last executing test programs: 33m33.773445672s ago: executing program 3 (id=209): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x340a}}]}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000340)={0x6, "1803c8098000000000000000000000000000000000000000f34100", 0xffffffffffffffff}) (async) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000001c0)={0x2, "fa02791d2a69a2610f020000000000000011000100e15ac64200", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r2, 0xffffffffffffffff}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000240)={0x19, "086035ceeae3ecc42317afad000000000000000400", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000003c0)={0x7, "06000000000000d4c6004734c50a7d0020000000005c00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r8, 0xffffffffffffffff}) (async) r10 = socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) (async) r14 = socket(0x1, 0x803, 0x0) (async, rerun: 64) bind$alg(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r15, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r9, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000440)={"31ecffff1bdb69e2e1070000001e00", r16}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@hopopts={{0x18, 0x29, 0x36, {0x88}}}], 0x18}, 0x24040005) r17 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r17, 0xc08c5336, &(0x7f0000000180)={0x80, 0xfffffffb, 0x0, 'queue0\x00', 0x7}) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 33m30.677299604s ago: executing program 3 (id=220): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r1, 0x0) (async) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x35, 0x0, 0x0, 0xfffffffe}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) (async) ioctl$TIOCGPTPEER(r3, 0x5441, 0x12) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCCBRK(r4, 0x5428) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="500020687307ca040000000000000000000000cbf4c6f4475aee44ffc7d59b8900", @ANYRES32=0x0, @ANYBLOB="0200000000000000140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600020001000000"], 0x50}}, 0x0) 33m30.411330906s ago: executing program 3 (id=222): r0 = socket(0x10, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2251197285d76a80, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8feffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000fefeffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) close(0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) mmap$qrtrtun(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000006, 0x10, r7, 0xffffffffffff7fff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0x5}, {0x25}, {0x6}]}) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xffbfffff, @mcast2, 0x2}, 0x1c) connect$netlink(r4, &(0x7f00000000c0)=@unspec, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x68, 0x10, 0x1, 0x70bd2d, 0x25dddbfb, {0x0, 0x0, 0x0, 0x0, 0x14318, 0x1a2a1}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_AF_SPEC={0x34, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000884}, 0x8000) 33m29.023510712s ago: executing program 3 (id=228): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002180)=@deltaction={0x80, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x2c, 0x1, [{0x14, 0x8d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffe01}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf06}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x20000844) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e) listen(r0, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r5, 0x0, 0x0) io_uring_enter(r4, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,']) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x100000) 33m28.179381192s ago: executing program 3 (id=230): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) unlinkat(r5, &(0x7f0000000700)='./file0\x00', 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x6000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0xb2, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xe2, 0xfd, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x10000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x6, 0x1, 0x1, 0x80, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x4, 0x0, 0x1]}) close(0x5) 33m27.966563881s ago: executing program 3 (id=231): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f00000004c0)=""/179, 0xb3}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/65, 0x41}, {&(0x7f0000001600)=""/42, 0x2a}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002740)=""/146, 0x92}, {&(0x7f0000002800)=""/68, 0x44}, {&(0x7f0000002880)=""/247, 0xf7}], 0x8, &(0x7f0000002a00)=[@cred={{0x1c}}], 0x20}, 0x102) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r3) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, r4, 0x8, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x1}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x444}, 0x80) syz_clone(0x100111, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) r6 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r6, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) r7 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f0000000100)=0x0) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r9, 0x2, &(0x7f0000000080)={0x2, 0x100000001}, 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) r11 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r9, 0x2, &(0x7f0000000080)={0x2, 0x100000001}, 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) r11 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x80, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) sendmmsg$alg(r2, &(0x7f0000000b40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c1}], 0x1, 0x20049001) recvmsg(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)=""/4086, 0xff6}], 0x1}, 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd24, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfc, 0x2, 0x0, 0x7, 0x200}, [@RTA_IIF={0x8, 0x3, r5}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x2c}}, 0xea5bc50b6199d7fe) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 17m58.415325915s ago: executing program 4 (id=4095): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000c5a000/0x1000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@bridge_delvlan={0x24, 0x71, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x10}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000881}, 0x40000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="420fc7bc4898580000640f01c50f4101c5c5baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0xfffffffffffffffd, 0x5479, 0x103d, 0x1, 0x1, 0x32a, 0xffffffffffffffff, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x6) (async) r3 = fsmount(0xffffffffffffffff, 0x0, 0x6) fchdir(r3) (async) fchdir(r3) mkdir(&(0x7f0000000080)='./file0\x00', 0x44) (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x44) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socket$kcm(0x2, 0xa, 0x2) socket(0x11, 0x1, 0x10201) close(0x3) (async) close(0x3) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f00000011c0), 0x0, 0x28b1d35c834f09d7, 0xffffffff00000005}}], 0x48, 0xc001}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000c5a000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000363000/0x1000)=nil, &(0x7f0000377000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00004e1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00007e5000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000694000/0x1000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000c5a000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000363000/0x1000)=nil, &(0x7f0000377000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00004e1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00007e5000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000694000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0x0, 0x20000a, 0x2000033d}) (async) r5 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0x0, 0x20000a, 0x2000033d}) sendmsg$nl_route_sched(r3, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@deltclass={0x2c, 0x29, 0x20, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1fff9, 0x4}, {0xe, 0xffe6}, {0x1, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40005}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@deltclass={0x2c, 0x29, 0x20, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1fff9, 0x4}, {0xe, 0xffe6}, {0x1, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x48, 0x2, 0x48, 0x6}, {0x28, 0xc, 0x85, 0xdffff038}]}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17m58.19136363s ago: executing program 4 (id=4098): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x29, 0x9f, 0x6, 0xa, 0x50, @private1, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x40, 0x700, 0x6, 0x4}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x29, 0x9f, 0x6, 0xa, 0x50, @private1, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x40, 0x700, 0x6, 0x4}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x200098d5}, 0x4040084) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x200098d5}, 0x4040084) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400090000000000000000a8f7"], 0x48) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) unshare(0x2a020400) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) gettid() (async) r1 = gettid() r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r2, &(0x7f0000000b80)="eb67b6617c0ac0e0f32319996c82fb8df152e186a59b9ccf0dfdf4a5808a4286285890d91d56577b18c8d1da033f2d602e1ec2e43ab041cb5d7a2bb3b956971e96b983a2d73676f32945e25a174f25b95b9731c8e7686ad58fae8c22f7e0762b60efd870a45e7740a02b199cf4b82b3222c5ff2cd7ced4422b2df6e34ee52a1de48cab715abc351029d781", 0xffffffaa) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000740)={r6, @in={{0x2, 0x4e24, @private=0xa010100}}, [0x5, 0x100000000, 0x5, 0x0, 0x1, 0x8, 0x10, 0x200000000000101, 0x7, 0x5, 0x1, 0xffffffffffffffff, 0x2, 0x0, 0x200]}, &(0x7f0000000840)=0x100) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) close(r2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x23, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x23, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x1) (async) fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x1) r8 = fsmount(r0, 0x1, 0x189) listen(r8, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast2}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x8000000}, {0x8, 0x22eb, 0xffffffff}, {0x8, 0x6558, 0x2}}}}}}, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast2}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x8000000}, {0x8, 0x22eb, 0xffffffff}, {0x8, 0x6558, 0x2}}}}}}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x490900, 0x24) (async) open(&(0x7f0000000140)='./file0\x00', 0x490900, 0x24) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000500)={0x4, 0x1, 0x26000, 0x2000, &(0x7f0000292000/0x2000)=nil}) 17m58.01772685s ago: executing program 4 (id=4099): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x100000, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x1100000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000019c0)) socketpair$unix(0x1, 0x3, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYRES8=r6, @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100060808004149014006040800", 0x58}], 0x1) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x17) 17m57.598683218s ago: executing program 4 (id=4101): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a310000000014"], 0x60}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x8, 0x1, 0x200, 0x3, 0x2, 0x7ff, 0xfff, 0x6e4c8f}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000017beda000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 17m57.36861139s ago: executing program 4 (id=4103): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 17m56.717843871s ago: executing program 33 (id=4103): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 15.099071355s ago: executing program 6 (id=8558): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2, 0x0, {0xa, 0x20, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1001a}, [@FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2, 0x0, {0xa, 0x20, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1001a}, [@FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}]}, 0x4c}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000040)={0x2800, 0x1000, 0x7}) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) syz_io_uring_setup(0x3af8, &(0x7f0000000400)={0x0, 0xddd6, 0x800, 0x803}, &(0x7f0000000480), 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 8.447592301s ago: executing program 6 (id=8565): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000000863854f8800"/28, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) pwritev(0xffffffffffffffff, &(0x7f0000002500)=[{&(0x7f0000001440)="17", 0x1}], 0x1, 0x9, 0x1d8000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, &(0x7f0000001200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x60, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x4}]]}, 0x60}}, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000000)={0x0, 0x4, 0x7, &(0x7f0000000700)={0x1b, "fd5a44512b7e1b0020ed2abb4301002700"}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) write$cgroup_pid(r8, &(0x7f0000000000), 0xffffff98) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x80, 0x8) ioctl$FE_GET_EVENT(r8, 0x80286f4e, &(0x7f0000000040)={0x0, {0x0, 0x0, @ofdm}}) r9 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000e00)="39000000140081ae00002c000500015601618575e285af01800000000d1300883795c04a31ba377a1b2cc37fffffffffffffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x2000c814) syz_usb_connect(0x3, 0x1b, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002c2bae310c00900023c5801029a620902090000060780ff"], 0xfffffffffffffffe) 7.835029224s ago: executing program 0 (id=8573): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, 0x0, &(0x7f00000000c0)) socket$l2tp(0x2, 0x2, 0x73) (async) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000340)="8963cbe0698063dd304b55ef3da2d4634b450d0e5057330bad77165ce7483e1829337a05cf97946ae7199a4cae94d5c790d9c629e61cc9e363e39049227d01a2e57b300f33f6ff3e72060895367248a5a7d0ec897ef0f5489a0e56467f7a7f2b9c", 0x61}], 0x1) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r3, 0x40585883, 0x0) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) (async) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socket$inet(0x2, 0x80001, 0x84) (async) r5 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180), 0x8090) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) (async) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000240)="0200", 0x2}], 0x1, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') personality(0x6000003) (async) personality(0x6000003) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$mtd(&(0x7f00000000c0), 0x10, 0x402080) read$mtd(r7, &(0x7f0000000100)=""/96, 0x60) socket$can_raw(0x1d, 0x3, 0x1) (async) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 7.643535492s ago: executing program 0 (id=8574): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = syz_create_resource$binfmt(&(0x7f0000000380)='./file0\x00') r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1b) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x40100) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pread64(r3, &(0x7f0000019180)=""/102370, 0x18fe2, 0x200) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x15) openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x101000, &(0x7f0000000580)=ANY=[]) syz_fuse_handle_req(r0, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6449e5087f00819b8efb22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a33d52c5df040777fcf66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21b540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5030080e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc500", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0xfffffffffffffffe, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7fffffff, 0x1940180c, 0x80, 0xfffe, 0x9, 0x400008, 0x0, 0x0, 0x80, 0x10001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4a800, 0x1) close(r5) mmap(&(0x7f00004e0000/0x11000)=nil, 0x11000, 0x8, 0x4019012, r0, 0xcd0b3000) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060104000000000000000007000003050000070000000900020073797a3100000000"], 0x28}}, 0x24000804) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xa2, @tick=0x6, 0x6, {0x52, 0x7}, 0x9, 0x0, 0xb}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000010400000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000040000001c0012800900010069706970000000000c00028008000100", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="ed6908bbb1613af1430f801cc2ee218878656c7b9e4ebd940e5aac336150f961e315a392f31fcbb3f9980d00"/59], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40000c0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000880)={0x0, 0x1, 0x1, [0x0, 0x9, 0x200, 0x1, 0x9], [0x401, 0x4, 0xc, 0x14e, 0xfffffffffffffffe, 0x81, 0x1, 0x8, 0x1, 0x5, 0x80000000, 0x795, 0x401, 0x5, 0x7, 0x8, 0x4, 0x9, 0x7fff, 0xf, 0x4, 0x63af, 0x9, 0x9, 0x8, 0xda, 0xfffffffffffffff8, 0x2, 0x2, 0x80, 0x6, 0x10001, 0x4b, 0x6, 0x1, 0xc5a, 0x5, 0x0, 0x7, 0x7, 0x7, 0x5, 0xfffffffffffff851, 0x145, 0x9, 0x5000000000, 0x95db, 0x4, 0x9, 0xfffffffffffffffa, 0x9, 0x8, 0x1, 0x4, 0xe, 0x426d, 0x7, 0x63ce, 0x5, 0x8, 0x6, 0x3, 0xfff, 0xf, 0x1, 0x8, 0x40, 0x7, 0x4, 0x9, 0x80002, 0xf, 0xffffffffffffffff, 0x32, 0x7, 0xb1d, 0x7fff, 0x4, 0x9, 0x9, 0xad2, 0x7fffffffffffffff, 0xd, 0x8, 0xfffffffffffffffb, 0x8, 0x4, 0x8000000000000000, 0x8, 0x8, 0xe, 0x1, 0xc, 0x5, 0x7, 0x3ff, 0x0, 0x3, 0x8001, 0xffffffffffffffff, 0x9, 0x9, 0x2, 0x6, 0x5, 0x800, 0xfff, 0x10000000003, 0x48e7, 0x8, 0x9, 0xffffffffffffffff, 0x7, 0x9, 0x900000000010, 0x1, 0x0, 0x4, 0x7, 0x3c, 0x401]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00007}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, 0x0) epoll_create1(0x0) 7.137193639s ago: executing program 5 (id=8576): syz_extract_tcp_res(&(0x7f0000000000), 0x6987, 0x9a5) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000019000109fdffffff0000000002"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/xfrm_stat\x00') sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtclass={0x48c, 0x28, 0x300, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x10}, {0x0, 0x10}, {0xfff1, 0x4}}, [@tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_htb={{0x8}, {0x450, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x9}, @TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x3, 0xff, 0x5, 0x1000, 0x2, 0x4, 0x3, 0xf, 0x7bf8, 0x8000, 0x7, 0x200, 0x1, 0x4, 0x10001, 0x3, 0x10, 0x9, 0x0, 0xd1, 0x80000001, 0x3ff, 0x2, 0x2, 0x9, 0x280, 0xfffffff7, 0x6, 0x2, 0x1, 0x2, 0x10, 0x1ff, 0x7f, 0x80, 0x5, 0x9c, 0x2, 0x20aa, 0x0, 0xe, 0x8001, 0xfffffffa, 0x2, 0x8, 0x0, 0x5, 0x1, 0x2, 0x3, 0x0, 0x9, 0x163a, 0x0, 0x8, 0x10000, 0x73, 0x4, 0x8, 0xfb0000, 0x3, 0x400, 0x400, 0x1, 0x4, 0x4, 0x8, 0x9, 0xfffffff8, 0x0, 0x7, 0x3, 0x7, 0x6, 0xffff0a4b, 0x1, 0x6, 0x40, 0x22, 0x6, 0xff, 0x9, 0x9, 0x3, 0x4, 0x9, 0x6, 0xfff, 0x0, 0x2, 0xc56f, 0xffffffff, 0x9, 0x0, 0x6, 0xfffffffe, 0x9, 0x6, 0x5, 0x400, 0x3, 0x4, 0x11c, 0x9, 0x1000, 0x1d, 0x8, 0x5106, 0x4, 0x0, 0xe3c, 0xf05e, 0x9, 0xdf64, 0x0, 0x9, 0x8c800000, 0x9, 0x7, 0xd, 0xff, 0x6, 0x0, 0xfe00000, 0x7, 0x2, 0x0, 0x8, 0x3, 0x10000, 0x5, 0xfffffff8, 0x10000, 0x3, 0x42c, 0x54e, 0xc15, 0x8, 0x4, 0x2, 0x1, 0x2, 0x7fffffff, 0xfff, 0x6, 0x6, 0x4, 0xf, 0x7, 0x7fff, 0x2, 0x117, 0x9, 0x7fff, 0x4, 0x80000001, 0xb1, 0x40, 0x5, 0x9, 0xffffffff, 0x2, 0x5, 0x3, 0xfffffffd, 0xf, 0x5, 0xf5, 0x4, 0xd9, 0x0, 0xffffffff, 0x8, 0x3ff, 0x1, 0x8, 0x9, 0x7, 0xfffffffc, 0x8, 0x6, 0x80, 0x800, 0x0, 0x2, 0xfffff800, 0x1, 0x4, 0x81, 0x6, 0x5, 0x3, 0xca, 0x0, 0x7357, 0x2c72, 0x7, 0x9, 0xa, 0x5cb, 0x5, 0x7, 0x9, 0x7, 0x30, 0x1, 0x101, 0x7, 0x8, 0xfffffe01, 0x7, 0x4, 0xfffffff0, 0x4, 0xf, 0xc59, 0x9, 0xd, 0x1, 0x7fffffff, 0x0, 0x5, 0x6, 0x9, 0x3b58, 0x2, 0x5, 0x8, 0xffff, 0x40e, 0x6, 0x3ff, 0x7, 0x8, 0x3, 0x3, 0x5, 0xfffffff7, 0x6, 0xeb44, 0x1000, 0x6, 0x0, 0x81, 0x5, 0x8, 0x0, 0x6, 0x4, 0x4, 0x2, 0x9, 0x7, 0x9, 0x9d]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x1, 0x2, 0x19e2, 0x3, 0x4, 0x2}, {0xc0, 0x2, 0x6, 0xfff8, 0x3ff, 0x7}, 0x4, 0x10000, 0x6, 0x7, 0x5}}, @TCA_HTB_RATE64={0xc, 0x6, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x48c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0x9}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x80000000, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac3(r5, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a201020301090224008e48d5236b1ea6007d46c913010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000140)={0x94, &(0x7f0000000500)={0x40, 0xd, 0x6b, "c9fb7ddf71e338a73c3aef0c9e9682424d02be5f6fbce05d219a6ada237b8076b6081279f56e900da380dbd286c12a8feafc10b6826319411ee5d106454a275f934316cdffe47808700f55867192d841be607de1f5c38693126ec4c7194999baa318cec35894cb222e838c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, &(0x7f00000001c0)={0x14, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x2b, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x7f, 0xbe, 0x6, 0xc7a9, 0xd4f7, 0x5, 0x6, 0x5, 0xb, 0x6, 0x0, 0x9}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x3ff}, &(0x7f00000003c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000440)={0x20, 0x89, 0x2}}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x61a7b7f8b4074f54, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.78690262s ago: executing program 0 (id=8577): socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x1e, 0x4, 0x0) syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x2800) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000018"], 0x0, 0x32}, 0x28) socket$inet6_udp(0xa, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000180)={0x8201, 0x3}, 0x30, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) pipe2(&(0x7f0000000000), 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, 0x20010, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_FD1={0x8}]}}}]}, 0x40}}, 0x0) 6.659897333s ago: executing program 0 (id=8579): prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) r0 = socket(0x10, 0x80002, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x4004, 0x0, 0x2}, 0x30, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r3, &(0x7f0000000640)='\x00', 0x89901) landlock_restrict_self(r2, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fecc"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 6.379093288s ago: executing program 5 (id=8581): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000140)={"7f938cf308c36f3dfeaafeeb1bf271edd8b3d6f149a4dc7ea2fa030e8354", 0xffffffdd, 0xfff, 0x8, [0x80000000, 0x7, 0xfff, 0x80, 0x3, 0x8, 0x5, 0xfffff68d, 0x7, 0x9, 0x100001, 0x200, 0x8b5, 0xb, 0x8, 0x2, 0x2, 0x1000]}) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a5287683", 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000280)={0x1, @win={{0xff, 0x0, 0x33424752}, 0x0, 0x0, 0x0, 0x0, 0x0}}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000200)={0x7, 0x7b, 0x1}, 0x7) r5 = dup2(r1, r1) read$FUSE(r5, &(0x7f0000001300)={0x2020}, 0x2020) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a310000000800054000000021340011800a0001006c696d6974000000240002800c00024000000000000000030c00014000000000000001010800044000000001140000000c0a01010000000000000000070000001400001b1000010000000000000000000084000aa0aa0a0000fa12b52a923fa9874a47451218841cfa6a2a789234bdd6dcce87c7d695b184a27783"], 0xcc}}, 0x0) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b0001000010000904"], 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000004c0)) syz_usb_control_io$hid(r7, 0x0, 0x0) 5.683922759s ago: executing program 0 (id=8582): socket(0x1a, 0x3, 0x6) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}]}], {0x14}}, 0xfc}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000700000000040014001a80100005"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x2) r4 = syz_open_dev$radio(&(0x7f0000000380), 0x3, 0x2) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000002280)={0x0, 0x1, 0x40}) r5 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r5, 0xc0285629, &(0x7f0000000040)={0x0, 0x7, 0x5, '\x00', &(0x7f0000000100)=0x3}) write$binfmt_elf32(r0, &(0x7f0000001100)=ANY=[@ANYBLOB="7f454c460104028d0400000000000000020006000400000019000000380000005e0200000804000004002000040005000900000200000000000000600500000080edaf21fffffeff0700000005000000090000005e000000020000000900000004000000000000000100000010f8ba37feffffff0300000051e57464000000000100000007000000e600000003000000060000000400000051e57464"], 0x16d) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 5.529127285s ago: executing program 0 (id=8583): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a310000000014"], 0x60}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x8, 0x1, 0x200, 0x3, 0x2, 0x7ff, 0xfff, 0x6e4c8f}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000001700000004000000000000000040", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 5.0882043s ago: executing program 34 (id=8583): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a310000000014"], 0x60}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x8, 0x1, 0x200, 0x3, 0x2, 0x7ff, 0xfff, 0x6e4c8f}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000001700000004000000000000000040", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 5.042813467s ago: executing program 6 (id=8586): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x2, @empty, 0x4}}, 0xfffe, 0xef}, &(0x7f0000000200)=0x90) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x1ff}) r4 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) close(r2) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x0, 0x6, 0x3, "44175a"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.442733172s ago: executing program 2 (id=8589): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x10102) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000180)={0x0, 0xf, 0xc, 0x1000, 0x4, "5a1c966bcd4b7448"}) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @empty=0xac1414aa, @empty, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010600, 0x1000000}, {@private}, {@broadcast}, {@dev}, {@empty, 0x8000}]}]}}}}}}}, 0x0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2085d}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0xd000}]}}}]}, 0x44}, 0x1, 0xba01}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x12cffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x44040) r6 = gettid() sigaltstack(&(0x7f0000001040)={&(0x7f00000020c0)=""/4105, 0x0, 0x1009}, 0x0) rt_sigqueueinfo(r6, 0x21, &(0x7f00000002c0)={0xb, 0x4}) 4.33995346s ago: executing program 1 (id=8590): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x4c0, 0x590, 0x2b8, 0x4c0, 0x3a8, 0x7c0, 0x7c0, 0x7c0, 0x7c0, 0x7c0, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @private1, [0x0, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0x290, 0x2b8, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2f, 0x0, 0xe, 0x0, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xffffff00, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff, 0xff000000, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff000000], 0x1001, 0xb10}}, @common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0xf76, 0xff, 0x20, 0x7, 0xb, 0xaeae, 0x7f, 0x6b1d1c17, 0x80, 0x78}, {0x8}}}]}, @HL={0x28, 'HL\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@rand_addr=0x64010101, 0x18, 0xfc, 0x7ff}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff000000, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xffffffff], 'dummy0\x00', 'bond_slave_0\x00', {}, {}, 0xff, 0x2, 0x0, 0x28}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) timer_create(0x3, 0x0, &(0x7f0000000540)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) (async) timer_settime(r2, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000001c0)) (async) r3 = socket$inet(0x2, 0x1, 0x100) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="000008000100000000003d0000004500004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b41e62b8adad48c20008d58838068b9100"/32], 0x4e) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="140000006a00336b639483150000000008ffffff09c57ccbd09f05dce4b7bb8699a4c551b4b78541816dde333094b1b497b792d3465dc16864c886a55b"], 0x14}], 0x1}, 0x8000) 4.256017167s ago: executing program 1 (id=8591): syz_extract_tcp_res(&(0x7f0000000000), 0x6987, 0x9a5) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000019000109fdffffff0000000002"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffff46040000004000007b0a00fe000000006e04000000000000c600000aed0200009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/xfrm_stat\x00') sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtclass={0x48c, 0x28, 0x300, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x10}, {0x0, 0x10}, {0xfff1, 0x4}}, [@tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_htb={{0x8}, {0x450, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x9}, @TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x3, 0xff, 0x5, 0x1000, 0x2, 0x4, 0x3, 0xf, 0x7bf8, 0x8000, 0x7, 0x200, 0x1, 0x4, 0x10001, 0x3, 0x10, 0x9, 0x0, 0xd1, 0x80000001, 0x3ff, 0x2, 0x2, 0x9, 0x280, 0xfffffff7, 0x6, 0x2, 0x1, 0x2, 0x10, 0x1ff, 0x7f, 0x80, 0x5, 0x9c, 0x2, 0x20aa, 0x0, 0xe, 0x8001, 0xfffffffa, 0x2, 0x8, 0x0, 0x5, 0x1, 0x2, 0x3, 0x0, 0x9, 0x163a, 0x0, 0x8, 0x10000, 0x73, 0x4, 0x8, 0xfb0000, 0x3, 0x400, 0x400, 0x1, 0x4, 0x4, 0x8, 0x9, 0xfffffff8, 0x0, 0x7, 0x3, 0x7, 0x6, 0xffff0a4b, 0x1, 0x6, 0x40, 0x22, 0x6, 0xff, 0x9, 0x9, 0x3, 0x4, 0x9, 0x6, 0xfff, 0x0, 0x2, 0xc56f, 0xffffffff, 0x9, 0x0, 0x6, 0xfffffffe, 0x9, 0x6, 0x5, 0x400, 0x3, 0x4, 0x11c, 0x9, 0x1000, 0x1d, 0x8, 0x5106, 0x4, 0x0, 0xe3c, 0xf05e, 0x9, 0xdf64, 0x0, 0x9, 0x8c800000, 0x9, 0x7, 0xd, 0xff, 0x6, 0x0, 0xfe00000, 0x7, 0x2, 0x0, 0x8, 0x3, 0x10000, 0x5, 0xfffffff8, 0x10000, 0x3, 0x42c, 0x54e, 0xc15, 0x8, 0x4, 0x2, 0x1, 0x2, 0x7fffffff, 0xfff, 0x6, 0x6, 0x4, 0xf, 0x7, 0x7fff, 0x2, 0x117, 0x9, 0x7fff, 0x4, 0x80000001, 0xb1, 0x40, 0x5, 0x9, 0xffffffff, 0x2, 0x5, 0x3, 0xfffffffd, 0xf, 0x5, 0xf5, 0x4, 0xd9, 0x0, 0xffffffff, 0x8, 0x3ff, 0x1, 0x8, 0x9, 0x7, 0xfffffffc, 0x8, 0x6, 0x80, 0x800, 0x0, 0x2, 0xfffff800, 0x1, 0x4, 0x81, 0x6, 0x5, 0x3, 0xca, 0x0, 0x7357, 0x2c72, 0x7, 0x9, 0xa, 0x5cb, 0x5, 0x7, 0x9, 0x7, 0x30, 0x1, 0x101, 0x7, 0x8, 0xfffffe01, 0x7, 0x4, 0xfffffff0, 0x4, 0xf, 0xc59, 0x9, 0xd, 0x1, 0x7fffffff, 0x0, 0x5, 0x6, 0x9, 0x3b58, 0x2, 0x5, 0x8, 0xffff, 0x40e, 0x6, 0x3ff, 0x7, 0x8, 0x3, 0x3, 0x5, 0xfffffff7, 0x6, 0xeb44, 0x1000, 0x6, 0x0, 0x81, 0x5, 0x8, 0x0, 0x6, 0x4, 0x4, 0x2, 0x9, 0x7, 0x9, 0x9d]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x1, 0x2, 0x19e2, 0x3, 0x4, 0x2}, {0xc0, 0x2, 0x6, 0xfff8, 0x3ff, 0x7}, 0x4, 0x10000, 0x6, 0x7, 0x5}}, @TCA_HTB_RATE64={0xc, 0x6, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x48c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0x9}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x80000000, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac3(r5, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a201020301090224008e48d5236b1ea6007d46c913010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000140)={0x94, &(0x7f0000000500)={0x40, 0xd, 0x6b, "c9fb7ddf71e338a73c3aef0c9e9682424d02be5f6fbce05d219a6ada237b8076b6081279f56e900da380dbd286c12a8feafc10b6826319411ee5d106454a275f934316cdffe47808700f55867192d841be607de1f5c38693126ec4c7194999baa318cec35894cb222e838c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, &(0x7f00000001c0)={0x14, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x2b, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x7f, 0xbe, 0x6, 0xc7a9, 0xd4f7, 0x5, 0x6, 0x5, 0xb, 0x6, 0x0, 0x9}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x3ff}, &(0x7f00000003c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000440)={0x20, 0x89, 0x2}}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x61a7b7f8b4074f54, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.790782257s ago: executing program 5 (id=8592): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}, 0x6332}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=""/17, 0x11}, 0x100}], 0x2, 0x14322, 0x0) (async) recvmmsg(r0, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}, 0x6332}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=""/17, 0x11}, 0x100}], 0x2, 0x14322, 0x0) r1 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000001800ef012bbd7000000000000a200000fc000005000000001400050000000000000000000000ffff"], 0x38}, 0x1, 0x11, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0x42f, 0x870bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffe0, 0x7}, {}, {0xa, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4, 0x20}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async, rerun: 32) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) (rerun: 32) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000240)={r8, 0x0, 0x2c}, 0x8) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000b80)={r8, @in6={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffd}}, 0x9, 0x8}, 0x90) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff210000000002000010000000000000003f16ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218df577b5ab4bcdcdbd9d322fe7c9fd68775730d1600360d8bcc00400040fad95667e0060000725c8bbb58794c643b000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb100273f90a9b9", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) 2.248168771s ago: executing program 7 (id=8584): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0x4}}}}}]}}]}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@assoc={0x18, 0x117, 0x4, 0x100}], 0x18, 0x8005}, 0x40040) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@deltfilter={0x43c, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0x3, 0xffe0}, {0x9}}, [@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0xffffff01, 0x9, 0x8000, 0x10001, 0x3, 0x80000000, 0xb4cb, 0x5, 0x2, 0xfffffeff, 0x3ff, 0x5, 0x2, 0x1b92, 0xa, 0x5, 0x6d58, 0x81, 0x6, 0x0, 0x6f, 0x7f, 0x3, 0x80, 0x7, 0x7, 0x12fd96d2, 0xfffff000, 0x40, 0x7, 0xa, 0x2, 0x3, 0x5, 0x6, 0x401, 0x1000, 0x0, 0xd, 0x6, 0xa, 0x800, 0x8, 0x7, 0x8, 0xfffffffa, 0x20000, 0x8, 0x6, 0x80, 0x1, 0x8, 0x73, 0x800, 0x351, 0x70b0, 0x1, 0x1, 0xb, 0x51d22a98, 0x0, 0x3, 0x8000, 0xf, 0xfffff81f, 0x3, 0x7, 0x8, 0x3, 0x400, 0x8001, 0xfffffffa, 0x1000, 0x293, 0x7, 0x4, 0x80, 0x9, 0x3, 0x2, 0x1, 0x200, 0x7, 0x80000001, 0x4, 0x10, 0x7, 0x7, 0x3a, 0xfffffffd, 0x4, 0x3, 0x7f, 0xfbf, 0x100, 0x8, 0x2, 0xe, 0x401, 0x1, 0xfffff801, 0x4, 0x7fffffff, 0x8, 0x80000001, 0x10, 0xffffffff, 0x800, 0x9, 0x3, 0x80, 0x8, 0x3, 0x396e, 0x200, 0xffffffff, 0x10, 0x81, 0x0, 0x80000001, 0x4, 0xb, 0x2f, 0x6, 0x5, 0x316, 0x4, 0xc880eca, 0x80000000, 0x9, 0x401, 0xf, 0x3, 0xc, 0x0, 0x924, 0x5, 0x8001, 0x400000, 0x1ff, 0x2, 0x3, 0x7fffffff, 0x6, 0x2, 0x3, 0x25a, 0x6a, 0x6, 0x9, 0x9, 0xb4, 0x217, 0x8f, 0x9, 0x2c, 0x2, 0x9, 0x7, 0x9, 0x100, 0x4, 0x6, 0x7, 0x7, 0x3, 0x6, 0x0, 0x7fffffff, 0x0, 0x9, 0x2, 0xb6c, 0x4, 0x8, 0x3, 0x401, 0x3, 0x0, 0xa1, 0x7f, 0x80000001, 0x7, 0x9, 0x800, 0x7, 0x1000, 0xe9, 0x3, 0x6, 0xffffffff, 0x3, 0xae9, 0xba3, 0x6, 0x3, 0xac, 0x8001, 0x2c562366, 0x9, 0xfffffff7, 0x1, 0x3, 0x657, 0x4196, 0x0, 0x8, 0x0, 0xb, 0x3ff, 0x7, 0x5, 0x2, 0x3, 0x41, 0xfffffffe, 0x8, 0x0, 0x8, 0x269, 0x0, 0xffff70e1, 0x40000000, 0x8, 0x7, 0x1000, 0x4, 0x1, 0x80, 0x8000000, 0x0, 0x7f, 0x67, 0x6, 0xf, 0xbfca, 0x2, 0x8, 0x1, 0xc, 0x66a7633e, 0x9e4, 0x10000, 0x9, 0x3, 0x4, 0x1, 0x3, 0xad2, 0x7, 0x80, 0x2, 0x9, 0x39, 0x10000]}]}]}}]}, 0x43c}}, 0x0) recvmmsg(r4, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2}}], 0x1, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="b9e0e7c56300698c0ba00a0d339c", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000080}, 0x40000) syz_open_procfs$namespace(r1, &(0x7f0000000200)='ns/user\x00') sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) 2.07697574s ago: executing program 1 (id=8597): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b6"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x1b, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0x20, 0x12, 0x1b, 0x10, 0x41e, 0x4041, 0x4025, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x1, 0x7, 0x40, 0x7}}]}}, 0x0) 1.695989532s ago: executing program 5 (id=8598): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000027000100000000000000000a01"], 0x50}}, 0x0) syz_usb_connect$midi(0x2, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x499, 0x105c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc, 0x90, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x38, 0xc, [@midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x0, 0x0, [], 0x5}, @midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x3, 0x0, [], 0x9}], [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0x7, 0x10, {0x4}}}]}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x8b, &(0x7f0000000140)=@string={0x8b, 0x3, "7b8d9f083a6852d777ce96291e969ce77532c62b3369146acc81a6c1a7d2e6ab957377fced071206e22a42cd36e0d2ef206595135334f56c4f321357e51f3eb6f4b80b9ea8317fab7913e01dd22b8078efd1bd530a36376fbf4c143c99e2556e1d24bb59f94d58c74db18ba2d840be65c4120df8572d18bdad24e03fadf2db71b0f82f5e923a6f534e"}}]}) 1.59926441s ago: executing program 2 (id=8599): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xd30d, 0x1000, 0x2, 0x235}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1a000000040000000000000001"], 0x48) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000080)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r2}) 1.533617944s ago: executing program 2 (id=8600): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000003880)={0x0, 0x0, 0x0}, 0x0) (async) close(r0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x80}, 0x8) (async) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000100)={0xf3c5, 0x0, 0x0, 0xe, 0x4}) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, &(0x7f00000000c0)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) (async) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="73b313e0d1e1f7b50da110f39280e6e53d53b259793664fbe254b307cdda597b0fb2fb55e3c5b6aa1066251fcbca3ba18ce732b487fecd74c78ac708750089e6f4d489c20b27177971202226b44a3853a9131a4a82aa532316508f94f55789974f27f23c22ebe452fdd1687e94cab80cb93c3a1456a7f5cb73cd3e8e654cb8", 0x7f}, {&(0x7f00000003c0)="56139c5a49df7f318ada52d4756e3eba6fb8a04fd83fa9639c13838b6de8a7c34128b01b3b8893c5e83ef690797ddf38daca52ef27654d805cc3c0963cb94dc6e0820ddac286b79a83887cb42e2b6f714ccd3ee64d06ece4cd723bf22ee8c9a28d37f6f6d1f51dd576e854cc3dfc37c22117a26efbe69934e70170741b9d0ae64f3c199667994ccaf5ef52a46727ddc82827ab6c34ce9cda54901562950e813ffe76eea17ca228", 0xa7}], 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r1, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="000000001c0d109e1c87df7125337c442ede0000e8ffe4f0000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1], 0xa8, 0x80}}], 0x1, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100001c300000000fcffc75900000400", @ANYRES32=0x0, @ANYBLOB="31200000000000000c002b80080003000200000008001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) (async) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1.21107719s ago: executing program 2 (id=8601): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000012c0)={0x3c, r3, 0x9, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x20040000) getpeername$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x1031, r5, 0x0) pipe2(&(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r7, r5, 0xe, 0x4) write$binfmt_script(r8, &(0x7f0000001380)={'#! ', './file0'}, 0xb) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000280)=@bloom_filter={0x1e, 0x401, 0x4, 0xffff, 0x8000, r1, 0x20, '\x00', r4, r1, 0x4, 0x0, 0x4, 0x9, @value=r1}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) 1.084712019s ago: executing program 2 (id=8602): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) pwritev(r3, &(0x7f0000000700)=[{&(0x7f0000000340)="90214dd632", 0x5}], 0x1, 0x2, 0x6) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x4000002}, 0x28) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)=0x6) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x3, @loopback}}, 0x80, 0x0}, 0x4044890) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) close(0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0xfd}, 0x80a9}, 0x1c) socket$inet(0x2, 0x3, 0x8) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x7fffffffffffffff, 0x141102) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x1, 0x1, 0x1d}) 770.345314ms ago: executing program 2 (id=8603): syz_extract_tcp_res(&(0x7f0000000000), 0x6987, 0x9a5) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000019000109fdffffff0000000002"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffff46040000004000007b0a00fe000000006e04000000000000c6000000000300009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/xfrm_stat\x00') sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtclass={0x48c, 0x28, 0x300, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x10}, {0x0, 0x10}, {0xfff1, 0x4}}, [@tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_htb={{0x8}, {0x450, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x9}, @TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x3, 0xff, 0x5, 0x1000, 0x2, 0x4, 0x3, 0xf, 0x7bf8, 0x8000, 0x7, 0x200, 0x1, 0x4, 0x10001, 0x3, 0x10, 0x9, 0x0, 0xd1, 0x80000001, 0x3ff, 0x2, 0x2, 0x9, 0x280, 0xfffffff7, 0x6, 0x2, 0x1, 0x2, 0x10, 0x1ff, 0x7f, 0x80, 0x5, 0x9c, 0x2, 0x20aa, 0x0, 0xe, 0x8001, 0xfffffffa, 0x2, 0x8, 0x0, 0x5, 0x1, 0x2, 0x3, 0x0, 0x9, 0x163a, 0x0, 0x8, 0x10000, 0x73, 0x4, 0x8, 0xfb0000, 0x3, 0x400, 0x400, 0x1, 0x4, 0x4, 0x8, 0x9, 0xfffffff8, 0x0, 0x7, 0x3, 0x7, 0x6, 0xffff0a4b, 0x1, 0x6, 0x40, 0x22, 0x6, 0xff, 0x9, 0x9, 0x3, 0x4, 0x9, 0x6, 0xfff, 0x0, 0x2, 0xc56f, 0xffffffff, 0x9, 0x0, 0x6, 0xfffffffe, 0x9, 0x6, 0x5, 0x400, 0x3, 0x4, 0x11c, 0x9, 0x1000, 0x1d, 0x8, 0x5106, 0x4, 0x0, 0xe3c, 0xf05e, 0x9, 0xdf64, 0x0, 0x9, 0x8c800000, 0x9, 0x7, 0xd, 0xff, 0x6, 0x0, 0xfe00000, 0x7, 0x2, 0x0, 0x8, 0x3, 0x10000, 0x5, 0xfffffff8, 0x10000, 0x3, 0x42c, 0x54e, 0xc15, 0x8, 0x4, 0x2, 0x1, 0x2, 0x7fffffff, 0xfff, 0x6, 0x6, 0x4, 0xf, 0x7, 0x7fff, 0x2, 0x117, 0x9, 0x7fff, 0x4, 0x80000001, 0xb1, 0x40, 0x5, 0x9, 0xffffffff, 0x2, 0x5, 0x3, 0xfffffffd, 0xf, 0x5, 0xf5, 0x4, 0xd9, 0x0, 0xffffffff, 0x8, 0x3ff, 0x1, 0x8, 0x9, 0x7, 0xfffffffc, 0x8, 0x6, 0x80, 0x800, 0x0, 0x2, 0xfffff800, 0x1, 0x4, 0x81, 0x6, 0x5, 0x3, 0xca, 0x0, 0x7357, 0x2c72, 0x7, 0x9, 0xa, 0x5cb, 0x5, 0x7, 0x9, 0x7, 0x30, 0x1, 0x101, 0x7, 0x8, 0xfffffe01, 0x7, 0x4, 0xfffffff0, 0x4, 0xf, 0xc59, 0x9, 0xd, 0x1, 0x7fffffff, 0x0, 0x5, 0x6, 0x9, 0x3b58, 0x2, 0x5, 0x8, 0xffff, 0x40e, 0x6, 0x3ff, 0x7, 0x8, 0x3, 0x3, 0x5, 0xfffffff7, 0x6, 0xeb44, 0x1000, 0x6, 0x0, 0x81, 0x5, 0x8, 0x0, 0x6, 0x4, 0x4, 0x2, 0x9, 0x7, 0x9, 0x9d]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x1, 0x2, 0x19e2, 0x3, 0x4, 0x2}, {0xc0, 0x2, 0x6, 0xfff8, 0x3ff, 0x7}, 0x4, 0x10000, 0x6, 0x7, 0x5}}, @TCA_HTB_RATE64={0xc, 0x6, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x48c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0x9}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x80000000, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac3(r5, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a201020301090224008e48d5236b1ea6007d46c913010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000140)={0x94, &(0x7f0000000500)={0x40, 0xd, 0x6b, "c9fb7ddf71e338a73c3aef0c9e9682424d02be5f6fbce05d219a6ada237b8076b6081279f56e900da380dbd286c12a8feafc10b6826319411ee5d106454a275f934316cdffe47808700f55867192d841be607de1f5c38693126ec4c7194999baa318cec35894cb222e838c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, &(0x7f00000001c0)={0x14, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x2b, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x7f, 0xbe, 0x6, 0xc7a9, 0xd4f7, 0x5, 0x6, 0x5, 0xb, 0x6, 0x0, 0x9}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x3ff}, &(0x7f00000003c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000440)={0x20, 0x89, 0x2}}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x61a7b7f8b4074f54, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 660.626486ms ago: executing program 6 (id=8604): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a310000000014"], 0x60}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x8, 0x1, 0x200, 0x3, 0x2, 0x7ff, 0xfff, 0x6e4c8f}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000001700000004000000002200", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 470.013698ms ago: executing program 6 (id=8605): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f00001cb000/0x3000)=nil, 0x3000, 0x9d66f39bdfa04408, 0x80010, 0xffffffffffffffff, 0xec778000) read(0xffffffffffffffff, &(0x7f0000000140)=""/52, 0x34) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r3, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0xffff, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x5, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x7, 0x9, 0x1, 0x4, 0x8000ffe, 0x7fffffff, 0x51, 0x8, 0x800, 0x6, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x805, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x802, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x6, 0x0, 0x24a, 0x2, 0xfffffff7, 0xfffffffe, 0x3, 0x5, 0x5, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x100007ff, 0x6, 0x7, 0x8001, 0xe, 0xffff3f16, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0xd, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x10001, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x4, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x0, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x3, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x7, 0x7a3], [0x9, 0x3a8d, 0xffff9a7f, 0x80000000, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x3, 0x0, 0x4, 0x9, 0x80000001, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1100, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) landlock_create_ruleset(&(0x7f0000000040)={0x7f4a, 0x0, 0x2}, 0x18, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r5) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r7, 0x8) r8 = io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x11, &(0x7f00000002c0), 0x2) 430.039239ms ago: executing program 6 (id=8606): write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xe7) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) socket$kcm(0x29, 0x7, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r2, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0xffffffd7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x200000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/300], 0x0, 0x0}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4000000000]}, 0x8, 0x0) faccessat2(r6, &(0x7f0000000040)='\x00', 0x2, 0x1200) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f00000001c0)={0x5, 0x9, 0x6, 0x5, 0x0, 0x0, "44a665cad0a90249ecf6b54d69582765", 0xe, 0xff, 0x4, 0xc, 0xf2, 0x69}) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x4000) ioctl$BLKGETZONESZ(r7, 0x80041284, &(0x7f0000001240)=0x7) r8 = syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a2404040005"], 0x0) syz_usb_control_io(r8, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r9, 0x1, 0x0, &(0x7f0000000440), 0x0) clock_gettime(0x0, &(0x7f00000000c0)) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000100)={0x1, 0x2, 0x6, &(0x7f0000000140)={0x2, "00000000000000007b2644e953449f6c26f206b2853ad8c82b1b9950cf5e1dee93"}}) 0s ago: executing program 5 (id=8607): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) (async) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) signalfd4(r1, &(0x7f0000000140)={[0x101]}, 0x8, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) (async) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): ted [ 2048.523562][ T4629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2048.532317][ T4629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2048.556152][ T4644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2048.566728][ T4644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2048.582268][T26642] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2048.614838][ T4643] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2048.622428][T26642] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2048.666723][ T4645] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2048.724391][ T4643] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2048.751409][ T4645] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2048.928344][ T11] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2049.200272][ T11] usb 3-1: config 0 has no interfaces? [ 2049.209791][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2049.211556][ T5720] usb 2-1: USB disconnect, device number 117 [ 2049.232065][ T5720] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2049.248005][ T11] usb 3-1: config 0 has no interfaces? [ 2049.259542][ T11] usb 3-1: config 0 has no interfaces? [ 2049.264689][ T5720] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2049.268557][ T11] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 2049.280712][ T5720] quatech2 2-1:0.51: device disconnected [ 2049.306862][T25309] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2049.320363][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2049.321959][ T4662] fuse: Unknown parameter 'syzkaller1' [ 2049.361042][ T11] usb 3-1: config 0 descriptor?? [ 2049.568007][T25309] usb 6-1: Using ep0 maxpacket: 32 [ 2049.577088][T25309] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 2049.598286][T25309] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2049.611486][T25309] usb 6-1: config 0 has no interface number 0 [ 2049.623566][T25309] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2049.888181][ T11] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2049.913528][ T4672] sg_write: process 1166 (syz.1.8182) changed security contexts after opening file descriptor, this is not allowed. [ 2049.945900][T26642] usb 3-1: USB disconnect, device number 24 [ 2050.149353][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 2050.156695][ T11] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 2050.166249][ T11] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2050.176872][ T11] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2050.185998][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2050.195843][ T11] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2050.205580][ T11] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2050.219778][ T11] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2050.228957][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2050.238905][ T11] usb 1-1: config 0 descriptor?? [ 2050.447136][ T4669] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[2122] was attempted by "   l@ \x09$rQ \x09 \x07 \x09 \x09  fd=0x0000000000000004,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=00000000000000000000,"[4669] [ 2050.481065][T25309] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 2050.482070][ T4669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8181'. [ 2050.490324][T25309] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2050.490349][T25309] usb 6-1: Product: syz [ 2050.490364][T25309] usb 6-1: Manufacturer: syz [ 2050.490378][T25309] usb 6-1: SerialNumber: syz [ 2050.494561][T25309] usb 6-1: config 0 descriptor?? [ 2050.566064][ T11] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2050.590948][ T11] usb 1-1: USB disconnect, device number 39 [ 2050.606401][ T11] usblp0: removed [ 2050.702882][T25309] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 2050.714091][T25309] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 2050.888092][ T9] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2050.938140][T25309] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 2050.951609][T25309] usbhid 6-1:0.35: couldn't find an input interrupt endpoint [ 2051.051087][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2051.062772][ T9] usb 2-1: config 3 has an invalid interface number: 151 but max is 0 [ 2051.076028][ T9] usb 2-1: config 3 has no interface number 0 [ 2051.086103][ T9] usb 2-1: config 3 interface 151 has no altsetting 0 [ 2051.097033][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=1d.cd [ 2051.110170][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.120033][ T9] usb 2-1: Product: syz [ 2051.125593][ T9] usb 2-1: Manufacturer: syz [ 2051.130582][ T9] usb 2-1: SerialNumber: syz [ 2051.140001][T25309] usb 6-1: USB disconnect, device number 41 [ 2051.144154][ T4692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8189'. [ 2051.367236][ T4698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8190'. [ 2051.386262][ T4684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2051.409549][ T4684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2051.428017][ T4684] netlink: 'syz.1.8185': attribute type 5 has an invalid length. [ 2051.501083][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.151/input/input204 [ 2051.625474][ T4977] bcm5974 2-1:3.151: could not read from device [ 2051.647525][ T9] usb 2-1: USB disconnect, device number 118 [ 2051.729738][ T4977] bcm5974 2-1:3.151: could not read from device [ 2051.780894][ T4198] udevd[4198]: Error opening device "/dev/input/event4": No such device [ 2051.803839][ T4198] udevd[4198]: Unable to EVIOCGABS device "/dev/input/event4" [ 2051.815998][ T4198] udevd[4198]: Unable to EVIOCGABS device "/dev/input/event4" [ 2051.823748][ T4198] udevd[4198]: Unable to EVIOCGABS device "/dev/input/event4" [ 2051.833027][ T4198] udevd[4198]: Unable to EVIOCGABS device "/dev/input/event4" [ 2052.528229][T25309] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2052.537077][T25308] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2052.672851][ T4728] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 2052.969745][T25308] usb 6-1: device descriptor read/64, error -71 [ 2053.101416][T25309] usb 2-1: config 0 has no interfaces? [ 2053.109874][T25309] usb 2-1: config 0 has no interfaces? [ 2053.118095][T25309] usb 2-1: config 0 has no interfaces? [ 2053.124056][T25309] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 2053.134323][T25309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2053.146767][T25309] usb 2-1: config 0 descriptor?? [ 2053.207819][T25308] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2053.347916][T25308] usb 6-1: device descriptor read/64, error -71 [ 2053.472358][T25308] usb usb6-port1: attempt power cycle [ 2053.546648][T25309] usb 2-1: USB disconnect, device number 119 [ 2053.837548][ T4741] netlink: 'syz.6.8202': attribute type 4 has an invalid length. [ 2053.846716][T25308] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2053.869755][T25308] usb 6-1: device descriptor read/8, error -71 [ 2053.993428][ T4743] netlink: 'syz.0.8203': attribute type 1 has an invalid length. [ 2054.036768][ T4743] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8203'. [ 2054.055821][ T29] audit: type=1326 audit(1783318519.667:5589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4742 comm="syz.0.8203" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dbdf9de59 code=0x0 [ 2054.108307][T25308] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2054.163002][ T4747] kvm: pic: non byte write [ 2054.265342][ T4751] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 2054.271905][ T4751] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2054.280440][ T4751] vhci_hcd vhci_hcd.0: Device attached [ 2054.552315][T25308] usb 6-1: device descriptor read/8, error -71 [ 2054.608018][ T9] usb 38-1: SetAddress Request (35) to port 0 [ 2054.617793][ T9] usb 38-1: new SuperSpeed USB device number 35 using vhci_hcd [ 2054.645839][ T4752] vhci_hcd: connection closed [ 2054.646119][T13024] vhci_hcd vhci_hcd.2: stop threads [ 2054.664864][T25308] usb usb6-port1: unable to enumerate USB device [ 2054.708003][T13024] vhci_hcd vhci_hcd.2: release socket [ 2054.717177][T13024] vhci_hcd vhci_hcd.2: disconnect device [ 2054.860953][ T4756] program syz.1.8206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2055.277931][T26642] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2055.500899][T26642] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2055.511330][T26642] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2055.531885][T26642] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2055.546108][T26642] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 97, using maximum allowed: 30 [ 2055.579437][T26642] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 2055.606128][T26642] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 2055.618076][T26642] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2055.640702][T26642] usb 2-1: Product: syz [ 2055.657279][T26642] usb 2-1: Manufacturer: syz [ 2055.675116][T26642] usb 2-1: SerialNumber: syz [ 2055.936229][T26642] usb 2-1: selecting invalid altsetting 1 [ 2055.975258][ T4779] syzkaller1: entered promiscuous mode [ 2055.984205][ T4779] syzkaller1: entered allmulticast mode [ 2056.077297][T26642] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2056.090038][T26642] usb 2-1: USB disconnect, device number 120 [ 2056.148669][ T4141] udevd[4141]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2056.278903][ T4785] fuse: Unknown parameter '0x0000000000000006' [ 2056.668197][ T4793] loop5: detected capacity change from 0 to 7 [ 2056.677931][ T4793] Dev loop5: unable to read RDB block 7 [ 2056.683547][ T4793] loop5: unable to read partition table [ 2056.710616][ T4793] loop5: partition table beyond EOD, truncated [ 2056.727768][ T4793] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2056.807928][T25308] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2057.201487][T25308] usb 3-1: config 0 has no interfaces? [ 2057.214398][T25308] usb 3-1: config 0 has no interfaces? [ 2057.268553][T25308] usb 3-1: config 0 has no interfaces? [ 2057.298276][T25308] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 2057.311876][ T4805] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 2057.318428][ T4805] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2057.403608][ T4805] vhci_hcd vhci_hcd.0: Device attached [ 2057.412156][T25308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2057.446517][T25308] usb 3-1: config 0 descriptor?? [ 2057.485774][ T4813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2057.678151][T26642] usb 44-1: SetAddress Request (27) to port 0 [ 2057.692428][ T4806] vhci_hcd: connection closed [ 2057.694419][ T8222] vhci_hcd vhci_hcd.5: stop threads [ 2057.706004][T26642] usb 44-1: new SuperSpeed USB device number 27 using vhci_hcd [ 2057.737377][ T4820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8225'. [ 2057.737788][ T8222] vhci_hcd vhci_hcd.5: release socket [ 2057.811574][ T8222] vhci_hcd vhci_hcd.5: disconnect device [ 2057.957829][ T11] usb 3-1: USB disconnect, device number 25 [ 2058.835311][ T4836] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8229'. [ 2058.939891][T28195] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 2058.991313][T25308] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2059.211554][T28195] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2059.234658][T28195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2059.248486][T28195] usb 3-1: Product: syz [ 2059.258097][T28195] usb 3-1: Manufacturer: syz [ 2059.262755][T28195] usb 3-1: SerialNumber: syz [ 2059.280957][T28195] usb 3-1: config 0 descriptor?? [ 2059.438475][T25309] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 2059.532721][T28195] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2059.647580][T25308] usb 1-1: Using ep0 maxpacket: 32 [ 2059.748435][ T9] usb 38-1: device descriptor read/8, error -110 [ 2059.917961][ T11] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2060.138032][ T11] usb 6-1: device descriptor read/64, error -71 [ 2060.188806][ T9] usb usb38-port1: attempt power cycle [ 2060.295879][T25308] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 2060.304277][T25308] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2060.312866][T25308] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2060.321819][T25308] usb 1-1: config 1 has no interface number 0 [ 2060.327947][T25308] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2060.338812][T25308] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2060.352325][T25308] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2060.361445][T25308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2060.458957][ T11] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2060.473266][ T4849] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8234'. [ 2060.524681][T25308] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 2060.531751][T25309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2060.544503][T25309] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2060.557326][T25309] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2060.566371][T25309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2060.591231][T25309] usb 2-1: config 0 descriptor?? [ 2060.601391][ T11] usb 6-1: device descriptor read/64, error -71 [ 2060.708488][ T11] usb usb6-port1: attempt power cycle [ 2060.818546][ T9] usb usb38-port1: unable to enumerate USB device [ 2060.874151][T25308] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 2061.137965][ T11] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2061.188833][ T11] usb 6-1: device descriptor read/8, error -71 [ 2061.467858][ T11] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2061.519192][T25309] usbhid 2-1:0.0: can't add hid device: -71 [ 2061.526568][ T11] usb 6-1: device descriptor read/8, error -71 [ 2061.539600][T25309] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2061.556341][T25309] usb 2-1: USB disconnect, device number 121 [ 2061.660161][ T11] usb usb6-port1: unable to enumerate USB device [ 2061.987524][T25309] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 2062.015304][T28195] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2062.042360][T28195] usb 3-1: USB disconnect, device number 26 [ 2062.194946][ T9] usb 1-1: USB disconnect, device number 40 [ 2062.228440][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 2062.627832][ T2445] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2062.847864][T26642] usb 44-1: device descriptor read/8, error -110 [ 2062.858686][ T4874] program syz.0.8243 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2062.897830][T28195] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2063.018049][ T2445] usb 2-1: device descriptor read/64, error -71 [ 2063.047955][T28195] usb 3-1: Using ep0 maxpacket: 16 [ 2063.057590][T28195] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 2063.066358][T28195] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2063.077559][ T9] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2063.085330][T28195] usb 3-1: config 0 has no interface number 0 [ 2063.100126][T28195] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 2063.109276][T28195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2063.117297][T28195] usb 3-1: Product: syz [ 2063.121624][T28195] usb 3-1: Manufacturer: syz [ 2063.126260][T28195] usb 3-1: SerialNumber: syz [ 2063.134126][T28195] usb 3-1: config 0 descriptor?? [ 2063.143506][T28195] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 2063.150933][T28195] uvcvideo 3-1:0.105: No valid video chain found. [ 2063.238127][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 2063.244804][T26642] usb usb44-port1: attempt power cycle [ 2063.252824][ T9] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2063.257910][ T2445] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2063.264028][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2063.264079][ T9] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 2063.264104][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2063.302585][ T9] usb 6-1: config 0 descriptor?? [ 2063.370261][ T4870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2063.379154][ T4870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2063.388516][ T4870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2063.397282][ T4870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2063.412240][ T4870] loop9: detected capacity change from 0 to 8 [ 2063.522798][ T4876] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2063.633386][ T4870] loop9: detected capacity change from 8 to 7 [ 2063.652935][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2063.662201][ C0] buffer_io_error: 15 callbacks suppressed [ 2063.662211][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 2063.676303][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2063.685596][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 2063.694285][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2063.703561][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 2063.711736][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2063.720938][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 2063.738040][ T2445] usb 2-1: device descriptor read/64, error -71 [ 2063.738639][ T9] corsair-cpro 0003:1B1C:0C10.00AC: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 2063.756688][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2063.756842][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 2063.767368][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2063.784603][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 2063.794594][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2063.803913][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 2063.812132][ T4870] ldm_validate_partition_table(): Disk read failed. [ 2063.818971][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2063.828162][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 2063.838086][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2063.847304][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 2063.855394][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2063.864590][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 2063.872761][ T4870] Dev loop9: unable to read RDB block 0 [ 2063.896615][ T2445] usb usb2-port1: attempt power cycle [ 2063.904199][ T4870] loop9: unable to read partition table [ 2063.910076][ T4870] loop9: partition table beyond EOD, truncated [ 2063.918131][ T4870] loop_reread_partitions: partition scan of loop9 (|LCTn1`BPY 꽡7=ݥ4ɫ,߸MyV4!4) failed (rc=-5) [ 2063.929397][T26642] usb usb44-port1: unable to enumerate USB device [ 2063.946740][T28195] usb 3-1: USB disconnect, device number 27 [ 2063.953423][ T4992] ldm_validate_partition_table(): Disk read failed. [ 2063.997753][ T4992] Dev loop9: unable to read RDB block 0 [ 2064.012076][ T4992] loop9: unable to read partition table [ 2064.018331][ T4992] loop9: partition table beyond EOD, truncated [ 2064.193720][ T4885] bridge0: port 2(bridge_slave_1) entered disabled state [ 2064.268489][ T4885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2064.280674][ T4885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2064.320970][ T2445] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2064.372766][ T4885] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 2064.400706][ T3962] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2064.409636][ T3962] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2064.418530][ T3962] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2064.447430][ T3962] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2064.635273][ T4890] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2064.672430][ T4890] syzkaller0: entered promiscuous mode [ 2064.677937][ T4890] syzkaller0: entered allmulticast mode [ 2064.760896][ T2445] usb 2-1: device descriptor read/8, error -71 [ 2064.921301][ T4892] netlink: 'syz.2.8248': attribute type 1 has an invalid length. [ 2064.981427][ T9] corsair-cpro 0003:1B1C:0C10.00AC: probe with driver corsair-cpro failed with error -71 [ 2065.011982][ T9] usb 6-1: USB disconnect, device number 50 [ 2065.071428][ T4894] x_tables: duplicate underflow at hook 1 [ 2065.190529][ T2445] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2065.230371][ T2445] usb 2-1: device descriptor read/8, error -71 [ 2065.242706][T28008] Bluetooth: hci4: command 0x0406 tx timeout [ 2065.404311][ T4901] loop5: detected capacity change from 0 to 7 [ 2065.411401][ T4901] Dev loop5: unable to read RDB block 7 [ 2065.417112][ T4901] loop5: unable to read partition table [ 2065.423666][ T4901] loop5: partition table beyond EOD, truncated [ 2065.430245][ T4901] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2065.430672][ T2445] usb usb2-port1: unable to enumerate USB device [ 2065.478445][ T9] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 2065.634172][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2065.656593][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 2065.690701][ T9] usb 6-1: config 16 has an invalid interface number: 36 but max is 0 [ 2065.708769][ T9] usb 6-1: config 16 has no interface number 0 [ 2065.729451][ T9] usb 6-1: config 16 interface 36 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 2065.748028][ T9] usb 6-1: config 16 interface 36 altsetting 1 has an invalid endpoint descriptor of length 5, skipping [ 2065.803799][ T9] usb 6-1: config 16 interface 36 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2065.838800][ T9] usb 6-1: config 16 interface 36 has no altsetting 0 [ 2065.860951][ T9] usb 6-1: New USB device found, idVendor=0408, idProduct=ea04, bcdDevice=4a.9d [ 2065.880662][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2065.901150][ T9] usb 6-1: Product: syz [ 2065.910821][ T9] usb 6-1: Manufacturer: syz [ 2065.917955][ T9] usb 6-1: SerialNumber: syz [ 2065.933806][ T4894] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2066.138736][ T11] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2066.158993][ T9] hub 6-1:16.36: bad descriptor, ignoring hub [ 2066.175399][ T9] hub 6-1:16.36: probe with driver hub failed with error -5 [ 2066.189421][ T9] option 6-1:16.36: GSM modem (1-port) converter detected [ 2066.239809][ T9] usb 6-1: USB disconnect, device number 51 [ 2066.267404][ T9] option 6-1:16.36: device disconnected [ 2066.309498][ T4912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2066.318861][ T11] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2066.329309][T26642] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2066.341521][ T11] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2066.352482][ T11] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2066.372552][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2066.382142][ T11] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2066.396191][ T11] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2066.406206][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2066.420825][ T11] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2066.431249][ T11] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2066.445130][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2066.453865][ T11] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2066.473684][ T11] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2066.494046][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2066.505787][ T11] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2066.516496][ T11] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2066.536726][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2066.545019][ T11] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2066.554572][T26642] usb 1-1: Using ep0 maxpacket: 32 [ 2066.560291][ T11] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2066.576450][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2066.584458][T26642] usb 1-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 2066.596610][ T11] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2066.606750][T26642] usb 1-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3 [ 2066.616862][ T11] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2066.628275][T26642] usb 1-1: Product: syz [ 2066.635114][T26642] usb 1-1: Manufacturer: syz [ 2066.648736][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2066.656481][T26642] usb 1-1: SerialNumber: syz [ 2066.664454][ T11] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2066.676506][T26642] usb 1-1: config 0 descriptor?? [ 2066.682200][ T11] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2066.700735][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2066.734729][ T11] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2066.746995][ T11] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2066.775570][ T11] usb 3-1: Product: syz [ 2066.784600][ T11] usb 3-1: Manufacturer: syz [ 2066.790233][ T11] usb 3-1: SerialNumber: syz [ 2066.803599][ T11] usb 3-1: config 0 descriptor?? [ 2066.819027][ T11] yurex 3-1:0.0: Could not find endpoints [ 2067.399576][ T4923] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8257'. [ 2067.423718][ T4923] openvswitch: netlink: Flow key attr not present in new flow. [ 2067.669739][T26642] usb 1-1: [UEAGLE-ATM] interface 1 not found [ 2067.676128][T26642] ueagle-atm 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2067.709608][T26642] usb 1-1: USB disconnect, device number 41 [ 2067.768288][ T43] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 2067.987434][ T43] usb 6-1: descriptor type invalid, skip [ 2067.999291][ T43] usb 6-1: descriptor type invalid, skip [ 2068.006964][ T43] usb 6-1: descriptor type invalid, skip [ 2068.019636][ T43] usb 6-1: not running at top speed; connect to a high speed hub [ 2068.063078][ T43] usb 6-1: config 1 has an invalid descriptor of length 165, skipping remainder of the config [ 2068.081665][ T43] usb 6-1: too many endpoints for config 1 interface 0 altsetting 58: 242, using maximum allowed: 30 [ 2068.096180][ T43] usb 6-1: config 1 interface 0 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 242 [ 2068.114942][ T43] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2068.194707][ T4933] xt_hashlimit: size too large, truncated to 1048576 [ 2068.375435][ T43] usb 6-1: New USB device found, idVendor=04b4, idProduct=9320, bcdDevice= 0.40 [ 2068.384497][ T43] usb 6-1: New USB device strings: Mfr=222, Product=2, SerialNumber=3 [ 2068.392646][ T43] usb 6-1: Product: syz [ 2068.396796][ T43] usb 6-1: Manufacturer: syz [ 2068.401375][ T43] usb 6-1: SerialNumber: syz [ 2068.584504][T25309] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2068.749599][T25309] usb 1-1: config 0 has no interfaces? [ 2068.763188][T25309] usb 1-1: config 0 has no interfaces? [ 2068.781584][T25309] usb 1-1: config 0 has no interfaces? [ 2068.795733][T25309] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 2068.804020][ T4951] loop5: detected capacity change from 0 to 7 [ 2068.812060][T25309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2068.823582][T25309] usb 1-1: config 0 descriptor?? [ 2068.831961][ T4951] Dev loop5: unable to read RDB block 7 [ 2068.847675][ T4951] loop5: unable to read partition table [ 2068.862417][ T4951] loop5: partition table beyond EOD, truncated [ 2068.879000][ T4951] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2068.968553][ T2445] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2069.056880][T25308] usb 3-1: USB disconnect, device number 28 [ 2069.162884][ T2445] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2069.217741][ T2445] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2069.230719][ T2445] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2069.298903][ T2445] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2069.323014][ T2445] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2069.334141][ T2445] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2069.372854][ T2445] usb 2-1: SerialNumber: syz [ 2069.391951][T26642] usb 1-1: USB disconnect, device number 42 [ 2070.544975][ T43] usb 6-1: selecting invalid altsetting 0 [ 2070.583554][ T43] usb 6-1: can't set first interface for hiFace device. [ 2070.623066][ T43] snd-usb-hiface 6-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 2070.677436][ T43] usb 6-1: USB disconnect, device number 52 [ 2071.134333][ T4978] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2071.195740][ T29] audit: type=1400 audit(1783318536.807:5590): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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pid=4983 comm="syz.5.8272" [ 2071.290793][ T4978] bond2: (slave lo): Enslaving as an active interface with an up link [ 2071.313045][ T4978] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 2071.592136][ T4988] could not allocate digest TFM handle _!5(iHP,omxę*71U"~ 2.>~e>/y [ 2071.736256][ T5720] usb 6-1: new low-speed USB device number 53 using dummy_hcd [ 2071.840160][ T2445] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 2071.846402][ T2445] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 2071.858771][ T2445] usb 2-1: USB disconnect, device number 126 [ 2072.131604][ T5001] loop5: detected capacity change from 0 to 7 [ 2072.138605][ T5001] Dev loop5: unable to read RDB block 7 [ 2072.144227][ T5001] loop5: unable to read partition table [ 2072.150135][ T5001] loop5: partition table beyond EOD, truncated [ 2072.156345][ T5001] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2072.167151][ T5720] usb 6-1: device descriptor read/64, error -71 [ 2072.364518][ T5020] hsr0: entered promiscuous mode [ 2072.509302][ T5720] usb 6-1: new low-speed USB device number 54 using dummy_hcd [ 2072.519622][ T5020] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8281'. [ 2072.552690][ T5024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8282'. [ 2072.617088][ T5028] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8281'. [ 2072.635506][ T5027] netlink: 'syz.0.8282': attribute type 1 has an invalid length. [ 2072.828320][ T2445] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 2072.847846][T26642] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2072.888054][ T5720] usb 6-1: device descriptor read/64, error -71 [ 2072.987806][ T2445] usb 2-1: Using ep0 maxpacket: 16 [ 2072.997176][ T2445] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2073.014068][ T5720] usb usb6-port1: attempt power cycle [ 2073.025048][ T2445] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2073.035128][ T2445] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2073.049906][T26642] usb 3-1: Using ep0 maxpacket: 16 [ 2073.052558][ T2445] usb 2-1: config 0 descriptor?? [ 2073.069108][T26642] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2073.107693][T26642] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2073.116963][T26642] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2073.145271][T26642] usb 3-1: config 0 descriptor?? [ 2073.357939][ T5720] usb 6-1: new low-speed USB device number 55 using dummy_hcd [ 2073.416470][ T5720] usb 6-1: device descriptor read/8, error -71 [ 2073.495189][ T2445] usbhid 2-1:0.0: can't add hid device: -71 [ 2073.511210][ T2445] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2073.542759][ T2445] usb 2-1: USB disconnect, device number 127 [ 2073.616847][T26642] usbhid 3-1:0.0: can't add hid device: -71 [ 2073.633500][T26642] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2073.653666][T26642] usb 3-1: USB disconnect, device number 29 [ 2073.668957][ T11] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2073.767984][ T5720] usb 6-1: new low-speed USB device number 56 using dummy_hcd [ 2073.788943][ T5720] usb 6-1: device descriptor read/8, error -71 [ 2073.819428][ T11] usb 1-1: config 0 has no interfaces? [ 2073.824954][ T11] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 2073.834481][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2073.849958][ T11] usb 1-1: config 0 descriptor?? [ 2073.898236][ T5720] usb usb6-port1: unable to enumerate USB device [ 2074.225164][ T5720] usb 1-1: USB disconnect, device number 43 [ 2074.447788][ T11] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2074.608222][ T192] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 2074.615735][ T11] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2074.615770][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2074.627999][ T11] usb 2-1: config 0 descriptor?? [ 2074.770109][ T192] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2074.770135][ T192] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2074.770205][ T192] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2074.770229][ T192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2074.783575][ T192] usb 3-1: config 0 descriptor?? [ 2074.790464][ T192] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2074.790513][ T192] dvb-usb: bulk message failed: -22 (3/0) [ 2074.804648][ T192] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2074.814512][ T192] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2074.814593][ T192] usb 3-1: media controller created [ 2074.819402][ T192] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2074.836548][ T192] dvb-usb: bulk message failed: -22 (6/0) [ 2074.836665][ T192] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2074.866362][ T192] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input206 [ 2074.881118][ T192] dvb-usb: schedule remote query interval to 150 msecs. [ 2074.881165][ T192] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2074.923308][ T5043] batman_adv: batadv0: Adding interface: macvtap1 [ 2074.992237][ T5043] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2074.992273][ T5043] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 2075.039263][ T192] dvb-usb: bulk message failed: -22 (1/0) [ 2075.039296][ T192] dvb-usb: error while querying for an remote control event. [ 2075.110308][ T5049] batman_adv: batadv0: Removing interface: macvtap1 [ 2075.247955][ T192] dvb-usb: bulk message failed: -22 (1/0) [ 2075.247991][ T192] dvb-usb: error while querying for an remote control event. [ 2075.417787][ T192] dvb-usb: bulk message failed: -22 (1/0) [ 2075.417822][ T192] dvb-usb: error while querying for an remote control event. [ 2075.483578][ T11] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2075.485682][ T11] [drm:udl_init] *ERROR* Selecting channel failed [ 2075.543832][ T11] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 2075.543860][ T11] [drm] Initialized udl on minor 2 [ 2075.545256][ T11] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2075.545757][ T5720] usb 3-1: USB disconnect, device number 30 [ 2075.546333][ T11] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 2075.574335][T26642] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2075.574772][T26642] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2075.574907][T26642] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 2075.575105][ T11] usb 2-1: USB disconnect, device number 2 [ 2075.653061][ T5720] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2075.868136][ T2445] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2076.055463][ T5075] netlink: 'syz.5.8295': attribute type 4 has an invalid length. [ 2076.073475][ T5075] netlink: 'syz.5.8295': attribute type 4 has an invalid length. [ 2076.217891][ T2445] usb 1-1: device descriptor read/64, error -71 [ 2076.467842][ T2445] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2076.763516][ T2445] usb 1-1: device descriptor read/64, error -71 [ 2076.818181][ T192] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2076.872673][ T2445] usb usb1-port1: attempt power cycle [ 2076.967789][ T192] usb 2-1: Using ep0 maxpacket: 16 [ 2076.984353][ T192] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2077.031552][ T192] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2077.063828][ T192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2077.097215][ T192] usb 2-1: config 0 descriptor?? [ 2077.228093][ T2445] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2077.418770][ T192] usbhid 2-1:0.0: can't add hid device: -71 [ 2077.425245][ T192] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2077.435935][ T192] usb 2-1: USB disconnect, device number 3 [ 2077.668214][ T2445] usb 1-1: device descriptor read/8, error -71 [ 2077.989416][ T2445] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2078.094501][T25308] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2078.119926][ T2445] usb 1-1: device descriptor read/8, error -71 [ 2078.238591][ T2445] usb usb1-port1: unable to enumerate USB device [ 2078.268937][T25308] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 2078.290700][T25308] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2078.311112][T25308] usb 3-1: config 0 has no interface number 0 [ 2078.391905][T25308] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 2078.410811][T25308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2078.433162][T25308] usb 3-1: Product: syz [ 2078.459096][T25308] usb 3-1: Manufacturer: syz [ 2078.476593][T25308] usb 3-1: SerialNumber: syz [ 2078.499198][T25308] usb 3-1: config 0 descriptor?? [ 2078.527798][ T192] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2078.553819][T25308] uvcvideo 3-1:0.64: probe with driver uvcvideo failed with error -22 [ 2078.707724][ T192] usb 2-1: Using ep0 maxpacket: 8 [ 2078.726162][ T192] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2078.736572][ T5104] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 2078.762099][ T192] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2078.786286][ T192] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2078.826894][ T192] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2078.861031][ T192] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2078.883997][ T192] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2078.903779][ T192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2078.959412][ T192] usbtmc 2-1:16.0: bulk endpoints not found [ 2079.113284][ T5106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8306'. [ 2079.305782][ T5106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8306'. [ 2079.626746][ T5106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8306'. [ 2079.681769][T25308] usb 2-1: USB disconnect, device number 4 [ 2079.967771][ T9] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 2080.128063][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 2080.145837][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2080.174085][ T9] usb 6-1: config 9 has an invalid interface number: 88 but max is 0 [ 2080.194936][ T9] usb 6-1: config 9 has no interface number 0 [ 2080.217546][ T9] usb 6-1: config 9 interface 88 has no altsetting 0 [ 2080.244254][ T9] usb 6-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=52.b8 [ 2080.265562][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2080.283989][ T9] usb 6-1: Product: syz [ 2080.297779][ T9] usb 6-1: Manufacturer: syz [ 2080.315929][ T9] usb 6-1: SerialNumber: syz [ 2080.539740][T26642] usb 3-1: USB disconnect, device number 31 [ 2080.602899][ T5115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2080.641948][ T5115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2080.738807][ T9] ums-datafab 6-1:9.88: USB Mass Storage device detected [ 2080.830795][ T9] ums-sddr55 6-1:9.88: USB Mass Storage device detected [ 2081.054579][ T9] usb 6-1: USB disconnect, device number 57 [ 2081.194716][ T5147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8314'. [ 2081.827303][ T2445] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2081.878023][ T11] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2082.160947][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2082.180006][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2082.197573][ T11] usb 2-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 2082.209377][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2082.213605][ T11] usb 2-1: config 0 descriptor?? [ 2082.227928][ T9] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 2082.228370][ T2445] usb 3-1: Using ep0 maxpacket: 8 [ 2082.243911][ T2445] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2082.359229][ T2445] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 2082.370795][ T2445] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1021 [ 2082.377892][ T9] usb 6-1: device descriptor read/64, error -71 [ 2082.393850][ T2445] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2082.405227][ T2445] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2082.414753][ T2445] usb 3-1: Product: syz [ 2082.418941][ T2445] usb 3-1: Manufacturer: syz [ 2082.423567][ T2445] usb 3-1: SerialNumber: syz [ 2082.431732][ T5153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2082.452669][ T5159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2082.454316][ T5153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2082.462043][ T5159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2082.523645][ T5720] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2082.627770][ T9] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 2082.660284][ T11] usbhid 2-1:0.0: can't add hid device: -71 [ 2082.682290][ T11] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2082.711298][ T11] usb 2-1: USB disconnect, device number 5 [ 2082.770196][ T9] usb 6-1: device descriptor read/64, error -71 [ 2082.888439][ T9] usb usb6-port1: attempt power cycle [ 2082.898562][ T5720] usb 1-1: config 0 has no interfaces? [ 2082.928976][ T5720] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2082.945426][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2082.956475][ T5720] usb 1-1: Product: syz [ 2082.962833][ T5720] usb 1-1: Manufacturer: syz [ 2082.968671][ T5720] usb 1-1: SerialNumber: syz [ 2082.976274][ T5720] usb 1-1: config 0 descriptor?? [ 2083.032835][ T11] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2083.197923][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 2083.204921][ T11] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2083.213223][ T11] usb 2-1: config 0 has no interface number 0 [ 2083.220251][ T11] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2083.235869][ T11] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2083.253497][ T9] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 2083.266412][ T11] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 2083.268913][ T5175] input input208: cannot allocate more than FF_MAX_EFFECTS effects [ 2083.289231][ T9] usb 6-1: device descriptor read/8, error -71 [ 2083.302683][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2083.326638][ T11] usb 2-1: config 0 descriptor?? [ 2083.471022][ T5720] usb 1-1: USB disconnect, device number 48 [ 2083.555177][ T9] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 2083.598411][ T9] usb 6-1: device descriptor read/8, error -71 [ 2083.624405][ T11] usbhid 2-1:0.1: can't add hid device: -71 [ 2083.643167][ T11] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 2083.659475][ T11] usb 2-1: USB disconnect, device number 6 [ 2083.728783][ T9] usb usb6-port1: unable to enumerate USB device [ 2084.358107][T26642] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2084.462859][ T2445] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 2084.470267][ T2445] cdc_ncm 3-1:1.0: bind() failure [ 2084.483126][ T2445] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 2084.489958][ T2445] cdc_ncm 3-1:1.1: bind() failure [ 2084.505473][ T2445] usb 3-1: USB disconnect, device number 32 [ 2084.523989][T26642] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2084.545488][T26642] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2084.555678][T26642] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2084.564978][T26642] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2084.583257][T26642] usb 1-1: SerialNumber: syz [ 2084.835931][T26642] usb 1-1: 0:2 : does not exist [ 2085.008864][T26642] usb 1-1: USB disconnect, device number 49 [ 2085.166526][ T4141] udevd[4141]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2085.677750][T26642] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 2085.830899][ T5228] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8333'. [ 2085.860536][T26642] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2085.889050][T26642] usb 6-1: not running at top speed; connect to a high speed hub [ 2085.912921][T26642] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 2085.941842][T26642] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2085.980050][T26642] usb 6-1: Product: syz [ 2085.995135][T26642] usb 6-1: Manufacturer: syz [ 2086.009147][T26642] usb 6-1: SerialNumber: syz [ 2086.246225][ T5225] syzkaller0: entered promiscuous mode [ 2086.252203][ T5225] syzkaller0: entered allmulticast mode [ 2086.331599][T26642] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2086.458168][T26642] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 2086.516858][T26642] usb 6-1: USB disconnect, device number 62 [ 2086.570254][ T4141] udevd[4141]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2086.943737][ T5252] : renamed from dummy0 [ 2086.974397][ T5245] netlink: 824 bytes leftover after parsing attributes in process `syz.2.8338'. [ 2087.284250][ T29] audit: type=1326 audit(1783318552.897:5591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5258 comm="syz.0.8341" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbdf9de59 code=0x7ffc0000 [ 2087.285417][ T5260] program syz.0.8341 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2087.337996][ T29] audit: type=1326 audit(1783318552.897:5592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5258 comm="syz.0.8341" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbdf9de59 code=0x7ffc0000 [ 2087.377901][ T29] audit: type=1326 audit(1783318552.897:5593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5258 comm="syz.0.8341" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f1dbdf9de59 code=0x7ffc0000 [ 2087.408868][ T29] audit: type=1326 audit(1783318552.897:5594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5258 comm="syz.0.8341" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbdf9de59 code=0x7ffc0000 [ 2087.438057][ T29] audit: type=1326 audit(1783318552.897:5595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5258 comm="syz.0.8341" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f1dbdf9de59 code=0x7ffc0000 [ 2087.483430][ T29] audit: type=1326 audit(1783318552.897:5596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5258 comm="syz.0.8341" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbdf9de59 code=0x7ffc0000 [ 2087.508554][ T29] audit: type=1326 audit(1783318552.897:5597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5258 comm="syz.0.8341" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f1dbdf9de59 code=0x7ffc0000 [ 2087.534471][ T29] audit: type=1326 audit(1783318552.897:5598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5258 comm="syz.0.8341" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbdf9de59 code=0x7ffc0000 [ 2087.563262][ T29] audit: type=1326 audit(1783318552.897:5599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5258 comm="syz.0.8341" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1dbdf5e68e code=0x7ffc0000 [ 2087.587822][T26642] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2087.595825][ T29] audit: type=1326 audit(1783318552.897:5600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5258 comm="syz.0.8341" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbdf9de59 code=0x7ffc0000 [ 2087.732089][ T2445] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2087.782151][T26642] usb 1-1: Using ep0 maxpacket: 16 [ 2087.790649][T26642] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 2087.807369][T26642] usb 1-1: config 0 has no interface number 0 [ 2087.822391][T26642] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2087.841919][T26642] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2087.852579][T26642] usb 1-1: config 0 interface 41 has no altsetting 0 [ 2087.870533][T26642] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 2087.894836][T26642] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2087.907827][ T2445] usb 6-1: Using ep0 maxpacket: 16 [ 2087.916280][ T2445] usb 6-1: config 0 has no interfaces? [ 2087.925351][ T2445] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2087.941357][ T2445] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2087.960410][T26642] usb 1-1: Product: syz [ 2087.965311][ T2445] usb 6-1: Product: syz [ 2087.975416][T26642] usb 1-1: Manufacturer: syz [ 2087.977502][ T2445] usb 6-1: Manufacturer: syz [ 2087.994428][T26642] usb 1-1: SerialNumber: syz [ 2087.999620][ T2445] usb 6-1: SerialNumber: syz [ 2088.027076][ T2445] usb 6-1: config 0 descriptor?? [ 2088.074742][T26642] usb 1-1: config 0 descriptor?? [ 2088.105091][ T5260] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2088.137053][ T5260] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2088.276518][ T2445] usb 6-1: USB disconnect, device number 63 [ 2088.390065][T26642] sr9700 1-1:0.41: probe with driver sr9700 failed with error -71 [ 2088.415989][T26642] usb 1-1: USB disconnect, device number 50 [ 2088.561383][ T5274] input: syz0 as /devices/virtual/input/input209 [ 2089.738432][ T5294] CUSE: unknown device info "n|zQC*" [ 2089.753583][ T5294] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0KV,${\d+" [ 2089.817921][ T5294] CUSE: unknown device info "" [ 2089.823117][ T5294] CUSE: unknown device info "LPt|%IOKu GǪ|QU˜DvF,*p(o9{u[赨gIPYV" [ 2089.877687][ T5294] CUSE: DEVNAME unspecified [ 2089.936376][T25308] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2090.492349][T25308] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 2090.505334][T25308] usb 1-1: config 0 has no interface number 1 [ 2090.521350][T25308] usb 1-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 2090.533965][T25308] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2090.548035][T25308] usb 1-1: config 0 interface 199 has no altsetting 0 [ 2090.584110][T25308] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 2090.626210][T25308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2090.653590][T25308] usb 1-1: SerialNumber: syz [ 2090.674096][T25308] usb 1-1: config 0 descriptor?? [ 2090.702391][T25308] uvcvideo 1-1:0.199: Found UVC 0.00 device (0002:0000) [ 2090.711011][T25308] uvcvideo 1-1:0.199: No valid video chain found. [ 2090.736067][ T5323] xt_hashlimit: size too large, truncated to 1048576 [ 2090.828504][T26642] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2090.900403][T25308] usb 1-1: USB disconnect, device number 51 [ 2090.998394][T26642] usb 2-1: Using ep0 maxpacket: 8 [ 2091.014542][T26642] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2091.036395][T26642] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2091.044847][T26642] usb 2-1: Product: syz [ 2091.053401][T26642] usb 2-1: Manufacturer: syz [ 2091.062109][T26642] usb 2-1: SerialNumber: syz [ 2091.072629][T26642] usb 2-1: config 0 descriptor?? [ 2091.286127][T26642] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2091.767082][T26642] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2091.800370][T26642] usb 2-1: USB disconnect, device number 7 [ 2092.099494][ T5366] xt_hashlimit: size too large, truncated to 1048576 [ 2092.247802][ T5720] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2092.505107][ T5385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8379'. [ 2092.668291][ T5397] fuse: Unknown parameter 'u"! HID v0.00 Device [syz1] on syz0 [ 2101.918965][ T5720] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 2102.352571][ T5720] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2102.579929][ T5720] usb 3-1: not running at top speed; connect to a high speed hub [ 2102.737983][T26642] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 2102.914832][ T5588] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8434'. [ 2102.971328][ T5634] Bluetooth: hci5: adv larger than maximum supported [ 2102.973419][ T5634] Bluetooth: hci5: Malformed LE Event: 0x0d [ 2102.989121][T26642] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2103.022532][ T5720] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 2103.024964][T26642] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 2103.043538][T26642] usb 6-1: can't read configurations, error -71 [ 2103.135257][ T5720] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 2103.145750][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2103.185022][ T5720] usb 3-1: Product: syz [ 2103.199392][ T5720] usb 3-1: Manufacturer: syz [ 2103.214589][ T5720] usb 3-1: SerialNumber: syz [ 2103.772846][ T5720] usb 3-1: USB disconnect, device number 37 [ 2103.775749][ T4141] udevd[4141]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2104.407711][T26642] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 2104.563161][T26642] usb 3-1: not running at top speed; connect to a high speed hub [ 2104.586902][T26642] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 2104.607781][T26642] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 2104.633657][T26642] usb 3-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.40 [ 2104.654045][T26642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2104.678792][T26642] usb 3-1: Product: ﳿ [ 2104.683415][T26642] usb 3-1: Manufacturer: ࠧ [ 2104.706837][T26642] usb 3-1: SerialNumber: Ё [ 2104.908013][ T192] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2104.946859][ T5605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2104.971591][ T5630] Option ''MO' to dns_resolver key: bad/missing value [ 2104.972357][ T5605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2105.063309][T26642] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2105.088020][ T192] usb 1-1: config 2 has an invalid interface number: 174 but max is 0 [ 2105.111295][ T192] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2105.127570][T26642] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 2105.155866][ T192] usb 1-1: config 2 has no interface number 0 [ 2105.184327][ T192] usb 1-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 2105.234022][ T192] usb 1-1: config 2 interface 174 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2105.290826][ T192] usb 1-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 2105.341653][ T192] usb 1-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2105.404807][ T192] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 2105.420528][T26642] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 2105.441112][ T192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2105.457922][T26642] usb 3-1: USB disconnect, device number 38 [ 2105.483395][ T192] usb 1-1: Product: syz [ 2105.500199][ T192] usb 1-1: Manufacturer: syz [ 2105.525880][ T192] usb 1-1: SerialNumber: syz [ 2105.560313][ T4198] udevd[4198]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2106.059048][T26642] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2106.070069][ T192] usb 1-1: probing VID:PID(0424:012C) [ 2106.081819][ T192] usb 1-1: vub300 testing BULK IN EndPoint(0) 8E [ 2106.092083][ T192] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 2106.115512][ T192] vub300 1-1:2.174: probe with driver vub300 failed with error -22 [ 2106.137849][ T192] usb 1-1: USB disconnect, device number 54 [ 2106.228041][T26642] usb 3-1: Using ep0 maxpacket: 16 [ 2106.235044][T26642] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2106.244882][T26642] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2106.248835][ T5647] syzkaller1: entered promiscuous mode [ 2106.256885][ T9] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 2106.262630][ T5647] syzkaller1: entered allmulticast mode [ 2106.270145][T26642] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2106.294812][T26642] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2106.304516][T26642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2106.327793][T26642] usb 3-1: Product: syz [ 2106.336647][T26642] usb 3-1: Manufacturer: syz [ 2106.346781][T26642] usb 3-1: SerialNumber: syz [ 2106.371770][T26642] usb 3-1: 0:2 : does not exist [ 2106.417871][ T9] usb 6-1: device descriptor read/64, error -71 [ 2106.670023][ T9] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 2106.696658][ T5658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8452'. [ 2106.708899][ T5658] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8452'. [ 2106.842785][ T9] usb 6-1: device descriptor read/64, error -71 [ 2106.968244][ T9] usb usb6-port1: attempt power cycle [ 2107.404055][T26642] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 2107.415914][ T9] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 2107.472437][ T9] usb 6-1: device descriptor read/8, error -71 [ 2107.539147][T26642] usb 3-1: USB disconnect, device number 39 [ 2107.738461][ T9] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 2107.794866][ T9] usb 6-1: device descriptor read/8, error -71 [ 2107.909034][ T9] usb usb6-port1: unable to enumerate USB device [ 2108.058204][ T11] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2108.328184][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 2108.340000][ T11] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 2108.351689][ T11] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2108.369174][ T11] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2108.377279][ T11] usb 1-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 2108.386597][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2108.397882][ T11] usb 1-1: config 0 descriptor?? [ 2108.939368][ T5705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2108.948167][ T5705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2108.962152][ T11] usbhid 1-1:0.0: can't add hid device: -71 [ 2108.978571][ T11] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2108.990397][ T11] usb 1-1: USB disconnect, device number 55 [ 2109.066341][ T5722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2109.417827][ T5720] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 2109.447798][ T192] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 2109.580097][ T5720] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2109.597724][ T192] usb 6-1: Using ep0 maxpacket: 8 [ 2109.600253][ T5720] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2109.607477][ T192] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 2109.615296][ C1] blk_print_req_error: 151 callbacks suppressed [ 2109.615325][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2109.622439][ T192] usb 6-1: config 0 has no interface number 0 [ 2109.649422][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2109.652236][ T5720] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2109.658752][ C0] buffer_io_error: 150 callbacks suppressed [ 2109.658771][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 2109.658808][ C0] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2109.658875][ C0] Buffer I/O error on dev loop9, logical block 1, async page read [ 2109.658896][ C0] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2109.658961][ C0] Buffer I/O error on dev loop9, logical block 2, async page read [ 2109.658981][ C0] I/O error, dev loop9, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2109.659046][ C0] Buffer I/O error on dev loop9, logical block 3, async page read [ 2109.659065][ C0] I/O error, dev loop9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2109.659130][ C0] Buffer I/O error on dev loop9, logical block 4, async page read [ 2109.659150][ C0] I/O error, dev loop9, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2109.659214][ C0] Buffer I/O error on dev loop9, logical block 5, async page read [ 2109.659233][ C0] I/O error, dev loop9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2109.659297][ C0] Buffer I/O error on dev loop9, logical block 6, async page read [ 2109.662411][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2109.690637][ T5720] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 2109.698519][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 2109.698561][ C0] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2109.698633][ C0] Buffer I/O error on dev loop9, logical block 1, async page read [ 2109.698696][ C0] Buffer I/O error on dev loop9, logical block 2, async page read [ 2109.718430][ T192] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2109.718464][ T192] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2109.718490][ T192] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2109.718516][ T192] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2109.718561][ T192] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2109.718585][ T192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2109.774315][ T192] usb 6-1: config 0 descriptor?? [ 2109.789262][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2109.834975][ T192] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2109.896249][ T5720] usb 3-1: config 0 descriptor?? [ 2110.187914][ T192] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 2110.220557][ T11] usb 6-1: USB disconnect, device number 73 [ 2110.240597][ T11] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 2110.343684][ T192] usb 1-1: Using ep0 maxpacket: 16 [ 2110.353904][ T192] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2110.369450][ T192] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2110.378977][ T192] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2110.391522][ T192] usb 1-1: config 0 descriptor?? [ 2110.420960][ T5720] hid-steam 0003:28DE:1102.00AF: unknown main item tag 0x0 [ 2110.439111][ T5720] hid-steam 0003:28DE:1102.00AF: unknown main item tag 0x0 [ 2110.447405][ T5720] hid-steam 0003:28DE:1102.00AF: unknown main item tag 0x0 [ 2110.477770][ T5720] hid-steam 0003:28DE:1102.00AF: unknown main item tag 0x0 [ 2110.487667][ T5720] hid-steam 0003:28DE:1102.00AF: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 2110.642716][ T5729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2110.668464][ T5729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2110.683226][ T5720] usb 3-1: USB disconnect, device number 40 [ 2110.787896][ T192] usbhid 1-1:0.0: can't add hid device: -71 [ 2110.796007][ T192] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2110.816315][ T192] usb 1-1: USB disconnect, device number 56 [ 2111.025637][ T5748] openvswitch: netlink: IPv6 tunnel dst address is zero [ 2111.696569][ T5757] xt_hashlimit: size too large, truncated to 1048576 [ 2111.843256][ T5763] tipc: Enabled bearer , priority 0 [ 2111.881765][ T5763] syzkaller0: entered promiscuous mode [ 2111.941276][ T5763] syzkaller0: entered allmulticast mode [ 2111.982283][ T5763] tipc: Resetting bearer [ 2112.033273][ T5762] tipc: Resetting bearer [ 2112.149849][ T5762] tipc: Disabling bearer [ 2112.420170][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 2112.420186][ T29] audit: type=1400 audit(1783318578.017:5648): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A80 pid=5773 comm="syz.1.8481" [ 2112.534257][ T11] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2112.710119][ T11] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2112.734749][ T11] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2112.764459][ T11] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 2112.790648][ T11] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2112.809147][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2112.828994][ T11] usb 3-1: Product: syz [ 2112.840965][ T11] usb 3-1: Manufacturer: syz [ 2112.851427][ T11] usb 3-1: SerialNumber: syz [ 2112.868992][ T11] usb 3-1: config 0 descriptor?? [ 2112.884995][ T5769] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2112.902516][ T5769] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2112.926675][ T11] usb 3-1: ucan: probing device on interface #0 [ 2113.096029][ T5790] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 2113.102600][ T5790] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2113.145897][ T5790] vhci_hcd vhci_hcd.0: Device attached [ 2113.156742][ T11] usb 3-1: ucan: could not read protocol version, ret=0 [ 2113.176674][ T11] usb 3-1: ucan: probe failed; try to update the device firmware [ 2113.402804][ T9] usb 44-1: SetAddress Request (31) to port 0 [ 2113.415181][ T9] usb 44-1: new SuperSpeed USB device number 31 using vhci_hcd [ 2113.449790][ T5791] vhci_hcd: connection reset by peer [ 2113.464812][T13024] vhci_hcd vhci_hcd.5: stop threads [ 2113.470070][T13024] vhci_hcd vhci_hcd.5: release socket [ 2113.484757][T13024] vhci_hcd vhci_hcd.5: disconnect device [ 2114.096902][ T5802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8486'. [ 2114.502429][ T5811] fuse: Unknown parameter '0x0000000000000008' [ 2114.521098][ T5808] binder: transaction release 312 bad handle 2, ret = -22 [ 2115.094270][ T11] usb 3-1: USB disconnect, device number 41 [ 2115.433164][ T5834] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8495'. [ 2115.463579][ T5834] bridge0: port 3(netdevsim0) entered disabled state [ 2115.470473][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 2115.477820][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 2115.678153][T25308] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 2115.890058][T25308] usb 3-1: not running at top speed; connect to a high speed hub [ 2115.906851][T25308] usb 3-1: config 6 has an invalid interface number: 174 but max is 0 [ 2115.917096][T25308] usb 3-1: config 6 has no interface number 0 [ 2115.924899][T25308] usb 3-1: config 6 interface 174 has no altsetting 0 [ 2115.939384][T25308] usb 3-1: New USB device found, idVendor=0711, idProduct=0918, bcdDevice=75.9b [ 2115.952165][T25308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2116.000013][T25308] usb 3-1: Product: syz [ 2116.004959][ T11] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2116.013184][T25308] usb 3-1: Manufacturer: syz [ 2116.020552][T25308] usb 3-1: SerialNumber: syz [ 2116.180032][ T11] usb 2-1: Using ep0 maxpacket: 8 [ 2116.192488][ T11] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2116.248312][ T11] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 2116.284639][T25308] sisusb 3-1:6.174: Invalid USB2VGA device [ 2116.304995][T25308] sisusb 3-1:6.174: probe with driver sisusb failed with error -22 [ 2116.322808][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2116.347397][ T11] usb 2-1: Product: syz [ 2116.368322][T25308] usb 3-1: USB disconnect, device number 42 [ 2116.376981][ T11] usb 2-1: Manufacturer: syz [ 2116.413054][ T11] usb 2-1: SerialNumber: syz [ 2116.716674][ T5844] netlink: 'syz.1.8498': attribute type 9 has an invalid length. [ 2117.162630][ T11] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 2117.220769][ T11] usb 2-1: USB disconnect, device number 9 [ 2118.557873][ T9] usb 44-1: device descriptor read/8, error -110 [ 2118.611954][ T5852] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8500'. [ 2118.825874][T25308] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 2118.867702][ T11] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2118.977756][T25308] usb 1-1: Using ep0 maxpacket: 16 [ 2118.989159][ T9] usb usb44-port1: attempt power cycle [ 2119.014719][T25308] usb 1-1: config 0 has an invalid interface number: 54 but max is 0 [ 2119.024002][T25308] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2119.040694][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 2119.062467][ T11] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 2119.083600][T25308] usb 1-1: config 0 has no interface number 0 [ 2119.084222][ T11] usb 3-1: config 0 has no interface number 0 [ 2119.096478][T25308] usb 1-1: too many endpoints for config 0 interface 54 altsetting 250: 52, using maximum allowed: 30 [ 2119.117147][ T11] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2119.127532][T25308] usb 1-1: config 0 interface 54 altsetting 250 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 2119.141252][T25308] usb 1-1: config 0 interface 54 has no altsetting 0 [ 2119.147984][T25308] usb 1-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00 [ 2119.150832][ T11] usb 3-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 2119.157027][T25308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2119.190618][T25308] usb 1-1: config 0 descriptor?? [ 2119.201822][ T11] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2119.227234][ T11] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2119.227296][ C0] blk_print_req_error: 26 callbacks suppressed [ 2119.227310][ C0] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 7 prio class 2 [ 2119.227422][ C0] buffer_io_error: 25 callbacks suppressed [ 2119.227433][ C0] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 2119.227517][ C0] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 2119.227645][ C0] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 2119.227725][ C0] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 2119.227803][ C0] Buffer I/O error on dev loop9, logical block 4, lost async page write [ 2119.227881][ C0] Buffer I/O error on dev loop9, logical block 5, lost async page write [ 2119.227957][ C0] Buffer I/O error on dev loop9, logical block 6, lost async page write [ 2119.337455][ T11] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 2119.347048][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2119.355293][ T11] usb 3-1: Product: syz [ 2119.360104][ T11] usb 3-1: Manufacturer: syz [ 2119.364860][ T11] usb 3-1: SerialNumber: syz [ 2119.372855][ T11] usb 3-1: config 0 descriptor?? [ 2119.384425][ T11] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input213 [ 2119.595437][ T5887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2119.624766][ T5887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2119.639014][ T9] usb usb44-port1: unable to enumerate USB device [ 2119.653071][ T9] usb 3-1: USB disconnect, device number 43 [ 2119.794909][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2119.804209][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 2119.813396][ C0] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2119.822715][ C0] Buffer I/O error on dev loop9, logical block 1, async page read [ 2119.830658][ C0] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2119.840021][ C0] Buffer I/O error on dev loop9, logical block 2, async page read [ 2119.847909][ C0] I/O error, dev loop9, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2119.857160][ C0] I/O error, dev loop9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2119.866419][ C0] I/O error, dev loop9, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2119.875710][ C0] I/O error, dev loop9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2119.900939][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2119.910254][ C0] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2119.925302][ T4992] ldm_validate_partition_table(): Disk read failed. [ 2119.936483][ T4992] Dev loop9: unable to read RDB block 0 [ 2119.938450][ T5881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2119.959716][ T4992] loop9: unable to read partition table [ 2119.965769][ T4992] loop9: partition table beyond EOD, truncated [ 2119.971623][ T5881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2120.030972][ T5881] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 2120.059501][ T5881] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2120.129428][T25308] usb 1-1: string descriptor 0 read error: -71 [ 2120.159603][T25308] usb 1-1: USB disconnect, device number 57 [ 2120.263056][ T29] audit: type=1326 audit(1783318585.837:5649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5902 comm="syz.5.8513" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099d59de59 code=0x7ffc0000 [ 2120.302275][ T29] audit: type=1326 audit(1783318585.887:5650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5902 comm="syz.5.8513" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099d59de59 code=0x7ffc0000 [ 2120.355927][ T29] audit: type=1326 audit(1783318585.887:5651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5902 comm="syz.5.8513" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f099d59de59 code=0x7ffc0000 [ 2120.386840][ T29] audit: type=1326 audit(1783318585.887:5652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5902 comm="syz.5.8513" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099d59de59 code=0x7ffc0000 [ 2120.415092][ T29] audit: type=1326 audit(1783318585.887:5653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5902 comm="syz.5.8513" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099d59de59 code=0x7ffc0000 [ 2120.466097][ T29] audit: type=1326 audit(1783318585.887:5654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5902 comm="syz.5.8513" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f099d59de59 code=0x7ffc0000 [ 2120.495457][ T29] audit: type=1326 audit(1783318585.887:5655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5902 comm="syz.5.8513" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099d59de59 code=0x7ffc0000 [ 2120.523666][ T29] audit: type=1326 audit(1783318585.887:5656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5902 comm="syz.5.8513" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099d59de59 code=0x7ffc0000 [ 2120.548307][ T29] audit: type=1326 audit(1783318585.887:5657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5902 comm="syz.5.8513" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f099d59de59 code=0x7ffc0000 [ 2120.572898][ T29] audit: type=1326 audit(1783318585.887:5658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5902 comm="syz.5.8513" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099d59de59 code=0x7ffc0000 [ 2120.724150][ T5720] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 2120.888283][ T5720] usb 6-1: Using ep0 maxpacket: 16 [ 2120.894458][ T5915] xt_bpf: check failed: parse error [ 2120.966594][ T5917] loop5: detected capacity change from 0 to 7 [ 2120.995033][ T5917] Dev loop5: unable to read RDB block 7 [ 2121.009987][ T5917] loop5: AHDI p1 p2 p3 [ 2121.014238][ T5917] loop5: partition table partially beyond EOD, truncated [ 2121.022335][ T5917] loop5: p1 start 1818582900 is beyond EOD, truncated [ 2121.036429][ T5917] loop5: p3 start 335544320 is beyond EOD, truncated [ 2121.239938][ T5720] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 2121.248915][ T5720] usb 6-1: config 0 has no interface number 0 [ 2121.258771][ T5720] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2121.291216][ T5720] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2121.326548][ T5720] usb 6-1: config 0 interface 41 has no altsetting 0 [ 2121.378146][ T5720] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 2121.418290][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2121.447363][ T5720] usb 6-1: Product: syz [ 2121.461780][ T5720] usb 6-1: Manufacturer: syz [ 2121.473318][ T5720] usb 6-1: SerialNumber: syz [ 2121.501699][ T5720] usb 6-1: config 0 descriptor?? [ 2121.547248][ T5927] netlink: 'syz.0.8521': attribute type 4 has an invalid length. [ 2121.629568][ T5903] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2121.652699][ T5903] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2121.763325][ T5934] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8524'. [ 2121.877985][ T5935] tipc: Enabling of bearer rejected, failed to enable media [ 2122.091327][ T5720] sr9700 6-1:0.41: probe with driver sr9700 failed with error -71 [ 2122.144225][ T5720] usb 6-1: USB disconnect, device number 74 [ 2122.274169][ T5946] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2122.578034][ T192] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2122.852769][ T192] usb 3-1: Using ep0 maxpacket: 16 [ 2122.862344][ T192] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2122.877251][ T192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2122.891702][ T192] usb 3-1: Product: syz [ 2122.899355][ T192] usb 3-1: Manufacturer: syz [ 2122.911715][ T192] usb 3-1: SerialNumber: syz [ 2122.937012][ T192] usb 3-1: config 0 descriptor?? [ 2123.253394][ T9] usb 3-1: USB disconnect, device number 44 [ 2123.528748][ T5720] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 2123.889739][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2123.921031][ T5720] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2123.938200][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2123.951124][ T5720] usb 6-1: Product: syz [ 2123.955317][ T5720] usb 6-1: Manufacturer: syz [ 2123.981532][ T5720] usb 6-1: SerialNumber: syz [ 2124.037807][T25309] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 2124.143651][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 2124.160205][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 2124.180121][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 2124.201076][ T9] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 2124.217664][ T9] usb 2-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 2124.229027][ T9] usb 2-1: Product: syz [ 2124.237351][ T9] usb 2-1: Manufacturer: syz [ 2124.247868][ T9] usb 2-1: SerialNumber: syz [ 2124.260178][ T9] usb 2-1: config 0 descriptor?? [ 2124.283272][ T9] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2124.332576][ T5988] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 2124.339120][ T5988] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2124.347493][ T5988] vhci_hcd vhci_hcd.0: Device attached [ 2124.492568][ T192] usb 2-1: USB disconnect, device number 10 [ 2124.550348][ T5994] vhci_hcd: connection closed [ 2124.550718][ T3951] vhci_hcd vhci_hcd.6: stop threads [ 2124.572314][ T3951] vhci_hcd vhci_hcd.6: release socket [ 2124.591380][T13024] usb 2-1: Failed to submit usb control message: -71 [ 2124.598662][T13024] usb 2-1: unable to send the bmi data to the device: -71 [ 2124.605777][T13024] usb 2-1: unable to get target info from device [ 2124.612095][T13024] usb 2-1: could not get target info (-71) [ 2124.617914][T13024] usb 2-1: could not probe fw (-71) [ 2124.638593][ T3951] vhci_hcd vhci_hcd.6: disconnect device [ 2124.694924][ T9] usb 46-1: enqueue for inactive port 0 [ 2124.804781][ T5720] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 2124.834939][ T5720] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2124.845393][ T5720] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2124.901457][ T5720] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 2125.062209][ T192] usb 6-1: USB disconnect, device number 75 [ 2125.249711][ T9] usb usb46-port1: attempt power cycle [ 2125.472886][T25309] usb 3-1: not running at top speed; connect to a high speed hub [ 2125.695723][T25309] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2125.710403][T25309] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2125.929522][ T9] usb usb46-port1: unable to enumerate USB device [ 2126.097928][T25309] usb 3-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 2126.113795][T25309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2126.131095][T25309] usb 3-1: Product: Ⰹ [ 2126.136018][T25309] usb 3-1: Manufacturer: 華╄ያ쏖㐌૑᝕፴熅ᩛ刟ⷐ瞪뀩習廢휝ힵ侐ဴ龵⪐죰㼵쨝╲攴⼒뱀鋨旭㷢洞嵁杠챣⫒ힰ霗슦 [ 2126.156503][T25309] usb 3-1: SerialNumber: 똑扶墁鼐᰹恵췃ᘤ⻁샩襏쥠摕ؘꉝ笃糅❑ꀦ艖䒞旐㍧꒢끂㤘඼줰찐⯺䅖켇ഃ⩐ꉷ㑈ࢵ眓㆕蜴셌첈㭗㈜黂拻붎叚쭺ǔᒯ䮍醴ｋ玩蟼︨曈퐑꜑蕳貢棨ꏏ [ 2126.211020][ T6038] trusted_key: encrypted_key: insufficient parameters specified [ 2126.262713][ T5976] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2126.384032][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8553'. [ 2126.393033][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8553'. [ 2126.578044][ T6045] syzkaller0: entered promiscuous mode [ 2126.583545][ T6045] syzkaller0: entered allmulticast mode [ 2126.675006][T25309] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input214 [ 2126.692346][ C0] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 2126.770408][T25309] usb 3-1: USB disconnect, device number 45 [ 2126.830120][T25309] appletouch 3-1:1.0: input: appletouch disconnected [ 2127.317792][T25309] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 2127.524735][T25309] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 2127.552853][T25309] usb 3-1: config 0 has no interface number 0 [ 2127.568502][T25309] usb 3-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2127.601045][T25309] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2127.620883][T25309] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2127.634340][T25309] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 2127.648501][T25309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2127.662626][T25309] usb 3-1: config 0 descriptor?? [ 2127.726004][T25309] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input215 [ 2127.774380][ T6054] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 2127.780956][ T6054] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2127.842540][ T6054] vhci_hcd vhci_hcd.0: Device attached [ 2128.010370][ T6055] vhci_hcd: connection closed [ 2128.010827][ T3962] vhci_hcd vhci_hcd.0: stop threads [ 2128.083511][ T3962] vhci_hcd vhci_hcd.0: release socket [ 2128.107779][ T11] usb 34-1: SetAddress Request (62) to port 0 [ 2128.118734][ T3962] vhci_hcd vhci_hcd.0: disconnect device [ 2128.131232][ T11] usb 34-1: new SuperSpeed USB device number 62 using vhci_hcd [ 2128.180378][ T11] usb 34-1: enqueue for inactive port 0 [ 2128.579438][ T9] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 2128.601317][ T11] usb usb34-port1: attempt power cycle [ 2128.784860][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 2128.837488][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2128.859557][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2128.872513][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2128.889212][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2128.941041][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 2128.949424][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2129.016975][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2129.038880][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2129.053775][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2129.139453][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 2129.151522][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2129.211898][ T11] usb usb34-port1: unable to enumerate USB device [ 2129.243109][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2129.275491][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2129.307584][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2129.334467][ T9] usb 2-1: string descriptor 0 read error: -22 [ 2129.361893][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2129.381640][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2129.464065][ T9] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2129.713781][ T9] usb 2-1: USB disconnect, device number 11 [ 2130.017139][T25309] usb 3-1: USB disconnect, device number 46 [ 2131.106725][T25309] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2131.874760][T25309] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6C, changing to 0xC [ 2131.887536][T25309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2131.899201][T25309] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 2131.908265][T25309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2131.937117][T25309] usb 3-1: config 0 descriptor?? [ 2132.121289][T25309] smsusb:smsusb_probe: board id=8, interface number 0 [ 2132.231438][T25309] smsusb:smsusb_probe: Device initialized with return code -19 [ 2132.471597][ T6073] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8562'. [ 2133.639150][ T11] usb 3-1: USB disconnect, device number 47 [ 2134.197059][ T11] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2134.369331][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 2134.408691][ T6079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2134.454096][ T6079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2134.521561][ T11] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2134.557075][ T11] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2134.592834][ T11] usb 3-1: can't read configurations, error -71 [ 2135.269027][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8564'. [ 2135.414556][ T6084] syzkaller1: entered promiscuous mode [ 2135.428036][ T6084] syzkaller1: entered allmulticast mode [ 2135.526223][ T6084] ip6erspan0: entered promiscuous mode [ 2135.551983][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8564'. [ 2135.579454][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8564'. [ 2135.612248][ T6083] netlink: 'syz.2.8564': attribute type 7 has an invalid length. [ 2135.791102][ T6100] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8570'. [ 2135.801695][ T6101] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2135.912827][ T6104] autofs4:pid:6104:validate_dev_ioctl: invalid path supplied for cmd(0xc0189371) [ 2135.959804][ T6104] vivid-000: ================= START STATUS ================= [ 2135.967490][ T6104] vivid-000: Radio HW Seek Mode: Bounded [ 2135.973159][ T6104] vivid-000: Radio Programmable HW Seek: false [ 2136.002377][ T6104] vivid-000: RDS Rx I/O Mode: Block I/O [ 2136.008007][ T6104] vivid-000: Generate RBDS Instead of RDS: false [ 2136.014450][ T6104] vivid-000: RDS Reception: true [ 2136.026343][ T6104] vivid-000: RDS Program Type: 0 inactive [ 2136.032231][ T6104] vivid-000: RDS PS Name: inactive [ 2136.055227][ T2445] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 2136.088031][ T6104] vivid-000: RDS Radio Text: inactive [ 2136.102536][ T6104] vivid-000: RDS Traffic Announcement: false inactive [ 2136.109344][ T6104] vivid-000: RDS Traffic Program: false inactive [ 2136.115712][ T6104] vivid-000: RDS Music: false inactive [ 2136.121221][ T6104] vivid-000: ================== END STATUS ================== [ 2136.239889][ T6118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8574'. [ 2136.348290][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 2136.348335][ T29] audit: type=1326 audit(1783318601.967:5708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.2.8575" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1c6f9de59 code=0x0 [ 2136.409970][ T2445] usb 2-1: config 0 has an invalid interface number: 203 but max is 0 [ 2136.418869][ T2445] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 2136.428661][ T2445] usb 2-1: config 0 has no interface number 0 [ 2136.435266][ T2445] usb 2-1: New USB device found, idVendor=1b80, idProduct=e383, bcdDevice=16.6b [ 2136.446913][ T2445] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2136.462058][ T2445] usb 2-1: config 0 descriptor?? [ 2136.675653][ T11] usb 2-1: USB disconnect, device number 12 [ 2137.356958][ T8222] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2137.373612][ T8222] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2137.382858][ T8222] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2137.395317][ T8222] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2137.467778][ T11] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2137.637807][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 2137.650480][ T6137] netlink: 72 bytes leftover after parsing attributes in process `syz.5.8581'. [ 2137.650663][ T11] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2137.698302][ T11] usb 3-1: config 7 has an invalid interface number: 187 but max is 0 [ 2137.717891][ T11] usb 3-1: config 7 has no interface number 0 [ 2137.724070][ T11] usb 3-1: config 7 interface 187 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 2137.739227][ T11] usb 3-1: config 7 interface 187 has no altsetting 0 [ 2137.749598][ T11] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 2137.758756][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2137.766791][ T11] usb 3-1: Product: syz [ 2137.771597][ T11] usb 3-1: Manufacturer: syz [ 2137.776364][ T11] usb 3-1: SerialNumber: syz [ 2137.833313][ T6139] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 2137.839884][ T6139] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2137.857201][ T6139] vhci_hcd vhci_hcd.0: Device attached [ 2137.918431][ T2445] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 2137.999035][ T11] usb 3-1: Unknown endpoint type found, address 0x07 [ 2138.013118][ T11] usb 3-1: Not enough endpoints found in device, aborting! [ 2138.168118][T28195] usb 36-1: SetAddress Request (48) to port 0 [ 2138.175817][T28195] usb 36-1: new SuperSpeed USB device number 48 using vhci_hcd [ 2138.194246][ T6140] vhci_hcd: connection closed [ 2138.195888][ T8222] vhci_hcd vhci_hcd.1: stop threads [ 2138.208533][ T11] usb 3-1: USB disconnect, device number 50 [ 2138.237896][ T8222] vhci_hcd vhci_hcd.1: release socket [ 2138.266306][ T8222] vhci_hcd vhci_hcd.1: disconnect device [ 2138.328343][ T2445] usb 6-1: Using ep0 maxpacket: 32 [ 2138.338240][ T2445] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2138.357247][ T2445] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2138.401397][ T2445] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2138.521293][ T2445] usb 6-1: Product: syz [ 2138.630012][ T2445] usb 6-1: Manufacturer: syz [ 2138.669667][ T2445] usb 6-1: SerialNumber: syz [ 2138.710787][ T2445] usb 6-1: config 0 descriptor?? [ 2138.916754][ T2445] quatech2 6-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 2139.102148][ T6148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2139.120986][ T6148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2139.131968][ T2445] usb 6-1: qt2_setup_urbs - submit read urb failed -8 [ 2139.143123][ T2445] quatech2 6-1:0.0: probe with driver quatech2 failed with error -8 [ 2139.152787][ T6148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2139.188944][ T6148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2139.196760][ T6148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2139.355870][ T11] usb 6-1: USB disconnect, device number 76 [ 2139.696907][ T6153] bridge0: port 1(bridge_slave_0) entered blocking state [ 2139.704584][ T6153] bridge0: port 1(bridge_slave_0) entered disabled state [ 2139.712465][ T6153] bridge_slave_0: entered allmulticast mode [ 2139.724538][ T6153] bridge_slave_0: entered promiscuous mode [ 2139.741228][ T6153] bridge0: port 2(bridge_slave_1) entered blocking state [ 2139.748771][ T6153] bridge0: port 2(bridge_slave_1) entered disabled state [ 2139.756125][ T6153] bridge_slave_1: entered allmulticast mode [ 2139.757858][ T2445] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2139.764971][ T6153] bridge_slave_1: entered promiscuous mode [ 2139.818010][ T6153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2139.845795][ T6153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2139.886485][ T6153] team0: Port device team_slave_0 added [ 2139.894192][ T6153] team0: Port device team_slave_1 added [ 2139.916998][ T6153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2139.924003][ T6153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2139.949926][ T6153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2139.961988][ T6153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2139.970032][ T6153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2139.999169][ T6153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2140.043632][ T6153] hsr_slave_0: entered promiscuous mode [ 2140.050247][ T6153] hsr_slave_1: entered promiscuous mode [ 2140.175032][ T6176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2140.202196][ T6176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2140.294764][ T6153] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2140.313782][ T2445] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2140.325611][ T2445] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2140.337864][ T2445] usb 3-1: Product: syz [ 2140.338873][ T6153] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2140.349269][ T2445] usb 3-1: Manufacturer: syz [ 2140.359597][ T2445] usb 3-1: SerialNumber: syz [ 2140.360625][ T6153] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2140.374678][ T2445] usb 3-1: config 0 descriptor?? [ 2140.398175][ T11] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 2140.415748][ T6153] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2140.434803][ T6153] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2140.445360][ T6153] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2140.472037][ T6153] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2140.481610][ T6153] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2140.542557][ T6153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2140.564367][ T6153] 8021q: adding VLAN 0 to HW filter on device team0 [ 2140.587248][ T8226] bridge0: port 1(bridge_slave_0) entered blocking state [ 2140.594438][ T8226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2140.607707][ T3962] bridge0: port 2(bridge_slave_1) entered blocking state [ 2140.614809][ T3962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2140.674884][ T6153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2140.740453][ T6153] veth0_vlan: entered promiscuous mode [ 2140.757376][ T6153] veth1_vlan: entered promiscuous mode [ 2140.764229][ T6188] loop5: detected capacity change from 0 to 7 [ 2140.791162][ T6188] Dev loop5: unable to read RDB block 7 [ 2140.796778][ T6188] loop5: unable to read partition table [ 2140.802616][ T6188] loop5: partition table beyond EOD, truncated [ 2140.803890][ T6153] veth0_macvtap: entered promiscuous mode [ 2140.808813][ T6188] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2140.848910][ T6153] veth1_macvtap: entered promiscuous mode [ 2140.882271][ T6153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2140.897574][ T6153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2140.920747][ T3956] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2140.943321][ T3956] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2140.953347][ T3956] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2140.962424][ T3956] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2140.990391][ T6191] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2966252499 (5932504998 ns) > initial count (4040636284 ns). Using initial count to start timer. [ 2141.062064][ T11] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 2141.141649][ T3956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2141.141672][ T3956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2141.318993][ T5634] Bluetooth: hci0: command tx timeout [ 2141.369299][ T11] usb 6-1: Using ep0 maxpacket: 16 [ 2141.380379][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2141.380415][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2141.380450][ T11] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 2141.380474][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2141.384722][ T11] usb 6-1: config 0 descriptor?? [ 2141.413737][ T3956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2141.443708][ T3956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2141.528886][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8596'. [ 2141.546655][ T6202] IPv6: NLM_F_CREATE should be specified when creating new route [ 2141.587058][ T2445] usb 3-1: Firmware version (0.0) predates our first public release. [ 2141.595196][ T2445] usb 3-1: Please update to version 0.2 or newer [ 2142.019772][ T2445] usb 3-1: USB disconnect, device number 51 [ 2142.068864][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 2142.147988][ T11] usbhid 6-1:0.0: can't add hid device: -71 [ 2142.155547][ T11] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2142.167072][ T11] usb 6-1: USB disconnect, device number 78 [ 2142.181046][ T6195] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2142.214338][ T6216] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8598'. [ 2142.398737][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 2142.405524][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2142.419647][ T9] usb 8-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2142.428737][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2142.449341][ T6195] usb 2-1: Using ep0 maxpacket: 8 [ 2142.458016][ T9] usb 8-1: config 0 descriptor?? [ 2142.477951][ T6195] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2142.501627][ T6195] usb 2-1: config 140 has an invalid interface number: 182 but max is 1 [ 2142.524387][ T6195] usb 2-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 2142.552406][ T6195] usb 2-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 2142.567407][ T6195] usb 2-1: config 140 has no interface number 0 [ 2142.583931][ T6195] usb 2-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 2142.595938][ T6195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2142.608742][ T6195] usb 2-1: Product: syz [ 2142.613043][ T6195] usb 2-1: Manufacturer: syz [ 2142.618240][ T6195] usb 2-1: SerialNumber: syz [ 2142.668000][ T11] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 2142.856376][ T6228] C: renamed from veth1_to_team (while UP) [ 2142.864087][ T6228] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8602'. [ 2142.872665][ T11] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2142.885329][ T11] usb 6-1: not running at top speed; connect to a high speed hub [ 2142.910818][ T11] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 2142.950205][ T11] usb 6-1: string descriptor 0 read error: -22 [ 2142.957567][ T11] usb 6-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice= 0.40 [ 2142.966720][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2142.977891][ T6216] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2142.990058][ T11] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2143.190646][ T2445] usb 6-1: USB disconnect, device number 79 [ 2143.268443][T28195] usb 36-1: device descriptor read/8, error -110 [ 2143.303257][ T6234] loop5: detected capacity change from 0 to 7 [ 2143.321228][ T6234] Dev loop5: unable to read RDB block 7 [ 2143.326998][ T6234] loop5: unable to read partition table [ 2143.334238][ T5634] Bluetooth: hci0: command tx timeout [ 2143.345171][ T6234] loop5: partition table beyond EOD, truncated [ 2143.351469][ T6234] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2143.588581][ T6195] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 2143.701038][T28195] usb usb36-port1: attempt power cycle [ 2143.866329][ T6195] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2143.881281][ T6195] usb 2-1: device firmware changed [ 2143.891849][ T6195] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 2143.901168][ T11] usb 2-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 2143.910223][ T6195] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 2143.918423][ T11] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 2143.938955][ T6195] usb 2-1: USB disconnect, device number 13 [ 2143.997762][ T11] ------------[ cut here ]------------ [ 2144.004092][ T11] !atomic_read(&kn->count) [ 2144.004127][ T11] WARNING: fs/kernfs/dir.c:560 at kernfs_get+0x72/0x90, CPU#0: kworker/0:1/11 [ 2144.017504][ T11] Modules linked in: [ 2144.022433][ T11] CPU: 0 UID: 0 PID: 11 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2144.033576][ T11] Tainted: [L]=SOFTLOCKUP [ 2144.038186][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2144.048352][ T11] Workqueue: events request_firmware_work_func [ 2144.054638][ T11] RIP: 0010:kernfs_get+0x72/0x90 [ 2144.059710][ T11] Code: e8 03 90 52 ff 48 89 df be 04 00 00 00 e8 66 1d c0 ff f0 ff 03 eb 05 e8 ec 8f 52 ff 5b 5d e9 c5 c3 5d 09 cc e8 df 8f 52 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 65 [ 2144.080288][ T11] RSP: 0018:ffffc900001076b0 EFLAGS: 00010293 [ 2144.086444][ T11] RAX: ffffffff8273e261 RBX: ffff888078515870 RCX: ffff88801de99f00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2144.094572][ T11] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2144.102651][ T11] RBP: 0000000000000000 R08: ffff888078515873 R09: 1ffff1100f0a2b0e [ 2144.111781][ T11] R10: dffffc0000000000 R11: ffffed100f0a2b0f R12: 1ffff11004c7fb95 [ 2144.119865][ T11] R13: 1ffff11004c7fb96 R14: ffff8880263fdcb0 R15: ffff8880263fdca8 [ 2144.128034][ T11] FS: 0000000000000000(0000) GS:ffff888124f59000(0000) knlGS:0000000000000000 [ 2144.137028][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2144.143749][ T11] CR2: 00007f099b7d4ff8 CR3: 00000000352ec000 CR4: 00000000003526f0 [ 2144.151860][ T11] Call Trace: [ 2144.156034][ T11] [ 2144.159063][ T11] kobject_add_internal+0x6b9/0xcd0 [ 2144.164326][ T11] kobject_add+0x163/0x240 [ 2144.168974][ T11] ? rcu_is_watching+0x15/0xb0 [ 2144.173799][ T11] ? __pfx_kobject_add+0x10/0x10 [ 2144.179176][ T11] ? __kmalloc_cache_noprof+0x150/0x660 [ 2144.184929][ T11] ? kobject_init+0x7f/0x1e0 [ 2144.189600][ T11] get_device_parent+0x316/0x3a0 [ 2144.194621][ T11] device_add+0x2d4/0xb80 [ 2144.199069][ T11] firmware_fallback_sysfs+0x2dd/0xa40 [ 2144.204596][ T11] ? kfree+0x1c5/0x640 [ 2144.208753][ T11] _request_firmware+0x1049/0x1780 [ 2144.213942][ T11] ? __pfx__request_firmware+0x10/0x10 [ 2144.219500][ T11] ? process_scheduled_works+0xa20/0x14e0 [ 2144.225287][ T11] ? process_scheduled_works+0xa20/0x14e0 [ 2144.231102][ T11] request_firmware_work_func+0xac/0x2d0 [ 2144.236802][ T11] ? rcu_is_watching+0x15/0xb0 [ 2144.241731][ T11] ? process_scheduled_works+0xa20/0x14e0 [ 2144.247506][ T11] process_scheduled_works+0xa8e/0x14e0 [ 2144.253679][ T11] ? __pfx_process_scheduled_works+0x10/0x10 [ 2144.259814][ T11] ? assign_work+0x3cf/0x5d0 [ 2144.264458][ T11] worker_thread+0xa47/0xfb0 [ 2144.269285][ T11] kthread+0x388/0x470 [ 2144.273411][ T11] ? __pfx_worker_thread+0x10/0x10 [ 2144.278664][ T11] ? __pfx_kthread+0x10/0x10 [ 2144.283312][ T11] ret_from_fork+0x514/0xb70 [ 2144.287996][ T11] ? __pfx_ret_from_fork+0x10/0x10 [ 2144.293164][ T11] ? __switch_to+0xc89/0x1420 [ 2144.298415][ T11] ? __pfx_kthread+0x10/0x10 [ 2144.303100][ T11] ret_from_fork_asm+0x1a/0x30 [ 2144.308001][ T11] [ 2144.311093][ T11] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2144.318385][ T11] CPU: 0 UID: 0 PID: 11 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2144.329152][ T11] Tainted: [L]=SOFTLOCKUP [ 2144.333484][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2144.343546][ T11] Workqueue: events request_firmware_work_func [ 2144.349721][ T11] Call Trace: [ 2144.353000][ T11] [ 2144.355927][ T11] vpanic+0x56c/0xa60 [ 2144.359920][ T11] ? __pfx__printk+0x10/0x10 [ 2144.364514][ T11] ? __pfx_vpanic+0x10/0x10 [ 2144.369033][ T11] panic+0xc5/0xd0 [ 2144.372761][ T11] ? __pfx_panic+0x10/0x10 [ 2144.377216][ T11] __warn+0x315/0x4c0 [ 2144.381200][ T11] ? kernfs_get+0x72/0x90 [ 2144.385541][ T11] ? kernfs_get+0x72/0x90 [ 2144.389878][ T11] __report_bug+0x331/0x530 [ 2144.394397][ T11] ? kernfs_get+0x72/0x90 [ 2144.398738][ T11] ? __pfx___report_bug+0x10/0x10 [ 2144.403778][ T11] ? rcu_is_watching+0x15/0xb0 [ 2144.408581][ T11] ? up_write+0x19f/0x4a0 [ 2144.412930][ T11] ? kernfs_add_one+0x480/0x5e0 [ 2144.417800][ T11] ? kernfs_get+0x72/0x90 [ 2144.422156][ T11] report_bug+0x16a/0x220 [ 2144.426497][ T11] ? kernfs_get+0x72/0x90 [ 2144.430832][ T11] ? kernfs_get+0x74/0x90 [ 2144.435171][ T11] handle_bug+0x9c/0x200 [ 2144.439423][ T11] exc_invalid_op+0x1a/0x50 [ 2144.443938][ T11] asm_exc_invalid_op+0x1a/0x20 [ 2144.448791][ T11] RIP: 0010:kernfs_get+0x72/0x90 [ 2144.453744][ T11] Code: e8 03 90 52 ff 48 89 df be 04 00 00 00 e8 66 1d c0 ff f0 ff 03 eb 05 e8 ec 8f 52 ff 5b 5d e9 c5 c3 5d 09 cc e8 df 8f 52 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 65 [ 2144.473373][ T11] RSP: 0018:ffffc900001076b0 EFLAGS: 00010293 [ 2144.479452][ T11] RAX: ffffffff8273e261 RBX: ffff888078515870 RCX: ffff88801de99f00 [ 2144.487430][ T11] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2144.495411][ T11] RBP: 0000000000000000 R08: ffff888078515873 R09: 1ffff1100f0a2b0e [ 2144.503390][ T11] R10: dffffc0000000000 R11: ffffed100f0a2b0f R12: 1ffff11004c7fb95 [ 2144.511387][ T11] R13: 1ffff11004c7fb96 R14: ffff8880263fdcb0 R15: ffff8880263fdca8 [ 2144.519375][ T11] ? kernfs_get+0x71/0x90 [ 2144.523740][ T11] kobject_add_internal+0x6b9/0xcd0 [ 2144.528962][ T11] kobject_add+0x163/0x240 [ 2144.533391][ T11] ? rcu_is_watching+0x15/0xb0 [ 2144.538171][ T11] ? __pfx_kobject_add+0x10/0x10 [ 2144.543122][ T11] ? __kmalloc_cache_noprof+0x150/0x660 [ 2144.548680][ T11] ? kobject_init+0x7f/0x1e0 [ 2144.553286][ T11] get_device_parent+0x316/0x3a0 [ 2144.558243][ T11] device_add+0x2d4/0xb80 [ 2144.562588][ T11] firmware_fallback_sysfs+0x2dd/0xa40 [ 2144.568061][ T11] ? kfree+0x1c5/0x640 [ 2144.572137][ T11] _request_firmware+0x1049/0x1780 [ 2144.577273][ T11] ? __pfx__request_firmware+0x10/0x10 [ 2144.582745][ T11] ? process_scheduled_works+0xa20/0x14e0 [ 2144.588472][ T11] ? process_scheduled_works+0xa20/0x14e0 [ 2144.594206][ T11] request_firmware_work_func+0xac/0x2d0 [ 2144.599852][ T11] ? rcu_is_watching+0x15/0xb0 [ 2144.604635][ T11] ? process_scheduled_works+0xa20/0x14e0 [ 2144.610364][ T11] process_scheduled_works+0xa8e/0x14e0 [ 2144.615942][ T11] ? __pfx_process_scheduled_works+0x10/0x10 [ 2144.621936][ T11] ? assign_work+0x3cf/0x5d0 [ 2144.626538][ T11] worker_thread+0xa47/0xfb0 [ 2144.631181][ T11] kthread+0x388/0x470 [ 2144.635271][ T11] ? __pfx_worker_thread+0x10/0x10 [ 2144.640390][ T11] ? __pfx_kthread+0x10/0x10 [ 2144.644988][ T11] ret_from_fork+0x514/0xb70 [ 2144.649593][ T11] ? __pfx_ret_from_fork+0x10/0x10 [ 2144.654716][ T11] ? __switch_to+0xc89/0x1420 [ 2144.659403][ T11] ? __pfx_kthread+0x10/0x10 [ 2144.664005][ T11] ret_from_fork_asm+0x1a/0x30 [ 2144.668791][ T11] [ 2144.672020][ T11] Kernel Offset: disabled [ 2144.676341][ T11] Rebooting in 86400 seconds..