7cead34a2b1882d1d8aeb010495d64c4fc053049e9797f4b2430140767bc6635a16c624b207e8bd0bb57f88edbe4e97f16ae1aa89db6eff10591e2a66ed62b4b114d7cb722226c238c1eb99eed22bf834da92112"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x404}}, {0x0, 0xfffffffffffffffc}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x23}}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) umount2(0x0, 0xb) 4.864415755s ago: executing program 6 (id=2609): syz_usb_connect(0x5, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="28000000000000001701000002000000100000fa"], 0x40, 0x1}], 0x1, 0x80001) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) read$dsp(r2, &(0x7f0000000180)=""/167, 0xa7) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x6, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xb8d7c0f3e92be269}, @TCA_TBF_RATE64={0xc, 0x4, 0x431329138e1d06c9}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x2, 0x9733, 0xfffb, 0x6}, {0xff, 0x2, 0x3, 0xf252, 0x7, 0xd7a0}, 0x7, 0x6, 0x22e5}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@ll={0x11, 0x17, r7, 0x1, 0xc, 0x6, @multicast}, 0x80, &(0x7f0000002080)=[{&(0x7f00000004c0)='\x00', 0x1}], 0x1}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0xa, 0x1, 0x6, 0x6, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x7, 0x33, 0x20, 0x0, @in={0x2, 0x4e23, @private=0xa010101}}]}, 0x30}}, 0x4800) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0xdfe3) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) 4.380967467s ago: executing program 2 (id=2610): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000340), &(0x7f0000000380)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="000000001800100029bd7000fcdbdf250a14800bfc02c807002c00000000050000000000000000000000ffffe000000200000300", @ANYRES32=r1, @ANYBLOB="00001900", @ANYRES32=r2, @ANYBLOB="00000300", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0000088084703e31c6aceda6470d5a78a28bec00"], 0xfc}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="000000001800100029bd7000fcdbdf250a14800bfc02c807002c00000000050000000000000000000000ffffe000000200000300", @ANYRES32=r1, @ANYBLOB="00001900", @ANYRES32=r2, @ANYBLOB="00000300", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0000088084703e31c6aceda6470d5a78a28bec00"], 0xfc}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0) close(r7) write(r5, 0x0, 0x0) (async) write(r5, 0x0, 0x0) mmap(&(0x7f0000117000/0x4000)=nil, 0x4000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000117000/0x4000)=nil, 0x4000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x1a2}, {0x0}, &(0x7f0000000400)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1, 0xff01, 0xc}}], 0x48, 0x8005}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r12, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}, 0x1, 0x620b}, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r13 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r13, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) (async) ioctl$VIDIOC_S_SELECTION(r13, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 4.133638832s ago: executing program 6 (id=2611): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7ff7, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4050}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xfff3, 0x7}, {0xfff1, 0xfff1}, {0xf, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) write$binfmt_script(r3, &(0x7f0000000080), 0x4) lseek(r3, 0x3, 0x3) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x2, 0x7fff, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x9, 0x7, {{0xa, 0x4, 0x3, 0x4, 0x28, 0x67, 0x0, 0x2, 0x2f, 0x0, @multicast1, @multicast2, {[@generic={0x83, 0x11, "3e0b52518e9785b935a8d86697cde5"}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r8, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x84}, 0x800) r14 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01002bbd7000fbdbdf25020000050a000900ffffffffffff000008000300", @ANYRES32=r15, @ANYBLOB='\b\x00\v\x00'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) 3.758032747s ago: executing program 4 (id=2567): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) init_module(&(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x10, 0xfd, 0x9, 0x3, 0x24, 0x2, 0x3, 0x4, 0x57, 0x40, 0x86, 0x8, 0x7, 0x38, 0x1, 0xfff, 0x800, 0x34}, [{0x0, 0x7fff, 0x2, 0xc6f2, 0x0, 0x9, 0x6, 0x5}], "8eb134cc4c8e5ae8a95ebd562340f9ade4671d9b9e1c6b07dca743569d2f9442c133f4b992bfafab17b6dfe7392c16b4158951836d1696787bdb53a2977c7cc0518fe26623a01f506c650e9d31865ebd14f4a8e41af726abeaca0524c0b7ea872ba3b9f7bd474f533032d3cf390f63"}, 0xe7, &(0x7f00000002c0)='/dev/nullb0\x00') socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x6, 0x0, 0xd, 0x9, 0x2, 0x6, 0x4, 0x267, 0x40, 0x27f, 0x5, 0x7, 0x38, 0x2, 0x60, 0x3, 0x1}, [{0x2, 0x8, 0x0, 0x8, 0x194, 0x10001, 0x1, 0x6}, {0x3, 0x0, 0x10, 0x5, 0x5, 0x3, 0x81, 0x8000000000000001}], "6fd09b9eac8b9cfff5c8b28155f093a7ecc1995dda5c2a", ['\x00', '\x00']}, 0x2c7, &(0x7f0000000600)='/dev/nullb0\x00') r1 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x2010a00) r2 = io_uring_setup(0x344c, &(0x7f0000000080)={0x0, 0xbf6b, 0x80000, 0x7}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x113}, 0x20) sendfile(r0, r0, 0x0, 0x20000005) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0', 0x1) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$XFS_IOC_SWAPEXT(r3, 0xc0c0586d, &(0x7f0000000040)={0x0, r1, r6, 0x8000, 0x4, '\x00', {0x3ff, 0x8001, 0xfff6, 0xffff, 0x3, 0xd3, 0x0, 0x1000, {0x684, 0x7}, {0x5, 0x6}, {0x0, 0x8}, 0x401, 0x1, 0x100, 0x80000000, 0x1, 0x4, 0x0, 0x0, 0x3, 0x8, '\x00', 0x8, 0x0, 0x10, 0xfff6}}) socket$nl_xfrm(0x10, 0x3, 0x6) fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r3, r0, 0x0, 0x1002000ff) 3.540752499s ago: executing program 3 (id=2612): r0 = socket(0x23, 0x80000, 0xd9) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = creat(&(0x7f0000000280)='.\x00', 0x0) copy_file_range(r1, 0x0, r1, 0x0, 0x4, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={r0}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baf80cb85fb9c78eef66bafc0cec66baf80cb8a42e4b81ef66bafc0cb802000000ef66bad10466edc461717dffb98c040000b8d7000000ba000000000f30b94a0300000f32662666400fd6a6dc380000400f32460f01cfc403b54442b4d2", 0x5f}], 0x1, 0x69, 0x0, 0x0) (async) r5 = socket$inet(0x2, 0x2, 0x0) (async) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r6, 0x400, 0x1) (async) fremovexattr(r6, &(0x7f0000000040)=@known='system.posix_acl_default\x00') (async) sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="140000000000000000006a0000000000000000000000001000"], 0x18}, 0x20048890) (async) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x26}, {0xffff1000, 0x4, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff, 0x0, 0x9}, {0x10000, 0x8080000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x20, 0x9, 0x3f, 0x69, 0xfd, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0xff, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x14, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0x3, 0x8, 0xff, 0x7, 0x8, 0x40, 0xa6, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x41000, 0xfffc}, 0xddf8ffdb, 0x0, 0x100000, 0x110, 0x0, 0xf801, 0xeeee0000, [0x80000000, 0x0, 0x2, 0x1]}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r8}) (async) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r8, 0x0, &(0x7f00000a0000)='LLL', 0x3}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) socket$nl_route(0x10, 0x3, 0x0) 3.406925363s ago: executing program 2 (id=2613): bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="02000000040000000700000009"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8014) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905", @ANYRES32], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) ioctl$USBDEVFS_GETDRIVER(r1, 0x8008550e, &(0x7f00000003c0)={0x0, "c25cacd8771e5486e44edb756b1c5d6bdae54790c1178269f1040e91f77011a9ddefde923acb1657adabaa378aa6cf1a217c708f44092ac0be1e878cfb2e61a1ad2eb33bd8670da0e565e3211a93c594901ab7bac217e99d3f4ed101e3b5463d3d8709b94e3875bbef5382ec6d831ecca59be07d1601b8ee7487f8bf675227f4f861e4c582ee09f0ba55662194e19516f736d3c437cfebce34e1a2379cd364c8a8c3cee03dffdc6c6a3a404e567dda7dd283a1e83b8cbfef18cda8cb3d7d8f72e1a018c697bbd1bc0939a94f3b1da8c311fd381ace06a3ccde21c3f20a5a85bc6dc4ea59405ffc3d89fe0ffde0049cf3c78781e500"}) r2 = openat$kvm(0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@out_dx={0x6a, 0x28, {0x361, 0x2, 0x4}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_load_syzos={0x136, 0x70, {0x1, 0x401, [@uexit={0x0, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host64=0x2c04, 0x6, 0x901, 0xffff}}]}}], 0xb0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="af090000400848d51bb09ac90400000085000000950000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x29, &(0x7f0000000200)=""/41, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r6, 0x3, 0x11, r5, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r5, r7, 0x1000000facefeed) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000060000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r'], 0x66) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000ffdbdf25021820fd000000000000008311307cb4c9ce36b379254dafb180b0dfed50e8", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@private1}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0xd}}}]}, 0x80}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r5, r7, 0xffffffffffffffff) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0xffffffffffffffff, 0x2, 0x5002) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) io_submit(r11, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r10, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) 2.326521067s ago: executing program 4 (id=2614): syz_open_dev$video4linux(&(0x7f0000000140), 0x4000000000000000, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000001200)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3bf8cc0134fb55a63817f6bac437682ed4c30147c2d86997f970ba094a19b0de4904bf83ff6fc3f0e46aba38692387ce1", 0x4}, 0x4c) gettid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 2.040219543s ago: executing program 4 (id=2615): r0 = socket(0x9, 0x3, 0xfffffffe) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd(0x8000) r5 = eventfd(0xa) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000180)={r4, 0x7, 0x0, r5}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r5, 0x7, 0x2, r4}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000000)='hsr0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r7, &(0x7f0000000000)={&(0x7f0000000140)={0xa, 0xd, 0xa, @local}, 0x1c, &(0x7f00000002c0)}, 0x20008b88) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xffff, 0xfff3}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x44000) r10 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001001bb866effc1fe894cda19b873f388e00000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e6572000000480002800800024000000084080003400000000708000580040001006d657461000000001400028008000140000000090800024000000010820900010073797a30000000000900020073797a"], 0xb0}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r11, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="2c010000130001"], 0x12c}], 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) 1.646495316s ago: executing program 1 (id=2616): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_disconnect(r0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x936}}, './file0\x00'}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xfffffffffffffffe) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r4, 0x4068aea3, &(0x7f0000000140)={0xed, 0x0, 0x5}) close(r2) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) (async) r5 = userfaultfd(0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = socket(0x2, 0x5, 0x0) sendmmsg$inet(r7, &(0x7f0000002180)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) (async) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000640)=0xe8) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)=@expire={0x16c, 0x18, 0x400, 0x70bd25, 0x25dfdbfc, {{{@in=@private=0xa010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x6, 0x4e21, 0xfff, 0x2, 0x40, 0x0, 0x32, r8, r9}, {@in6=@dev={0xfe, 0x80, '\x00', 0xa}, 0x4d5, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, {0xfffffffffffffff8, 0x7, 0x8, 0x8, 0xb609, 0x5, 0x6c55, 0xff}, {0x1, 0x8, 0x1}, {0xc, 0x4f2, 0x47bc}, 0x70bd26, 0x3506, 0xa, 0x4, 0x5, 0x2}, 0x81}, [@iptfs_max_qsize={0x8, 0x28, 0x7fff}, @iptfs_max_qsize={0x8, 0x28, 0x8000}, @algo_auth={0x62, 0x1, {{'sha256-neon\x00'}, 0xd0, "b56a9983578906ae170e3c30cefeb289124811e138554273f80d"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc824}, 0x850) landlock_restrict_self(0xffffffffffffffff, 0xc) recvmmsg(r6, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r10, &(0x7f00000018c0)={&(0x7f0000003ec0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0}}, @rdma_args={0x48, 0x114, 0x20000001, {{0x0, 0x1}, {0x0}, 0x0, 0x0, 0x4}}], 0x78}, 0x0) shutdown(r6, 0x0) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) (async) r11 = inotify_init() inotify_add_watch(r11, &(0x7f0000000340)='./file0\x00', 0x300) 1.555931793s ago: executing program 3 (id=2617): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) (async) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001300310327bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="02470300032404001400030064756d6d79300000000000000000000005002100030000002d45d36a5203cbf6174cec72bfaaf8171fc7b27d09995928799ddba398693245a439bb4968be44aa134db2864a412d8d7c24d6f571838eb1e5643849c724002320403d9d463e5185a1d402fd4f6c934c3a86c5c1854e2ebf6b9aefc8f4c6ba5ced5d2cae031e91960ee1adf0aa01d964ae96e299c9b474634c23b12c4ce2f006e133c09c15ee24d9fc3d139e"], 0x3c}}, 0x2004c850) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000ac0)={0x1, 0x1, 0x15, 0x1a, 0x13f, &(0x7f00000006c0)}) (async) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) (async) recvmmsg(r0, &(0x7f0000001c40)=[{{&(0x7f0000000380)=@phonet, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000001cc0)=""/4097}, 0x7}, {{&(0x7f0000001a40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x0, &(0x7f0000001bc0)=[{&(0x7f00000005c0)=""/203}], 0x0, &(0x7f00000001c0)=""/40}, 0x2}], 0x641, 0x40000103, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000080)=0x30) 1.419407597s ago: executing program 4 (id=2618): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b400000010000104000000000000000000090000", @ANYRES32=0x0, @ANYBLOB="5142000000000000940012800c0001006d6163766c616e00840002801c0005800a000400aaaaaaaaaabb00000a00040027b1cb3c0f960000640005800a00040000000000000000000a000400aaaaaaaaaa2b00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaa4200000a000400ffffffffffff00000a0004007a73b6f0131a00000a000400439a7502000000000a0004000180c20000010000"], 0xb4}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1.318737854s ago: executing program 3 (id=2619): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000e27f000001000000010000004feca1facc4c6c978f6fde6ec67d4c00249ff882c8fec18bba66552b4d4cbb495efdc875585f015dd474d527982f080fb2515f45ab36238faf071b8508af08c46d482a65ba5ced5e7ec2c0d1bcb2341a690fd387442fe86712969eccc2acb9f03a161fc16cb2a5ea1766f6fc1cac518e90d9286a41f46f67394c123add526e5a39d8b42318d85c74d6c164b6533c747e3c359b990edcfcc4abed80ec0d04d108d2", @ANYRES32, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r2, &(0x7f00000004c0), 0x0}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x8, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, 0x1, 0x1, 0x1b3, 0x5}}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000008340)={0x2020}, 0x2020) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r8 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2d, 0x12}) syz_fuse_handle_req(r5, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0xfffffffffffffff5, 0x0, {0x8ce}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fallocate(r6, 0x10, 0x460e, 0x3) setxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) syz_fuse_handle_req(r5, &(0x7f00000021c0)="71c9810571dac0f3c070f93d6bb4b42909bd92e8f73fc96792968d34e9c28ae91c0213897360899c0985faf3f6121e89eb315bc9f5a581a24c3fe6992f0e85ca906e05baf6d09fac307212029b64d2a368bb1dcd1a61183a2f57880e27adea206c851a993cd2148c0b76433fed5ed3f7a955ab52cd889cd2c77d88a61709b204201e11f6ce613fed1d71f5b0249362732cfb7d0fa992d8f16265999470b68f207ff9a1a4bf08c0a9332ce2e67aff0d676c48f86bd7023d593a5318ef914dba8d6408628c8346d12d39e56de3b19f45aadf94ed6f0595201a75a9ba85641ed1fb1be886f49f96af907d1b52259da68e2f9cef0221ea363fe102d077a7eb90808095098d2a411a6a791a31e2591c99ceaa779954645acf35d5f6bed1bfe5e630fb036c400e96d7d90d406ea7f5be8a120f4232298d428fdef64f32cfb9f96c2489c9ac2bb38b41a863826c212470bde7a447874de3d6d6a9d8868ec0b76888456824fc234b751036b3e9acc7d859a3ac4ae0cf7b87487090705973e1a766fa2c049fc704fdd6213b606d0c682334dec27cb0cb94c3086a1df328571566efe09cdb8bf0f27ce61053dad91c623559a53bf89a4a64805c976c26547afbed8923815b37599a0345becb796719d0da8139a8cd9f247fea859f5b4799ab997eaf2903c9cd0b1cc0cd2cce81f18d40846e54ffc0bb2b95452a341f80b6e1eb73463c51e1089375d6113bcd39577e4b15ae6dd30be7e788e35c4785941ff30629cfed0ed0539762b61a4c0051e593ebf8c541520b35fef9e4742caa0fc0c333e248ed7e3bd30c64cc3793e9a5ece9be52411482ed55fd1ecbaa3f285fd0e29944bafa5c596ec98cbebd96ca694880cc2c6c1db14e25b7e41b8a3e77c94a77e0b09ae48dc84cf458efe8d10d99f55467d7b985841735fa90f9a357c4879f54a59831b9a952eab6868a93a7164d663b59b1cbc1830596a9bd0cddfe4a8332612b8ae343c6a87eb4e4a0527123779c97b9e94c5c1b2ab1e2ab678be19192f7f0c0e8e4343ec9ebb11b4d4bc48d79b98f5bbe12129d30c54a1bc552a51d30e68a21b03afe747fba5cd0544eeade53ac98c8667253a3bd2a00ff4cd84e95088c6f6edd6368fb37144a730b292e75bf798cd6b8c81597ee644106684b3a6775faa0184f16973d6ef3bcf2997b24bc282a13e8d188d61c1a2ad62e4e037775eb766390aa22c19417f7e3275fe615b94390b33bb6de89a5d3f3c32de78df36cc0271a40b1129c19b4bb66c57af2644cb738f26d9f3badf3cffb75819b7ec6c85cccc50d6043de0e4dc461ae1b3b4bbb46f4c1781655195ef1da38995c613c809cdc26f3c1391029a801baf4321c14b2342ffa3a852e908ea677fa3c2c11e3e27deb7d3f1fe47860baf1b5e08189c641ff9f5f13f5c7a6b0ee94807424b769b8b5d0cef64b9eafed2920b8c601d5a680f74d49bf7a5676f70fca1edd2debba1032cda786518af3aedb17c403440ba4c8fd225c4af0160b359a5c9334f9ab84760f6a130b86e2ccde64fa8002d39419bb58023b2487a31658f89a88011dcd9ba4730a15872e0dd9b824ae9fac3f89d0b0cc6ac1793f17f5cd7cfe80c684a76ca9d83697dc0ba3ec59f86a557947338d445253131205f365a74eb3b54b3aa79d730d7a6bd4b58cb9e9c7dc5f42b82e686cb4468b174e74c6cc644be22d585b63aa8b288d053310b173ccba67f757f32ba6c91ca8525fdfea5f4f60e5d57f7194defdab10aad569bb59da9ad0e924fe1e7dd7d15255f9a5689096b582af83d94d4de15345f745ae71f99ba41a0a08cbcdb61ef1297fc10c22b483d2ddc4a4002029b25978d3a3be1c1e75c4aebf2f9f0f32adc98691d2ada51e5fbec22c8e269d36bfede3452e2454d5214b77e080be38fe2f9ec6d11d987ffca3af15465579b14aa2e224eb5f86189512556add5008acee500cd27cf981b097e224adec858e1fd83d3bd99edca7122de2c6728befb31c2b22640d50a5203adbbe3a70bdc5829b033ff26c62289c30d49b0ba54fc65f64c69d21623c5c8ca8d3139d0aae4530a454e218d6353a1009ddc3477242146d14a73b3f6343e4bdb5856690e84e844a5feccee35c5965fcf89e1bb52660c8e3be4b16ef18afe6825d8b54501c6c68ebc67b499ddfb299d7b3b654f7639eeacf949441a2cc5b4d5f0c62d3d33e776c454c6a9345e4ebb8d236cbb63ec710e1b9b25458ac93fe02334cc2966f00dbd013818c1d2b09a6754b0e600f159e44b555679cd61f01d80cd5d4436aa1c09b98e976eecefe94116fcc85a91d5b76171cfbf9a897eba29f42d57d275f303298c80a19debcf8922406ed308baea728f1f829561cfa9a86cab5e8ddad8975fb6b3674292b95356f933271fe9ed53e3c4452de3ef3067a16f4053ef5296e240dc31d6203d7d0b3a890493644cc81b34a4a3816e070bea392154c2fde85dc430df7e98016ecddd21b6ee6d016aef0bc093082128fb13fe1f6624ccba34751d00061076657cbc581c4ce3b9f6b2468b492d49bd0577bc1d4b52d275fa317013725bcf94e7920bccfa8006cffd2d91d3aca956a97eb15873b9843caa231852c9c1346827697b0ff68576867be8c275d675924d9ef90595d6f80034bdedba41691c5221e03a249ef1c1647867dcf6fe884acc86765a095dff77d561e9281097bfb201a173c24ab0110bf455d5ef4f3eb0eef6237d73cc6a8438a65d1ac0b8f4971d3b7189560150adedfb4ee0abdfef801557b296f7259ca5b068d2bb16ea14deb8591bd0329e0d62a66767b1dd4077ed9015dcbc95054e3a32fa212facd27f12fa0cfd857ef1dac98426fbd5f5cc04c4fcffcaa06ab3951ea22c08e21acd4e9607aceb21d16cea3ac431fff7da03f53f720c6c06b2cf4ec28be205ae3727fc17363d8053f243994980aef3e313d675e747a39290ef6b55f20128cbd2284396905894fe0c983baf9e495fe40c3414c3a52fcdb2a40c1aea018173debc449e17779d3c10fa06adaf63c221adbff94309c7a2faff1b297e4ecbc7764a793e0a24326fc180db4d033dbc4e33528545d3747430c02d4ca917d57950ec179aa218b62ebe9c075b86359f1b1eaffb1e00d1ba5e8b6890c7f3137340bb6ec8ac34d27a0b99ded65a05d40575f6c765ab05b8bfdc302a18db6acc0cc79c9a84cf8443437b171c967e5a70d4d76c7368f42867cce192199f92e73eab83262f7579b0ce63547ba0671d432406fc07d55328dbf811325a5ccadf0111c48baa1495ef4a70e6360bb3d28c443fca894b908579fb0f4330cbd9befe5b0e3dc26ae57161db719ab6b6b64b940fad3887b8ff95dd4d074f572350b626f7bc39cef46e1c9e30b931d3ab40441810b873064e752dc57e8b2960a4e6e92661b2cafab6a4a797f169567c13629fe6bd354b394bce363796cfddd0ebc66b0f9c9576f7308aed859d989d45b898e786b7a90e6affd758005d17ff2bc10c3af0611c1c972b536dd8c8423ad6a0ad48caec821534b533d69593336ac4c81055306353c38d5b58a08dbbad6861dde1adeb262aed18cbf270741eb30432713a8a0a4ab4f50d7dc99e29bd2d0eea2d0392e59447ec897e75101159a05e78bc3e475e32efd9c754da907a02f0d6d98b762cfd6d1e747ae311c6632fb26e864bd8606791926a0d837cb0325c6a124d3db95f3de035d7b1e956bb67bdd03687b68166a647a4bbeab3b1e1b0aa9bad56f41e828783d1f70e00e465f69235e8b3d0174706e76f8afee8541364fd6aa25f9e253aeb6a0b0c4b99aa97bb6e6750ae1fa6037f4203374c6217a06e8b3d603665d9c3034b4c33c047148721aa613dcd136b3cf39191ba9fdece93ac9e648f8c67d20631ae007feeb8c903572bc219ddd1afc872492b5ddcab0fad04afc765da9658fb9243a10011b0bdddf6613021a9220b2e56f2fb943df4e38d128cc4e1c2de8886104fe9d013ad78d79efb777b8a52bdcb96090798a7e8371144f3d3abf85792884d324855c08eca85a622b2cd06f3a45187c979e6011577d15ab6733d75a2d256bad86669d670ec60e89a195bb456cd4c467c8bb8fde15ed07c361134a2382d9eb9da5e90c3c006dabda8bbce07a3beed9399586d911296c3a067886bf467b2a39b36b1e8d68f7dce1e64409b6e395d1395e997cd67210b9c632d092e17645b4a132c8a9ae03bf7f4fd75da8493871c00babf750b383e63b2c7dadc44e90d57835dbc1497f9050c940227c7d5246340f877f468fb36936060f4c0824e2d40619675a7846499aae14743d47da84190f1589837ca98409cae337b8f0e75da321981e600015684155ce3ea3a7bf0a2df0978e72c6c70fb670b419fe1364e2c379b88b8182e3c5ddbbedcb4785ea87408bcd2eba105d5a1193f5831439b24aaf8a19f77b2a682a20395ebe01dcaa5bea03cec917fdd73e7900f162e05990378b7e9b2e09e59053772f1703a1c9499f0d07f8bd199a415f5ae5070edae8f85597dd0bc5ab21dc350b2e909f362c61ea7ccd81a452da0bf7c434fa01a78768dd927988b03dbb159b6cdec734a336380d498cb0181b7e8754ea21da89f89132188a219a3849ca6830c2c945a54fdc3802500546e7abd3703804d2861816cda176359ae3c6272f0a484d12b1bcf6c11205dd343e0d888ded0c6b15b4fc27134a40e2b640493d47b8aef6513cfedeccccb89457f0d2387baa13552a909825eba085884d54b26f7ac4b39b47a526d61fb142fcbf01dd1e3760ae75d88c37c7bee293ecd044f169cb117965ef725b961653446a626f8926346e4879580a878b4ff8d7437364d3c7b4ff11150779e119571235636837fcbf836f0fd6e9436641dc88cf18368ccbe19ef64a4b02406a3a07b86890ddf6885c4982ee8c88433c066a03bb18a1382f2bb97772058b4283a33c42ad4a663def78f94bf3b15ae58a96b7815c9023784ebe048ac35558cdb515b571ad5479fad3cdcfa47a592f044c1dd59b7e7d7b3ef952ca61d92fe1b36d5d2083840b07d34160a4067d5907d8e48d88a2884b91d570d6313cf1cceb648b59d05c83b2a2c2eb418dfa3b94317db9aba21b5d8e0c8dcb9382fa3b641e6ab214a23ee7ba98d4d3f8fe2d2de9a156f22efa02854915275b556481fa5d894cc97ea143fca30259c86d124f1a4349272b4b7e74f6660380cf893c9db09e4797ad2f4a5a25c7db01d7998fc4b682ca2077f47e3ad6af1bf4b97ea2484ccac4b48beb2b63c95ae66546db3ff908de408655a3ec5268f3a9d471b3c574a227eb474418b0c5eebee76b502d02f8f172f7ee22dd3474ce2ce59547d5094cc222c85d8653e0568f6388e091e8ff64e5a95c66a89d0e0a098a5f3ea5f4aa04afa8eace3a797ec0184cff1f90d45dc1260d2ae35bf4c5fe15fd94b711fd753f735b203b7c1bc696ec15fcaaf1ef5d862613a7745c1c8ce8e7a44ddb0bb6a9bebc04d9d6cc96e4a56b62d4f4389f03bbff0dea378180b61874819d5efc0203477b409b5e4cb34100dfb98723b0e94370ec10118674dcc9e226b3e34c970f26c0456b7f4705f71836084e56d5b94a344ff3da2ee0bc99cfcfe3731b8d71515e435ffd28f1f797a5c13695b0f813f0de51be2556fb7b49cebf50999fd8ce11edb85ff8519c1c6cf631bdca6232faa5210eedfb3173d3941188096122ba33052c140df8ecd8087af069d73764e254ca441823ab662f9e62dbaf6ec5f053c230df4aafe8e9c6a0af56779ae680e89bef76989138ec26d5a47c3ad8ba852e4a4a4cd0c7b150ae87983773487c3b84300a4869f1cd40abd2339c22260f8e4a68f57921db7ee05c8a128e393c609f21a9db5a2317eb0826f4a2316322e6a1ce460300ddebe0c15894a2033b247c55dfbea00980a1821880ebd556ca4b718ff8fae226353cd7749ddf44394d95c875cf8d250a615577e939f3a81376c415db22693c456fb31145e1f45ed8b78a7b47ef866f7f8c2d01541a20f1992b0a4cbd0c4e7771d9ae4871207a1c8dcb6252f36846e16107fba8207ce79be0ed97c04b32bc3743d1ac3592dfa21def364fe463fa54c2c9e296d81964cd86b4c618f22b1d60f71291e2e75ff11bcac5a40a552b362f012ae828f06e3f6a8c02be6a44baf19b606319bf7c80303e866a6bf8c025d55b4c423d43be9f728bbb0c059f2e12825939570b8cba2bc6ffb2892b86afef1f33685a5fcb38e489fa981c97c49c9f451653df0acc01ba439f73624aaf220632a2a4c426eb15c31c4c5aa01938b93366dc34e07cdcc2be959bb16c42df481b80e758684c48e34cd1ba6b2c20f2e2a4818536e3c6662e4db5cfd84e7ed8990914c16df7447d9e49c761aa774c3927da44f18ab7fbccc960a1ce62f279e492706df592e85eeac0cee5fc44ffb37f469e8b776ca2a6737bf0257400d1e83ced96047df08636acdb154f7972edd2a96b72d44bb30629e0beca11fb7347eb5cc9eb3e0e3f49d1b639e3db3be98a163ea92dfa481db989e1798c8bab60bdbf89cd76b597bc6e5014f1ef53c54f0e74cc1b7b58da886150362f97a8ed7c25e43c0410674c9d517ab6f2e9ca29db62f8f17603b25012b20a47b5ff8539510fb77d45843b348dec7143b8288fe81cad3a043450507cef748cd83bc34ab484cde896743d6471249dd14a1c6e90c838d493526d928376617944cb2940d6e348a5698192034d5de05afbb26e554257013c71657a674f17c24ae2253ef6dd6965e59cc98e0699e4fb0a587de5494c76242c3eea738a6a4f1bc725365f5dae2a3691947cf5152cb082cdf71d5db4e4ce877696fe1710ff41c25f3a48f2bc09ad5229774ef15af943cb3f332b34d8eb02949e523719d539b68019f71a275a5ef8c8b5ec68321173dba924b53201f674268b4e557fd4ff32ecdb8e1b85a7d19270b4865d592f15cf1ba46bf7294f93652ea2423ed76822715e5f2e346216e40494ee806c4e1dac33b37afbdafab5f469123b107afb37361f9b97a6abeec3e966165287a6fa290aac9dbe2cb74b78ad4f06c18a6d17a8f7969dc82f2a8b75e36d4352645a42428dc5ebd0c1447cb0b23b6f00df690520d719a13ceb26fd6db2f4b5ba4bec936bac0af4dce935f8e85b4337097e1e55fcf5e2cdc477e61a3c7ae5fee3670c8605f472c2b8680f098230181a5757847620769a63934933266b1284bd1c064f30072cd16c3806ddd991b91db4259f629f29354c83fbc60bfc8bd5a74df50d83e4a787cacb9fde03b7e80d57a2f77b343207bd89df7e50983022276a75f7748a4315d97c2373123bf69af64b045e8730c9cb03618221cd4bb6f3608fd8768d9f07c2a730b0a731e56e46f11fee1f05be157b17f5506d03dc5487409fc9cffa994771edcedc0ae8bb9dde16aeb624c753c27681e534fe0f62e7e2209bcb2ba5c671270f4334ee43e61c743f0c49a54b56d045f4ddd89dda08fa7b35eb8c7fb75daf8a5b0ba68dae2edf25fd9a1063f44f20e3bc29f96868c270bb3310c705f21593936166076b95c20388cc431dd276b97a19886ad43cfc333949591460bfc0d8167a6dd37abd8efba27bae6a85f98e6cc998574394b61b2b1bd06f22839ac168f1a5c21a478e5344f046d74bcb7933f7f76f12d7e692c415621597388d338bf72947336d0bad756ef5e507f5f2eb8e72a253151a3e83ae5a2db2a4a39d2ed5d52223c5472dc254f87f8fde632477c9c5b8dcfc5eb1ca9f4b0dc8a4e9e8a30b6df127eef39e752335dd4afc672a18257a6e46a4d9aa6b266e626e7087623c822082d8459d899ff638b27b484f3d0e697c2f93996ea36323a5fc0178d4fbc9119a737c78a757d378d5beeee447279cf9b394e5a9f7a34d399cf1c88c13ed9709ef792b905ae72620b33a1e0a39d151720abe8a2afe2f37952137e6f60f96822cb9fb07df743b958178e4eb85c8154029c6f9ed940e1065e48b69546f6325d1e521d876a34b207eec13147613a72c02b81765e6888fdebf756e816a2bd52f3385b9fdebe1d48f4fa2ce97932db18fe4b70218a0e2960054e19bda0869c412f83bbe79ce258153456087ece7d058c93c9074fe586f4842f4cd518454362b5832faad6c40a7c8fd90cd57341b1f46e064d83e75aeb0ce71ef0d535804b5715f9fa2689047c2c84dbca61c0958b975e5ea6d4bec863ac8be56eaac2b130a20c6caad703fd7c44916d54891ecee2067f3008827158b71c9155bafcc5cff8eae172236412482b486028c08d67a08764238b4ebcc65fb10c559f78907965ab9d6657718e431cece5eed721db29577f23fb5e2d8fcfef0e5b712159e7bf419d71147cd9dd85055f93b9cbe94c4b066ef7fc619210605959f9cb389405dcf4886dbac1f174caac64d90fb748178f74eae49a7a5edffd28656b6118c83db17f1a88e714fbccd7c86745d548f5084168873eebea0650457d011b9386e717c575b0a54f38aa4811ac172b7d79639be975ba002a58b29f11c7f178e5bc2a5306dcb53ac7a6c5b0186a81cbc7be65e033960faa75ded1144bba561014bfb17d4cfadfc56a3babf8f6fb1cd678b134f6a3b0a772e988f8f664d3b357514b620555990d8090aff6e794e047e103e38918c175966b8c63c9ca487c95c5ef128fb6a45ea8fd97fbad46ea4ab9899654f2f3c82deaaf7e5cef34878cb3c71c210181ab30e4ced09c67c4b7977983d8a8beb5d6ad861ffae418032befa4c9d88d55b858c3d7adc17d0099a3295ef87c3d33c7a7bd981582d1f29d5d6d4c47cc79095b95eee5e44cbd45ee807b1fa914b920567c79db9bdce9b15b6bb119584c3381bbad886ec98bfa4c23d7afa1c3137248285f26b023756aca20968a35150774c05ba29c331cf352b4527ddfe54a7ddfd903dc39b7de291326e74a2683f1c115d82380ca2250da098ac8a12e026b546ab8303bba006c593332fbee7def9105c5864d3be7236d061933dfca7f4033205e10d557078d7b96de33ee328ffd2f0004c8ce991cccac55868a42dec4a91a91b974504c2fe5f74c3ec06c0f4de7457f050fc5a508dff70c1923f321f3c1553470aa10408d47540ed91ed91d7ea40ad983a58475cf8877821e582a5b473804f2a90abd58e037fb291029d6f95425b487e4cdbd3d535b0e6cf46035ba3a433b1eee5432b30512d1326a3d05dd9ec690da7ea0df9819fae018b6c74660bb44c314357fdcc21c806b2b2e1abc7d21a97d0bb788151cd7947af566df84ccfb5334cc5f8c4fc08d70cd974222b18ad33b4653361d9a82e6c29ee324d00ebfa16c693ac62e199c08090e3ae059d045b249a5f24b728db5fc6f4fa5037b54a805996d1a79517fc2f5e74db5c8a85597bbe835ef4ab117b20c4255225c9e5c48c44bc4ed75e4fc5498b7328b369ad5fd24e4bdda5326c15b2bf55022f837c7572c246ff6a3fba3865c7bc980051f98c6e54b2290a6860fb95e0dd803f5c0b3b9655fb7ee629c76fa1c3b14eb5be8a0a6e10d1717825faf1c01dddff6c6570411b2edcc098ad895eb27f2d95b5c38e7b26e015f5c107fff6397c3e37d9a2ef49d57129f498924777d2e29e5d420b9e33605752d4069fdd89099ba41e83bc7bdd5dc2a15aa4f7f2fd2b4fd174ce8043ce219332fbdd5bb123ea661bd8add30b32c9a8c400f738c8a145e729f88a4803bbfc8f9b89ccc71cba1fac195088704318fe7856d283a63d1a4762fd4aa6f2401dedd1aa0d1dac4f40bf612daa07a1b26258cf65615c85e8d5169ea6b684943d872dcb61cdab59965c676f9814c060f43740f9039289283628b6b985e9365f4263546cd3a258cf1378aa9b971d2b3d4ea0817187b70b17bdd1746c994a637e3f343b6846fbca7213583c6c8909b759eb765400baec09be2abdf02092a1eb722665209085cc109408d9ecb1f0ef28f4f5aeb83b345d00630b08caafbd2cc9c634c634161ec22ef1d9a46f595bbf42c5b052a6e1a77c64b2746b8d884d3520202c111fb80a1fa77fcbc833db36a1bbd2dbe672544521e02086e2751879427b7e31e41f33b56cea05324940f4e9b465feae0f7049c1dfe0c9933e82265fcb32333816329548114a05f80b948e1254b89e3f10d3211e7006e2a95717cc3aa2cc32b95f960c3599c2362d1641408cd8048580389df35f0d308cf357dcf85246195e6450e4da58274ab10496eeabb3d520eba9c2bdea3d7a376fcb42d71f77f3a8b097ca5f05d07b631c93de9599bfbf134842cc78f7b71d591a385de4af943d7264b9bec4a0de5f1f76d3dd7d4623c12468e798286790ef0ccacd6da0a849f040218164026a653ec5615ea1e9a830fc88d402ca1c2f9504ecf5607b6721a8107dcccf1f6378531fa15fa435886a87ba9b91624840fb78a2cd30de7d486070eb64494e02c7884a0628e017c05fb44f52e56bc7065549274efe327d042cde512cc003320f66c21dc87ebd539cd92744e388ad1095d8d3efec093c03235a6603e0d4fb6c60a3051cfbcbb80593bd33a4e876d86583075a0d2cd18bd772fe6b39172108417dc7397c2bd44d461304f549dab75d7662c83aacdcce88cc4bf8ecf559c86109979468f85a2686b08aa305c97e955a12ef9ac4662d014bf2aa7c3c50435351d07097d9c56276f0769fcc7cc3559d6624fab7c7336788559e8996022f592167cc3c04fb09e9bf2043770938c6742e8fc203d58a2270568233d20e83f2937bc8083d33622b6077ff4e9ce7f12a5f6a694324201d655cddcc1d94551b0b732dc2f782d8c5c88837d509ca2f385098e05af8073efbe54a6a34e9e16f1ce019191932fb1c740c553fd8d6ed5e879e94f17056d8f00e3f827af329e025275c6504b5bf2f4de3f3976cd40537ff9107beb3b0e2deb4e926fd1c51947bac37752066a7bc84b6bdc6f83204d51766e7209e16cf17b1c688185df5688bc83964c17b0eef73a8f8104bf6e2c69360d90a40aef80771dcb8b2d8fe3ccfdec757dea795b04ebaa8fccf5e29632e6234ea091555c8d4896e63f7e7f5ef6a4753981fc3ddb302b608d510ef7e198cec8c344ad84f44ca298926427541598a621a97802c6e25c5592108a606858de960c86ccd4206dcbd948135ea80857aaf5c324c7b2e9cc3242707c4fe7c84d2b1a99ada78dd30db155b1fea69b5d5530443aa72792990ba62befb71a33aaaacc8d5d289a01969ed1ce44e2bb278f84ba0533e0e06981c61c090b950432de0e21e28b14bace1f8f666fdff2bc686c0c74a524d986f7c6c0802b2a967feef4fde3312fa2ffc8a5a8b2eae12cddd0bc52aaf0801f6b814e0a248df7e74e351971b480464f07d4849291e844c7ce8fd5433e5e9eec7dceb14a9646715e2d4aea4b642639cfafbc61e6e15d2c10309fc2fb43aa0609f2420365d095150a7e022bc42357d4c48e2fa7a3b2a647e4281edbd06e5d7e4782aa4a0b04e61bdf21e9c9cc80915061f60ffc1c938b4f3e66fd307d17f93dc05bd109657ad2e2c5bfa4cf675f14f29ae10d0cc03e71edfcff86604da713b409d09d1fe97a851601af45274f5967c4ce339ee581f7d6694859413902ddf9be3557c339432f65a18b15712f0f7993d3a3038650285a4e5b0d7", 0x2000, &(0x7f0000001200)={&(0x7f0000000340)={0x50, 0x0, 0x1000002, {0x7, 0x2d, 0x5, 0x1240c004, 0x7ff, 0x4, 0x80000006, 0x9, 0x0, 0x0, 0x10, 0x1007}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007add1520450580800103000000010902120001000000000904"], 0x0) 1.099414588s ago: executing program 2 (id=2620): r0 = socket(0x21, 0x2, 0xa) chroot(&(0x7f0000000000)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbff, 0x901002}, 0xc) semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000004c0)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x89bc306de205de3}, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setxattr$trusted_overlay_opaque(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000740), &(0x7f0000000780), 0x2, 0x1) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000001240)={{@host, 0x400}, 0x1, 0x0, 0x39}) bind$netlink(r2, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) r5 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0xfffffffe, 0x1000, 0x0, 0x42b4}) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x50) close_range(r0, r5, 0x0) 1.016252899s ago: executing program 4 (id=2621): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000740)=""/109, 0x6d}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000700)=""/32, 0x20}, {&(0x7f0000003740)=""/195, 0xc3}, {&(0x7f0000003840)=""/172, 0xac}, {&(0x7f0000003900)=""/151, 0x97}, {&(0x7f00000039c0)=""/97, 0x61}], 0x7}, 0x9}, {{0x0, 0x0, 0x0}, 0xf55f}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}], 0x7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x36020780) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000340)={0x750, 0x6, 0x0, 'queue0\x00', 0x9}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) close(0x3) unshare(0x40000000) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003480), 0x81402, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x5}, 0xffffffff}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000440)="87", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x2, 0x48081) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x4, 0x81, 0xffffffff, 0xffffffff}) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') setns(r6, 0x0) shutdown(r5, 0x1) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000040)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x5}, 0x1}, 0x18) sendmsg$can_j1939(r7, 0x0, 0x4004150) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0) 0s ago: executing program 2 (id=2622): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x230a80, 0x100, 0x2}, 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB='\x00'/14], 0x14}}, 0x804) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f17, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0xb68, 0xfff, 0x9, 0x0, 0x12, 0x8, 0x40, 0x4, 0x6b, 0x1, 0x7, 0x0, 0x7fffffffffffffff}, {0x7ff, 0x1ff, 0x9, 0x8, 0x10, 0x81, 0x4, 0x40, 0x5, 0xbc, 0x4, 0x2, 0x3}, {0xd3, 0x80b0, 0x5, 0xff, 0x84, 0x9, 0x6, 0xe, 0xe, 0x9, 0xc, 0x6, 0x4}]}) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00', @ANYRES16=r12, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000008000a0000000000060002000100000014001f000000000000000000000000000000000006001b004e240000"], 0x50}}, 0x0) kernel console output (not intermixed with test programs): [ 848.188623][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 848.210842][ T25] usb 2-1: device descriptor read/8, error -71 [ 848.319611][ T25] usb usb2-port1: unable to enumerate USB device [ 848.338118][ T25] usb 4-1: USB disconnect, device number 46 [ 848.365710][ T25] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 848.380689][ T25] qcserial 4-1:1.0: device disconnected [ 848.909738][T14421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.910243][T14421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.934056][T14419] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2268'. [ 848.998939][T14419] ip6gre1: entered promiscuous mode [ 848.998986][T14419] ip6gre1: entered allmulticast mode [ 849.029518][T14421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.042696][T14421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.829260][ T8436] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 849.887896][T14436] loop3: detected capacity change from 0 to 7 [ 849.889060][T14436] Dev loop3: unable to read RDB block 7 [ 849.889152][T14436] loop3: unable to read partition table [ 849.889757][T14436] loop3: partition table beyond EOD, truncated [ 849.889818][T14436] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 849.999292][ T8436] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 850.012969][ T8436] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.013019][ T8436] usb 7-1: Product: syz [ 850.013042][ T8436] usb 7-1: Manufacturer: syz [ 850.013063][ T8436] usb 7-1: SerialNumber: syz [ 850.245020][T14441] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2277'. [ 850.268936][T14441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.282289][T14441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.553316][ T8436] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 850.567700][ T8436] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 851.207204][T14431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.221118][T14431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.688328][T14431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.692405][T14431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.226975][T14468] bridge0: entered promiscuous mode [ 852.232703][T14468] bridge0: entered allmulticast mode [ 852.271670][T14471] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2284'. [ 852.284264][T14471] tipc: Enabling of bearer rejected, media not registered [ 852.507526][T14476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2288'. [ 852.953334][ T8436] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 852.953394][ T8436] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 852.953907][ T8436] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 853.019130][ T8436] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 853.059012][ T8436] usb 7-1: USB disconnect, device number 77 [ 853.480697][T13945] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 853.608589][T13945] usb 2-1: device descriptor read/64, error -71 [ 853.811332][T14489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2289'. [ 853.848611][T13945] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 853.979046][T14494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2289'. [ 853.988542][T13945] usb 2-1: device descriptor read/64, error -71 [ 854.098951][T13945] usb usb2-port1: attempt power cycle [ 854.211451][T14499] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 854.211488][T14499] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 854.234410][T14499] vhci_hcd vhci_hcd.0: Device attached [ 854.240818][ T8436] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 854.398543][ T8436] usb 3-1: Using ep0 maxpacket: 8 [ 854.404919][ T8436] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 854.416718][ T8436] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 854.416771][ T8436] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 854.416834][ T8436] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 854.416865][ T8436] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 854.416896][ T8436] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 854.416931][ T8436] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.443510][ T8454] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 854.498597][T13945] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 854.519188][T13945] usb 2-1: device descriptor read/8, error -71 [ 854.529005][ T25] usb 40-1: SetAddress Request (46) to port 0 [ 854.532256][ T25] usb 40-1: new SuperSpeed USB device number 46 using vhci_hcd [ 854.638566][ T8454] usb 7-1: Using ep0 maxpacket: 8 [ 854.644961][ T8454] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 854.661608][ T8454] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 854.670112][ T8454] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 854.680127][ T8454] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 854.690162][ T8454] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 854.701292][ T8454] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 854.716096][ T8454] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.758595][T13945] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 854.790081][T13945] usb 2-1: device descriptor read/8, error -71 [ 854.909036][T13945] usb usb2-port1: unable to enumerate USB device [ 854.941008][ T8454] usb 7-1: usb_control_msg returned -32 [ 854.941079][ T8454] usbtmc 7-1:16.0: can't read capabilities [ 854.941234][ T1672] usb 3-1: USB disconnect, device number 19 [ 855.221486][T14500] vhci_hcd: connection reset by peer [ 855.233882][ T1157] vhci_hcd vhci_hcd.3: stop threads [ 855.235016][ T1157] vhci_hcd vhci_hcd.3: release socket [ 855.238547][ T1157] vhci_hcd vhci_hcd.3: disconnect device [ 856.673104][ T5708] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 856.772113][T14519] kvm: user requested TSC rate below hardware speed [ 856.797930][T14519] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=540686624 (1081373248 ns) > initial count (200000 ns). Using initial count to start timer. [ 856.843803][ T5708] usb 2-1: device descriptor read/64, error -71 [ 857.061989][ T8454] usb 7-1: USB disconnect, device number 78 [ 857.109233][ T5708] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 857.266790][ T5708] usb 2-1: device descriptor read/64, error -71 [ 857.270579][ T1672] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 857.345481][T14525] syzkaller1: entered promiscuous mode [ 857.351357][T14525] syzkaller1: entered allmulticast mode [ 857.363581][T14519] kvm: pic: non byte write [ 857.382266][ T5708] usb usb2-port1: attempt power cycle [ 857.461339][ T1672] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 857.480209][ T1672] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 857.480402][ T1672] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 857.480531][ T1672] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 857.480597][ T1672] usb 4-1: config 1 interface 0 has no altsetting 0 [ 857.480693][ T1672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.528526][ T1672] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 857.731481][ T5708] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 857.776106][ T5708] usb 2-1: device descriptor read/8, error -71 [ 857.822613][T14540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2303'. [ 857.845618][ T8435] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 858.001785][ T1672] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 858.021722][ T1672] usb 4-1: USB disconnect, device number 47 [ 858.028038][ T5708] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 858.044889][ T8435] usb 7-1: Using ep0 maxpacket: 8 [ 858.063323][ T8435] usb 7-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 858.081687][ T5708] usb 2-1: device descriptor read/8, error -71 [ 858.099968][ T8435] usb 7-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 858.100099][ T8435] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 858.100370][ T8435] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.172556][ T8435] usb 7-1: config 0 descriptor?? [ 858.191199][ T5708] usb usb2-port1: unable to enumerate USB device [ 858.426229][T14550] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2306'. [ 858.680047][T14558] futex_wake_op: syz.2.2304 tries to shift op by -1; fix this program [ 859.578699][ T25] usb 40-1: device descriptor read/8, error -110 [ 859.853635][T14573] FAULT_INJECTION: forcing a failure. [ 859.853635][T14573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 859.853785][T14573] CPU: 0 UID: 0 PID: 14573 Comm: syz.2.2313 Tainted: G L syzkaller #0 PREEMPT(full) [ 859.853820][T14573] Tainted: [L]=SOFTLOCKUP [ 859.853830][T14573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 859.853845][T14573] Call Trace: [ 859.853855][T14573] [ 859.853866][T14573] dump_stack_lvl+0xe8/0x150 [ 859.853911][T14573] should_fail_ex+0x410/0x560 [ 859.853955][T14573] _copy_from_user+0x2d/0xb0 [ 859.853983][T14573] __snd_timer_user_ioctl+0x719/0x4860 [ 859.854148][T14573] ? kasan_quarantine_put+0xbb/0x1f0 [ 859.854194][T14573] ? __pfx___snd_timer_user_ioctl+0x10/0x10 [ 859.854227][T14573] ? tomoyo_path_number_perm+0x219/0x5f0 [ 859.854335][T14573] ? __mutex_trylock_common+0x15f/0x270 [ 859.854371][T14573] ? __pfx___mutex_trylock_common+0x10/0x10 [ 859.854408][T14573] ? rcu_is_watching+0x16/0xb0 [ 859.854437][T14573] ? trace_contention_end+0x3d/0x140 [ 859.854469][T14573] ? __mutex_lock+0x30b/0x1550 [ 859.854507][T14573] ? hook_file_ioctl+0x1f2/0x600 [ 859.854590][T14573] ? __fget_files+0x2a/0x420 [ 859.854621][T14573] ? __fget_files+0x3a2/0x420 [ 859.854661][T14573] ? __fget_files+0x2a/0x420 [ 859.854694][T14573] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 859.854731][T14573] snd_timer_user_ioctl+0x5a/0x80 [ 859.854764][T14573] __se_sys_ioctl+0xfc/0x170 [ 859.854791][T14573] do_syscall_64+0x166/0x520 [ 859.854825][T14573] ? trace_irq_disable+0x3b/0x140 [ 859.854848][T14573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.854874][T14573] ? clear_bhb_loop+0x70/0xc0 [ 859.854903][T14573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.854927][T14573] RIP: 0033:0x7faa95f9e159 [ 859.854950][T14573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.854972][T14573] RSP: 002b:00007faa96ef9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 859.854998][T14573] RAX: ffffffffffffffda RBX: 00007faa96225fa0 RCX: 00007faa95f9e159 [ 859.855015][T14573] RDX: 0000200000000380 RSI: 0000000040485404 RDI: 0000000000000003 [ 859.855032][T14573] RBP: 00007faa96ef9090 R08: 0000000000000000 R09: 0000000000000000 [ 859.855047][T14573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.855061][T14573] R13: 00007faa96226038 R14: 00007faa96225fa0 R15: 00007faa9634fa48 [ 859.855098][T14573] [ 860.008306][ T25] usb usb40-port1: attempt power cycle [ 860.579897][ T25] usb usb40-port1: unable to enumerate USB device [ 860.616146][T14578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2315'. [ 860.653225][T14578] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2315'. [ 860.781880][ T1672] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 860.791088][T14587] loop3: detected capacity change from 0 to 7 [ 860.814116][T14587] Dev loop3: unable to read RDB block 7 [ 860.816296][T14587] loop3: unable to read partition table [ 860.816889][T14587] loop3: partition table beyond EOD, truncated [ 860.816941][T14587] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 860.899683][ T8435] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 860.951976][ T1672] usb 4-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00 [ 860.967641][ T6489] usb 7-1: USB disconnect, device number 79 [ 861.034687][ T1672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.034826][ T1672] usb 4-1: Product: syz [ 861.041399][ T1672] usb 4-1: Manufacturer: syz [ 861.041463][ T1672] usb 4-1: SerialNumber: syz [ 861.071856][ T8435] usb 2-1: Using ep0 maxpacket: 8 [ 861.116156][ T8435] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 861.153948][ T8435] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x1 has invalid maxpacket 1080, setting to 1024 [ 861.154067][ T8435] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1024 [ 861.161517][ T8435] usb 2-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 861.162642][ T8435] usb 2-1: config 1 interface 0 has no altsetting 0 [ 861.201746][ T1672] qcserial 4-1:1.0: Qualcomm USB modem converter detected [ 861.233832][ T8435] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.233957][ T8435] usb 2-1: Product: 視겯陋᫊㒥鴟㤠涻봶ㅺ᧹ᗸ㉬ℱ勊蹽臓âªå¡‘赈á—踸렌鉮ç¥ê£«ç®—턈㹬鷵啠꠱昂æ”Pꦆê‘ë¯†æ¼†ë‹…ì·æ¢…㇃橛㷕ᛉ䘈ê…醠襦䦜á°ìŠ½í‹³ç“¡ä§™è¸‚ã³‡âª›â…œäŠŒâ¢á›—從估ﵧâ±å½µç‰¦é¯žã•·ã¨šä—žê¯˜î§¼æ‰¨ëµƒé´“Ẫã徺䃕Ƅꔰê°ç®Ÿïží‚¿ëž´ä²‰ï¬îŠ‡ëƒ»ì¿ºà¯¸ä‰ˆÑ³á¦¸ï€¬ [ 861.238648][ T8435] usb 2-1: Manufacturer: à ¾ [ 861.238710][ T8435] usb 2-1: SerialNumber: 킗ᛯ잊峉묵뿇îŒäŽ£ï“†ê—°æ±¯ì…Œã¬â­è®¯ë¼ëŽ¥ì›„ä»µè¢’ã畇ã†ì¶«ï¸°ìˆ¶â¶¯ç«ªå®Œì’“ã¬¾í”‘ê“ á­Ÿäƒ»ìˆ¿ç«æ­€à¤°á˜©â‹šè¨æ¸½ï²¸ã”®ç¼–芦죴ᘜî’畣蕠̠é¯á•¡ì«¢å†¦å©«âž¬æºè¾±á˜Žê¢¸â£˜â¯¬å€è£»è‹–뾟䆱궋꠪馞熴è»à·â—ŽÊŒå…ˆì’›ãœ¦ì—›ì‘᱃徘븖体딉쎡ìµíŸšäƒ›í€Žë†žâ†…å–¹î‚讄㓗ᖣॉ榖殔⸀ [ 861.259895][ T1672] usb 4-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 861.335487][T14584] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 861.343462][T14584] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 861.687431][T14597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.701553][T14597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.787631][T14601] netlink: 'syz.3.2312': attribute type 29 has an invalid length. [ 861.935996][T14604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.948755][T14604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.967479][T14583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2317'. [ 862.490490][ T8435] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 7 proto 1 vid 0x04B8 pid 0x0202 [ 862.553375][ T8435] usb 2-1: USB disconnect, device number 19 [ 862.588861][ T1672] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 862.606159][ T8435] usblp0: removed [ 862.617498][T14611] FAULT_INJECTION: forcing a failure. [ 862.617498][T14611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 862.633959][T14611] CPU: 0 UID: 0 PID: 14611 Comm: syz.2.2325 Tainted: G L syzkaller #0 PREEMPT(full) [ 862.633995][T14611] Tainted: [L]=SOFTLOCKUP [ 862.634005][T14611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 862.634019][T14611] Call Trace: [ 862.634029][T14611] [ 862.634039][T14611] dump_stack_lvl+0xe8/0x150 [ 862.634077][T14611] should_fail_ex+0x410/0x560 [ 862.634119][T14611] _copy_to_user+0x31/0xb0 [ 862.634148][T14611] simple_read_from_buffer+0xe1/0x170 [ 862.634184][T14611] proc_fail_nth_read+0x1bb/0x230 [ 862.634217][T14611] ? common_file_perm+0x20e/0x2b0 [ 862.634244][T14611] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 862.634281][T14611] ? rw_verify_area+0x24a/0x4c0 [ 862.634315][T14611] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 862.634349][T14611] vfs_read+0x213/0xa80 [ 862.634384][T14611] ? __pfx___mutex_lock+0x10/0x10 [ 862.634423][T14611] ? __pfx_vfs_read+0x10/0x10 [ 862.634458][T14611] ? __fget_files+0x2a/0x420 [ 862.634492][T14611] ? __fget_files+0x3a2/0x420 [ 862.634520][T14611] ? __fget_files+0x2a/0x420 [ 862.634560][T14611] ksys_read+0x150/0x270 [ 862.634594][T14611] ? __pfx_ksys_read+0x10/0x10 [ 862.634626][T14611] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 862.634667][T14611] do_syscall_64+0x166/0x520 [ 862.634700][T14611] ? trace_irq_disable+0x3b/0x140 [ 862.634723][T14611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.634746][T14611] ? clear_bhb_loop+0x70/0xc0 [ 862.634775][T14611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.634799][T14611] RIP: 0033:0x7faa95f5e98e [ 862.634820][T14611] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 862.634840][T14611] RSP: 002b:00007faa96ef8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 862.634865][T14611] RAX: ffffffffffffffda RBX: 00007faa96ef96c0 RCX: 00007faa95f5e98e [ 862.634883][T14611] RDX: 000000000000000f RSI: 00007faa96ef90a0 RDI: 0000000000000004 [ 862.634906][T14611] RBP: 00007faa96ef9090 R08: 0000000000000000 R09: 0000000000000000 [ 862.634921][T14611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.634935][T14611] R13: 00007faa96226038 R14: 00007faa96225fa0 R15: 00007faa9634fa48 [ 862.634972][T14611] [ 862.775306][ T1672] usb 7-1: Using ep0 maxpacket: 8 [ 862.792349][ T1672] usb 7-1: New USB device found, idVendor=0413, idProduct=6a04, bcdDevice=27.2b [ 862.826933][ T1672] usb 7-1: config 135 interface 0 has no altsetting 0 [ 862.829006][ T6489] usb 4-1: USB disconnect, device number 48 [ 862.893821][ T1672] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.893909][ T1672] usb 7-1: Product: syz [ 862.893935][ T1672] usb 7-1: Manufacturer: syz [ 862.893951][ T1672] usb 7-1: SerialNumber: syz [ 863.041829][ T6489] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 863.067602][ T6489] qcserial 4-1:1.0: device disconnected [ 863.660157][ T8436] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 863.799539][ T8436] usb 3-1: device descriptor read/64, error -71 [ 864.049778][ T8436] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 864.189758][ T8436] usb 3-1: device descriptor read/64, error -71 [ 864.312641][ T8436] usb usb3-port1: attempt power cycle [ 864.661334][ T8436] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 864.689913][ T8436] usb 3-1: device descriptor read/8, error -71 [ 864.932245][ T8436] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 864.971053][ T8436] usb 3-1: device descriptor read/8, error -71 [ 865.020815][T14632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2332'. [ 865.073310][T14632] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2332'. [ 865.084881][ T8436] usb usb3-port1: unable to enumerate USB device [ 865.253894][ T1672] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 865.261980][ T1672] dvb_usb_af9015 7-1:135.0: probe with driver dvb_usb_af9015 failed with error -22 [ 865.295050][ T1672] usb 7-1: USB disconnect, device number 80 [ 865.576307][T14643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.587688][T14643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.692079][T14647] loop3: detected capacity change from 0 to 7 [ 865.700996][T14647] Dev loop3: unable to read RDB block 7 [ 865.706768][T14647] loop3: unable to read partition table [ 865.713636][T14647] loop3: partition table beyond EOD, truncated [ 865.721857][T14647] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 866.228604][ T8436] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 866.306806][ T7240] nvmet: connect request for invalid subsystem testsubsys! [ 866.315330][T14657] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 866.330359][T14660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.339378][T14660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.388918][ T8436] usb 7-1: Using ep0 maxpacket: 16 [ 866.396306][ T8436] usb 7-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 866.409184][ T8436] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.419654][ T8436] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.419721][ T8436] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.419752][ T8436] usb 7-1: config 0 interface 0 has no altsetting 0 [ 866.419794][ T8436] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.479380][ T8436] usb 7-1: config 0 descriptor?? [ 866.920927][ T8436] glorious 0003:258A:0033.0027: unknown main item tag 0x0 [ 866.928448][ T8436] glorious 0003:258A:0033.0027: unknown main item tag 0x0 [ 866.935745][ T8436] glorious 0003:258A:0033.0027: unknown main item tag 0x2 [ 866.947727][ T8436] glorious 0003:258A:0033.0027: unknown main item tag 0x0 [ 866.955258][ T8436] glorious 0003:258A:0033.0027: unknown main item tag 0x0 [ 866.963218][ T8436] glorious 0003:258A:0033.0027: unknown main item tag 0x0 [ 866.970976][ T8436] glorious 0003:258A:0033.0027: unknown main item tag 0x0 [ 866.978283][ T8436] glorious 0003:258A:0033.0027: item fetching failed at offset 10/40 [ 866.985633][ T6489] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 866.995099][ T8436] glorious 0003:258A:0033.0027: probe with driver glorious failed with error -22 [ 867.150563][ T6489] usb 4-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00 [ 867.163242][T14669] loop4: detected capacity change from 0 to 7 [ 867.176931][T14669] Dev loop4: unable to read RDB block 7 [ 867.183028][T14669] loop4: unable to read partition table [ 867.189274][T14669] loop4: partition table beyond EOD, truncated [ 867.195710][T14669] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 867.218754][ T6489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.218882][ T6489] usb 4-1: Product: syz [ 867.218956][ T6489] usb 4-1: Manufacturer: syz [ 867.219022][ T6489] usb 4-1: SerialNumber: syz [ 867.297236][ T6489] qcserial 4-1:1.0: Qualcomm USB modem converter detected [ 867.347674][ T6489] usb 4-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 867.436502][T14653] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 867.568370][T14675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.582340][T14675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.602956][T14676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.616730][T14676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.781374][ T1672] usb 7-1: USB disconnect, device number 81 [ 868.073939][T14683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.076369][T14683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.200846][T14684] netlink: 'syz.3.2339': attribute type 29 has an invalid length. [ 868.630279][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2351'. [ 868.630446][T14689] bond0: Unable to set down delay as MII monitoring is disabled [ 868.804396][T14697] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2353'. [ 868.898925][ T6489] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 869.077805][ T6489] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 869.116288][ T6489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 869.116411][ T6489] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 869.116834][ T6489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.151689][ T6489] usb 3-1: config 0 descriptor?? [ 869.155071][ T8435] usb 4-1: USB disconnect, device number 49 [ 869.267036][ T8435] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 869.292086][ T8435] qcserial 4-1:1.0: device disconnected [ 869.382136][ T32] kauditd_printk_skb: 9 callbacks suppressed [ 869.391160][ T32] audit: type=1326 audit(1788441853.174:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14686 comm="syz.2.2351" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa95f9e159 code=0x7ffc0000 [ 869.441476][ T32] audit: type=1326 audit(1788441853.234:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14686 comm="syz.2.2351" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa95f9e159 code=0x7ffc0000 [ 869.501705][T14688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.522525][T14688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.594841][ T32] audit: type=1326 audit(1788441853.394:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14686 comm="syz.2.2351" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa95f9e159 code=0x7ffc0000 [ 869.619883][ T32] audit: type=1326 audit(1788441853.394:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14686 comm="syz.2.2351" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa95f9e159 code=0x7ffc0000 [ 869.619938][ T32] audit: type=1326 audit(1788441853.394:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14686 comm="syz.2.2351" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa95f9e159 code=0x7ffc0000 [ 869.670457][ T32] audit: type=1326 audit(1788441853.434:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14686 comm="syz.2.2351" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa95f9e159 code=0x7ffc0000 [ 869.670515][ T32] audit: type=1326 audit(1788441853.434:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14686 comm="syz.2.2351" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa95f9e159 code=0x7ffc0000 [ 869.670562][ T32] audit: type=1326 audit(1788441853.434:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14686 comm="syz.2.2351" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa95f9e159 code=0x7ffc0000 [ 869.670609][ T32] audit: type=1326 audit(1788441853.454:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14686 comm="syz.2.2351" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7faa95f9e159 code=0x7ffc0000 [ 869.695352][ T32] audit: type=1326 audit(1788441853.494:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14686 comm="syz.2.2351" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa95f9e159 code=0x7ffc0000 [ 870.061866][ T8435] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 870.141151][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.150618][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.248908][ T8435] usb 7-1: Using ep0 maxpacket: 32 [ 870.259689][ T8435] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 870.293956][ T8435] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.294096][ T8435] usb 7-1: Product: syz [ 870.305392][ T8435] usb 7-1: Manufacturer: syz [ 870.305449][ T8435] usb 7-1: SerialNumber: syz [ 870.319396][T14713] Failed to get privilege flags for destination (handle=0x2:0x400) [ 870.350222][ T8435] usb 7-1: config 0 descriptor?? [ 870.455616][T14717] fuse: Unknown parameter '0x0000000000000003' [ 870.787049][T14707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.799970][T14707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.816617][T14707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.829636][T14707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.849036][ T8435] airspy 7-1:0.0: usb_control_msg() failed -71 request 0a [ 870.849266][ T8435] airspy 7-1:0.0: Could not detect board [ 870.858938][ T8435] airspy 7-1:0.0: probe with driver airspy failed with error -71 [ 870.953443][ T8435] usb 7-1: USB disconnect, device number 82 [ 870.985584][T14717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.996049][T14717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.029325][ T1672] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 871.190486][ T1672] usb 4-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 871.208656][ T1672] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 871.208706][ T1672] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.208729][ T1672] usb 4-1: config 0 has no interface number 0 [ 871.208865][ T1672] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 871.208965][ T1672] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 871.265143][ T1672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.265233][ T1672] usb 4-1: Product: syz [ 871.265475][ T1672] usb 4-1: Manufacturer: syz [ 871.265520][ T1672] usb 4-1: SerialNumber: syz [ 871.284952][ T1672] usb 4-1: config 0 descriptor?? [ 871.298204][T14718] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 871.311503][ T1672] vmk80xx 4-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 871.323807][ T1672] vmk80xx 4-1:0.6: probe with driver vmk80xx failed with error -22 [ 871.491992][ T1672] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 871.553311][T14714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.557502][T14714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.661251][ T1672] usb 2-1: Using ep0 maxpacket: 16 [ 871.690019][ T1672] usb 2-1: New USB device found, idVendor=045e, idProduct=00dc, bcdDevice= 0.00 [ 871.735997][ T1672] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.736159][ T1672] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 871.738639][ T1672] usb 2-1: config 0 interface 0 has no altsetting 0 [ 871.738766][ T1672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.779316][ T1672] usb 2-1: config 0 descriptor?? [ 871.797699][T14732] netlink: 296 bytes leftover after parsing attributes in process `syz.6.2365'. [ 871.873655][ T6489] usbhid 3-1:0.0: can't add hid device: -71 [ 871.879822][ T6489] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 871.888368][ T6489] usb 3-1: USB disconnect, device number 24 [ 872.228544][ T8454] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 872.282282][ T1672] input: HID 045e:00dc as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:00DC.0028/input/input66 [ 872.408759][ T8454] usb 7-1: Using ep0 maxpacket: 16 [ 872.415048][ T8454] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=84.81 [ 872.425394][ T8454] usb 7-1: too many configurations: 44, using maximum allowed: 8 [ 872.436542][ T8454] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 872.445815][ T8454] usb 7-1: can't read configurations, error -61 [ 872.505769][ T1672] microsoft 0003:045E:00DC.0028: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 045e:00dc] on usb-dummy_hcd.1-1/input0 [ 872.588532][ T8454] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 872.752879][ T8454] usb 7-1: Using ep0 maxpacket: 16 [ 872.772450][ T8454] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=84.81 [ 872.772523][ T8454] usb 7-1: too many configurations: 44, using maximum allowed: 8 [ 872.822438][ T8454] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 872.830347][ T8454] usb 7-1: can't read configurations, error -61 [ 872.837161][ T8454] usb usb7-port1: attempt power cycle [ 873.188543][ T8454] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 873.211627][ T8454] usb 7-1: Using ep0 maxpacket: 16 [ 873.219261][ T8454] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=84.81 [ 873.229989][ T8454] usb 7-1: too many configurations: 44, using maximum allowed: 8 [ 873.242220][ T8454] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 873.250588][ T8454] usb 7-1: can't read configurations, error -61 [ 873.378533][ T8454] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 873.410327][ T8454] usb 7-1: Using ep0 maxpacket: 16 [ 873.417129][ T8454] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=84.81 [ 873.427270][ T8454] usb 7-1: too many configurations: 44, using maximum allowed: 8 [ 873.437975][ T8454] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 873.452252][ T8454] usb 7-1: can't read configurations, error -61 [ 873.459328][ T8454] usb usb7-port1: unable to enumerate USB device [ 873.563424][ T1672] usb 4-1: USB disconnect, device number 50 [ 873.603528][T14750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2369'. [ 874.425118][ T1672] usb 2-1: USB disconnect, device number 20 [ 874.652241][T14756] netlink: 'syz.3.2372': attribute type 1 has an invalid length. [ 875.010781][T14764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 875.011303][T14764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 875.141955][T14767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2374'. [ 875.194601][T14758] bond6: (slave gretap1): making interface the new active one [ 875.243623][ T1672] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 875.304470][T14758] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 875.411862][ T1672] usb 2-1: Using ep0 maxpacket: 8 [ 875.424442][ T1672] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 875.445570][ T1672] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 875.445700][ T1672] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 875.455865][ T1672] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 875.455965][ T1672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.525784][T14771] fuse: fd is not a fuse device [ 875.561239][ T1672] hub 2-1:1.0: bad descriptor, ignoring hub [ 875.561320][ T1672] hub 2-1:1.0: probe with driver hub failed with error -5 [ 875.572778][ T1672] cdc_wdm 2-1:1.0: skipping garbage [ 875.572840][ T1672] cdc_wdm 2-1:1.0: skipping garbage [ 875.572895][ T1672] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 875.797808][T14779] netlink: 'syz.6.2378': attribute type 1 has an invalid length. [ 875.879075][ T6489] usb 2-1: USB disconnect, device number 21 [ 875.994612][T14779] bond3: entered promiscuous mode [ 875.995179][T14779] 8021q: adding VLAN 0 to HW filter on device bond3 [ 876.187133][T14780] 8021q: adding VLAN 0 to HW filter on device bond3 [ 876.196687][T14780] bond3: (slave ipip0): The slave device specified does not support setting the MAC address [ 876.214953][T14780] bond3: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 876.235473][T14780] bond3: (slave ipip0): making interface the new active one [ 876.243555][T14780] ipip0: entered promiscuous mode [ 876.263321][T14780] bond3: (slave ipip0): Enslaving as an active interface with an up link [ 876.310595][T14791] syzkaller0: entered promiscuous mode [ 876.310642][T14791] syzkaller0: entered allmulticast mode [ 876.491570][T14799] netlink: 'syz.1.2383': attribute type 11 has an invalid length. [ 876.633908][T14807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.645018][T14807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.384260][T14803] syz.2.2382 (14803): drop_caches: 2 [ 877.893110][T14824] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 877.893144][T14824] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 877.911744][T14824] vhci_hcd vhci_hcd.0: Device attached [ 878.219056][ T1672] usb 40-1: SetAddress Request (50) to port 0 [ 878.219238][ T1672] usb 40-1: new SuperSpeed USB device number 50 using vhci_hcd [ 878.274930][T14827] vhci_hcd: connection reset by peer [ 878.281832][T12021] vhci_hcd vhci_hcd.3: stop threads [ 878.281932][T12021] vhci_hcd vhci_hcd.3: release socket [ 878.288616][T12021] vhci_hcd vhci_hcd.3: disconnect device [ 878.812824][T14838] loop8: detected capacity change from 0 to 7 [ 878.835578][T14835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 878.869868][T14838] Dev loop8: unable to read RDB block 7 [ 878.882679][T14838] loop8: unable to read partition table [ 878.891862][T14838] loop8: partition table beyond EOD, truncated [ 878.892019][T14838] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 879.492683][T14846] pim6reg9: entered allmulticast mode [ 880.256353][T14856] netlink: 'syz.2.2392': attribute type 1 has an invalid length. [ 880.264973][T14856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2392'. [ 880.978785][ T8436] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 881.148625][ T8436] usb 3-1: Using ep0 maxpacket: 32 [ 881.168639][ T8436] usb 3-1: unable to get BOS descriptor or descriptor too short [ 881.168746][ T8436] usb 3-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=d7.a6 [ 881.201097][ T8436] usb 3-1: config 16 has an invalid interface number: 102 but max is 0 [ 881.201152][ T8436] usb 3-1: config 16 has no interface number 0 [ 881.201205][ T8436] usb 3-1: config 16 interface 102 has no altsetting 0 [ 881.312598][ T8436] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.312649][ T8436] usb 3-1: Product: syz [ 881.312690][ T8436] usb 3-1: Manufacturer: syz [ 881.312713][ T8436] usb 3-1: SerialNumber: syz [ 881.359689][T14873] fuse: Unknown parameter '0x00000000000000040x0000000000000004' [ 881.761218][T14859] could not allocate digest TFM handle sha1-ni [ 883.259932][ T1672] usb 40-1: device descriptor read/8, error -110 [ 883.656307][ T1672] usb usb40-port1: attempt power cycle [ 883.801342][T14899] netlink: 'syz.6.2404': attribute type 10 has an invalid length. [ 883.811835][T14899] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2404'. [ 883.823292][T14899] dummy0: entered promiscuous mode [ 883.835026][T14899] bridge0: port 4(dummy0) entered blocking state [ 883.842461][T14899] bridge0: port 4(dummy0) entered disabled state [ 883.850100][T14899] dummy0: entered allmulticast mode [ 883.885270][T14899] bridge0: port 4(dummy0) entered blocking state [ 883.885557][T14899] bridge0: port 4(dummy0) entered forwarding state [ 884.267593][ T1672] usb usb40-port1: unable to enumerate USB device [ 884.557258][T14902] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 884.557294][T14902] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 884.590942][T14902] vhci_hcd vhci_hcd.0: Device attached [ 884.808684][ T8454] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 884.867925][T14911] pim6reg0: tun_chr_ioctl cmd 1074025676 [ 884.873990][T14911] pim6reg0: owner set to 0 [ 884.887887][T14904] vhci_hcd: connection reset by peer [ 884.900649][ T7240] vhci_hcd vhci_hcd.3: stop threads [ 884.902832][ T7240] vhci_hcd vhci_hcd.3: release socket [ 884.902971][ T7240] vhci_hcd vhci_hcd.3: disconnect device [ 885.944698][ T8436] mct_u232 3-1:16.102: MCT U232 converter detected [ 885.955640][ T8436] mct_u232 ttyUSB0: expected endpoint missing [ 885.972970][ T8436] usb 3-1: USB disconnect, device number 25 [ 886.051275][ T8436] mct_u232 3-1:16.102: device disconnected [ 886.396511][T14919] tap0: tun_chr_ioctl cmd 1074025677 [ 886.396665][T14919] tap0: linktype set to 805 [ 886.728725][ T1672] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 886.874644][ T1672] usb 3-1: device descriptor read/64, error -71 [ 887.048783][T13579] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 887.116647][ T1672] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 887.222776][T13579] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 887.237983][T13579] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.264924][ T1672] usb 3-1: device descriptor read/64, error -71 [ 887.369355][ T1672] usb usb3-port1: attempt power cycle [ 887.711734][ T1672] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 887.729876][T13579] usbhid 4-1:1.0: can't add hid device: -71 [ 887.738726][T13579] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 887.755013][ T1672] usb 3-1: device descriptor read/8, error -71 [ 887.787040][T13579] usb 4-1: USB disconnect, device number 51 [ 887.988828][ T1672] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 888.009996][ T1672] usb 3-1: device descriptor read/8, error -71 [ 888.126449][ T1672] usb usb3-port1: unable to enumerate USB device [ 888.888622][T14962] sctp_setsockopt_maxburst: 55 callbacks suppressed [ 888.888695][T14962] sctp: [Deprecated]: syz.1.2421 (pid 14962) Use of int in max_burst socket option deprecated. [ 888.888695][T14962] Use struct sctp_assoc_value instead [ 889.449163][ T1672] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 889.620820][ T1672] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 889.651423][ T1672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.651548][ T1672] usb 2-1: Product: syz [ 889.651954][ T1672] usb 2-1: Manufacturer: syz [ 889.652007][ T1672] usb 2-1: SerialNumber: syz [ 889.693174][ T1672] usb 2-1: UAS is ignored for this device, using usb-storage instead [ 889.702717][ T1672] usb 2-1: UAS is ignored for this device, using usb-storage instead [ 889.702770][ T1672] usb-storage 2-1:1.0: USB Mass Storage device detected [ 889.711233][ T8436] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 889.720801][ T1672] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 889.726990][ T1672] scsi host1: usb-storage 2-1:1.0 [ 889.890910][ T8454] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 889.910024][ T8436] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 889.924120][ T8436] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 889.924176][ T8436] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 889.924236][ T8436] usb 3-1: config 0 interface 0 has no altsetting 0 [ 889.924277][ T8436] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.986203][ T8436] usb 3-1: config 0 descriptor?? [ 889.997674][T14973] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 890.218737][T14973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.229638][T14973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.459536][ T8436] kye 0003:0458:501A.0029: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 890.472143][ T8436] kye 0003:0458:501A.0029: unknown main item tag 0x7 [ 890.489041][ T8436] kye 0003:0458:501A.0029: hidraw0: USB HID v0.0c Device [HID 0458:501a] on usb-dummy_hcd.2-1/input0 [ 890.500612][ T8436] kye 0003:0458:501A.0029: tablet-enabling feature report not found [ 890.509432][ T8436] kye 0003:0458:501A.0029: tablet enabling failed [ 890.681054][T13579] usb 3-1: USB disconnect, device number 30 [ 890.847164][T14990] fido_id[14990]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 890.893720][ T6489] usb 2-1: USB disconnect, device number 22 [ 891.014769][T14997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.015796][T14997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.618658][T13945] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 892.780337][T13945] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 892.793774][T13945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.805336][T13945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.829230][T13945] usb 2-1: config 0 descriptor?? [ 892.931211][ T8435] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 893.044010][T13945] usbhid 2-1:0.0: can't add hid device: -71 [ 893.044152][T13945] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 893.061493][T13945] usb 2-1: USB disconnect, device number 23 [ 893.121822][ T8435] usb 4-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 893.145611][ T8435] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 7 [ 893.145746][ T8435] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 134, changing to 7 [ 893.173765][ T8435] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.173859][ T8435] usb 4-1: Product: ï‚·â³é¥æªµÒƒì´žé¡°äºšâ±ˆêºë‚ªã»¿á¹¹âŽ êºã‰¶ê¾¯àµ¤ï”³è¶ºË¤ä“Œí®ì©µç«Ÿêš©ë–Šâ­šé†©æ«¬ãˆªì–€î½ì¨˜áŠä²³á·¿â±‰ç°è¼•筫裭ἷ凪딵ɱ断│瀎뭋醴옅㤖⛲퉫逢펋䥰ⳕ蘳࿰玘巿젒î£è‰‰æªæ¡šæ™©î‚¼æ§¡ç¾¶á™ë ˆè¹¦é»„몚ï뎯⛂䦀薋난ë¯ä§§í“Œïƒ¨ã¹‡à¯ãŽ»æí…›îº¼áµ»á¸Š [ 893.178880][ T8435] usb 4-1: Manufacturer: 槷挥囙í»â›ƒëŠ¾à¾©æœ²á«½é©‡è—薙₻樫牪ᘉሴ瑵롊å˜è…žï©³é€§æ¯–䪾áƒê²Šé¡˜æ¸å…‰é—淌軲ඔ쯹ã—⼼晊㚵局훚⿤盶답섦ë¹à¯¹ã¯ â…¥å™˜Ä¼ê¡å¯„ç›£ãš¼æ¦¾í“‚â¶—ë£·Ú˜å’—á„€ì¦’è„£åœ [ 893.178966][ T8435] usb 4-1: SerialNumber: syz [ 893.480375][T13579] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 893.493785][ T8435] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 893.561241][T13945] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 893.626232][ T8435] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 893.652970][T13579] usb 7-1: Using ep0 maxpacket: 8 [ 893.660770][T13579] usb 7-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 893.682750][T13579] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.682855][T13579] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 893.688556][T13579] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 893.688681][T13579] usb 7-1: config 0 interface 0 has no altsetting 0 [ 893.688788][T13579] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.736959][T13579] usb 7-1: config 0 descriptor?? [ 893.743585][T15032] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 893.751386][T13945] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 893.769199][T13945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.780672][T13945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.797725][T13945] usb 2-1: config 0 descriptor?? [ 893.960648][T14442] udevd[14442]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 894.081490][T15035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.082144][T15035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.175342][T15035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.180497][T15035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.254526][T15038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.264125][T15038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.719824][T13945] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 894.740566][T13945] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input67 [ 894.928573][T13579] usbhid 7-1:0.0: can't add hid device: -71 [ 894.934841][T13579] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 894.991646][T13579] usb 7-1: USB disconnect, device number 87 [ 895.079865][ T8454] usb 2-1: USB disconnect, device number 24 [ 895.079980][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 895.180660][T13945] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 895.340928][T13945] usb 3-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00 [ 895.355529][T13945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.364776][T13945] usb 3-1: Product: syz [ 895.364800][T13945] usb 3-1: Manufacturer: syz [ 895.364818][T13945] usb 3-1: SerialNumber: syz [ 895.394928][T13945] qcserial 3-1:1.0: Qualcomm USB modem converter detected [ 895.408168][T13945] usb 3-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 895.553243][ T8454] usb 4-1: USB disconnect, device number 52 [ 895.724724][T15041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.725192][T15041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.746455][T13945] usb 7-1: new full-speed USB device number 88 using dummy_hcd [ 895.807869][T15049] netlink: 'syz.2.2442': attribute type 29 has an invalid length. [ 895.909363][T13945] usb 7-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 895.921191][T13945] usb 7-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 895.932597][T13945] usb 7-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 895.932635][T13945] usb 7-1: config 0 interface 0 has no altsetting 0 [ 895.932680][T13945] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.964954][T13945] usb 7-1: config 0 descriptor?? [ 895.971991][T15045] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 896.616350][T13945] usbhid 7-1:0.0: can't add hid device: -71 [ 896.625564][T13945] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 896.646481][T13945] usb 7-1: USB disconnect, device number 88 [ 896.742787][ T8454] usb 3-1: USB disconnect, device number 31 [ 896.768347][ T8454] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 896.780745][ T8454] qcserial 3-1:1.0: device disconnected [ 896.979302][T15061] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 897.074378][T15061] bond5: entered allmulticast mode [ 897.091503][T15061] 8021q: adding VLAN 0 to HW filter on device bond5 [ 897.409534][T15072] loop3: detected capacity change from 0 to 7 [ 897.412291][T15072] Dev loop3: unable to read RDB block 7 [ 897.412468][T15072] loop3: unable to read partition table [ 897.413039][T15072] loop3: partition table beyond EOD, truncated [ 897.413094][T15072] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 897.497155][T15076] syzkaller0: entered promiscuous mode [ 897.497213][T15076] syzkaller0: entered allmulticast mode [ 897.566338][T15081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.567009][T15081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.940004][ T8435] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 897.991691][ T1672] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 898.098702][ T8435] usb 2-1: Using ep0 maxpacket: 16 [ 898.104899][ T8435] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 898.122633][ T8435] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 898.122714][ T8435] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 898.134699][T13945] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 898.160089][ T8435] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.160183][ T8435] usb 2-1: Product: syz [ 898.168339][ T8435] usb 2-1: Manufacturer: syz [ 898.174972][ T1672] usb 3-1: Using ep0 maxpacket: 32 [ 898.179917][ T8435] usb 2-1: SerialNumber: syz [ 898.189101][ T8435] usb 2-1: config 0 descriptor?? [ 898.195627][ T1672] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 898.208252][ T8435] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 898.208319][ T8435] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 898.233386][ T1672] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 898.233503][ T1672] usb 3-1: config 0 has no interface number 0 [ 898.253222][ T6489] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 898.266982][ T1672] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.267063][ T1672] usb 3-1: Product: syz [ 898.275209][ T1672] usb 3-1: Manufacturer: syz [ 898.275269][ T1672] usb 3-1: SerialNumber: syz [ 898.299891][T13945] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 898.311149][T13945] usb 4-1: config 1 has an invalid descriptor of length 96, skipping remainder of the config [ 898.321694][T13945] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 49728, setting to 64 [ 898.321730][T13945] usb 4-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 898.321776][T13945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.357027][ T1672] usb 3-1: config 0 descriptor?? [ 898.398818][ T1672] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 898.407951][ T1672] usb 3-1: selecting invalid altsetting 1 [ 898.408013][ T1672] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 898.440530][ T6489] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 898.464831][ T6489] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 898.464936][ T6489] usb 7-1: Manufacturer: syz [ 898.468560][ T6489] usb 7-1: SerialNumber: syz [ 898.527857][ T1672] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 898.534130][ T1672] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 898.534326][ T1672] usb 3-1: media controller created [ 898.570441][T15086] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 898.652726][ T1672] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 898.792511][T13945] dvb_ttusb_budget: ttusb_init_controller: error [ 898.792555][T13945] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 898.877921][ T8435] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 898.899382][ T8435] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 899.031589][T13945] DVB: Unable to find symbol stv0299_attach() [ 899.062741][ T25] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 899.106483][T13945] DVB: Unable to find symbol tda8083_attach() [ 899.113153][T13945] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 899.127130][T13945] usb 4-1: USB disconnect, device number 53 [ 899.295405][T15095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.319385][T15095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.322981][T15095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.324210][T15095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.346529][T15095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.347748][T15095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.364178][T15095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.385221][T15095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.396762][T15095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.418005][T15095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.609821][ T8435] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 899.613851][ T6489] usb 7-1: USB disconnect, device number 89 [ 899.636175][ T8435] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 899.649703][ T8435] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 899.663294][ T8435] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 899.676706][ T8435] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 899.688108][T15087] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 899.730597][ T1672] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 899.730681][ T1672] zl10353_read_register: readreg error (reg=127, ret==-71) [ 899.737973][ T1672] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 899.928890][ T8435] em28xx 2-1:0.0: AC97 command still being executed: not handled properly! [ 899.929056][ T8435] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 899.951346][T15108] trusted_key: encrypted_key: hex blob is missing [ 900.003239][ T1672] usb 3-1: USB disconnect, device number 32 [ 900.220007][ T25] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 900.231020][ T25] ath9k_htc: Failed to initialize the device [ 900.243178][ T6489] usb 7-1: ath9k_htc: USB layer deinitialized [ 900.333546][T15084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.342868][T15084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.364355][ T8435] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 900.364453][ T8435] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 900.379258][ T8435] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 900.379298][ T8435] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 900.379321][ T8435] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 900.438938][ T8435] usb 2-1: USB disconnect, device number 25 [ 900.778873][T15113] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 900.927829][T15119] bond6: entered allmulticast mode [ 900.952174][T15119] 8021q: adding VLAN 0 to HW filter on device bond6 [ 901.396732][T15117] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2464'. [ 901.789290][T13945] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 901.829504][ T8454] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 901.949562][T13945] usb 7-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00 [ 901.963243][T13945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.963292][T13945] usb 7-1: Product: syz [ 901.963337][T13945] usb 7-1: Manufacturer: syz [ 901.963358][T13945] usb 7-1: SerialNumber: syz [ 901.988912][ T8454] usb 4-1: Using ep0 maxpacket: 8 [ 901.994866][ T8454] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 902.005538][ T8454] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 902.021329][ T8454] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 902.021377][ T8454] usb 4-1: Product: syz [ 902.021435][ T8454] usb 4-1: Manufacturer: syz [ 902.021458][ T8454] usb 4-1: SerialNumber: syz [ 902.058807][T13945] qcserial 7-1:1.0: Qualcomm USB modem converter detected [ 902.089249][T13945] usb 7-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 902.274473][ T8454] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 902.290445][ T8454] usb 4-1: Handspring Visor / Palm OS: port 83, is for Debugger use [ 902.290511][ T8454] usb 4-1: Handspring Visor / Palm OS: port 171, is for unknown use [ 902.290538][ T8454] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 902.475525][ T8454] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 902.491098][T15150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.505331][T15150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.519335][ T8454] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 902.536035][ T8454] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB2 [ 902.637378][T15153] netlink: 'syz.6.2465': attribute type 29 has an invalid length. [ 902.723643][ T8441] usb 4-1: USB disconnect, device number 54 [ 902.744003][ T8441] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 902.763946][ T8441] visor ttyUSB2: Handspring Visor / Palm OS converter now disconnected from ttyUSB2 [ 902.775195][ T8441] visor 4-1:1.0: device disconnected [ 902.798999][ T8454] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 902.959278][ T8454] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 902.972025][ T8454] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 902.983088][ T8454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.015986][ T8454] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 903.111581][T15156] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2474'. [ 903.282145][ T32] kauditd_printk_skb: 4 callbacks suppressed [ 903.282237][ T32] audit: type=1326 audit(1788441887.074:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15157 comm="syz.2.2475" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa95f9e159 code=0x7ffc0000 [ 903.316579][ T32] audit: type=1326 audit(1788441887.114:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15157 comm="syz.2.2475" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa95f9e159 code=0x7ffc0000 [ 903.345424][ T32] audit: type=1326 audit(1788441887.134:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15157 comm="syz.2.2475" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa95f9e159 code=0x7ffc0000 [ 903.345506][ T32] audit: type=1326 audit(1788441887.134:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15157 comm="syz.2.2475" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa95f9e159 code=0x7ffc0000 [ 903.345652][ T32] audit: type=1326 audit(1788441887.134:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15157 comm="syz.2.2475" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa95f9e159 code=0x7ffc0000 [ 903.364458][ T32] audit: type=1326 audit(1788441887.164:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15159 comm="syz.4.2476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff827b9e159 code=0x0 [ 903.433144][ T32] audit: type=1326 audit(1788441887.224:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15157 comm="syz.2.2475" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7faa95f9e159 code=0x7ffc0000 [ 903.433291][ T32] audit: type=1326 audit(1788441887.224:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15157 comm="syz.2.2475" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa95f9e159 code=0x7ffc0000 [ 903.450082][ T32] audit: type=1326 audit(1788441887.244:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15157 comm="syz.2.2475" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa95f9e159 code=0x7ffc0000 [ 903.450238][ T32] audit: type=1326 audit(1788441887.244:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15157 comm="syz.2.2475" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa95f9e159 code=0x7ffc0000 [ 903.551453][ T8441] usb 7-1: USB disconnect, device number 90 [ 903.568150][ T8441] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 903.578483][ T8441] qcserial 7-1:1.0: device disconnected [ 904.059761][ T8454] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 904.078645][ T8441] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 904.158730][T13945] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 904.249519][ T8441] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 904.262112][ T8441] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 904.262190][ T8441] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 904.288691][T13945] usb 4-1: device descriptor read/64, error -71 [ 904.297245][ T8454] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 904.297324][ T8454] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 904.315972][ T8441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.316024][ T8441] usb 3-1: Product: syz [ 904.316062][ T8441] usb 3-1: Manufacturer: syz [ 904.316084][ T8441] usb 3-1: SerialNumber: syz [ 904.340807][ T8454] usb 2-1: USB disconnect, device number 26 [ 904.393787][ T8441] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 904.428689][ T8441] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 904.428689][ T8441] Please send a copy of this message to and [ 904.529150][T13945] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 904.659091][T13945] usb 4-1: device descriptor read/64, error -71 [ 904.769022][T13945] usb usb4-port1: attempt power cycle [ 904.851754][T15169] netlink: 'syz.2.2478': attribute type 10 has an invalid length. [ 904.897959][ T8441] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -32 [ 904.903406][T15169] team0 (unregistering): Port device team_slave_0 removed [ 904.953048][T15169] team0 (unregistering): Port device team_slave_1 removed [ 905.007378][ T8454] usb 3-1: USB disconnect, device number 33 [ 905.109819][T13945] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 905.130833][T13945] usb 4-1: device descriptor read/8, error -71 [ 905.179998][T15188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.191458][T15188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.308534][ T8436] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 905.379855][T13945] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 905.402640][T13945] usb 4-1: device descriptor read/8, error -71 [ 905.458636][ T8436] usb 2-1: Using ep0 maxpacket: 8 [ 905.460485][ T8436] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 905.467342][ T8436] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 905.467569][ T8436] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.481327][ T8436] usb 2-1: config 0 descriptor?? [ 905.511996][T13945] usb usb4-port1: unable to enumerate USB device [ 905.593544][T15179] trusted_key: encrypted_key: insufficient parameters specified [ 905.701749][ T8436] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 906.084153][T15205] Failed to get privilege flags for destination (handle=0x2:0x400) [ 906.163839][T15185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.165006][T15185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.201131][T15185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.216041][T15185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.235009][T15210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.243194][T15210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.264285][T15210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.275195][T15210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.320479][T15185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.334814][T15185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.560876][T15215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.562819][T15215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.769066][ T8435] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 906.942989][ T8435] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 906.961601][ T8435] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 906.974575][ T8435] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 906.974629][ T8435] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.002292][T15213] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 907.031507][ T8435] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 907.483130][ T8435] usb 3-1: USB disconnect, device number 34 [ 907.641827][ T25] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 907.735900][ T1375] tipc: Subscription rejected, illegal request [ 907.810263][ T25] usb 7-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00 [ 907.831753][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.841776][ T25] usb 7-1: Product: syz [ 907.846958][ T25] usb 7-1: Manufacturer: syz [ 907.852473][ T25] usb 7-1: SerialNumber: syz [ 907.899457][ T25] qcserial 7-1:1.0: Qualcomm USB modem converter detected [ 907.915542][ T25] usb 7-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 908.221310][ T8436] usb 2-1: USB disconnect, device number 27 [ 908.490347][T15235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.496000][T15235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.623480][T15240] netlink: 'syz.6.2490': attribute type 29 has an invalid length. [ 908.840032][T15232] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2493'. [ 908.869798][T15246] bridge0: port 1(netdevsim0) entered blocking state [ 908.871680][T15246] bridge0: port 1(netdevsim0) entered disabled state [ 908.874670][T15246] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 908.906012][T15246] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 909.473321][T15256] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2501'. [ 909.485723][T15256] syzkaller0: entered promiscuous mode [ 909.485794][T15256] syzkaller0: entered allmulticast mode [ 909.508966][ T25] usb 7-1: USB disconnect, device number 91 [ 909.532111][ T25] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 909.545218][ T25] qcserial 7-1:1.0: device disconnected [ 909.565501][T15256] tipc: Enabled bearer , priority 0 [ 909.599612][T15256] tipc: Resetting bearer [ 909.617354][T15255] tipc: Resetting bearer [ 909.674404][T15255] tipc: Disabling bearer [ 909.922282][T15264] Failed to get privilege flags for destination (handle=0x2:0x400) [ 910.248005][T15272] IPVS: Error connecting to the multicast addr [ 910.851713][ T5708] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 910.946369][T15287] loop3: detected capacity change from 0 to 7 [ 910.954779][T15287] Dev loop3: unable to read RDB block 7 [ 910.961842][T15287] loop3: unable to read partition table [ 910.968839][T15287] loop3: partition table beyond EOD, truncated [ 910.976558][T15287] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 911.018738][ T5708] usb 2-1: Using ep0 maxpacket: 16 [ 911.025438][ T5708] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 911.037848][ T5708] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 911.050553][ T5708] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 911.050609][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.081364][ T5708] usb 2-1: config 0 descriptor?? [ 911.498283][T15298] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 911.525136][ T5708] hid-picolcd 0003:04D8:C002.002A: unknown main item tag 0x4 [ 911.538018][ T5708] hid-picolcd 0003:04D8:C002.002A: unknown main item tag 0x0 [ 911.548115][ T5708] hid-picolcd 0003:04D8:C002.002A: reserved main item tag 0xd [ 911.564279][ T5708] hid-picolcd 0003:04D8:C002.002A: unknown main item tag 0x0 [ 911.619684][ T5708] hid-picolcd 0003:04D8:C002.002A: No report with id 0x11 found [ 911.689302][T15294] bond7: entered allmulticast mode [ 911.702405][T15294] 8021q: adding VLAN 0 to HW filter on device bond7 [ 911.732203][ T8436] usb 2-1: USB disconnect, device number 28 [ 912.718911][ T8441] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 912.868474][ T8441] usb 7-1: Using ep0 maxpacket: 32 [ 912.870080][ T8441] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 912.873113][ T8441] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.879071][ T8441] usb 7-1: config 0 descriptor?? [ 912.887210][ T8441] gspca_main: sunplus-2.14.0 probing 041e:400b [ 912.909248][T13945] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 913.079703][T13945] usb 3-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00 [ 913.096835][T13945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.096912][T13945] usb 3-1: Product: syz [ 913.096950][T13945] usb 3-1: Manufacturer: syz [ 913.096968][T13945] usb 3-1: SerialNumber: syz [ 913.134203][T13945] qcserial 3-1:1.0: Qualcomm USB modem converter detected [ 913.147140][T13945] usb 3-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 913.327715][T15314] bridge0: port 4(dummy0) entered disabled state [ 913.328759][T15314] bridge0: port 3(netdevsim0) entered disabled state [ 913.329326][T15314] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.330553][T15314] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.390697][ T8441] gspca_sunplus: reg_w_riv err -110 [ 913.390838][ T8441] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 913.454650][T15315] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 913.505636][T15317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.515280][T15317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.850307][ T1157] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.850467][ T1157] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.850589][ T1157] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.850744][ T1157] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.889032][T15318] netlink: 'syz.2.2515': attribute type 29 has an invalid length. [ 914.129553][T15311] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 914.535527][ T5708] usb 3-1: USB disconnect, device number 35 [ 914.560076][ T5708] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 914.575644][ T5708] qcserial 3-1:1.0: device disconnected [ 915.006871][T15314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.016630][T15314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.116107][ T5708] usb 7-1: USB disconnect, device number 92 [ 924.680972][T15323] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 924.681006][T15323] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 924.681950][T15323] vhci_hcd vhci_hcd.0: Device attached [ 924.948594][T13945] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 924.950303][ T8454] usb 46-1: SetAddress Request (10) to port 0 [ 924.950534][ T8454] usb 46-1: new SuperSpeed USB device number 10 using vhci_hcd [ 925.098624][T13945] usb 7-1: device descriptor read/64, error -71 [ 925.340268][T13945] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 925.468638][T13945] usb 7-1: device descriptor read/64, error -71 [ 925.579756][T13945] usb usb7-port1: attempt power cycle [ 925.918814][T13945] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 925.939427][T13945] usb 7-1: device descriptor read/8, error -71 [ 926.178591][T13945] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 926.199483][T13945] usb 7-1: device descriptor read/8, error -71 [ 926.309007][T13945] usb usb7-port1: unable to enumerate USB device [ 927.690038][T15324] vhci_hcd: connection reset by peer [ 927.697101][ T7244] vhci_hcd vhci_hcd.6: stop threads [ 927.697852][ T7244] vhci_hcd vhci_hcd.6: release socket [ 927.698139][ T7244] vhci_hcd vhci_hcd.6: disconnect device [ 929.980211][ T8454] usb 46-1: device descriptor read/8, error -110 [ 930.369708][ T8454] usb usb46-port1: attempt power cycle [ 930.931214][ T8454] usb usb46-port1: unable to enumerate USB device [ 931.591449][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.591535][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.024608][T15333] netdevsim netdevsim2: loading /lib/firmware// failed with error -22 [ 932.024676][T15333] netdevsim netdevsim2: Direct firmware load for / failed with error -22 [ 932.028223][T15333] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 932.338687][ T8441] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 932.488920][ T8441] usb 7-1: Using ep0 maxpacket: 16 [ 932.491038][ T8441] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 932.507872][ T8441] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 932.507930][ T8441] usb 7-1: config 0 has no interface number 0 [ 932.508075][ T8441] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 932.508179][ T8441] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 932.529510][ T8441] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.529582][ T8441] usb 7-1: Product: syz [ 932.529632][ T8441] usb 7-1: Manufacturer: syz [ 932.529674][ T8441] usb 7-1: SerialNumber: syz [ 932.575227][ T8441] usb 7-1: config 0 descriptor?? [ 932.579997][T15335] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 932.581947][T15335] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 932.661698][T15352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 932.807753][T15335] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 932.814828][T15335] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 932.907819][T15355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.919443][T15355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.956970][T15355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.972879][T15355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.033685][ T8441] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 933.157996][T15358] loop2: detected capacity change from 0 to 7 [ 933.185733][T15358] Dev loop2: unable to read RDB block 7 [ 933.194823][T15358] loop2: unable to read partition table [ 933.205193][T15358] loop2: partition table beyond EOD, truncated [ 933.213098][T15358] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 933.739673][T15365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2527'. [ 933.754724][T15365] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2527'. [ 933.766349][ T25] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 933.931368][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 933.945328][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 933.945451][ T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 933.945558][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 934.003324][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.003452][ T25] usb 3-1: Product: syz [ 934.003554][ T25] usb 3-1: Manufacturer: syz [ 934.003599][ T25] usb 3-1: SerialNumber: syz [ 934.056418][ T25] hub 3-1:1.0: bad descriptor, ignoring hub [ 934.068802][ T25] hub 3-1:1.0: probe with driver hub failed with error -5 [ 934.270405][T15361] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 934.289167][ T25] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 934.458732][ T8454] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 934.612179][ T8454] usb 4-1: Using ep0 maxpacket: 32 [ 934.616566][ T8454] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.00 [ 934.627972][ T8436] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 934.645544][ T8454] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.670660][ T8454] usb 4-1: config 0 descriptor?? [ 934.772470][ T8441] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 934.772522][ T8441] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 934.773177][ T8441] asix 7-1:0.34: probe with driver asix failed with error -71 [ 934.789489][ T8436] usb 2-1: Using ep0 maxpacket: 8 [ 934.822547][ T8436] usb 2-1: unable to get BOS descriptor or descriptor too short [ 934.822659][ T8436] usb 2-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 934.852129][ T8436] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 934.852210][ T8436] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 934.880282][ T8441] usb 7-1: USB disconnect, device number 97 [ 934.887284][ T8436] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.887315][ T8436] usb 2-1: Product: syz [ 934.887332][ T8436] usb 2-1: Manufacturer: syz [ 934.887358][ T8436] usb 2-1: SerialNumber: syz [ 934.945480][T15344] udevd[15344]: setting mode of /dev/bus/usb/007/097 to 020664 failed: No such file or directory [ 934.945996][T15344] udevd[15344]: setting owner of /dev/bus/usb/007/097 to uid=0, gid=0 failed: No such file or directory [ 935.042105][T15361] usb 3-1: reset high-speed USB device number 36 using dummy_hcd [ 935.066026][T15361] usb 3-1: device reset changed ep0 maxpacket size! [ 935.092621][T13945] usb 3-1: USB disconnect, device number 36 [ 935.105175][T13945] usblp0: removed [ 935.154177][ T8454] hid-corsair-void 0003:1B1C:1B27.002B: unknown main item tag 0x0 [ 935.154274][ T8454] hid-corsair-void 0003:1B1C:1B27.002B: unknown main item tag 0x0 [ 935.154304][ T8454] hid-corsair-void 0003:1B1C:1B27.002B: unknown main item tag 0x0 [ 935.156698][ T8454] hid-corsair-void 0003:1B1C:1B27.002B: unknown main item tag 0x0 [ 935.156843][ T8454] hid-corsair-void 0003:1B1C:1B27.002B: unknown main item tag 0x0 [ 935.156992][ T8454] hid-corsair-void 0003:1B1C:1B27.002B: unknown main item tag 0x0 [ 935.157067][ T8454] hid-corsair-void 0003:1B1C:1B27.002B: unknown main item tag 0x0 [ 935.157210][ T8454] hid-corsair-void 0003:1B1C:1B27.002B: unknown main item tag 0x0 [ 935.157361][ T8454] hid-corsair-void 0003:1B1C:1B27.002B: unknown main item tag 0x0 [ 935.157526][ T8454] hid-corsair-void 0003:1B1C:1B27.002B: unknown main item tag 0x0 [ 935.259948][T13945] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 935.302080][ T8454] hid-corsair-void 0003:1B1C:1B27.002B: hidraw0: USB HID v7f.fd Device [HID 1b1c:1b27] on usb-dummy_hcd.3-1/input0 [ 935.401753][T15388] loop4: detected capacity change from 0 to 7 [ 935.411101][T13945] usb 3-1: Using ep0 maxpacket: 16 [ 935.415768][T13945] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 935.416769][ T8441] usb 4-1: USB disconnect, device number 59 [ 935.430119][ T8454] hid-corsair-void 0003:1B1C:1B27.002B: failed to request firmware (reason: -19) [ 935.440466][T13945] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 935.440510][T13945] usb 3-1: config 0 interface 0 has no altsetting 0 [ 935.451617][T13945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.451648][T13945] usb 3-1: Product: syz [ 935.451665][T13945] usb 3-1: Manufacturer: syz [ 935.451681][T13945] usb 3-1: SerialNumber: syz [ 935.471470][ T8454] hid-corsair-void 0003:1B1C:1B27.002B: failed to request battery (reason: -19) [ 935.475630][T15388] Dev loop4: unable to read RDB block 7 [ 935.475844][T15388] loop4: unable to read partition table [ 935.476804][T15388] loop4: partition table beyond EOD, truncated [ 935.501785][T15388] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 935.604512][T13945] usb 3-1: config 0 descriptor?? [ 935.628557][T13945] hub 3-1:0.0: bad descriptor, ignoring hub [ 935.628641][T13945] hub 3-1:0.0: probe with driver hub failed with error -5 [ 935.637320][T15389] fido_id[15389]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 935.694145][T15396] netlink: 'syz.6.2535': attribute type 10 has an invalid length. [ 935.707017][T15396] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 935.730975][T15396] team0: Port device netdevsim1 added [ 935.738956][T13945] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 935.756404][ T1375] usb 3-1: Failed to submit usb control message: -71 [ 935.772129][ T1375] usb 3-1: unable to send the bmi data to the device: -71 [ 935.780902][ T1375] usb 3-1: unable to get target info from device [ 935.788740][ T1375] usb 3-1: could not get target info (-71) [ 935.796339][ T1375] usb 3-1: could not probe fw (-71) [ 935.931502][T15361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.945025][T15361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.160153][T15396] netlink: 'syz.6.2535': attribute type 10 has an invalid length. [ 936.252953][T15396] team0: Port device netdevsim1 removed [ 936.261603][T15396] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 936.293688][T15396] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 936.472246][T15407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 936.498940][ T8441] usb 3-1: USB disconnect, device number 37 [ 936.786072][T15411] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2540'. [ 936.813666][T15411] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2540'. [ 936.846265][T15413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 936.856551][T15413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.703901][ T8436] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 937.769163][T15418] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 938.073100][T15428] xt_bpf: check failed: parse error [ 938.102923][ T8436] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 938.147220][ T8436] usb 2-1: USB disconnect, device number 29 [ 938.369832][T15340] udevd[15340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 938.518765][ T8436] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 938.682216][ T8436] usb 2-1: not running at top speed; connect to a high speed hub [ 938.690351][ T8436] usb 2-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 938.731127][ T8436] usb 2-1: config 65 has an invalid descriptor of length 0, skipping remainder of the config [ 938.731185][ T8436] usb 2-1: config 65 has 2 interfaces, different from the descriptor's value: 3 [ 938.775108][ T8436] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.775168][ T8436] usb 2-1: Product: syz [ 938.775207][ T8436] usb 2-1: Manufacturer: syz [ 938.775231][ T8436] usb 2-1: SerialNumber: syz [ 938.823757][ T8436] usb 2-1: 0:2 : does not exist [ 938.844418][ T8436] usb 2-1: unit 130 not found! [ 939.004719][T15440] loop4: detected capacity change from 0 to 7 [ 939.027787][T15440] Dev loop4: unable to read RDB block 7 [ 939.034144][T15440] loop4: unable to read partition table [ 939.040317][T15440] loop4: partition table beyond EOD, truncated [ 939.051236][T15440] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 939.368689][ T8436] usb 2-1: USB disconnect, device number 30 [ 939.624283][T15340] udevd[15340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:65.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 939.932446][T15445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 940.114637][T15447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2548'. [ 940.665586][T15453] netlink: 'syz.1.2550': attribute type 1 has an invalid length. [ 940.863985][T15449] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2550'. [ 941.232326][T15459] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2552'. [ 941.505433][T15464] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 942.048629][ T8436] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 942.209869][ T8436] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 942.225729][ T8436] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 942.252257][ T8436] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.260610][ T8436] usb 3-1: Product: syz [ 942.260634][ T8436] usb 3-1: Manufacturer: syz [ 942.260651][ T8436] usb 3-1: SerialNumber: syz [ 942.303002][ T8436] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 942.822050][ T8436] gspca_mr97310a: reg write [21] error -110 [ 942.822194][ T8436] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -110 [ 943.204419][ T8436] usb 3-1: USB disconnect, device number 38 [ 943.244863][T15482] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(9) [ 943.244893][T15482] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 943.250058][T15482] vhci_hcd vhci_hcd.0: Device attached [ 943.253127][T15487] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 943.253202][T15487] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 943.253327][T15487] vhci_hcd vhci_hcd.0: Device attached [ 943.334670][T15482] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(16) [ 943.334703][T15482] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 943.335199][T15482] vhci_hcd vhci_hcd.0: Device attached [ 943.339381][T15486] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(12) [ 943.339456][T15486] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 943.339581][T15486] vhci_hcd vhci_hcd.0: Device attached [ 943.379914][T15487] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(19) [ 943.379945][T15487] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 943.380168][T15487] vhci_hcd vhci_hcd.0: Device attached [ 943.416527][T15493] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(8) [ 943.416558][T15493] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 943.417932][T15493] vhci_hcd vhci_hcd.0: Device attached [ 943.449887][T15482] vhci_hcd vhci_hcd.0: pdev(6) rhport(6) sockfd(22) [ 943.449911][T15482] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 943.454338][T15482] vhci_hcd vhci_hcd.0: Device attached [ 943.464276][T15484] vhci_hcd vhci_hcd.0: pdev(6) rhport(7) sockfd(14) [ 943.464352][T15484] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 943.464610][T15484] vhci_hcd vhci_hcd.0: Device attached [ 943.504716][ T6489] usb 45-2: new high-speed USB device number 2 using vhci_hcd [ 943.542806][T15492] vhci_hcd: connection closed [ 943.542909][T15500] vhci_hcd: connection closed [ 943.545033][T15495] vhci_hcd: connection closed [ 943.556202][T15503] vhci_hcd: connection closed [ 943.556865][T15494] vhci_hcd: connection closed [ 943.557539][T15496] vhci_hcd: connection closed [ 943.562480][T15489] vhci_hcd: connection closed [ 943.563719][T15488] vhci_hcd: connection reset by peer [ 943.565771][ T7623] vhci_hcd vhci_hcd.6: stop threads [ 943.565837][ T7623] vhci_hcd vhci_hcd.6: release socket [ 943.565995][ T7623] vhci_hcd vhci_hcd.6: disconnect device [ 943.566377][ T7623] vhci_hcd vhci_hcd.6: stop threads [ 943.566395][ T7623] vhci_hcd vhci_hcd.6: release socket [ 943.566416][ T7623] vhci_hcd vhci_hcd.6: disconnect device [ 943.568204][ T7623] vhci_hcd vhci_hcd.6: stop threads [ 943.568269][ T7623] vhci_hcd vhci_hcd.6: release socket [ 943.571766][ T7623] vhci_hcd vhci_hcd.6: disconnect device [ 943.621831][ T7623] vhci_hcd vhci_hcd.6: stop threads [ 943.621910][ T7623] vhci_hcd vhci_hcd.6: release socket [ 943.622088][ T7623] vhci_hcd vhci_hcd.6: disconnect device [ 943.630059][ T7623] vhci_hcd vhci_hcd.6: stop threads [ 943.630121][ T7623] vhci_hcd vhci_hcd.6: release socket [ 943.630270][ T7623] vhci_hcd vhci_hcd.6: disconnect device [ 943.638516][ T7623] vhci_hcd vhci_hcd.6: stop threads [ 943.638601][ T7623] vhci_hcd vhci_hcd.6: release socket [ 943.642828][ T7623] vhci_hcd vhci_hcd.6: disconnect device [ 943.666351][ T7623] vhci_hcd vhci_hcd.6: stop threads [ 943.666424][ T7623] vhci_hcd vhci_hcd.6: release socket [ 943.666578][ T7623] vhci_hcd vhci_hcd.6: disconnect device [ 943.702206][ T7623] vhci_hcd vhci_hcd.6: stop threads [ 943.702281][ T7623] vhci_hcd vhci_hcd.6: release socket [ 943.702426][ T7623] vhci_hcd vhci_hcd.6: disconnect device [ 943.918958][T15504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.929836][T15504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.192233][T15510] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 944.192268][T15510] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 944.208104][T15510] vhci_hcd vhci_hcd.0: Device attached [ 944.498912][ T25] usb 36-1: SetAddress Request (19) to port 0 [ 944.499107][ T25] usb 36-1: new SuperSpeed USB device number 19 using vhci_hcd [ 944.684246][ T32] kauditd_printk_skb: 13 callbacks suppressed [ 944.684310][ T32] audit: type=1326 audit(1788441928.474:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15519 comm="syz.3.2564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e5d9e159 code=0x7ffc0000 [ 944.715519][ T32] audit: type=1326 audit(1788441928.494:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15519 comm="syz.3.2564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e5d9e159 code=0x7ffc0000 [ 944.742110][ T32] audit: type=1326 audit(1788441928.514:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15519 comm="syz.3.2564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e5d9e159 code=0x7ffc0000 [ 944.742181][ T32] audit: type=1326 audit(1788441928.514:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15519 comm="syz.3.2564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e5d9e159 code=0x7ffc0000 [ 944.742253][ T32] audit: type=1326 audit(1788441928.544:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15519 comm="syz.3.2564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43e5d5e98e code=0x7ffc0000 [ 944.742303][ T32] audit: type=1326 audit(1788441928.544:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15519 comm="syz.3.2564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e5d9e159 code=0x7ffc0000 [ 944.742351][ T32] audit: type=1326 audit(1788441928.544:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15519 comm="syz.3.2564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e5d9e159 code=0x7ffc0000 [ 944.755661][ T32] audit: type=1326 audit(1788441928.544:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15519 comm="syz.3.2564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e5d9e159 code=0x7ffc0000 [ 944.788254][ T32] audit: type=1326 audit(1788441928.564:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15519 comm="syz.3.2564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e5d9e159 code=0x7ffc0000 [ 944.792682][ T32] audit: type=1326 audit(1788441928.594:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15519 comm="syz.3.2564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f43e5d9e159 code=0x7ffc0000 [ 945.382399][T15512] vhci_hcd: connection reset by peer [ 945.390323][ T7623] vhci_hcd vhci_hcd.1: stop threads [ 945.390396][ T7623] vhci_hcd vhci_hcd.1: release socket [ 945.390475][ T7623] vhci_hcd vhci_hcd.1: disconnect device [ 945.669648][ T8435] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 945.830054][ T8435] usb 7-1: Using ep0 maxpacket: 16 [ 945.842620][ T8435] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 945.858062][ T8435] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.859940][ T8435] usb 7-1: config 0 interface 0 has no altsetting 0 [ 945.870411][ T8435] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.919865][ T8435] usb 7-1: config 0 descriptor?? [ 946.214930][T15535] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2566'. [ 946.655820][ T8436] usb 5-1: USB disconnect, device number 19 [ 947.648089][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 947.667768][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 947.679408][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 947.695131][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 947.705726][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 947.776784][ T4936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 947.799722][ T4936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 947.810739][ T4936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 947.841996][ T4936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 947.857703][ T4936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 948.353832][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2570'. [ 948.353879][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2570'. [ 948.439338][T15551] binder_alloc: binder_alloc_mmap_handler: 15550 200000ffe000-200001000000 already mapped failed -16 [ 948.466524][T15551] binder_alloc: binder_alloc_mmap_handler: 15550 200000ffe000-200001000000 already mapped failed -16 [ 948.466966][T15551] binder_alloc: binder_alloc_mmap_handler: 15550 200000ffe000-200001000000 already mapped failed -16 [ 948.467511][T15551] binder_alloc: binder_alloc_mmap_handler: 15550 200000ffe000-200001000000 already mapped failed -16 [ 948.467961][T15551] binder_alloc: binder_alloc_mmap_handler: 15550 200000ffe000-200001000000 already mapped failed -16 [ 948.486233][T15551] binder_alloc: binder_alloc_mmap_handler: 15550 200000ffe000-200001000000 already mapped failed -16 [ 948.486799][T15551] binder_alloc: binder_alloc_mmap_handler: 15550 200000ffe000-200001000000 already mapped failed -16 [ 948.524789][T15551] binder_alloc: binder_alloc_mmap_handler: 15550 200000ffe000-200001000000 already mapped failed -16 [ 948.525457][T15551] binder_alloc: binder_alloc_mmap_handler: 15550 200000ffe000-200001000000 already mapped failed -16 [ 948.525934][T15551] binder_alloc: binder_alloc_mmap_handler: 15550 200000ffe000-200001000000 already mapped failed -16 [ 948.619455][ T6489] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 948.734957][ T8435] usbhid 7-1:0.0: can't add hid device: -71 [ 948.735275][ T8435] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 948.772700][ T8435] usb 7-1: USB disconnect, device number 98 [ 949.120797][T15555] binder: 15550:15555 ioctl c0306201 200000000180 returned -14 [ 949.344003][ T8435] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 949.431234][ T1672] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 949.479591][ T8435] usb 7-1: device descriptor read/64, error -71 [ 949.590518][ T25] usb 36-1: device descriptor read/8, error -110 [ 949.609917][ T1672] usb 2-1: Using ep0 maxpacket: 16 [ 949.627906][ T1672] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 949.656411][ T1672] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 949.656522][ T1672] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 949.703150][ T1672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.703246][ T1672] usb 2-1: Product: syz [ 949.703343][ T1672] usb 2-1: Manufacturer: syz [ 949.703405][ T1672] usb 2-1: SerialNumber: syz [ 949.730757][ T8435] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 949.748303][ T1672] usb 2-1: config 0 descriptor?? [ 949.777823][ T1672] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 949.789624][ T1672] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 949.869644][ T8435] usb 7-1: device descriptor read/64, error -71 [ 949.981317][ T8435] usb usb7-port1: attempt power cycle [ 949.983518][ T5617] Bluetooth: hci3: command tx timeout [ 950.018182][ T25] usb usb36-port1: attempt power cycle [ 950.349850][ T8435] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 950.372519][ T8435] usb 7-1: device descriptor read/8, error -71 [ 950.416693][ T1672] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 950.432135][T15569] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2574'. [ 950.452632][ T1672] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 950.601834][ T25] usb usb36-port1: unable to enumerate USB device [ 950.639132][ T8435] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 950.673211][ T8435] usb 7-1: device descriptor read/8, error -71 [ 950.779673][ T8435] usb usb7-port1: unable to enumerate USB device [ 950.871617][ T1672] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 950.871724][ T1672] em28xx 2-1:0.0: No AC97 audio processor [ 950.892697][T15564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.893188][T15564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.120574][ T7622] bond0: (slave netdevsim1): Releasing backup interface [ 951.263267][ T7622] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 951.263337][ T7622] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 951.285283][ T7622] bridge0: port 3(netdevsim0) entered disabled state [ 951.514107][T15544] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.516510][T15544] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.517029][T15544] bridge_slave_0: entered allmulticast mode [ 951.541424][T15544] bridge_slave_0: entered promiscuous mode [ 951.561621][T15544] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.561765][T15544] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.561965][T15544] bridge_slave_1: entered allmulticast mode [ 951.580324][T15544] bridge_slave_1: entered promiscuous mode [ 951.695455][T15544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.826586][T15544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.926483][T15584] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 952.029533][T15593] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2577'. [ 952.059922][ T5617] Bluetooth: hci3: command tx timeout [ 952.158754][T13945] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 952.219322][T15544] team0: Port device team_slave_0 added [ 952.271873][ T8436] usb 2-1: USB disconnect, device number 31 [ 952.287001][ T8436] em28xx 2-1:0.0: Disconnecting em28xx [ 952.309557][T13945] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 952.315495][T13945] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 952.315636][T13945] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 952.315711][T13945] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 952.359178][T15544] team0: Port device team_slave_1 added [ 952.379110][T13945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.379165][T13945] usb 4-1: Product: syz [ 952.379202][T13945] usb 4-1: Manufacturer: syz [ 952.379223][T13945] usb 4-1: SerialNumber: syz [ 952.435290][T13945] cdc_mbim 4-1:1.0: skipping garbage [ 952.475055][ T8436] em28xx: Freeing device [ 952.676143][T15600] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2580'. [ 952.729867][T15584] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 952.739205][T15584] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 952.781089][ T7622] dvmrp0: left allmulticast mode [ 952.782836][ T7622] pimreg: left allmulticast mode [ 953.012023][T13945] cdc_mbim 4-1:1.0: bind() failure [ 953.033997][T13945] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 953.046267][T13945] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 953.055981][T13945] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 953.096086][T13945] usb 4-1: USB disconnect, device number 60 [ 954.069599][T15622] overlay: Unknown parameter '\!' [ 954.139993][ T5617] Bluetooth: hci3: command tx timeout [ 954.209698][ T8441] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 954.303724][T15607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2579'. [ 954.339045][ T8441] usb 3-1: device descriptor read/64, error -71 [ 954.588505][ T8441] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 954.610369][ T7622] bond0 (unregistering): Released all slaves [ 954.626951][ T7622] bond1 (unregistering): Released all slaves [ 954.657035][ T7622] bond2 (unregistering): Released all slaves [ 954.679345][ T1672] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 954.718561][ T8441] usb 3-1: device descriptor read/64, error -71 [ 954.737016][ T7622] bond3 (unregistering): Released all slaves [ 954.816943][ T7622] bond4 (unregistering): (slave dummy0): Removing an active aggregator [ 954.829302][ T8441] usb usb3-port1: attempt power cycle [ 954.836385][ T7622] bond4 (unregistering): (slave dummy0): Releasing backup interface [ 954.857008][ T7622] bond4 (unregistering): Released all slaves [ 954.866030][ T1672] usb 4-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00 [ 954.884914][ T1672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.894474][ T1672] usb 4-1: Product: syz [ 954.899625][ T1672] usb 4-1: Manufacturer: syz [ 954.899685][ T1672] usb 4-1: SerialNumber: syz [ 954.926776][ T1672] qcserial 4-1:1.0: Qualcomm USB modem converter detected [ 954.984648][ T1672] usb 4-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 954.997334][ T7622] bond5 (unregistering): Released all slaves [ 955.058683][T15544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 955.058723][T15544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 955.059563][T15544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 955.099936][T15544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 955.099990][T15544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 955.100074][T15544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 955.198733][ T8441] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 955.241698][ T8441] usb 3-1: device descriptor read/8, error -71 [ 955.411085][T15544] hsr_slave_0: entered promiscuous mode [ 955.412230][T15544] hsr_slave_1: entered promiscuous mode [ 955.413046][T15544] debugfs: 'hsr0' already exists in 'hsr' [ 955.413074][T15544] Cannot create hsr debugfs directory [ 955.529430][ T8441] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 955.546807][ T7622] tipc: Left network mode [ 955.555514][ T8441] usb 3-1: device descriptor read/8, error -71 [ 955.659105][ T8441] usb usb3-port1: unable to enumerate USB device [ 955.734181][T15628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.736981][T15628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.219115][ T5617] Bluetooth: hci3: command tx timeout [ 956.227863][T15628] netlink: 'syz.3.2584': attribute type 29 has an invalid length. [ 957.040844][ T8436] usb 4-1: USB disconnect, device number 61 [ 957.121340][ T8436] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 957.131823][ T8436] qcserial 4-1:1.0: device disconnected [ 957.324014][ T7622] batman_adv: batadv0: Removing interface: wlan1 [ 957.392645][T15656] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2591'. [ 957.505855][T15653] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2590'. [ 957.849646][ T8435] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 957.998483][ T8435] usb 2-1: Using ep0 maxpacket: 32 [ 958.010276][ T8435] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 958.026762][ T8435] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.077259][ T8435] usb 2-1: config 0 descriptor?? [ 958.166458][ T8435] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 958.610624][ T8436] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 958.765478][ T1672] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 958.775231][ T8436] usb 3-1: Using ep0 maxpacket: 8 [ 958.782148][ T8436] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 958.796801][ T8436] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.796856][ T8436] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 958.796909][ T8436] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 958.796944][ T8436] usb 3-1: config 0 interface 0 has no altsetting 0 [ 958.796995][ T8436] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.860215][ T8436] usb 3-1: config 0 descriptor?? [ 958.866467][T15675] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 958.950657][ T1672] usb 4-1: Using ep0 maxpacket: 8 [ 958.959432][ T1672] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 958.988824][ T1672] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 958.988953][ T1672] usb 4-1: config 0 has no interface number 0 [ 958.997246][ T1672] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 958.997313][ T1672] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 958.997380][ T1672] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 958.997445][ T1672] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 958.997582][ T1672] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 959.080032][ T1672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.080153][ T1672] usb 4-1: Product: syz [ 959.085792][ T1672] usb 4-1: Manufacturer: syz [ 959.085872][ T1672] usb 4-1: SerialNumber: syz [ 959.103702][ T1672] usb 4-1: config 0 descriptor?? [ 959.381633][ T1672] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 959.928686][ T7622] hsr_slave_0: left promiscuous mode [ 959.962165][ T7622] hsr_slave_1: left promiscuous mode [ 960.059584][ T7622] veth1_vlan: left promiscuous mode [ 960.103820][ T7622] veth0_vlan: left promiscuous mode [ 960.146823][ T8435] gspca_vc032x: reg_w err -110 [ 960.146943][ T8435] gspca_vc032x: I2c Bus Busy Wait 00 [ 960.147010][ T8435] gspca_vc032x: I2c Bus Busy Wait 00 [ 960.147048][ T8435] gspca_vc032x: I2c Bus Busy Wait 00 [ 960.147083][ T8435] gspca_vc032x: I2c Bus Busy Wait 00 [ 960.147119][ T8435] gspca_vc032x: I2c Bus Busy Wait 00 [ 960.147173][ T8435] gspca_vc032x: I2c Bus Busy Wait 00 [ 960.147209][ T8435] gspca_vc032x: I2c Bus Busy Wait 00 [ 960.147242][ T8435] gspca_vc032x: I2c Bus Busy Wait 00 [ 960.147274][ T8435] gspca_vc032x: I2c Bus Busy Wait 00 [ 960.147309][ T8435] gspca_vc032x: I2c Bus Busy Wait 00 [ 960.147343][ T8435] gspca_vc032x: I2c Bus Busy Wait 00 [ 960.147379][ T8435] gspca_vc032x: I2c Bus Busy Wait 00 [ 960.147413][ T8435] gspca_vc032x: I2c Bus Busy Wait 00 [ 960.147445][ T8435] gspca_vc032x: I2c Bus Busy Wait 00 [ 960.147480][ T8435] gspca_vc032x: I2c Bus Busy Wait 00 [ 960.147538][ T8435] gspca_vc032x: I2c Bus Busy Wait 00 [ 960.147573][ T8435] gspca_vc032x: I2c Bus Busy Wait 00 [ 960.147607][ T8435] gspca_vc032x: I2c Bus Busy Wait 00 [ 960.147642][ T8435] gspca_vc032x: Unknown sensor... [ 960.147893][ T8435] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 960.261316][ T1672] usb 2-1: USB disconnect, device number 32 [ 960.454351][ T8436] usbhid 3-1:0.0: can't add hid device: -71 [ 960.462999][ T8436] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 960.494566][ T8436] usb 3-1: USB disconnect, device number 43 [ 961.323248][T15700] loop4: detected capacity change from 0 to 7 [ 961.343218][T15700] Dev loop4: unable to read RDB block 7 [ 961.343289][T15700] loop4: unable to read partition table [ 961.345895][T15700] loop4: partition table beyond EOD, truncated [ 961.360085][T15700] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 962.229224][T15709] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 962.229257][T15709] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 962.229963][T15709] vhci_hcd vhci_hcd.0: Device attached [ 962.518611][ T8435] usb 46-1: SetAddress Request (14) to port 0 [ 962.518709][ T8435] usb 46-1: new SuperSpeed USB device number 14 using vhci_hcd [ 962.566949][T12021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.569278][T12021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.653267][T15544] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 962.673521][ C0] iowarrior 4-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 962.679354][ T25] usb 4-1: USB disconnect, device number 62 [ 962.729096][T15544] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 962.736881][T15712] bridge0: port 1(erspan0) entered blocking state [ 962.744749][T15712] bridge0: port 1(erspan0) entered disabled state [ 962.850511][T15712] erspan0: entered allmulticast mode [ 962.864837][T15710] vhci_hcd: connection reset by peer [ 962.870625][ T1157] vhci_hcd vhci_hcd.6: stop threads [ 962.870653][ T1157] vhci_hcd vhci_hcd.6: release socket [ 962.870696][ T1157] vhci_hcd vhci_hcd.6: disconnect device [ 962.973719][T15712] erspan0: entered promiscuous mode [ 963.099251][T15544] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 963.146683][T15544] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 963.170960][T15544] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 963.186586][T15544] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 963.239787][T15544] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 963.278557][T15544] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 963.411823][ T7622] IPVS: stop unused estimator thread 0... [ 964.000541][T15732] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2604'. [ 964.227902][T15544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.563792][T15544] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.587004][ T7244] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.587172][ T7244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.634640][ T7623] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.634796][ T7623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.741016][T15738] cgroup: fork rejected by pids controller in /syz6 [ 964.870461][ T1672] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 964.973309][T15544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.035698][ T1672] usb 4-1: not running at top speed; connect to a high speed hub [ 965.035820][ T1672] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 965.046338][ T1672] usb 4-1: config 0 has no interfaces? [ 965.046444][ T1672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.072901][ T1672] usb 4-1: config 0 descriptor?? [ 965.186168][T15544] veth0_vlan: entered promiscuous mode [ 965.211031][T15544] veth1_vlan: entered promiscuous mode [ 965.264408][T15544] veth0_macvtap: entered promiscuous mode [ 965.276535][T15544] veth1_macvtap: entered promiscuous mode [ 965.311303][T15544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 965.329996][T15544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 965.462484][ T7622] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.477537][ T7622] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.478526][ T7622] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.479276][ T7622] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.528782][ T1672] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 965.688943][ T1672] usb 2-1: device descriptor read/64, error -71 [ 965.712469][ T7623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.721353][ T7623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.754752][ T25] usb 4-1: USB disconnect, device number 63 [ 965.867731][ T7623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.867787][ T7623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.929218][ T1672] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 966.061977][ T1672] usb 2-1: device descriptor read/64, error -71 [ 966.170272][ T1672] usb usb2-port1: attempt power cycle [ 966.528885][ T1672] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 966.551122][ T1672] usb 2-1: device descriptor read/8, error -71 [ 966.657127][ T4936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 966.679020][ T4936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 966.692241][ T4936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 966.758775][ T4936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 966.774259][ T4936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 966.788930][ T1672] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 966.816615][ T1672] usb 2-1: device descriptor read/8, error -71 [ 966.919563][ T1672] usb usb2-port1: unable to enumerate USB device [ 967.021991][T15858] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 967.139502][T13579] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 967.268044][ T7622] bond0: (slave netdevsim1): Releasing backup interface [ 967.320035][T13579] usb 3-1: Using ep0 maxpacket: 16 [ 967.323092][T13579] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 967.326201][T13579] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 967.326284][T13579] usb 3-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 967.326374][T13579] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 967.326494][T13579] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 967.326569][T13579] usb 3-1: config 0 interface 0 has no altsetting 0 [ 967.333606][T13579] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.333681][T13579] usb 3-1: Product: syz [ 967.333725][T13579] usb 3-1: Manufacturer: syz [ 967.333766][T13579] usb 3-1: SerialNumber: syz [ 967.450977][T13579] usb 3-1: config 0 descriptor?? [ 967.456077][T15861] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 967.578667][ T8435] usb 46-1: device descriptor read/8, error -110 [ 967.667489][T15861] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 967.676016][ T7622] netdevsim netdevsim6 netdevsim0 (unregistering): left allmulticast mode [ 967.676083][ T7622] netdevsim netdevsim6 netdevsim0 (unregistering): left promiscuous mode [ 967.683436][ T7622] bridge0: port 3(netdevsim0) entered disabled state [ 967.703508][T13579] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input69 [ 967.971933][ T8435] usb usb46-port1: attempt power cycle [ 968.205827][ T5708] usb 3-1: USB disconnect, device number 44 [ 968.412662][T15874] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2615'. [ 968.573486][ T8435] usb usb46-port1: unable to enumerate USB device [ 968.699272][ T7622] dummy0: left allmulticast mode [ 968.699559][ T7622] bridge0: port 4(dummy0) entered disabled state [ 968.745306][ T7622] bridge_slave_1: left allmulticast mode [ 968.749761][ T7622] bridge_slave_1: left promiscuous mode [ 968.760973][ T7622] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.786889][ T5700] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 968.825459][T15890] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2619'. [ 968.837059][ T7622] bridge_slave_0: left allmulticast mode [ 968.847762][ T7622] bridge_slave_0: left promiscuous mode [ 968.848498][ T7622] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.868550][ T4936] Bluetooth: hci1: command tx timeout [ 968.895049][ T7622] pim6reg9: left allmulticast mode [ 968.970585][ T5700] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 968.976119][ T5700] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 968.976246][ T5700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.024053][ T5700] as10x_usb: device has been detected [ 969.032656][ T5700] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 969.197709][ T5700] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 969.353201][T15904] Failed to get privilege flags for destination (handle=0x2:0x400) [ 969.491875][ T5700] as10x_usb: error during firmware upload part1 [ 969.496934][ T5700] Registered device Abilis Systems DVB-Titan [ 969.523644][ T5700] usb 2-1: USB disconnect, device number 37 [ 969.558506][T13945] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 969.655943][ T7622] bond1 (unregistering): (slave gre1): Releasing backup interface [ 969.655998][ T7622] gre1 (unregistering): left promiscuous mode [ 969.689739][ T5700] Unregistered device Abilis Systems DVB-Titan [ 969.697718][ T5700] as10x_usb: device has been disconnected [ 969.711027][T13945] usb 4-1: Using ep0 maxpacket: 32 [ 969.717577][T13945] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 969.731282][T13945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.760175][T13945] usb 4-1: config 0 descriptor?? [ 969.797153][T13945] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 969.814153][ T7622] bond3 (unregistering): (slave ipip0): Releasing backup interface [ 969.814202][ T7622] ipip0 (unregistering): left promiscuous mode [ 969.855390][T13945] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input70 [ 970.157201][ T7622] [ 970.159623][ T7622] ====================================================== [ 970.166712][ T7622] WARNING: possible circular locking dependency detected [ 970.173873][ T7622] syzkaller #0 Tainted: G L [ 970.179887][ T7622] ------------------------------------------------------ [ 970.186990][ T7622] kworker/u8:32/7622 is trying to acquire lock: [ 970.193320][ T7622] ffff8880664f8e70 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: ipvlan_uninit+0x147/0x290 [ 970.203307][ T7622] [ 970.203307][ T7622] but task is already holding lock: [ 970.210683][ T7622] ffff88801e7c68c0 (&port->pnodes_lock){+.+.}-{4:4}, at: ipvlan_device_event+0x489/0xfb0 [ 970.220579][ T7622] [ 970.220579][ T7622] which lock already depends on the new lock. [ 970.220579][ T7622] [ 970.230999][ T7622] [ 970.230999][ T7622] the existing dependency chain (in reverse order) is: [ 970.240025][ T7622] [ 970.240025][ T7622] -> #1 (&port->pnodes_lock){+.+.}-{4:4}: [ 970.248051][ T7622] __mutex_lock+0x19d/0x1550 [ 970.253212][ T7622] ipvlan_device_event+0x489/0xfb0 [ 970.258916][ T7622] notifier_call_chain+0x1a5/0x3d0 [ 970.264626][ T7622] call_netdevice_notifiers+0x90/0xd0 [ 970.270643][ T7622] xdp_set_features_flag+0x1a0/0x2a0 [ 970.276614][ T7622] bond_xdp_set_features+0x277/0x320 [ 970.282483][ T7622] bond_enslave+0x2c78/0x3b10 [ 970.287711][ T7622] do_set_master+0x563/0x720 [ 970.292941][ T7622] do_setlink+0xe7b/0x4670 [ 970.297911][ T7622] rtnl_newlink+0x15a3/0x1c30 [ 970.303130][ T7622] rtnetlink_rcv_msg+0x802/0xc00 [ 970.308647][ T7622] netlink_rcv_skb+0x226/0x4a0 [ 970.313974][ T7622] netlink_unicast+0x7bd/0x940 [ 970.319283][ T7622] netlink_sendmsg+0x813/0xb40 [ 970.324599][ T7622] sock_sendmsg_nosec+0x13a/0x180 [ 970.330192][ T7622] ____sys_sendmsg+0x54e/0x850 [ 970.335515][ T7622] ___sys_sendmsg+0x2a5/0x360 [ 970.340738][ T7622] __x64_sys_sendmsg+0x1b1/0x290 [ 970.346324][ T7622] do_syscall_64+0x166/0x520 [ 970.351553][ T7622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.358081][ T7622] [ 970.358081][ T7622] -> #0 (&dev_instance_lock_key#2){+.+.}-{4:4}: [ 970.366533][ T7622] __lock_acquire+0x15ff/0x2e50 [ 970.372192][ T7622] lock_acquire+0x115/0x350 [ 970.377236][ T7622] __mutex_lock+0x19d/0x1550 [ 970.382386][ T7622] ipvlan_uninit+0x147/0x290 [ 970.387527][ T7622] unregister_netdevice_many_notify+0x1acd/0x2140 [ 970.394486][ T7622] ipvlan_device_event+0xf1f/0xfb0 [ 970.400141][ T7622] notifier_call_chain+0x1a5/0x3d0 [ 970.405814][ T7622] unregister_netdevice_many_notify+0x17f9/0x2140 [ 970.412771][ T7622] ops_undo_list+0x391/0x8d0 [ 970.417910][ T7622] cleanup_net+0x572/0x810 [ 970.422961][ T7622] process_scheduled_works+0xc3d/0x1630 [ 970.429168][ T7622] worker_thread+0xa47/0xfb0 [ 970.434408][ T7622] kthread+0x38b/0x480 [ 970.439012][ T7622] ret_from_fork+0x514/0xb70 [ 970.444191][ T7622] ret_from_fork_asm+0x1a/0x30 [ 970.449509][ T7622] [ 970.449509][ T7622] other info that might help us debug this: [ 970.449509][ T7622] [ 970.459779][ T7622] Possible unsafe locking scenario: [ 970.459779][ T7622] [ 970.467569][ T7622] CPU0 CPU1 [ 970.472957][ T7622] ---- ---- [ 970.478379][ T7622] lock(&port->pnodes_lock); [ 970.483090][ T7622] lock(&dev_instance_lock_key#2); [ 970.490834][ T7622] lock(&port->pnodes_lock); [ 970.498134][ T7622] lock(&dev_instance_lock_key#2); [ 970.503401][ T7622] [ 970.503401][ T7622] *** DEADLOCK *** [ 970.503401][ T7622] [ 970.511821][ T7622] locks held by kworker/u8:32/7622: 5, last CPU#1: [ 970.518455][ T7622] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 970.529452][ T7622] #1: ffffc90003e8fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 970.540014][ T7622] #2: ffffffff90242588 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 970.549735][ T7622] #3: ffffffff90250e00 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 970.558825][ T7622] #4: ffff88801e7c68c0 (&port->pnodes_lock){+.+.}-{4:4}, at: ipvlan_device_event+0x489/0xfb0 [ 970.569116][ T7622] [ 970.569116][ T7622] stack backtrace: [ 970.575070][ T7622] CPU: 1 UID: 0 PID: 7622 Comm: kworker/u8:32 Tainted: G L syzkaller #0 PREEMPT(full) [ 970.586215][ T7622] Tainted: [L]=SOFTLOCKUP [ 970.590555][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 970.600626][ T7622] Workqueue: netns cleanup_net [ 970.605456][ T7622] Call Trace: [ 970.608751][ T7622] [ 970.611708][ T7622] dump_stack_lvl+0xe8/0x150 [ 970.616329][ T7622] print_circular_bug+0x2e2/0x300 [ 970.621392][ T7622] check_noncircular+0x12f/0x150 [ 970.626372][ T7622] __lock_acquire+0x15ff/0x2e50 [ 970.631244][ T7622] ? __lock_acquire+0x6df/0x2e50 [ 970.636208][ T7622] ? ret_from_fork_asm+0x1a/0x30 [ 970.641178][ T7622] ? unwind_next_frame+0x8f/0x2550 [ 970.646394][ T7622] lock_acquire+0x115/0x350 [ 970.650921][ T7622] ? ipvlan_uninit+0x147/0x290 [ 970.655709][ T7622] __mutex_lock+0x19d/0x1550 [ 970.660357][ T7622] ? ipvlan_uninit+0x147/0x290 [ 970.665148][ T7622] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 970.671044][ T7622] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 970.676875][ T7622] ? ref_tracker_alloc+0x2d7/0x4b0 [ 970.682011][ T7622] ? lockdep_hardirqs_on+0x7b/0x110 [ 970.687235][ T7622] ? ipvlan_uninit+0x147/0x290 [ 970.692019][ T7622] ? __pfx___mutex_lock+0x10/0x10 [ 970.697089][ T7622] ? notifier_call_chain+0x1a5/0x3d0 [ 970.702413][ T7622] ? cleanup_net+0x572/0x810 [ 970.707038][ T7622] ? process_scheduled_works+0xc3d/0x1630 [ 970.712781][ T7622] ? preempt_schedule_thunk+0x16/0x40 [ 970.718188][ T7622] ipvlan_uninit+0x147/0x290 [ 970.722817][ T7622] ? __pfx_ipvlan_uninit+0x10/0x10 [ 970.727945][ T7622] ? notifier_call_chain+0x3aa/0x3d0 [ 970.733257][ T7622] ? __pfx_ipvlan_uninit+0x10/0x10 [ 970.738394][ T7622] unregister_netdevice_many_notify+0x1acd/0x2140 [ 970.744851][ T7622] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 970.751636][ T7622] ? netdev_upper_dev_unlink+0x99/0xe0 [ 970.757125][ T7622] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 970.763139][ T7622] ? __ipvlan_link_delete+0x2eb/0x350 [ 970.768617][ T7622] ipvlan_device_event+0xf1f/0xfb0 [ 970.773921][ T7622] ? __pfx_bond_netdev_event+0x10/0x10 [ 970.779488][ T7622] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 970.785504][ T7622] ? __pfx_ipvlan_device_event+0x10/0x10 [ 970.791166][ T7622] ? __local_bh_enable_ip+0xd6/0x140 [ 970.796486][ T7622] notifier_call_chain+0x1a5/0x3d0 [ 970.801637][ T7622] unregister_netdevice_many_notify+0x17f9/0x2140 [ 970.808089][ T7622] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 970.814890][ T7622] ? rtnl_is_locked+0x15/0x20 [ 970.819592][ T7622] ? nexthop_net_exit_rtnl+0x258/0x2a0 [ 970.825165][ T7622] ops_undo_list+0x391/0x8d0 [ 970.829795][ T7622] ? __pfx_ops_undo_list+0x10/0x10 [ 970.834936][ T7622] ? idr_destroy+0x218/0x290 [ 970.839620][ T7622] ? do_raw_spin_unlock+0xf5/0x200 [ 970.844757][ T7622] cleanup_net+0x572/0x810 [ 970.849204][ T7622] ? __pfx_cleanup_net+0x10/0x10 [ 970.854172][ T7622] ? rcu_is_watching+0x16/0xb0 [ 970.858957][ T7622] ? process_scheduled_works+0x97a/0x1630 [ 970.864711][ T7622] process_scheduled_works+0xc3d/0x1630 [ 970.870311][ T7622] ? __pfx_process_scheduled_works+0x10/0x10 [ 970.876342][ T7622] ? assign_work+0x3cf/0x5d0 [ 970.880963][ T7622] worker_thread+0xa47/0xfb0 [ 970.885586][ T7622] kthread+0x38b/0x480 [ 970.889676][ T7622] ? __pfx_worker_thread+0x10/0x10 [ 970.894816][ T7622] ? __pfx_kthread+0x10/0x10 [ 970.899449][ T7622] ret_from_fork+0x514/0xb70 [ 970.904066][ T7622] ? __pfx_ret_from_fork+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 970.909213][ T7622] ? __switch_to+0xc89/0x1420 [ 970.913938][ T7622] ? __pfx_kthread+0x10/0x10 [ 970.918730][ T7622] ret_from_fork_asm+0x1a/0x30 [ 970.923623][ T7622] [ 971.007055][ T4936] Bluetooth: hci1: command tx timeout [ 971.225564][ T7622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 971.235889][ T7622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 971.236581][ T7622] bond0 (unregistering): Released all slaves [ 971.254468][ T7622] bond1 (unregistering): Released all slaves [ 971.265212][ T7622] bond2 (unregistering): Released all slaves [ 971.280901][ T7622] bond3 (unregistering): Released all slaves [ 971.350555][ T5281] 8021q: adding VLAN 0 to HW filter on device eth9 [ 971.384908][ T7127] vivid-000: reconnect [ 972.079096][T15850] usb 4-1: USB disconnect, device number 64 [ 972.557175][ T7622] team0 (unregistering): Port device team_slave_1 removed [ 972.570322][ T7622] team0 (unregistering): Port device team_slave_0 removed [ 972.630592][ T5281] 8021q: adding VLAN 0 to HW filter on device eth10 [ 972.982820][ T7622] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.035379][ T7622] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.075674][ T7622] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.125624][ T7622] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.164336][ T5281] 8021q: adding VLAN 0 to HW filter on device eth11 [ 973.194284][ T7622] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 973.194346][ T7622] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.223826][ T7622] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 973.223879][ T7622] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.301224][ T7622] bond0: (slave netdevsim1): Releasing backup interface [ 973.313453][ T7622] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 973.313500][ T7622] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.384056][ T7622] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 973.384119][ T7622] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.685794][ T5281] 8021q: adding VLAN 0 to HW filter on device eth12 [ 973.735188][ T7622] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 973.735234][ T7622] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 973.735313][ T7622] bridge0: port 3(netdevsim0) entered disabled state [ 973.855630][ T7622] bridge_slave_1: left allmulticast mode [ 973.855668][ T7622] bridge_slave_1: left promiscuous mode [ 973.855842][ T7622] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.869870][ T7622] bridge_slave_0: left allmulticast mode [ 973.869897][ T7622] bridge_slave_0: left promiscuous mode [ 973.870063][ T7622] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.905305][ T7622] erspan0: left allmulticast mode [ 973.915950][ T7622] erspan0: left promiscuous mode [ 973.921500][ T7622] bridge0: port 1(erspan0) entered disabled state [ 973.930486][ T7622] dvmrp0: left allmulticast mode [ 973.937985][ T7622] gretap0: left allmulticast mode [ 973.950255][ T7622] gretap0: left promiscuous mode [ 973.955562][ T7622] bridge0: port 4(gretap0) entered disabled state [ 973.963592][ T7622] bridge_slave_1: left allmulticast mode [ 973.963634][ T7622] bridge_slave_1: left promiscuous mode [ 973.964043][ T7622] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.983258][ T7622] bridge_slave_0: left allmulticast mode [ 973.983312][ T7622] bridge_slave_0: left promiscuous mode [ 973.983752][ T7622] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.146553][ T7622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 974.157754][ T7622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 974.165587][ T7622] bond0 (unregistering): Released all slaves [ 974.204682][ T7622] bond0 (unregistering): Released all slaves [ 974.281564][ T7622] team0: Port device xfrm0 removed [ 974.347748][ T7622] bond0 (unregistering): Released all slaves [ 974.355443][ T7622] bond1 (unregistering): (slave veth3): Releasing active interface [ 974.365331][ T7622] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 974.376425][ T7622] bond1 (unregistering): Released all slaves [ 974.387804][ T7622] bond2 (unregistering): Released all slaves [ 974.396970][ T7622] bond3 (unregistering): Released all slaves [ 974.406243][ T7622] bond4 (unregistering): Released all slaves [ 974.416060][ T7622] bond5 (unregistering): Released all slaves [ 974.424850][ T7622] bond6 (unregistering): Released all slaves [ 974.562623][ T7622] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 974.586397][ T7622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 974.597070][ T7622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 974.606870][ T7622] bond0 (unregistering): Released all slaves [ 974.615801][ T7622] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 974.625193][ T7622] bond1 (unregistering): Released all slaves [ 974.635080][ T7622] bond2 (unregistering): Released all slaves [ 974.645944][ T7622] bond3 (unregistering): (slave dummy0): Releasing backup interface [ 974.656535][ T7622] bond3 (unregistering): Released all slaves [ 974.665985][ T7622] bond4 (unregistering): Released all slaves [ 974.677071][ T7622] bond5 (unregistering): Released all slaves [ 974.686312][ T7622] bond6 (unregistering): Released all slaves [ 974.698795][ T5281] 8021q: adding VLAN 0 to HW filter on device eth13 [ 974.870288][ T7622] : left promiscuous mode [ 974.959294][ T7622] tipc: Disabling bearer [ 974.964726][ T7622] tipc: Disabling bearer [ 974.981316][ T7622] tipc: Left network mode [ 975.094859][ T7622] IPVS: stopping master sync thread 6981 ... [ 975.202873][ T5281] 8021q: adding VLAN 0 to HW filter on device eth14 [ 975.411641][ T7622] batman_adv: batadv0: Removing interface: wlan1 [ 975.703544][ T5281] 8021q: adding VLAN 0 to HW filter on device eth15 [ 975.986245][ T5281] 8021q: adding VLAN 0 to HW filter on device eth16 [ 976.261197][ T5281] 8021q: adding VLAN 0 to HW filter on device eth17 [ 976.542213][ T5281] 8021q: adding VLAN 0 to HW filter on device eth18 [ 976.850025][ T5281] 8021q: adding VLAN 0 to HW filter on device eth19 [ 977.094146][ T7622] hsr_slave_0: left promiscuous mode [ 977.096098][ T7622] hsr_slave_1: left promiscuous mode [ 977.099564][ T7622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 977.099618][ T7622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 977.103459][ T7622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 977.103519][ T7622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 977.115776][ T7622] bridge_slave_0: left promiscuous mode [ 977.123127][ T7622] batadv0: left promiscuous mode [ 977.144421][ T7622] hsr_slave_0: left promiscuous mode [ 977.154974][ T7622] hsr_slave_1: left promiscuous mode [ 977.162727][ T7622] hsr_slave_0: left promiscuous mode [ 977.168918][ T7622] hsr_slave_1: left promiscuous mode [ 977.174972][ T7622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 977.184210][ T7622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 977.200576][ T7622] veth1_macvtap: left promiscuous mode [ 977.206209][ T7622] veth0_macvtap: left promiscuous mode [ 977.206333][ T7622] veth1_vlan: left promiscuous mode [ 977.206381][ T7622] veth0_vlan: left promiscuous mode [ 977.224167][ T7622] veth1_macvtap: left promiscuous mode [ 977.224219][ T7622] veth0_macvtap: left promiscuous mode [ 977.382962][ T7622] team0 (unregistering): Port device team_slave_1 removed [ 977.394529][ T7622] team0 (unregistering): Port device team_slave_0 removed [ 977.786406][ T5281] 8021q: adding VLAN 0 to HW filter on device eth20 [ 978.260777][ T5281] 8021q: adding VLAN 0 to HW filter on device eth22 [ 978.570118][ T7622] IPVS: stop unused estimator thread 0... [ 978.646351][ T5281] 8021q: adding VLAN 0 to HW filter on device eth21 [ 978.923464][ T5281] 8021q: adding VLAN 0 to HW filter on device eth23 [ 979.207094][ T5281] 8021q: adding VLAN 0 to HW filter on device eth24