last executing test programs: 20m51.270031914s ago: executing program 2 (id=1776): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$key(0xf, 0x3, 0x2) read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r3, 0x4000, r3}, 0x18) sync() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2b) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xb}, 0x94) syz_usb_control_io$uac2(r5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000540)={&(0x7f00000001c0), &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7, 0x1, 0xa}) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 20m42.373007312s ago: executing program 2 (id=1787): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x12) socket$netlink(0x10, 0x3, 0xc) unshare(0x6e000000) getgroups(0x0, 0x0) unshare(0x28000600) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, 0x0, &(0x7f0000000080)) r2 = socket$netlink(0x10, 0x3, 0x0) gettid() r3 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0xb0, 0x2000000000000400) r5 = landlock_create_ruleset(&(0x7f0000000200)={0x22a1, 0x1, 0x0, 0x704b, 0xc}, 0x30, 0x6) landlock_restrict_self(r5, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000100b7080000b2e900007b8af8ff"], 0x0, 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$TIOCGSID(r3, 0x5429, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f00000001c0)={0x74}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b000100000000090400", @ANYRES16, @ANYRESDEC, @ANYRESDEC], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 20m38.848609651s ago: executing program 2 (id=1791): unshare(0x8040480) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, r4, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x50}}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = inotify_init() r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fd, 0x0, 0x3, 0x3}, 0x10) recvmmsg(r7, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/36, 0x24}], 0x1}, 0x4}], 0x1, 0x400101a0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x3) ioctl$TIOCSETD(r0, 0x5423, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) fadvise64(r8, 0x2da, 0x1, 0x2) r9 = socket(0x2, 0x3, 0x5) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000240)=0x7db7, 0x4) unshare(0x0) sendto$inet(r9, 0x0, 0x0, 0x4000000, &(0x7f0000000000)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) recvmmsg(r9, &(0x7f0000002100)=[{{0x0, 0x50, 0x0}, 0x3e8882f4}], 0x1, 0x0, 0x0) 20m37.14948225s ago: executing program 2 (id=1793): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x6000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x14}, 0x4e20, 0x3, 'lblc\x00', 0x3c, 0x40c, 0x41}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000200)={{0x84, @empty, 0x4e21, 0x3, 'lc\x00', 0xc, 0x9, 0x63}, {@private=0xa010102, 0x4623, 0x4, 0x100000cd, 0x12d5f, 0x3}}, 0x44) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0xffff) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 20m31.79647259s ago: executing program 2 (id=1800): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000500)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x2005}) epoll_wait(r5, &(0x7f0000000100)=[{}], 0x1, 0x1ff) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000002140)=0x1) r6 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x8000}) r7 = fcntl$dupfd(r6, 0x0, r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r7}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) pwritev2(r10, &(0x7f0000000280)=[{&(0x7f0000000040)="d577f8b8de926417da747217376b32", 0xf}], 0x1, 0x4, 0x2, 0x5) fcntl$lock(r10, 0x7, &(0x7f0000000100)={0x0, 0x2, 0x2, 0xfffffffc}) fcntl$lock(r10, 0x25, &(0x7f0000000140)={0x0, 0x1, 0x3, 0x8}) fcntl$lock(r10, 0x7, &(0x7f00000003c0)={0x0, 0x2, 0x5, 0x5}) fcntl$lock(r9, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x9, 0x7}) close_range(r8, 0xffffffffffffffff, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r11, 0xffffffffffffffff, 0x0) 20m31.225048468s ago: executing program 2 (id=1801): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x12) socket$netlink(0x10, 0x3, 0xc) unshare(0x6e000000) getgroups(0x0, 0x0) unshare(0x28000600) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, 0x0, &(0x7f0000000080)) r2 = socket$netlink(0x10, 0x3, 0x0) gettid() r3 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0xb0, 0x2000000000000400) r5 = landlock_create_ruleset(&(0x7f0000000200)={0x22a1, 0x1, 0x0, 0x704b, 0xc}, 0x30, 0x6) landlock_restrict_self(r5, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000100b7080000b2e900007b8af8ff00"], 0x0, 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$TIOCGSID(r3, 0x5429, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f00000001c0)={0x74}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b000100000000090400", @ANYRES16, @ANYRESDEC, @ANYRESDEC], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 20m15.694733083s ago: executing program 32 (id=1801): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x12) socket$netlink(0x10, 0x3, 0xc) unshare(0x6e000000) getgroups(0x0, 0x0) unshare(0x28000600) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, 0x0, &(0x7f0000000080)) r2 = socket$netlink(0x10, 0x3, 0x0) gettid() r3 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0xb0, 0x2000000000000400) r5 = landlock_create_ruleset(&(0x7f0000000200)={0x22a1, 0x1, 0x0, 0x704b, 0xc}, 0x30, 0x6) landlock_restrict_self(r5, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000100b7080000b2e900007b8af8ff00"], 0x0, 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$TIOCGSID(r3, 0x5429, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f00000001c0)={0x74}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b000100000000090400", @ANYRES16, @ANYRESDEC, @ANYRESDEC], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 19m47.259615701s ago: executing program 0 (id=1859): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)={0x18, 0x10, 0xa, 0x201, 0x70bd28, 0x25dfdbfd, {0x2, 0x0, 0x8}, [@generic="b5"]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000006a013e001001000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x20048009) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat2$dir(0xffffff9c, &(0x7f0000000140)='./cgroup/../file0/file0/file0\x00', &(0x7f00000002c0)={0x800, 0x0, 0x5}, 0x18) mkdirat(r4, &(0x7f0000000300)='./cgroup/../file0\x00', 0x20) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./cgroup/../file0/file0/file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdirat$cgroup(r7, &(0x7f0000000080)='syz1\x00', 0x1ff) write$cgroup_int(r8, &(0x7f0000000100)=0x1, 0x12) 19m46.332622097s ago: executing program 0 (id=1862): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x4008094) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000}, 0x50) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r8, 0xc038586a, &(0x7f0000000200)={r0, &(0x7f0000000000)='\x04', 0x842000, &(0x7f0000000080)={@_ha_fsid={[0x480, 0x1]}, {0xca8a, 0xaed, 0x0, 0x8e}}, 0x2, &(0x7f00000000c0), &(0x7f0000000180)=0x2}) r9 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r9, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x5452, &(0x7f0000000640)={r9, r9}) ioctl$int_in(r9, 0x5452, &(0x7f00000001c0)=0xa92) socket$kcm(0x29, 0x7, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 19m43.729285604s ago: executing program 5 (id=1863): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) write(r2, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000180)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0xa, 0x0}}, {0x6, @remote}, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 'netpci0\x00'}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b4000000190001770000dd0668e3ab5336dc00000000002500000000000000000000000000000000fe8000000000000000000000000000bb0000ecffffff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000000004000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000bf6b6e0001000000"], 0xb4}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) syz_open_dev$dri(0x0, 0x40, 0x200480) r3 = socket$kcm(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) timer_create(0x9, 0x0, &(0x7f0000bbdffc)) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000480)) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0xfffffffe, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0684113, &(0x7f0000000080)={0xffffffff, 0xfffff800, 0x1, 0xa, 0x8, 0x5, 0x500, 0x7, 0x9, 0x40, 0xfffffffc, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x1, 0x40) process_madvise(r6, &(0x7f00000015c0)=[{0x0, 0xb3c9de750fa141ee}, {&(0x7f0000001600)="7fe370522d6af6625215f1793293827ec1fbafd2669ec71d6ec4f18aaa71edae948611d70900e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81a1e8e2fb2e51596", 0x1}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c026d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a93a73b6dea475547a826b25021aecd727c201c9cea0bfba0122b00573c286b821d43d0b4e38ec90b7d08565bf81862bdf5115e75886e742c51e058d0752982da309d53a7c0d320fdbd38bfaa998ff981d15928f783b2728ecc210898685dfc72398e665b7892024c0ab0dcfe9d3fc", 0xd7}, {&(0x7f0000001400)="3e519bc4eb7b0a55b33bdb22cc7ca76aba33506ebcf89e67b16583e68404bbca008b995a73322a4cc7a3c436e94da49121c4f225ccd342612b46beb2f569a7a0423c0cf79f2d94c015b7b47bc11d5fe599214dbe7f92c8a14b6d254a8daa074ece2708f10e912eb72cb22efc14a0d0cc7cea79311ead3200c7aca0e920d83c8d7b92db", 0x83}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c6845529fb603666d78c0e1e5f7bca8f1d8584b7409ccaf0da598af64d7bdd2ae21ac4fb4e07dee96a92a8dddecee7ccbede2d0a7d4f2da90dc3eb4ae8895091f05db58a786519f6fc924a465cc46ae6a9b8705de0705b8bab4f10cddc7756c53eadf4aa6e2379fd85e9c5e7bfc", 0xd4}], 0x6, 0x9, 0x0) 19m43.608643995s ago: executing program 0 (id=1864): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x22, 0xffffffffffffffff, &(0x7f00000002c0)=0x49) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_emit_ethernet(0x6a, &(0x7f0000000300)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd, 0x4, 0x0, [], "1c155219"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0xffffffff}}}}}}, 0x0) r6 = syz_usb_connect$cdc_ecm(0x4, 0x156, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x60, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x144, 0x1, 0x1, 0x67, 0xf0, 0x9}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x0, 0xd0, 0x5, 0x8, 0x5}, 0x2e, &(0x7f00000001c0)={0x5, 0xf, 0x2e, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x2, 0x3, 0x6a84, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xe, 0x7, 0x7}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "bb4e1fe3e3d3ed686a472ac3d2fb4379"}]}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x421}}]}) syz_usb_ep_write(r6, 0x5, 0x3f, &(0x7f0000000500)="8e8ecb86e1686a692ca25e347583fdfc30f27773109e13988de3ddac8aae64793bab124db2a51a3f7905ff8af0b9818f6d59613d778b08c17f90fcc1c9f4e9") sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xffffffffffffff39, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xa3}) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r7, 0x800c5012, &(0x7f0000000040)) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000080)=[{&(0x7f0000002240)=""/155, 0x9b}], 0x1, 0x8, 0x5) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x4000010) 19m37.298527571s ago: executing program 5 (id=1875): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc259, 0xf8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xb4, 0x84, 0xfe}}}}}]}}]}}, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000007c0), 0x40800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r2, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xa048}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x6) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000002c0), &(0x7f0000000300)=0xffffffffffffffae) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1c9) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000440), 0xffffffdd, 0x406e01) readv(r6, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0xc3) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0xe2) r8 = syz_io_uring_setup(0x1acf, &(0x7f0000000540)={0x0, 0xaf, 0x800, 0x1, 0x10}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r12, 0x0, &(0x7f0000004080)={0x0, 0x0, 0x0}, 0x0, 0x4000}) io_uring_enter(r8, 0xffffffff, 0x1, 0x1, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0xffffffffffffffff) request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='-', 0xfffffffffffffffe) 19m36.943678021s ago: executing program 0 (id=1876): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r0, 0x26, &(0x7f0000000180)) fcntl$lock(r0, 0x7, &(0x7f0000000200)={0x0, 0x2, 0x8, 0x7}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xd3b}, @TCA_FQ_QUANTUM={0x8, 0x3, 0xf1ff}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x8}]}}]}, 0x48}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r7, 0x80045104, &(0x7f0000001180)) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r7, 0x40047211, &(0x7f00000000c0)) sendmsg$key(r6, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x70bd27, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x1000}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfc, 0xe0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0) ioctl$sock_netdev_private(r3, 0x89fa, &(0x7f0000000140)="480998b9d0e5d0ac42bcfabb57989b03d2d4249075ce3b19d414626408c4c6500ea08976d68840579843e015272a7ce160ba68a4e37889a7770fda12d9ccd5bbde7eba20642f715f2e9018c56bf4a7e6a8a6dff9ffa77886394c920a75c236595cec54febfbe3081491f28064bb65e7ac4458fd393575b5402b0f76b30353251c036166e86fd58") r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1a, 0x1, @tid=r8}, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000200)={r9, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x20) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6, @broadcast}, 0x10) sendmsg$key(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)={0x2, 0xb, 0x6, 0x7, 0x1d, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_ident={0x2, 0xa, 0xed17, 0x0, 0x628}, @sadb_sa={0x2, 0x1, 0x4d5, 0x62, 0x6, 0x74, 0x4, 0x1}, @sadb_x_sec_ctx={0xc, 0x18, 0xb, 0x20, 0x58, "373e20d80cf0ac8333916e2ac1e0c23637223f325fa5768daab5ef22e2c4f10b9368af1a2a175db48a54cb92e77ade9d389318f91dc2425fe5dfdacdf2505d7b983d17643261c923dc11da73464690c752ce77cb458cfad8"}, @sadb_lifetime={0x4, 0x4, 0x7, 0x5, 0x3, 0x9}, @sadb_address={0x3, 0x5, 0xeb, 0x80, 0x0, @in={0x2, 0x4e23, @multicast2}}, @sadb_ident={0x2, 0xa, 0x8, 0x0, 0x2}, @sadb_ident={0x2, 0xb, 0x7e02, 0x0, 0x10000}]}, 0xe8}}, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r9, 0x11, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) 19m33.702676296s ago: executing program 0 (id=1880): syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="0380c2000000aaaaaaaaaa1c86dd618cd59000303aff0000000000000000000000000000000000000000000000000000ffffac141421040190780000000360301d7400026c01fc0100000000"], 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='uid_map\x00') write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read(r2, &(0x7f0000001140)=""/4096, 0x48) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r3 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r4 = fsopen(0x0, 0x1) fsmount(r4, 0x1, 0x0) mkdirat(r3, 0x0, 0x166) write$binfmt_aout(r3, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f0000000340), 0x7ff, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r5 = syz_open_dev$audion(0x0, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0xa0000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) 19m31.22877521s ago: executing program 0 (id=1883): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x2d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000640)=[{{&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f00000005c0)=[@rights={{0x24, 0x1, 0x1, [r1, r1, r1, 0xffffffffffffffff, r1, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r1, r0, r0, r0, r1]}}], 0x48, 0x800}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8004, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) timer_create(0x6, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x242c3) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000100)={0xfffffffb, 0x0, 0x40}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={0x0}}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62040200) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfc, {0x2, 0x10, 0x10, 0x0, 0x0, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000000) 19m30.339277752s ago: executing program 5 (id=1884): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_delete(r0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=@ipmr_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_ENCAP={0x10, 0x9, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}, @RTA_GATEWAY={0x8, 0x5, @broadcast}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x800, 0x4) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x2}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x0, 0x10000000, 0x1}, {0x0, 0x200000, 0x7}, {0x40000, 0x8001, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x6b8f, 0x0, 0xb4, 0x5}}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f0000000cc0)={{0x8, 0x9, &(0x7f0000000c00)=[{0x2, 0x0, 0x8}, {0xff, 0x0, 0x7ff}, {}, {0x8, 0x0, 0x5}, {0x9, 0x0, 0x4}, {0x1, 0x0, 0x9}, {0x8, 0x0, 0x7f}, {0x0, 0x0, 0x3}, {0x40, 0x0, 0x80000001}]}, 0xd2, 0xff, 0x9, 0x3, 0x0, 0x5, 0xa2, 0x8}) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000180), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r6, 0xc040563e, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x96b, 0xfffffffc}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 19m28.676512479s ago: executing program 5 (id=1887): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)={0x18, 0x10, 0xa, 0x201, 0x70bd28, 0x25dfdbfd, {0x2, 0x0, 0x8}, [@generic="b5"]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000006a013e001001000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x20048009) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat2$dir(0xffffff9c, &(0x7f0000000140)='./cgroup/../file0/file0/file0\x00', &(0x7f00000002c0)={0x800, 0x0, 0x5}, 0x18) mkdirat(r4, &(0x7f0000000300)='./cgroup/../file0\x00', 0x20) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}}, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./cgroup/../file0/file0/file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdirat$cgroup(r7, &(0x7f0000000080)='syz1\x00', 0x1ff) write$cgroup_int(r8, &(0x7f0000000100)=0x1, 0x12) 19m27.368979639s ago: executing program 5 (id=1888): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000400)={r1, 0x3, 0x80, 0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x2ff, 0x0, 0x7ee69d08}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a", 0x10) r6 = dup2(r4, r4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = socket(0x2b, 0x80801, 0x1) connect$inet6(r11, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$inet6_mtu(r11, 0x29, 0x1e, &(0x7f0000000040), 0x4) 19m21.920216627s ago: executing program 5 (id=1895): socket$packet(0x11, 0x1, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000380)={"ee1018bb", 0x1000, 0xdc, 0x8, 0x560, 0x6, "6c79bf30c933b2c74933691baf5e76", "85b70a33", "f2f9256c", "695885fd", ["dc3a2175daddc4be5bb5ed88", "429cb4a13a706b8199073fbc", "bf3725cc6361bdeb383add75", "2034a551090098e109291940"]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x48814) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0xf, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x4, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, 0x0) ioctl$VIDIOC_QUERYMENU(r9, 0xc008561c, &(0x7f0000000000)={0x980915, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 19m16.02788354s ago: executing program 33 (id=1883): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x2d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000640)=[{{&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f00000005c0)=[@rights={{0x24, 0x1, 0x1, [r1, r1, r1, 0xffffffffffffffff, r1, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r1, r0, r0, r0, r1]}}], 0x48, 0x800}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8004, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) timer_create(0x6, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x242c3) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000100)={0xfffffffb, 0x0, 0x40}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={0x0}}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62040200) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfc, {0x2, 0x10, 0x10, 0x0, 0x0, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000000) 19m6.459579993s ago: executing program 34 (id=1895): socket$packet(0x11, 0x1, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000380)={"ee1018bb", 0x1000, 0xdc, 0x8, 0x560, 0x6, "6c79bf30c933b2c74933691baf5e76", "85b70a33", "f2f9256c", "695885fd", ["dc3a2175daddc4be5bb5ed88", "429cb4a13a706b8199073fbc", "bf3725cc6361bdeb383add75", "2034a551090098e109291940"]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x48814) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0xf, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x4, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, 0x0) ioctl$VIDIOC_QUERYMENU(r9, 0xc008561c, &(0x7f0000000000)={0x980915, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 12.179783188s ago: executing program 7 (id=5016): r0 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000"], 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4ad9, &(0x7f0000000300)={0x0, 0x9731, 0x4000, 0x3, 0x145}, &(0x7f00000003c0), 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_procfs(0x0, &(0x7f0000000180)='cgroup\x00') socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8921, &(0x7f0000000140)={'team0\x00', @ifru_data=&(0x7f0000000100)="8df07150d7bfb0c1c7a28298b528881afb16f4baea5aae3f7abe066a278d52d0"}) r5 = io_uring_setup(0x3c46, &(0x7f0000000880)={0x0, 0xeb7f, 0x3000, 0x2, 0x26c}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], &(0x7f0000000080)=[0x3fffffffffff], 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000240)=0xd) 10.703514223s ago: executing program 4 (id=5020): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbdf250c0000dd"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x44840) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000015c0)=@raw={'raw\x00', 0x8, 0x3, 0x1248, 0x0, 0x11, 0x148, 0x0, 0x0, 0x11b4, 0x2a8, 0x2a8, 0x11b4, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x10c4, 0x1124, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x40}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x0, './cgroup.net/syz0\x00', 0x1, {0xff}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x0, 0x6, 0x1], 0x1, 0x7}, {0x1, [0x1, 0x0, 0x0, 0x4, 0x1, 0x3], 0x1, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x12a4) sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000002c0)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r7, 0xffffffffffffffff}) syz_usb_connect$midi(0x2, 0x31, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r8, 0x404}], 0x1, &(0x7f0000000140), 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r14 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x5, 0x4}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0xc010) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000001840), 0x4) 10.214923487s ago: executing program 7 (id=5021): syz_usb_connect(0x6, 0x5e, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000007fdd30d04ab4a892", @ANYRES16=r1, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x240080c0}, 0x40000) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x20008) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x46, 0x80, 0x7}, &(0x7f0000000140)=0x10) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000004c0)={0x1, 0x80000000, 0xfffffff9}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) unshare(0x6020400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r6 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r7 = fcntl$dupfd(r6, 0x0, r6) write$binfmt_script(r7, &(0x7f0000000100), 0xfffffd9d) write$binfmt_script(r7, &(0x7f0000001b00), 0xfffffd9d) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x9, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x80000008, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fff, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x403, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfff, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0xff, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7ff7, 0x0, 0x1, 0x2, 0xd, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x20000009, 0x4, 0x6d01, 0x4, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x87c, 0x1002, 0x8, 0x7, 0x953a, 0x5, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x6, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x1, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0xa26, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0xf43, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000006840)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000006740)={0x1c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x1e01, 0xfffff9, 0x80000440], 0x600, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000358ebb3977c1388200000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffbff00"/144]}, 0xe0) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x0, 0x0, 0x0}], 0x2}) fsopen(&(0x7f0000000000)='tracefs\x00', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 9.787545688s ago: executing program 4 (id=5024): mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x50}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x10001}}) syz_usb_connect(0x3, 0x36, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="01265f"], 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000041000010025bd7000f9dbdf3500000000", @ANYRES32=0x0, @ANYBLOB="158804000301050008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) getsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f00000002c0)={@local, @loopback, @multicast1}, &(0x7f0000000380)=0xc) setitimer(0x2, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) setrlimit(0x0, &(0x7f0000000040)={0x27, 0xfffffffffffffffc}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r7, 0x0, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x2e, 0xf, [0xf68f, 0x6, 0x9, 0x1ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0x102, 0x101, 0x7, 0x200, 0x3d, 0x5e, 0x1000, 0xffff, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x7ffffffa, 0xd, 0xe9c4, 0xcd8, 0x6e, 0x6, 0x7, 0xd, 0x8a, 0x3, 0x6, 0x3, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x401, 0xeffff801, 0x2b, 0xa, 0x0, 0x7, 0x8, 0x5, 0x0, 0x6, 0x8, 0x1, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x5fffffd, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x400, 0x80000000, 0x8000, 0xc, 0x5, 0x2, 0x0, 0x2, 0x1, 0x80, 0x4, 0x1, 0x0, 0xd, 0x2000006, 0x7, 0x1, 0x10, 0x1, 0xfffffffc, 0x12, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x3, 0x4, 0x1, 0xa, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x6, 0x5, 0x7fff, 0x38, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x6, 0x7, 0x44b3, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x800, 0x3, 0x1, 0xfffffffa]}}) r9 = pidfd_getfd(0xffffffffffffffff, r5, 0x0) readv(r9, &(0x7f0000000840)=[{&(0x7f0000000480)=""/149, 0x95}, {&(0x7f00000005c0)=""/155, 0x9b}, {&(0x7f0000000680)=""/30, 0x1e}, {&(0x7f00000006c0)=""/239, 0xef}, {&(0x7f00000007c0)=""/116, 0x74}], 0x5) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="a183ffffffff00000000050000000c00990002e9ffff670000000500a300fa000000"], 0x28}}, 0x2400c0c4) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 7.890936407s ago: executing program 1 (id=5033): socket$igmp6(0xa, 0x3, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}}, 0x4000) syz_open_procfs(r1, &(0x7f0000000000)='ns\x00') r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, 0x0) socket(0x1e, 0x4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioprio_set$pid(0x2, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r6, r4}}, 0x18) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)='\x00\x00\x00\x00\x00\x00', 0x0, 0x7, 0x0, 0x8000000, 0x0}) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x8) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{0x0}], 0x1, 0x0, 0x0, 0x0) rt_sigqueueinfo(r7, 0x10, &(0x7f0000000080)={0x6, 0x611, 0x8}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) socket$inet6(0xa, 0x400000000001, 0x100) 7.741946723s ago: executing program 3 (id=5034): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1, 0x1}, 0xc) r1 = syz_ublk_setup_io_uring(0x5d2f, &(0x7f0000000040)={0x0, 0x716f, 0x4000, 0x3, 0x134}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x7}, {0xfff3, 0x2}, {0xa, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x895) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000080)={0x9, 0x1, 0x9}, 0x10) sendfile(r5, r4, &(0x7f00000000c0)=0x8b, 0x3) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x414801, 0x488) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1", 0x11}], 0x1}}], 0x1, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c800}, 0x4000000) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x42e7, &(0x7f00000001c0)={0x0, 0x8dfa, 0x80, 0x2, 0x14c, 0x0, r1}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) 7.740231449s ago: executing program 1 (id=5044): mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x50}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x10001}}) syz_usb_connect(0x3, 0x36, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="01265f"], 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000041000010025bd7000f9dbdf3500000000", @ANYRES32=0x0, @ANYBLOB="158804000301050008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) getsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f00000002c0)={@local, @loopback, @multicast1}, &(0x7f0000000380)=0xc) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x0, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 7.167644155s ago: executing program 6 (id=5035): socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000012c0)=ANY=[@ANYRES32, @ANYBLOB="2d000000380000000000bc3b30dfb4c7f91c7ace41f7584bea23732d53a28547850836d9bfc86d0f4caa35adb34e1b4dbdd415", @ANYRES32, @ANYRES64=0x0], 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000140000001100010000000000000000ffff00000a"], 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$can_bcm(0x1d, 0x2, 0x2) listen(r7, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r4, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0xfffffffc, 0xffffffff) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3c0, 0x2e0, 0x2e0, 0x3c0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d, 0x0, 0x0, 0x55}, {}, {}, {0x0, 0x0, 0x40, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xfc}, {0x0, 0x0, 0x0, 0x4b6}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0xd73a}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x6, 0x1}, {0x1}}}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4e4) 7.046471245s ago: executing program 7 (id=5036): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0xab, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000480)={&(0x7f00000002c0)=[r6], 0x1, r7, r4, 0x0, 0x3, 0x100, 0x4, {0x4, 0x1, 0x3, 0x65, 0x200, 0x0, 0x2, 0x5, 0xe, 0xe153, 0xdd, 0x0, 0x80007, 0xffffffff, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c4b868085a230901dabd000000010902f10001000000000904000005"], 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xe, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0) socket$inet6(0xa, 0x2, 0x0) r10 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = dup(r15) syz_ublk_setup_queues(r16, r14, &(0x7f0000000180)={0x0, 0xd894, 0x0, 0x1, 0x8255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10000, 0x2000, 0x10000004, 0x0, r16}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x4, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2, 0x1, 0x2e6, 0x0, r16}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x80000, 0x0, 0x343}}], 0x1, &(0x7f0000000340)={0x2e, 0x4c, 0x0, r16, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0xc0305720, 0x0) 5.820316119s ago: executing program 6 (id=5037): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0xff, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="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", 0x0, 0x101, 0x2, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[], 0xc8}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f00000001c0)=@ethtool_pauseparam={0x1b, 0x4, 0x62, 0x5}}) r5 = socket$kcm(0x10, 0x2, 0x0) removexattr(&(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)=@random={'security.', 'sit0\x00'}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x7c, 0x3f, 0x9, 0x70bd29, 0x0, {0x3}, [@generic="aa56ff28a4d1ca3340e119e4544214c0fbfaefeaf539438c78adb097354307eb8af44109e18e4d42c5c057ca4980375e1290d59ef247ff9ccb9680c579e051babf1c388dc4bd2939240b5489f7d85f", @typed={0x15, 0x9, 0x0, 0x0, @binary="615e262f100d02a8e253a834e1263a7f1f"}]}, 0x7c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r7, 0x0) ftruncate(r7, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) 5.819717939s ago: executing program 1 (id=5038): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4a42, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000019580)=ANY=[@ANYRESOCT=r5, @ANYBLOB="6db4401effcf07ed52b7ca506d4006787f4bbae89dbaf1e73316eeade4a769f207ec94555ee1d07903a2b2fc092276bcbf95c0d39a390c4be991f01d08ccde69f19f6ae9cd4b1a603f44305495f344939c46c7f8fa819d8ce46ae6c7f356d99944f3549d5d9a0f9b2a5e94b6526beecfaccc5cedc11fd60e91efdabe8caeb8c30dd1053a9dcf80082a1a89c595ecdaf43f3dc2fc3f7f89d6e09e384b8c514b31dd01293f5ce228686f056e5b48f5b56f33206a815e9a5522d5018f2972dee8635eba9f2089ff6c01cd4279ffe22f4adab20fa9898225211ae6da8da9084f73a93b9db27ef9da9b4eda3d986a3350927cfb2e07", @ANYRES8=r2, @ANYBLOB="b334af1b87bcac8fc51c152a8f262eab1c8d25d4c20c0a601a7905d2985f", @ANYRES8=r2, @ANYBLOB='\x00'/20, @ANYRESHEX=r1], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000000), 0x80, r8, 0x0, 0x7}, 0x38) sendfile(r7, r7, 0x0, 0x1002000ff) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}, 0x2, 0x2}, &(0x7f0000000200)=0x88) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_fuse_handle_req(r0, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0xfffffffffffffffe, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0xb, 0x1c3, 0x0, 0x0, 0x40, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.81877505s ago: executing program 4 (id=5048): mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x50}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x10001}}) syz_usb_connect(0x3, 0x36, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="01265f"], 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000041000010025bd7000f9dbdf3500000000", @ANYRES32=0x0, @ANYBLOB="158804000301050008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) getsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f00000002c0)={@local, @loopback, @multicast1}, &(0x7f0000000380)=0xc) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x0, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 5.310419369s ago: executing program 3 (id=5039): r0 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4ad9, &(0x7f0000000300)={0x0, 0x9731, 0x4000, 0x3, 0x145}, &(0x7f00000003c0), 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_procfs(0x0, &(0x7f0000000180)='cgroup\x00') socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8921, &(0x7f0000000140)={'team0\x00', @ifru_data=&(0x7f0000000100)="8df07150d7bfb0c1c7a28298b528881afb16f4baea5aae3f7abe066a278d52d0"}) r5 = io_uring_setup(0x3c46, &(0x7f0000000880)={0x0, 0xeb7f, 0x3000, 0x2, 0x26c}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) 4.811512841s ago: executing program 1 (id=5040): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020100090e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa"], 0x70}}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xaa}}}}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={'ipvlan0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}}) socket$kcm(0x29, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0xa4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001840)=@newtfilter={0x14c4, 0x2c, 0x10, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0x1, 0xe}, {0xa, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xffff}}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x4}}, @filter_kind_options=@f_fw={{0x7}, {0x145c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1_to_team\x00'}, @TCA_FW_ACT={0x1218, 0x4, [@m_mpls={0x1038, 0x1e, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x7}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x9c, 0x8, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0x66, 0x6, "456b9e5f0c91b84b83e14e43b2412dfc0db85aba1ab029d04cf17213001ad9a77047ead1a9b20687c6acfceb1447af4a1161ec942b706cc8f5feff6f124294eabdaae47ec9266e5413a78a6bd5883d50d665ac4b82686bb1b46fd3e185383389d622"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0x140, 0xd, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xfffffe00, 0x2, 0x9, 0x9}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xffe00000, 0x0, 0x8, 0xf64d}, 0x7f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x7ff, 0x10000000, 0x2, 0x2}, 0x3e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x31, 0x2, 0x1, 0x1}, 0x44}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x4, 0x0, 0x3de, 0x7}, 0x2f}}]}, {0x86, 0x6, "da07fd46cb566cf3ad47b2ecfc3a0a5f27dd825b4930baae4768ca2bf3c0b1749e0aa5355a8d20e28997dc4915c9673a54fc7da609bbaa31c3cf34059a68d98c024885a4b98e9b8450832a8014e981dc662c63196076d72b76bec3fbf380bde2ed6480409018498e82d5fb1f84b53f774cded2f195d261c1a09291f02379ec8b8ea6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FW_ACT={0x22c, 0x4, [@m_nat={0x104, 0x1a, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0x6, 0x20000000, 0x8, 0x4}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0xfffff2fc, 0x0, 0x9, 0x9}, @multicast1, @multicast2, 0xff, 0x1}}]}, {0x8b, 0x6, "f9527aab0802cd9c250b57509af1837522d82bf5323a74def94878219af6b97c09d73144752c07ba82915d38546c90e99da567dca84efd2b09bded348cb45b2cf7df72e9fdceade87f9b364b390de8519400ad4d032040c1b94bc3df442205728854ed761c4e4b0deb3c94873fcedaab954dc92dd52c0ed357d4e6e3364fe04a1ad3a10bc27999"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ct={0x68, 0x9, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x1ff}]}, {0x2d, 0x6, "d43adc0ffa1d82d2708cb7c8de43f324b701f927fd3bc1717e8ce40277df9bad52bec244813ff9275e"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0xbc, 0x7, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x81, 0x2, 0x8, 0x2}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7fff, 0x2, 0x0, 0x81}, 0x3, r7}}]}, {0x4d, 0x6, "750c4932b3cdb77d6e773ceaa1d1f63d009334c26de411142fdf425ebef419963fb4af55a084ef5fbe938b6a4c60f828f2f4baacdb9b151ab22791faebfeb0b00d5f49f2ae551bc5a5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x6f8}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x14c4}}, 0x24044092) r8 = openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) fcntl$setlease(r8, 0x400, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_freezer_state(r9, &(0x7f00000002c0), 0x2, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000240)='lp', 0x2) connect$inet(r11, 0x0, 0x0) sendfile(r10, r10, 0x0, 0x8000002) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) 4.773999638s ago: executing program 6 (id=5041): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000400)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "954a5b", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x14}, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x5, 0x3, 0x0, 0x0, 0x1, 0xc}, 0x2, {0x4, 0x45, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000200)=@arm64={0x10, 0xe4, 0xf2}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f00000002c0)={0xbc, 0x0, 0x2}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x80000006}]}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$vmci(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x4c, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2d2ff7b8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000000340)='./file0\x00') sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001040)={0x14, 0x3, 0x1, 0xda2e794dc4f1d9f5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c1}, 0x800) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) r8 = pidfd_getfd(r7, r7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) setns(r8, 0x10000000) sendto$inet6(r4, &(0x7f0000000380)="e5", 0x1, 0x20000894, &(0x7f0000001380)={0xa, 0x4e22, 0xfffffffe, @mcast2}, 0x1c) 4.484852365s ago: executing program 1 (id=5042): add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000040)={0x101ff, 0x4, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x21, 0x28011, r1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@broadcast, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x7c}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0xe4) signalfd(r1, &(0x7f0000000080)={[0xab]}, 0x8) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000000)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0xf9, 0x5}) preadv(r4, &(0x7f0000000480)=[{&(0x7f0000000300)=""/2, 0x2}], 0x1, 0x1, 0x9) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) sendmsg$key(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="00007fdbdf25"], 0x10}}, 0x4) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0d, &(0x7f0000000040)) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0301ffe402"], 0x1e) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000380)=0x4) setsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x83, &(0x7f00000002c0)={0x0, 0x2}, 0x8) 4.017009138s ago: executing program 3 (id=5043): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8000002) 3.910664531s ago: executing program 3 (id=5045): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000400)={0x0, 0x3, 0x80, 0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x2ff, 0x0, 0x7ee69d08}]}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a", 0x10) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x80000003) r4 = dup2(r2, r2) read$FUSE(r4, &(0x7f00000063c0)={0x2020}, 0x2020) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r8, &(0x7f0000000380)=""/28, 0x1c) getdents64(r8, 0xfffffffffffffffe, 0x29) 3.903060213s ago: executing program 7 (id=5046): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x4, 0x8, 0x8001, 0x0, 0x9, 0x40000, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000180)={0x80000001, "0600000000000000c64c3b6e6ff82a75e5310f014288c2ffbdbec772020acd2c", 0xffffffffffffffff}) dup3(r4, r3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendto$inet(r6, &(0x7f0000001ec0)="a2123fbbeb2facea9b49ad541c0fb431f1a4e22f3622fa6b258448f248fa363e4b72aebd8798fd4abe2260d9399163c8eeb56b28f49a6fa4160b012645eb92ad", 0x40, 0x90, 0x0, 0x0) recvmsg(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000005c0)=""/15, 0xf}, {&(0x7f0000000a40)=""/69, 0x45}], 0x2}, 0x101) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000740)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@gettaction={0x54, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x25, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000240)={0x3, 0x80000, 0x4}) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000280)={0x3, r10, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) r11 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2082) ioctl$IOC_PR_REGISTER(r11, 0x401870c8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000e7ffffffce"], 0x0}, 0x94) 3.701337109s ago: executing program 6 (id=5047): socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) socket$packet(0x11, 0x2, 0x300) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffff"], 0x30}}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/warn_count', 0x48000, 0x0) read$watch_queue(r5, &(0x7f00000002c0)=""/37, 0x25) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="305c061ce1821f7051667557c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e64174d46de00a5a09fa80393d502b0cd490635d54cdf5bd046cc030000000000005e000000808ce41d86b9b949004fd8fe45b91e8fe7ec7c49750a1b0ade", 0x5e, 0xfffffffffffffffe) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5e687a8a12003c00020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0", 0x35) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003300, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) r7 = getpgid(0x0) syz_pidfd_open(r7, 0x0) wait4(r7, &(0x7f0000000100), 0x8, &(0x7f0000000140)) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) 2.703655103s ago: executing program 4 (id=5049): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000380), 0x0, 0x0) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000040)=0x20) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_IOC_READY(r4, 0x541b, 0x20000000) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$SOUND_MIXER_READ_DEVMASK(r6, 0x80044dfe, &(0x7f0000000180)) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x328}, 0x1, 0x0, 0x0, 0x4040010}, 0x400c010) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcda) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) 2.010085026s ago: executing program 3 (id=5050): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x40008001, 0x0, 0x1, 0x1000, 0x106, 0xfa11, 0x65}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x2, 0x0, 0x1}, 0xfd}, 0x18) r4 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x44001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_procfs(0x0, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x8) sendmsg(r6, &(0x7f0000000340)={0x0, 0x5f, 0x0, 0x5e, 0x0, 0x0, 0x2c}, 0x48d5) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/155, 0x9b}, {&(0x7f0000000600)=""/243, 0xf3}, {&(0x7f0000000700)=""/4096, 0x1000}, {0x0}], 0x5}, 0x0) syz_open_dev$loop(&(0x7f00000002c0), 0x9d, 0x10d502) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') lseek(r7, 0x1000000, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') read$FUSE(r7, &(0x7f0000003740)={0x2020}, 0xfffffffffffffe30) openat$6lowpan_enable(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) pread64(r0, &(0x7f0000000100)=""/253, 0xfffffd58, 0x8) setns(r8, 0x80) 2.008545568s ago: executing program 6 (id=5060): mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x50}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x10001}}) syz_usb_connect(0x3, 0x36, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="01265f"], 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000041000010025bd7000f9dbdf3500000000", @ANYRES32=0x0, @ANYBLOB="158804000301050008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) setitimer(0x2, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x0, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 2.007079582s ago: executing program 7 (id=5051): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000440)=""/200, 0x200000, 0x1000, 0x0, 0x3}, 0x20) r1 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400de2ec26079d2ac7d285df88a94e807f6e2881ab01100000000", @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d3000000000000008001680040001800500110006000000"], 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x2900, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000006800090100000000fdffffff020003000000000008001000a92376e52a4cdfd6eb7bb75800a8daee2d956622309b3d7a998c2c611812e6a083749a8b88ffff226eebc9a105caf975b6360330d5d20c16ac3ad14534839b5f48a3b93eaf8afdabd087885c8c37e9c1ad823aac64f95e4bbd6f7079d71af2d3b1df04f5e44d16277a5ced7cba098f4cb6060767b88ceb5b914ce9055ee5adf84f621b5624b4712918036d26a530053c2d53c11430a3db62adb341e75fd073", @ANYRES32=0x0, @ANYBLOB="0800010000000000"], 0x28}}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x6, "8cc33ee3"}, @main=@item_4={0x3, 0x0, 0xa, "582a6eb3"}]}}, 0x0}, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000300)={0x0, 0x2, "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"}) ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, &(0x7f0000000780)={0x1, 0x1}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) 1.997109265s ago: executing program 1 (id=5061): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000400)={0x0, 0x3, 0x80, 0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x2ff, 0x0, 0x7ee69d08}]}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a", 0x10) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x80000003) r4 = dup2(r2, r2) read$FUSE(r4, &(0x7f00000063c0)={0x2020}, 0x2020) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r8, &(0x7f0000000380)=""/28, 0x1c) getdents64(r8, 0xfffffffffffffffe, 0x29) 1.366584726s ago: executing program 4 (id=5052): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4a42, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000019580)=ANY=[@ANYRESOCT=r5, @ANYBLOB="6db4401effcf07ed52b7ca506d4006787f4bbae89dbaf1e73316eeade4a769f207ec94555ee1d07903a2b2fc092276bcbf95c0d39a390c4be991f01d08ccde69f19f6ae9cd4b1a603f44305495f344939c46c7f8fa819d8ce46ae6c7f356d99944f3549d5d9a0f9b2a5e94b6526beecfaccc5cedc11fd60e91efdabe8caeb8c30dd1053a9dcf80082a1a89c595ecdaf43f3dc2fc3f7f89d6e09e384b8c514b31dd01293f5ce228686f056e5b48f5b56f33206a815e9a5522d5018f2972dee8635eba9f2089ff6c01cd4279ffe22f4adab20fa9898225211ae6da8da9084f73a93b9db27ef9da9b4eda3d986a3350927cfb2e07", @ANYRES8=r2, @ANYBLOB="b334af1b87bcac8fc51c152a8f262eab1c8d25d4c20c0a601a7905d2985f", @ANYRES8=r2, @ANYBLOB='\x00'/20, @ANYRESHEX=r1], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000000), 0x80, r8, 0x0, 0x7}, 0x38) sendfile(r7, r7, 0x0, 0x1002000ff) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}, 0x2, 0x2}, &(0x7f0000000200)=0x88) syz_fuse_handle_req(r4, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdbdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11e85e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f60200ca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f0100000000000000fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9dd56d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92d074a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a4043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6b00005b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e11567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a87e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c4f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2b357f46632d30c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea64f3d60a67dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_fuse_handle_req(r0, &(0x7f0000009b40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ac1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fec345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e59b6aaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0xfffffffffffffffe, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0xb, 0x1c3, 0x0, 0x0, 0x40, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.16197052s ago: executing program 7 (id=5053): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close(r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="070000000000002000000000000000000000003fd6321abf2f00787f38bc9bd0f02f", @ANYBLOB], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0908000000000055090100c60000009500000000000000b7020000001200007b2af0ff00000000d609080008200000db9af0ff411b0000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000001502010076000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000140)=ANY=[], 0x0}, 0x94) msgget$private(0x0, 0x100) socket(0x10, 0x3, 0x7fffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[], 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x4, @empty}, 0x1c) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$kcm(0x1e, 0x5, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x3, @random="706ffc8f40e3", 'pimreg\x00'}}, 0x1e) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab58baeda525e1a8deffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000000c0)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r8}) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r9 = landlock_create_ruleset(&(0x7f00000001c0)={0xe020, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r9, 0x0) 413.811932ms ago: executing program 4 (id=5054): r0 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000"], 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4ad9, &(0x7f0000000300)={0x0, 0x9731, 0x4000, 0x3, 0x145}, &(0x7f00000003c0), 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_procfs(0x0, &(0x7f0000000180)='cgroup\x00') socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8921, &(0x7f0000000140)={'team0\x00', @ifru_data=&(0x7f0000000100)="8df07150d7bfb0c1c7a28298b528881afb16f4baea5aae3f7abe066a278d52d0"}) r5 = io_uring_setup(0x3c46, &(0x7f0000000880)={0x0, 0xeb7f, 0x3000, 0x2, 0x26c}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], &(0x7f0000000080)=[0x3fffffffffff], 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000240)=0xd) 405.698943ms ago: executing program 6 (id=5055): fsopen(&(0x7f0000000200)='9p\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x50, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8}]}}}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="9a", 0x1, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) socket$igmp(0x2, 0x3, 0x2) unshare(0x22020600) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f00000002c0)=0x1a, 0x4) 0s ago: executing program 3 (id=5056): syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r0, r1, 0x44, 0x10000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f00000017c0)=[{{&(0x7f0000001a00)={0xa, 0x4e23, 0x7, @private2, 0x8000004}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000280)="03", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}], 0x2, 0x4008005) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x2, @loopback}}}, 0x84) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8) socket$alg(0x26, 0x5, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x4) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) openat$nullb(0xffffff9c, &(0x7f00000003c0), 0x8000, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000000)=ANY=[]) ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, &(0x7f00000002c0)) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x120) fcntl$setlease(r7, 0x400, 0x1) fcntl$getown(r7, 0x9) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, r5, {0x2, 0xb}}, './file0\x00'}) write$proc_mixer(r5, &(0x7f0000000380)=ANY=[@ANYBLOB='OGAIN \'Capture Volume\' '], 0x4000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r9, @ANYBLOB="05f300000000000000002000000004000380"], 0x18}}, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000080)=0x3a0af83a) shutdown(r8, 0x0) r11 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$PTP_SYS_OFFSET(r11, 0x43403d05, &(0x7f0000000040)={0xb}) kernel console output (not intermixed with test programs): syz.7.4576'. [ 2604.020452][T27319] pim6reg1: entered promiscuous mode [ 2604.036959][T27319] pim6reg1: entered allmulticast mode [ 2604.403241][T27326] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4577'. [ 2604.445825][T27326] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4577'. [ 2604.599165][T27328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2604.628896][T27328] 8021q: adding VLAN 0 to HW filter on device team0 [ 2604.650530][T27328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2604.742659][T27328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2604.768396][T27328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2604.791369][T27328] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2604.850971][T12406] bridge0: port 1(bridge_slave_0) entered blocking state [ 2604.858134][T12406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2604.890965][T12406] bridge0: port 2(bridge_slave_1) entered blocking state [ 2604.898099][T12406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2605.204138][T27333] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2605.644367][T24456] usb 7-1: new full-speed USB device number 90 using dummy_hcd [ 2605.816775][T24456] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 2605.828152][T24456] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2605.837573][T24456] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2605.849394][T24456] usb 7-1: config 0 descriptor?? [ 2605.856017][T27338] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 2606.119383][T24456] ath6kl: Failed to submit usb control message: -71 [ 2606.131814][T24456] ath6kl: unable to send the bmi data to the device: -71 [ 2606.139527][T24456] ath6kl: Unable to send get target info: -71 [ 2606.156630][T24456] ath6kl: Failed to init ath6kl core: -71 [ 2606.163820][T24456] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2606.179216][T24456] usb 7-1: USB disconnect, device number 90 [ 2606.196388][T27350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4584'. [ 2607.028437][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 2607.028454][ T30] audit: type=1326 audit(1783177003.568:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27356 comm="syz.3.4586" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2607.079499][ T30] audit: type=1326 audit(1783177003.598:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27356 comm="syz.3.4586" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2607.114562][T24456] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 2607.128708][ T30] audit: type=1326 audit(1783177003.598:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27356 comm="syz.3.4586" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2607.156350][ T30] audit: type=1326 audit(1783177003.598:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27356 comm="syz.3.4586" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2607.181755][ T30] audit: type=1326 audit(1783177003.598:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27356 comm="syz.3.4586" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2607.208560][ T30] audit: type=1326 audit(1783177003.598:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27356 comm="syz.3.4586" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2607.236072][ T30] audit: type=1326 audit(1783177003.598:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27356 comm="syz.3.4586" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2607.261239][ T30] audit: type=1326 audit(1783177003.598:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27356 comm="syz.3.4586" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2607.289282][ T30] audit: type=1326 audit(1783177003.598:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27356 comm="syz.3.4586" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2607.313972][T24456] usb 7-1: Using ep0 maxpacket: 32 [ 2607.321942][T24456] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 2607.334850][T24456] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2607.362650][ T30] audit: type=1326 audit(1783177003.598:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27356 comm="syz.3.4586" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2607.394541][T24456] usb 7-1: config 0 descriptor?? [ 2607.407055][T24456] gspca_main: sq930x-2.14.0 probing 041e:403c [ 2607.638887][T24456] gspca_sq930x: reg_r 001f failed -32 [ 2607.651878][T24456] sq930x 7-1:0.0: probe with driver sq930x failed with error -32 [ 2609.003466][T27379] tipc: Enabled bearer , priority 10 [ 2609.799200][T24456] usb 7-1: USB disconnect, device number 91 [ 2609.954804][T27381] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2611.144541][T24456] usb 7-1: new full-speed USB device number 92 using dummy_hcd [ 2611.306063][T24456] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 2611.348745][T24456] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2611.390737][T24456] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2611.438052][T24456] usb 7-1: config 0 descriptor?? [ 2611.452352][T27395] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 2611.551899][T27399] fuse: Bad value for 'fd' [ 2611.779754][T24456] ath6kl: Failed to submit usb control message: -71 [ 2611.791456][T24456] ath6kl: unable to send the bmi data to the device: -71 [ 2611.800449][T24456] ath6kl: Unable to send get target info: -71 [ 2611.816482][T24456] ath6kl: Failed to init ath6kl core: -71 [ 2611.862882][T24456] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2611.888652][T27403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4598'. [ 2611.903078][T24456] usb 7-1: USB disconnect, device number 92 [ 2611.987620][T27403] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2072421113 (4144842226 ns) > initial count (1961237654 ns). Using initial count to start timer. [ 2612.316920][T27413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2612.331984][T27413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2612.890449][T27423] netlink: 192 bytes leftover after parsing attributes in process `syz.6.4602'. [ 2612.934852][T27422] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2072421113 (4144842226 ns) > initial count (1961237654 ns). Using initial count to start timer. [ 2613.164563][T27422] macsec0: Caught tx_queue_len zero misconfig [ 2613.231457][T27428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4599'. [ 2614.252606][T27444] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2614.544336][T24456] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2614.714478][T24456] usb 2-1: Using ep0 maxpacket: 8 [ 2614.722352][T24456] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2614.731745][T24456] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2614.746839][T24456] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2614.757390][T24456] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2614.771869][T24456] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2614.791216][T24456] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2614.801473][T24456] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2615.070210][T24456] usb 2-1: GET_CAPABILITIES returned 0 [ 2615.117987][T24456] usbtmc 2-1:16.0: can't read capabilities [ 2615.349533][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2615.358716][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2615.367780][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2615.376837][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2615.400187][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2615.410201][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2615.419299][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2615.428377][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2615.437465][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2615.503625][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2615.512804][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2615.521869][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2615.530914][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2615.539972][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2615.549054][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2615.630913][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2615.833054][T24456] usb 2-1: USB disconnect, device number 27 [ 2616.117846][T27457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2616.153577][T27456] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4609'. [ 2616.163077][T27457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2616.766824][T27468] fuse: Bad value for 'fd' [ 2616.833578][T27470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2616.898294][T27470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2617.199088][T27476] fuse: Bad value for 'fd' [ 2617.734392][T13774] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2617.793592][T27489] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 2617.886711][T13774] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2617.895055][T13774] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2617.909766][T13774] usb 2-1: config 0 has no interface number 0 [ 2617.916866][T13774] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2617.930989][T13774] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2617.941103][T13774] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2617.957834][T13774] usb 2-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 2617.988824][T13774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2618.023904][T13774] usb 2-1: config 0 descriptor?? [ 2618.272340][T27480] binder_alloc: 27479: binder_alloc_buf, no vma [ 2618.357048][T27498] netlink: 'syz.4.4620': attribute type 1 has an invalid length. [ 2618.366655][T27498] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 11806 out of range (51000000..2150000000) [ 2618.508283][T13774] hid_parser_main: 470 callbacks suppressed [ 2618.508299][T13774] holtek_mouse 0003:04D9:A04A.006A: unknown main item tag 0x0 [ 2618.564987][T13774] holtek_mouse 0003:04D9:A04A.006A: unknown main item tag 0x0 [ 2618.584896][T13774] holtek_mouse 0003:04D9:A04A.006A: unknown main item tag 0x0 [ 2618.592454][T13774] holtek_mouse 0003:04D9:A04A.006A: unknown main item tag 0x0 [ 2618.601805][T13774] holtek_mouse 0003:04D9:A04A.006A: unknown main item tag 0x0 [ 2618.612223][T13774] holtek_mouse 0003:04D9:A04A.006A: unknown main item tag 0x0 [ 2618.622716][T13774] holtek_mouse 0003:04D9:A04A.006A: unknown main item tag 0x0 [ 2618.630419][T13774] holtek_mouse 0003:04D9:A04A.006A: collection stack underflow [ 2618.653478][T13774] holtek_mouse 0003:04D9:A04A.006A: item 0 0 0 12 parsing failed [ 2618.663500][T13774] holtek_mouse 0003:04D9:A04A.006A: hid parse failed: -22 [ 2618.671820][T13774] holtek_mouse 0003:04D9:A04A.006A: probe with driver holtek_mouse failed with error -22 [ 2618.711081][T13774] usb 2-1: USB disconnect, device number 28 [ 2618.773352][T27501] syzkaller0: entered promiscuous mode [ 2618.788251][T27501] syzkaller0: entered allmulticast mode [ 2618.992572][T27506] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 2619.018197][T27506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2619.031385][T27506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2619.262052][T27510] netlink: 'syz.1.4624': attribute type 6 has an invalid length. [ 2619.274669][T13774] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 2619.327948][T27511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4624'. [ 2619.434608][T13774] usb 7-1: Using ep0 maxpacket: 8 [ 2619.441314][T13774] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2619.451877][T13774] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2619.463598][T13774] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2619.476971][T13774] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 2619.486477][T13774] usb 7-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 2619.494805][T13774] usb 7-1: Product: syz [ 2619.499181][T13774] usb 7-1: Manufacturer: syz [ 2619.503808][T13774] usb 7-1: SerialNumber: syz [ 2619.513420][T13774] usb 7-1: config 0 descriptor?? [ 2619.574382][T13774] rc_core: IR keymap rc-imon-rsc not found [ 2619.580366][T13774] Registered IR keymap rc-empty [ 2619.590073][T13774] rc rc0: iMON Station as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 2619.603867][T13774] input: iMON Station as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input184 [ 2620.252032][T27524] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2620.293373][T27524] qrtr: Invalid version 0 [ 2620.554346][T13774] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2620.715777][T13774] usb 2-1: Using ep0 maxpacket: 32 [ 2620.735053][T13774] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2620.769572][T13774] usb 2-1: config 1 interface 1 altsetting 1 has an invalid endpoint descriptor of length 4, skipping [ 2620.837396][T13774] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 2620.873079][T13774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2620.981025][T13774] usb 2-1: Product: syz [ 2621.019689][T13774] usb 2-1: Manufacturer: syz [ 2621.040833][T13774] usb 2-1: SerialNumber: syz [ 2621.154836][T27531] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4627'. [ 2621.173695][T27531] openvswitch: netlink: Flow actions attr not present in new flow. [ 2621.296797][T27531] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2621.705110][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 2622.013391][T24456] usb 7-1: USB disconnect, device number 93 [ 2622.399715][T13774] snd-ua101 2-1:1.1: invalid bNumEndpoints [ 2622.433586][T13774] snd-ua101 2-1:1.0: invalid num_altsetting [ 2622.492542][T13774] usb 2-1: USB disconnect, device number 29 [ 2622.846311][T27541] input: syz1 as /devices/virtual/input/input185 [ 2622.898403][T27546] fuse: Unknown parameter 'fdv{ST[t' [ 2622.993386][T27547] netlink: 'syz.7.4630': attribute type 10 has an invalid length. [ 2623.054616][T27548] netlink: 'syz.7.4630': attribute type 10 has an invalid length. [ 2623.412216][T24456] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2623.576743][T24456] usb 2-1: Using ep0 maxpacket: 32 [ 2623.594957][T24456] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2623.605096][T24456] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2623.629628][T24456] usb 2-1: config 0 descriptor?? [ 2623.649929][T24456] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2623.832515][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 2623.832529][ T30] audit: type=1326 audit(1783177020.368:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27552 comm="syz.3.4632" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x0 [ 2623.961252][ T30] audit: type=1326 audit(1783177020.498:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27552 comm="syz.3.4632" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa90ec code=0x0 [ 2625.054164][T24456] gspca_vc032x: reg_w err -110 [ 2625.069361][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2625.075690][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2625.092887][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2625.098862][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2625.104662][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2625.124927][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2625.130533][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2625.136148][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2625.152778][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2625.168581][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2625.173927][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2625.189513][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2625.195262][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2625.200698][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2625.217379][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2625.222785][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2625.239195][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2625.244702][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2625.260500][T24456] gspca_vc032x: Unknown sensor... [ 2625.265977][T24456] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 2626.091608][T13774] usb 2-1: USB disconnect, device number 30 [ 2626.278925][T27547] team0: Port device dummy0 added [ 2626.294692][T27548] team0: Port device dummy0 removed [ 2626.329779][T27548] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2626.476755][T27565] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 2626.483487][T27565] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2626.518333][T27565] vhci_hcd vhci_hcd.0: Device attached [ 2626.609403][T27565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4634'. [ 2626.676280][T27565] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 2626.712716][T27578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4646'. [ 2626.733976][T27578] fuse: Unknown parameter 'grou00000000000000000000' [ 2626.741516][T27565] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 2626.761849][T24456] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 2626.787774][T27578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4646'. [ 2627.067744][T27585] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4636'. [ 2627.083418][T27585] tipc: Resetting bearer [ 2627.193074][T27567] vhci_hcd: connection reset by peer [ 2627.227260][ T12] vhci_hcd vhci_hcd.4: stop threads [ 2627.245860][ T12] vhci_hcd vhci_hcd.4: release socket [ 2627.269447][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 2627.372092][T27585] tipc: Disabling bearer [ 2628.501539][T27597] fuse: Bad value for 'fd' [ 2629.618681][T27617] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2630.599210][T27628] netlink: 'syz.1.4651': attribute type 1 has an invalid length. [ 2630.651078][T27628] bond7: (slave veth9): Enslaving as an active interface with a down link [ 2630.675808][T27628] netlink: 'syz.1.4651': attribute type 10 has an invalid length. [ 2630.688441][T27628] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4651'. [ 2630.698023][T27628] dummy0: entered promiscuous mode [ 2630.703188][T27628] dummy0: left allmulticast mode [ 2630.744596][T14119] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 2630.910574][T14119] usb 7-1: Using ep0 maxpacket: 32 [ 2630.919803][T14119] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2630.931292][T14119] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2630.943105][T27633] tipc: Enabling of bearer rejected, already enabled [ 2630.947318][T14119] usb 7-1: config 0 descriptor?? [ 2630.960193][T14119] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2630.978599][T27633] 2: renamed from team_slave_1 (while UP) [ 2631.854360][T24456] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 2632.081420][T27639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4654'. [ 2632.091413][T27639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4654'. [ 2632.274735][T14119] gspca_vc032x: reg_w err -110 [ 2632.280318][T14119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2632.287302][T14119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2632.293474][T14119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2632.300474][T14119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2632.309514][T14119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2632.315833][T14119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2632.322492][T14119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2632.328358][T14119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2632.334304][T14119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2632.339732][T14119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2632.346530][T14119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2632.353360][T14119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2632.360785][T14119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2632.366466][T14119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2632.373903][T14119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2632.382350][T14119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2632.396139][T14119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2632.403421][T14119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2632.409015][T14119] gspca_vc032x: Unknown sensor... [ 2632.415540][T14119] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 2632.494533][T13789] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2632.656809][T13789] usb 2-1: config 4 has an invalid interface number: 100 but max is 0 [ 2632.672617][T13789] usb 2-1: config 4 has no interface number 0 [ 2632.684404][T13789] usb 2-1: config 4 interface 100 has no altsetting 0 [ 2632.696492][T13789] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=2d.5b [ 2632.706482][T13789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2632.714812][T13789] usb 2-1: Product: syz [ 2632.722074][T13789] usb 2-1: Manufacturer: syz [ 2632.727071][T13789] usb 2-1: SerialNumber: syz [ 2633.208060][T24456] usb 7-1: USB disconnect, device number 94 [ 2633.228137][T27654] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 2633.234718][T27654] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2633.271164][T27654] vhci_hcd vhci_hcd.0: Device attached [ 2633.339446][T27659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4658'. [ 2633.368067][T27659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4658'. [ 2633.625896][T27655] vhci_hcd: connection closed [ 2633.627373][T12406] vhci_hcd vhci_hcd.3: stop threads [ 2633.645707][T12406] vhci_hcd vhci_hcd.3: release socket [ 2633.657945][T12406] vhci_hcd vhci_hcd.3: disconnect device [ 2633.956452][T27666] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2634.691042][T27673] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4662'. [ 2635.571248][T13789] hub 2-1:4.100: bad descriptor, ignoring hub [ 2635.630852][T13789] hub 2-1:4.100: probe with driver hub failed with error -5 [ 2635.698491][T13789] ftdi_sio 2-1:4.100: FTDI USB Serial Device converter detected [ 2635.800422][T13789] ftdi_sio ttyUSB0: unknown device type: 0x2d5b [ 2635.830587][T27683] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2635.896837][T13789] usb 2-1: USB disconnect, device number 31 [ 2635.951238][T13789] ftdi_sio 2-1:4.100: device disconnected [ 2636.458932][T27689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2636.489534][T27689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2636.544577][T13774] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 2636.626302][T27694] fuse: Bad value for 'fd' [ 2636.728180][T13774] usb 7-1: Using ep0 maxpacket: 32 [ 2636.760990][T13774] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2636.796100][T13774] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2636.822837][T13774] usb 7-1: config 0 descriptor?? [ 2636.832398][T13774] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2638.174492][T13774] gspca_vc032x: reg_w err -110 [ 2638.182977][T13774] gspca_vc032x: I2c Bus Busy Wait 00 [ 2638.194921][T13774] gspca_vc032x: I2c Bus Busy Wait 00 [ 2638.207658][T13774] gspca_vc032x: I2c Bus Busy Wait 00 [ 2638.227406][T13774] gspca_vc032x: I2c Bus Busy Wait 00 [ 2638.249447][T13774] gspca_vc032x: I2c Bus Busy Wait 00 [ 2638.270729][T13774] gspca_vc032x: I2c Bus Busy Wait 00 [ 2638.287354][T13774] gspca_vc032x: I2c Bus Busy Wait 00 [ 2638.293398][T13774] gspca_vc032x: I2c Bus Busy Wait 00 [ 2638.299590][T13774] gspca_vc032x: I2c Bus Busy Wait 00 [ 2638.305801][T13774] gspca_vc032x: I2c Bus Busy Wait 00 [ 2638.311829][T13774] gspca_vc032x: I2c Bus Busy Wait 00 [ 2638.322022][T13774] gspca_vc032x: I2c Bus Busy Wait 00 [ 2638.336551][T13774] gspca_vc032x: I2c Bus Busy Wait 00 [ 2638.359820][T13774] gspca_vc032x: I2c Bus Busy Wait 00 [ 2638.390618][T13774] gspca_vc032x: I2c Bus Busy Wait 00 [ 2638.422342][T13774] gspca_vc032x: I2c Bus Busy Wait 00 [ 2638.451065][T13774] gspca_vc032x: I2c Bus Busy Wait 00 [ 2638.475951][T13774] gspca_vc032x: I2c Bus Busy Wait 00 [ 2638.501218][T13774] gspca_vc032x: Unknown sensor... [ 2638.526832][T13774] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 2639.074076][T10369] usb 7-1: USB disconnect, device number 95 [ 2639.284766][T13774] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2639.444305][T13774] usb 2-1: Using ep0 maxpacket: 32 [ 2639.456310][T13774] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 2639.476376][T13774] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2639.501745][T13774] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2639.525646][T13774] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2639.549105][T13774] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2639.572337][T13774] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2639.596611][T13774] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2639.642243][T13774] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2639.660725][T27729] ALSA: mixer_oss: invalid OSS volume '' [ 2639.692912][T13774] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2639.734175][T13774] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 2639.787287][T13774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2639.821664][T13774] usb 2-1: Product: syz [ 2639.839078][T13774] usb 2-1: Manufacturer: syz [ 2639.859447][T13774] usb 2-1: SerialNumber: syz [ 2639.881421][T13774] usb 2-1: config 0 descriptor?? [ 2639.903996][T13774] etas_es58x 2-1:0.0: Starting syz syz (Serial Number syz) [ 2640.175140][T13774] usb 2-1: USB disconnect, device number 32 [ 2640.895610][T27746] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4681'. [ 2640.924076][T27744] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2641.056086][T27748] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 2641.065884][T27748] PKCS7: Only support pkcs7_signedData type [ 2641.231045][T27751] fuse: Bad value for 'fd' [ 2641.725785][T27756] fuse: Bad value for 'fd' [ 2642.034527][T13789] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 2642.194306][T13789] usb 7-1: Using ep0 maxpacket: 32 [ 2642.208298][T13789] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2642.226360][T13789] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2642.251542][T13789] usb 7-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 2642.295124][T13789] usb 7-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2642.329424][T13789] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2642.360263][T27769] input: syz1 as /devices/virtual/input/input188 [ 2642.371793][T13789] usb 7-1: config 1 interface 1 has no altsetting 0 [ 2642.400887][T13789] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 2642.423214][T13789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2642.477356][T13789] usb 7-1: Product: syz [ 2642.520837][T13789] usb 7-1: Manufacturer: syz [ 2642.564384][T13789] usb 7-1: SerialNumber: syz [ 2642.714278][T10369] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2642.813850][T13789] usb 7-1: selecting invalid altsetting 0 [ 2642.868262][T10369] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 2642.892982][T10369] usb 2-1: config 1 has no interface number 0 [ 2642.947396][T10369] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1023 [ 2642.980611][T10369] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1023 [ 2642.997044][T10369] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2643.013195][T10369] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 2643.025436][T10369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2643.033985][T10369] usb 2-1: Product: syz [ 2643.038658][T10369] usb 2-1: Manufacturer: syz [ 2643.043875][T10369] usb 2-1: SerialNumber: syz [ 2643.080268][T27772] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2643.114540][T27772] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2643.168622][T10369] usb 2-1: Error in usbnet_get_endpoints (-22) [ 2645.170384][T10369] usb 2-1: USB disconnect, device number 33 [ 2645.693540][T27794] program syz.7.4692 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2646.066603][T27786] input: syz1 as /devices/virtual/input/input189 [ 2646.666489][T13789] usb 7-1: 1:1: cannot get freq (v2/v3): err -71 [ 2646.875172][T13789] usb 7-1: USB disconnect, device number 96 [ 2647.340354][T27822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2647.361924][T27819] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2647.378541][T27822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2647.479776][T27827] fuse: Bad value for 'fd' [ 2647.677677][T27834] fuse: Bad value for 'fd' [ 2648.712589][T27843] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4701'. [ 2648.752792][T27841] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4700'. [ 2648.783332][T27843] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4701'. [ 2649.244841][T10369] usb 7-1: new full-speed USB device number 97 using dummy_hcd [ 2649.284571][T24456] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2649.397913][T27843] tap0: tun_chr_ioctl cmd 1074025677 [ 2649.413022][T27843] tap0: linktype set to 768 [ 2649.419270][T10369] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 2649.438830][T10369] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2649.454491][T24456] usb 2-1: Using ep0 maxpacket: 32 [ 2649.462256][T10369] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2649.473018][T24456] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2649.486481][T24456] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2649.496158][T10369] usb 7-1: config 0 descriptor?? [ 2649.503975][T27848] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 2649.531582][T24456] usb 2-1: config 0 descriptor?? [ 2649.550262][T24456] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2649.835741][T10369] ath6kl: Failed to submit usb control message: -71 [ 2649.856159][T10369] ath6kl: unable to send the bmi data to the device: -71 [ 2649.871199][T10369] ath6kl: Unable to send get target info: -71 [ 2649.909821][T10369] ath6kl: Failed to init ath6kl core: -71 [ 2649.918246][T10369] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2649.945476][T10369] usb 7-1: USB disconnect, device number 97 [ 2650.201849][T27864] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.4707'. [ 2650.216847][T27864] openvswitch: netlink: Message has 512 unknown bytes. [ 2650.659152][T27869] binder: 27866:27869 ioctl c0306201 800003c0 returned -22 [ 2650.885255][T24456] gspca_vc032x: reg_w err -110 [ 2650.902959][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2650.946987][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2650.980955][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.001844][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.031580][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.044684][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.051308][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.067931][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.101932][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.151133][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.205094][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.249816][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.297137][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.322874][T27876] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2651.356465][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.382829][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.416639][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.440389][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.459123][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.475354][T24456] gspca_vc032x: Unknown sensor... [ 2651.491087][T24456] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 2651.766795][T24456] usb 2-1: USB disconnect, device number 34 [ 2651.797954][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.805739][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 2651.889431][T27887] syzkaller1: entered promiscuous mode [ 2651.902536][T27887] syzkaller1: entered allmulticast mode [ 2652.565285][T27904] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 3 out of range (1000000..45000000) [ 2653.461301][T27907] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 2653.510892][T27907] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 2653.522582][T27907] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 2653.993085][T27921] bridge0: port 2(bridge_slave_1) entered disabled state [ 2654.000548][T27921] bridge0: port 1(bridge_slave_0) entered disabled state [ 2654.361562][T27921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2654.460788][T27921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2655.344758][T27944] misc userio: Invalid payload size [ 2655.354108][T27944] misc userio: No port type given on /dev/userio [ 2655.386597][T24456] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 2655.621722][T24456] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2655.671997][T24456] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2655.688918][T27946] misc userio: The device must be registered before sending interrupts [ 2655.725187][T24456] usb 7-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 2655.750575][T24456] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2655.777123][T24456] usb 7-1: Product: syz [ 2655.795601][T24456] usb 7-1: Manufacturer: syz [ 2655.811371][T24456] usb 7-1: SerialNumber: syz [ 2656.400301][T24456] usb 7-1: 0:1 : does not exist [ 2656.430677][T24456] usb 7-1: unit 6 not found! [ 2656.461193][T24456] usb 7-1: unit 2 not found! [ 2656.584794][T24456] usb 7-1: USB disconnect, device number 98 [ 2656.587048][T27957] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2656.704098][T15202] udevd[15202]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2657.095806][T27964] fuse: Bad value for 'fd' [ 2657.740483][T27974] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4730'. [ 2657.825091][T27974] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2657.880599][T27981] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4732'. [ 2657.898697][T27981] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4732'. [ 2658.109396][T27987] netlink: 'syz.4.4731': attribute type 10 has an invalid length. [ 2658.179378][T27990] netlink: 'syz.4.4731': attribute type 10 has an invalid length. [ 2658.241751][T27991] netlink: 1768 bytes leftover after parsing attributes in process `syz.4.4731'. [ 2658.266685][T27986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4734'. [ 2658.278225][T27986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4734'. [ 2658.743876][T27987] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2658.772314][T27987] team0: Port device netdevsim1 added [ 2659.145741][T27990] team0: Port device netdevsim1 removed [ 2659.570968][T27998] fuse: Bad value for 'fd' [ 2659.582753][T27997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4736'. [ 2659.819213][T28002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2659.837226][T28002] 8021q: adding VLAN 0 to HW filter on device team0 [ 2659.856034][T28002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2659.902066][T28002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2659.916504][T28002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2659.935000][T28007] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4738'. [ 2660.005387][T28002] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2660.080792][T12406] bridge0: port 1(bridge_slave_0) entered blocking state [ 2660.087987][T12406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2660.176372][T12406] bridge0: port 2(bridge_slave_1) entered blocking state [ 2660.183508][T12406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2660.787262][T28012] fuse: Bad value for 'fd' [ 2661.403474][T28033] fuse: Bad value for 'fd' [ 2661.510724][T28019] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2662.654269][T25174] usb 7-1: new full-speed USB device number 99 using dummy_hcd [ 2662.826918][T25174] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 2662.861586][T25174] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2662.894178][T25174] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2662.931589][T25174] usb 7-1: config 0 descriptor?? [ 2662.961697][T28054] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 2663.342128][T25174] ath6kl: Failed to submit usb control message: -71 [ 2663.372277][T25174] ath6kl: unable to send the bmi data to the device: -71 [ 2663.382415][T25174] ath6kl: Unable to send get target info: -71 [ 2663.434202][T25174] ath6kl: Failed to init ath6kl core: -71 [ 2663.455101][T25174] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2663.494425][T25174] usb 7-1: USB disconnect, device number 99 [ 2663.944351][T25174] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2664.104341][T25174] usb 2-1: Using ep0 maxpacket: 32 [ 2664.116004][T25174] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2664.134110][T25174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2664.162287][T25174] usb 2-1: config 0 descriptor?? [ 2664.180282][T25174] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2665.059758][T28088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4751'. [ 2665.073602][T28088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4751'. [ 2665.116290][T28088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2665.129182][T28089] fuse: Bad value for 'fd' [ 2665.134052][T28088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2665.495671][T25174] gspca_vc032x: reg_w err -110 [ 2665.508420][T25174] gspca_vc032x: I2c Bus Busy Wait 00 [ 2665.525194][T25174] gspca_vc032x: I2c Bus Busy Wait 00 [ 2665.539690][T25174] gspca_vc032x: I2c Bus Busy Wait 00 [ 2665.553933][T25174] gspca_vc032x: I2c Bus Busy Wait 00 [ 2665.566307][T25174] gspca_vc032x: I2c Bus Busy Wait 00 [ 2665.578663][T25174] gspca_vc032x: I2c Bus Busy Wait 00 [ 2665.589937][T25174] gspca_vc032x: I2c Bus Busy Wait 00 [ 2665.601272][T25174] gspca_vc032x: I2c Bus Busy Wait 00 [ 2665.612463][T25174] gspca_vc032x: I2c Bus Busy Wait 00 [ 2665.624581][T25174] gspca_vc032x: I2c Bus Busy Wait 00 [ 2665.637037][T25174] gspca_vc032x: I2c Bus Busy Wait 00 [ 2665.649502][T25174] gspca_vc032x: I2c Bus Busy Wait 00 [ 2665.661435][T25174] gspca_vc032x: I2c Bus Busy Wait 00 [ 2665.671948][T28100] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4754'. [ 2665.704689][T25174] gspca_vc032x: I2c Bus Busy Wait 00 [ 2665.715143][T25174] gspca_vc032x: I2c Bus Busy Wait 00 [ 2665.727207][T25174] gspca_vc032x: I2c Bus Busy Wait 00 [ 2665.740701][T25174] gspca_vc032x: I2c Bus Busy Wait 00 [ 2665.755802][T25174] gspca_vc032x: I2c Bus Busy Wait 00 [ 2665.768694][T25174] gspca_vc032x: Unknown sensor... [ 2665.782553][T25174] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 2666.128244][T28104] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2666.204330][T25174] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 2666.278829][T28109] "syz.7.4757" (28109) uses obsolete ecb(arc4) skcipher [ 2666.376582][T25174] usb 7-1: Using ep0 maxpacket: 16 [ 2666.400020][T25174] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2666.416560][T25174] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 2666.434809][T10369] usb 2-1: USB disconnect, device number 35 [ 2666.481196][T28100] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4754'. [ 2666.495283][T28100] netlink: 260 bytes leftover after parsing attributes in process `syz.6.4754'. [ 2667.524276][T13789] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 2667.696385][T13789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 2667.741066][T13789] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2667.791792][T13789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2667.869041][T13789] usb 2-1: config 0 descriptor?? [ 2667.923826][T28118] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2668.140721][T28121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2668.153296][T28121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2668.202698][T28121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4760'. [ 2668.258118][T13789] ath6kl: Failed to submit usb control message: -71 [ 2668.291002][T13789] ath6kl: unable to send the bmi data to the device: -71 [ 2668.327724][T13789] ath6kl: Unable to send get target info: -71 [ 2668.411613][T13789] ath6kl: Failed to init ath6kl core: -71 [ 2668.453215][T13789] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2668.530340][T13789] usb 2-1: USB disconnect, device number 36 [ 2668.701416][T28126] netlink: 'syz.3.4761': attribute type 4 has an invalid length. [ 2668.741493][T25174] usb 7-1: string descriptor 0 read error: -71 [ 2668.760793][T25174] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2668.781811][T25174] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2668.820549][T25174] usb 7-1: can't set config #1, error -71 [ 2668.829135][T28126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2668.843849][T25174] usb 7-1: USB disconnect, device number 100 [ 2668.864033][T28126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2669.240326][T28136] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 28136 comm: syz.1.4763) [ 2669.289823][ T30] audit: type=1800 audit(1783177065.828:2514): pid=28136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4763" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=108579 res=0 errno=0 [ 2669.421902][T28137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4763'. [ 2669.479713][T28139] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 2669.532953][ T30] audit: type=1326 audit(1783177066.058:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28138 comm="syz.4.4765" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f580ec code=0x0 [ 2670.801315][ T30] audit: type=1326 audit(1783177067.328:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28148 comm="syz.1.4766" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 2670.965108][ T30] audit: type=1326 audit(1783177067.328:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28148 comm="syz.1.4766" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 2671.054633][ T30] audit: type=1326 audit(1783177067.348:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28148 comm="syz.1.4766" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 2671.104996][ T30] audit: type=1326 audit(1783177067.348:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28148 comm="syz.1.4766" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 2671.130375][ T30] audit: type=1326 audit(1783177067.348:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28148 comm="syz.1.4766" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 2671.155881][ T30] audit: type=1326 audit(1783177067.348:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28148 comm="syz.1.4766" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 2671.193886][ T30] audit: type=1326 audit(1783177067.348:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28148 comm="syz.1.4766" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 2671.220669][ T30] audit: type=1326 audit(1783177067.348:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28148 comm="syz.1.4766" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 2671.600264][T28157] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2671.661626][T28157] bond3: option arp_interval: invalid value (18446744071562068096) [ 2671.669981][T28157] bond3: option arp_interval: allowed values 0 - 2147483647 [ 2671.714974][T28157] bond3 (unregistering): Released all slaves [ 2672.247767][T28173] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4769'. [ 2673.011236][T28185] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2674.186532][T25174] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2674.376833][T25174] usb 2-1: config 2 has an invalid interface number: 174 but max is 0 [ 2674.406430][T25174] usb 2-1: config 2 has no interface number 0 [ 2674.431318][T25174] usb 2-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 2674.650878][T25174] usb 2-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 2674.713767][T25174] usb 2-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 2674.739508][T25174] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 2674.754621][T25174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2674.778685][T25174] usb 2-1: Product: syz [ 2674.795949][T25174] usb 2-1: Manufacturer: syz [ 2674.815732][T25174] usb 2-1: SerialNumber: syz [ 2674.861555][T28184] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2674.878729][T28205] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2674.918446][T28184] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2674.964360][T10369] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 2675.137412][T10369] usb 7-1: Using ep0 maxpacket: 8 [ 2675.172120][T10369] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 2675.214518][T10369] usb 7-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2675.248164][T10369] usb 7-1: config 179 has no interface number 0 [ 2675.257198][T10369] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2675.279837][T10369] usb 7-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2675.320891][T10369] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2675.372220][T10369] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2675.670369][T28202] syz_tun: left promiscuous mode [ 2675.823149][T25174] usb 2-1: probing VID:PID(0424:012C) [ 2675.837213][T25174] usb 2-1: vub300 testing BULK IN EndPoint(0) 8E [ 2675.837237][T25174] usb 2-1: vub300 testing BULK IN EndPoint(1) 82 [ 2675.837260][T25174] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 2675.848745][T25174] vub300 2-1:2.174: probe with driver vub300 failed with error -22 [ 2675.871750][T25174] usb 2-1: USB disconnect, device number 37 [ 2675.896144][T28202] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2676.227270][T24456] usb 7-1: USB disconnect, device number 101 [ 2676.263503][T28222] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4781'. [ 2676.293039][T28222] xfrm0: Caught tx_queue_len zero misconfig [ 2676.376313][T28222] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2676.530176][T28224] netlink: 280 bytes leftover after parsing attributes in process `syz.7.4780'. [ 2676.632245][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 2676.632261][ T30] audit: type=1326 audit(1783177073.168:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28227 comm="syz.3.4782" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2676.687481][ T30] audit: type=1326 audit(1783177073.198:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28227 comm="syz.3.4782" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2676.732803][T28233] fuse: Bad value for 'fd' [ 2676.737362][ T30] audit: type=1326 audit(1783177073.208:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28227 comm="syz.3.4782" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2676.849281][ T30] audit: type=1326 audit(1783177073.208:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28227 comm="syz.3.4782" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2677.012588][ T30] audit: type=1326 audit(1783177073.208:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28227 comm="syz.3.4782" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2677.141780][ T30] audit: type=1326 audit(1783177073.208:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28227 comm="syz.3.4782" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2677.285483][ T30] audit: type=1326 audit(1783177073.208:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28227 comm="syz.3.4782" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2677.386449][ T30] audit: type=1326 audit(1783177073.208:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28227 comm="syz.3.4782" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2677.504338][ T30] audit: type=1326 audit(1783177073.208:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28227 comm="syz.3.4782" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2677.644966][ T30] audit: type=1326 audit(1783177073.208:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28227 comm="syz.3.4782" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2677.908224][T28250] fuse: Bad value for 'fd' [ 2678.102486][T28248] binder: 28240:28248 ioctl c0306201 800003c0 returned -14 [ 2678.225429][T28244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4785'. [ 2679.014341][T24456] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2679.201500][T24456] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2679.243087][T24456] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2679.287875][T24456] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2679.336471][T28271] binder: 28265:28271 ioctl c0306201 800003c0 returned -14 [ 2679.351193][T24456] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2679.377441][T24456] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2679.408165][T28270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4791'. [ 2679.421435][T24456] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 2679.449379][T24456] usb 2-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb [ 2679.469027][T24456] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2679.527881][T24456] usb 2-1: config 0 descriptor?? [ 2679.563022][T24456] appledisplay 2-1:0.0: Submitting URB failed [ 2679.583167][T24456] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -5 [ 2679.878693][T28264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2679.908726][T28264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2679.987611][T24456] usb 2-1: USB disconnect, device number 38 [ 2681.694329][T25174] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2681.864607][T25174] usb 2-1: Using ep0 maxpacket: 16 [ 2681.895154][T25174] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 2681.937605][T25174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2681.977887][T25174] usb 2-1: Product: syz [ 2682.001414][T25174] usb 2-1: Manufacturer: syz [ 2682.021391][T25174] usb 2-1: SerialNumber: syz [ 2682.282655][T25174] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 2682.333438][T25174] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2682.364411][T25174] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 2682.386190][T25174] usb 2-1: media controller created [ 2682.409136][T25174] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2682.514678][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 2682.548030][T28293] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4795'. [ 2682.664662][T25174] zl10353_read_register: readreg error (reg=127, ret==-110) [ 2682.781886][T25174] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 2682.818643][T25174] usb 2-1: USB disconnect, device number 39 [ 2683.224354][T13789] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 2683.407355][T13789] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2683.468999][T13789] usb 7-1: config 4 has an invalid interface number: 179 but max is 0 [ 2683.520445][T13789] usb 7-1: config 4 has no interface number 0 [ 2683.569418][T13789] usb 7-1: config 4 interface 179 has no altsetting 0 [ 2683.642123][T13789] usb 7-1: New USB device found, idVendor=07ca, idProduct=a867, bcdDevice=f2.a6 [ 2683.712919][T13789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2683.747033][T28315] fuse: Bad value for 'fd' [ 2683.756150][T13789] usb 7-1: Product: syz [ 2683.776485][T13789] usb 7-1: Manufacturer: syz [ 2683.800807][T13789] usb 7-1: SerialNumber: syz [ 2684.105478][T13789] usb 7-1: USB disconnect, device number 102 [ 2685.783772][T28340] binder: 28334:28340 ioctl c0306201 800003c0 returned -14 [ 2686.009477][T28340] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4806'. [ 2688.040043][T28387] "syz.3.4813" (28387) uses obsolete ecb(arc4) skcipher [ 2688.122978][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 2688.122994][ T30] audit: type=1326 audit(1783177084.668:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28366 comm="syz.7.4809" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x0 [ 2688.163320][T28393] fuse: Bad value for 'fd' [ 2688.176008][T25174] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 2688.354784][T25174] usb 7-1: Using ep0 maxpacket: 16 [ 2688.363468][T25174] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2688.390964][T25174] usb 7-1: config 4 has an invalid interface number: 55 but max is 0 [ 2688.467346][T25174] usb 7-1: config 4 has no interface number 0 [ 2688.518165][T25174] usb 7-1: config 4 interface 55 has no altsetting 0 [ 2688.578237][T25174] usb 7-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 2688.617933][T25174] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2688.675884][T25174] usb 7-1: Product: syz [ 2688.710762][T25174] usb 7-1: Manufacturer: syz [ 2688.760047][T25174] usb 7-1: SerialNumber: syz [ 2689.013582][T28385] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4811'. [ 2689.168820][T28409] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 2689.335017][T28385] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4811'. [ 2689.434614][T25174] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 2689.468890][T25174] gspca_mr97310a: reg write [21] error -22 [ 2689.512008][T25174] mr97310a 7-1:4.55: probe with driver mr97310a failed with error -22 [ 2689.582797][T25174] usb 7-1: USB disconnect, device number 103 [ 2690.013703][T28414] fuse: Bad value for 'fd' [ 2690.221666][T28417] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2691.395363][T24456] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2691.523907][T28444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2691.580432][T28444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2691.605080][T24456] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2691.643909][T24456] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2691.659074][T28444] syz_tun: left promiscuous mode [ 2691.699864][T28444] dummy0: left allmulticast mode [ 2691.700122][T24456] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2691.773690][T24456] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2691.791627][T28444] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2691.850390][T24456] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2691.886605][T24456] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2691.923023][T24456] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2691.979255][T24456] usb 2-1: invalid MIDI out EP 0 [ 2692.033772][T28448] binder: 28438:28448 ioctl c0306201 800003c0 returned -14 [ 2692.132116][T28448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4822'. [ 2692.300238][T24456] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2693.611081][T28468] binder: 28458:28468 ioctl c0306201 800003c0 returned -14 [ 2693.670728][T28468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4824'. [ 2694.260148][T28471] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2694.494488][T13789] usb 2-1: USB disconnect, device number 40 [ 2694.571947][T28471] bond4: option arp_interval: invalid value (18446744071562068096) [ 2694.611971][T28471] bond4: option arp_interval: allowed values 0 - 2147483647 [ 2694.648720][T28471] bond4 (unregistering): Released all slaves [ 2695.232176][T28485] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2695.433479][T28498] fuse: Bad value for 'fd' [ 2695.724489][T24467] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 2695.938744][T24467] usb 2-1: config index 0 descriptor too short (expected 14385, got 27) [ 2695.964352][T24467] usb 2-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 2695.974884][T24467] usb 2-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 2695.985492][T24467] usb 2-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 2696.092447][T24467] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 2696.114726][T24467] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2696.146692][T24467] usb 2-1: Product: syz [ 2696.164304][T24467] usb 2-1: Manufacturer: syz [ 2696.169298][T24467] usb 2-1: SerialNumber: syz [ 2696.489835][T28496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2696.586954][T28496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2698.155836][T13789] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 2698.220548][T24467] usb 2-1: USB disconnect, device number 41 [ 2698.326222][T28524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2698.359137][T13789] usb 7-1: Using ep0 maxpacket: 32 [ 2698.371000][T13789] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2698.380374][T28524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2698.421339][T13789] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2698.488206][T13789] usb 7-1: config 0 descriptor?? [ 2698.528752][T13789] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2699.396006][T28536] random: crng reseeded on system resumption [ 2699.831813][T28521] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4837'. [ 2699.914552][T13789] gspca_vc032x: reg_w err -110 [ 2699.926786][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2699.970211][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2699.977618][T28518] binder: 28513:28518 ioctl c0045005 800002c0 returned -22 [ 2700.003096][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2700.023812][T28541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2700.035070][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2700.054914][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2700.073112][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2700.078591][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2700.098169][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2700.122075][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2700.138210][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2700.158668][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2700.172919][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2700.185409][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2700.197459][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2700.212906][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2700.220538][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2700.238235][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2700.261950][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2700.284508][T13789] gspca_vc032x: Unknown sensor... [ 2700.300882][T13789] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 2700.346691][T28541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2700.378127][T13789] usb 7-1: USB disconnect, device number 104 [ 2700.934546][T10369] usb 7-1: new full-speed USB device number 105 using dummy_hcd [ 2701.107016][T10369] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2701.128884][T10369] usb 7-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2701.165125][T10369] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2701.191041][T10369] usb 7-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 2701.216421][T10369] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2701.251304][T10369] usb 7-1: config 0 descriptor?? [ 2701.276124][T10369] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 2702.133176][T28566] netlink: 'syz.1.4856': attribute type 10 has an invalid length. [ 2702.194365][T28568] netlink: 'syz.1.4856': attribute type 10 has an invalid length. [ 2702.217280][T28566] bond0: (slave netdevsim1): Releasing backup interface [ 2702.281465][T28572] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4856'. [ 2702.292513][T28566] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2702.327881][T28566] team0: Port device netdevsim1 added [ 2702.339350][T28573] netlink: 'syz.6.4842': attribute type 13 has an invalid length. [ 2702.377588][T28568] team0: Port device netdevsim1 removed [ 2702.408457][T28568] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2702.427158][T28568] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 2703.375546][T28580] binder: 28575:28580 ioctl c0306201 800003c0 returned -14 [ 2703.406985][T28580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4844'. [ 2703.731029][T28591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4847'. [ 2703.768015][T10369] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2703.917699][T24456] usb 7-1: USB disconnect, device number 105 [ 2703.997856][T10369] usb 2-1: Using ep0 maxpacket: 32 [ 2704.024412][T10369] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2704.068882][T10369] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2704.131409][T10369] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2704.176295][T10369] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2704.254044][T10369] usb 2-1: Product: syz [ 2704.283869][T10369] usb 2-1: Manufacturer: syz [ 2704.322254][T10369] hub 2-1:4.0: USB hub found [ 2704.657727][T10369] hub 2-1:4.0: 2 ports detected [ 2705.129249][T10369] hub 2-1:4.0: set hub depth failed [ 2705.208434][T10369] usb 2-1: USB disconnect, device number 42 [ 2705.535505][T28610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2705.557020][T28610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2706.436434][T28617] veth0_macvtap: Caught tx_queue_len zero misconfig [ 2706.884280][T13789] usb 7-1: new full-speed USB device number 106 using dummy_hcd [ 2707.087684][T13789] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 2707.159105][T13789] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2707.234465][T13789] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2707.311424][T13789] usb 7-1: config 0 descriptor?? [ 2707.345055][T28624] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2707.702810][T13789] ath6kl: Failed to submit usb control message: -71 [ 2707.741300][T13789] ath6kl: unable to send the bmi data to the device: -71 [ 2707.770236][T13789] ath6kl: Unable to send get target info: -71 [ 2707.818418][T13789] ath6kl: Failed to init ath6kl core: -71 [ 2707.849315][T13789] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2707.891983][T13789] usb 7-1: USB disconnect, device number 106 [ 2708.294543][T10369] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2708.361616][T28619] random: crng reseeded on system resumption [ 2708.412090][T28619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4854'. [ 2708.460874][T28616] binder: 28615:28616 ioctl c0045005 800002c0 returned -22 [ 2708.470314][T10369] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2708.479917][T10369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2708.496002][T10369] usb 2-1: config 0 descriptor?? [ 2708.836445][ T30] audit: type=1326 audit(1783177105.378:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28638 comm="syz.6.4872" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2708.865766][ T30] audit: type=1326 audit(1783177105.378:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28638 comm="syz.6.4872" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2708.881607][T10369] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2708.905343][T10369] [drm:udl_init] *ERROR* Selecting channel failed [ 2708.924366][ T30] audit: type=1326 audit(1783177105.378:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28638 comm="syz.6.4872" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2708.949835][ T30] audit: type=1326 audit(1783177105.378:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28638 comm="syz.6.4872" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2708.984093][ T30] audit: type=1326 audit(1783177105.378:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28638 comm="syz.6.4872" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2709.009798][T10369] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 2709.021034][T10369] [drm] Initialized udl on minor 2 [ 2709.038129][T10369] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2709.056289][ T30] audit: type=1326 audit(1783177105.378:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28638 comm="syz.6.4872" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2709.057415][T10369] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 2709.103494][T24467] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2709.117987][ T30] audit: type=1326 audit(1783177105.378:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28638 comm="syz.6.4872" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2709.146566][ T30] audit: type=1326 audit(1783177105.378:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28638 comm="syz.6.4872" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2709.177565][ T30] audit: type=1326 audit(1783177105.408:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28638 comm="syz.6.4872" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2709.204347][ T30] audit: type=1326 audit(1783177105.408:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28638 comm="syz.6.4872" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2709.261391][T24467] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2709.271370][T10369] usb 2-1: USB disconnect, device number 43 [ 2709.299496][T24467] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 2710.180389][T28652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4863'. [ 2712.537286][T28692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2712.567017][T28692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2713.228033][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.234663][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.989821][T28717] netlink: 'syz.1.4874': attribute type 10 has an invalid length. [ 2714.092961][T28719] netlink: 'syz.1.4874': attribute type 10 has an invalid length. [ 2714.136090][T28717] bond0: (slave netdevsim1): Releasing backup interface [ 2714.170384][T28713] netlink: 1768 bytes leftover after parsing attributes in process `syz.1.4874'. [ 2714.246336][T28717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2714.311087][T28717] team0: Port device netdevsim1 added [ 2714.365629][T28719] team0: Port device netdevsim1 removed [ 2714.432943][T28719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2714.488008][T28719] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 2715.492547][T28730] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 28730 comm: syz.7.4877) [ 2715.516441][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 2715.516456][ T30] audit: type=1800 audit(1783177112.058:2630): pid=28730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4877" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=107638 res=0 errno=0 [ 2715.629729][T28731] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4877'. [ 2716.214279][T24467] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 2716.376410][T24467] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2716.385742][T24467] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2716.433160][T24467] usb 7-1: config 0 descriptor?? [ 2716.814236][T24467] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2716.830044][T24467] [drm:udl_init] *ERROR* Selecting channel failed [ 2716.873946][T28752] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4881'. [ 2716.940313][T24467] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 2716.977816][T24467] [drm] Initialized udl on minor 2 [ 2717.001629][T28758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2717.021132][T28758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2717.054133][T24467] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2717.079106][T24467] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 2717.104393][T10369] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2717.126927][T24467] usb 7-1: USB disconnect, device number 107 [ 2717.141306][T10369] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 2721.477355][T28798] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4889'. [ 2722.127572][T28811] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 28811 comm: syz.4.4892) [ 2722.171143][ T30] audit: type=1800 audit(1783177118.708:2631): pid=28811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4892" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=65745 res=0 errno=0 [ 2722.359128][T28814] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4892'. [ 2723.196181][ T30] audit: type=1326 audit(1783177119.738:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28816 comm="syz.4.4893" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f580ec code=0x7ffc0000 [ 2723.252503][ T30] audit: type=1326 audit(1783177119.738:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28816 comm="syz.4.4893" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f580ec code=0x7ffc0000 [ 2723.304600][T10369] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 2723.319094][ T30] audit: type=1326 audit(1783177119.738:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28816 comm="syz.4.4893" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f580ec code=0x7ffc0000 [ 2723.344498][ T30] audit: type=1326 audit(1783177119.738:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28816 comm="syz.4.4893" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f580ec code=0x7ffc0000 [ 2723.372703][ T30] audit: type=1326 audit(1783177119.738:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28816 comm="syz.4.4893" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f580ec code=0x7ffc0000 [ 2723.400158][ T30] audit: type=1326 audit(1783177119.738:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28816 comm="syz.4.4893" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f580ec code=0x7ffc0000 [ 2723.446553][ T30] audit: type=1326 audit(1783177119.738:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28816 comm="syz.4.4893" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f580ec code=0x7ffc0000 [ 2723.472056][ T30] audit: type=1326 audit(1783177119.738:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28816 comm="syz.4.4893" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f580ec code=0x7ffc0000 [ 2723.500520][ T30] audit: type=1326 audit(1783177119.738:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28816 comm="syz.4.4893" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f580ec code=0x7ffc0000 [ 2723.530992][T10369] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 2723.542192][T10369] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2723.576248][T10369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2723.622304][T10369] usb 2-1: config 0 descriptor?? [ 2723.637567][T28818] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2723.682119][T28825] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2723.919263][T10369] ath6kl: Failed to submit usb control message: -71 [ 2723.928611][T10369] ath6kl: unable to send the bmi data to the device: -71 [ 2723.939024][T10369] ath6kl: Unable to send get target info: -71 [ 2723.978675][T10369] ath6kl: Failed to init ath6kl core: -71 [ 2724.009149][T10369] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2724.027736][T10369] usb 2-1: USB disconnect, device number 44 [ 2724.768191][T28836] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4896'. [ 2724.799190][T28834] netlink: 277 bytes leftover after parsing attributes in process `syz.6.4896'. [ 2724.820736][T28834] netlink: 277 bytes leftover after parsing attributes in process `syz.6.4896'. [ 2725.045068][T28838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2725.065571][T28838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2725.501923][T28835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2725.586910][T28852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2725.779198][T28859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4902'. [ 2725.792684][T28859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4902'. [ 2726.982714][T28867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2727.004081][T28867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2727.494279][T13789] usb 7-1: new full-speed USB device number 108 using dummy_hcd [ 2727.670379][T13789] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 2727.704860][T13789] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2727.747329][T13789] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2727.782653][T13789] usb 7-1: config 0 descriptor?? [ 2727.810034][T28871] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 2728.051676][T13789] ath6kl: Failed to submit usb control message: -71 [ 2728.070299][T13789] ath6kl: unable to send the bmi data to the device: -71 [ 2728.089666][T13789] ath6kl: Unable to send get target info: -71 [ 2728.119519][T13789] ath6kl: Failed to init ath6kl core: -71 [ 2728.135394][T13789] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2728.199203][T13789] usb 7-1: USB disconnect, device number 108 [ 2728.770486][T28886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2728.820451][T28886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2728.896073][T28886] netlink: 'syz.3.4911': attribute type 13 has an invalid length. [ 2729.084287][T13789] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 2729.254471][T13789] usb 7-1: Using ep0 maxpacket: 32 [ 2729.269189][T13789] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2729.303328][T13789] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2729.359913][T13789] usb 7-1: config 0 descriptor?? [ 2729.393580][T13789] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2730.202377][T28901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2730.216167][T28901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2730.289718][T28899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2730.491444][T28905] netlink: 'syz.7.4914': attribute type 10 has an invalid length. [ 2730.550374][T28906] netlink: 'syz.7.4914': attribute type 10 has an invalid length. [ 2730.573036][T28905] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2730.621317][T28905] team0: Port device netdevsim1 added [ 2730.632759][T28906] team0: Port device netdevsim1 removed [ 2730.657220][T28906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2730.666421][T28905] netlink: 100 bytes leftover after parsing attributes in process `syz.7.4914'. [ 2730.697412][T13789] gspca_vc032x: reg_w err -110 [ 2730.702568][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2730.717215][T28906] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 2730.727511][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2730.733131][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2730.739732][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2730.745829][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2730.752309][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2730.761363][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2730.769294][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2730.776480][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2730.783008][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2730.791996][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2730.798560][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2730.807137][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2730.812621][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2730.819207][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2730.841217][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2730.852619][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2730.858373][T13789] gspca_vc032x: I2c Bus Busy Wait 00 [ 2730.867501][T13789] gspca_vc032x: Unknown sensor... [ 2730.872845][T13789] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 2731.929932][T28926] binder: 28923:28926 ioctl c0045005 800002c0 returned -22 [ 2731.953114][T28926] binder: 28923:28926 ioctl c0306201 0 returned -14 [ 2732.202850][T25174] usb 7-1: USB disconnect, device number 109 [ 2732.991567][T28930] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4919'. [ 2733.890373][T28938] input: syz0 as /devices/virtual/input/input190 [ 2735.170596][T28953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2735.311277][T28964] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4923'. [ 2735.397498][T10369] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2735.481170][T28953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2735.596833][T10369] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 2735.623594][T10369] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 2735.679583][T10369] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 2735.727772][T10369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2735.760794][T10369] usb 2-1: Product: syz [ 2735.785391][T10369] usb 2-1: Manufacturer: syz [ 2735.804795][T10369] usb 2-1: SerialNumber: syz [ 2735.838866][T10369] usb 2-1: config 0 descriptor?? [ 2735.873946][T10369] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 2736.927122][T10369] gspca_sunplus: reg_r err -32 [ 2736.936959][T10369] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 2736.947117][T28972] IPVS: Unknown mcast interface: wlan1 [ 2736.998268][T10369] usb 2-1: USB disconnect, device number 45 [ 2737.006571][T28972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4926'. [ 2737.161991][T28972] vlan3: entered allmulticast mode [ 2737.225845][T28972] veth0_to_bond: entered allmulticast mode [ 2737.416235][T28980] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4927'. [ 2738.213559][T28999] fuse: Bad value for 'fd' [ 2738.400174][T29004] netlink: 'syz.3.4932': attribute type 10 has an invalid length. [ 2738.433263][T29004] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2738.465939][T29004] team0: Port device netdevsim1 added [ 2738.466036][T29005] netlink: 'syz.3.4932': attribute type 10 has an invalid length. [ 2738.545252][T29005] team0: Port device netdevsim1 removed [ 2738.587378][T29004] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4932'. [ 2739.254450][T13789] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2739.424278][T13789] usb 2-1: Using ep0 maxpacket: 16 [ 2739.439261][T13789] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 2739.462502][T13789] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2739.486015][T13789] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 2739.506756][T13789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2739.554679][T13789] usb 2-1: config 0 descriptor?? [ 2740.090578][T13789] usbhid 2-1:0.0: can't add hid device: -71 [ 2740.107884][T13789] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2740.142469][T13789] usb 2-1: USB disconnect, device number 46 [ 2740.533161][T29019] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2741.694316][T13789] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 2741.854319][T13789] usb 7-1: Using ep0 maxpacket: 8 [ 2741.871861][T13789] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 2741.902183][T13789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2741.929848][T13789] usb 7-1: Product: syz [ 2741.942656][T13789] usb 7-1: Manufacturer: syz [ 2741.959072][T13789] usb 7-1: SerialNumber: syz [ 2741.981371][T13789] usb 7-1: config 0 descriptor?? [ 2742.020802][T13789] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 2742.221967][T29049] fuse: Bad value for 'fd' [ 2742.879322][T13789] gspca_sonixj: reg_r err -32 [ 2742.884805][T13789] sonixj 7-1:0.0: probe with driver sonixj failed with error -32 [ 2743.152422][T29065] fuse: Unknown parameter '0x000000000000000a0000000000000000000000000000000000000000' [ 2743.691471][T29075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4950'. [ 2743.705963][T29075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4950'. [ 2744.104544][T10369] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2744.374332][T10369] usb 2-1: Using ep0 maxpacket: 16 [ 2744.383676][T10369] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 2744.435606][T10369] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 2744.465191][T10369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2744.506343][T10369] usb 2-1: Product: syz [ 2744.527439][T10369] usb 2-1: Manufacturer: syz [ 2744.543088][T10369] usb 2-1: SerialNumber: syz [ 2744.584138][T29077] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2744.936050][T29087] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 2744.969519][T29085] input: syz1 as /devices/virtual/input/input191 [ 2745.703141][T13789] usb 7-1: USB disconnect, device number 110 [ 2746.107496][T29091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2746.121048][T29091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2746.216928][T29096] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4956'. [ 2746.819183][T29101] fuse: Bad value for 'fd' [ 2747.210438][T10369] usb 2-1: selecting invalid altsetting 1 [ 2747.234261][T13789] usb 7-1: new full-speed USB device number 111 using dummy_hcd [ 2747.326706][T10369] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2747.340588][T10369] usb 2-1: USB disconnect, device number 47 [ 2747.379774][T15202] udevd[15202]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2747.418124][T13789] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 2747.474323][T13789] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2747.491857][T13789] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2747.533701][T13789] usb 7-1: config 0 descriptor?? [ 2747.557741][T29105] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 2747.637056][T29113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2747.647260][T29113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2747.781610][T13789] ath6kl: Failed to submit usb control message: -71 [ 2747.792998][T13789] ath6kl: unable to send the bmi data to the device: -71 [ 2747.800786][T13789] ath6kl: Unable to send get target info: -71 [ 2747.811624][T13789] ath6kl: Failed to init ath6kl core: -71 [ 2747.819169][T13789] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2747.837116][T13789] usb 7-1: USB disconnect, device number 111 [ 2748.504319][T29125] fuse: Unknown parameter '0x000000000000000a0000000000000000000000000000000000000000' [ 2749.658126][T10369] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2749.847076][T10369] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2749.897958][T10369] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2749.936637][T10369] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2749.955259][T10369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2749.989976][T10369] usb 2-1: SerialNumber: syz [ 2750.365580][T29144] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 2750.665673][T24456] usb 7-1: new full-speed USB device number 112 using dummy_hcd [ 2750.835483][T24456] usb 7-1: no configurations [ 2750.840636][T24456] usb 7-1: can't read configurations, error -22 [ 2750.999014][T24456] usb 7-1: new full-speed USB device number 113 using dummy_hcd [ 2751.174991][T24456] usb 7-1: no configurations [ 2751.179849][T24456] usb 7-1: can't read configurations, error -22 [ 2751.188312][T24456] usb usb7-port1: attempt power cycle [ 2751.574405][T24456] usb 7-1: new full-speed USB device number 114 using dummy_hcd [ 2751.586956][T29149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2751.596734][T29149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2751.644960][T24456] usb 7-1: no configurations [ 2751.649900][T24456] usb 7-1: can't read configurations, error -22 [ 2751.754688][T29149] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2751.801451][T24456] usb 7-1: new full-speed USB device number 115 using dummy_hcd [ 2751.864592][T24456] usb 7-1: no configurations [ 2751.869505][T24456] usb 7-1: can't read configurations, error -22 [ 2751.888310][T24456] usb usb7-port1: unable to enumerate USB device [ 2752.133288][T10369] usb 2-1: 0:2 : does not exist [ 2752.143840][T10369] usb 2-1: unit 5 not found! [ 2752.381148][T10369] usb 2-1: USB disconnect, device number 48 [ 2752.462995][T15202] udevd[15202]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2752.664587][T29169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4971'. [ 2752.733078][T29169] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2753.900710][T29179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2753.911302][T29179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2754.109722][T29182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4975'. [ 2755.058294][T29193] fuse: Unknown parameter '0x000000000000000a0000000000000000000000000000000000000000' [ 2755.633514][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 2755.633528][ T30] audit: type=1326 audit(1783177152.168:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29198 comm="syz.3.4978" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x0 [ 2756.099367][T29208] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4980'. [ 2756.301809][T29215] netlink: 'syz.1.4981': attribute type 10 has an invalid length. [ 2756.383762][T29216] netlink: 'syz.1.4981': attribute type 10 has an invalid length. [ 2756.442138][T29215] bond0: (slave netdevsim1): Releasing backup interface [ 2756.483491][T29219] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4981'. [ 2756.550021][T29215] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2756.579549][T29215] team0: Port device netdevsim1 added [ 2756.617653][T29216] team0: Port device netdevsim1 removed [ 2756.641907][T29216] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2756.669990][T29216] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 2756.908213][T29225] pimreg: entered allmulticast mode [ 2756.928471][T29225] pimreg: left allmulticast mode [ 2756.986147][T29226] binder: 29224:29226 ioctl c018620c 800000c0 returned -22 [ 2757.291196][T29232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4986'. [ 2757.403247][T29238] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4988'. [ 2757.554357][T24456] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 2757.728090][T24456] usb 7-1: config 0 has an invalid interface number: 106 but max is 0 [ 2757.742363][T24456] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2757.763702][T24456] usb 7-1: config 0 has no interface number 0 [ 2757.777063][T24456] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 2757.801452][T24456] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2757.826833][T24456] usb 7-1: config 0 descriptor?? [ 2757.860262][T24456] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2758.157123][T29244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2758.181654][T29244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2758.307425][T29245] tap0: tun_chr_ioctl cmd 1074025677 [ 2758.323699][T29245] tap0: linktype set to 769 [ 2758.914642][T13750] usb 7-1: Failed to submit usb control message: -110 [ 2758.928161][T13750] usb 7-1: unable to send the bmi data to the device: -110 [ 2758.937824][T13750] usb 7-1: unable to get target info from device [ 2758.946382][T13750] usb 7-1: could not get target info (-110) [ 2758.952402][T13750] usb 7-1: could not probe fw (-110) [ 2759.138987][ T30] audit: type=1326 audit(1783177155.678:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29250 comm="syz.3.4992" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2759.169437][ T30] audit: type=1326 audit(1783177155.708:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29250 comm="syz.3.4992" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2759.199944][ T30] audit: type=1326 audit(1783177155.708:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29250 comm="syz.3.4992" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=292 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2759.229729][ T30] audit: type=1326 audit(1783177155.708:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29250 comm="syz.3.4992" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2759.266012][ T30] audit: type=1326 audit(1783177155.768:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29250 comm="syz.3.4992" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=317 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2759.300684][ T30] audit: type=1326 audit(1783177155.798:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29250 comm="syz.3.4992" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2759.338610][ T30] audit: type=1326 audit(1783177155.838:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29250 comm="syz.3.4992" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2759.380366][ T30] audit: type=1326 audit(1783177155.878:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29250 comm="syz.3.4992" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2759.413650][ T30] audit: type=1326 audit(1783177155.878:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29250 comm="syz.3.4992" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2760.206058][T29266] fuse: Bad value for 'fd' [ 2760.351943][T29261] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4994'. [ 2760.849239][T29271] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4996'. [ 2760.926423][T29271] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4996'. [ 2761.329507][T29274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4997'. [ 2761.367116][T25174] usb 7-1: USB disconnect, device number 116 [ 2761.528268][T29278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4999'. [ 2761.571640][T29278] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2072421113 (4144842226 ns) > initial count (1961237654 ns). Using initial count to start timer. [ 2761.628624][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2761.628638][ T30] audit: type=1326 audit(1783177158.148:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29275 comm="syz.6.4998" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2761.660629][ T30] audit: type=1326 audit(1783177158.158:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29275 comm="syz.6.4998" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2761.710883][ T30] audit: type=1326 audit(1783177158.158:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29275 comm="syz.6.4998" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2761.738237][ T30] audit: type=1326 audit(1783177158.158:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29275 comm="syz.6.4998" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2761.769222][ T30] audit: type=1326 audit(1783177158.158:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29275 comm="syz.6.4998" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2761.800043][ T30] audit: type=1326 audit(1783177158.158:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29275 comm="syz.6.4998" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2761.843561][ T30] audit: type=1326 audit(1783177158.158:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29275 comm="syz.6.4998" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2761.874257][ T30] audit: type=1326 audit(1783177158.158:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29275 comm="syz.6.4998" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2761.899977][ T30] audit: type=1326 audit(1783177158.158:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29275 comm="syz.6.4998" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2761.927078][ T30] audit: type=1326 audit(1783177158.158:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29275 comm="syz.6.4998" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2762.295323][T10369] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2762.477886][T10369] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 2762.521872][T10369] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2762.556283][T10369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2762.606423][T10369] usb 2-1: Product: syz [ 2762.632626][T10369] usb 2-1: Manufacturer: syz [ 2762.671216][T10369] usb 2-1: SerialNumber: syz [ 2762.719707][T10369] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2762.762988][T24456] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2762.978862][T29284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2763.004690][T29284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2763.016005][T29284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2763.026855][T29284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2763.055836][T29284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2763.070218][T29284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2763.413608][T10369] usb 2-1: USB disconnect, device number 49 [ 2763.707621][T29303] netlink: 'syz.3.5005': attribute type 1 has an invalid length. [ 2763.718691][T29303] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 11806 out of range (51000000..2150000000) [ 2763.865787][T24456] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2763.881114][T24456] ath9k_htc: Failed to initialize the device [ 2763.899085][T10369] usb 2-1: ath9k_htc: USB layer deinitialized [ 2764.195795][T29309] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 2764.231618][T29308] input: syz1 as /devices/virtual/input/input192 [ 2764.402752][T10369] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 2764.567432][T10369] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2764.596136][T10369] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2764.626276][T10369] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2764.651699][T10369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2764.692742][T10369] usb 2-1: config 0 descriptor?? [ 2764.702049][T10369] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2764.716119][T10369] dvb-usb: bulk message failed: -22 (3/0) [ 2764.727257][T10369] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2764.748328][T10369] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2764.756958][T10369] usb 2-1: media controller created [ 2764.763499][T10369] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2764.786462][T10369] dvb-usb: bulk message failed: -22 (6/0) [ 2764.792903][T10369] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2764.805283][T10369] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input193 [ 2764.840186][T10369] dvb-usb: schedule remote query interval to 150 msecs. [ 2764.847624][T10369] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2764.938944][T29311] dvb-usb: bulk message failed: -22 (2/0) [ 2765.004746][T10369] dvb-usb: bulk message failed: -22 (1/0) [ 2765.012356][T10369] dvb-usb: error while querying for an remote control event. [ 2765.184920][T10369] dvb-usb: bulk message failed: -22 (1/0) [ 2765.190827][T10369] dvb-usb: error while querying for an remote control event. [ 2765.244319][T24456] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 2765.364274][T10369] dvb-usb: bulk message failed: -22 (1/0) [ 2765.370106][T10369] dvb-usb: error while querying for an remote control event. [ 2765.404349][T24456] usb 7-1: Using ep0 maxpacket: 32 [ 2765.411254][T24456] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2765.420764][T24456] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2765.433194][T24456] usb 7-1: config 0 descriptor?? [ 2765.447275][T24456] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2765.475787][T25174] usb 2-1: USB disconnect, device number 50 [ 2765.540483][T25174] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2766.244472][T10369] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2766.424600][T10369] usb 2-1: Using ep0 maxpacket: 8 [ 2766.442164][T10369] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2766.455531][T10369] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2766.476755][T10369] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2766.496485][T10369] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 2766.514620][T10369] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 2766.558045][T10369] usb 2-1: Product: syz [ 2766.601247][T10369] usb 2-1: Manufacturer: syz [ 2766.626894][T10369] usb 2-1: SerialNumber: syz [ 2766.641459][T10369] usb 2-1: config 0 descriptor?? [ 2766.765669][T24456] gspca_vc032x: reg_w err -110 [ 2766.772012][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2766.793492][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2766.826474][T29340] kvm: emulating exchange as write [ 2766.828693][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2766.849633][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2766.864311][T10369] rc_core: IR keymap rc-imon-rsc not found [ 2766.870843][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2766.886419][T10369] Registered IR keymap rc-empty [ 2766.903824][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2766.912809][T10369] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2766.944705][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2766.961823][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2766.976114][T10369] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input194 [ 2766.995381][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2767.014604][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2767.032346][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2767.043387][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2767.050336][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2767.056981][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2767.064825][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2767.071088][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2767.077863][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2767.085314][T24456] gspca_vc032x: I2c Bus Busy Wait 00 [ 2767.093354][T24456] gspca_vc032x: Unknown sensor... [ 2767.104974][T24456] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 2767.137587][T24456] usb 7-1: USB disconnect, device number 117 [ 2767.380838][T29340] bridge0: port 2(bridge_slave_1) entered disabled state [ 2767.388403][T29340] bridge0: port 1(bridge_slave_0) entered disabled state [ 2767.823807][T29340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2767.849569][T29340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2768.076355][T13750] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2768.090069][T13750] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2768.102998][T13750] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2768.120830][T13750] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2768.147081][T29335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5012'. [ 2768.433260][T29350] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5014'. [ 2768.865938][T13789] usb 2-1: USB disconnect, device number 51 [ 2769.191277][T29354] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 2769.494853][T13789] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2769.655783][T13789] usb 2-1: Using ep0 maxpacket: 8 [ 2769.669546][T13789] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2769.700209][T13789] usb 2-1: config 0 has no interfaces? [ 2769.707277][T13789] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2769.716583][T13789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2769.731222][T13789] usb 2-1: config 0 descriptor?? [ 2769.738677][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 2769.738704][ T30] audit: type=1326 audit(1783177166.288:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29356 comm="syz.7.5016" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 2769.793698][ T30] audit: type=1326 audit(1783177166.308:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29356 comm="syz.7.5016" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 2769.818324][ T30] audit: type=1326 audit(1783177166.308:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29356 comm="syz.7.5016" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 2769.843227][ T30] audit: type=1326 audit(1783177166.308:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29356 comm="syz.7.5016" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 2769.877985][ T30] audit: type=1326 audit(1783177166.308:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29356 comm="syz.7.5016" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 2769.903096][ T30] audit: type=1326 audit(1783177166.308:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29356 comm="syz.7.5016" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 2769.931571][ T30] audit: type=1326 audit(1783177166.308:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29356 comm="syz.7.5016" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 2769.965096][ T30] audit: type=1326 audit(1783177166.308:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29356 comm="syz.7.5016" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 2770.041896][ T30] audit: type=1326 audit(1783177166.308:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29356 comm="syz.7.5016" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 2770.103393][ T30] audit: type=1326 audit(1783177166.308:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29356 comm="syz.7.5016" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 2770.838512][T29363] random: crng reseeded on system resumption [ 2770.882448][T29363] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5019'. [ 2770.969277][T29362] binder: 29360:29362 ioctl c0045005 800002c0 returned -22 [ 2771.630531][T29380] tipc: Enabled bearer , priority 0 [ 2771.642153][T29380] 2: renamed from team_slave_1 (while UP) [ 2771.653627][T29380] tipc: Disabling bearer [ 2771.818430][T29382] syzkaller0: entered promiscuous mode [ 2771.824114][T29382] syzkaller0: entered allmulticast mode [ 2771.882341][T29382] bond4: entered promiscuous mode [ 2771.889009][T29382] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2772.154782][T13787] usb 2-1: USB disconnect, device number 52 [ 2773.298149][T29399] input: syz1 as /devices/virtual/input/input195 [ 2773.306627][T29406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2773.349575][T29406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2773.644407][T29408] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5030'. [ 2774.314303][T24456] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 2774.479223][T24456] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 2774.490672][T24456] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2774.531466][T24456] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2774.576926][T24456] usb 2-1: config 0 descriptor?? [ 2774.610470][T29413] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2774.667313][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.673762][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 2774.954868][T24456] ath6kl: Failed to submit usb control message: -71 [ 2774.962120][T24456] ath6kl: unable to send the bmi data to the device: -71 [ 2774.977622][T24456] ath6kl: Unable to send get target info: -71 [ 2775.124007][T24456] ath6kl: Failed to init ath6kl core: -71 [ 2775.161944][T24456] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2775.224098][T24456] usb 2-1: USB disconnect, device number 53 [ 2776.167733][T29437] netlink: 'syz.6.5037': attribute type 10 has an invalid length. [ 2776.181647][T29437] bond0: (slave netdevsim1): Releasing backup interface [ 2776.209580][T29437] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2776.236503][T29437] team0: Port device netdevsim1 added [ 2776.242337][T29439] netlink: 'syz.6.5037': attribute type 10 has an invalid length. [ 2776.258809][T29439] team0: Port device netdevsim1 removed [ 2776.271013][T29439] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2776.285386][T29439] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 2776.362765][T29437] netlink: 100 bytes leftover after parsing attributes in process `syz.6.5037'. [ 2776.575775][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 2776.575790][ T30] audit: type=1326 audit(1783177173.118:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29440 comm="syz.3.5039" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2776.619700][ T30] audit: type=1326 audit(1783177173.158:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29440 comm="syz.3.5039" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2776.651121][ T30] audit: type=1326 audit(1783177173.158:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29440 comm="syz.3.5039" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2776.679034][ T30] audit: type=1326 audit(1783177173.158:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29440 comm="syz.3.5039" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2776.708990][ T30] audit: type=1326 audit(1783177173.158:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29440 comm="syz.3.5039" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2776.736916][ T30] audit: type=1326 audit(1783177173.158:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29440 comm="syz.3.5039" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2776.763818][ T30] audit: type=1326 audit(1783177173.158:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29440 comm="syz.3.5039" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2776.789917][ T30] audit: type=1326 audit(1783177173.158:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29440 comm="syz.3.5039" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2776.834100][ T30] audit: type=1326 audit(1783177173.158:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29440 comm="syz.3.5039" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2776.935857][ T30] audit: type=1326 audit(1783177173.158:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29440 comm="syz.3.5039" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa90ec code=0x7ffc0000 [ 2777.083504][T29448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5040'. [ 2777.534256][T24456] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2777.684717][T24456] usb 2-1: Using ep0 maxpacket: 8 [ 2777.691656][T24456] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2777.703832][T24456] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2777.720309][T24456] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 24608, setting to 1024 [ 2777.743212][T24456] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2777.753809][T24456] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2777.767563][T24456] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2777.779180][T24456] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2777.916213][T29459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2777.927880][T29459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2778.006881][T24456] usb 2-1: GET_CAPABILITIES returned 0 [ 2778.080866][T24456] usbtmc 2-1:16.0: can't read capabilities [ 2778.099979][T29464] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5047'. [ 2778.251343][T29466] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 2778.262177][T29466] PKCS7: Only support pkcs7_signedData type [ 2778.500736][T24456] usb 2-1: USB disconnect, device number 54 [ 2779.868429][T29475] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2780.054276][T24456] usb 7-1: new full-speed USB device number 118 using dummy_hcd [ 2780.074241][T13787] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2780.216378][T24456] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 2780.232875][T24456] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2780.234369][T13787] usb 2-1: Using ep0 maxpacket: 32 [ 2780.249131][T24456] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2780.260859][T24456] usb 7-1: config 0 descriptor?? [ 2780.277647][T29479] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2780.294447][T13787] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2780.313770][T13787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2780.335835][T13787] usb 2-1: config 0 descriptor?? [ 2780.360605][T13787] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2780.639754][T24456] ath6kl: Failed to submit usb control message: -71 [ 2780.659727][T24456] ath6kl: unable to send the bmi data to the device: -71 [ 2780.691099][T24456] ath6kl: Unable to send get target info: -71 [ 2780.740184][T24456] ath6kl: Failed to init ath6kl core: -71 [ 2780.753021][T24456] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2780.774743][T24456] usb 7-1: USB disconnect, device number 118 [ 2781.667054][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 2781.667070][ T30] audit: type=1326 audit(1783177178.158:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29499 comm="syz.4.5054" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f580ec code=0x7ffc0000 [ 2781.704715][T13787] gspca_vc032x: reg_w err -110 [ 2781.711113][ T31] INFO: task kworker/1:6:14119 blocked for more than 143 seconds. [ 2781.728964][ T31] Tainted: G L syzkaller #0 [ 2781.752709][T13787] gspca_vc032x: I2c Bus Busy Wait 00 [ 2781.765392][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2781.805314][ T30] audit: type=1326 audit(1783177178.338:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29499 comm="syz.4.5054" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f580ec code=0x7ffc0000 [ 2781.831113][T13787] gspca_vc032x: I2c Bus Busy Wait 00 [ 2781.841736][ T31] task:kworker/1:6 state:D stack:20872 pid:14119 tgid:14119 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2781.858492][T13787] gspca_vc032x: I2c Bus Busy Wait 00 [ 2781.864488][T13787] gspca_vc032x: I2c Bus Busy Wait 00 [ 2781.869944][T13787] gspca_vc032x: I2c Bus Busy Wait 00 [ 2781.902127][ T31] Workqueue: usb_hub_wq hub_event [ 2781.918846][ T31] Call Trace: [ 2781.931107][ T31] [ 2781.949603][ T30] audit: type=1326 audit(1783177178.398:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29499 comm="syz.4.5054" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f580ec code=0x7ffc0000 [ 2781.974480][ T31] __schedule+0x17d9/0x56c0 [ 2781.986019][ T31] ? wq_worker_sleeping+0x101/0x250 [ 2781.998275][ T31] ? __pfx___schedule+0x10/0x10 [ 2782.020757][T13787] gspca_vc032x: I2c Bus Busy Wait 00 [ 2782.023384][ T31] ? schedule+0x90/0x2b0 [ 2782.048640][ T31] schedule+0x164/0x2b0 [ 2782.053224][ T30] audit: type=1326 audit(1783177178.458:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29499 comm="syz.4.5054" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf7f580ec code=0x7ffc0000 [ 2782.083929][ T31] schedule_preempt_disabled+0x13/0x30 [ 2782.098505][ T31] __mutex_lock+0x7bf/0x1550 [ 2782.106137][T13787] gspca_vc032x: I2c Bus Busy Wait 00 [ 2782.112941][T13787] gspca_vc032x: I2c Bus Busy Wait 00 [ 2782.132739][T13787] gspca_vc032x: I2c Bus Busy Wait 00 [ 2782.149790][ T31] ? __mutex_lock+0x5d4/0x1550 [ 2782.156372][T13787] gspca_vc032x: I2c Bus Busy Wait 00 [ 2782.173082][ T31] ? hub_event+0x20c9/0x4d30 [ 2782.179321][T13787] gspca_vc032x: I2c Bus Busy Wait 00 [ 2782.211276][T13787] gspca_vc032x: I2c Bus Busy Wait 00 [ 2782.220308][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2782.226313][ T30] audit: type=1326 audit(1783177178.458:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29499 comm="syz.4.5054" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f580ec code=0x7ffc0000 [ 2782.268430][ T31] hub_event+0x20c9/0x4d30 [ 2782.285365][T13787] gspca_vc032x: I2c Bus Busy Wait 00 [ 2782.295175][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 2782.313734][T13787] gspca_vc032x: I2c Bus Busy Wait 00 [ 2782.325461][T13787] gspca_vc032x: I2c Bus Busy Wait 00 [ 2782.347740][ T31] ? register_lock_class+0x31/0x2e0 [ 2782.353009][T13787] gspca_vc032x: I2c Bus Busy Wait 00 [ 2782.353024][T13787] gspca_vc032x: I2c Bus Busy Wait 00 [ 2782.386226][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2782.391732][ T30] audit: type=1326 audit(1783177178.458:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29499 comm="syz.4.5054" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f580ec code=0x7ffc0000 [ 2782.414760][ T31] ? __pfx_hub_event+0x10/0x10 [ 2782.432660][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 2782.463825][ T31] ? rcu_is_watching+0x15/0xb0 [ 2782.472526][T13787] gspca_vc032x: I2c Bus Busy Wait 00 [ 2782.478426][ T30] audit: type=1326 audit(1783177178.528:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29499 comm="syz.4.5054" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7f580ec code=0x7ffc0000 [ 2782.518212][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 2782.532678][T13787] gspca_vc032x: Unknown sensor... [ 2782.550033][T13787] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 2782.563089][ T31] process_scheduled_works+0xa8e/0x14e0 [ 2782.580231][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2782.608026][ T31] ? assign_work+0x3cf/0x5d0 [ 2782.622212][ T31] worker_thread+0xa47/0xfb0 [ 2782.643490][ T31] kthread+0x388/0x470 [ 2782.655287][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2782.663162][ T31] ? __pfx_kthread+0x10/0x10 [ 2782.669161][ T30] audit: type=1326 audit(1783177178.988:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29499 comm="syz.4.5054" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f580ec code=0x7ffc0000 [ 2782.700106][ T31] ret_from_fork+0x514/0xb70 [ 2782.705689][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2782.712928][ T31] ? __switch_to+0xc89/0x1420 [ 2782.742787][ T31] ? __pfx_kthread+0x10/0x10 [ 2782.751794][T29511] ALSA: mixer_oss: invalid OSS volume '' [ 2782.800713][ T31] ret_from_fork_asm+0x1a/0x30 [ 2782.823349][ T31] [ 2782.840793][ T31] [ 2782.840793][ T31] Showing all locks held in the system: [ 2782.864958][ T30] audit: type=1326 audit(1783177178.988:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29499 comm="syz.4.5054" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f580ec code=0x7ffc0000 [ 2782.953310][ T31] 1 lock held by khungtaskd/31: [ 2782.964106][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2782.998751][ T31] 2 locks held by getty/5386: [ 2783.009500][ T31] #0: ffff8880320ac0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2783.025844][T13787] usb 2-1: USB disconnect, device number 55 [ 2783.057504][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 2783.086143][ T31] 2 locks held by kworker/1:5/5707: [ 2783.099431][ T31] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2783.129927][ T31] #1: ffffc90004f4fc40 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2783.143577][ T31] 4 locks held by kworker/0:18/13787: [ 2783.150024][ T31] #0: ffff8880222ab540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2783.164239][ T31] #1: ffffc9000d747c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2783.182429][ T31] #2: ffff888029e1f1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 2783.191658][ T31] #3: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 2783.219878][ T31] 5 locks held by kworker/1:6/14119: [ 2783.241515][ T31] #0: ffff8880222ab540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2783.268913][ T31] #1: ffffc900052f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2783.293461][ T31] #2: ffff88802b3e31d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 2783.320735][ T31] #3: ffff88802b3e0568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 2783.344506][ T31] #4: ffff88802b614f60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 2783.372891][ T31] 5 locks held by kworker/0:1/24169: [ 2783.388640][ T31] #0: ffff8880222ab540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2783.412862][ T31] #1: ffffc90003687c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2783.449206][ T31] #2: ffff88802b4891d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 2783.466142][ T31] #3: ffff88802b48e568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 2783.477162][ T31] #4: ffff88802b614f60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 2783.489097][ T31] 1 lock held by syz.4.5054/29504: [ 2783.501962][ T31] [ 2783.508484][ T31] ============================================= [ 2783.508484][ T31] [ 2783.517364][ T31] NMI backtrace for cpu 0 [ 2783.517377][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2783.517396][ T31] Tainted: [L]=SOFTLOCKUP [ 2783.517401][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2783.517409][ T31] Call Trace: [ 2783.517415][ T31] [ 2783.517420][ T31] dump_stack_lvl+0xe8/0x150 [ 2783.517444][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 2783.517518][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2783.517540][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 2783.517557][ T31] sys_info+0x135/0x170 [ 2783.517570][ T31] watchdog+0xfd7/0x1030 [ 2783.517591][ T31] ? watchdog+0x1c7/0x1030 [ 2783.517611][ T31] kthread+0x388/0x470 [ 2783.517630][ T31] ? __pfx_watchdog+0x10/0x10 [ 2783.517644][ T31] ? __pfx_kthread+0x10/0x10 [ 2783.517663][ T31] ret_from_fork+0x514/0xb70 [ 2783.517684][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2783.517703][ T31] ? __switch_to+0xc89/0x1420 [ 2783.517721][ T31] ? __pfx_kthread+0x10/0x10 [ 2783.517743][ T31] ret_from_fork_asm+0x1a/0x30 [ 2783.517765][ T31] [ 2783.517770][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2783.638951][ C1] NMI backtrace for cpu 1 [ 2783.638967][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2783.638989][ C1] Tainted: [L]=SOFTLOCKUP [ 2783.638995][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2783.639005][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2783.639031][ C1] Code: dc 80 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 ca 1a 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 2783.639045][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000242 [ 2783.639060][ C1] RAX: 000000000be2470d RBX: ffffffff819ab3f0 RCX: 0000000080000001 [ 2783.639072][ C1] RDX: 0000000000000001 RSI: ffffffff8e229c33 RDI: ffffffff8c4bd380 [ 2783.639084][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 2783.639096][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 2783.639108][ C1] R13: 1ffff11003bdf000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 2783.639120][ C1] FS: 0000000000000000(0000) GS:ffff888125059000(0000) knlGS:0000000000000000 [ 2783.639133][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2783.639144][ C1] CR2: 0000000080202018 CR3: 000000007bec0000 CR4: 00000000003526f0 [ 2783.639159][ C1] Call Trace: [ 2783.639165][ C1] [ 2783.639171][ C1] default_idle+0x9/0x20 [ 2783.639194][ C1] default_idle_call+0x72/0xb0 [ 2783.639218][ C1] do_idle+0x2e0/0x540 [ 2783.639240][ C1] ? __pfx_do_idle+0x10/0x10 [ 2783.639265][ C1] cpu_startup_entry+0x43/0x60 [ 2783.639286][ C1] start_secondary+0x101/0x110 [ 2783.639308][ C1] common_startup_64+0x13e/0x157 [ 2783.639334][ C1] [ 2783.822129][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2783.829012][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2783.839718][ T31] Tainted: [L]=SOFTLOCKUP [ 2783.844038][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2783.854105][ T31] Call Trace: [ 2783.857400][ T31] [ 2783.860334][ T31] vpanic+0x56c/0xa60 [ 2783.864338][ T31] ? __pfx___schedule+0x10/0x10 [ 2783.869242][ T31] ? __pfx_vpanic+0x10/0x10 [ 2783.873778][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 2783.879953][ T31] panic+0xc5/0xd0 [ 2783.883701][ T31] ? __pfx_panic+0x10/0x10 [ 2783.888142][ T31] ? preempt_schedule_common+0x82/0xd0 [ 2783.893616][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 2783.898992][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 2783.905166][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 2783.911346][ T31] watchdog+0x1030/0x1030 [ 2783.915690][ T31] ? watchdog+0x1c7/0x1030 [ 2783.920141][ T31] kthread+0x388/0x470 [ 2783.924248][ T31] ? __pfx_watchdog+0x10/0x10 [ 2783.928935][ T31] ? __pfx_kthread+0x10/0x10 [ 2783.933549][ T31] ret_from_fork+0x514/0xb70 [ 2783.938163][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2783.943305][ T31] ? __switch_to+0xc89/0x1420 [ 2783.948003][ T31] ? __pfx_kthread+0x10/0x10 [ 2783.952607][ T31] ret_from_fork_asm+0x1a/0x30 [ 2783.957383][ T31] [ 2783.961002][ T31] Kernel Offset: disabled [ 2783.965330][ T31] Rebooting in 86400 seconds..