last executing test programs: 8m48.314539608s ago: executing program 4 (id=198): socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x400340) dup(r2) (async) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0x1) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c26, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180), &(0x7f00000001c0)) (async) r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c26, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0xef92, 0x0, 0x0, 0x0) (async) io_uring_enter(r4, 0x2ded, 0xef92, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$dsp(r8, 0x0, 0xffffffffffffff6d) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) open(0x0, 0x60840, 0x0) (async) r9 = open(0x0, 0x60840, 0x0) fcntl$setsig(r9, 0xa, 0x13) fcntl$setlease(r9, 0x400, 0x0) (async) fcntl$setlease(r9, 0x400, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) rename(0x0, 0x0) (async) rename(0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r10, 0x4b30, 0x8) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d80000001c0081044e81f782db44b9040a1d080214000000020003a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20000080) 8m46.203735009s ago: executing program 4 (id=202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FIOCLEX(r0, 0x5451) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r2 = epoll_create1(0x0) (async) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000010c0), 0x60901, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000001100)={0x2005}) (async) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x1) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x8002}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x1c02}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) (async) ioctl$SNDCTL_TMR_METRONOME(0xffffffffffffffff, 0x40045407) 8m45.671239861s ago: executing program 4 (id=203): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06fe857c3d452cc0aa8f1800fc55150081"], 0x48) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000ffee00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 8m44.827944073s ago: executing program 4 (id=205): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f0000000000)=[{0x32, 0x0, 0x0, 0x4}, {0x2, 0x2, 0x25, 0x8a}]}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x10, 0x0, 0x0, 0xfff, 0x0}) io_uring_enter(r4, 0x7277, 0x0, 0x28, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r8, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) 8m43.708095402s ago: executing program 4 (id=208): io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x2, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x20004800) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) recvmmsg(r2, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)=""/205, 0xcd}], 0x1}, 0x80000000}], 0x2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105518, &(0x7f0000000040)={{0x9, 0x0, 0x2, 0x0, 'syz1\x00'}, 0x1, [0x18000, 0xfffffffffffffffc, 0x0, 0x2, 0x8000000000000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x9, 0x4, 0x8, 0x0, 0x0, 0x7, 0x100000001, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xd, 0x0, 0x2, 0xfffffffffffffffe, 0x8, 0xfffffffffffffffe, 0x0, 0x9, 0x4, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x1a, 0x5, 0x40000000000003, 0x1000, 0x4000000000002, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x7ff, 0x4, 0x100000000000, 0x3, 0x0, 0x0, 0x0, 0x38d, 0x0, 0x0, 0x4010000000000, 0x0, 0x2, 0x0, 0xfffffffffffffffc, 0x8000, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x3a98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x200400, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000580)=0x7b7) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000020105000000a7187705a75dd671"], 0x14}, 0x1, 0x0, 0x0, 0x20040845}, 0x40040) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r7, 0x0, 0x80, 0x5, 0x1, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r7, r8], 0x2}) syz_emit_ethernet(0x76, &(0x7f0000001440)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000030000403a00fc000000000000000000000000000000ff0200000000000000000000000000010402907800000000604aa19800003c0000000000000000000000ffff0000000000000000000000000000ffffac1414aa2f0004000400000000000000ffffffff65f330aa2f7e034a7a7e723d082fed"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 8m42.882170607s ago: executing program 4 (id=210): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xd, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x7, 0x7f}}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000600000000000000048b84b000000000000000f23c00f21f83503000789000f23f8b9a00d00000f320f"], 0x60}) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000005e00000000000000b9800000c00fb00c7e3636bda03235004000000f300f222566baf80cb82f4a1880ef66bafc0cecc4e23d3b8281143a3d420f07b8010000000f01c1f20f22e666b853008ed8"], 0x5e}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000d00000000000020040000000a"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0xc, 0x7, 0x0, 0x4000000000180, 0x5, 0x10, 0xf1, 0xffffffffffff18c4, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x3, 0xbdb], 0x1, 0x3c4210}) (async) r3 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000003, 0x0, {0xfffe}}) (async) io_uring_enter(r3, 0x5d62, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m41.944019246s ago: executing program 32 (id=210): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xd, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x7, 0x7f}}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000600000000000000048b84b000000000000000f23c00f21f83503000789000f23f8b9a00d00000f320f"], 0x60}) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000005e00000000000000b9800000c00fb00c7e3636bda03235004000000f300f222566baf80cb82f4a1880ef66bafc0cecc4e23d3b8281143a3d420f07b8010000000f01c1f20f22e666b853008ed8"], 0x5e}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000d00000000000020040000000a"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0xc, 0x7, 0x0, 0x4000000000180, 0x5, 0x10, 0xf1, 0xffffffffffff18c4, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x3, 0xbdb], 0x1, 0x3c4210}) (async) r3 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000003, 0x0, {0xfffe}}) (async) io_uring_enter(r3, 0x5d62, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m20.980490544s ago: executing program 3 (id=593): syz_usb_connect$cdc_ecm(0x0, 0x62, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@dmm={0x7, 0x24, 0x14, 0x107f, 0xfffa}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x64}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xcd, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x81, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x1, 0x1, 0x3, 0x60, 0x1, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x4, 0x7f, 0x7}, [@mdlm={0x15, 0x24, 0x12, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x4f, 0x7, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x51, 0x3, 0x9, 0x9, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x8001, 0x0, 0x11, 0x6, 0x0, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xee, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xf, 0x8, 0x4}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x7, 0x42, 0xf8, 0xff, 0x5}, 0x3d, &(0x7f0000000180)={0x5, 0xf, 0x3d, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1, 0x7, 0x6}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x6d48, 0x0, 0x4a54, [0xff3f, 0xff0000, 0x3f00, 0xc0c0, 0xff0000]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x21, 0x3, 0x6, 0x9, 0x2}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x81d}}, {0xff, &(0x7f0000000200)=@string={0xff, 0x3, "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"}}, {0x50, &(0x7f0000000300)=@string={0x50, 0x3, "cbd26260e4292e7f5b6c0fd7cf900310d17a7005c4b1d4f3a29ae4555e160e7c23acf0a59b5ced6c056831cce5e8568238c1e1295245caa6950d20602e382500dd4f62710360dcde7f43926da9ee"}}, {0x6e, &(0x7f0000000380)=@string={0x6e, 0x3, "c7f052e97a60cc9f0af9d251e30e35e6faea4ebe84f782a87b6b67da6c4784c07db425dccbae43a610888d12e31a8c97534e5e52920c9623a04ada040a4ac234bea7b5270ae6e3f028724c67b19df3c0bd34e36c13cf030c8ee72b5138a3198b8389143297b2f644af2a790c"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x280a}}, {0x62, &(0x7f0000000440)=@string={0x62, 0x3, "450910a94415f1733b4669587978450ac78ac8418c3306f8f67ac2ff4d406efeb048b0f2f7fdd81c4c92901cf57edccad0d3d9c64bf56878a1a5eb5a2d6144417dc7af58917afe1493a51206128e6e2e45e8ce58ac77e9b7ac680747ab14e165"}}, {0x97, &(0x7f00000004c0)=@string={0x97, 0x3, "1eea9b5bc1f4e381397832057ccc2a5027edeee0a2076311abeb3077c06321c601da0b1b15baec14be00c04bbfae5cdec82991b46a425e610cd6d263813e84dfe96f1d5e7e2bdf3cec182f471a1a2bd12516b30a3b898da8cea997258d2490875df061d436dcde51823a41e25160360a51dee4389e7a3849a8a09a6a1af6f98fce5ace2b39c2d70f70e4fa20bce8566d9322c879d2"}}]}) 6m19.200038679s ago: executing program 3 (id=601): socket$xdp(0x2c, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2000000000000009, 0x8, 0x0, 0x4}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$ttynull(0xffffff9c, &(0x7f0000000980), 0x200, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r5], 0x50}, 0x1, 0xba01}, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r6, 0x0, 0x800, 0x8, &(0x7f0000000480)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x78}, 0x94) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ftruncate(0xffffffffffffffff, 0xffff) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x191c) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0x0, 0x0, 0x5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200c00800000018240000", @ANYRES32=r7, @ANYBLOB="0000000002000000b703000008000000850000006a00000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 6m17.032103743s ago: executing program 3 (id=607): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000180)={0x18, r2, 0x1, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}]}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000280)={0x18, r2}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, 0x0, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000003c0)={0x18, r2}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r2, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLL', 0x15, 0x2}) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f0000000500)={0x18, 0x0, 0x3, 0x1c}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r3, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000580)={0x18, r2}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r2}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x1, r2, 0x0, 0x1000, 0x3}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000007c0)={0x22, 0x7, r2, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x1004000}) 6m15.401123359s ago: executing program 3 (id=609): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x48, 0x0, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @local, 0x3ff}, 0x1c) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x10) close(r2) r4 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r10, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) 6m11.903959598s ago: executing program 3 (id=619): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[], 0x3c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(r0, &(0x7f0000000100)=0xd5ee, r1, 0x0, 0x8008, 0x4) openat(r1, &(0x7f0000000240)='./file0\x00', 0x505000, 0x40) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='memory.swap.max\x00', 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000340)={0x18, 0x51, 0x5, 0xfff, 0x5, 0x0, [{0x7, 0x7fffffff, 0xa4}, {0x66a, 0x40, 0x1}, {0xfffffffffffffffc, 0x0, 0x7, '\x00', 0x3}, {0x7, 0x81, 0x4c, '\x00', 0x408}, {0xfffffffffffffffb, 0x8, 0xfffffffffffffff9, '\x00', 0x1}]}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x92, @time={0x2000, 0x1000000}, 0x0, {}, 0x0, 0x0, 0x6}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid8\xc4e', 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x121100, 0x0) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40103d0b, &(0x7f00000000c0)={0x9}) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r9, 0x4008ae93, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 6m11.545134704s ago: executing program 3 (id=621): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x5f, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02"], 0x33fe0}}, 0x40010) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r3, &(0x7f00000001c0)=ANY=[@ANYRES32=r3], 0xa) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x10, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="3e12", 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r7, r8}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000180)=[@increfs_done], 0x4, 0x0, &(0x7f0000000240)="2294a696"}) r9 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',r00000000000er_id=\x00\x00\x00\x00\x00\x00\x00\x00~', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB=',obj_user=/dev/cec#\x00,mask=MAY_READ,fsuuid=a1]99720-ad6a-feS9-707d-744\x000f13,audit,\x00'], 0x1, 0x0, &(0x7f0000000380)="1503f47fcee8af5def8b900588653365fe9bef5529b7edb0d930d7b95f5a8b1812a532648a000f6dae612f70ab4449a944b8a2b7013c68d5a1ef8ae00fa0a3ea6bc3535c54ca942ec52db3d606e6eff38780ae28ea16ff34e775dc1508e3013f38de584f21de10dd9f6d71029e897fd4bcd21c44c2aa7f3587601a0c13846ffdf368d6ede017d83e5f81757daf700c2cb5bf53c4229d758b5cf0d8ac2211780d504ff1eccb2d2adbd076a446ee46881113265a38e6c1c42840ea4688667a0c9191f3b794ffd2b717288c155b81f5fb58f8048df014dbdff73b107e0febf4833e73ccb9df8acb0f090c5203038d32a09e6857216028beeae59e") mkdirat(r9, &(0x7f0000000480)='./file0\x00', 0x1d9) r10 = fcntl$getown(r1, 0x9) sched_getattr(r10, &(0x7f00000004c0)={0x38}, 0x38, 0x0) unshare(0x24020400) 6m11.216190032s ago: executing program 33 (id=621): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x5f, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02"], 0x33fe0}}, 0x40010) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r3, &(0x7f00000001c0)=ANY=[@ANYRES32=r3], 0xa) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x10, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="3e12", 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r7, r8}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000180)=[@increfs_done], 0x4, 0x0, &(0x7f0000000240)="2294a696"}) r9 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',r00000000000er_id=\x00\x00\x00\x00\x00\x00\x00\x00~', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB=',obj_user=/dev/cec#\x00,mask=MAY_READ,fsuuid=a1]99720-ad6a-feS9-707d-744\x000f13,audit,\x00'], 0x1, 0x0, &(0x7f0000000380)="1503f47fcee8af5def8b900588653365fe9bef5529b7edb0d930d7b95f5a8b1812a532648a000f6dae612f70ab4449a944b8a2b7013c68d5a1ef8ae00fa0a3ea6bc3535c54ca942ec52db3d606e6eff38780ae28ea16ff34e775dc1508e3013f38de584f21de10dd9f6d71029e897fd4bcd21c44c2aa7f3587601a0c13846ffdf368d6ede017d83e5f81757daf700c2cb5bf53c4229d758b5cf0d8ac2211780d504ff1eccb2d2adbd076a446ee46881113265a38e6c1c42840ea4688667a0c9191f3b794ffd2b717288c155b81f5fb58f8048df014dbdff73b107e0febf4833e73ccb9df8acb0f090c5203038d32a09e6857216028beeae59e") mkdirat(r9, &(0x7f0000000480)='./file0\x00', 0x1d9) r10 = fcntl$getown(r1, 0x9) sched_getattr(r10, &(0x7f00000004c0)={0x38}, 0x38, 0x0) unshare(0x24020400) 2m32.363984788s ago: executing program 2 (id=1323): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) r1 = socket(0x7, 0x80805, 0x1000004) sendmmsg$inet_sctp(r1, &(0x7f0000001a40), 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r2, 0x0, 0x0, 0x12000, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x47d}) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={r4}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r7, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], 0x14, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r7, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x0, 0x1, 0x5}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x500f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0xc6, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x71, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000240)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201207000004070db98265cc32"], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = socket(0x10, 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42410}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x44}}, 0x0) 2m28.041526036s ago: executing program 2 (id=1337): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) socket(0x1d, 0x2, 0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3300000010001fff0000000001000000000000d7", @ANYRESOCT=r5, @ANYRESHEX, @ANYRES64=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x81) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r10], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=@setlink={0x70, 0x13, 0x2, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}, @IFLA_LINK={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7f}, @IFLA_PHYS_SWITCH_ID={0x8, 0x24, "7253c43d"}]}, 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r12, @ANYBLOB="200c34b7", @ANYRES32=r12, @ANYBLOB], 0x4c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r4, 0x0) 2m25.499395048s ago: executing program 2 (id=1345): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000ff00000000000000000000080098d4e6d4dde10000312ad170706bbe8ac14da954ed00", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x50) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f0000000200), 0x0, 0x40004000, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0xa000000) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000400)=0x9, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r2, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x3}}) (async) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x601) ioctl$SG_IO(r4, 0x2285, &(0x7f0000001880)={0x53, 0xffffffffffffffff, 0x6, 0xf7, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000300)="3c45c52f244e", 0x0, 0xff, 0x10016, 0x3, 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) (async) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000080", @ANYRES16=r5, @ANYRESOCT=r2, @ANYRES32=r7, @ANYRES16=r7], 0x3c}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) openat$userfaultfd(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x101241, 0x0) (async) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000200)={0x2, 0xb10}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xa) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffffe}]}) get_mempolicy(0x0, 0x0, 0x8, &(0x7f00005c6000/0x1000)=nil, 0x2) 2m25.044370073s ago: executing program 2 (id=1346): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@rand_addr, @remote, 0x0}, &(0x7f00000003c0)=0xc) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f000000a3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x150, 0x0, 0xffffffffffffffff, [{{0x6, 0x3, 0x4, 0xfffffffffffffff8, 0x4, 0xffffffff, {0x2, 0x7, 0x0, 0x8e44, 0x1, 0x8000000000000000, 0x800, 0xe, 0x1, 0xa000, 0xa3f, r5, r6, 0x1, 0xd}}, {0x5, 0x7, 0x1, 0x5b98, '\\'}}, {{0x2, 0x2, 0x7, 0x96a, 0x80000001, 0x0, {0x5, 0x5, 0x1, 0x80, 0x9, 0x26ef, 0x1000, 0xc, 0x18000000, 0xd000, 0x9, r5, 0x0, 0x9, 0x80}}, {0x1, 0xac4, 0x2, 0x2, '..'}}]}, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000900)=@acquire={0x52c, 0x17, 0x300, 0x70bd29, 0x25dfdbfc, {{@in=@private=0xa010100, 0x4d5, 0x3c}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {@in=@private=0xa010100, @in=@empty, 0x4e21, 0x6, 0x4e22, 0x0, 0x2, 0x80, 0x20, 0x6, r1, r2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, @in=@private=0xa010102, 0x4e20, 0x4, 0x8, 0x63, 0x4, 0xa0, 0x0, 0x0, 0x0, r5}, {0x2de63579, 0x9, 0x3, 0xc76b, 0x80000000000, 0x1, 0x5, 0x5}, {0xffff, 0xcf, 0x7}, 0x1d2b, 0x6e6bba, 0x2, 0x1, 0x3a0021afbe15f066, 0x3}, 0x3, 0x5, 0x200, 0x70bd26}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_auth={0x13d, 0x1, {{'digest_null\x00'}, 0x7a8, "ed47ef8d25a07da5b913d8349165607c3ce3a5ad8dec682247d4ff352aaf46c2f5c79a66bc44ca479d405505cb8b1866f6633872a6c232e0f857242337ba3e87417542b8298d7a7e2525253670c65d1fb8fcb2db9c1d2ea8ebdd2bd8d195b6411954f99438bd11cf8a96ea2f35a7837c24c795d3ee976e5fc91702b04b1f490ccd7f5c7cace815955ef68b5168c761c2f6f63a5692f217bdf10ad31803149e12c66967a4e03c725885955e551ec78abfc3f864138b1c6f7049e18309187bd9f5ae9867e35dfc2e448742d67771fe7f9b57ccd4cfa27452db0b4c579fd69c3016ecfaa5c26c259b3e70ccf420726f93db7b1afe2a23"}}, @tfcpad={0x8, 0x16, 0x38}, @replay_val={0x10, 0xa, {0x70bd2c, 0x70bd2a, 0x42076de7}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @extra_flags={0x8, 0x18, 0x9}, @lastused={0xc, 0xf, 0x9}, @migrate={0x180, 0x11, [{@in=@rand_addr=0x64010102, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast2, @in=@rand_addr=0x64010101, 0x0, 0x4, 0x0, 0x0, 0xa, 0x2}, {@in=@multicast1, @in=@rand_addr=0x64010102, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@mcast1, 0x32, 0x2, 0x0, 0x3505, 0x2, 0x8}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@private=0xa010102, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast, 0x2b, 0x2, 0x0, 0x3501, 0xa, 0x2}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@loopback, @in=@local, @in6=@empty, 0x8c, 0x2, 0x0, 0x0, 0x2, 0x8}, {@in=@rand_addr=0x64010100, @in6=@mcast2, @in=@loopback, @in=@multicast2, 0x3c, 0x1, 0x0, 0x0, 0xa, 0xa}]}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x10000}, @algo_crypt={0xff, 0x2, {{'ctr-aes-neonbs\x00'}, 0x5b8, "bf861c9f98b14eba5a1b1e09cdbaade565a5ed427f59b3939ac665ad2bc44be674bef618745717c15d8e02b5b6b7eae2fb3b70ce705584137bc8e17881fd6e1897b98b2194e115f3e5121cccbe66383ed301dba166d2bea5d6e4f6b416da0cb2ba3a9a6ff87f0f705258f4db478d432a7c7c29b45f3db6df28efca53b6563f289d177a0f0211d581e74e557b25174e465c70ea157f56e103e0ce2dd902e6cb927984542fe6cf2a665f769478756768752c80ffda8b09ac"}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000006c0)={[{0x3, 0x3, 0x0, 0x3, 0x2b, 0x78, 0x0, 0x1, 0x1, 0x9f, 0x6, 0x5, 0xfffffffffffffff9}, {0x7, 0x81, 0x0, 0x6, 0x5, 0x8f, 0x1, 0x6, 0x3, 0x6, 0xe, 0x8, 0x1ff}, {0x0, 0x10, 0x4, 0x8, 0x1, 0x7, 0x8, 0x40, 0x5, 0x0, 0xf, 0x8, 0x8}], 0x67468271}) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r9, 0xc0cc5615, &(0x7f0000000200)={0xc, @raw_data="5343ff1f26224c1404139184ee69c2b603910e0a01c9fa57af6252efd4e38d0370a3e94ebf8d4956e8d6822e008a80c5b8da69b399d4342b4d4ee15958ae1fedb4f5f83e7e99671fa5d90e29638450a9bf88c0852fb8dd4960b23c03f47535dd72d73b4d08716e4f895dac9a63b59249552b8b3a7ad71859039534860de6b899fa948981be13a7cdb731c4ff52eb5ad77e7f03859837faf1bece55080408ae902f9fca706044ccde3701478142c0080ad956521a3e33b365ace72128283a91b85c0f3dea9a836d08"}) sendfile(r8, r7, 0x0, 0x7fffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$hidraw(&(0x7f0000000680), 0x1000, 0x80) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_pressure(r12, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r13, &(0x7f0000000340)={'full', 0x20, 0x0, 0x20, 0xffffc}, 0x2f) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) preadv(r7, &(0x7f0000002e00)=[{&(0x7f0000000480)=""/132, 0x84}], 0x1, 0x372, 0x0) r14 = syz_io_uring_setup(0x2597, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x80000a, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS2(r14, 0xf, &(0x7f00000004c0)={0x0, 0x1, 0x0, 0x0, 0x0}, 0x20) 2m24.847880729s ago: executing program 2 (id=1347): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) r5 = dup(r2) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000240)={r4, 0xcdae, 0x9, 0x3, 0x8, 0x8, 0x3, 0x3, {r4, @in={{0x2, 0x4e21, @remote}}, 0xbeb9, 0x836, 0x8, 0x80, 0x7}}, &(0x7f0000000000)=0xb0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x15, &(0x7f00000000c0)={&(0x7f00000002c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xffffffffffffffe2, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0xd, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x0, 0xffff, 0x52424752, 0x0, 0x0, 0x4, 0xb}}) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r10) 2m24.435828972s ago: executing program 2 (id=1350): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x4, 0x0, 0xc}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x11, {{0x29, 0x0, 0x5000000, @local}}}, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x82000, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES16=r3, @ANYBLOB="010326bd6000"], 0x20}, 0x1, 0x0, 0x0, 0x40954}, 0x20040814) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60110000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009089416060000000000000074d67f6f5d6b26462f25a4d1c2e446b727f3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x4000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYRES32=r2, @ANYBLOB="2ee206330c6a2e22f08ae98cb7439dd5d1da7b675fc58615195c359fadfabd20b0fa08c0b5415133f11ab8db4cfeedec2745e81bc03892be8a3f4ff41bcbd6cc4087b2d0623db07a80931df127fe022192bdb9c28ba9c1c7c1432b6d78ffa20762e0114eea2c44e76544a168c67a0f39946efd4d1886f27e74b4cfe30e755f6f", @ANYRESHEX=r4], 0x20}, 0x1, 0x0, 0x0, 0x489c0}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x58}}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@fallback, 0xa, 0x1, 0xffffffff, &(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0xffff1000, 0xf000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x10000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0xf000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x4000, 0x10000, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x80a0000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4}, {0x0, 0xeeee8000, 0x10, 0x82, 0x0, 0x0, 0x4, 0xe, 0x0, 0x0, 0x4}, {0x6000}, {0x1, 0xffff}, 0x60000010, 0x0, 0xf000, 0x0, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x5]}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) 2m23.756316361s ago: executing program 34 (id=1350): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x4, 0x0, 0xc}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x11, {{0x29, 0x0, 0x5000000, @local}}}, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x82000, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES16=r3, @ANYBLOB="010326bd6000"], 0x20}, 0x1, 0x0, 0x0, 0x40954}, 0x20040814) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60110000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009089416060000000000000074d67f6f5d6b26462f25a4d1c2e446b727f3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x4000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYRES32=r2, @ANYBLOB="2ee206330c6a2e22f08ae98cb7439dd5d1da7b675fc58615195c359fadfabd20b0fa08c0b5415133f11ab8db4cfeedec2745e81bc03892be8a3f4ff41bcbd6cc4087b2d0623db07a80931df127fe022192bdb9c28ba9c1c7c1432b6d78ffa20762e0114eea2c44e76544a168c67a0f39946efd4d1886f27e74b4cfe30e755f6f", @ANYRESHEX=r4], 0x20}, 0x1, 0x0, 0x0, 0x489c0}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x58}}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@fallback, 0xa, 0x1, 0xffffffff, &(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0xffff1000, 0xf000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x10000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0xf000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x4000, 0x10000, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x80a0000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4}, {0x0, 0xeeee8000, 0x10, 0x82, 0x0, 0x0, 0x4, 0xe, 0x0, 0x0, 0x4}, {0x6000}, {0x1, 0xffff}, 0x60000010, 0x0, 0xf000, 0x0, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x5]}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) 11.442945613s ago: executing program 0 (id=1776): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_ethernet(0x46, &(0x7f0000000800)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x10, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x300}}}}}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000040)='overlay\x00', 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000280)='default_permissions', 0x0, r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r8, 0xc02c5625, &(0x7f0000002940)={0x80f0f000, 0x102, "9a555c34c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x0, 0x7fffffffffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, [0x1000]}) sendmsg$nl_xfrm(r7, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0xd01, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xa001, 0x45001}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x70bd27, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) setsockopt$inet_int(r9, 0x0, 0x19, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b"], 0xf8}}, 0x0) 8.859823515s ago: executing program 1 (id=1784): syz_usb_connect(0x7, 0x3d, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0xe2, 0x52, 0x64, 0x20, 0x129b, 0x160c, 0x1bd8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x2, 0x3, 0x40, 0x5, [{{0x9, 0x4, 0x6c, 0x9, 0x0, 0x1, 0x3, 0x65, 0xb3, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "8ed7"}, {0x5, 0x24, 0x0, 0xd571}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x3ff, 0x10}}]}}]}}]}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3]}}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x161, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14f, 0x1, 0x1, 0xac, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x82, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x6, 0x7, 0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0xff, 0x1, 0xff}, @country_functional={0xc, 0x24, 0x7, 0x6, 0x1, [0x0, 0xfff7, 0x2]}, @obex={0x5, 0x24, 0x15, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x3}, @country_functional={0x10, 0x24, 0x7, 0x5, 0x0, [0x101, 0x5, 0x2, 0x1, 0x3]}, @mdlm_detail={0xe7, 0x24, 0x13, 0x6, "4548e44defe5fbeb4ca2d731c488d9518a9f94ce180ab9c2e465d37ff6fa8ebc9d9304519eb877197b98f3b0fd2a59d296496ea9c71ae5b024094fdc067e4cebbc9c0278d93ab0967b4fd9645d751bbb56bdf47ba0737303c613f59d56640a975437edd8b77ed418ea602971a764734440f30c2e212ffb7cfd6ebb60065781bf877efa25c230508f5740753a628fbc53809f904f4e677333c6584b4791ef2f4aaea56ca3c9af665bbce3e037ab2b6362047c96d98f04c89babd5195555802d3260c1ade88c29af96504588e7a977539d9a946d4d814df33fa4bfb6567ebd0316851a4d"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0x4, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xc, 0x2}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x4, 0xe, 0x4, 0xff}, 0x4e, &(0x7f0000000040)={0x5, 0xf, 0x4e, 0x6, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x0, 0x3, 0x889, 0x5}, @generic={0xd, 0x10, 0x2, "246ac8aef407e417e4b7"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x7, 0xcb, 0x0, 0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x9, 0xf, 0x0, [0x0, 0x0, 0xff0000, 0x3fff, 0xcf]}]}, 0x7, [{0xa4, &(0x7f00000002c0)=@string={0xa4, 0x3, "61940ff57a518f12e6480727e9d80d5eb49a08198737d7b9e53eee2b4bdb5ecbad45760a0f87fa4b5746543e7cd7b6a3d55eccdbda962baa454fa1aa5ce9b16e02047cffc7f7d736032be34351d24efa72afc117c85daf33eb8a1c9bdf06256311b221c0029335cffbc4575934e3b7e3d8d9fac2c58c9a8f9149fa9d2f6eb849929b56ecb2f7370943035ca0f8596fd40443458e9c0a9b1c6aed970d3ef3782ed90e"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1809}}, {0xe4, &(0x7f0000000600)=ANY=[@ANYBLOB="e403422959bb959644524a5512c902cb7c6bbd7858ecdc873519f6f9aa2bf31decc84e6851ef0014f65c19fadb6fedd05fc1e0651fb01d0a0ea248e84ce74fb9d67864c4204b0caa612e976e1500686e69dace7e39c0b72e21d43b3bb5bb34f6d4d850e8867fb041e2c50596a53914b5365a9097815c99e936ce466bb015c05b6a99f7aaa0d749b2ca791b96c81e479204a97b814639f459abaa5e8e3d215d9a6666807b5dd0673a13ad94cfcbc78e186b28a37aa0e2698034023c5d9a206ce068eecedb6550bb556fa1f6ef7ff1b6c20e90c7a613b51e24788600"/228]}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x280a}}]}) 7.912506068s ago: executing program 0 (id=1785): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000100", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 7.744216138s ago: executing program 0 (id=1786): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x50, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x40) fcntl$notify(r0, 0x402, 0x8000003d) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f000000a780)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="65ad0727416cd842956134e93a2cd7557e60fc41e2e6a9bd63e9c43d0d46aad198c861f2a65ceba5536c5be1f0fbeaf6db9672b16ec498", 0x37}, {&(0x7f0000000640)="cfd2016b57d85feb6500e0bbf8cd54a60f150d6730a3e0cdf91a119d0b482c06702e209dc9b649748b0d61aa3e08de8b32925e414f7617d4ba489ed4b37aa83c45af95563eb5091076c85c83f3d0377dacdcf763053be936f2f01b2981c29eb3861de92eeccc865f6ad87adefa69f043aaa1009dae9952fd17dacf9e3ec90f08e2bbd83aeb522c1bdf8f64215e94b0398523ab42e12d448e26b3d5600583d861395226cb55312084fc863fe0744f9ebbcede87a2a2a311cf09450a903d8f39215a4a0f96795bc87e0a2c7a9fd1ea700f0e24faeaaf46f9f75e8346af10287574c2e20a3fc25024aa4a1612b3cb5efbd910d3c6a8b9c1f98fbb7f611d9f2b9c4eafe8a83e2399eca7feeafdc58dac89e79ffa6152aaacd106d22c4e8425c25037271a2a454d52834b184a7c2ba45ec816644da160dbad8800e77766cb30dffa6a3ff515fd3cf5b3036ed443840478b3988b19209e656b51f2b248cd0a039fded315e650ea5bd95ee9fc9f4664186371304a9d79d1d67fc3a29a09c1464d18a6a836e6298159d17eae22e6c976d4ff3383ad6494c7413bf0cc6871875bb6b999c16d13289979507be77b4cb67e55e22c27049d6e45ae706db2841ac395994c842b5bde301ed06d630ab550995e1a2b2cd1b638fedc84f8ad790006bdd3a9170d62f75167dd12d3c564beda114b2eedd1fe720fe77093d3dcb3c547e74b2ea23e11d56a3e33d211d173a8a411c8581f3faeea52328c61854632687b312fc63381253843cdd1891059d92e139926c7bb2484206246019accb27f8cfa3125e907478c5371934c317375e9f28dd35171844b564c30f1fff4188b26b5dd98db41ccf2836b8d857877c556b7f29303c6d85745ede9224e818d3ca658030d3d51ad446ae25f6a3b42871ff44fb0fcb3ff4f2ba3d83a952779f770a639f6c1bb7cf07d3b793342bbd27d4b4c6794c5f57b2ced37469e65762ed463866dd897763741f495b244eecc5b1135d0d78afef9beff8a8f2fcc5c7cdeb7236b7be485eed82729330e8c8e73e92eb1148d0864281b6759519285a294480a5662ec18933b17cf074e0b5098db3da1b457d93a05285c9bcd5d0cef5c0ce0d7e3e0dbb8b2354f57914099f9f9e9ace72a03515fe21b021937438f49322e7d188208b85d74c3a94e3d2fe6672ba10951bf76fd969faefd84e4e158601a194d0d2b03316954ab737d0dd2fa3ef46e1499e0c08a10b3a22688cbb3927dcddf302449cc28e440182889298e6d0813679cd31088bfa37f39e1af755ace2f00cb16f00f1fdcc616c7e4de4995e3ce5093646eab74140d3a46c0f4a415c79353e1213dce3dffaf62d0f81a0ac14c2cef4fd207334c830d1efc8e9bb325df50bdbfa2dbd4d86ae04c4446d6a532c615f6ded6b036d18d62aefcc3d75bade0732056b5251f7d7dff90c0ded5011abea5ae3c0d99863edd39ce1290f9fb2e52a8bfdd8aae0e66dbf3fd9bc1a81ff8b9eb207bdd4e3bee962b52104f7a8362f7d2f7d56da595a403581db6c41a27993ae1b1104051dee7c6926fc0f297203ba2f64f9b35dc2e723c447eeadc9fc2f6b7c29e4dec5ede9eacd67b1c0393bcbbbd4d7181d09adf13280642e2685909f0ebd54b9e68407e23fa3c7d67dfe4adaeafcf4e150268869015bad5a522e9f701ae40c34dfc8a66f9126a99683868299fe213bf50877dfad12af1a516878ce727805418cb59e693853092b328a85060f8ab6f7a70dc0ead8b4f904a70a9d30695844a8c0047c1d0238966944b94717a7d6d5c3d6fd547566fc84e1e2aed4013d5e0232ff3d30072871242f40beccc0c47b9241cdc107020f41775af0654848eae7241741aefc07ee6f1d9ecbb9a4b384fc51567fe3300b9b6d31c1a2a3878ae92ef8545e1041fb922ac6880391d1d6bba1fdd76fa1a96b3caff59cd868ff9e52b8b3ad28c3ce93308ac416dda85aafdcfe613ce7f25d03fba565e0bca7394d455b4b7361d68fa9d31730b2144fc9f9d993a1e03c9b7ea4836806f0027b51c149315da715867c1de8327b468d22907ca4f61c85a105a288e976266150de5463b24ded782d4e9683d84e2dd94cc9e524079a44e3348f0a2b2bc6971abdcb1d1dfcd00bfd71644ed966c2fcfc92c1f1f2ed5c58515a3f057e1aceaa02d792ade065d4cbdefa2dd81bb6b7d0295de1f9156da6833055031a23d71367512ec26f78e5974a873eee344bca30136713ea207aa6eff300017f6c498e8c63d1e3392407efe65bbf43dae6ad247198118dd0193258f0610dbfa07249d36213d285f0e1f382a5fcd198393a1d59103ce6b5e7f8b2738d44b185c3a4b500ffcaadd2e82a5a2b6ba068faccd60bed6e5a96f5a45f7f6cb27ac8da4c2fe9ea18990c1e65f2439d77beb2e441a95d10ec9ef30f2bed558b68a6576a63496341bc8a59e4472ecfd81120016466f39c63a6edd8218a0a101f9724f58526ec97c668b25bffd25a7432c4ef0ec9b896ec6adf8e7d88ac05f7f8f9d4fd5d97fcb7eab260474ec151720dd1588d2122e5751f316830866e2547de8710b0d771fd753e55d23181c6b06b9d62e81ff5e36c5286d04e99dbb3d87f039c8ef1950fc91d00c334ca61b11a99d2eb88b3048d8c6e8214f5b89b2a40cbdeb5aa22bca8405da9a9637ac051d156806b23504affb79abaf791549152c1b67f14e7caa2af4b495ec06b3d5bfe30d399a7a4965071cb93142e8e966777abbf567cc2105c3ac871792f2ffd3a7d3f38ae6516d8d92c37c204b090acadf04cade58b5f1e549dbce60d1689775bfeba401e4f15cf2b28f689fe15d357f24ee6fbbe395e07f3c16aef31d9979a8f6ac75f7b6b0a86dc14d0cfaef71ac69bc9dc3417d4b52b9a386d1a4461cf90e8ea7d4f3956a0ea73c9b5d4fa55f8fd79ef4e06782a66f992c3abdefb3592b91edac1d795bbff3dff7df5c5c35c2f1efb76fac7f5d2561caef01e88192dfafc64f8d1c55f1f89f065d3e92feffdbfd79c63a407e62b3ce2f219fb972d2c27dd4b490ab6a0aa94a45084b4070579c2b16cb9773efd13ab885355138eae2248c02700dba74db9ac26a8e6eb157962278f177c78d7c38ca7a605ccbb5a2f780071cf8b7f9b95a23c05fb32d7ece30140bddd53af98290f72d6895b660b242893269d9fe3df53e25ce7479eab060649fd4f5f54b12dcd52f0ab82cfee0779b8b3a6402ca912676ea258d4d9cd585d8c608d4ededa3401f623d4d2fbfecad84803393c9e1d69abc697996d43958e06e364cebcc63ff8a7dfae0b5dcd3d079174afed4498bf2627983bdb5086600f75d91dc43328fae17ebab18464dc05bc2e75b82ee155eb2d9ce4d11fd535ec7967a79b73986af0dacf340cd798528bc3e250350ea8edd5b1d93eb85e05d78f0ac8856cae3b6080e93db15b7c164e09e26cd7ab54782d1504a1d523916bbfa79a6efccc24740f7fdf43dcbb312671f3ebd8be3c894032065bc35c4fac33822b3d7f15309b9c00575e414fd4e8ae4b907196468c011fbeaa3ff35c5fbdc630e62102b58d24796f4652e43bad0f9692d7f9c67177494d90384ac561e9512d5e62f226084f1b2dfbdbff8f298efe839d4b46877d899afa8e0778a928df0cf10ace038b78e4a129794bf2e50ad4fc371a299294905ac0cd67065e37cd9ec93454472b1d64dca22c2b847d6f85a03f9ccb7591d91d639d2f0a78665c79418d99359bb4b3494c43f8cd8a030242107b58425030eb2738745e05aa2a21601e80a15e377619db4daefde6f45ddc40384b21a1a67a406b4e7b890d4816a53cef5aea1c13cd4e8bf696cb62e51ae6f7f1c2918a47c0b859e9212d45d4defeddcd21150fa1d3d99895c8fce449fc86f03f31c62f29586996e27bd4a6b6f7f8e5f4256d524295fb6907f8ba86fd97439ed4b302e9cf94435b85a4254516941c905255e671a8516bfdf09ec5c677fbd77d17ff1de8a8827a267a0ea69d8771a1bb3f7a315b8a3e57c82b66eeaa1630881bff58686715e22c1eaf82310d489fd541e22c9ad2202fdc81dfba258e94d3a128692199125bb0e3c11b2cded54debdc01de75096a23c32e499ab27c094e8a5c805e148987f073fcb67278e2062735c999db8dbefdc057145ff5f53a9e0e51f9df6b6c4dee55c8fac9b88247bd1d1be6081b98d181b12c436e2f819473feb6d156c14436ffd83242f6bad7ecb69071ffc817d6f87e03af7853dd718c1e109402fbb56573a0c384341ea74eb6d296232b3f5e35194539f1edc6352dec659ff4b954621a637744af7d96bd8015cf9baf7c77304072ba743e810f8ff9b3a5246a60c7c188c7da5d711fa88730d0dc123b4827295b7149262797aab2161f0dfbd8c176a3edb5c1dd1084e3c93b1588ea099cd7c9c5995e8828a7a94318e187503ccb824178cf72dbe69153db2d5a5dc96a459a89868ffc0471b922ec3928aad4cd155af0621254a0ab40b7d495307371e7a32b8d5f2f478b8bfce1679be22e091c30ae8602a7e89064f76f20c35c40ec361f98a89fc09519633dd77be4bddc2a7ca19637a85447239a39b6fb4e8c0cea4b2012d45a89d2b48b8b8f4ab39576b992b40033701958beeed6a0c83b87363841f4218c66b3bb26ed5f71cd9535ab207263538a7fe6cfbf8a5d2c31be3b248c3531a8af5c267734833b643d88f30aea72a76e39c1caba8b3c987a30bd4f888413383de8d68869be3719a56174251ac8993b8768ef7aaa918fbe8a2696bcc5f5f4ceb59c11400857c8798cdc73c203202da8718accaf68f2db842d5d786e081b6ccd2dd827fa67c447e491f2a0e3c259a0e76d89976f388e8e98233192c6a02c768854d521cd9c8308736c1ec34f46b3f9f3a283e5b64539b79a9c6398992abdde5e22db20e4c8187cf6d7294641f1149d6e78ca31b21c45fd3449044ab9fbc7f67e700b4102881a41d3d4697757da9746cb8e376dd28a46a131fdf82cc9ccac832c9f9df27de9afc34edc9602c9858832115f9dda45098411b717f4054242c7168a7eec5c0197ec02e88cadd63229eb5d9bf2ecd64bfeb98779e63c2a4f837cda4acf35324fce69f38075ebbcdb601c871efd936c875bede245b0e41846bb3df3d889cc7224b49c7f45f3a8030c4ccabf4920c00f8884a7c56f370ce2435db29c94d8b1fd8723a773eb1427012d82628c349ea6900247e8d3e06bd2d37cf60da1c800b90ad0855026295a394090c288eded2c329ae39abd17ec3ca7245c295040d1bd682d444e6de150edb5552ff9578960afab9a93c0beb9d0c1f473a41b6b5a27e80f4a3dc68e0f2020722cf59ec8dd517ed22d95b3335b09b869a9eac9b23a7258dd56a56e064392a989da4ac2d8dd31b2a235db0e4ea7326faff243b5cba7cac9ff5e6f6e7cc1f922fcb1d17cbf68acc21740a3252215b9e3db39e31c751b70704d76b9007a3506c4a9d191091630ea7e3f4e8afebd40a458a172f303b200a89b545727ae494d54135619c3673da1575309a331e43ef9ab87b1d3378881fc57f87cf676cd17d329accfffed2dd059fadeaa8cb802503ffe1bc16689a1a59aba2d753f09b08ef28941d007ee459f392920e033a572050ea05ff0f60686b747a3793d72934b633694b8b079378c5708b26c8a07963729f20ebe56135d3b5624b738d796026808935bc372d835fdcc42c7a18f6e72cc45263251b348dd2205412236a09fba28bba6c7187ba8e0aec3a5dcf64e93abdf25a0dff642230508a136f01cd396fdf37b357e5bb5e1f368433a2084fba16ab56bb10b0d7db6ad99733de8b80", 0x1000}, {&(0x7f0000000140)="d7705fa135b23147a633099a7de2ff10fa1bc32fee163ae3d9c42d07870ad283ac20c1d4a5b6b087b45c3603675a960bbc000555828986c8a8db81043bf0b4b2de71776595de40d22d61def44dec8f5304491c965c70f836a081b193000fa5b2205e0a5d9d89cd6a628b4885d99fc9ae7a2c4a37d6a16b32c3967b2e5a314e841e15af25862fd42c146006", 0x8b}, {&(0x7f0000000300)="5f73b10d26da1ab03c6ea18ebd1746a013b3dab050635bf73a5bfb78ab35dd8e9edeb3be8ff2e96efde339f845370bc5ff3d2e27e707b92441b561fe27d64c1943a7730a7d37e4cd7d240ffa563352382e219b0768e954b621c6c9201e69bb76757acad4c0762cf5a0d6ec26b222fdf3967e8c48bd18d2a73456676c4bccad5a8ed0c1880be53bd45fcc6a", 0x8b}, {&(0x7f00000003c0)="70e739e07434455bcd93c26871acdf582ae5bbb76d1f47bcd4caf10d423009d5f94d507dd7db9234209fa151bf32a8a378452307d4390fb51834100723e468e3cbb87c96f654b566347681899aaf299488e9bf91862aa39575ccba088a6d15feca4b19ae43506e7f9972d8df0cd80babc88d509274b9cd2a42baa75c4cd9df8d569ff831f1e3a7f3da19831a73413ca8bf112139b7d992", 0x97}, {&(0x7f0000001640)="9254b5a61b8289cd2aa6cddc53adf2685356d6cb8b533a451c1f8d182ce7171a8dad29db36baad754dfadadd56093e784542949b201fd4cc9ba1c0bcf34e4a8a89d7281494ace31b9cf604ff91f7a4b0547c9b18a1ca18e51f5bd1ef6ed84d5f7954ab7a8fb5d5a9fd1a8a2df993a0cade4b07c81cbd80aaa52b3a8233aa7efee34c7ce0aead919ac4f26ac405021af4017641e43958900ff9a638e88b6a108b7938859dbd28d616d1fb7733db44674a7bb63b2c7fe5c6cbc877b2ba84a47c6e595a4dc7", 0xc4}, {&(0x7f0000001740)="5a6c6bb148fe494c26546e65c0717c586156d5ae48a6f0091f3b81bb8edc479c7d3f2e03eb1e6309838cd5bd2bce2d79e6f2fc7a0d7a0464d24f239b25d43db765c44197c2372f96472ef4e0fe2cf422537ca4d31713294e5e9b16ed52fae58588ca3b353d3db316eb47a10d2f636e460de9fe0701b870b97ae6e6d052b267c0e87f765211204f4685e58550d44a713a81f950b593f27a66a1948d75e04fac", 0x9f}], 0x7, 0x0, 0x0, 0x10}}, {{&(0x7f0000001800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000240)="65de601defed465e", 0x8}], 0x1, 0x0, 0x0, 0x4000004}}, {{&(0x7f0000001880)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001900)="eff5005e1144e2e1a4d0696a8364e6928382191718c616e60394c3efcdffab3dabf81652373fd7ca072d1fe1965b12da8bf804d3143d33969f6e966acaa8de2eb1417cc790aa71fbb36331558cc084136813a137971a8bafba250e99e5f67ce9512f74af7ae55be9d2c5ba5c2676f64a6c3b57adfb5150b962f6fcf73f3b01bff44197ac9c", 0x85}, {&(0x7f0000001b80)="eff9fdc373d51a3ef40268806dbe47947aedbdba0d3e3edae2aef592893c955a280dfa7278e1213750e41e9a14d9da9a2c6b56d43e6427c62d685de158b9f86b5900348af2ad37b066afa00e42893b3db68a8dfe511c53f74e7b11a356a6608389677dd03b91508bfd26f2b612e977ecc101462ecbced57c29b0a274e24c37063ebe1f1c6b825f755dce4dbd8b998d5c34853f1380e2f7121eae82fd1b87e153f9318c2052449a722be6000000000000b94c39cf84044dbf7dec5bfd4f906524d127083d5b635721df716a361911e5e74082268cabb9a7911706", 0xda}, {&(0x7f0000001a80)="94501b8b53abb5dab17b5a4d7c9f90fb1fc715b3747ad9c72779c44f17163cab8d5209e2f698718c076b5dbbfb474458088113d0c7dc3a0bd565ae6d2fa3d5d3f11dd43fa9b1897559b793e2a7936b84a3d34fbfb57ad37254589610af079b31a0ccd8a8f936cc409940b3041e2a12667204f99405bf481a37a0003bb8e85db25964d95f307ffc4ab2d73c23b8f98813b5e142cdba98585f7827bb09fbde40328f43", 0xa2}], 0x3, &(0x7f0000001dc0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0xd9, 0x4040000}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001e40)="12ba97df1839f0fc251b64422d21657fd54a2b903117fe815c9262c2e1478c31efac2c501dfc9c325aeb6be7321f7acc39b02a26462f8e6130cf2f1ebe99c3af372b0c96a4f380baac468a3c7476d5", 0x4f}], 0x1, &(0x7f0000002040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="400020131ce9fffc09e53bca760000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x120, 0x22000008}}, {{&(0x7f0000001f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002000)=[{&(0x7f000000a500)="cb72daec081f3642989dfd7569f494e0637b527b486f1f3303cea80461e1d01602a0e0e81c6d895ab070f9e6d3f749bf3a62566a9ba1e6c357525af759730ec8f448807a5c6182002f16083412a02632a4fe74a8b0c9bb3e3fe36b1165824a46fd8b1a2d187284c86eeddfd80c06c6a4aaa76c5a706cb850faa23afac63920a4974390523cb69927cc65865328da3e0021bea6096a6e436b8ad62123d651", 0x9e}], 0x1, &(0x7f000000a6c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8, 0x48011}}], 0x5, 0x4004800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0x2, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0x2, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x7f1db7f6006a6181, 0x0, 0x0, 0x20000}, 0xc) (async) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x7f1db7f6006a6181, 0x0, 0x0, 0x20000}, 0xc) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000006800010000000000000000000200000000000000080006000100000004000b"], 0x24}}, 0x4004094) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000002c0)={0xc, r5}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f00000000c0)=0x8da, 0x4) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r5, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r5, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) 7.603858198s ago: executing program 7 (id=1787): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000043000/0x2000)=nil) syz_clone(0x2e6c9200, 0x0, 0x35, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000500)=""/65, 0x41}, {&(0x7f0000000100)=""/61, 0x3d}, {&(0x7f0000000580)=""/184, 0xb8}, {&(0x7f0000000640)=""/135, 0x87}, {&(0x7f0000000b00)=""/153, 0x99}, {&(0x7f00000007c0)=""/126, 0x7e}, {&(0x7f0000000840)=""/226, 0xe2}, {&(0x7f0000000940)=""/171, 0xab}, {&(0x7f0000001ec0)=""/10, 0xa}], 0x9}, 0x101}, {{&(0x7f0000000700)=@alg, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000780)=""/56, 0x38}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/27, 0x1b}, {&(0x7f0000001c00)=""/100, 0x64}, {&(0x7f0000001c80)=""/68, 0x44}], 0x5, &(0x7f0000001d80)=""/15, 0xf}, 0x1ff}], 0x4, 0x40000020, 0x0) r5 = socket(0x1a, 0xa, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="06003800d8510000040049800400e0801a165c80f928efeadc95a00c88d81d8d36eb021f05e357ce0cc80496d946a14b733a0b75dc0e0fe7ec451e3304efabb148cf7740d92633549fc799efeffbb500bf6a3db52cb6551af05b9d13a338392b5a8a8a21422903ac79280ba0651419590f6126813018282ea112a8c697e421a55ef2aac7340a5736e3d51504d8c7f023ee72b55ab9a1a1195cf9edf01e30447d1e000ce0ec914a9a6ae232498e74bcd19c01b7086e3fec56b754ab12185fda15b9525dec81f973a9c4bc9e3346f077651b64733a62e0536a41b5d896c07d71bb8b256ff30493694ca27c654b9cdfd0721dcef4726d97a2974dc7d8e373b0a60174bb0800ee00", @ANYRES32=0x0, @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="67ff0f430000", 0x6, 0x8004, &(0x7f0000000200)={0xa, 0x4e21, 0x3, @loopback, 0xe}, 0x1c) shutdown(0xffffffffffffffff, 0x1) writev(0xffffffffffffffff, &(0x7f00000003c0), 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in, @in6=@remote}}, {{@in=@dev}, 0x0, @in6=@private2}}, &(0x7f0000000340)=0xe8) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) 7.415015326s ago: executing program 1 (id=1788): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4084) (rerun: 32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}}, 0x40000) (async) removexattr(0x0, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x80086601, 0x0) (async) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$nl_netfilter(r7, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000210a010100a53786"], 0x14}, 0x1, 0x0, 0x0, 0x8841}, 0x40804) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x900, 0x12) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', 0x0}) (rerun: 32) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0) (async) shmget$private(0x0, 0x1000, 0x78000a42, &(0x7f0000ff2000/0x1000)=nil) (async) socket$nl_rdma(0x10, 0x3, 0x14) 6.541332135s ago: executing program 1 (id=1789): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001200050100000000fedbdf2505001900ff00000028001a00ffffffff000000000000000008000000fe88000000000000000000000000000102000609"], 0x40}}, 0x20040810) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000280)={@multicast2, @private=0xa010100, @local}, 0x2d) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) r2 = socket$inet(0x2, 0x5, 0x0) r3 = syz_io_uring_setup(0x6188, &(0x7f0000000140)={0x0, 0x974f, 0x20, 0x0, 0x3}, &(0x7f00000005c0)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r2, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xcc, &(0x7f0000000b40)={@link_local, @local, @void, {@llc_tr={0x11, {@llc={0x0, 0x4e, "c7", "e27c662af3a2dd0c2e218602b3574c280bc074dd5995c50f2834889600d9d5524842114cb29651477e6ac5d164de7b4331b7c56fe9c6160e6e40fa77ff2c6c0dcd2f44357cfc2fd6c723b66ac0a85ed40424dfb7cce983cf6754205b81e9016478f475d1ef1541f8f905179cc3bb09178744fe28ee643091aab887d14cb0cd380bbe86ccb5efc29ed7c648b5ca8bf6015d35e6b6c8bb7c47897f0c7bfbbbf2470e37f2c0c1c07588c922393bc8eb498f3deb3a7a37a31863baae46"}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a0004e16000008009f0005000000080026000816"], 0x40}}, 0x200040b4) syz_usb_connect(0x5, 0x24, &(0x7f0000000a80)=ANY=[@ANYBLOB="1201000301dc2808410e59415b6b01020301090212000105033010092cad1804c2757f08e9ddd395b349cc51fb6bf71ddc7b9412ec4272ec7006e534a057b5d054c8740d68d8c377d11402e490dee3210ab9c696aebbe7ef4aa6c28149c91683b676ff7abf9e64e2774f3997d10d8a1db67962ff6d42a68a1b03680715073972a7d5718b7d9593535dced8ee0cbb16f6f2c386aa20e7388ce00dc9355ad816c80695aa4b6b0cd19f30243905d93b5a0f592ea7c8eff57ea249b032f662156394"], &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC, @ANYBLOB=',group_)d=', @ANYRESDEC=r0, @ANYBLOB=',allow_other,blksize=0x0000000000001200,max_read=0x0000000000000003,dont_hash,appraise,\x00'], 0x1, 0x0, &(0x7f0000000200)="76563077dc1581b6de05f2ae7ef9d1ca9c2880228a068eb51fc937a993c564e81540375a2e4a7af86fc6bdcfe00a6a725f0ba7027f0aa1467f9aedf1bded362129b92b152a1cbc51990ba4b144b502912a2009fb4f74c42fa34b10e7cc925b7a67e900d1acd0d32ca99ad9fcd74f448c2cdf0f0d0367b5dabea18bd82fcd") r9 = fcntl$dupfd(r0, 0x0, r0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00030200cfe000000203"]}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'veth0_to_team\x00', 0x0}) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x90) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex=r10, 0x35, 0x0, 0x34a, &(0x7f0000000400)=[0x0], 0x1, 0x0, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) ioctl$BLKDISCARDZEROES(r9, 0x127c, &(0x7f0000000340)) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r13, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x40, 0x3, 0x4, '\x00', 0x8}) ioctl$KVM_SET_LAPIC(r13, 0x4400ae8f, &(0x7f0000000680)={"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"}) 5.823591032s ago: executing program 6 (id=1790): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) sendmmsg$unix(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)="6f43274e390b6044457bdade76598487de0447b22390cda7a87838213e7b0951c52ac1a61a3258c7ba74efd847096ba6680353f78a99ae2384636f7c2f18342f5021942e6aa0bc243a2765298d6f9880045bb4f6b6609aa5a729db7f8c3ccdd3f1f9811c63cdcac84e375f65a593bed9799eaaeb0b21ed1468c66e899629d777eb0ac9553ec1bd30f864ef6691fab7c586620dd70b4144a7f9efc2ba7a1f6d61080fdc1e4edcfeff6b2ba5ba15a5120999ae18a6a508c826d171e747bef3e185db8d709590348f1003261442f45c5f882001b02a59fa8f7267ea6e57c7063fbee5", 0xe1}, {&(0x7f0000000680)="28438012a49907568076cc91cd780b0c16299568ad4f26ecb8f40c9f8db30faac0ec3553c91a5caa41b66927ced9d25e13e13a5fbfce7c7c95da4f728d00a3994938a5a781ef500e0e0242a6e33a", 0x4e}, {&(0x7f0000000700)="8519c3129536c1dad4dd21794c448e7243cd1071b71ba3bed20335cd5a5671ee79541d0062e7dfbcc1f5a0f4730c9e80e6b6ea337e78c20f45069fb468d06f3f52017e91c6cf5c172bf18419f00f59872d20e94567966a9347cb2a17a8017ee4940261b107d84e842199246a5df7f67f", 0x70}, {&(0x7f0000000780)="665602c82b335af44038ac3660222fb5ce9c1e97df4191b7d1b88b469bc70b315b64135e03e07a9b5f3d3d1f8df80bc363fe2506855be27d8571dd509286b9d43b0d8125e73091df9e61372a5d7b603ee2a143e20255998b6726b3b51df3d13397e9f5dd825e1c36e974c995834a7e06b9557b076081d8eb7f7ab9d7c1235773e8b3deb8a9ad572423cee00340f748cc7877ac425168a825d74f1d1ff6c0ba9df28d7a81f6d1e7", 0xa7}, {&(0x7f0000000840)="65b711966101babed7075052b47278f4a8907c4ebd9a99da415d394048d4a53b252f2f4d8d5f626c9fb63e1897ccc9750eeba19719bbf2809f166683d159886ce799f23550a44cb4e3c583c7771c4cacd76b1fa1b83c89163066bd1da29d801e54ae56192760d142d68f05f8074beec2550f032beb7eec2e02c42a9d1b0b557ba3966789dc73f8caeeaa88da5866a528937be04b2903285364b6003d2169e09348e991d72db2c3fec8fb44549199ee7a7f85075c7acc69875c5988", 0xbb}, {&(0x7f00000002c0)="397fcd59bee51aa3a57f31b4d063e4f7c3590a59ca135b812ccd987064c00af8ed2fa412d25096be5d570ba5bee96b3d5ef9", 0x32}, {&(0x7f0000000900)="c009ec667fce2db81dfa769de25b34488c2868ed187a3375027074d90c6625a447e92b1b166918bdba7a824c4a53bc72b7ae7c681657d73889b3d6d448d46f68d4f50f4eb37aae", 0x47}, {&(0x7f0000000980)="7a07ba8f7e70ba5b2b5129427aeb43a44ba6ccfb5adcc046c25c6858a19886fc4476a21dc5e474beb89f70f6ed28b2be97108cbdd5940d045bdf4904e6d40c97bcb3be32946205a97c44bc8b1aef1c2134fb64d52ac4887221db8e3481f153046f0ea6a77710e2addb0b01a1e9d899628bc7d889c86b4a7f9409c6c6f42f9e49d2d29bb0e0a836114969881f3b9a19cc30eac5c56820c9177508b9de34944bff443500789852d6d6be8052d41dcb463e906aca8037998b24d1ccdf7df2d550", 0xbf}, {&(0x7f0000000a40)="96237a84a7ffec8eaa62d18351a9619d519879281ac0c051e2f5fc91923859e9a2a2ea6f224da280971eca9a96a5f9fd052214e0c92a973046ce008590add6a5b54c1567b0a16d87fbf5cb1662a697c925d9863f2b574db9cbaa394bd369a1070b830df03ec10081346fa8f44cf975391f339a14a10f5893e1ce302d718763d336bcec23226d67c77e0042ff6cd86131c1aad32c7cc09cfde3d3f19dc176", 0x9e}], 0x9, &(0x7f0000000400)=[@rights={{0x20, 0x1, 0x1, [r1, r0, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x40, 0x40000}}, {{&(0x7f0000000d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000dc0)="894963a9d650e4d6011f9443b5a5f294b355c067b1624d85d97743add65ac84144d5e6a93fe75cd77f9afbc740ad95fad4ebf372573d8262cf782800af60dba92808a0", 0x43}, {&(0x7f0000000bc0)="fc", 0x1}], 0x2, &(0x7f0000000ec0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}], 0x78, 0x24000000}}], 0x2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="300000007900b14504eaf996e45918949b09f44810000104fcffffff0000000000af485c04632ca50002000000cf343d1af9e2b19831b66ca0681444149be0151ab25c21545a8ebeed784051041e792722b9a6c430805e1d1ccca3bdc13ff27a948d89a758b3f108ead2f1612b95d8b03efe878f23a3c5c2c85fa7e9c87a7119828f26501c96c8c9e7cbcba6f9e4776fc118af2afdf03bb160ad6b26693a7503cac75b9b4a2285235817498bbf755d7c78167997a83be06cc8216791bbdf682a582e38871be9ba46c23900eaae0f8764408a481562eb2675f3838e2858716da6ff564be59f8415ce15daf78576a77505c60e7286b2c544371fc7e08198245d630d9e082db548fdc8f0cb560b69c06c2be08fcdb9b248c4", @ANYRES32=0x0, @ANYBLOB="5d5b00002940000010001280080001007674690004000280"], 0x30}, 0x1, 0x0, 0x0, 0x58840}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'ip6tnl0\x00', {}, 0x7ff}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd64fde9e200180000fc01000000000000000000000400000000000000000000000000ffffac1414aa3b02012300000000fc0100000000005bd4f79b72a43f79c131b7d49a5e12be00"], 0x0) fsopen(&(0x7f0000000200)='efs\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYRES64=r4], 0xc8}}, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000440)={0x3, @sdr={0x64737664, 0x4}}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "e5e81571c97b166978ff61fcfd2409b2b73e0f936ed774de107de8a9041b5113"}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x100074}, 0x20) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000540)={0x0, 'veth0_to_hsr\x00', {0x3}, 0x7}) 5.504138363s ago: executing program 5 (id=1791): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000302, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00007}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) statx(r2, 0x0, 0x1000, 0xcf3433d97aab2983, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x1c) r5 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000100), 0xfef0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR2(r7, 0xc02464bb, &(0x7f0000000040)={0x3, 0x0, 0x5, 0x6576, 0x8, 0xff, 0x6, 0x67, 0x10001}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_opts(r8, 0x84, 0xd, 0xfffffffffffffffe, &(0x7f0000000040)=0x4) socket$netlink(0x10, 0x3, 0xa) pselect6(0x40, &(0x7f0000000080)={0xc, 0x0, 0xc7, 0x2, 0xc5b, 0x5, 0x0, 0x3}, &(0x7f0000000180)={0x4, 0x81, 0x8de, 0x44ff08f4, 0x0, 0x8, 0x7, 0x3}, &(0x7f0000000240)={0x400, 0x7, 0x4, 0x83b, 0x5, 0xfffffffffffffff7, 0x80000000, 0x9}, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) splice(r0, 0x0, r5, 0x0, 0x80000001, 0x0) 5.076120677s ago: executing program 0 (id=1792): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xa2, 0x6576, 0xd}) syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0xc0041) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r7, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x0, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x44c40) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 4.859938204s ago: executing program 6 (id=1793): r0 = open(&(0x7f0000000380)='./file2\x00', 0x402982, 0x10) fcntl$notify(r0, 0x402, 0x8000003d) (async) sigaltstack(&(0x7f0000000040)={0x0, 0x80000002}, 0x0) (async, rerun: 64) fcntl$setsig(r0, 0xa, 0x11) (async, rerun: 64) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) fcntl$setsig(r1, 0xa, 0x21) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x189) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x8000080, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) ppoll(&(0x7f0000000240)=[{r1, 0x1084}, {r3, 0x1000}, {r1, 0x1}], 0x3, &(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000300)={[0x6]}, 0x8) (async) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="200028bd7000fbdbdf25030000000800090002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.85848464s ago: executing program 7 (id=1794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 4.645814753s ago: executing program 6 (id=1795): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) r1 = getpid() syz_pidfd_open(r1, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001200)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) (async) cachestat(r0, &(0x7f0000000040), &(0x7f000009de80), 0x0) 4.559979521s ago: executing program 5 (id=1796): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000001000100", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 4.45877892s ago: executing program 1 (id=1797): mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0xffffe000) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@host}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x759, r1, &(0x7f0000000740)="285f0e13695efb86c40910aa4d336a99ff4760e3834312d1a561da57e2642bece6a0cb7f9c2c72948634aeae0db23eaa897a96f7b01cea78d26bd37212a54eb2304bf4f07a9e72342e809672faa502f583f981437098286c9ed727de0d280348722d5bb056af5e5e40720c3588c691ae092ca4ea9c52452a1af4c4302df891750581c595e5661ecdd38e99599dfe8d60369c9dd132e3a1a7a51dde79b0d03f37fde2fbbe789ed26c9e1259e17384cc0268d3ac68ab179e1f3afbaacca7ac2fab596d", 0xc2, 0x3, 0x0, 0x1, r4}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000500)={0xe000200c}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00b94a8b17cd300000000000000000000020800000000000008d9cf501ba4f98595a88009d2b7ca61bf3e68b916a030b5c9f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBDIACR(r6, 0x4b4a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="1810000000000007000000000000000018110000", @ANYBLOB="43218cc8edc372f1b181cd83faaf65fcbe5c5aabf6e7840d832e3bcaedb111ed1ddb2811a7fb3b1bb3775c6b07a2809f779fa5fa98c5fe001d642db70195", @ANYRESOCT=r6], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) read$hidraw(r8, &(0x7f0000002340)=""/147, 0x93) syz_usb_ep_write(r0, 0x3, 0xcc, &(0x7f0000000840)="00c557fec415b32d712aba4b307f6b3427b5c5ad916bbd201fe6e4ecb7c25cf6b4dde27e79cd3af65398780b7a6885d9ef7ca5978dc310eb796b62a2bd8b166543f069bb12a108fa5d3268212413b0edd1bdc02a0bcf53c72f8e44d57a0800000000000000e042bad42f68a5f1b9e71d587ac08e88a75b274162f7562dbc138db3dd5f7598d2241c39f34092b098aeaef637363fd9858bde3855499368d7c337749a0d183d91ffd75a6d8b3a5c47dd6728975c25fd4964c6fd9e246adf00"/204) 4.456344468s ago: executing program 7 (id=1798): mmap(&(0x7f0000d07000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x6, &(0x7f0000000000)=0xa636, 0x9, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe) syz_clone(0xd000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) (async) syz_clone(0xd000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 4.164019603s ago: executing program 6 (id=1799): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r4, 0xc008aec1, &(0x7f0000000200)=ANY=[@ANYRES16]) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r6}]}}}]}, 0x44}}, 0x40) 4.163513361s ago: executing program 5 (id=1800): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_to_batadv\x00', {0x5}, 0x9}) unshare(0x100) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x4, 0xff, 0x1, 0x6, 0x18, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x7, 0x6}}) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000000c0)="2ec6dd01dcaf885b6932f4a03ce95cbd112c025191a6adcd321a675198424501b78602", 0x23}, {&(0x7f0000000100)="61e37958b1852dd33ed15d242f8115687c977661c49b70da4920390bbb", 0x1d}, {&(0x7f0000000140)="e3c28a57b0d121a3a5c77c271c3fc49a8acb2c0d3475e87f9415025aeab27b88016bc532bf5ab0e75f576a69e2f9e4a3f7c84404a7c9b92ce44a357defac74f6b462fc5d189392baa27f34e67de333d702c7b04797be2b8ecc272414509782c841b3c5907722d8a37514ae4abb698b998d73038a6c98a6a03463623f828e8b64b35654bad2bcb30f9566127ba2d526d5779d3c7bdb8f0a718ee23689c18ef1b85203d585183fbb48e4f83c3b0a7e6803e883943e6cf5d5591dd67918e8601704cc51", 0xc2}, {&(0x7f0000000240)="2b227c7b885d4b4328e866637232841a09ccef3779f715932e554cd016b9ddf97eef6ce794ddaca0698556703f53930e403357f2ccc7330fe2f8fd363f998c3bbd8801f4788baad7c0965de7baa63f779d9a54bd5c6ff1c11a3704d92016a0769481766bd3c09d637012af8316f9fd4105384fb5bc60aa", 0x77}], 0x4, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}], 0x68}, 0x49000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x73, 0x9e, 0x61, 0x8, 0xfd9, 0x2c, 0x66b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0xd4, 0x40, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x0, 0xbe, 0x86, 0x6d, 0x1}}]}}]}}, 0x0) 3.92910415s ago: executing program 7 (id=1801): socket$rxrpc(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5803, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0.0:\x00', 0x0) sendto$rxrpc(r3, 0x0, 0x0, 0x44800, 0x0, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r6, &(0x7f0000000b40)=[{&(0x7f0000000c80)=""/163, 0xa3}], 0x1, 0x0, 0x20) bind$rxrpc(r5, &(0x7f0000001280)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x8, @empty}}, 0x24) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r8 = socket$inet6(0xa, 0x3, 0x2f) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000200)={0x3, &(0x7f0000000100)=[{0x0, 0x27, 0x8, 0x2b}, {0x7fff, 0x3, 0x5, 0x3}, {0xff, 0x25, 0x9, 0x7}]}) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x0, 0x0, 0xffff, 0x40, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3, 0x3}}, 0xe8) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r9 = socket(0x10, 0x3, 0x0) write(r9, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, 0x0, 0x0, 0x2, 0x0) 3.739470472s ago: executing program 6 (id=1802): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000680)) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0)=0x7ff, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0xffc, 0x3a, 0xd5b, 0x3a, 0x9, 0x10000001, 0xffff7fff}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x3e) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000080)=@x86={0x7c, 0x3, 0xfd, 0x0, 0x1, 0x7b, 0xcb, 0x10, 0x8, 0x5, 0x8, 0x8, 0x0, 0x10001, 0x9, 0xff, 0x6, 0x5, 0x12, '\x00', 0x1}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000240)={r8, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x0, 0x45}, 0x90) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="006d03b28820", @ANYRES32=0x0, @ANYBLOB="0c009900ffff00005a000001"], 0x28}}, 0x0) syz_usb_connect(0x0, 0x54, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000072389020b822972d645101020301090242000102000000090401000000068f000a2401020001020102052404"], 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f00000001c0)={0x1, 0xff}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x48b, &(0x7f0000000040)={0x3}, 0x18) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001000000", @ANYRES32=0x1, @ANYBLOB="000000000000fd00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r11, 0x0, 0x20}, 0x38) r12 = syz_kvm_add_vcpu$x86(r9, &(0x7f0000000140)={0x0, 0x0}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cgroup.max.descendants\x00', 0x2, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x109, &(0x7f0000000080)='z'}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x1, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x2, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0xa, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x7ffe, 0x0}]}) ioctl$KVM_RUN(r12, 0xae80, 0x0) 2.475711717s ago: executing program 5 (id=1803): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @multicast2}, 0x10) listen(r3, 0x8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000ffffffff"]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x6d0002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000003b80)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000080)) r7 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r7, 0x0, 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000180)={r8, 0x3}, 0xc) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000002c0)={'#! ', '', [{0x20, '(\x13t\xcb>\xda\xb2\x1bR\xab\xee\xc8\xbdEDd>\xaa\x01 \x841\x88L\xb95\x02\xb1a\x99(\xedN\x9e\xc4\xc7`\xa1hz7M\x9e\xe7\x1a\xc9\x0e\x9c\x81NRS\x0e\xfa\x81Kv{r\xe4\x8b\xe9\xf5\xf9\xd4)Oj\xf7i$\x9bS\t\xda\x8a\xf8D-*\xfc\xea\xf3\xdf\x80\x89\xec\x13\xe3\xa5\x00'/104}]}, 0x6d) 1.614286355s ago: executing program 7 (id=1804): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xcc, 0x2c, 0xdf, 0x40, 0x763, 0x2030, 0x7979, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5f, 0x65, 0x60, 0x70, [{{0x9, 0x4, 0x1, 0x8, 0x0, 0xff, 0xa2, 0x7d, 0x9}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x70bd29, 0x3, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x15d}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}}, 0x2) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000ffffb7bd7000fbfbdf2500000000", @ANYRES32=0x0, @ANYBLOB="26970000231a0500340012800e00010069703665727370616e00fcff1f00028004001200050016000100000008000500"], 0x54}}, 0x48800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x1, 0x0) vmsplice(r8, &(0x7f0000000380)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) (async) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) (async) write(r6, 0x0, 0x0) (async, rerun: 64) r10 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x30, 0x34, 0x0, 0x0, 0x37]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) (rerun: 64) keyctl$describe(0x6, r10, &(0x7f00000001c0)=""/5, 0x5) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) (rerun: 64) r11 = socket$inet6(0x10, 0x80000, 0x4000) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x1200060, 0x0, 0x3c, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async, rerun: 64) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) (async, rerun: 64) sendto$inet6(r11, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r12, 0x0) (async) getsockopt$IP_VS_SO_GET_DESTS(r12, 0x0, 0x484, &(0x7f0000000040)=""/146, &(0x7f0000000140)=0x92) 1.327074577s ago: executing program 0 (id=1805): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$unix(0x1, 0x2, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) preadv2(r7, &(0x7f0000000140), 0x10000000000002dd, 0x10001, 0xa78, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000080)={0x5, 0xff0, 0x9, 0x7, 0x4, 0x7}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x703923, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r10 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r11) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.21587571s ago: executing program 1 (id=1806): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06fe857c3d452cc0aa8f1800fc55150081"], 0x48) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000000000fffe00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 969.257645ms ago: executing program 1 (id=1807): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000190001000000000000000001021800000000fd000000000008000100ac141400040008"], 0x2c}}, 0x0) r1 = socket(0x10, 0x80003, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'sit0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002540)=@newtaction={0x2f4, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x2e0, 0x1, [@m_xt={0x1a0, 0xa, 0x0, 0x0, {{0x7}, {0x140, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0xc}, @TCA_IPT_TARG={0x101, 0x6, {0x8001, 'nat\x00', 0xe, 0x1000, "5b17aa89d80870c15066789ffc3b484ddb037d507299171c05cbd077a4e3492a17ecb2370233755138b3858be560a8a0cb8e4bee920720c0d5e6d1fe7c870c1e2793e60016110210e803f409c55aaa647ce7884c4be946c031bdec6333ecd98218bc11cfd095bbcc90498390fcc856d393bf3c1e92685be4ff1b597283aabf6ce58602822569bafb50f79407eb936cd6ee006572c3448ff2386905dacded248e5a9de4a07552adf37b6249ad9805b37df81c593f6ceb55e10eaf311fb28e1ac22a8be3885042ff867e12aa3133d4adbf6729e09eac0862"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffd}]}, {0x39, 0x6, "60d8256d6e17304151fd4e116cd17e9a9916f46a1108fe35c2253eb9e0a39371696c312986c3e3f087692e934a942246981749736d"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x104, 0x34, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd, 0x6, 0x8, 0x9}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x4, 0x0, 0x136bcb9c}, 0x6c}}]}, {0x9d, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a372961e6acf9f73f3ab3a6d19010c501877fc1473ff3fe388a502702c7e7d4eb99cd479f52bef8df8dc2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x38, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x9, 0x6, "d53a6627b5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) 896.2984ms ago: executing program 0 (id=1808): syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002a69bbc104f959941760f010203010902240001040000000904330202020c07"], 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick=0x2000000, {}, {}, @ext={0x5, &(0x7f00000002c0)="53777f5a0f"}}], 0x1c) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000200)=@filename='./file0\x00', 0x0, &(0x7f0000000440)={0x5, 0x2, 0x1, 0x2}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40095}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000540)=@ethtool_perm_addr={0x20, 0x1f9, "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"}}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000000000c23c8812b3478f0b0c63008400626f6e64000000000c00028005000100"], 0x3c}}, 0x0) r5 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="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", 0x5c1, 0xfffffffffffffffb) keyctl$update(0x2, r5, &(0x7f0000000000)="11868a0fceae284c00000001000000", 0xf) ioctl$TIOCGPKT(0xffffffffffffffff, 0x40045431, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000004c0)={0xc}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) 840.916362ms ago: executing program 5 (id=1809): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0xc449, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 489.785147ms ago: executing program 5 (id=1810): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0xc449, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32, @ANYBLOB="0800c300741300000800c400"], 0x30}, 0x1, 0x0, 0x0, 0x40002}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 174.149928ms ago: executing program 6 (id=1811): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010000108821eff9a68fa2f5d9c7bab3e0000000000000000000000f3", @ANYRES32=0x0, @ANYBLOB="00800000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmmsg$inet(r2, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000009c0)='8h?', 0x3}], 0x1}}], 0x1, 0xc0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000}, 0x28) r4 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) read$hiddev(r4, &(0x7f0000002300)=""/102, 0x66) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02"], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r7, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x15b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r7, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) 0s ago: executing program 7 (id=1812): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) write$char_usb(r1, &(0x7f0000000100)="ded95eef22e88cfcadf992ea0963a45c345ba588fefac3ce8793f6e60591569a5ce41a005a649afe64781d0d01ec5330ef3bbf53b58b79c7726317649bde2184c9b182c4d1f1d5e6ee0ddd3881852f85d4a25ff9537344d799122341ceaa6525f3e5f0d5cd73fbbad5000000000000000000", 0x72) syz_usb_control_io$printer(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)=0x0) io_submit(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe2$watch_queue(&(0x7f00000000c0), 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x40039) keyctl$clear(0x7, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x1a, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @multicast2}], 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) writev(r5, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) kernel console output (not intermixed with test programs): : hci0: command 0x0419 tx timeout [ 550.437113][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1384'. [ 550.477612][T11810] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 550.515758][T11995] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1385'. [ 550.563033][T11810] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 550.611238][T11810] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 550.635502][T11995] netlink: 'syz.1.1385': attribute type 11 has an invalid length. [ 550.657390][T11810] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 550.666611][T11995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1385'. [ 550.687455][T11991] netlink: 'syz.5.1384': attribute type 2 has an invalid length. [ 550.860815][ T10] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 551.020011][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 551.027949][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 551.051469][ T10] usb 1-1: config 0 has no interface number 0 [ 551.098066][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 551.119762][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.130844][ T10] usb 1-1: Product: syz [ 551.135055][ T10] usb 1-1: Manufacturer: syz [ 551.142290][ T10] usb 1-1: SerialNumber: syz [ 551.151832][ T10] usb 1-1: config 0 descriptor?? [ 551.174231][ T10] smsc95xx v2.0.0 [ 551.622552][T11810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.667126][T11810] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.782588][ T5870] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 551.786778][T10330] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.797401][T10330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.820461][T12024] IPv6: NLM_F_REPLACE set, but no existing node found! [ 551.857020][T10330] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.864268][T10330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.939770][ T5870] usb 7-1: Using ep0 maxpacket: 8 [ 551.947294][ T5870] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 551.967819][ T5870] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 551.980840][ T5866] Bluetooth: hci0: command 0x0419 tx timeout [ 551.982288][ T5870] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 552.010896][T11810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.017639][ T5870] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 552.054288][ T5870] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 552.067875][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.089995][T10129] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 552.113754][T11810] veth0_vlan: entered promiscuous mode [ 552.135764][T11810] veth1_vlan: entered promiscuous mode [ 552.203353][T11810] veth0_macvtap: entered promiscuous mode [ 552.239238][T11810] veth1_macvtap: entered promiscuous mode [ 552.240679][T10129] usb 6-1: device descriptor read/64, error -71 [ 552.315161][T11810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.317663][ T5870] usb 7-1: GET_CAPABILITIES returned 0 [ 552.348662][T11810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.361016][ T5870] usbtmc 7-1:16.0: can't read capabilities [ 552.397838][ T1161] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.408562][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 552.437960][ T1161] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.461830][ T1161] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.502182][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 552.523033][ T1161] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.540689][T10129] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 552.580974][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 552.631178][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 552.680551][T10129] usb 6-1: device descriptor read/64, error -71 [ 552.704066][ T10] usb 1-1: USB disconnect, device number 91 [ 552.791580][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.801599][T10129] usb usb6-port1: attempt power cycle [ 552.858900][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.990704][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.004734][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.109187][T12044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.214460][T10129] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 553.240437][T10129] usb 6-1: device descriptor read/8, error -71 [ 553.300170][T12044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.349789][ T5970] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 553.525465][T12051] netlink: 'syz.7.1351': attribute type 10 has an invalid length. [ 553.534165][T12051] lo: entered promiscuous mode [ 553.620190][T10129] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 553.672169][ T5970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.675121][T12051] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 553.698415][ T5970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.715650][T10129] usb 6-1: device descriptor read/8, error -71 [ 553.733073][ T5970] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 553.832546][T10129] usb usb6-port1: unable to enumerate USB device [ 553.858182][ T5970] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 553.878200][ T5970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.916594][ T5970] usb 1-1: config 0 descriptor?? [ 554.404202][ T5928] usb 7-1: USB disconnect, device number 44 [ 554.422718][ T5970] plantronics 0003:047F:FFFF.0014: reserved main item tag 0xd [ 554.477169][ T5970] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 554.893274][ T5970] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 555.034333][ T5928] usb 1-1: USB disconnect, device number 92 [ 555.059701][ T5970] usb 7-1: device descriptor read/64, error -71 [ 555.334184][ T5970] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 555.517556][ T5970] usb 7-1: device descriptor read/64, error -71 [ 555.630120][ T5970] usb usb7-port1: attempt power cycle [ 555.663835][T12089] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1400'. [ 555.673071][T12089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1400'. [ 555.836242][ T8817] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 555.949270][T12092] loop2: detected capacity change from 0 to 7 [ 555.997910][T12092] Dev loop2: unable to read RDB block 7 [ 556.003816][ T5970] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 556.029746][ T8817] usb 8-1: Using ep0 maxpacket: 16 [ 556.029827][T12092] loop2: unable to read partition table [ 556.037996][ T8817] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.055016][ T5970] usb 7-1: device descriptor read/8, error -71 [ 556.057347][T12092] loop2: partition table beyond EOD, truncated [ 556.071788][T12092] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 556.118363][ T8817] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 556.130724][ T5232] Dev loop2: unable to read RDB block 7 [ 556.138477][ T5232] loop2: unable to read partition table [ 556.148574][ T5232] loop2: partition table beyond EOD, truncated [ 556.202310][ T8817] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 556.220819][ T8817] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.261361][ T8817] usb 8-1: Product: syz [ 556.286819][ T8817] usb 8-1: Manufacturer: syz [ 556.313110][ T8817] usb 8-1: SerialNumber: syz [ 556.380155][ T5970] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 556.465809][T12094] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1402'. [ 556.480612][ T5970] usb 7-1: device descriptor read/8, error -71 [ 556.590242][ T5970] usb usb7-port1: unable to enumerate USB device [ 556.739954][T12040] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 556.910873][T12040] usb 6-1: Using ep0 maxpacket: 16 [ 556.934805][T12040] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.946956][T12040] usb 6-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 556.956905][T12040] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.969203][T12040] usb 6-1: config 0 descriptor?? [ 557.201273][T12094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.212865][T12094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.379418][ T981] hid (null): unknown global tag 0xe [ 557.387317][ T981] hid (null): unknown global tag 0xc [ 557.588534][ T981] hid-generic 0005:0008:0003.0015: unknown main item tag 0x0 [ 557.608907][ T981] hid-generic 0005:0008:0003.0015: unknown main item tag 0x0 [ 557.677063][ T981] hid-generic 0005:0008:0003.0015: unknown main item tag 0x2 [ 557.752968][ T981] hid-generic 0005:0008:0003.0015: unknown main item tag 0x0 [ 557.781299][ T981] hid-generic 0005:0008:0003.0015: unknown main item tag 0x0 [ 557.801207][ T981] hid-generic 0005:0008:0003.0015: unknown main item tag 0x0 [ 557.841387][ T981] hid-generic 0005:0008:0003.0015: unknown main item tag 0x0 [ 557.859373][ T981] hid-generic 0005:0008:0003.0015: unknown main item tag 0x0 [ 557.879169][ T981] hid-generic 0005:0008:0003.0015: unknown main item tag 0x0 [ 557.898070][ T981] hid-generic 0005:0008:0003.0015: unknown main item tag 0x0 [ 557.929051][ T981] hid-generic 0005:0008:0003.0015: ignoring exceeding usage max [ 557.962483][ T981] hid-generic 0005:0008:0003.0015: unexpected long global item [ 557.972543][ T981] hid-generic 0005:0008:0003.0015: probe with driver hid-generic failed with error -22 [ 558.005804][T12040] usbhid 6-1:0.0: can't add hid device: -71 [ 558.013342][T12040] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 558.044253][T12040] usb 6-1: USB disconnect, device number 74 [ 558.416933][ T8817] usb 8-1: 0:2 : does not exist [ 558.484859][ T8817] usb 8-1: USB disconnect, device number 2 [ 558.653906][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 559.266970][T12128] loop2: detected capacity change from 0 to 7 [ 559.304883][T12128] Dev loop2: unable to read RDB block 7 [ 559.326876][T12128] loop2: unable to read partition table [ 559.361603][T12128] loop2: partition table beyond EOD, truncated [ 559.389532][T12128] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 559.589824][ T8817] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 559.769677][ T8817] usb 7-1: Using ep0 maxpacket: 16 [ 559.784847][ T8817] usb 7-1: config 0 descriptor has 1 excess byte, ignoring [ 559.794454][ T8817] usb 7-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 559.813909][ T8817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.855244][ T8817] usb 7-1: Product: syz [ 559.859476][ T8817] usb 7-1: Manufacturer: syz [ 559.894803][ T8817] usb 7-1: SerialNumber: syz [ 559.928943][ T8817] usb 7-1: config 0 descriptor?? [ 559.956156][ T8817] hub 7-1:0.0: bad descriptor, ignoring hub [ 559.979641][ T8817] hub 7-1:0.0: probe with driver hub failed with error -5 [ 560.012390][ T8817] uvcvideo 7-1:0.0: probe with driver uvcvideo failed with error -22 [ 560.080347][ T5970] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 560.153527][T12129] netlink: 'syz.6.1413': attribute type 11 has an invalid length. [ 560.239770][ T5970] usb 1-1: Using ep0 maxpacket: 8 [ 560.280850][ T5970] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.292318][ T8817] usb 7-1: USB disconnect, device number 49 [ 560.306547][ T5970] usb 1-1: config 0 interface 0 has no altsetting 0 [ 560.321204][ T5970] usb 1-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 560.339454][ T5970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.347075][T12138] netlink: 'syz.7.1415': attribute type 1 has an invalid length. [ 560.360467][ T5970] usb 1-1: config 0 descriptor?? [ 560.381271][T12138] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1415'. [ 560.421481][T12141] veth3: entered promiscuous mode [ 560.612555][T12132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.655671][T12132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.931424][T12132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.971757][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1421'. [ 560.997270][T12132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.005420][T12162] libceph: resolve '0.0' (ret=-3): failed [ 561.067997][ T5970] betop 0003:11C0:5506.0016: item fetching failed at offset 7/8 [ 561.094559][T12161] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1421'. [ 561.103745][T12161] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1421'. [ 561.171367][ T30] audit: type=1326 audit(1756222029.164:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12156 comm="syz.6.1422" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f720118ebe9 code=0x0 [ 561.200657][ T5970] betop 0003:11C0:5506.0016: parse failed [ 561.209281][ T5970] betop 0003:11C0:5506.0016: probe with driver betop failed with error -22 [ 561.572432][ T5970] usb 1-1: USB disconnect, device number 93 [ 562.285114][T12181] loop2: detected capacity change from 0 to 6 [ 562.298909][T12181] Dev loop2: unable to read RDB block 6 [ 562.305261][T12181] loop2: unable to read partition table [ 562.316177][T12181] loop2: partition table beyond EOD, truncated [ 562.331662][T12181] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 563.449919][ T981] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 563.611917][ T981] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 563.635072][ T981] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 563.697596][ T981] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 563.868991][ T981] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 563.914583][ T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 563.967140][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1430'. [ 564.026622][ T981] usb 1-1: Product: syz [ 564.075864][ T981] usb 1-1: Manufacturer: syz [ 564.086256][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1430'. [ 564.096078][ T981] usb 1-1: SerialNumber: syz [ 564.138813][T12193] tipc: Started in network mode [ 564.178686][T12193] tipc: Node identity b6b7609bf154, cluster identity 4711 [ 564.196091][T12193] tipc: Enabled bearer , priority 0 [ 564.216097][T12204] syzkaller0: entered promiscuous mode [ 564.234636][T12204] syzkaller0: entered allmulticast mode [ 564.321757][ T981] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 94 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 564.352112][T12204] tipc: Resetting bearer [ 564.463927][T12209] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.1431'. [ 564.491300][T12209] netlink: zone id is out of range [ 564.504320][T12209] netlink: zone id is out of range [ 564.609922][ T5970] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 564.621664][T12191] tipc: Resetting bearer [ 565.139414][ T981] usb 1-1: USB disconnect, device number 94 [ 565.153198][ T5970] usb 7-1: config 7 descriptor has 1 excess byte, ignoring [ 565.161314][ T981] usblp0: removed [ 565.200432][T12191] tipc: Disabling bearer [ 565.524765][ T5970] usb 7-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 565.533822][ T8817] tipc: Node number set to 1206083739 [ 565.690968][ T5970] usb 7-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 565.720090][ T5970] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.748986][ T5970] usb 7-1: Product: syz [ 565.765453][ T5970] usb 7-1: Manufacturer: syz [ 565.786769][ T5970] usb 7-1: SerialNumber: syz [ 565.821238][ T5970] rndis_host 7-1:7.0: skipping garbage [ 565.830291][ T5970] usb 7-1: bad CDC descriptors [ 565.852983][ T5970] option 7-1:7.0: GSM modem (1-port) converter detected [ 566.217052][T12224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 566.239668][T12040] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 566.407463][T12040] usb 8-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.459212][T12040] usb 8-1: config 0 interface 0 has no altsetting 0 [ 566.489771][T12040] usb 8-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 566.498881][T12040] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.585602][T12040] usb 8-1: config 0 descriptor?? [ 566.775972][T12231] fuse: Unknown parameter ' L |wvm0k+uK:y.H貉.e7n7b_8BZ ' [ 566.846220][T12222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.885849][T12222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.944241][T12222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.988636][T12222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.157863][ T5952] usb 7-1: USB disconnect, device number 50 [ 567.236185][ T5952] option 7-1:7.0: device disconnected [ 567.379826][T12040] kye 0003:0458:5013.0017: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 567.429994][T12040] kye 0003:0458:5013.0017: hidraw0: USB HID v8.00 Device [HID 0458:5013] on usb-dummy_hcd.7-1/input0 [ 567.645891][T12040] kye 0003:0458:5013.0017: tablet-enabling feature report not found [ 567.679986][T12040] kye 0003:0458:5013.0017: tablet enabling failed [ 567.723976][T12040] usb 8-1: USB disconnect, device number 3 [ 567.801302][T12255] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1438'. [ 567.955294][T12251] fido_id[12251]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 568.233325][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.240019][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.819846][ T981] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 569.949303][T12291] netlink: 'syz.0.1445': attribute type 4 has an invalid length. [ 569.983924][ T981] usb 6-1: unable to get BOS descriptor or descriptor too short [ 570.006415][ T981] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 570.100180][ T981] usb 6-1: can't read configurations, error -71 [ 571.809047][T12334] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1452'. [ 572.044937][ T5942] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 572.610492][ T5942] usb 8-1: config 0 has an invalid interface number: 58 but max is 0 [ 572.618737][ T5942] usb 8-1: config 0 has no interface number 0 [ 572.660804][ T5942] usb 8-1: config 0 interface 58 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 572.709634][ T5942] usb 8-1: config 0 interface 58 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64 [ 572.893405][ T5942] usb 8-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 572.958095][T12343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1453'. [ 573.004269][ T5942] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.179844][ T5942] usb 8-1: Product: syz [ 573.184071][ T5942] usb 8-1: Manufacturer: syz [ 573.188783][ T5942] usb 8-1: SerialNumber: syz [ 573.225575][ T5942] usb 8-1: config 0 descriptor?? [ 573.239997][ T981] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 573.290797][T12335] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 573.445459][ T981] usb 6-1: Using ep0 maxpacket: 8 [ 573.511624][ T981] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 573.571517][ T981] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 573.584237][ T981] usb 6-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 573.699467][ T5942] kaweth 8-1:0.58: Firmware present in device. [ 573.733767][ T981] usb 6-1: Product: syz [ 573.764618][ T981] usb 6-1: Manufacturer: syz [ 573.814343][ T981] usb 6-1: SerialNumber: syz [ 573.847286][ T981] usb 6-1: config 0 descriptor?? [ 574.083628][ T981] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 574.561506][ T981] gspca_sunplus: reg_w_riv err -71 [ 574.566760][ T981] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 574.754243][ T981] usb 6-1: USB disconnect, device number 77 [ 575.860269][T12386] vlan2: entered promiscuous mode [ 575.870001][T12386] bridge0: entered promiscuous mode [ 575.882146][T12386] vlan2: entered allmulticast mode [ 575.887414][T12386] bridge0: entered allmulticast mode [ 576.673734][ T5942] kaweth 8-1:0.58: Error reading configuration (-71), no net device created [ 576.709885][ T5942] kaweth 8-1:0.58: probe with driver kaweth failed with error -5 [ 576.722503][T12395] netlink: 'syz.0.1461': attribute type 41 has an invalid length. [ 576.819876][ T5942] usb 8-1: USB disconnect, device number 4 [ 577.368055][T12406] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1465'. [ 577.459801][ T981] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 577.581611][T12412] fuse: Unknown parameter 'grou' [ 577.629766][ T981] usb 7-1: Using ep0 maxpacket: 16 [ 577.709717][ T5942] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 577.927242][T12422] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1468'. [ 577.960065][ T5942] usb 8-1: config 0 interface 0 has no altsetting 0 [ 577.966735][ T5942] usb 8-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 577.989679][ T5942] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.042212][ T5942] usb 8-1: config 0 descriptor?? [ 578.127027][T12422] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1468'. [ 578.136355][T12422] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1468'. [ 578.621559][ T5970] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 578.634646][T12431] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1466'. [ 578.789897][ T5970] usb 2-1: Using ep0 maxpacket: 32 [ 578.797256][T12431] veth0_to_bond: entered allmulticast mode [ 578.804186][ T5970] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 578.838588][ T5970] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 578.850978][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.880199][ T920] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 579.073138][ T5970] usb 2-1: Product: syz [ 579.133164][ T920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.151103][ T5970] usb 2-1: Manufacturer: syz [ 579.160549][ T920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.202559][ T5970] usb 2-1: SerialNumber: syz [ 579.225799][ T920] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 579.268249][ T5970] usb 2-1: config 0 descriptor?? [ 579.279749][ T920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.302475][T12425] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 579.380841][ T5970] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input38 [ 579.392039][ T920] usb 1-1: Product: syz [ 579.438036][ T920] usb 1-1: Manufacturer: syz [ 579.455413][ T920] usb 1-1: SerialNumber: syz [ 579.524083][ T920] usb 1-1: config 0 descriptor?? [ 579.555549][ T5970] usb 2-1: USB disconnect, device number 86 [ 579.561608][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 579.599990][ T5942] video4linux radio48: keene_cmd_set failed (-71) [ 579.609131][ T5942] radio-keene 8-1:0.0: V4L2 device registered as radio48 [ 579.621677][ T920] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 579.644370][ T5942] usb 8-1: USB disconnect, device number 5 [ 579.653972][ T920] usb 1-1: No valid video chain found. [ 579.769370][ T920] usb 1-1: USB disconnect, device number 95 [ 580.317315][ T981] usb 7-1: unable to get BOS descriptor or descriptor too short [ 580.343457][ T981] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 580.361211][ T981] usb 7-1: can't read configurations, error -71 [ 580.632400][T12442] tipc: Enabled bearer , priority 0 [ 580.650200][T12442] syzkaller0: entered promiscuous mode [ 580.655929][T12442] syzkaller0: entered allmulticast mode [ 580.662188][ T920] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 580.829827][ T920] usb 8-1: Using ep0 maxpacket: 32 [ 580.856772][ T920] usb 8-1: unable to get BOS descriptor or descriptor too short [ 580.893099][ T920] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 580.914123][ T920] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.940103][ T920] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 580.966739][ T920] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 580.976842][ T920] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.992386][ T920] usb 8-1: Product: syz [ 581.006103][ T920] usb 8-1: Manufacturer: syz [ 581.023881][ T920] usb 8-1: SerialNumber: syz [ 581.215550][T12444] FAULT_INJECTION: forcing a failure. [ 581.215550][T12444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.229217][T12444] CPU: 0 UID: 0 PID: 12444 Comm: syz.5.1475 Not tainted syzkaller #0 PREEMPT(full) [ 581.229244][T12444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 581.229276][T12444] Call Trace: [ 581.229284][T12444] [ 581.229294][T12444] dump_stack_lvl+0x189/0x250 [ 581.229325][T12444] ? __pfx____ratelimit+0x10/0x10 [ 581.229355][T12444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 581.229380][T12444] ? __pfx__printk+0x10/0x10 [ 581.229421][T12444] should_fail_ex+0x414/0x560 [ 581.229453][T12444] _copy_to_user+0x31/0xb0 [ 581.229481][T12444] simple_read_from_buffer+0xe1/0x170 [ 581.229516][T12444] proc_fail_nth_read+0x1b3/0x220 [ 581.229541][T12444] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 581.229581][T12444] ? rw_verify_area+0x2a6/0x4d0 [ 581.229607][T12444] ? __lock_acquire+0xab9/0xd20 [ 581.229634][T12444] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 581.229659][T12444] vfs_read+0x1fd/0xa30 [ 581.229684][T12444] ? fdget_pos+0x247/0x320 [ 581.229706][T12444] ? __pfx___mutex_lock+0x10/0x10 [ 581.229736][T12444] ? __pfx_vfs_read+0x10/0x10 [ 581.229764][T12444] ? __fget_files+0x2a/0x420 [ 581.229799][T12444] ? __fget_files+0x3a0/0x420 [ 581.229828][T12444] ? __fget_files+0x2a/0x420 [ 581.229870][T12444] ksys_read+0x145/0x250 [ 581.229901][T12444] ? __pfx_ksys_read+0x10/0x10 [ 581.229925][T12444] ? fput+0xa0/0xd0 [ 581.229952][T12444] ? do_syscall_64+0xbe/0x3b0 [ 581.229988][T12444] do_syscall_64+0xfa/0x3b0 [ 581.230020][T12444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.230039][T12444] ? asm_sysvec_call_function_single+0x1a/0x20 [ 581.230060][T12444] ? clear_bhb_loop+0x60/0xb0 [ 581.230085][T12444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.230106][T12444] RIP: 0033:0x7f472218d5fc [ 581.230127][T12444] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 581.230146][T12444] RSP: 002b:00007f4722fc2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 581.230168][T12444] RAX: ffffffffffffffda RBX: 00007f47223b5fa0 RCX: 00007f472218d5fc [ 581.230184][T12444] RDX: 000000000000000f RSI: 00007f4722fc20a0 RDI: 0000000000000005 [ 581.230197][T12444] RBP: 00007f4722fc2090 R08: 0000000000000000 R09: 0000000000000000 [ 581.230209][T12444] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 581.230222][T12444] R13: 00007f47223b6038 R14: 00007f47223b5fa0 R15: 00007f47224dfa28 [ 581.230255][T12444] [ 581.485160][T12439] tipc: Resetting bearer [ 581.531532][T12439] tipc: Disabling bearer [ 581.567644][T12434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.603990][T12434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.916249][T12451] pim6reg: entered allmulticast mode [ 582.869848][ T5942] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 583.031229][ T5942] usb 1-1: Using ep0 maxpacket: 32 [ 583.039205][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.089038][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.201360][ T5942] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 583.265015][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.349302][ T5942] usb 1-1: config 0 descriptor?? [ 583.380607][ T5942] hub 1-1:0.0: USB hub found [ 583.584377][T12467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.640775][T12467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.700820][T12467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.775427][T12474] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1481'. [ 583.849475][T12467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.893356][T12471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.943990][T12467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.229499][T12467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.287132][T12467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.313851][T12474] bond0: (slave syz_tun): Releasing backup interface [ 584.330048][T12471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.364433][T12467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.493174][T12467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.535285][T12467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.611527][ T5942] hub 1-1:0.0: 26 ports detected [ 584.664095][ T5942] hub 1-1:0.0: insufficient power available to use all downstream ports [ 584.873762][ T5942] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 584.897158][ T5942] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 584.948116][ T5942] usbhid 1-1:0.0: can't add hid device: -71 [ 584.959723][ T5942] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 585.034549][ T5942] usb 1-1: USB disconnect, device number 96 [ 586.456720][ T920] usb 8-1: 0:2 : does not exist [ 587.015706][T12499] veth0_to_team: entered promiscuous mode [ 587.414970][T12505] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1488'. [ 587.709667][ T981] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 587.952695][ T981] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 587.981368][ T981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.017739][ T981] usb 7-1: config 0 descriptor?? [ 588.315129][T12505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.344523][T12505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.493432][ T981] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 588.704664][T12505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.730645][T12505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.787822][T12505] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1488'. [ 588.977842][T12525] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1488'. [ 589.061815][ T981] [drm:udl_init] *ERROR* Selecting channel failed [ 589.136487][ T981] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 589.176254][ T981] [drm] Initialized udl on minor 2 [ 589.197496][ T981] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 589.279198][ T981] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 589.323424][T12040] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 589.349814][ T981] usb 7-1: USB disconnect, device number 53 [ 589.371279][T12040] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 590.268593][T12533] libceph: resolve '0.0' (ret=-3): failed [ 590.307274][ T30] audit: type=1326 audit(1756222058.314:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12529 comm="syz.0.1494" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f566058ebe9 code=0x0 [ 590.789799][T12040] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 590.959661][T12040] usb 6-1: Using ep0 maxpacket: 8 [ 590.988153][T12040] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 591.009660][T12040] usb 6-1: config 0 has no interface number 0 [ 591.047746][T12040] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 591.140407][T12040] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 591.195955][T12040] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 591.250307][T12040] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 591.328069][T12040] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 591.378731][T12040] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.439517][T12040] usb 6-1: config 0 descriptor?? [ 591.494766][T12040] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 592.498057][T12546] delete_channel: no stack [ 592.600004][T12040] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 592.633643][ T981] usb 8-1: USB disconnect, device number 6 [ 592.803169][T12040] usb 2-1: config 0 has an invalid interface number: 228 but max is 0 [ 592.834522][T12040] usb 2-1: config 0 has no interface number 0 [ 592.862418][T12040] usb 2-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=ee.a2 [ 592.887799][T12040] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.931527][T12040] usb 2-1: Product: syz [ 592.937062][T12040] usb 2-1: Manufacturer: syz [ 592.948239][T12040] usb 2-1: SerialNumber: syz [ 592.967358][T12040] usb 2-1: config 0 descriptor?? [ 593.161317][T10129] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 593.186644][T12040] mct_u232 2-1:0.228: MCT U232 converter detected [ 593.212889][T12040] mct_u232 ttyUSB0: expected endpoint missing [ 593.250307][T12040] usb 2-1: USB disconnect, device number 87 [ 593.258947][T12040] mct_u232 2-1:0.228: device disconnected [ 593.323907][T12576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1504'. [ 593.339900][T10129] usb 7-1: Using ep0 maxpacket: 8 [ 593.356985][T10129] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 593.371849][T10129] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.400865][T12576] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1504'. [ 593.410325][T12576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1504'. [ 593.419518][T10129] usb 7-1: Product: syz [ 593.423906][T10129] usb 7-1: Manufacturer: syz [ 593.428610][T10129] usb 7-1: SerialNumber: syz [ 593.440292][T10129] usb 7-1: config 0 descriptor?? [ 593.472616][T10129] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 593.644917][ T5970] usb 6-1: USB disconnect, device number 78 [ 593.657327][T12567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.675804][T12567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.685212][ T5970] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 593.978739][T12567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.979222][T12567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.982114][T10129] gspca_sonixj: reg_r err -32 [ 593.982209][T10129] sonixj 7-1:0.0: probe with driver sonixj failed with error -32 [ 594.269739][ T5970] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 594.426217][T12597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.435105][ T5970] usb 6-1: Using ep0 maxpacket: 16 [ 594.445022][ T5970] usb 6-1: config 4 has an invalid interface number: 51 but max is 0 [ 594.453386][ T5970] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 594.485589][ T5970] usb 6-1: config 4 has no interface number 0 [ 594.516937][ T5970] usb 6-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 594.543054][T12597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.603395][ T5970] usb 6-1: config 4 interface 51 has no altsetting 0 [ 594.640080][ T920] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 594.680801][ T5970] usb 6-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 594.690109][ T5970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.698344][ T5970] usb 6-1: Product: syz [ 594.706164][ T5970] usb 6-1: Manufacturer: syz [ 594.928643][ T920] usb 2-1: config 0 has no interfaces? [ 594.939190][T12594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.952805][ T5970] usb 6-1: SerialNumber: syz [ 594.953199][T12594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.004258][ T920] usb 2-1: New USB device found, idVendor=203e, idProduct=8888, bcdDevice=a8.71 [ 595.014865][ T5970] cdc_eem 6-1:4.51: probe with driver cdc_eem failed with error -22 [ 595.032840][ T920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.050393][ T920] usb 2-1: Product: syz [ 595.070666][ T920] usb 2-1: Manufacturer: syz [ 595.106977][ T920] usb 2-1: SerialNumber: syz [ 595.130825][ T920] usb 2-1: config 0 descriptor?? [ 596.193398][T12040] usb 7-1: USB disconnect, device number 54 [ 596.432426][ T5970] usb 2-1: USB disconnect, device number 88 [ 597.548803][T12625] libceph: resolve '0.0' (ret=-3): failed [ 597.625925][ T30] audit: type=1326 audit(1756222065.594:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12622 comm="syz.1.1514" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe77538ebe9 code=0x0 [ 598.293644][ T5970] usb 6-1: USB disconnect, device number 79 [ 598.313860][T10129] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 598.489360][T10129] usb 1-1: config 0 has no interfaces? [ 598.502474][T10129] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 598.512723][T10129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.520861][T10129] usb 1-1: Product: syz [ 598.539944][T10129] usb 1-1: Manufacturer: syz [ 598.551489][T10129] usb 1-1: SerialNumber: syz [ 598.582127][T10129] usb 1-1: config 0 descriptor?? [ 598.839404][ T5970] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 598.864484][T12632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.890739][T12632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.139704][ T5970] usb 6-1: Using ep0 maxpacket: 8 [ 599.158753][ T5970] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 599.214384][ T5970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.448787][ T5970] usb 6-1: Product: syz [ 599.464889][T12647] PKCS7: Unknown OID: [5] (bad) [ 599.471580][T12647] PKCS7: Only support pkcs7_signedData type [ 599.483172][ T5970] usb 6-1: Manufacturer: syz [ 599.531909][ T5970] usb 6-1: SerialNumber: syz [ 599.615732][ T5970] usb 6-1: config 0 descriptor?? [ 599.846446][ T5970] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 599.889741][ T5942] usb 7-1: new low-speed USB device number 55 using dummy_hcd [ 600.289714][ T5942] usb 7-1: device descriptor read/64, error -71 [ 600.476463][ T5970] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 600.488775][ T5970] usb 6-1: USB disconnect, device number 80 [ 600.540256][ T5942] usb 7-1: new low-speed USB device number 56 using dummy_hcd [ 600.679844][ T5942] usb 7-1: device descriptor read/64, error -71 [ 600.791069][ T5942] usb usb7-port1: attempt power cycle [ 601.139746][ T5942] usb 7-1: new low-speed USB device number 57 using dummy_hcd [ 601.237476][ T5942] usb 7-1: device descriptor read/8, error -71 [ 601.519654][ T5942] usb 7-1: new low-speed USB device number 58 using dummy_hcd [ 601.643601][ T5942] usb 7-1: device descriptor read/8, error -71 [ 601.727601][ T43] usb 1-1: USB disconnect, device number 97 [ 601.760448][ T5942] usb usb7-port1: unable to enumerate USB device [ 602.142380][T12671] ptrace attach of "./syz-executor exec"[6864] was attempted by "./syz-executor exec"[12671] [ 602.157455][T12671] dns_resolver: Unsupported server list version (0) [ 603.613591][T12693] libceph: resolve '0.0' (ret=-3): failed [ 603.695205][ T30] audit: type=1326 audit(1756222071.704:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12688 comm="syz.5.1530" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f472218ebe9 code=0x0 [ 604.264270][ T5942] usb 7-1: new full-speed USB device number 59 using dummy_hcd [ 604.471535][ T5942] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 604.480237][ T5942] usb 7-1: config 0 has no interface number 0 [ 604.487645][ T5942] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 604.528260][ T5942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.569337][ T5942] usb 7-1: config 0 descriptor?? [ 604.597300][ T5942] usb 7-1: selecting invalid altsetting 1 [ 604.614005][ T5942] dvb_ttusb_budget: ttusb_init_controller: error [ 604.648531][ T5942] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 604.670015][ T5970] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 604.841782][ T5970] usb 2-1: Using ep0 maxpacket: 16 [ 604.857152][ T5970] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 604.979953][ T5970] usb 2-1: config 0 has no interface number 0 [ 604.986442][ T5970] usb 2-1: too many endpoints for config 0 interface 41 altsetting 2: 171, using maximum allowed: 30 [ 605.015052][ T5942] DVB: Unable to find symbol cx22700_attach() [ 605.026071][ T5970] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 605.069925][ T5970] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 605.128374][ T5970] usb 2-1: config 0 interface 41 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 171 [ 605.179808][ T5942] DVB: Unable to find symbol tda10046_attach() [ 605.186024][ T5942] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 605.187638][T12708] openvswitch: netlink: Unknown key attributes 2 [ 605.232160][ T5970] usb 2-1: config 0 interface 41 has no altsetting 0 [ 605.285678][ T5970] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 605.332675][ T5942] usb 7-1: USB disconnect, device number 59 [ 605.348929][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.357138][ T5970] usb 2-1: Product: syz [ 605.409027][ T5970] usb 2-1: Manufacturer: syz [ 605.432108][ T5970] usb 2-1: SerialNumber: syz [ 605.467303][ T5970] usb 2-1: config 0 descriptor?? [ 605.485813][T12701] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 605.519851][T12714] tipc: Trying to set illegal importance in message [ 605.550188][T12701] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 605.784409][T12701] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 605.810685][T12701] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 605.900224][T12040] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 606.005237][T12725] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1538'. [ 606.040819][T12725] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1538'. [ 606.059791][T12725] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1538'. [ 606.072019][T12040] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.099846][T12040] usb 7-1: config 0 has no interfaces? [ 606.115653][T12040] usb 7-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=40.85 [ 606.130431][ T5970] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -32 [ 606.173769][T12040] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.205516][T12040] usb 7-1: config 0 descriptor?? [ 606.404166][T12727] kvm: kvm [12726]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x40600 [ 606.949083][ T5942] usb 2-1: USB disconnect, device number 89 [ 608.096998][T12754] input: syz0 as /devices/virtual/input/input39 [ 608.156214][T12754] syzkaller1: entered promiscuous mode [ 608.189895][T12754] syzkaller1: entered allmulticast mode [ 608.491986][T12757] cifs: Unknown parameter 'f' [ 608.496968][T10129] usb 7-1: USB disconnect, device number 60 [ 608.650286][ T5952] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 608.817024][ T5952] usb 2-1: unable to get BOS descriptor or descriptor too short [ 608.852792][ T5952] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 608.881053][ T5952] usb 2-1: can't read configurations, error -71 [ 608.919762][ T5970] usb 7-1: new full-speed USB device number 61 using dummy_hcd [ 609.129771][ T5970] usb 7-1: device descriptor read/64, error -71 [ 609.240033][ T5942] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 609.383314][ T5970] usb 7-1: new full-speed USB device number 62 using dummy_hcd [ 609.392290][ T5942] usb 6-1: Using ep0 maxpacket: 16 [ 609.400544][ T5942] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.425054][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 609.439101][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 609.452072][ T5942] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 609.472356][ T5942] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 609.514704][ T5942] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 609.528218][ T5942] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 609.559724][ T5970] usb 7-1: device descriptor read/64, error -71 [ 609.566172][ T5942] usb 6-1: Manufacturer: syz [ 609.600274][ T5942] usb 6-1: config 0 descriptor?? [ 609.692408][ T5970] usb usb7-port1: attempt power cycle [ 609.830643][T12783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1553'. [ 610.010372][ T5942] rc_core: IR keymap rc-hauppauge not found [ 610.016793][ T5942] Registered IR keymap rc-empty [ 610.025806][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 610.060979][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 610.069678][ T5970] usb 7-1: new full-speed USB device number 63 using dummy_hcd [ 610.101405][ T5970] usb 7-1: device descriptor read/8, error -71 [ 610.113161][ T5942] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 610.147353][ T5942] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input40 [ 610.164254][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 610.190100][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 610.229790][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 610.259816][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 610.289715][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 610.319984][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 610.349997][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 610.369717][ T5970] usb 7-1: new full-speed USB device number 64 using dummy_hcd [ 610.379765][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 610.390390][T12796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.400406][ T5970] usb 7-1: device descriptor read/8, error -71 [ 610.410202][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 610.416001][T12796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.510405][ T5970] usb usb7-port1: unable to enumerate USB device [ 610.517516][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 610.636713][ T5942] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 610.653426][ T5942] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 610.696444][ T5942] usb 6-1: USB disconnect, device number 81 [ 611.264935][T12809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1558'. [ 611.475464][T12813] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1559'. [ 611.521688][T12813] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1559'. [ 611.531297][T12813] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1559'. [ 612.679753][ T5970] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 612.874015][ T5970] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 612.909281][ T5970] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 612.942316][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.994107][ T5970] usb 2-1: config 0 descriptor?? [ 613.122000][ T5952] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 613.306519][ T5952] usb 1-1: config 255 has an invalid descriptor of length 69, skipping remainder of the config [ 613.317694][ T5952] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 613.338985][ T5952] usb 1-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 613.354755][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.368771][ T5952] usb 1-1: Product: syz [ 613.383793][ T5952] usb 1-1: Manufacturer: syz [ 613.405030][ T5952] usb 1-1: SerialNumber: syz [ 613.471538][ T5970] aquacomputer_d5next 0003:0C70:F00B.0018: hidraw0: USB HID v1.01 Device [HID 0c70:f00b] on usb-dummy_hcd.1-1/input0 [ 613.646078][ T5952] usb 1-1: USB disconnect, device number 98 [ 613.647402][T12824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.674925][T12824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.999421][ T5970] usb 2-1: USB disconnect, device number 92 [ 614.401721][T12842] libceph: resolve '0.0' (ret=-3): failed [ 614.423871][ T30] audit: type=1326 audit(1756222082.424:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.0.1565" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f566058ebe9 code=0x0 [ 614.499937][ T5970] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 614.619929][T12040] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 614.629763][ T5970] usb 2-1: device descriptor read/64, error -71 [ 614.796918][T12040] usb 8-1: unable to get BOS descriptor or descriptor too short [ 614.829246][T12040] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 614.900059][ T5970] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 614.908064][T12040] usb 8-1: can't read configurations, error -71 [ 615.040354][ T5970] usb 2-1: device descriptor read/64, error -71 [ 615.150593][ T5970] usb usb2-port1: attempt power cycle [ 615.219680][ T5952] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 615.389900][ T5952] usb 6-1: Using ep0 maxpacket: 8 [ 615.398823][ T5952] usb 6-1: unable to get BOS descriptor or descriptor too short [ 615.436642][ T5952] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 615.461038][ T5952] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 615.487127][T12850] program syz.0.1567 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 615.491109][ T5952] usb 6-1: config 4 has no interface number 0 [ 615.496645][ T5970] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 615.506429][ T5952] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 615.516496][T12850] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 615.535293][ T5970] usb 2-1: device descriptor read/8, error -71 [ 615.546269][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.546835][T12850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1567'. [ 615.556281][ T5952] usb 6-1: Product: syz [ 615.568914][ T5952] usb 6-1: Manufacturer: syz [ 615.574258][ T5952] usb 6-1: SerialNumber: syz [ 615.611848][T12850] fuse: Unknown parameter '' [ 615.779706][ T5970] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 615.838706][ T5970] usb 2-1: device descriptor read/8, error -71 [ 615.889836][ T5952] usb 6-1: Found UVC 0.02 device syz (04f2:b746) [ 615.906469][ T5952] usb 6-1: No valid video chain found. [ 615.950174][ T5970] usb usb2-port1: unable to enumerate USB device [ 615.966583][ T5952] usb 6-1: USB disconnect, device number 82 [ 616.259730][ T5970] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 616.305045][T12864] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1572'. [ 616.428487][ T5970] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 616.451563][ T5970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.475373][ T5970] usb 1-1: Product: syz [ 616.491529][ T5970] usb 1-1: Manufacturer: syz [ 616.501680][ T5970] usb 1-1: SerialNumber: syz [ 616.520686][ T5970] usb 1-1: config 0 descriptor?? [ 617.107602][ T5952] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 617.316265][ T5952] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 617.335886][ T5952] usb 7-1: config 0 has no interface number 0 [ 617.379019][ T5952] usb 7-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 617.476822][ T5952] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 617.533087][ T5952] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 617.591326][ T5952] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 617.635620][ T5952] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 617.681624][ T5952] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.786438][ T5952] usb 7-1: config 0 descriptor?? [ 617.825075][ T5970] usb 1-1: Firmware version (0.0) predates our first public release. [ 617.836727][ T5970] usb 1-1: Please update to version 0.2 or newer [ 618.527203][T12892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.555556][ T5952] usbhid 7-1:0.1: can't add hid device: -32 [ 618.563788][ T5952] usbhid 7-1:0.1: probe with driver usbhid failed with error -32 [ 618.586840][T12892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.634149][T12892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.664594][T12892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.699494][T12892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.713365][T12892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.724957][T12892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.738826][T12892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.757691][T12892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.773257][T12892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.424900][T12902] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1580'. [ 620.112939][ T981] usb 7-1: USB disconnect, device number 65 [ 620.409652][ T5952] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 621.119611][ T5952] usb 6-1: unable to get BOS descriptor or descriptor too short [ 621.142874][ T5952] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 621.184846][ T5952] usb 6-1: can't read configurations, error -71 [ 621.409193][T12040] usb 1-1: USB disconnect, device number 99 [ 621.630423][T12910] netlink: 'syz.6.1582': attribute type 2 has an invalid length. [ 621.725111][T12932] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 622.609778][ T43] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 622.663743][T12938] delete_channel: no stack [ 622.769481][ T43] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 622.809681][ T43] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 622.829682][ T43] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 622.855033][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.892764][T12937] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 622.930550][ T43] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 623.376005][T12952] libceph: resolve '0.0' (ret=-3): failed [ 623.415342][ T30] audit: type=1326 audit(1756222091.424:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12949 comm="syz.5.1592" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f472218ebe9 code=0x0 [ 625.246186][ T5942] usb 7-1: USB disconnect, device number 66 [ 626.229667][ T43] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 626.434085][ T43] usb 8-1: Using ep0 maxpacket: 8 [ 626.489722][ T43] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 626.507803][ T43] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 626.611840][ T43] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 626.656438][ T43] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 626.673978][ T5952] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 626.705283][ T43] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 626.753445][ T43] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 626.838810][ T5952] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 626.847263][ T5952] usb 6-1: can't read configurations, error -71 [ 626.849883][ T5942] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 626.871983][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.019702][ T5942] usb 7-1: Using ep0 maxpacket: 32 [ 627.176314][ T43] usb 8-1: usb_control_msg returned -32 [ 627.201195][ T43] usbtmc 8-1:16.0: can't read capabilities [ 627.292961][ T5942] usb 7-1: config 0 has an invalid interface number: 146 but max is 0 [ 627.381648][ T5942] usb 7-1: config 0 has no interface number 0 [ 627.459896][ T5942] usb 7-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 627.482481][ T5942] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 627.551858][ T5942] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 627.718717][ T5942] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 627.865286][ T5942] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 627.899809][ T43] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 628.018344][ T5942] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 628.073683][T13004] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 628.135610][T12999] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1600'. [ 628.149721][T12999] netlink: 'syz.7.1600': attribute type 5 has an invalid length. [ 628.157596][T12999] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1600'. [ 628.179475][T12999] geneve2: entered promiscuous mode [ 628.184849][T12999] geneve2: entered allmulticast mode [ 628.198286][ T5952] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 628.235640][ T59] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 628.244869][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 628.250165][ T5942] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 628.283562][ T59] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 628.312317][ T59] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 628.324348][ T59] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 628.379910][ T5952] usb 6-1: Using ep0 maxpacket: 8 [ 628.392248][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 628.412047][ T5952] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 628.423292][ T5942] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 628.465225][ T43] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 628.478676][ T5952] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 628.504412][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.542195][ T5952] usb 6-1: Product: syz [ 628.546802][ T5942] usb 7-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 628.550273][ T5952] usb 6-1: Manufacturer: syz [ 628.567092][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.612131][ T5952] usb 6-1: SerialNumber: syz [ 628.657180][ T5952] usb 6-1: config 0 descriptor?? [ 628.691338][ T43] usb 2-1: Product: syz [ 628.723318][ T43] usb 2-1: Manufacturer: syz [ 628.746327][ T5942] usb 7-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 628.801707][ T5942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.884390][ T5952] usb 6-1: USB disconnect, device number 87 [ 628.894690][ T43] usb 2-1: SerialNumber: syz [ 628.907962][ T5942] usb 7-1: Product: syz [ 628.994703][ T5942] usb 7-1: Manufacturer: syz [ 629.009412][ T5942] usb 7-1: SerialNumber: syz [ 629.038934][ T43] usb 2-1: config 0 descriptor?? [ 629.103261][ T5942] usb 7-1: config 0 descriptor?? [ 629.126555][T12998] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 629.143685][ T43] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 629.151173][ T5942] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 629.161390][ T5942] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 629.360034][T13001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.391269][T13001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.608706][ T5942] usb 8-1: USB disconnect, device number 10 [ 629.667455][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.674371][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.239694][ T5970] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 630.680655][T13019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.681085][T13019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.701905][T13020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.702426][T13020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.822193][ T43] gspca_ov534_9: reg_w failed -71 [ 630.842821][ T5970] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.853271][ T5970] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 630.862918][ T5970] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.894925][ T5970] usb 8-1: config 0 descriptor?? [ 630.925099][ T5970] pwc: Askey VC010 type 2 USB webcam detected. [ 631.031668][ T5942] usb 7-1: USB disconnect, device number 67 [ 631.043981][T13025] netlink: 87 bytes leftover after parsing attributes in process `syz.0.1612'. [ 631.129940][ T43] gspca_ov534_9: Unknown sensor 0000 [ 631.130045][ T43] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 631.208034][ T43] usb 2-1: USB disconnect, device number 97 [ 631.349232][ T5970] pwc: recv_control_msg error -32 req 02 val 2b00 [ 631.356896][ T5970] pwc: recv_control_msg error -32 req 02 val 2700 [ 631.370384][ T5970] pwc: recv_control_msg error -32 req 02 val 2c00 [ 631.387368][ T5970] pwc: recv_control_msg error -32 req 04 val 1000 [ 631.397523][ T5970] pwc: recv_control_msg error -32 req 04 val 1300 [ 631.410304][ T5970] pwc: recv_control_msg error -32 req 04 val 1400 [ 631.429387][ T5970] pwc: recv_control_msg error -32 req 02 val 2000 [ 631.453240][ T5970] pwc: recv_control_msg error -32 req 02 val 2100 [ 631.482815][ T5970] pwc: recv_control_msg error -32 req 04 val 1500 [ 631.500454][ T5970] pwc: recv_control_msg error -32 req 02 val 2500 [ 631.525325][ T5970] pwc: recv_control_msg error -32 req 02 val 2400 [ 631.540594][ T43] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 631.605372][ T5970] pwc: recv_control_msg error -32 req 02 val 2600 [ 631.697050][T13035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1612'. [ 631.745117][ T43] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 631.755600][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.781833][ T43] usb 2-1: config 0 descriptor?? [ 631.812199][ T43] cp210x 2-1:0.0: cp210x converter detected [ 631.919650][ T5942] usb 7-1: new full-speed USB device number 68 using dummy_hcd [ 631.927640][ T5970] pwc: recv_control_msg error -71 req 02 val 2800 [ 631.937744][ T5970] pwc: recv_control_msg error -71 req 04 val 1100 [ 631.946555][ T5970] pwc: recv_control_msg error -71 req 04 val 1200 [ 631.961775][ T5970] pwc: Registered as video103. [ 631.982276][ T5970] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input41 [ 632.050470][ T5970] usb 8-1: USB disconnect, device number 11 [ 632.060948][T13023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.134480][ T5942] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 632.148742][ T5942] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 632.179306][T13023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.216843][ T5942] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 632.216877][ T5942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.255273][T13038] fuse: blksize only supported for fuseblk [ 632.457957][ T43] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -121 [ 632.497643][ T5942] usb 7-1: GET_CAPABILITIES returned 0 [ 632.515540][ T5942] usbtmc 7-1:16.0: can't read capabilities [ 632.521802][ T5928] usb 6-1: new low-speed USB device number 88 using dummy_hcd [ 632.643169][T13043] tipc: Enabling of bearer rejected, failed to enable media [ 632.660182][T13023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1611'. [ 632.672905][ T43] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 632.689340][T13034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.698861][T13034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.712170][ T5970] usb 7-1: USB disconnect, device number 68 [ 632.718817][ T43] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 632.725599][ T5928] usb 6-1: Invalid ep0 maxpacket: 32 [ 632.777850][ T43] usb 2-1: cp210x converter now attached to ttyUSB0 [ 632.789061][ T43] usb 2-1: USB disconnect, device number 98 [ 632.819634][ T5942] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 632.830398][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 632.853908][ T43] cp210x 2-1:0.0: device disconnected [ 632.869675][ T5928] usb 6-1: new low-speed USB device number 89 using dummy_hcd [ 632.983563][ T5942] usb 8-1: Using ep0 maxpacket: 8 [ 632.995523][ T5942] usb 8-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 633.007308][ T5942] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 633.021456][ T5942] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.036136][ T5942] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 633.051246][ T5942] usb 8-1: config 0 interface 0 has no altsetting 0 [ 633.058020][ T5942] usb 8-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 633.067288][ T5928] usb 6-1: Invalid ep0 maxpacket: 32 [ 633.076138][ T5928] usb usb6-port1: attempt power cycle [ 633.090748][ T5942] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.112732][ T5942] usb 8-1: config 0 descriptor?? [ 633.392000][T13054] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1619'. [ 633.435716][ T5928] usb 6-1: new low-speed USB device number 90 using dummy_hcd [ 633.645873][ T5928] usb 6-1: Invalid ep0 maxpacket: 32 [ 633.649792][T12040] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 633.727430][ T5942] logitech-djreceiver 0003:046D:C53A.0019: hidraw0: USB HID v0.81 Device [HID 046d:c53a] on usb-dummy_hcd.7-1/input0 [ 633.813908][T12040] usb 7-1: Using ep0 maxpacket: 8 [ 633.821103][T12040] usb 7-1: config 5 has an invalid interface number: 35 but max is 1 [ 633.837597][T12040] usb 7-1: config 5 has an invalid interface number: 4 but max is 1 [ 633.866377][T12040] usb 7-1: config 5 has an invalid interface number: 4 but max is 1 [ 633.909740][ T5928] usb 6-1: new low-speed USB device number 91 using dummy_hcd [ 633.924994][T12040] usb 7-1: config 5 has no interface number 0 [ 633.934401][T12040] usb 7-1: config 5 has no interface number 1 [ 633.940968][T12040] usb 7-1: config 5 interface 35 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 633.973985][T12040] usb 7-1: config 5 interface 4 altsetting 9 endpoint 0x5 has an invalid bInterval 64, changing to 10 [ 633.974334][ T5942] usb 8-1: USB disconnect, device number 12 [ 633.996114][T12040] usb 7-1: config 5 interface 4 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 634.014001][T12040] usb 7-1: config 5 interface 35 has no altsetting 0 [ 634.022151][T12040] usb 7-1: config 5 interface 4 has no altsetting 0 [ 634.028936][T12040] usb 7-1: config 5 interface 4 has no altsetting 1 [ 634.042534][T12040] usb 7-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=d4.1b [ 634.056645][T12040] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.075849][T12040] usb 7-1: Product: syz [ 634.127320][T12040] usb 7-1: Manufacturer: syz [ 634.137412][T12040] usb 7-1: SerialNumber: syz [ 634.147848][ T5928] usb 6-1: Invalid ep0 maxpacket: 32 [ 634.189828][ T5928] usb usb6-port1: unable to enumerate USB device [ 634.466950][T12040] ttusbir 7-1:5.35: cannot find expected altsetting [ 634.534201][T12040] ttusbir 7-1:5.4: cannot find expected altsetting [ 634.547680][T13063] netlink: 'syz.1.1618': attribute type 4 has an invalid length. [ 634.585857][T13063] netlink: 'syz.1.1618': attribute type 4 has an invalid length. [ 634.661780][T13063] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 634.689949][T12040] usb 7-1: USB disconnect, device number 69 [ 635.342413][T12040] hid_parser_main: 180 callbacks suppressed [ 635.342431][T12040] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 635.407725][T12040] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 636.029809][T12040] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 636.224361][T13090] libceph: resolve '0.0' (ret=-3): failed [ 636.241729][T12040] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.252239][T12040] usb 7-1: config 0 interface 0 has no altsetting 0 [ 636.261671][T12040] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 636.270894][T12040] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.278901][T12040] usb 7-1: Product: syz [ 636.308151][T12040] usb 7-1: Manufacturer: syz [ 636.329765][T12040] usb 7-1: SerialNumber: syz [ 636.406040][T12040] usb 7-1: config 0 descriptor?? [ 636.459164][T12040] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 636.548903][T12040] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 636.574625][ T30] audit: type=1326 audit(1756222104.404:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.0.1627" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f566058ebe9 code=0x0 [ 636.579753][ T5952] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 636.615565][T12040] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 636.669670][T12040] usb 7-1: media controller created [ 636.715237][T12040] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 636.822805][ T5952] usb 6-1: device descriptor read/64, error -71 [ 636.874206][T12040] DVB: Unable to find symbol tda10046_attach() [ 636.881918][T12040] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 636.900099][T12040] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 636.919809][ T5928] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 637.151506][ T5952] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 637.219668][ T5928] usb 8-1: Using ep0 maxpacket: 8 [ 637.244602][ T5928] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 637.256536][ T5928] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 637.269461][ T5928] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 637.281061][ T5928] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 637.289889][ T5952] usb 6-1: device descriptor read/64, error -71 [ 637.305583][ T5928] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 637.316252][ T5928] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.410255][ T5952] usb usb6-port1: attempt power cycle [ 637.798005][T13109] fuse: Bad value for 'fd' [ 637.803144][ T5952] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 637.840720][ T5952] usb 6-1: device descriptor read/8, error -71 [ 638.079745][ T5952] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 638.101391][ T5952] usb 6-1: device descriptor read/8, error -71 [ 638.210174][ T5952] usb usb6-port1: unable to enumerate USB device [ 638.248114][T12040] dvb_usb_m920x 7-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 638.276855][T12040] usb 7-1: USB disconnect, device number 70 [ 638.693474][T13119] : entered promiscuous mode [ 639.089966][ T5942] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 639.259779][ T5942] usb 6-1: Using ep0 maxpacket: 16 [ 639.273111][ T5942] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.290136][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 639.304657][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 639.315820][ T5942] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 639.333143][ T5970] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 639.345031][ T5942] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.364017][ T5942] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 639.374775][ T5942] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 639.385869][ T5942] usb 6-1: Manufacturer: syz [ 639.396851][ T5942] usb 6-1: config 0 descriptor?? [ 639.466071][ T5928] usb 8-1: usb_control_msg returned -71 [ 639.472614][ T5928] usbtmc 8-1:16.0: can't read capabilities [ 639.491621][ T5970] usb 7-1: Using ep0 maxpacket: 16 [ 639.510404][ T5970] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 639.535242][ T5928] usb 8-1: USB disconnect, device number 13 [ 639.548149][ T5970] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.582433][ T5970] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 639.611409][ T5970] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.643804][T13125] tipc: Enabled bearer , priority 0 [ 639.650600][ T5970] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 639.665464][T13125] syzkaller0: entered promiscuous mode [ 639.671862][T13125] syzkaller0: entered allmulticast mode [ 639.679208][ T5970] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.707417][ T5970] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 639.718350][ T5970] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.731499][ T5970] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 639.763612][T13125] tipc: Resetting bearer [ 639.770695][ T5970] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.781772][ T5970] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 639.801027][ T5970] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.815908][ T5970] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 639.850142][ T5970] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.876961][ T5970] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 639.920138][ T5970] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.963456][ T5970] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 639.982808][ T5942] rc_core: IR keymap rc-hauppauge not found [ 640.029623][ T5970] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 640.038779][ T5942] Registered IR keymap rc-empty [ 640.052348][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 640.064420][ T5970] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.121725][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 640.140430][ T5970] usb 7-1: config 0 descriptor?? [ 640.163081][ T5942] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 640.216757][ T5942] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input44 [ 640.361318][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 640.363777][T13155] libceph: resolve '0.0' (ret=-3): failed [ 640.429740][ T30] audit: type=1326 audit(1756222108.434:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13149 comm="syz.0.1642" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f566058ebe9 code=0x0 [ 640.509742][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 640.569792][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 640.610584][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 640.632117][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 640.681567][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 640.729756][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 640.773766][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 640.782879][ T5970] tipc: Node number set to 3056067730 [ 640.823504][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 640.835590][T13124] tipc: Resetting bearer [ 640.892918][ T5942] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 640.922829][T13124] tipc: Disabling bearer [ 640.964000][ T5942] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 640.987321][ T5942] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 641.167788][ T5942] usb 6-1: USB disconnect, device number 96 [ 641.378496][ T6046] netdevsim netdevsim7 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 641.408413][ T6046] netdevsim netdevsim7 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 641.443990][ T6046] netdevsim netdevsim7 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 641.498678][ T6046] netdevsim netdevsim7 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 641.863272][T13167] dvmrp0: entered allmulticast mode [ 641.908498][T13177] dvmrp0: left allmulticast mode [ 642.132871][ T5942] usb 7-1: USB disconnect, device number 71 [ 642.169791][ T5970] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 642.291607][T13184] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1650'. [ 642.330053][T13184] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1650'. [ 642.344227][ T5970] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 642.357484][ T5970] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 642.375992][T13184] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1650'. [ 642.391016][ T5970] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 642.403880][ T5970] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.415375][T13184] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1650'. [ 642.653674][ T5970] usb 8-1: GET_CAPABILITIES returned 0 [ 642.659291][ T5970] usbtmc 8-1:16.0: can't read capabilities [ 642.860801][ T5970] usb 8-1: USB disconnect, device number 14 [ 643.169953][ T5970] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 643.344751][ T5970] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 643.369029][ T5970] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.427771][ T5970] usb 8-1: Product: syz [ 643.442664][ T5970] usb 8-1: Manufacturer: syz [ 643.489723][ T5970] usb 8-1: SerialNumber: syz [ 643.551736][ T5970] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 643.577892][ T5928] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 644.388845][ T5970] usb 8-1: USB disconnect, device number 15 [ 644.621336][ T5928] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 644.649421][ T5928] ath9k_htc: Failed to initialize the device [ 644.677717][ T5970] usb 8-1: ath9k_htc: USB layer deinitialized [ 644.750253][T13217] libceph: resolve '0.0' (ret=-3): failed [ 644.789358][ T30] audit: type=1326 audit(1756222112.794:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.1.1658" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe77538ebe9 code=0x0 [ 644.797509][T13209] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1657'. [ 645.086064][ T5970] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 645.213627][T13223] netlink: 'syz.0.1660': attribute type 1 has an invalid length. [ 645.324262][T13223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.341637][T13223] netlink: 'syz.0.1660': attribute type 1 has an invalid length. [ 645.356724][T13223] netlink: 'syz.0.1660': attribute type 1 has an invalid length. [ 645.365969][T13223] netlink: 'syz.0.1660': attribute type 1 has an invalid length. [ 645.374967][T13223] netlink: 'syz.0.1660': attribute type 1 has an invalid length. [ 645.383495][T13223] netlink: 'syz.0.1660': attribute type 1 has an invalid length. [ 645.391773][T13223] netlink: 'syz.0.1660': attribute type 1 has an invalid length. [ 645.400156][T13223] netlink: 'syz.0.1660': attribute type 1 has an invalid length. [ 645.408346][T13223] netlink: 'syz.0.1660': attribute type 1 has an invalid length. [ 645.416703][T13223] netlink: 'syz.0.1660': attribute type 1 has an invalid length. [ 646.491032][T13238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1663'. [ 647.609790][T12040] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 647.790652][T12040] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 647.840820][T12040] usb 2-1: config 0 has no interface number 0 [ 647.910649][T12040] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 647.971198][T12040] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.986342][T12040] usb 2-1: Product: syz [ 648.008989][T12040] usb 2-1: Manufacturer: syz [ 648.016791][T12040] usb 2-1: SerialNumber: syz [ 648.040140][T12040] usb 2-1: config 0 descriptor?? [ 648.062357][T12040] hub 2-1:0.217: bad descriptor, ignoring hub [ 648.078380][T12040] hub 2-1:0.217: probe with driver hub failed with error -5 [ 648.270801][T12040] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 648.283129][T12040] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 648.298663][T12040] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 648.377746][T12040] usb 2-1: media controller created [ 648.486991][T12040] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 648.600068][ T981] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 648.648832][T12040] DVB: Unable to find symbol dib7000p_attach() [ 648.662205][T12040] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 648.754885][T13266] netlink: 45 bytes leftover after parsing attributes in process `syz.6.1672'. [ 648.759730][ T981] usb 6-1: Using ep0 maxpacket: 8 [ 648.801689][ T981] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 648.822437][ T981] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 648.850178][ T981] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 648.899650][T12040] rc_core: IR keymap rc-dib0700-rc5 not found [ 648.907739][T12040] Registered IR keymap rc-empty [ 648.947346][T12040] dvb-usb: could not initialize remote control. [ 648.976202][T12040] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 649.057051][T13268] tipc: Enabled bearer , priority 0 [ 649.088102][T13268] tipc: Resetting bearer [ 649.134102][T13267] tipc: Disabling bearer [ 649.246063][T12040] usb 2-1: USB disconnect, device number 99 [ 649.343777][T12040] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 649.848661][T13278] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 650.343234][T13286] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1677'. [ 651.645854][T13292] can: request_module (can-proto-0) failed. [ 651.689826][ T5952] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 651.916319][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.927558][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.965115][ T5952] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 652.018674][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.141887][ T5952] usb 1-1: config 0 descriptor?? [ 652.257207][ T981] usb 6-1: string descriptor 0 read error: -71 [ 652.279795][ T981] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 652.354202][ T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.397127][ T981] usb 6-1: can't set config #1, error -71 [ 652.413369][ T981] usb 6-1: USB disconnect, device number 97 [ 653.179813][T12040] usb 6-1: new full-speed USB device number 98 using dummy_hcd [ 653.298836][ T5952] uclogic 0003:256C:006D.001B: failed retrieving string descriptor #100: -71 [ 653.326038][ T5952] uclogic 0003:256C:006D.001B: failed retrieving pen parameters: -71 [ 653.353578][ T5952] uclogic 0003:256C:006D.001B: failed probing pen v1 parameters: -71 [ 653.372305][ T5952] uclogic 0003:256C:006D.001B: failed probing parameters: -71 [ 653.389767][ T5952] uclogic 0003:256C:006D.001B: probe with driver uclogic failed with error -71 [ 653.436674][ T5952] usb 1-1: USB disconnect, device number 100 [ 653.632582][ T5942] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 653.695541][T13330] tipc: Enabled bearer , priority 0 [ 653.721985][T13336] loop2: detected capacity change from 0 to 7 [ 653.726595][T13331] syzkaller0: entered promiscuous mode [ 653.729314][T13336] Dev loop2: unable to read RDB block 7 [ 653.739296][T13331] syzkaller0: entered allmulticast mode [ 653.744282][T13336] loop2: unable to read partition table [ 653.754446][T13336] loop2: partition table beyond EOD, truncated [ 653.761062][T13336] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 653.809962][ T5942] usb 2-1: Using ep0 maxpacket: 8 [ 653.822529][ T5942] usb 2-1: config 0 has an invalid interface number: 250 but max is 0 [ 653.834980][ T5942] usb 2-1: config 0 has no interface number 0 [ 653.847077][T13331] tipc: Resetting bearer [ 653.865760][ T5942] usb 2-1: New USB device found, idVendor=a168, idProduct=0614, bcdDevice=1b.10 [ 653.883173][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.904369][ T5942] usb 2-1: Product: syz [ 653.908591][ T5942] usb 2-1: Manufacturer: syz [ 653.926569][ T5942] usb 2-1: SerialNumber: syz [ 653.938743][T13331] tipc: Disabling bearer [ 653.948354][ T5942] usb 2-1: config 0 descriptor?? [ 653.962067][ T5942] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0614 [ 653.970038][T13341] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1694'. [ 654.159696][T12040] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 654.163114][T13326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.179894][ T5952] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 654.186641][T13326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.201461][ T5942] gspca_sn9c20x: Write register 1000 failed -71 [ 654.207780][ T5942] gspca_sn9c20x: Device initialization failed [ 654.217261][ T5942] gspca_sn9c20x 2-1:0.250: probe with driver gspca_sn9c20x failed with error -71 [ 654.238948][ T5942] usb 2-1: USB disconnect, device number 100 [ 654.313708][ T981] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 654.322738][T12040] usb 6-1: Using ep0 maxpacket: 16 [ 654.332057][T12040] usb 6-1: config 0 has an invalid interface number: 72 but max is 0 [ 654.340487][ T5952] usb 1-1: Using ep0 maxpacket: 32 [ 654.345758][T12040] usb 6-1: config 0 has no interface number 0 [ 654.355900][T12040] usb 6-1: config 0 interface 72 altsetting 5 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 654.366968][T12040] usb 6-1: config 0 interface 72 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 654.378184][ T5952] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 654.386470][T12040] usb 6-1: config 0 interface 72 has no altsetting 0 [ 654.393439][ T5952] usb 1-1: config 0 has no interface number 0 [ 654.404533][T12040] usb 6-1: Dual-Role OTG device on HNP port [ 654.411405][T12040] usb 6-1: New USB device found, idVendor=10b5, idProduct=ac70, bcdDevice=53.de [ 654.420751][ T5952] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 654.430678][T12040] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.438738][T12040] usb 6-1: Product: syz [ 654.443066][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.451271][ T5952] usb 1-1: Product: syz [ 654.455458][ T5952] usb 1-1: Manufacturer: syz [ 654.463344][T12040] usb 6-1: Manufacturer: syz [ 654.467969][T12040] usb 6-1: SerialNumber: syz [ 654.472760][ T5952] usb 1-1: SerialNumber: syz [ 654.481065][ T981] usb 7-1: Using ep0 maxpacket: 8 [ 654.487432][ T5952] usb 1-1: config 0 descriptor?? [ 654.493539][T12040] usb 6-1: config 0 descriptor?? [ 654.501861][ T981] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 654.512523][T12040] cp210x 6-1:0.72: cp210x converter detected [ 654.518737][ T981] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 654.529208][ T981] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 654.541016][ T5952] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 654.552429][ T981] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 654.561712][T10129] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 654.569504][ T981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.578401][ T981] usb 7-1: Product: syz [ 654.582788][ T981] usb 7-1: Manufacturer: syz [ 654.587441][ T981] usb 7-1: SerialNumber: syz [ 654.707130][T13333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.716200][T13333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.724287][T10129] usb 8-1: Using ep0 maxpacket: 8 [ 654.731689][T12040] cp210x 6-1:0.72: failed to get vendor val 0x370b size 1: -71 [ 654.740448][T10129] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 654.767056][T12040] cp210x 6-1:0.72: querying part number failed [ 654.780551][ T5952] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 654.795642][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 654.805463][T10129] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 654.820336][T12040] usb 6-1: cp210x converter now attached to ttyUSB2 [ 654.833022][T10129] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.842587][ T5952] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 654.858970][T12040] usb 6-1: USB disconnect, device number 99 [ 654.885092][T10129] usb 8-1: config 0 descriptor?? [ 654.902109][T12040] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 654.911825][ T5952] usb 1-1: USB disconnect, device number 101 [ 654.955681][T12040] cp210x 6-1:0.72: device disconnected [ 654.964299][T13355] loop2: detected capacity change from 0 to 7 [ 654.986036][ T5952] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 654.989370][T13355] loop2: p1 [ 655.008968][T13355] loop2: partition table partially beyond EOD, truncated [ 655.023914][T13355] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 655.059017][ T5952] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 655.073600][ T5952] quatech2 1-1:0.51: device disconnected [ 655.143715][T10129] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 655.248641][ T981] usb 7-1: 0:2 : does not exist [ 655.446368][T13370] validate_nla: 24 callbacks suppressed [ 655.446389][T13370] netlink: 'syz.1.1703': attribute type 1 has an invalid length. [ 655.464596][ T5942] usb 7-1: USB disconnect, device number 72 [ 655.475300][T13370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1703'. [ 655.591011][ T981] usb 8-1: USB disconnect, device number 17 [ 655.597000][ C0] iowarrior 8-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 655.825042][T13394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.840951][T13394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.089704][ T5952] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 656.530150][ T5942] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 656.766874][ T5942] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 656.873644][ T5942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.889125][ T5942] usb 7-1: config 0 descriptor?? [ 656.904463][ T5942] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 657.886107][T13423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1716'. [ 658.133549][ T5942] gspca_stv06xx: I2C: Read error writing address: -71 [ 658.230460][T13432] vim2m vim2m.0: vidioc_s_fmt queue busy [ 658.558027][ T5942] usb 7-1: USB disconnect, device number 73 [ 659.189820][ T5970] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 659.349808][ T5970] usb 6-1: Using ep0 maxpacket: 32 [ 659.359359][ T5970] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 659.385951][ T5970] usb 6-1: config 0 has no interface number 0 [ 659.491322][ T5970] usb 6-1: config 0 interface 184 has no altsetting 0 [ 659.534782][ T5970] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 659.547762][ T5970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.568974][ T5970] usb 6-1: Product: syz [ 659.580921][ T5970] usb 6-1: Manufacturer: syz [ 659.628374][T13443] tipc: Enabling of bearer rejected, already enabled [ 659.750069][ T5970] usb 6-1: SerialNumber: syz [ 659.767014][ T5970] usb 6-1: config 0 descriptor?? [ 659.778919][T13443] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 659.781599][ T5970] smsc75xx v1.0.0 [ 659.800238][ T5970] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 659.839751][T13443] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 659.849032][ T5970] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 660.059195][T13435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.067223][T13435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.086430][T13435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.094251][T13435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.111573][T13436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.122176][T13436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.219653][ T5970] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 661.389666][ T5970] usb 1-1: Using ep0 maxpacket: 8 [ 661.492677][ T5970] usb 1-1: config 2 has an invalid interface number: 169 but max is 0 [ 661.501027][ T5970] usb 1-1: config 2 has no interface number 0 [ 661.507151][ T5970] usb 1-1: config 2 interface 169 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 661.616013][T13460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1726'. [ 661.766308][T12040] usb 6-1: USB disconnect, device number 100 [ 661.916082][ T5970] usb 1-1: config 2 interface 169 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 661.946487][ T5970] usb 1-1: config 2 interface 169 altsetting 0 endpoint 0x8B has an invalid bInterval 129, changing to 11 [ 661.986024][ T5970] usb 1-1: config 2 interface 169 altsetting 0 endpoint 0x8B has invalid maxpacket 58232, setting to 1024 [ 662.067609][ T5970] usb 1-1: config 2 interface 169 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 662.108835][ T5970] usb 1-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 662.122025][ T5970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.144446][ T5970] cypress_m8 1-1:2.169: DeLorme Earthmate USB converter detected [ 662.352930][ T5970] usb 1-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 662.495695][ T5970] usb 1-1: USB disconnect, device number 103 [ 662.525082][ T5970] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 662.573308][ T5970] cypress_m8 1-1:2.169: device disconnected [ 662.669750][T10129] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 662.823481][T10129] usb 8-1: unable to get BOS descriptor or descriptor too short [ 662.834044][T10129] usb 8-1: config 2 has an invalid interface number: 99 but max is 0 [ 662.842367][T10129] usb 8-1: config 2 has no interface number 0 [ 662.848849][T10129] usb 8-1: config 2 interface 99 has no altsetting 0 [ 662.907019][T10129] usb 8-1: New USB device found, idVendor=0840, idProduct=0082, bcdDevice= 0.01 [ 662.934671][T10129] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.998963][T10129] usb 8-1: Product: syz [ 663.008886][T10129] usb 8-1: Manufacturer: syz [ 663.026082][T10129] usb 8-1: SerialNumber: syz [ 663.274816][T10129] usb-storage 8-1:2.99: USB Mass Storage device detected [ 663.296856][T10129] usb-storage 8-1:2.99: Quirks match for vid 0840 pid 0082: 10 [ 663.550972][ T5970] usb 8-1: USB disconnect, device number 18 [ 664.455608][T13525] netlink: 39 bytes leftover after parsing attributes in process `syz.5.1744'. [ 664.485762][T13525] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1744'. [ 664.656935][T13534] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 664.670898][T13534] block device autoloading is deprecated and will be removed. [ 665.119728][ T5970] usb 7-1: new low-speed USB device number 74 using dummy_hcd [ 665.281322][ T5970] usb 7-1: device descriptor read/64, error -71 [ 665.559753][ T5970] usb 7-1: new low-speed USB device number 75 using dummy_hcd [ 665.679858][T10129] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 665.689666][ T5970] usb 7-1: device descriptor read/64, error -71 [ 665.812778][ T5970] usb usb7-port1: attempt power cycle [ 665.889717][ T5942] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 665.910707][T10129] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 665.914809][T13566] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1756'. [ 665.972917][T10129] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 666.004657][T10129] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 666.051575][ T5942] usb 8-1: config 150 has an invalid interface number: 204 but max is 1 [ 666.063002][ T5942] usb 8-1: config 150 has no interface number 0 [ 666.069310][ T5942] usb 8-1: config 150 interface 204 has no altsetting 0 [ 666.105230][ T5942] usb 8-1: config 150 interface 1 has no altsetting 0 [ 666.114512][T10129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.125300][ T5942] usb 8-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 666.136417][ T5942] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.179464][T13555] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 666.187231][ T5970] usb 7-1: new low-speed USB device number 76 using dummy_hcd [ 666.193132][T10129] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 666.195451][ T5942] usb 8-1: Product: syz [ 666.227784][ T5942] usb 8-1: Manufacturer: syz [ 666.253456][ T5970] usb 7-1: device descriptor read/8, error -71 [ 666.286275][ T5942] usb 8-1: SerialNumber: syz [ 666.512134][T13555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.522805][T13555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.548690][T13573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.560342][T13573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.589760][ T5970] usb 7-1: new low-speed USB device number 77 using dummy_hcd [ 666.600989][ T5942] xr_serial 8-1:150.204: xr_serial converter detected [ 666.651067][ T5970] usb 7-1: device descriptor read/8, error -71 [ 666.689686][ T5928] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 666.799719][T13045] usb 6-1: USB disconnect, device number 101 [ 666.811672][ T5970] usb usb7-port1: unable to enumerate USB device [ 666.827686][ T30] audit: type=1326 audit(1756222134.754:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13552 comm="syz.5.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472218ebe9 code=0x7ffc0000 [ 666.870486][ T30] audit: type=1326 audit(1756222134.754:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13552 comm="syz.5.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f472218ebe9 code=0x7ffc0000 [ 666.898241][ T30] audit: type=1326 audit(1756222134.754:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13552 comm="syz.5.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472218ebe9 code=0x7ffc0000 [ 666.929805][ T30] audit: type=1326 audit(1756222134.754:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13552 comm="syz.5.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f472218ebe9 code=0x7ffc0000 [ 667.006284][ T30] audit: type=1326 audit(1756222134.764:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13552 comm="syz.5.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472218ebe9 code=0x7ffc0000 [ 667.046794][ T30] audit: type=1326 audit(1756222134.764:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13552 comm="syz.5.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f472218ebe9 code=0x7ffc0000 [ 667.074148][ T30] audit: type=1326 audit(1756222134.764:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13552 comm="syz.5.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472218ebe9 code=0x7ffc0000 [ 667.100546][ T30] audit: type=1326 audit(1756222134.764:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13552 comm="syz.5.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f472218ebe9 code=0x7ffc0000 [ 667.123793][ T30] audit: type=1326 audit(1756222134.764:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13552 comm="syz.5.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472218ebe9 code=0x7ffc0000 [ 667.147308][ T30] audit: type=1326 audit(1756222134.774:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13552 comm="syz.5.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f472218ebe9 code=0x7ffc0000 [ 667.460213][ T5942] usb 8-1: xr_serial converter now attached to ttyUSB0 [ 667.649690][T13045] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 667.809636][ T5928] usb 1-1: device descriptor read/64, error -71 [ 667.822070][T13045] usb 2-1: device descriptor read/64, error -71 [ 668.060160][ T5928] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 668.090562][T13045] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 668.138674][T13597] tipc: Enabled bearer , priority 0 [ 668.148151][T13597] tipc: Resetting bearer [ 668.157047][T13596] tipc: Disabling bearer [ 668.229780][T13045] usb 2-1: device descriptor read/64, error -71 [ 668.241864][ T5928] usb 1-1: unable to get BOS descriptor or descriptor too short [ 668.253391][ T5928] usb 1-1: config 6 has an invalid interface number: 158 but max is 0 [ 668.262968][ T5928] usb 1-1: config 6 has no interface number 0 [ 668.269226][ T5928] usb 1-1: config 6 interface 158 has no altsetting 0 [ 668.280697][ T5928] usb 1-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 668.293771][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.312021][ T5928] usb 1-1: Product: syz [ 668.316359][ T5928] usb 1-1: Manufacturer: syz [ 668.323114][ T5928] usb 1-1: SerialNumber: syz [ 668.349942][T13045] usb usb2-port1: attempt power cycle [ 668.475981][T13603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1768'. [ 668.608984][T13600] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1767'. [ 668.636738][T13600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 668.735992][T13045] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 668.768047][ T5942] usb 8-1: USB disconnect, device number 19 [ 668.783112][T13045] usb 2-1: device descriptor read/8, error -71 [ 668.801548][ T5942] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 668.824033][ T5942] xr_serial 8-1:150.204: device disconnected [ 669.042372][T13045] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 669.082645][T13045] usb 2-1: device descriptor read/8, error -71 [ 669.204336][T13045] usb usb2-port1: unable to enumerate USB device [ 669.672109][T13624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 669.681577][T13624] bond0: (slave bond1): Enslaving as an active interface with an up link [ 669.705074][T13626] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 669.739708][T13045] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 669.857495][T13630] loop2: detected capacity change from 0 to 7 [ 669.864819][ T5928] rtsx_usb 1-1:6.158: probe with driver rtsx_usb failed with error -110 [ 669.877495][ T5971] Dev loop2: unable to read RDB block 7 [ 669.889985][ T5928] usb 1-1: USB disconnect, device number 105 [ 669.892777][ T5971] loop2: unable to read partition table [ 669.896175][T13045] usb 8-1: Using ep0 maxpacket: 16 [ 669.903096][ T5971] loop2: partition table beyond EOD, truncated [ 669.928450][T13630] Dev loop2: unable to read RDB block 7 [ 669.929188][T13045] usb 8-1: config 0 has an invalid interface number: 217 but max is 0 [ 669.937816][T13630] loop2: unable to read partition table [ 669.953680][T13630] loop2: partition table beyond EOD, truncated [ 669.964266][T13045] usb 8-1: config 0 has no interface number 0 [ 669.972384][T13630] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 669.981173][T13045] usb 8-1: too many endpoints for config 0 interface 217 altsetting 3: 249, using maximum allowed: 30 [ 670.005176][T13045] usb 8-1: config 0 interface 217 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 249 [ 670.038970][T13045] usb 8-1: config 0 interface 217 has no altsetting 0 [ 670.051061][T13045] usb 8-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=ce.a8 [ 670.060583][T13045] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.068736][T13045] usb 8-1: Product: syz [ 670.074197][T13045] usb 8-1: Manufacturer: syz [ 670.078837][T13045] usb 8-1: SerialNumber: syz [ 670.087692][T13045] usb 8-1: config 0 descriptor?? [ 670.335516][T13045] usb 8-1: USB disconnect, device number 20 [ 670.557931][T13639] tipc: Enabling of bearer rejected, already enabled [ 670.588594][T13639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1777'. [ 670.799499][T13642] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1776'. [ 670.829408][T13642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1776'. [ 671.698132][T13659] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20004 [ 672.189720][T13045] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 672.349769][T13045] usb 7-1: Using ep0 maxpacket: 8 [ 672.363162][T13045] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 672.386593][T13045] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.436653][T13045] usb 7-1: config 0 descriptor?? [ 672.691692][T13666] libceph: resolve '0.0' (ret=-3): failed [ 672.720211][T13045] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 672.796857][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 672.796877][ T30] audit: type=1326 audit(1756222140.804:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13663 comm="syz.5.1783" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f472218ebe9 code=0x0 [ 672.824996][ C0] vkms_vblank_simulate: vblank timer overrun [ 673.073310][T13671] netlink: 'syz.1.1784': attribute type 10 has an invalid length. [ 673.379995][ T5928] usb 2-1: new low-speed USB device number 106 using dummy_hcd [ 673.642159][ T5928] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 673.652497][ T5928] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 673.675101][ T5928] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 673.684818][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.694527][ T5928] usb 2-1: Product: ᠉ [ 673.704728][ T5928] usb 2-1: Manufacturer: Э [ 673.716566][ T5928] usb 2-1: SerialNumber: ⥂뭙隕剄啊줒쬂歼碽蟜ᤵ臨⮪ᷳ죬桎᐀島神濛탭셟无뀟ਝꈎ륏磖쑤䬠ꨌ⹡溗湨绎쀹⺷퐡㬻뮵羆䆰엢阅㦥디娶鞐岁츶歆ᖰ寀饪꫷힠뉉秊阛Ỉ鉇꤄腻㥆姴ꪫ蹞ℽ驝晦简큝㩧괓쾔쟋ᢎ⡫窣聩ȴ崼ₚ健喻ꅯ슶逎ꛇ딓␞虸 [ 673.761371][T13671] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 673.768811][T13671] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 673.992373][ T5928] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 674.015802][ T5928] usb 2-1: USB disconnect, device number 106 [ 674.097820][T13674] loop2: detected capacity change from 0 to 7 [ 674.105286][T13674] Dev loop2: unable to read RDB block 7 [ 674.111234][T13674] loop2: unable to read partition table [ 674.117226][T13674] loop2: partition table beyond EOD, truncated [ 674.123718][T13674] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 674.155707][T13662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.192126][T13662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.920182][T13662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.935613][T13662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.969702][ T5970] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 676.042860][T13045] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 676.080127][T13045] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 676.102616][T13045] asix 7-1:0.0: probe with driver asix failed with error -71 [ 676.143182][T13045] usb 7-1: USB disconnect, device number 78 [ 676.149638][ T5970] usb 2-1: Using ep0 maxpacket: 8 [ 676.172439][ T5970] usb 2-1: unable to get BOS descriptor or descriptor too short [ 676.181473][ T5970] usb 2-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 676.214275][ T5970] usb 2-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=6b.5b [ 676.237228][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.269656][ T5970] usb 2-1: Product: syz [ 676.273883][ T5970] usb 2-1: Manufacturer: syz [ 676.299765][ T5970] usb 2-1: SerialNumber: syz [ 676.523070][T13692] fuse: Bad value for 'fd' [ 676.570527][T13701] sctp: [Deprecated]: syz.5.1791 (pid 13701) Use of int in maxseg socket option. [ 676.570527][T13701] Use struct sctp_assoc_value instead [ 676.878473][ T5970] usb 2-1: USB disconnect, device number 107 [ 677.399650][T13045] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 677.445213][T13717] loop2: detected capacity change from 0 to 7 [ 677.490511][T13717] Dev loop2: unable to read RDB block 7 [ 677.497687][T13717] loop2: unable to read partition table [ 677.518464][T13717] loop2: partition table beyond EOD, truncated [ 677.538018][T13717] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 677.569901][T13045] usb 1-1: config 0 has no interfaces? [ 677.584565][T13045] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 677.604218][T13045] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.617827][ T5232] Dev loop2: unable to read RDB block 7 [ 677.625465][T13045] usb 1-1: Product: syz [ 677.630633][T13045] usb 1-1: Manufacturer: syz [ 677.635707][ T5232] loop2: unable to read partition table [ 677.649609][T13045] usb 1-1: SerialNumber: syz [ 677.654577][ T5232] loop2: partition table beyond EOD, truncated [ 677.665085][T13045] usb 1-1: config 0 descriptor?? [ 677.869837][ T5952] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 677.976463][T13729] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 678.005483][T13729] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 678.030793][ T5952] usb 2-1: Using ep0 maxpacket: 16 [ 678.037987][ T5952] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.057581][ T5952] usb 2-1: config 0 interface 0 has no altsetting 0 [ 678.067080][ T5952] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 678.079187][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.095834][ T5952] usb 2-1: config 0 descriptor?? [ 678.119746][T12040] usb 6-1: new full-speed USB device number 102 using dummy_hcd [ 678.218704][T13735] libceph: resolve '0.0' (ret=-3): failed [ 678.319331][ T30] audit: type=1326 audit(1756222146.244:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.7.1801" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feee898ebe9 code=0x0 [ 678.361234][T12040] usb 6-1: config 7 has an invalid interface number: 101 but max is 0 [ 678.401148][T12040] usb 6-1: config 7 has no interface number 0 [ 678.438163][T12040] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 678.452575][T12040] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.474729][T12040] usb 6-1: Product: syz [ 678.487234][T12040] usb 6-1: Manufacturer: syz [ 678.492744][T12040] usb 6-1: SerialNumber: syz [ 678.807682][T12040] as10x_usb: device has been detected [ 678.817525][T12040] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 678.850257][ T5952] nzxt-smart2 0003:1E71:2009.001C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 678.972228][T12040] usb 6-1: DVB: registering adapter 2 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 679.112686][ T981] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 679.202355][T12040] as10x_usb: error during firmware upload part1 [ 679.254266][T12040] Registered device Elgato EyeTV DTT Deluxe [ 679.327028][T12040] usb 6-1: USB disconnect, device number 102 [ 679.345929][ T981] usb 7-1: Using ep0 maxpacket: 32 [ 679.358274][ T981] usb 7-1: config 2 has an invalid interface number: 1 but max is 0 [ 679.366771][ T981] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 679.420893][ T981] usb 7-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 679.452690][ T981] usb 7-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 679.472510][T12040] Unregistered device Elgato EyeTV DTT Deluxe [ 679.473450][ T981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.489699][ T981] usb 7-1: Product: syz [ 679.495438][T12040] as10x_usb: device has been disconnected [ 679.503460][ T981] usb 7-1: Manufacturer: syz [ 679.512848][ T981] usb 7-1: SerialNumber: syz [ 679.548503][ T981] cdc_acm 7-1:2.1: probe with driver cdc_acm failed with error -22 [ 679.571647][ T981] cdc_acm 7-1:2.0: probe with driver cdc_acm failed with error -22 [ 679.827033][T13744] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 680.534355][ T981] usb 1-1: USB disconnect, device number 106 [ 680.631291][T12040] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 680.644951][ T5952] usb 2-1: USB disconnect, device number 108 [ 680.749754][T13757] loop2: detected capacity change from 0 to 7 [ 680.758421][T13757] Dev loop2: unable to read RDB block 7 [ 680.764768][T13757] loop2: unable to read partition table [ 680.791020][T12040] usb 8-1: not running at top speed; connect to a high speed hub [ 680.800575][T13757] loop2: partition table beyond EOD, truncated [ 680.824791][T12040] usb 8-1: config 95 has an invalid interface number: 1 but max is 0 [ 680.834666][T13757] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 680.851462][T12040] usb 8-1: config 95 has no interface number 0 [ 680.872892][T12040] usb 8-1: config 95 interface 1 has no altsetting 0 [ 680.901363][T12040] usb 8-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 680.915915][T12040] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.936405][T12040] usb 8-1: Product: syz [ 680.948674][T12040] usb 8-1: Manufacturer: syz [ 680.977640][T12040] usb 8-1: SerialNumber: syz [ 681.032732][T13760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1807'. [ 681.214263][T13765] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1804'. [ 681.235139][T13765] ip6erspan0: entered allmulticast mode [ 681.311339][ T10] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 681.342011][ T981] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 681.390696][T12040] usb 8-1: USB disconnect, device number 21 [ 681.440077][ T5952] usb 7-1: USB disconnect, device number 79 [ 681.496110][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 681.506619][ T981] usb 1-1: Using ep0 maxpacket: 16 [ 681.559106][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 681.595440][ T981] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 681.639867][ T981] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 681.657616][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 681.667132][T13772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1810'. [ 681.685488][ T981] usb 1-1: config 4 has no interface number 0 [ 681.705667][ T981] usb 1-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 681.719935][ T10] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 681.733146][ T10] usb 2-1: Manufacturer: syz [ 681.750498][ T981] usb 1-1: config 4 interface 51 has no altsetting 0 [ 681.759352][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 681.788547][ T10] usb 2-1: config 0 descriptor?? [ 681.801327][ T981] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 681.813623][ T10] smsusb:smsusb_probe: board id=9, interface number 0 [ 681.826444][ T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.875106][ T981] usb 1-1: Product: syz [ 681.890587][ T10] smsusb:siano_media_device_register: media controller created [ 681.907419][ T981] usb 1-1: Manufacturer: syz [ 681.922813][ T981] usb 1-1: SerialNumber: syz [ 681.935831][ T10] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 681.951756][ T981] cdc_eem 1-1:4.51: probe with driver cdc_eem failed with error -22 [ 681.973418][ T10] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 681.986708][ T10] ------------[ cut here ]------------ [ 681.992782][ T10] WARNING: CPU: 0 PID: 10 at mm/slub.c:4790 free_large_kmalloc+0x15c/0x1f0 [ 682.001745][ T10] Modules linked in: [ 682.006078][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 682.015645][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 682.026037][ T10] Workqueue: usb_hub_wq hub_event [ 682.031179][ T10] RIP: 0010:free_large_kmalloc+0x15c/0x1f0 [ 682.037005][ T10] Code: 44 89 f6 e8 b6 19 fd ff 65 48 8b 05 0e fc 87 10 48 3b 44 24 08 75 57 48 83 c4 10 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 90 <0f> 0b 90 65 48 8b 05 e9 fb 87 10 48 3b 44 24 08 75 32 48 89 df 48 [ 682.056925][ T10] RSP: 0018:ffffc900000f6b00 EFLAGS: 00010206 [ 682.063348][ T10] RAX: 00000000ff000000 RBX: ffffea0001905880 RCX: 0000000000000000 [ 682.071397][ T10] RDX: ffffc900182a4000 RSI: ffff888064162000 RDI: ffffea0001905880 [ 682.079438][ T10] RBP: 0000000000000100 R08: ffff88807ce69203 R09: 1ffff1100f9cd240 [ 682.087703][ T10] R10: dffffc0000000000 R11: ffffed100f9cd241 R12: 1ffff1100f803282 [ 682.095784][ T10] R13: 0000000000000000 R14: ffff88807ce69260 R15: dffffc0000000000 [ 682.104158][ T10] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 682.113249][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 682.119906][ T10] CR2: 00007f4722fc1f98 CR3: 000000007ce08000 CR4: 00000000003526f0 [ 682.127906][ T10] Call Trace: [ 682.131283][ T10] [ 682.134265][ T10] usb_free_urb+0xd0/0x120 [ 682.138696][ T10] smsusb_term_device+0x1d6/0x3b0 [ 682.143991][ T10] smsusb_probe+0x1a04/0x2060 [ 682.148733][ T10] ? __pfx_smsusb_probe+0x10/0x10 [ 682.153901][ T10] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 682.159495][ T10] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 682.165517][ T10] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 682.172129][ T10] ? __pm_runtime_set_status+0x785/0xa50 [ 682.177870][ T10] usb_probe_interface+0x668/0xc30 [ 682.183132][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 682.188925][ T10] really_probe+0x26d/0x9e0 [ 682.189668][T13045] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 682.193577][ T10] __driver_probe_device+0x18c/0x2f0 [ 682.206491][ T10] driver_probe_device+0x4f/0x430 [ 682.211679][ T10] __device_attach_driver+0x2ce/0x530 [ 682.217150][ T10] bus_for_each_drv+0x24e/0x2e0 [ 682.222198][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 682.228147][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 682.233663][ T10] __device_attach+0x2b8/0x400 [ 682.238496][ T10] ? __pfx___device_attach+0x10/0x10 [ 682.243907][ T10] ? do_raw_spin_unlock+0x122/0x240 [ 682.249264][ T10] bus_probe_device+0x185/0x260 [ 682.254208][ T10] device_add+0x7b6/0xb50 [ 682.258573][ T10] usb_set_configuration+0x1a87/0x20e0 [ 682.264129][ T10] usb_generic_driver_probe+0x8d/0x150 [ 682.269673][ T10] usb_probe_device+0x1c4/0x390 [ 682.274619][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 682.280187][ T10] really_probe+0x26d/0x9e0 [ 682.284825][ T10] __driver_probe_device+0x18c/0x2f0 [ 682.290179][ T10] driver_probe_device+0x4f/0x430 [ 682.295227][ T10] __device_attach_driver+0x2ce/0x530 [ 682.300680][ T10] bus_for_each_drv+0x24e/0x2e0 [ 682.305557][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 682.311500][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 682.316899][ T10] __device_attach+0x2b8/0x400 [ 682.321765][ T10] ? __pfx___device_attach+0x10/0x10 [ 682.327080][ T10] ? do_raw_spin_unlock+0x122/0x240 [ 682.332341][ T10] bus_probe_device+0x185/0x260 [ 682.337216][ T10] device_add+0x7b6/0xb50 [ 682.339693][T13045] usb 8-1: device descriptor read/64, error -71 [ 682.341589][ T10] usb_new_device+0xa39/0x16f0 [ 682.352648][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 682.357888][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 682.363183][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 682.368414][ T10] hub_event+0x2958/0x4a20 [ 682.372908][ T10] ? do_raw_spin_unlock+0x122/0x240 [ 682.378328][ T10] ? __pfx_hub_event+0x10/0x10 [ 682.383441][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 682.389221][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 682.394510][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 682.400307][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 682.406082][ T10] process_scheduled_works+0xae1/0x17b0 [ 682.411767][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 682.417781][ T10] worker_thread+0x8a0/0xda0 [ 682.422423][ T10] ? __kthread_parkme+0x7b/0x200 [ 682.427413][ T10] kthread+0x70e/0x8a0 [ 682.431560][ T10] ? __pfx_worker_thread+0x10/0x10 [ 682.436682][ T10] ? __pfx_kthread+0x10/0x10 [ 682.441424][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 682.446644][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 682.451914][ T10] ? __pfx_kthread+0x10/0x10 [ 682.456517][ T10] ret_from_fork+0x3f9/0x770 [ 682.461161][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 682.466286][ T10] ? __switch_to_asm+0x39/0x70 [ 682.471122][ T10] ? __switch_to_asm+0x33/0x70 [ 682.475894][ T10] ? __pfx_kthread+0x10/0x10 [ 682.480533][ T10] ret_from_fork_asm+0x1a/0x30 [ 682.485321][ T10] [ 682.488340][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 682.495621][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 682.504823][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 682.514889][ T10] Workqueue: usb_hub_wq hub_event [ 682.519932][ T10] Call Trace: [ 682.523217][ T10] [ 682.526151][ T10] dump_stack_lvl+0x99/0x250 [ 682.530756][ T10] ? __asan_memcpy+0x40/0x70 [ 682.535383][ T10] ? __pfx_dump_stack_lvl+0x10/0x10 [ 682.540598][ T10] ? __pfx__printk+0x10/0x10 [ 682.545216][ T10] vpanic+0x281/0x750 [ 682.549211][ T10] ? __pfx__printk+0x10/0x10 [ 682.553810][ T10] ? __pfx_vpanic+0x10/0x10 [ 682.558323][ T10] ? is_bpf_text_address+0x26/0x2b0 [ 682.563554][ T10] panic+0xb9/0xc0 [ 682.567285][ T10] ? __pfx_panic+0x10/0x10 [ 682.571734][ T10] __warn+0x31b/0x4b0 [ 682.575768][ T10] ? free_large_kmalloc+0x15c/0x1f0 [ 682.581070][ T10] ? free_large_kmalloc+0x15c/0x1f0 [ 682.586312][ T10] report_bug+0x2be/0x4f0 [ 682.590657][ T10] ? free_large_kmalloc+0x15c/0x1f0 [ 682.595871][ T10] ? free_large_kmalloc+0x15c/0x1f0 [ 682.601077][ T10] ? free_large_kmalloc+0x15e/0x1f0 [ 682.606318][ T10] handle_bug+0x84/0x160 [ 682.610584][ T10] exc_invalid_op+0x1a/0x50 [ 682.615089][ T10] asm_exc_invalid_op+0x1a/0x20 [ 682.619947][ T10] RIP: 0010:free_large_kmalloc+0x15c/0x1f0 [ 682.625770][ T10] Code: 44 89 f6 e8 b6 19 fd ff 65 48 8b 05 0e fc 87 10 48 3b 44 24 08 75 57 48 83 c4 10 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 90 <0f> 0b 90 65 48 8b 05 e9 fb 87 10 48 3b 44 24 08 75 32 48 89 df 48 [ 682.645386][ T10] RSP: 0018:ffffc900000f6b00 EFLAGS: 00010206 [ 682.651464][ T10] RAX: 00000000ff000000 RBX: ffffea0001905880 RCX: 0000000000000000 [ 682.659440][ T10] RDX: ffffc900182a4000 RSI: ffff888064162000 RDI: ffffea0001905880 [ 682.667419][ T10] RBP: 0000000000000100 R08: ffff88807ce69203 R09: 1ffff1100f9cd240 [ 682.675421][ T10] R10: dffffc0000000000 R11: ffffed100f9cd241 R12: 1ffff1100f803282 [ 682.683404][ T10] R13: 0000000000000000 R14: ffff88807ce69260 R15: dffffc0000000000 [ 682.691406][ T10] usb_free_urb+0xd0/0x120 [ 682.695859][ T10] smsusb_term_device+0x1d6/0x3b0 [ 682.700920][ T10] smsusb_probe+0x1a04/0x2060 [ 682.705623][ T10] ? __pfx_smsusb_probe+0x10/0x10 [ 682.710710][ T10] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 682.716274][ T10] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 682.722177][ T10] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 682.728521][ T10] ? __pm_runtime_set_status+0x785/0xa50 [ 682.734168][ T10] usb_probe_interface+0x668/0xc30 [ 682.739301][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 682.744941][ T10] really_probe+0x26d/0x9e0 [ 682.749469][ T10] __driver_probe_device+0x18c/0x2f0 [ 682.754826][ T10] driver_probe_device+0x4f/0x430 [ 682.759879][ T10] __device_attach_driver+0x2ce/0x530 [ 682.765267][ T10] bus_for_each_drv+0x24e/0x2e0 [ 682.770133][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 682.776119][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 682.781513][ T10] __device_attach+0x2b8/0x400 [ 682.786306][ T10] ? __pfx___device_attach+0x10/0x10 [ 682.791602][ T10] ? do_raw_spin_unlock+0x122/0x240 [ 682.796810][ T10] bus_probe_device+0x185/0x260 [ 682.801747][ T10] device_add+0x7b6/0xb50 [ 682.806202][ T10] usb_set_configuration+0x1a87/0x20e0 [ 682.811708][ T10] usb_generic_driver_probe+0x8d/0x150 [ 682.817214][ T10] usb_probe_device+0x1c4/0x390 [ 682.822082][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 682.827501][ T10] really_probe+0x26d/0x9e0 [ 682.832050][ T10] __driver_probe_device+0x18c/0x2f0 [ 682.837349][ T10] driver_probe_device+0x4f/0x430 [ 682.842382][ T10] __device_attach_driver+0x2ce/0x530 [ 682.847767][ T10] bus_for_each_drv+0x24e/0x2e0 [ 682.852664][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 682.858654][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 682.864046][ T10] __device_attach+0x2b8/0x400 [ 682.869001][ T10] ? __pfx___device_attach+0x10/0x10 [ 682.874297][ T10] ? do_raw_spin_unlock+0x122/0x240 [ 682.879508][ T10] bus_probe_device+0x185/0x260 [ 682.884393][ T10] device_add+0x7b6/0xb50 [ 682.888729][ T10] usb_new_device+0xa39/0x16f0 [ 682.893510][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 682.898891][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 682.904100][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 682.909312][ T10] hub_event+0x2958/0x4a20 [ 682.913768][ T10] ? do_raw_spin_unlock+0x122/0x240 [ 682.919016][ T10] ? __pfx_hub_event+0x10/0x10 [ 682.923790][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 682.929621][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 682.934831][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 682.941245][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 682.946967][ T10] process_scheduled_works+0xae1/0x17b0 [ 682.952648][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 682.958644][ T10] worker_thread+0x8a0/0xda0 [ 682.963268][ T10] ? __kthread_parkme+0x7b/0x200 [ 682.968219][ T10] kthread+0x70e/0x8a0 [ 682.972299][ T10] ? __pfx_worker_thread+0x10/0x10 [ 682.977411][ T10] ? __pfx_kthread+0x10/0x10 [ 682.982027][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 682.987319][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 682.992525][ T10] ? __pfx_kthread+0x10/0x10 [ 682.997120][ T10] ret_from_fork+0x3f9/0x770 [ 683.001712][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 683.006827][ T10] ? __switch_to_asm+0x39/0x70 [ 683.011767][ T10] ? __switch_to_asm+0x33/0x70 [ 683.016536][ T10] ? __pfx_kthread+0x10/0x10 [ 683.021134][ T10] ret_from_fork_asm+0x1a/0x30 [ 683.025921][ T10] [ 683.029321][ T10] Kernel Offset: disabled [ 683.033667][ T10] Rebooting in 86400 seconds..