last executing test programs: 11m8.26363576s ago: executing program 0 (id=32): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000340)=0x10004, 0xfffffffffffffd4c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000180)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) getresgid(&(0x7f0000002a40), &(0x7f0000002a80), &(0x7f0000002ac0)) (async) getresgid(&(0x7f0000002a40), &(0x7f0000002a80)=0x0, &(0x7f0000002ac0)=0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) socket(0x40000000015, 0x5, 0x0) (async) r11 = socket(0x40000000015, 0x5, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) recvfrom$inet(r11, &(0x7f0000000000)=""/27, 0x1b, 0x12000, 0x0, 0x0) (async) recvfrom$inet(r11, &(0x7f0000000000)=""/27, 0x1b, 0x12000, 0x0, 0x0) write$UHID_CREATE2(r12, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r12, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r12, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r12, 0x3ba0, &(0x7f00000002c0)={0x48, 0x4, 0x0, 0x0, 0xa9, &(0x7f0000000140)="1c6d15079c40cb1b389b44cbb695823244d9ddbf8e213cd5e9b44702ed0890e10f2282f361f8aa0da9dc46fe6b88abfe7dc2c20fb61bf9c5252a23ed418bf9c5f6a89546e92a90d3cb1ee296c7e7a712c6f8454ffad0ab4efb8e0409b48d0092a28623133267b4886cfa052ef4a3e223e110357bfee11a039fb2ea5819f9c0a40787613d4a952f2e78182ebedaab7859c45bb78da281c46d427fbe36c2a4ad176a93aae33071dd5d35"}) connect$inet6(r11, &(0x7f0000000240)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1000}, 0x1c) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0, @ANYRES64, @ANYBLOB="3b73b245992e5f76f95a31596a059f55c0b7b47be7a53643c15252e3b886547617b812f366d2498a3f23c9cabd926b548de253e46960af3123a3d3d6fe531ed20d154a7b366022d13789c494c61497924ebbe32f7339dc579d687c5179fa1a03224607014fbc7523e73a5e17aea5fefd504f02", @ANYRES8, @ANYRES32=r8, @ANYRESHEX=r9, @ANYRES16=r10], 0x0) 11m4.889492792s ago: executing program 0 (id=40): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000073864020720c1400ac390102030109021200010000000a09051df300716c7500"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="4031000000001093d650906f4dc8a2f93ebda14c0d71a0c4c44cfa6d0e6f0b944bbb802591e468f69de3f559"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x400c800) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$dri(&(0x7f0000000140), 0x100000000000, 0x44600) syz_emit_ethernet(0x7e, &(0x7f0000000600)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaabb080045000070fffc000000019078ac1e0001ac1414aa04009078030000004500000000000000002f0000ac1414bbe0000002440c0201ac1414bb00000005862d0000000306020002020fd109567cb50ec760777fb80755050bc92d3002d91d907b790002020584924d050244045843000000bca9bc907c66c1e14dd33e69daab892a987fdf05215e75504fc829be5f280da5dbfe0e8c3da9500b69d90486aee51e29d86362f36a1a27a7b6bdf31239990e93a375868fdfb4b012c9cebbaf9e327b7b00980966a4af4996ae4091caf29b1ea5048b223e73f7855ebb6fa04fda0c6cab5a08916b36"], 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r6 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRES64=r6, @ANYRES16=r4, @ANYRESDEC=0x0, @ANYRESDEC=r4]) unshare(0x24060400) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x6000) umount2(&(0x7f0000000280)='./file0\x00', 0xa) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r8, 0xae80, 0x0) 11m1.749325573s ago: executing program 0 (id=56): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00006e5000/0x1000)=nil, 0x1000, 0x2000001, 0x40a8011, r2, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'ipvlan1\x00'}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000004000)={0xf, {"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", 0x1000}}, 0x1006) ppoll(&(0x7f0000000200)=[{r7, 0x480}, {r4, 0x4000}, {r3, 0x2010}], 0x3, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f0000000280)={[0x9]}, 0x8) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x20, 0x10, 0x4, "08bf40cb"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB='@\x00='], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x40, 0x8, 0x1, 'c'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m55.488993598s ago: executing program 0 (id=69): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="154e011a010d62002c0012800b0001006d616373656300001c000280080005000300000005000c000600000005000c000100000008000500", @ANYRES8=r1], 0x54}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a0001002bbd7000000000080a"], 0x2c}}, 0x0) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) r3 = socket$inet6(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r5 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, &(0x7f0000000000)=0x10) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(r3, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) 10m54.762499129s ago: executing program 0 (id=72): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a00), 0x800, 0x0) write$uinput_user_dev(r1, &(0x7f0000000380)={'syz0\x00', {0x102, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x80000004, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x26, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x2, 0x7, 0x6, 0xf, 0xb, 0x9, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0x0, 0x7, 0x8, 0x5, 0x8, 0x5, 0x7fff, 0x8, 0x1, 0x200, 0x2000, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x80000001, 0x9, 0x4, 0x2, 0x0, 0x7, 0x8, 0x8001, 0x9, 0x8, 0x2, 0x5, 0xb, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0x10000, 0x9, 0x9, 0x4d26, 0x0, 0x8, 0x1, 0x7, 0x1, 0x4, 0xffffffff, 0x9, 0x8, 0x8, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x7d, 0x6, 0xb, 0x5, 0x3, 0x1, 0x8d1, 0x100008fd, 0xfffffffa, 0x4e0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x10000, 0x9, 0x8000, 0x1, 0x9, 0xe, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8001, 0x7, 0x3, 0x6, 0x5, 0x3, 0xe9, 0x2, 0x3, 0x1, 0x2, 0x8001, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x80008, 0x9, 0x3, 0x200, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x800, 0x6, 0x87ff, 0x4, 0x7fffffff, 0xffffffff, 0x3, 0xffff, 0xd5d, 0xa0c787d, 0xffffff52, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x6], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x0, 0x7, 0x2, 0x7, 0xfffffffd, 0xfffffff8, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0xcb, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x5, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x1, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffefffff, 0x37d, 0x8, 0xd, 0x7, 0xd, 0x8, 0x6eaf, 0x0, 0x8, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x6}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f0000000080)={0x3, 0x6, 0x0, 0x4, 0x2, 0x6, 0x9, 0xffffffffffff0000}, &(0x7f0000000800)={0x8001, 0x101, 0x8, 0x1, 0x2, 0x0, 0x9dc, 0x25}, &(0x7f0000000840)={0xffffffffffffff4e, 0x9, 0x9, 0x5, 0x54, 0x7, 0x6, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f0000000900)={&(0x7f00000008c0)={[0x8]}, 0x8}) fsopen(&(0x7f0000000940)='hpfs\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r3}, 0x10) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) io_uring_setup(0x3827, &(0x7f0000000980)={0x0, 0xbcde, 0x10000, 0x3, 0x2d, 0x0, r2}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a40), 0x109000, 0x0) 10m54.393622648s ago: executing program 0 (id=74): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r5}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r9, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r10, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r9, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r12, r13, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r13}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r9, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r11, 0x0, r13}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="222d18619c9947a48409d3b22de0fa78a5f326ee088f33b4b128befb5dac5ab2e39f41f4c652e1ea7e622b6b80f1ff8bb37978cf46b3b98357cba56979fa707cd59ed641d6b5458e4a6d9964fe8deeef4f3798c69c505ed826cd54c7fa893860cb1837d675651bb7c8ebd7f70eec84bb36f4ac97bb14d820c463b9493867f735764ce7717402b53e0c664defb0cf64722891358aa59d5eb75837f71a788e5d6d5ddf429c0b4e4b741e5a02ecf68512a37306dc942738b3e00b67234babaeb0a1083569aff78e25c589f08c9b38abd2dcf1ba49e1c696657c8436171a9ccc3e4e0ddf9d2e0d6cd3e6b2b4a9c7fdbea56b1c01adea820ac71fbb5df1241793c42a") openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10m53.529904123s ago: executing program 32 (id=74): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r5}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r9, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r10, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r9, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r12, r13, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r13}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r9, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r11, 0x0, r13}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="222d18619c9947a48409d3b22de0fa78a5f326ee088f33b4b128befb5dac5ab2e39f41f4c652e1ea7e622b6b80f1ff8bb37978cf46b3b98357cba56979fa707cd59ed641d6b5458e4a6d9964fe8deeef4f3798c69c505ed826cd54c7fa893860cb1837d675651bb7c8ebd7f70eec84bb36f4ac97bb14d820c463b9493867f735764ce7717402b53e0c664defb0cf64722891358aa59d5eb75837f71a788e5d6d5ddf429c0b4e4b741e5a02ecf68512a37306dc942738b3e00b67234babaeb0a1083569aff78e25c589f08c9b38abd2dcf1ba49e1c696657c8436171a9ccc3e4e0ddf9d2e0d6cd3e6b2b4a9c7fdbea56b1c01adea820ac71fbb5df1241793c42a") openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 8m17.0298169s ago: executing program 4 (id=523): r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000140)={0x20, 0x12, 0x3, "f8b41f"}, 0x0, 0x0}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x181) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @empty}, 0x261, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4004}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@local, 0x35, 0x2, 0x3, 0x6, 0x3, 0x4}, 0x20) ioctl$sock_SIOCSIFBR(r3, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002000)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r6 = open_tree(r1, &(0x7f0000000280)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000980)={0x34, &(0x7f00000006c0)={0x40, 0x14, 0x1, "f6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000480)={0x1c, 0x0, 0x0, 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 8m13.529677407s ago: executing program 4 (id=530): r0 = syz_usb_connect$hid(0x5, 0x8f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000000), 0x6, 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\b', @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) 8m11.805987558s ago: executing program 4 (id=534): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) (async) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) (async) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x72040, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000280)) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000180)={0x0, 0x0}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000340)={0x0, 0x0}) (async, rerun: 64) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0x0, 0x0, 0xfffffffffffffffc]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000080)={r12}) (async, rerun: 32) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000380)={0x0, 0x0}) (rerun: 32) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000440)={0x0, 0x5, 0x7, 0x2, 0x2, [r6, r7, r12, r13], [0x9, 0xd6e, 0x758, 0xf79f], [0x431, 0x7fffffff, 0x984c, 0x2cfd1814], [0x5, 0x8, 0x9, 0xec]}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0xfc5e, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000004c0)={0x0, 0xfffffffffffffff1, r10, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r4, r14, 0x101, 0x9, 0x0, 0x1, {0xfffffffe, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000300)={r14}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r15, 0x0, &(0x7f0000000480), 0xc, 0x3ff}) (async) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r1, 0x3ba0, &(0x7f0000000280)={0x48, 0xb, 0xffffffffffffffff, 0x0, r15}) (async) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r16 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000000002d000000000f0adb0495cdc70100", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32=r1, @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r16, 0x0, 0x0}, 0x20) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1b) 8m11.260151582s ago: executing program 4 (id=538): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r6, 0x7, 0x0, 0x3ee, 0xfffff800, 0x7}, 0x14) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000000)={r6, 0x9, 0x20}, &(0x7f0000000080)=0xc) 8m10.935424999s ago: executing program 4 (id=540): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b040000000000000000020000002c0004802800018007000100633665465100028008000140000000020800024000000016080004400000000c0900010073797a"], 0x74}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x3, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf32000905", @ANYRES64], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bb"], 0x0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r5, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '/\\xv/bus/usb/00#/00#\x00', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c010000190001000000000001000000fe880000000000000000000000000101ac1414bb0000000000005f58a55c000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000200000000000000c4000500ff020000000000000000000000000001000000003300000000000000ffffffff0000000000000000000000000000000000000000ffffffff00000000400000007f000001000000000000000000000000000004d23300000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000003200000000000000fc010000000000000000000000000000000000000500"/308], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 8m10.225273283s ago: executing program 4 (id=542): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r1, &(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)}, 0x20) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f00000003c0)=0x14) r9 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001780), 0x800, 0x0) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001800)=@generic={&(0x7f00000017c0)='./file0\x00', 0x0, 0x8}, 0x18) fanotify_init(0x200, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0xe, 0xc, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000000000000d428000018400000fcffffff000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000007580500008000000850000003d0000009500000000000000e8b01ffdfd7193fe96c15984328f6578c82cff21c69fddccb0cc48464fd46d975353431101e437e36dc43953af8b87e757fd63e7d143f5a95233db2aac69b125dc66b0ebce1ca383b868289ecfff8b20f40028f1baee3cbe50591dd81b5c7c3e0e369ad611ce5600ae1045baed835dc1b64bac6963c4b3d76419c20359a76d6c796a02e3aa624b74e6cad02474c28f2cd1a31b81b8154aef9aa737be123c2ae3db27516ae6650619d3437f21d91fc7dded39fab17fe2718a63d0610552"], &(0x7f0000000280)='GPL\x00', 0x7f, 0x0, 0x0, 0x41000, 0xa5, '\x00', r8, @fallback=0x3c, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x3, 0x3, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001840)=[r9, 0xffffffffffffffff, 0x1, r10], 0x0, 0x10, 0x667}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x1c, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x4, 0x2, 0x1, 0xfffffffffffffff4, 0x4}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3ff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x32}, @jmp={0x5, 0x1, 0x1, 0xa, 0x6, 0x10}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', r5, @cgroup_device=0x6, r3, 0x8, &(0x7f00000001c0)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x8, 0x0, &(0x7f0000000200)=[{0x3, 0x3, 0x9, 0x7}, {0x3, 0x1, 0x2, 0xa}, {0x0, 0x1, 0x4, 0x1}, {0x4, 0x5, 0x4, 0xb}, {0x4, 0x5, 0x2, 0x2}, {0x1, 0x2, 0x4, 0x7}, {0x0, 0x2, 0xb}, {0x5, 0x3, 0x3, 0xb}], 0x10, 0x92}, 0x94) sendfile(r3, r0, 0x0, 0x1) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @mcast2}, r12}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r11, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, r12, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r11, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r12, 0x7}}, 0x10) 8m9.373860391s ago: executing program 33 (id=542): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r1, &(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)}, 0x20) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f00000003c0)=0x14) r9 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001780), 0x800, 0x0) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001800)=@generic={&(0x7f00000017c0)='./file0\x00', 0x0, 0x8}, 0x18) fanotify_init(0x200, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0xe, 0xc, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000000000000d428000018400000fcffffff000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000007580500008000000850000003d0000009500000000000000e8b01ffdfd7193fe96c15984328f6578c82cff21c69fddccb0cc48464fd46d975353431101e437e36dc43953af8b87e757fd63e7d143f5a95233db2aac69b125dc66b0ebce1ca383b868289ecfff8b20f40028f1baee3cbe50591dd81b5c7c3e0e369ad611ce5600ae1045baed835dc1b64bac6963c4b3d76419c20359a76d6c796a02e3aa624b74e6cad02474c28f2cd1a31b81b8154aef9aa737be123c2ae3db27516ae6650619d3437f21d91fc7dded39fab17fe2718a63d0610552"], &(0x7f0000000280)='GPL\x00', 0x7f, 0x0, 0x0, 0x41000, 0xa5, '\x00', r8, @fallback=0x3c, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x3, 0x3, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001840)=[r9, 0xffffffffffffffff, 0x1, r10], 0x0, 0x10, 0x667}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x1c, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x4, 0x2, 0x1, 0xfffffffffffffff4, 0x4}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3ff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x32}, @jmp={0x5, 0x1, 0x1, 0xa, 0x6, 0x10}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', r5, @cgroup_device=0x6, r3, 0x8, &(0x7f00000001c0)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x8, 0x0, &(0x7f0000000200)=[{0x3, 0x3, 0x9, 0x7}, {0x3, 0x1, 0x2, 0xa}, {0x0, 0x1, 0x4, 0x1}, {0x4, 0x5, 0x4, 0xb}, {0x4, 0x5, 0x2, 0x2}, {0x1, 0x2, 0x4, 0x7}, {0x0, 0x2, 0xb}, {0x5, 0x3, 0x3, 0xb}], 0x10, 0x92}, 0x94) sendfile(r3, r0, 0x0, 0x1) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @mcast2}, r12}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r11, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, r12, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r11, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r12, 0x7}}, 0x10) 4m52.484846834s ago: executing program 6 (id=1099): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @broadcast}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r2, @ANYBLOB="000327bd7000fcdbdf251b00000006002100610000000400cc00"], 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000040000000000000000001000000a20000000000a05000000000000000000070000030900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021640200000c0a01030000000000000000070000000900020073797a31000000000900010073797a300000000038020380340200800c0201801800028008000340000000010900020073797a3200000000040001"], 0x2e8}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x346, 0x4) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r5, 0x1, &(0x7f0000000100)={{r7, r8+60000000}, {0x0, 0x989680}}, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000300)) mkdir(&(0x7f00000002c0)='./file0\x00', 0x126) ioctl$UI_GET_SYSNAME(r9, 0x8040552c, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a009562010203010902340001000000000904"], 0x0) 4m50.821361006s ago: executing program 6 (id=1110): r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0xf055b62a5c16a57e) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e"], 0xfebe) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4m50.469115962s ago: executing program 6 (id=1111): socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) openat$audio(0xffffff9c, 0x0, 0x80, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = dup(0xffffffffffffffff) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x40100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040081}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80000001, 0x2, 0x6db2, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x40) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xee24, 0xffffffffffffffff, 0x0, 0x3}, 0x0) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) 4m50.132359821s ago: executing program 6 (id=1114): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async, rerun: 32) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffe}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2b, 0x70bd25, 0x70bd2d, 0x70bd2d, 0x6, [0x57054dd1]}}]}, 0x160}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) (async) socket$inet6(0xa, 0x4, 0x8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002f40), 0x40401, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000002f80)=0x9) (async) timerfd_create(0x1, 0x800) r7 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x80000, 0x0) ioctl$SG_BLKTRACESTART(r7, 0x1274, 0x0) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') (async) r9 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r10 = openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff) close(r10) (async) execveat$binfmt(0xffffffffffffff9c, r9, 0x0, 0x0, 0x0) (async, rerun: 64) r11 = openat$binfmt(0xffffffffffffff9c, r9, 0x2, 0x0) (rerun: 64) close(r11) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x81040}, 0xc, &(0x7f0000000200)={&(0x7f0000002440)={0x48, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4011) (async) execveat$binfmt(0xffffffffffffff9c, r9, 0x0, 0x0, 0x0) (async) execveat$binfmt(0xffffffffffffff9c, r9, &(0x7f0000000540)={[&(0x7f0000000080)='\\th\x00\x05\x00\x00\x00\x14Z\xdc/\xb6\n\xc6p\x89\x96;\xb7V\xef\xd9,\x11uZ9T\xbfN=x\xb0n\x97\xb2\x19\x91\x83T\x84\xbf\x8f\x9e#\x80\xaeI\x9d\xd7z\x19\bs\x1eY\x01Y\x9f\xf6\xc0\xa7\x04\xe3\x1c\xd1\xde\xbb\xd4\xc6\xa6\xfc<\x80\xf8o\xf5\xa8\xdcw.ME5\xbb\xab\x98\x93\xd1~\x80\xd8o:F\xcaA']}, 0x0, 0x0) (async) read$FUSE(r8, &(0x7f0000000400)={0x2020}, 0x2020) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000a000000000005000b"], 0x44}}, 0x0) 4m49.913298682s ago: executing program 6 (id=1115): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x1, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfe}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe44, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) write$P9_RLERROR(r1, &(0x7f0000000500)={0x9, 0x7, 0x1}, 0x9) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x80800) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/freeze_filesystems', 0xc3a01, 0x104) sendfile(r3, r1, 0x0, 0x8) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x2}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000002c0)={0x4, 0x2}) r5 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x190}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd_index=0x4, 0xffffffffffffffff, 0x0}) io_uring_enter(r7, 0x7a98, 0x0, 0x0, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x7fffffffffffffff}) fcntl$lock(r10, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) r11 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$apparmor_exec(r11, &(0x7f0000000540)=ANY=[@ANYBLOB="6efe007500260600003fe4b5e04a2d74b3ad4bcb876003443a70a1be326fd0b906cfdc65a453a5c70a56df8e2b212548641e881a6eb3af2ef48867a6901a30ef39322b87"], 0x9) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000240)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee0000000000", 0x50}, {&(0x7f0000000100)="2a090ae06f43c8f260a64ab6b38c3cdd3384437f7821ef85e1deb3d5031524a6d36a03355bd9e8bc62688784012a6847d0426ea1af532bec05bc10a1e0b7fff881a9e32cbb5268bed17434c1aa4e8eb9305314d772c3377c182f606614f7ae52e03fe17c2e52f41165037cdffe903633426b3cb42e77c66b429be08fb6648413f6dbcbe18efd2d282e1a83696615870997b5e91a24d9e31879ad3daaf33b1fa0d4b0cbec1686a35c86b26aad591400aadf3adee1c09d6f3e0a21b865afaec198714f6deb7a95c829873c3a19b1acef261aea38ba4efae5ca294825a3feee8260057f6bcc7126d08f9b5451f7de", 0xed}], 0x2) 4m49.55748597s ago: executing program 6 (id=1118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100e400000000000000f100000a2800090000000101000000005e1affd5020000001ec3ce40cca9ea0900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a3200000700"], 0x7c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4008046) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x11, @loopback, 0x15, 0x0, 'rr\x00', 0x3c, 0xa, 0x80}, 0x2c) socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) (async) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000000002000000400004803c0001800e000100696d6d6564696174650000002800028008000140000000001c000280180002800900020073797a32000000000800018004fffffd0900010073797a30000000000900020073797a32"], 0x94}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000000002000000400004803c0001800e000100696d6d6564696174650000002800028008000140000000001c000280180002800900020073797a32000000000800018004fffffd0900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 4m48.95358526s ago: executing program 34 (id=1118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100e400000000000000f100000a2800090000000101000000005e1affd5020000001ec3ce40cca9ea0900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a3200000700"], 0x7c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4008046) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x11, @loopback, 0x15, 0x0, 'rr\x00', 0x3c, 0xa, 0x80}, 0x2c) socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) (async) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000000002000000400004803c0001800e000100696d6d6564696174650000002800028008000140000000001c000280180002800900020073797a32000000000800018004fffffd0900010073797a30000000000900020073797a32"], 0x94}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000000002000000400004803c0001800e000100696d6d6564696174650000002800028008000140000000001c000280180002800900020073797a32000000000800018004fffffd0900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 1m40.361476811s ago: executing program 5 (id=1673): syz_open_dev$usbmon(0x0, 0x0, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4040801) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) io_setup(0x0, 0x0) r4 = io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xe739, 0x1, 0x8000002, 0x1d4}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000010000000f000000080034000800030008000300", @ANYRES32=r6, @ANYBLOB="050033"], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) setsockopt$sock_attach_bpf(r2, 0x84, 0xd, 0x0, 0x0) 1m38.349378616s ago: executing program 5 (id=1678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a3100000000140004800800024000000000081b0140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000140000000110800034000000005080002400000f00214000000110001"], 0xdc}}, 0x0) 1m38.265401659s ago: executing program 5 (id=1679): r0 = socket$unix(0x1, 0x2, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r2, 0xee01) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000000102050000000000000000000a000000300001802c000180", @ANYBLOB="d5f0b24a"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40800) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100090000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000001080012400000ffff11000300686173683a69702c706f727400000000"], 0x60}}, 0x0) fadvise64(0xffffffffffffffff, 0xeb, 0x81, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) ftruncate(r3, 0x5) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1m36.972881186s ago: executing program 5 (id=1686): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) getpeername$unix(r3, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) (async) sendmsg$nl_route_sched_retired(r3, &(0x7f0000001e00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000240)=@newtfilter={0x1b74, 0x2c, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffef}, {0x3, 0xfff3}, {0xb, 0x10}}, [@f_rsvp={{0x9}, {0xe08, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0x2}}, @TCA_RSVP_POLICE={0x460, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x4129bf8, 0x6, 0x401, 0x80, 0x8, 0xffff, 0x2, 0x4b, 0xffffffff, 0xc310, 0xb4be, 0x0, 0x1, 0x8a, 0x8, 0x6, 0x80000001, 0x7, 0x6, 0x1, 0xfffffc00, 0x9, 0x8, 0xfffffffc, 0x3, 0x8, 0x4, 0x3, 0xba, 0xc0, 0x1, 0xe84, 0x7ff, 0x884, 0xd5, 0x800, 0x100000, 0x6, 0x8001, 0x5, 0xff, 0xfffffffb, 0x9, 0x5, 0x4, 0x2, 0x6, 0x3, 0x0, 0xfffffffb, 0x0, 0x4, 0x6, 0x2a6, 0x5, 0x6, 0xfffffa78, 0x1000, 0x19, 0x3, 0x10000, 0x9, 0x7, 0x5, 0x0, 0x6, 0x0, 0xa3c, 0x3e, 0x7fffffff, 0x1, 0x3ff, 0x8001, 0x9, 0x5, 0xd, 0x14, 0x1, 0x6, 0x3, 0x0, 0x1000, 0xfff, 0x6, 0x7, 0x7ff, 0x9, 0x100, 0x3ff, 0x3, 0x5, 0x7, 0x3, 0xf1c6, 0x3, 0x32f, 0x7fff, 0x399, 0x7, 0x9, 0x1, 0x80000000, 0xf6ba, 0x10, 0x8000, 0xffffffff, 0x8, 0x3, 0x80000000, 0x100, 0x6, 0x3, 0x59f521ff, 0xfffffffc, 0x800, 0x9df, 0x3, 0x80, 0x3, 0x401, 0x4, 0x3e, 0x7a, 0x4, 0xcfe1, 0x9, 0x80000001, 0x8000, 0x4, 0x6, 0x8, 0x1, 0xb40, 0x3, 0xffff0000, 0x8, 0xb, 0x5, 0xfff, 0xdf, 0x7, 0x1d, 0x9, 0x101, 0x7, 0x3, 0xfff, 0x2, 0x80, 0x3, 0x8, 0x0, 0x7f, 0x9, 0x0, 0x76b, 0x2, 0x9, 0x5, 0x2, 0x3, 0x6, 0x5, 0x0, 0x7, 0xffffffff, 0x8000, 0xe9, 0xc, 0x0, 0x6, 0xd473, 0x3, 0x800, 0x6, 0x400, 0x825e, 0x3, 0x0, 0x1, 0x9, 0x5, 0x1000, 0x7, 0x4, 0x8, 0x7, 0xe0d4, 0x8, 0x9, 0x8, 0xa, 0x7fffffff, 0xc, 0x800, 0x3, 0x0, 0x1, 0x3, 0x8, 0x6, 0x4, 0x9, 0x1, 0x400, 0x4b3, 0x0, 0x0, 0xc, 0x80, 0xc71f, 0x5, 0x4, 0x9ee, 0xd09a, 0x3, 0x2, 0x1000, 0x1, 0xf6, 0x6, 0x8, 0x7, 0x6, 0x5, 0xffffffff, 0x200, 0x7ff, 0x4, 0x5, 0x2, 0x40, 0x7fff, 0x3, 0x5, 0x2, 0x80, 0x6cfb, 0x9, 0x7ff, 0x9, 0x40, 0x5a9, 0x0, 0x8, 0x10, 0x2, 0xf52, 0x3, 0x6, 0x5, 0x7, 0xd5e5, 0x7, 0x8001]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000000000000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x1, 0x2, 0x2, 0xa0, {0xfc, 0x2, 0x6, 0xf9, 0x5, 0x2}, {0xff, 0x2, 0xffff, 0xbf8, 0xfff9, 0x7ff}, 0x4, 0x8, 0x8}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7, 0x4, 0x7}, {0xffffe97f, 0xfad0, 0xffffffff}, 0xbc, 0x10, 0xd}}, @TCA_RSVP_POLICE={0x4c, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0xda, 0x6, 0x6, 0xc87, 0x53c, {0x4, 0x0, 0x8, 0x7ee, 0x5, 0xf1}, {0xd7, 0x1, 0x6, 0x4, 0x6, 0x100}, 0x101, 0x1, 0xaaa}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000}]}, @TCA_RSVP_POLICE={0x818, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0xa49, 0x2, 0xd, 0x8, 0x4000, 0x9, 0x100, 0x80, 0x0, 0x0, 0x6, 0x6, 0x9, 0x5, 0x400, 0x0, 0x6, 0x2, 0x7, 0x40, 0x2, 0x4, 0x3, 0x1, 0x4, 0x9, 0x8, 0x4623, 0xad, 0x0, 0x2, 0x80, 0xa, 0x3000000, 0x4ad, 0x3ff, 0x6, 0x6, 0x400, 0xffffffff, 0x72e, 0x5, 0xb3, 0x7, 0x7, 0x6, 0x7, 0x0, 0x5, 0x4, 0x3, 0x0, 0x2, 0x3, 0x3, 0x1, 0xfffffff8, 0x101, 0xa9b3, 0x9, 0xee, 0xb, 0x2, 0x800, 0x100, 0x4, 0x81, 0x7, 0x7, 0x8, 0x4, 0x4, 0xffffffff, 0x9, 0xfffffff8, 0x20c, 0x101, 0x2, 0x2, 0x40, 0x200, 0x5, 0x9, 0x8, 0x3, 0x8, 0x5, 0x5, 0x4, 0x8000, 0x6, 0x1, 0x9, 0x3, 0xe29, 0x490, 0x1, 0x84f9, 0xd, 0x0, 0x8001, 0xe02f, 0x0, 0x7f, 0x2, 0x3, 0x4, 0xbece, 0x5, 0x5, 0x9, 0x5, 0x400, 0x7aa8703f, 0x3, 0x3, 0x4, 0x7, 0x0, 0xfffffc00, 0x7, 0x2, 0x8, 0x0, 0xfffffff9, 0x4, 0xff, 0x1, 0x2, 0x80, 0x3, 0x3, 0x70, 0x3, 0x7ff, 0x2, 0xe, 0x2, 0x8, 0xb8, 0x595, 0x7fffffff, 0x0, 0x8, 0x2847, 0x2, 0x1, 0x2, 0x4, 0x101, 0x2, 0x5, 0x8, 0x401, 0xe, 0xa, 0x15, 0x9, 0x4, 0xffffff81, 0x5, 0x7, 0x8, 0xeeb, 0x0, 0x8, 0x4, 0x4, 0x2000000, 0x8, 0x400, 0x7fff, 0x4, 0x22d, 0x8, 0x4, 0x80000000, 0x4efe3ef2, 0x7, 0x8, 0x400, 0xb3, 0x9, 0xffff, 0xc717, 0x3, 0x5, 0x10001, 0x7, 0x9, 0xfff, 0xff, 0x8, 0xd97, 0x8447, 0x96, 0x238, 0x200, 0x8, 0x6, 0x7, 0x2, 0x7, 0x40, 0x9, 0x9, 0xfff, 0x58960ce6, 0x9, 0x4, 0x9, 0xb4, 0xfe000000, 0x7, 0x401, 0x0, 0xfffffff8, 0x5, 0x699, 0x2, 0xf9, 0xfffffffd, 0xb, 0x7, 0x7, 0x1ff, 0x400, 0x9, 0x7fffffff, 0x8, 0x1000, 0xa48e, 0x8001, 0x62f1, 0x8000, 0x7, 0xae0, 0x8, 0x2, 0x69, 0x4, 0x3, 0x6, 0xa, 0x7, 0x1, 0x90000000, 0xfffffff7, 0x10, 0x12fd8528, 0xffffee4c, 0x6, 0x24000, 0x2, 0x0, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0xd, 0xfe2, 0x2, 0x6215, 0x6b12, 0x4, 0x5, 0xe, 0x6, 0x7ff, 0x8, 0x8, 0xe, 0x16, 0x7fffffff, 0x1000, 0xfffc0000, 0x8, 0x2, 0xf, 0x1bd, 0x3ff, 0x59a, 0x21f, 0x6, 0x10, 0xe, 0xab0e, 0xbe78, 0xfffffffd, 0x2, 0x0, 0x7, 0x80000000, 0x8, 0x7fd29b3a, 0xde, 0x3, 0x3, 0x0, 0x4, 0x0, 0x6b, 0x1, 0x0, 0x4, 0x400, 0x80000000, 0x1, 0x3, 0xc29, 0x1, 0xb5, 0x0, 0x6, 0x7, 0x7, 0x3, 0x9, 0x1, 0x9, 0x7fff, 0xe, 0x4, 0x1, 0x7, 0x1000000, 0x8, 0xffffff0d, 0x5, 0x4, 0x8, 0x98, 0x0, 0xffffff88, 0x6, 0x2, 0x3, 0x1, 0x2, 0xfff, 0x5, 0x1, 0x2, 0x2, 0x8001, 0x5, 0x7, 0x6fc, 0x0, 0x1ff, 0x4, 0x80, 0x9, 0x6, 0x9, 0x100, 0x75e, 0x31d3, 0x28, 0x10000, 0x3, 0x7fffffff, 0x81, 0x7, 0x5, 0x2, 0x3, 0x6, 0x2994, 0x7, 0x4, 0xf20, 0x2, 0x6, 0x4c8d, 0x2c, 0x5, 0x0, 0x7, 0x2, 0xfffff998, 0x3ff, 0x0, 0x8, 0x5, 0x5, 0x1200000, 0x101, 0x237b54, 0x6, 0x8, 0x7fffffff, 0x8, 0x0, 0xeb, 0x3, 0xc35, 0x0, 0x3, 0xfffffc00, 0x6, 0x40, 0x7, 0xfffffffe, 0xffff, 0xfffffffc, 0x1, 0x2, 0x8, 0xec, 0x5, 0x6, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0xa5ab, 0x3, 0xa5d9, 0x6, 0x2, 0x3, 0x3, 0x6, 0xffffffff, 0x1, 0x9, 0xe801, 0x3, 0x401, 0x5, 0x6, 0x1, 0x178, 0x5, 0x400, 0x1, 0xa6, 0xba14, 0x8, 0x2, 0x0, 0x6, 0x7fffffff, 0x2b6, 0xf3, 0x0, 0x9, 0x9, 0x7, 0x10000, 0x5, 0x9, 0x8, 0x7, 0x6, 0x5, 0x7, 0x7, 0x2, 0xa3, 0x10000, 0x5, 0x4, 0x489, 0xffffffff, 0x4895, 0x100, 0xcf55, 0x7, 0xa0ba, 0x4, 0x0, 0x3, 0xc88b, 0x3, 0x4, 0xb24, 0xd, 0x727b, 0x0, 0x9, 0xa, 0x2, 0x2, 0xe, 0x0, 0xffffffff, 0x6, 0x2, 0x4, 0x6, 0x6, 0xd0f, 0xc, 0x2, 0x7, 0x7, 0x2, 0x76, 0x0, 0xf, 0x3, 0x5, 0x7ff, 0xff, 0x5, 0x8, 0x5, 0x5, 0x10, 0x1, 0x4]}]}, @TCA_RSVP_DST={0x8, 0x2, @private=0xa010101}, @TCA_RSVP_ACT={0x110, 0x6, [@m_mpls={0x60, 0x15, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x5bb63}, @TCA_MPLS_TTL={0x5, 0x7, 0x10}]}, {0x23, 0x6, "40204e7fe8fb1f849d977611ceaffd445ff8a91a51ec8b8ac4fcd45385ad71"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0xac, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x7f, 0x6, "a9efbcf6ee27e6077ba4a132477ab06f6d3b93ac885f32fa2a64103ed5c34228ab1ddb503faeb5d569a135f10c50739e901423cb72765403bcd38cbfc733a9f73eda25e42f137769aad7f51eae95865226235ba1705d903a590a07bd69f7d2f7e526993317b73863ef4e53574fa46f2096be73822d4060ddf57b68"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @f_rsvp6={{0xa}, {0xd30, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x10, 0x1}}, @TCA_RSVP_ACT={0xcc8, 0x6, [@m_csum={0xfc, 0x5, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x0, 0x8, 0xc0000}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x8, 0x0, 0xc, 0xfffffffc}, 0x2b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x6, 0x0, 0x1, 0x9}, 0x80}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff, 0xcc, 0x20000000, 0x1, 0x1a}, 0x15}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0x6, 0x6, 0x362f11d0, 0x5}, 0x78}}]}, {0x42, 0x6, "5bff67e485aa6ce8d5e6c745c2a596a2da581e9896e3fe1243efd429c0a3dcefea0248b9a9db68f40e50d0e1f9570f98e8f7d5efc52bc6654998197239a3"}, {0xc}, {0xc}}}, @m_mpls={0x114, 0xa, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xd}]}, {0xdd, 0x6, "5a540984db4d0fff6b9a9bdb70d28a2efb24e5c6a149004d5d23ccda397ab9db419255d3401cea71386670b9cb4ef947ec7be369ef3d26489feef177d74d0311f7d53bd473f4bc0fa2fc07fc94000672c22569258e9b4281d7b9bef7d7b621bc29f8c6f68f8b545eb0c9e522487dccb3e81a609c0d926711c78e737b5b4387de1f9488fe29068ea95f235fcf5017e95d30f09a9bb4506fdf70beb93e9f82a0800f83cbab9958e1d43f9ed0749c0bc58833d148aa67e88d66f586839f49928af8f668b50c057e3a8581c828a220b8c0436d6d1ed0838eab62c0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_connmark={0x100, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0x200, 0x2, 0x0, 0x1}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x4, 0x8, 0x3ff}, 0x2}}]}, {0x95, 0x6, "a7ad390de2dca8a93eccfe02b7508972b8dc9e8fcc2ab0fa0a4273909757ef7703c78cb4265fc36d523440694919d4d3df1bcc9eb9dc1723c05dcf1aae5a7d2ce1c19fc170afdcd29323b44ced6385b9bb62d4e9e7002ab06ee2f5d4813cb5e0ff9c86960e92991e76489aeccec205118cc54d1654b1d3ae63ad68d1f36705e51f0a2b341178068006051203c0aadcac43"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0x8fc, 0x17, 0x0, 0x0, {{0xb}, {0x898, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x6, 0x9, 0x0, 0x7, 0xe2, 0xf757, 0x0, 0x9, 0x5, 0x7fff, 0xc4c, 0xbf93, 0x2, 0x877d, 0x81, 0x9, 0xf69, 0xfffffffa, 0x80000000, 0xb5a, 0x0, 0xf, 0xb9, 0xfffffe8d, 0x5, 0x9, 0x6, 0x6, 0x5, 0x3, 0x2, 0x926e, 0x9, 0xed, 0x3, 0x1, 0x46, 0x8, 0x321, 0x92d, 0x10, 0x48d, 0x8, 0x81b6, 0x2145, 0x4, 0x7, 0x200, 0x0, 0xb5b, 0x4, 0x7, 0x98ef, 0x7, 0x3, 0x9, 0xffffffff, 0xfffffff7, 0x2, 0x10, 0x9, 0x10001, 0x6, 0x8, 0x2, 0xd53, 0x1000, 0xd4a, 0xffffffad, 0x2, 0x4, 0xe, 0xae, 0x5, 0x4, 0x9, 0x463, 0x4, 0x40, 0x3, 0x5, 0x200, 0x1, 0x8, 0x2, 0x1000000, 0x8001, 0xb9, 0x7, 0x9, 0x4a, 0x3, 0x7, 0x9, 0x6, 0x400, 0x7, 0x7, 0x7f, 0x74, 0xffffff9a, 0x6e8, 0x7, 0x4, 0xe, 0x424, 0x3, 0x81, 0x7, 0x9, 0x2, 0x8, 0x9, 0x1, 0x6, 0x14, 0x1, 0xa2be, 0x5, 0x9, 0x7fff, 0x1a9, 0x8001, 0x6, 0xfffffffa, 0x6, 0x7fffffff, 0x10, 0x7, 0x1, 0x4, 0x6, 0x1, 0x1, 0x0, 0x9, 0x1, 0x3, 0x7ff, 0x4, 0x5, 0x9, 0xc30, 0x2, 0x40, 0x3ff, 0x8, 0x89, 0x10, 0x1ff, 0x7, 0x3ff, 0xf, 0x8, 0xc, 0x5, 0xff, 0xfffffff0, 0x0, 0xffffffff, 0x7fffffff, 0x7fff, 0x2, 0x1, 0xae, 0x5, 0x9, 0x3347, 0xffc, 0x7, 0x81, 0x2b3, 0x1, 0x9, 0x8001, 0x7, 0x6, 0x101, 0xfffffffa, 0x6, 0x6, 0x6, 0x9, 0x5, 0x9391, 0xd, 0x1000, 0x2, 0x2, 0xff, 0x9, 0x7fff, 0x6, 0xacde, 0x2, 0x489, 0xc11, 0x9, 0x3, 0x1, 0x8, 0x2, 0xfffff843, 0x5, 0x5, 0x6, 0x2, 0xac, 0x3, 0x4, 0x4, 0x4e08, 0x9, 0x200, 0xb, 0x8, 0x4, 0x9, 0xbaf3, 0xffffffce, 0x6, 0xa, 0x100, 0x5, 0x4, 0x64, 0x5, 0x3, 0x4, 0x5, 0x9, 0x7, 0x9, 0xc623, 0x0, 0x100, 0x0, 0x80000001, 0x9, 0x400, 0x5, 0x6, 0x72, 0x1, 0x0, 0x0, 0xe18, 0x5, 0x1, 0x7, 0x80, 0x7fff, 0x9, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x13, 0x2, 0x2, 0x1, 0x8, {0x0, 0x0, 0xfffa, 0xf, 0x7, 0x1}, {0x6a, 0x1, 0xf5, 0x4, 0x2}, 0x4e50, 0x6, 0xffffffff}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffff7, 0xfffffff9, 0x3, 0x2, 0xb3a, 0x10, 0xf, 0x5, 0x2, 0x0, 0x2, 0x7, 0x7, 0x7, 0x6, 0x0, 0x8, 0x7, 0x5, 0x5, 0x8001, 0x3, 0x0, 0x5, 0x4e1, 0x8, 0x0, 0x5, 0x1, 0xf2, 0x647, 0x0, 0x401, 0x800, 0x7, 0x200, 0x17, 0x4, 0x7, 0xffffffff, 0x401, 0xffffffff, 0xfffffffa, 0x1, 0x55, 0xa000, 0x4, 0x5, 0x2, 0x2, 0x1, 0xfffffffd, 0xf1a, 0xb018, 0xfffffff2, 0xfffffffa, 0x5, 0x2, 0x7, 0x9, 0x2, 0x8000, 0x6, 0x47, 0x4, 0x1, 0x0, 0x4, 0x401, 0x0, 0xa, 0x8, 0x9, 0xb, 0x1, 0x4, 0x4, 0xb4b3, 0x8, 0x8, 0xc6a, 0x1, 0xfb5, 0x5, 0xc, 0x7, 0x8, 0x7f, 0x41, 0x8, 0x2, 0x0, 0x8, 0x50a, 0xc, 0x8, 0x93, 0x101, 0x9, 0x2, 0x4, 0xdf4, 0x9, 0x5, 0xf6c, 0x10, 0x0, 0x1, 0x80, 0x9, 0x4b, 0x8, 0x4, 0x8000, 0x12400000, 0x40, 0x4, 0x6, 0x0, 0x8, 0x2, 0x1, 0x1, 0x4, 0x3, 0x5, 0x5, 0x6a0, 0xfffffff8, 0x4200000, 0x6, 0x4, 0x6, 0xcbbd, 0x7, 0x380000, 0x5, 0x7f, 0x2, 0x4, 0x1, 0xffffd8b3, 0x3, 0x4, 0xfff, 0x5, 0x5, 0xc88, 0xffff, 0x5, 0xc, 0x7, 0x9, 0x8, 0x44, 0x543, 0xc2a7, 0x1, 0x4, 0xfffffff8, 0x1, 0x7f, 0x4, 0x6, 0x2, 0x5, 0x5, 0x9, 0x409, 0x800, 0x3, 0x8, 0x0, 0x85, 0x4, 0x4, 0x23, 0x0, 0x7, 0x5227, 0xfffffffc, 0x1, 0x4, 0x9692, 0x93f, 0x4, 0x7, 0x9, 0x0, 0xd, 0x754c, 0x2, 0x7, 0x4, 0x9, 0x7, 0x5, 0xb, 0x7, 0x5, 0x80000000, 0xfff, 0x7, 0x6, 0x9, 0x7fffffff, 0x834, 0xb, 0xffff, 0xc6, 0x1, 0x7, 0xd, 0x3, 0x9, 0x3, 0x2, 0x1, 0xa, 0xfffffff7, 0x9df, 0x8, 0x9, 0xb0b8287, 0x2, 0xffffffff, 0x8, 0x3, 0x5, 0x5, 0x10, 0x5, 0x1, 0x0, 0x5, 0x5d, 0x800, 0x3, 0x1, 0x1, 0x5, 0x5, 0xe, 0x9, 0x62, 0x4, 0x2, 0x1000000, 0x8d, 0x5, 0xff, 0x0, 0x368daa99, 0x9, 0x100, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]]}, {0x3a, 0x6, "e771159de5d0642d6837344ce7e9d9994ee443631c55ef6f1f46fc0c1f25d0e2858d9c340bdacf638aab7b65231ba31086dfedab857b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0xb8, 0x17, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x401, 0xffffffffffffffff, 0x401, 0x4}, 0x7d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x5000, 0x2, 0xc, 0x3}, 0x4b}}]}, {0x51, 0x6, "1bcf3141194938fd6031c51178022f9e2c85a312ea58a80073900135dbae674853821d45e70d4ac1d1892ca8ba37972b35015cfaec099bf2a27697bfc67ae48c5607ab10aeb9f01aeefb4120c1"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_RSVP_SRC={0x14, 0x3, @loopback}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x0, 0x4, 0x6}, {0x80000001, 0xffffffc0, 0x1}, 0xff, 0xb, 0x7}}, @TCA_RSVP_SRC={0x14, 0x3, @mcast1}, @TCA_RSVP_SRC={0x14, 0x3, @loopback}]}}]}, 0x1b74}, 0x1, 0x0, 0x0, 0x8800}, 0xc00c000) (async) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001e40)={r2, 0xb, 0x8000}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001e80), 0x4000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001ec0), r5) (async) io_uring_setup(0x4598, &(0x7f0000001f00)={0x0, 0x19a, 0x8004, 0x0, 0x32d, 0x0, r5}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001f80), 0x305440, 0x0) (async) ioctl$BLKREPORTZONE(r5, 0xc0101282, &(0x7f0000001fc0)={0x8, 0x1, 0x0, [{0x3, 0x488, 0x91, 0xb, 0xc, 0xb, 0x2, '\x00', 0xc}]}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000002c40)={'syztnl2\x00', &(0x7f0000002b80)={'erspan0\x00', 0x0, 0x8000, 0x8700, 0x10001, 0x0, {{0x1a, 0x4, 0x1, 0x3c, 0x68, 0x67, 0x0, 0x57, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@rr={0x7, 0x13, 0x27, [@remote, @empty, @local, @remote]}, @lsrr={0x83, 0x7, 0x8e, [@empty]}, @lsrr={0x83, 0x17, 0x6f, [@local, @remote, @multicast1, @loopback, @rand_addr=0x64010100]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x1c, 0xdf, 0x0, 0x0, [0xf, 0x101, 0x2, 0xfff, 0x84c, 0x6]}]}}}}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002d00)={r5, 0x58, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmmsg$inet(r3, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002040)="26c2b2c41ca76095ec15b2dda18b355b25f7649a0b4ed6d60ff79088b99902f14ea682e2e7d81628e7b51073f351707e509400bd39227ce1985e238e9c6e2f377738e5b3728f5f1de4c6be351ba58740bf247f048bf13f256850ab587dc0ec088992c5f9a29ff4acd02d700a3536afbbce26d54a4eb4e8a290defe0a1dc5ae06934eacd8140ea489b4f38d93f594e3583d78bc5acd503016d9713ee164b453e8b4c81b559bf8c57027ae1a87c2f17cbf877f7aba57c8f51a6ce1efdbda01e4b9b9a73388e19663918993a166961b1f6fe89cd5dcc374ad", 0xd7}], 0x1, &(0x7f0000002180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4fd}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffe00}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffc}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@lsrr={0x83, 0x1f, 0x2a, [@dev={0xac, 0x14, 0x14, 0x15}, @dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote, @local, @multicast2]}, @cipso={0x86, 0x3e, 0xffffffffffffffff, [{0x5, 0x10, "e255dcd2d14665fb0e4d17c35eea"}, {0x1, 0x2}, {0x6, 0x10, "0604c72e09723ec4ec6d990e98fb"}, {0x7, 0x6, "0e9107e8"}, {0x5, 0x10, "6cf1b040cf8552753fe693a46a2b"}]}, @timestamp_prespec={0x44, 0xc, 0xaa, 0x3, 0x0, [{@rand_addr=0x64010100, 0x80000001}]}, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0x4c, [@empty]}, @lsrr={0x83, 0xf, 0xe1, [@dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x26}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x2c, 0x3, [{0x1, 0x9, "7ff3d3b8b08d85"}, {0x1, 0xd, "0928d57bec8b540de06cf0"}, {0x1, 0x4, "1c1b"}, {0x2, 0xc, "2a8334afd685e72b4b8d"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x138}}, {{&(0x7f00000022c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000002340)=[{&(0x7f0000002300)="8a937c87875d042b2d709534780a7d4cba2d29e8da686abe", 0x18}], 0x1, &(0x7f0000002380)=[@ip_retopts={{0x58, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x11, [@remote, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, @broadcast]}, @cipso={0x86, 0x2d, 0x0, [{0x1, 0xc, "9f197b386cc716a8a469"}, {0x6, 0x6, "f2e4f1b1"}, {0x2, 0x5, "c84e16"}, {0x1, 0x10, "49250ea03958347416643e6dcd98"}]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x70}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002400)="89656e0521cd11c3e75dfa7871ac4b702a436bdb2e435cb036014c2e128c5f966fcb82c883700c636aa13f0ee44cd44d4b91db2c2ef966065d659a27679ee198a65edc444efa949f1a520c37e81f0147b9cef00960c921b8f33e20fdb585a7ca36f713f3de39949ba43d8c77cba0540c3a6839a8e5d06cb42c842fa6c7c7f3211430192afda8fb86ac4fba8c374dbb85d120a0b5878728f16fd621de8b2af9220e9b4014244e1d8cc2962b29742d30a78da18a49ee905c4ea40d42f9ac1dc63cecdd042a1550ada7b2cc8af2ee4dd2e2f19ea87e0be8f2f8fd813c61e7b01105d8", 0xe1}, {&(0x7f0000002500)="db4664316a292be557cb3a96ef43ffef46276353974d6426c6ce82ae60030725d7702d3964774de2069a9cf4bb369cdbf6d10ee0483ad23a5e0551b69c81f3556e317d", 0x43}, {&(0x7f0000002580)="b3735cc64da38c60bb38c0147eef63a059d28cea68b37d74d057d34bf9f98d7efd2cfb826811eb06f86a95ec63ec0fa184931a089eec35d40f2bdc7e3b2963825c008c1e846817c8cac8311aceeb8cfe3937bc39eddacba2e82c7c9d81fa3a454744d36cdfbf08c49bbb812507f3c59206c4b40dc9a710252d8021785f117775c5355fa746687310fdbb214079a1c1716db010a079bd0634a2a0fcfb88589cb4717864399090befbbb3d3cff271f9eca561e6e76d52fe61dcc19143f60fc76493c698bd08a7a6f97a3137e41e91c91e78debeb78832097b928b8edce", 0xdc}, {&(0x7f0000002680)="1efe7cae685f5894ddae10553d345b1a8fafb45f4a533b0d366f08a20d7ab24ad8da1d50549185a88173a43151da394de35a7cc1732f205b76a21b6d0a398d909cf98e46a24ea6214a0c3f0af1a1e03f872ef4dcb363f2775a0c1a37a7af4b4a0919f63f6679c82fa1af3d6e382e722bb0b06e8cecb5f43499904e383e7e", 0x7e}, {&(0x7f0000002700)="0d1d849087386ca7cf1625e3a4df60d46dafe2b505861ee408e9b515c42245d2caefe3b6558376012f8e4a4231534f97737bba06727c608704dcf4b6db1dde4ee9385064adb4253fdd887168afb4ddcc5a393f575aa5c0d726b8e63785d46f59578d6b29fca65087d254a03d31d0d39728c79384f29915b0acc8629cceacb3bc1101191b1f10c122031749491c4f7cc117aa9975a44c359807c36102e4e627a4819e02312d44dab5b57bf1950677348639c2ce62596ad15ec44fea9582456379c8b247fc0a1e635a65e843", 0xcb}], 0x5, &(0x7f0000002880)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f00000028c0)="2870e4b0372b06578c69348f78a71e29133503ec4587f7851c4378fb901d154a22f61e6feb9c054edf230d34da8f4255efd25162b62de1d8e79e9908ec4405ad3dffa2611fdc325d5d0169314bc7f18d164e9ed51802d4c3ca65e5f781a28a57852c0b0d856c94d5ab97ff9a3f6f8a442b4f36f7c2a2681c1885a5723d3f78560d6c5926f362e9fa24102ea61f17626a5c92a7dded2b4b67761d0c9b35d10dcc7e08f4cc004ea84599cd", 0xaa}, {&(0x7f0000002980)="ec66aa136bce08db3d901e206c21a193d8254564c3ff13d1a2b903ee397be42a056348f1d644c3892283b17dc3f015d8611362a6cfcabb52927cc170efc49258dcc90175724391d4b2142df064b42aca1da1d88c1353b7ee40dcefd9707127bd21e58b5939c521e49345960741c97fe2b3b455981cd81066f8d2d0603a94cc8d16c596bdc7276f4a25eae8a95be58163faeab8f70b405b9c44bd7dd175e43c56936650ba7d099303ff1cba8c52dd1c953d3e4b9931864585634cdddcc0a44c714ad22b06c39a443cf79844861a24eb4f34a324d479887475fb2f", 0xda}, {&(0x7f0000002a80)="0a36f976ac202524923ccad2c2be67d4f3e4aba63547724548bca20f711d316501c2f0b8470efb0c5237fd539e40b814888ee2564ded", 0x36}, {&(0x7f0000002ac0)="84e4f91cde0759bd864e47fe6522ed3467c2867f865e2879d33fcfc63b6ea9bc7c495d91dd090b2f1a117eb19b34fb6f07ec226513e937834984f2f279ad3dd4df5f8165d13ff27ecf4adbdfc3dba45c9dd43dbd9d07830ae6cc09567e931d9b", 0x60}], 0x4, &(0x7f0000002d40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010102, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffa}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x54}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x23}}}}], 0xb8}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000002e00)="79c765876dff2c5beb5872973c53955df723b2b890ce739097c886c012d404a05eebed40c4097908ff6d5aad83c4a04e49a3b521494b2f1d53bd49947dabca2aefd24d15b2f9664a819e378178835fd4a58cb6ff9489e14fdd67285b89b135b6bc739eed9b7be9e8cd7d1d57a0c50b54b0fc2863cecd38a71791d54b56cf3bd6af64fca4fefca19070f1c4585c1e55803f6a6ee4c67172e7c33063b8defa8d6be8788a71793e20e9ac6816d12aba18b2f66dfcd8971d332d473cf660c5", 0xbd}, {&(0x7f0000002ec0)="1f1268ff89b583d84af6450029a938cea7e0fbe7e359a6d54331bb427ab5bf13a0d45056a705b36bc0f1115329827c678644dc23cd9b0d5bbe2fa9dcbc8265a688d4cc183953c569a69a6c7efd08d5d8fc6b4635d148def0378fb50f6b7a1033657b2e98859a25f124b4644ec6dd8eeeb9042fe8eceb97e413137bc8c461f1f9586babac4840335479606f07870d332ddc4c752fa03557ab6861ed493ae6a11115365f648d99c7700f7c946a1a9409deda7d55f4b24fe13b696a9be9251eae747605b85dcc55622dc93bc45b2c9715b33e43b3fa1f", 0xd5}, {&(0x7f0000002fc0)="8796cd03fab2f26c5202a8655fc5945c078bb615d2da2aad2bb87fc81d15726c80be837890a18e53360dcb7f3e122d01684e56ce04", 0x35}, {&(0x7f0000003000)="add8c130fdf550fb142edd692676bf6d3355acf6aeaaf6b3a7c044e30c263663aa2da2e941493ed539d579bcfbbe4784639ceb410fece63dfee7f7193251", 0x3e}, {&(0x7f0000003040)="f97c2a4e24efcb4f22e01c9beea85c165d0058dd416922771246e34ff9bbbd0ae8e46385b5ec6d46fc948839515bc79cc2c04c44ac74cb1ee8e3dbc857008e4227200c7f383990eb18fef6768ecaacf541d3e32ecd904204daf92a9cd0439935c7eff033002a5e39953ca63e1e3567cac7be19fe2b57e1a9c3181fadc56cf7182c2702a8fc72", 0x86}, {&(0x7f0000003100)="d04107f6c205868c5865f385da08d3be184586", 0x13}, {&(0x7f0000003140)="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", 0x1000}, {&(0x7f0000004140)="a43273bf4566b2d7d5ceaca37df8ca41d98118cdaa761a935a76f25c47ac3272968384c7e9e50bcddf857fe6b927dafaee134ae97bbfac0f1dfa03a09b21a998a80e7468749e4d40d650bdff", 0x4c}], 0x8}}], 0x5, 0x4000000) connect$pppl2tp(r5, &(0x7f0000004380)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x4, 0x2, 0x2}}, 0x26) (async) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f00000043c0)) connect$unix(r3, &(0x7f0000004400)=@abs={0x0, 0x0, 0x4e21}, 0x6e) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000004480)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000044c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000045c0)={&(0x7f0000004500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004580)={&(0x7f0000004540)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xc73e, 0x44}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x40800) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SYNC(r9, 0x9408, 0x0) rmdir(&(0x7f0000004600)='./file0\x00') (async) truncate(&(0x7f0000004640)='./file0\x00', 0x0) (async) r10 = syz_io_uring_setup(0x7e9e, &(0x7f0000004680)={0x0, 0xf4bc, 0x8000, 0x3, 0xe8, 0x0, r5}, &(0x7f0000004700), &(0x7f0000004740)) io_uring_register$IORING_UNREGISTER_RING_FDS(r10, 0x15, &(0x7f0000006180)=[{0x7, 0x0, 0x0, &(0x7f0000004a40)=[{&(0x7f0000004780)=""/26, 0x1a}, {&(0x7f00000047c0)=""/113, 0x71}, {&(0x7f0000004840)=""/102, 0x66}, {&(0x7f00000048c0)=""/51, 0x33}, {&(0x7f0000004900)=""/72, 0x48}, {&(0x7f0000004980)=""/104, 0x68}, {&(0x7f0000004a00)=""/22, 0x16}], &(0x7f0000004ac0)=[0xfffffffffffffffc, 0x1ff, 0x4]}, {0x7, 0x0, 0x0, &(0x7f0000005e80)=[{&(0x7f0000004b00)=""/61, 0x3d}, {&(0x7f0000004b40)=""/25, 0x19}, {&(0x7f0000004b80)=""/190, 0xbe}, {&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f0000005c40)=""/223, 0xdf}, {&(0x7f0000005d40)=""/133, 0x85}, {&(0x7f0000005e00)=""/86, 0x56}], &(0x7f0000005f00)=[0x8, 0x4, 0x0]}, {0x3, 0x0, 0x0, &(0x7f0000006100)=[{&(0x7f0000005f40)=""/43, 0x2b}, {&(0x7f0000005f80)=""/101, 0x65}, {&(0x7f0000006000)=""/236, 0xec}], &(0x7f0000006140)=[0x1, 0x365f, 0x100]}], 0x3) recvmmsg(0xffffffffffffffff, &(0x7f0000009480)=[{{0x0, 0x0, &(0x7f0000006680)=[{&(0x7f00000062c0)=""/70, 0x46}, {&(0x7f0000006340)=""/104, 0x68}, {&(0x7f00000063c0)=""/202, 0xca}, {&(0x7f00000064c0)=""/157, 0x9d}, {&(0x7f0000006580)=""/242, 0xf2}], 0x5, &(0x7f0000006700)=""/1, 0x1}, 0x7}, {{&(0x7f0000006740)=@rc={0x1f, @none}, 0x80, &(0x7f0000006840)=[{&(0x7f00000067c0)=""/99, 0x63}], 0x1, &(0x7f0000006880)=""/179, 0xb3}}, {{&(0x7f0000006940)=@phonet, 0x80, &(0x7f0000006d00)=[{&(0x7f00000069c0)=""/173, 0xad}, {&(0x7f0000006a80)=""/159, 0x9f}, {&(0x7f0000006b40)=""/157, 0x9d}, {&(0x7f0000006c00)=""/208, 0xd0}], 0x4, &(0x7f0000006d40)=""/107, 0x6b}, 0x2}, {{&(0x7f0000006dc0)=@hci, 0x80, &(0x7f0000006f40)=[{&(0x7f0000006e40)=""/119, 0x77}, {&(0x7f0000006ec0)=""/105, 0x69}], 0x2}, 0x9}, {{&(0x7f0000006f80)=@isdn, 0x80, &(0x7f0000009340)=[{&(0x7f0000007000)=""/4096, 0x1000}, {&(0x7f0000008000)=""/201, 0xc9}, {&(0x7f0000008100)=""/215, 0xd7}, {&(0x7f0000008200)=""/208, 0xd0}, {&(0x7f0000008300)}, {&(0x7f0000008340)=""/4096, 0x1000}], 0x6, &(0x7f00000093c0)=""/155, 0x9b}, 0x4}], 0x5, 0x1, 0x0) 1m36.597025339s ago: executing program 5 (id=1687): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRESDEC=r1], 0x31) 1m36.363491484s ago: executing program 5 (id=1689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x1b) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x600000000000000, 0x0, 0x0, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bridge_slave_0\x00', 0x401}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, &(0x7f0000000080)="360f231b66b80500000066b94d2800000f01d9e32f66b80500000066b9050000000f01c1366566f20f2b5b00ea00908a00baf80c66b8baf0488066efbafc0cb80008ef0f015f023e0fc77e170f07", 0x4e}], 0x1, 0x74, 0x0, 0x0) eventfd2(0x9, 0x80001) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) fallocate(r9, 0x11, 0x0, 0x100000000007c000) 1m30.345351148s ago: executing program 1 (id=1700): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) mq_open(&(0x7f0000000000)='sit0\x00', 0x41, 0x9, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r4 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64=r4], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) 1m29.649440127s ago: executing program 1 (id=1702): syz_usb_connect(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120110013e083f10cc04332558fc010203010902240001050940190904a807020855fe180905eb02000402020509050412ff03080923"], 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f47"], 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002e40), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002ec0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002e80)=""/53, 0x35, 0x8, 0x6, 0x7, 0xb, 0x3}}, 0x120) semget$private(0x0, 0x3, 0x21a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff80, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x2c, r2, 0x1, 0x70bd28, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1e}]}, 0x2c}}, 0x0) read(r0, &(0x7f00000076c0)=""/252, 0xfc) 1m27.921457693s ago: executing program 1 (id=1704): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0xfffffffc}, 0x1c) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18) sendmmsg$unix(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000140)="822e38393caec80a", 0x8}], 0x1, 0x0, 0x0, 0x80}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x2, 0x40) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r3 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x0, 0x38}, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000000c0)={r6, 0x3, r0, 0xfff, 0x80000}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1m26.697443306s ago: executing program 1 (id=1708): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000700)='mm_lru_insertion\x00'}, 0x10) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x40, 0x3, 0x4, '\x00', 0x8}) (async, rerun: 64) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000680)={"1b4db8646c2c1008d7ca34ff9b7950e52da2b20ae65ee10eb481f3d43d6226cfe7ddebd1863266c895a51468666102f254abf26eefa360008f8c3d51a01c811ec7c3cd307ed1e6595c06461432fee6a0ceef0e98d32679133edf1b3ab58f20d622a2d4ba5f10bf95e2975b75d9f68008630a557264cbf307ca7e416c98493aeed24498ee2f6867fd6a6a91ff3fd03ea383f99c897498896b61bcae75d69b83a4f0a55e63ae9b70eb32ab600af7be63f8762e575bd964de889cc45fc0b5367b8bcb2f44e1a3bf9879b46f589419ba4ebab6e033863c0fd099cf2bb09bd0a8d75af115ea42963b1ec37b04c261db8a41e9bab68d2905b4c98167ec40927b0238835e2a41b48df887791f340d70cbd53a8a700916f91ca7f97a5bc90c9ba9d9d0063e55dcb8a4689eaf20c9fa96d02c7413c0f0d42cc1fa714bea3debfb15ee77b083205e62383f3ae2374c00a88bd2639f9b7c019ac3aa7dd993f2dd17db1b24c89c20e913f08f6015250b0c92143334e98dc29716cdf286a4ecf50d4d0fa74b135966d1295343ec49b527727f30d78faa8aa13a563fc6b4e972255427ce166bb22fd77aa6d57af7c3ef2de986ec610af32df260782b15f2b886135f5794049514cbb48929007f9c5d4f328cc3838b6bc91e2f539597c117e90e64cca839e426c1787bbe20131060c7c9e00344b0ff2fb7ffb1bb6e14596ea905329aa07f4d11d3786048990a0b2e7c9d6b752d4d4248e3a3f128d43ef6752b634fb4e6fa520c8d4959cdb0e7a22f4ebae181a76bb459d98d342010d4c14a87b71a2cbaf3a53ae31ff8d630391d6b8d782b17f7ea63bdb971a675f3fc0466aa88c1b925edbd2d7eec53e06dc6d3b355a3c8f178912b01516b4f2acf72d29e149618e049f53b021bc679941d4934ba1b4a015d73ae1299a0bf4bd4c0ccb3447cd5f278129bb2f6566d57d1b828262010f0b83a8626b4b63aa13d6f4ecd4f8e36a20a689f160c372d9502adbf88ebabd54fe288394d150df81e2126eef4f38766dc909f250cbd7a3e0db61e82feffbf8153a0640b787888a9ba140432b89d7bc1837856dadf33a4205d5d1569098545a155653d925fe2458802d0bc22fee993ca40fc2b2b63c9cd1413e8d3cb93d770299abbe3cea0490dc36e7de009bfb73cff7a6a7c524f430e4bef7876b74bf384c68b797c0745358ef59aad22dbe5029fd279b8bd93fa23e61be4b35b02eb847d86df963285fb28489e87034dfc15bf4e0f1fb0639a52613240a74707ce381082bede91aeb0766a4ec30c9ba65518bb7fa55835fc736226c21cc01dae0d0007967bc9d69b04e5fe5192d36ff19463a600b403cdd015a24a7d535a8b5160dd2e64b441ae9d7dd24af6c4f02d187ab20e9098cb5d2f98e09928665ff04a7a32e13c3c8e4e0fcffd9c6804df470d5d48b3e931a6a8c73222e42bb7"}) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x3c}}, 0x0) 1m25.855125611s ago: executing program 1 (id=1709): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) bind$inet6(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0xfffffffd) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x100000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xe}}]}, 0x2c}}, 0x4090) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000380)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0xc) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x98, 0x2) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000040) r6 = syz_open_dev$loop(&(0x7f00000002c0), 0xd1b8, 0x28c000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xfff3, 0x4}, {}, {0xe, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) ioctl$BLKIOOPT(r6, 0x1279, &(0x7f0000000400)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000040)={0x106, 0xb5315258, 0x2, @discrete={0x9, 0x1}}) socket$inet6_udp(0xa, 0x2, 0x0) 1m25.055917087s ago: executing program 1 (id=1712): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x6}}}}}) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac14"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda9880000000018"], 0x40}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77f000513c180fd2493ab7a39917bc3c", 0x17, 0xfffffffffffffffe) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x10000, 0x3, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000003c0)=""/133, 0x85}], 0x1, 0x3, 0x1) 1m20.846365162s ago: executing program 35 (id=1689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x1b) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x600000000000000, 0x0, 0x0, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bridge_slave_0\x00', 0x401}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, &(0x7f0000000080)="360f231b66b80500000066b94d2800000f01d9e32f66b80500000066b9050000000f01c1366566f20f2b5b00ea00908a00baf80c66b8baf0488066efbafc0cb80008ef0f015f023e0fc77e170f07", 0x4e}], 0x1, 0x74, 0x0, 0x0) eventfd2(0x9, 0x80001) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) fallocate(r9, 0x11, 0x0, 0x100000000007c000) 1m9.055966099s ago: executing program 36 (id=1712): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x6}}}}}) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac14"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda9880000000018"], 0x40}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77f000513c180fd2493ab7a39917bc3c", 0x17, 0xfffffffffffffffe) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x10000, 0x3, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000003c0)=""/133, 0x85}], 0x1, 0x3, 0x1) 30.441574318s ago: executing program 3 (id=1845): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000180)={&(0x7f0000000080)=""/136, 0x88}) ptrace$setregs(0xf, r3, 0x9, 0x0) syz_emit_ethernet(0x107e, &(0x7f0000004a40)={@local, @local, @val={@val={0x88a8, 0x4, 0x1, 0x4}, {0x8100, 0x3}}, {@mpls_mc={0x8848, {[{0x5, 0x0, 0x1}, {0x2}, {0x5}, {0x80, 0x0, 0x1}, {0xa, 0x0, 0x1}, {0x4}, {0x400, 0x0, 0x1}], @ipv4=@tcp={{0x5, 0x4, 0x3, 0x2d, 0x104c, 0x68, 0x0, 0xe0, 0x6, 0x0, @empty, @empty}, {{0x4e23, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x4, 0x401, 0x0, 0x100, {[@timestamp={0x8, 0xa, 0x6f7, 0x1}, @exp_smc={0xfe, 0x6}, @mss={0x2, 0x4, 0x1}, @timestamp={0x8, 0xa, 0x0, 0x4}, @sack={0x5, 0x2}, @mptcp=@mp_join={0x1e, 0x3, 0x2}]}}, {"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"}}}}}}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x80000001000000) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) r8 = fsopen(&(0x7f0000000a80)='debugfs\x00', 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r10 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/asound/card1/oss_mixer\x00', 0x242, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES16=r10, @ANYRES16=r7, @ANYRESOCT=r1, @ANYRES32=r9, @ANYRES8=r6, @ANYRES8=r4, @ANYRESDEC=r7, @ANYRESHEX], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x10801) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) sendmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)='o', 0x1}], 0x1}}], 0x1, 0x44810) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 27.817267848s ago: executing program 3 (id=1853): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@gettaction={0x24, 0x32, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070001000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340400000c0a875c0000000000000000070000090900020073797a31000000000900010073797a300000000044000380400000800c000440fffffffffffffffb30000b802c000180090001006d657461000000001c000280080003400000000908000240000000050800024000000002b8030380800100805c0001803000028008000180ffffffff0900020073797a32000000000800034000000001080003400000000108000340000000021b000100de82a37549502952450a925dbbd88d4de62de94ca42c4c000c0002800800034000000001f00002801c00028008000180ffffffff08000180fffffffd08000180ffffffff3400028008000180fffffffc080003400000000208000180fffffffe0900020073797a31000000000900020073797a31000000009c000100d9bf563b8d0c1a46f069c85bae722c96e531978268bfd971e5b0f4d2bf46348fcfde4a02d6e550165d79b5d30ea310e9696845e4ba5cfd542eccba971d5dd5c6d4f8ed92c7b196901aeb47262dcbad474daa6e6050a146422206819e05fe2bb6248a69a2b7cd13738211899851af1ab24d80190affbe9d6b8f385d046bd40f50b813e4e77327057a247f24cd35de5da71a6e7e28cb468f1e0c0004400000000000000056080003"], 0x4b8}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000640)="180c4552c833a71dbd2856acd9e40e8e22e6cd41f172fb718d598a15f9acafc9ecf00db6b389e5c1c20d3980b7cd69ce51177964ed41cd5320877f7032e59091aa83343580c4ec22834b8ad6e92040bbd2467c6b283e2e1976ed46b72c6a61b5eaccf19c45faa2371026c3a4b7ab81e14b3730ad8ca64b196e6e0cee54e9e13fdeea8926bfe689c92087f45af2617790294538d36133a65ebf218a23843a1364b524b53b26612d891344325c9171b9dde02a248572b54964721e3a00dcd42f61f84b3817344f9aeaede2b85fc19802bbf3fc23", 0xd3) (async) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000340)={r4, 0xfffffffc, {0x2a00, 0x80010000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, "fee8a2ab78fc979fd1e00d96072000005d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00003c5240f45f819e01177d3d458dd4992861ac00", "90be65002d849b00929e9311b6c3cca5c61600", [0x0, 0x8000000000000001]}}) 27.373449074s ago: executing program 3 (id=1854): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, &(0x7f0000000200)}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={0x0, 0x80}, 0x1, 0x7}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="f80200003e000701feffffff000000000d7c0000040042800c00018006000600800a0000d40202800c00178005000180ed000000c402508008000300", @ANYRES32=0x0, @ANYBLOB="0c004400fcffffffffffffff7dda1a9ce64a405650f0b61ec5b9c1c95786adbe77d46d7fd670d46b8ce7f1ea0773c5992d46aba785b777faba5554327e5cc069aefa1db0a09cc24a768400dee37920c9f80c5400997596f00c58161d5d48039eaddbadb232c83ef3b46d28ed0e004c707b3f1c1c9edf93b1ca660eeb33dcd918efacb4ec4a5b85770db325cc00ac078f901d9ad09d47c124dff30739add5e922c3fb7446d23130a6c9cf23865eb6849df4722edd39677e9d37428d208e7ba5a587b407c67733a87bc38812d24b8047d8faf38b79ac0fbe6cd500ac8008003900", @ANYRES32=0x0, @ANYBLOB="ed41867163e395dea7dbeb4e9a52f3e6a5b6e032b943f6e2cb27e50fcd1cea71561a988aae80a32be5d0bfccd5de59629da339d3ca46c5db371b959f68ef5528ece4c0c9c3a046af8e07753031fe7bf5517f5912ee6b7912301630fbb1422a6542a861c9375f00174f77370a9837af6feba0e8b8d558f947f6fe25a5759a358593a8bcf2b6e4faad68f2e6784973988c3f6eb783cd07a45e9d8323", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="040057"], 0x2f8}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setgroups(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_setup(0x0, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0xfdff0018) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100008fcc0920e80401a18e800102030109021b0001000010000904810001ffef980009050602ff751403000000"], 0x0) fcntl$notify(r8, 0x402, 0x20) getdents64(r7, 0xffffffffffffffff, 0x43) 22.306196082s ago: executing program 3 (id=1870): syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101d2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a090582020002000110"], 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @fd, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001ac0)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="201883000000b29b"], 0x0, 0x0, 0x0, 0x0}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400040, 0x0) 20.14962497s ago: executing program 3 (id=1875): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f700", 0x2e}, 0x48, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_IOVA_RANGES(r1, 0x3b84, &(0x7f0000000180)={0x20, r2, 0x1, 0x0, &(0x7f0000000600)=[{}]}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r3, 0x4610, &(0x7f0000000000)={0x9}) r4 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="03dd"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r4, 0x81, 0xfffffffffffffd77, &(0x7f0000000000)="00012c61020000001c11447298a9538f168516ff037f291e463685b0139216171afd0eafbd9c28d93b8b8fbdd59f3d473eb9d29d3de65dea17") 17.904230447s ago: executing program 3 (id=1877): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x6000) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8005b}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000020800000280012800b00010067656e65766500001800028014000700fe88"], 0x5c}}, 0x4014) 17.649336439s ago: executing program 9 (id=1878): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x3}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') pread64(r4, &(0x7f0000000280)=""/70, 0x46, 0xbbf9) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) close(r0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) r6 = socket(0x11, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000004200)='net/ip_mr_cache\x00') read$FUSE(r7, &(0x7f0000000240)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) semtimedop(0x0, &(0x7f0000000180)=[{0x3, 0x1}], 0x1f4, &(0x7f0000000240)={0x0, 0x989680}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r6, &(0x7f00000001c0)={0x11, 0x0, r9, 0x1, 0x2, 0x6, @broadcast}, 0x14) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x0) socket$kcm(0x10, 0x2, 0x0) 16.23262865s ago: executing program 9 (id=1883): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a80)=ANY=[@ANYBLOB="1201000801e44120b8040202b7330102030109021b00020c6110070904ad0400a7afde0d0904ad06000efaf0ff"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_disconnect(r0) (async) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xc01, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x2, 0x1}, 0x8) (async) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af83, &(0x7f0000002740)) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4080}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="140000000820000000000000", @ANYRES32, @ANYBLOB="1706ce9053ef2aeb8d61ac4f86bc123d4aac1f1ba9045d7720277dc373eaa0a576e53035c14bc52473dab29cca25e1d12e9feab2207f942a65c82738063aca7afed1feca1b146b8fa9a86935b39fb5eaef39a417950660a02146614b7773b3daf0d5e391d77a0336e0fe2e54f098cc37eed887f5e1e60cb026f95f3714af3ebc4f7fd5801d82f7a69f66c47b758b53cf51f246", @ANYRES64=0x0], 0x20) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0xfb, 0xc0, 0x56, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "545e9c25e5"}, {0x5, 0x24, 0x0, 0xf73e}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x0, 0x6, 0x2}, {0x6, 0x24, 0x1a, 0x348}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x5, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x9, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x7f7, 0x1, 0x2d, 0x6}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000040)={0xa, 0x6, 0xc1, 0x40, 0x28, 0xe, 0x20, 0x6}, 0x170, &(0x7f0000000500)={0x5, 0xf, 0x170, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0xe1, 0x2, 0x0, 0xff00, 0xdc1, [0xc000, 0xc030]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0xdc, 0x4, 0x7fff, 0x3a}, @generic={0x92, 0x10, 0x1, "935f05043355586fd73381adb5ac87e39f22af167b2f1832bb80231f9a10b585ade44631b5886a1e9dc0c34eea37189d898fdb13a4d21eb40de6b3fb4baae23ec05991694340de2a38d9194d4f3231d980925edc01d88c24c29b6e3c16818bc2c6530c24c03995a15dacf3945fce676a7dd94fb22b747781f7695fbf677fada62791e012e07d1cbffb05cb422b063b"}, @generic={0xba, 0x10, 0x2, "95e2ada2410fe6a89b99622b1b8e67c3dd9ecfaa70c84b138207260cb073a2df2b81cca166daf74d4fa99fcffb62ac4fb1ce90c6e1a4dc730e626d774ffdca7b66881d2424a2073944a14e45dd84826c3893dbb793a9586063ba98eabdde3edcb9a0fe96e5a799fad52fe6ab2c6273c7c3f396176d76581191d3a36658b1ba852fa27301a539e5b7e9a74f68d22203ac44c2091c1f7361adfb21f591c8527b7f67a9130e964f853cfa876c9b67f18421b4d257ec1bf59c"}]}}) (async) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x50, 0xffffffffffffffff, 0xbf000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000002006b0134000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201500219107908e8048968cd2b0102030109029424c04f688436c66b12000101ff12020904418b00ffffff04"], &(0x7f00000003c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0xa, 0x1, 0x3, 0x40, 0x18}, 0x0, 0x0}) ioctl$KVM_SET_IRQCHIP(r10, 0x4048aec9, &(0x7f0000000ac0)={0x0, 0x0, @ioapic={0x4, 0x1, 0xfffffffd, 0x15eb95fb, 0x0, [{0x8, 0x7, 0x2, '\x00', 0x85}, {0x7, 0x80, 0x7, '\x00', 0x4}, {0x3, 0x0, 0x6, '\x00', 0x4}, {0x8, 0x6, 0x40, '\x00', 0x9}, {0x1, 0x4, 0x4, '\x00', 0x10}, {0x8, 0x6, 0x0, '\x00', 0x2}, {0x5, 0x7, 0x3, '\x00', 0x4}, {0xb4, 0x3, 0x7f, '\x00', 0x9}, {0x80, 0x3, 0x7, '\x00', 0x4}, {0x9, 0x3, 0xa, '\x00', 0x17}, {0x10, 0x33, 0xde, '\x00', 0x2}, {0x0, 0xa3, 0x3, '\x00', 0x4}, {0x6, 0x9, 0x6, '\x00', 0x4}, {0x20, 0x9, 0x10, '\x00', 0x7}, {0x6, 0x1, 0xcd, '\x00', 0xc}, {0x8, 0x5, 0xf6, '\x00', 0x2}, {0x9, 0x2, 0x1, '\x00', 0x52}, {0x10, 0x5, 0xa0}, {0xca, 0x2, 0x4, '\x00', 0xe6}, {0x50, 0x7, 0x44, '\x00', 0x2}, {0x8f, 0x5, 0x0, '\x00', 0x1}, {0x6, 0x0, 0x5, '\x00', 0x3}, {0x40, 0xe, 0xa, '\x00', 0x1}, {0x9, 0x5, 0x1, '\x00', 0x7f}]}}) (async) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000100001c0"]) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 13.545970039s ago: executing program 9 (id=1889): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) (async) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) (async) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x0, 0x0) getdents64(r5, &(0x7f0000001f00)=""/4111, 0x100f) ioctl$PPPIOCSMRU1(r5, 0x40047452, &(0x7f0000000040)=0x3) (async) ioctl$PPPIOCSMRU1(r5, 0x40047452, &(0x7f0000000040)=0x3) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a010200000000824952588513f8d2fabd35a4add5bc6400000000020000200987020073797a310000000008000440000000000900010773797a300000000008000340004e28929f00000a14000000"], 0x64}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a010200000000824952588513f8d2fabd35a4add5bc6400000000020000200987020073797a310000000008000440000000000900010773797a300000000008000340004e28929f00000a14000000"], 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 12.928810868s ago: executing program 8 (id=1891): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000000c0)={'bridge_slave_1\x00', {0x2, 0x0, @multicast2}}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f00000001c0)=""/4103, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0xfffffff8, @loopback, 0x401}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3}, 0x94) io_uring_enter(0xffffffffffffffff, 0xeb6, 0x26f7, 0x1c, &(0x7f0000000100)={[0x1]}, 0x8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000001f00)=""/4093, 0xffd) openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) 10.381450607s ago: executing program 8 (id=1894): r0 = inotify_init() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0xc3a01, 0x0) sendfile(r3, r0, &(0x7f0000002700)=0xfffffffffffffffd, 0x8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2982, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x11) socket$packet(0x11, 0x3, 0x300) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x68, r2, 0x213, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x86, @link='broadcast-link\x00'}}}}, 0x68}}, 0x4000080) lchown(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xee01, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0xb) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x0, 0x2, 0x45, 0x0, "00000000000000000000000000000000000000f300000000000000000000000000000000350d0000000000000000000083c0d55760b2d13d000c00cbcd00800000000000000000080000008000"}, 0xd8) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, &(0x7f00000000c0)=""/111) syz_usb_connect$uac1(0x0, 0x9c, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0xf, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x6}, [@feature_unit={0x13, 0x24, 0x6, 0x1, 0x3, 0x6, [0x8, 0x8, 0x1, 0x0, 0xa, 0xa], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xfd, 0x1, 0xff, 0xad}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x9, 0x2, 0x3d}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x6, 0xb0, 0x5, {0x7, 0x25, 0x1, 0x2, 0x3, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x4, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x40, 0xfb, {0x7, 0x25, 0x1, 0x0, 0xed, 0x1}}}}}}}]}}, 0x0) read$FUSE(r5, &(0x7f0000001fc0)={0x2020}, 0x2020) 9.849313892s ago: executing program 9 (id=1897): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, &(0x7f0000000200)}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={0x0, 0x80}, 0x1, 0x7}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="f80200003e000701feffffff000000000d7c0000040042800c00018006000600800a0000d40202800c00178005000180ed000000c402508008000300", @ANYRES32=0x0, @ANYBLOB="0c004400fcffffffffffffff7dda1a9ce64a405650f0b61ec5b9c1c95786adbe77d46d7fd670d46b8ce7f1ea0773c5992d46aba785b777faba5554327e5cc069aefa1db0a09cc24a768400dee37920c9f80c5400997596f00c58161d5d48039eaddbadb232c83ef3b46d28ed0e004c707b3f1c1c9edf93b1ca660eeb33dcd918efacb4ec4a5b85770db325cc00ac078f901d9ad09d47c124dff30739add5e922c3fb7446d23130a6c9cf23865eb6849df4722edd39677e9d37428d208e7ba5a587b407c67733a87bc38812d24b8047d8faf38b79ac0fbe6cd500ac8008003900", @ANYRES32=0x0, @ANYBLOB="ed41867163e395dea7dbeb4e9a52f3e6a5b6e032b943f6e2cb27e50fcd1cea71561a988aae80a32be5d0bfccd5de59629da339d3ca46c5db371b959f68ef5528ece4c0c9c3a046af8e07753031fe7bf5517f5912ee6b7912301630fbb1422a6542a861c9375f00174f77370a9837af6feba0e8b8d558f947f6fe25a5759a358593a8bcf2b6e4faad68f2e6784973988c3f6eb783cd07a45e9d8323", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB], 0x2f8}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setgroups(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_setup(0x0, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0xfdff0018) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100008fcc0920e80401a18e800102030109021b0001000010000904810001ffef980009050602ff751403000000"], 0x0) fcntl$notify(r8, 0x402, 0x20) getdents64(r7, 0xffffffffffffffff, 0x43) 7.761509533s ago: executing program 2 (id=1899): syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') r0 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffdfc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) (async) sendmsg$nl_route(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@newnexthop={0x40, 0x68, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x3, 0x0, 0x10}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@mcast1}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @multicast2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008041}, 0x20040000) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) umount2(&(0x7f0000000180)='./file0\x00', 0x8) 7.144475315s ago: executing program 2 (id=1903): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) (async, rerun: 32) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) (async, rerun: 32) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x8301, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4}) (async, rerun: 64) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) (async) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[], 0x0) (async, rerun: 64) r3 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x7, 0xc82) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f00000002c0)={{0x7, 0x56}, 'port0\x00', 0xec, 0x71024, 0x101, 0x80000001, 0x72, 0x5, 0x0, 0x0, 0x9, 0x1}) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000001e40)=ANY=[], 0x48) (async) ioctl$SIOCSIFHWADDR(r4, 0x8b0f, &(0x7f0000000140)={'wlan1\x00', @random="0300000000eb"}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) (async) r6 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async, rerun: 32) socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) shutdown(r4, 0x0) (async, rerun: 64) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) (rerun: 64) close_range(r7, 0xffffffffffffffff, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r5}}, 0x48) 6.5295242s ago: executing program 8 (id=1904): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="00130d00000054fa68fe66e9ce8ef9694d067e"], 0x0, 0x0, 0x0, 0x0}) (async) r2 = dup(r0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0xffffffffffffffff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x0) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) (async) r5 = socket$can_raw(0x1d, 0x3, 0x1) unshare(0x22020600) (async) r6 = dup3(r4, r5, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x30, 0x0, 0x0) (async) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) (async) migrate_pages(0x0, 0x3, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x13a) 6.145937355s ago: executing program 7 (id=1905): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x0, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000095}, 0x4009) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047459, 0x0) 5.478555089s ago: executing program 9 (id=1906): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) rename(&(0x7f0000000240)='./cgroup\x00', &(0x7f0000000280)='./cgroup\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000001bc0)=0x2, 0x4) r5 = socket(0x1e, 0x4, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x70000, 0x0) lseek(r6, 0x7, 0x1) connect$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14fdff00", @ANYRES16=r8, @ANYBLOB="0100000000000000000007000000"], 0x14}}, 0x0) sendfile(r5, r4, 0x0, 0x8010002b) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400f73660ce121046b16f94e307000000000000", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 5.457419138s ago: executing program 7 (id=1907): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000000), 0x9, 0x8200) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x9c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0xb, @mcast1, 0xc1c}, @in6={0xa, 0x4e20, 0x45337572, @mcast1, 0x1000}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0x7, @remote, 0xb8b}, @in6={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00', 0x2}, @in6={0xa, 0x4e24, 0xd7, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000180)={r6, 0x8001}, 0x8) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000280)=@urb_type_iso={0x0, {0x1, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1, 0x3, 0xf, 0x0, [{0x3, 0xffffca76, 0xabad}]}) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETDEBUG(r8, 0x400454c9, 0xffffffffffffffff) ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120110013e083f10cc04332558fcb1b548130902240001050940190904a807020855fe980905eb02000402020509050412ff09000923"], 0x0) 4.885614997s ago: executing program 2 (id=1908): inotify_init() r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r2 = fanotify_init(0x200, 0x0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x10d) fanotify_mark(r2, 0x201, 0x4800003e, r1, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000005340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000540)=""/6, 0x6}, {&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f0000000740)=""/158, 0x9e}, {&(0x7f00000005c0)=""/43, 0x2b}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000800)=""/93, 0x5d}], 0x6}, 0x7}], 0x1, 0x40010020, 0x0) 4.67059902s ago: executing program 2 (id=1909): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a010203010902"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x1, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005e40)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xe, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x2, 0x9, 0x3, 0x2, 0x6}, {0x0, 0x1, 0x0, 0x6c, 0x3, 0x4}, 0x0, 0xa, 0x1cfc}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe9ead2c49063e28e}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x127000, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0x10}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x10, 0xf}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008cc}, 0x20004804) 3.295300187s ago: executing program 8 (id=1910): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010c410cf8a000000000001090224000100000000090400000203000000092100000001220500090581030000000000963a94591fd24aaa815eb771419b331a49b5b756eaf2f660f6e4bc41581c7bbca4bf3a4a9de81090ca2da04a7302d05b4d11fecae20be7e7049dac60572020af0683519377bf6572010623773cc1dbeaaf51115243cc0d076de23caccebe3344db3f7dbe9eb1d85c5c8128eae3d4f2b60df63a681b516a0dd7ac273ecb94547dec2d12eba33f61c3c6f6157f78f4f825cc755d6580bd258dd3e690"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="0986cf8824b585290000003000efd3f2d0c525fc8780a6dabdd3e44ab3109bbe5be405009de345257764040000000000000000000000184a4aacc85dab98859e28edf39b1ff879d4feadf05712852e33"], 0x0}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) userfaultfd(0x80801) syz_open_dev$char_usb(0xc, 0xb4, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x63dd, &(0x7f0000000400)={0x0, 0xd522, 0x800, 0x1, 0x201a8}, 0x0, &(0x7f0000000300)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005e0001000000dbdf2508000000010000000400658b000000"], 0x1c}], 0x1}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) fsopen(&(0x7f0000000200)='openpromfs\x00', 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'pimreg0\x00'}) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000240)={0x3, &(0x7f0000000080)=[{0x28, 0xa9, 0x0, 0xfffff034}, {0x48, 0x0, 0x2}, {0x6, 0x37, 0x2, 0x9}]}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) 2.520049491s ago: executing program 37 (id=1877): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x6000) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8005b}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000020800000280012800b00010067656e65766500001800028014000700fe88"], 0x5c}}, 0x4014) 2.140540434s ago: executing program 2 (id=1912): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x1, 0x28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfc}}, 0x82}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0acadc1f9440b6c3c85a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000001200", [0x0, 0x2000000000001]}}) 2.135235845s ago: executing program 7 (id=1913): socket$inet6_sctp(0xa, 0x801, 0x84) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) exit(0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r5 = fanotify_init(0x200, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) fanotify_mark(r5, 0x401, 0x40001008, r6, 0x0) (async) syz_clone(0x104000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x130) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) brk(0x400000ffc000) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0x0) 1.755132067s ago: executing program 7 (id=1914): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@deltaction={0x224, 0x31, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x685a}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}]}]}, 0x224}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x38, 0x2c, 0x800, 0x70bd28, 0x25d7dbfd, {0x0, 0x0, 0x0, r3, {0xa, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40010) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 1.724765282s ago: executing program 2 (id=1915): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x44, r4, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="94000000", @ANYRES16=r4, @ANYBLOB="04002abd7000fcdbdf2506000000050005000000000008000200020000001c0006800800060008000000060001000200000008000300ffffffff54000180080003007f0000010400fe80000000000000000000000000000000000000000000001206000100020000000800030064010102080006001f00000008001300e00000010000"], 0x94}, 0x1, 0x0, 0x0, 0x404c010}, 0x24040013) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008052}, 0x4000050) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x4, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20048000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r8, 0xc01064ab, &(0x7f0000000240)={0x6}) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000575c820490d00702f260102030109021200010000008309040000000e01"], 0x0) 961.419999ms ago: executing program 7 (id=1916): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f00000000c0)=0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'veth0_vlan\x00', @random="0134014010ff"}) 714.162297ms ago: executing program 9 (id=1917): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x64, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x2, 0x4, 0x7, 0xfff8}, {0x9, 0x1, 0x7, 0x1000, 0x4}, 0x1, 0xf6, 0xd28}}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x1, 0x6, 0xa, 0x2, 0x1}, {0x5, 0x0, 0x7, 0xb, 0xfd89, 0x6}, 0x9, 0xb, 0xf1}}, @TCA_TBF_BURST={0x8, 0x6, 0x9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1ce4}]}}]}, 0x90}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 666.926652ms ago: executing program 7 (id=1918): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, 0x0) r2 = socket(0x1e, 0x4, 0x0) (async) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x9}, 0x10) (async) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) r5 = syz_io_uring_setup(0x239, &(0x7f00000003c0)={0x0, 0x5dfc, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) (async) vmsplice(r4, &(0x7f0000002600)=[{&(0x7f0000000380)="88", 0x1}], 0x1, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) (async, rerun: 64) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async, rerun: 64) r8 = dup3(r3, r2, 0x0) recvmmsg(r8, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) (async, rerun: 64) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (rerun: 64) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008702"]) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'veth0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f00000000c0)={0x1, [0x0]}) 165.354653ms ago: executing program 8 (id=1919): fsopen(&(0x7f0000000180)='nfsd\x00', 0x0) close(0x3) (async, rerun: 32) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) (rerun: 32) fcntl$setsig(r0, 0xa, 0x21) (async) fcntl$setlease(r0, 0x400, 0x1) (async, rerun: 64) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async, rerun: 64) unshare(0x6a040000) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001ac0)={'ip6tnl0\x00', &(0x7f0000001a40)={'syztnl2\x00', 0x0, 0x4, 0x97, 0xf0, 0x80000001, 0x25, @loopback, @loopback={0xff00000000000000}, 0x7800, 0x7800, 0x4, 0x5}}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0xfffffff9}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x6}]}}]}, 0x40}}, 0x40000) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0xa0, r3, 0x2, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x42044) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) (async) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0x0) (async) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async, rerun: 64) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) (rerun: 64) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) (async, rerun: 32) r5 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) (async, rerun: 32) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async) close_range(r0, r5, 0x2) (async) r7 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000b10b5103a09222689b7010203010902450001000000000904"], 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000300000000000000010000000000008005000000000000000080000000000000040000000000000002000000000000000000000000000000000000000000000004010000000000000000000000000000013000000000000000000000000000000000000000000000000000000d100000000000000000000000000000dc0800000000000023080000000000000200000000000000000000000000000000000000000000008820000000000000000000000000000002000000000000000100000000000000060000000000000000000000000000000000000000000000800000000000000000000000000000004b000000000000000010000000000000ff00000000000000000000000000000000000000000000000115008000"/312]) (async) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$printer(r7, 0x0, 0x0) (rerun: 64) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x4c, 0xf, 0x6, 0x385, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x24004884) 0s ago: executing program 8 (id=1920): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000b00)=0x4, 0x4) sendmmsg$inet6(r0, &(0x7f0000000d80)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)="58cae8e001dab3dfe442b3960c682276cbf2c53aa9576c2ac968744d865ebf101f4ad67bb742401a2b6a83ebc178d0399ad260132a3ef9bcbeb0073270c7fc27b9db740ba64b585a72", 0x49}, {&(0x7f0000000280)="546860645c3b318a9f8a86d3aaaaeb85fca7e8178de2ca294dc8bcfbcef9a61d9ec4f63ba5092c0dc6ed9940fa34f8fd74f08411397e66e24498bcd0f95e3397845fe1ad167a6a8e2a5ec5570f09a2823afd673c7617396202014c0e969a07993ed25b8835721a71f77c51ede4d0fb310f3c209d1fc3f21b58efb2d43dee772afe7a5e7ce1b4d6d6aac78e78658079ed608784cbfa92c7b8b8b7f4a07a84787e0cd452f3e8e3fb51", 0xa8}, {&(0x7f0000000340)="c4d139d9468acf0c7db12d3c6d76bfbf86c6a2f5bc123820c979e9d0a954bb751ad58e7b50f6b633c8987f23069ce2c8e9f63dcc2df93fb85219a0fdeca5d422230a6a7aee2ca24d1316636b17e69961f8640171061c45b4865c8380e855418cd8525f809808213bb399d83369a0690ce54b448edcab36b697ff22b3", 0x7c}, {&(0x7f00000003c0)="fe5ec10f4c15d7e554a2498883fd4f57efaf7a2ee6e5a83bbc235416bccc541e35e8ee16bc555a8dc710a4e958c87321018739ae41b5dc4d4a2b74b5a6e2fcfef1f7949ed4c726e5b38624b0e5ec638878430ecb3779c9b9df6292b4fdec2bccb40522a782bb7f73d7c5b8785d274831eb8f60f81f961349e59db8b98c5ef840053270e78072f119394fc62e91d59b613f3dd38911b36987cc1c20f605dfdaf45778bda52d6fd2fc57f38ed31d6193115c6445728ab81e7c46f9d71ba98f911116faf0d6b21831d869755e39d915404a15479c21a678b4e96ada", 0xda}, {&(0x7f00000004c0)="048174a51aae5a3beefc468f393c67c39bec4ef5fac82b735d43ca931fc4a19cdeedef6ba55c64d8b327edf9d81a4d1e76179c762efbaa1f76ea0f929b0647340482c7b7aba2e7c259b4e2077cae89e7d802729e495372f887e42c5297789303b4f9", 0x62}], 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000002900000004000000010000000000001504010607000000000300040125090000000000005e4e00190000000000000000002900000032000000", @ANYBLOB], 0x11}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)="8df91cf38d6310b5a1b31262d1cc717c5d70a9d5a685e0bbcff433f35705f3d1d63986e145a9a61f8207399ddb8072e3e9106c1d80d734feee77952e07101eeb4de4bf9514833a538c8e60e659bd0fe68176683148c1661b07ec0f0323c4073a470f6a6d740ec6c0780ae5bb7e1106238476192229900b631242cb3e7fa6d7e5a8718a5d186b79069ad507f3f2983ba7e0a9ead6c2c3fe26f6071d2dcd657a2cb91da804080e3a3f8bfd96de2965dac5fecaeb7a19c297c62acae1336cc1df69edfe2de75a379d9a359a62b07b87785fc53ae51bc348d6", 0xd7}], 0x1, &(0x7f0000000780)=ANY=[], 0x190}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000940)="c032ca785ad58e293d48bee356b78acc66bf215c2c84c551d7e00e483175b483b8d9c817fda75a705a5b05d3db72fc70d7657c398cbc197f705f61d4a34c0017c30705ecf4f5919c9bacfdb740b6bbb2e78cf5a573c2f4d35cd3511f2e873021303266c20e76e1ba3fb57784e109990fa185d8e8b3d7a04c4bc91e8dfc07d51e270021101ff2e637571c15f453f96f2045f84c3aaf076f4b3f78f4b34d5fb407a03d1fede5cf88eec2e413c00273b4938034c9b81558531969d05799d0ac7b450122efeb4c13fe6657c5e610eb845cce3347fa3fbe5f5d022cae0ed36e785a14ebd96d6d80efac7bf19e3f70d56c", 0xee}, {&(0x7f0000000b40)="614e31b96a602648a599d7878ee6b57b52a54580cea5c70f167e61ae3f43d19cde4ba74c66d9c94769fa550ae566f841d5f650aff04b884fcb4bbb76ab7104bfde5045461c1e04fad27a1a9ea4cbf66645dac183786e9b142f4997f6ed6ce0b2f2bf7c17b56f957e6b819ce6544dd40e61c122bbb70aefb9642293d2abbadf22d4b1c6d503fe4e7a0bacfa091359e95f4b86a6f93d65eee08ae30421a155cd4e49950b4fe20a343772dd471bcdc39fde473fc297c4939474eaef5e54c695a8ff5b3149329a25fdf567fa540a6b7ed9385dee3d8bf8553f0c40795ca4c12efa02c56df36dade3", 0xe6}, {&(0x7f0000000a40)="680482931484c125f330a25ae5affc52be032ca0eb1271578bc99da2deff305ff57803727f3eae59b365c17f09237a5bc82482ea9aa81ca4abeadb7b1ab91e32ed7adfead664acc626ccb35a7b08c1fe3081", 0x52}], 0x3}}], 0x4, 0xc040) kernel console output (not intermixed with test programs): r [ 641.042197][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.076660][ T5932] usb 4-1: config 0 descriptor?? [ 641.114497][T15891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.126179][T15891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.231076][T15883] tipc: Disabling bearer [ 641.357505][T15890] netlink: 'syz.5.1599': attribute type 11 has an invalid length. [ 641.516849][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 641.516871][ T30] audit: type=1326 audit(1755148048.945:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.7.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b2b8ebe9 code=0x7ffc0000 [ 641.528101][ T5932] ft260 0003:0403:6030.001C: unknown main item tag 0x7 [ 641.560690][ T30] audit: type=1326 audit(1755148048.945:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.7.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b2b8ebe9 code=0x7ffc0000 [ 641.693064][ T30] audit: type=1326 audit(1755148049.065:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.7.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f72b2b8ebe9 code=0x7ffc0000 [ 641.716709][ T30] audit: type=1326 audit(1755148049.075:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.7.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b2b8ebe9 code=0x7ffc0000 [ 641.740360][ T30] audit: type=1326 audit(1755148049.075:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.7.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f72b2b8ebe9 code=0x7ffc0000 [ 641.742875][ T5932] ft260 0003:0403:6030.001C: failed to retrieve chip version [ 641.781404][ T5932] ft260 0003:0403:6030.001C: probe with driver ft260 failed with error -71 [ 641.787631][ T30] audit: type=1326 audit(1755148049.075:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.7.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b2b8ebe9 code=0x7ffc0000 [ 641.818191][ T5932] usb 4-1: USB disconnect, device number 110 [ 641.818199][ T30] audit: type=1326 audit(1755148049.075:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.7.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b2b8ebe9 code=0x7ffc0000 [ 641.818251][ T30] audit: type=1326 audit(1755148049.075:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.7.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72b2b8d550 code=0x7ffc0000 [ 641.944001][ T30] audit: type=1326 audit(1755148049.075:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.7.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f72b2b8e7eb code=0x7ffc0000 [ 641.967304][ T5950] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 642.059077][ T30] audit: type=1326 audit(1755148049.075:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.7.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f72b2b8e7eb code=0x7ffc0000 [ 642.184460][ T5950] usb 8-1: device descriptor read/64, error -71 [ 642.426337][ T5950] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 642.576368][ T5950] usb 8-1: device descriptor read/64, error -71 [ 642.613402][T14045] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 642.722571][ T5950] usb usb8-port1: attempt power cycle [ 642.794757][T14045] usb 3-1: Using ep0 maxpacket: 16 [ 642.830847][T14045] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 642.856950][T14045] usb 3-1: config 0 has no interface number 0 [ 642.881637][T14045] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 642.909267][T14045] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 642.972994][T14045] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 642.988497][T14045] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 643.002868][T14045] usb 3-1: Product: syz [ 643.012235][T14045] usb 3-1: SerialNumber: syz [ 643.051768][T14045] usb 3-1: config 0 descriptor?? [ 643.067014][T14045] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 643.083599][ T5950] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 643.092637][T14045] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input39 [ 643.136296][ T5950] usb 8-1: device descriptor read/8, error -71 [ 643.352383][T15900] netlink: 'syz.2.1603': attribute type 11 has an invalid length. [ 643.473812][ T5950] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 643.507633][ T5950] usb 8-1: device descriptor read/8, error -71 [ 643.866902][ T5950] usb usb8-port1: unable to enumerate USB device [ 644.016363][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 644.026189][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 644.033770][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 644.040989][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 644.048841][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 644.056701][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 644.065540][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 644.073368][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 644.080972][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 644.089520][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 644.123735][ T5932] usb 3-1: USB disconnect, device number 105 [ 644.123851][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 644.154187][ T5932] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 644.543617][ T981] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 644.663032][T15924] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1610'. [ 644.721826][ T981] usb 6-1: Using ep0 maxpacket: 8 [ 644.758950][ T981] usb 6-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 644.776011][T15924] bridge1: entered allmulticast mode [ 644.890893][ T981] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 644.927432][ T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.561094][T15937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1612'. [ 646.896415][ T5950] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 648.910442][T14045] usb 6-1: USB disconnect, device number 107 [ 649.201773][T15966] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1618'. [ 649.334041][T14045] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 649.523483][ T5992] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 649.539217][T14045] usb 4-1: Using ep0 maxpacket: 16 [ 649.571317][T14045] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 649.587483][T14045] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.683577][T14045] usb 4-1: Product: syz [ 649.717779][T14045] usb 4-1: Manufacturer: syz [ 649.747726][T14045] usb 4-1: SerialNumber: syz [ 649.753922][ T5992] usb 6-1: Using ep0 maxpacket: 16 [ 649.782027][ T5992] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 649.809264][T14045] r8152-cfgselector 4-1: Unknown version 0x0000 [ 649.820085][ T5992] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.834307][T14045] r8152-cfgselector 4-1: config 0 descriptor?? [ 649.847546][ T5992] usb 6-1: config 0 has no interface number 0 [ 649.862929][ T5992] usb 6-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 649.876782][ T5992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.900071][ T5992] usb 6-1: Product: syz [ 649.914758][ T5992] usb 6-1: Manufacturer: syz [ 649.927672][ T5992] usb 6-1: SerialNumber: syz [ 649.973172][ T5992] usb 6-1: config 0 descriptor?? [ 649.991211][ T5992] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 650.051801][T14045] r8152-cfgselector 4-1: Unknown version 0x0800 [ 650.073092][ T5992] snd-usb-audio 6-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 650.089071][T14045] r8152-cfgselector 4-1: bad CDC descriptors [ 650.184986][T15966] netlink: 'syz.5.1618': attribute type 11 has an invalid length. [ 650.223962][ T6034] udevd[6034]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 650.298399][T15965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.347128][T15965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.421355][ T5992] r8152-cfgselector 4-1: USB disconnect, device number 111 [ 650.503478][ T5950] usb 8-1: new low-speed USB device number 30 using dummy_hcd [ 650.663529][ T5950] usb 8-1: Invalid ep0 maxpacket: 16 [ 650.795584][ T5950] usb 8-1: new low-speed USB device number 31 using dummy_hcd [ 650.861149][T15981] trusted_key: encrypted_key: master key parameter 'er2' is invalid [ 650.953418][ T5950] usb 8-1: Invalid ep0 maxpacket: 16 [ 650.983679][ T5950] usb usb8-port1: attempt power cycle [ 651.017465][T15984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.055183][T15984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.097057][T15984] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1626'. [ 651.225964][T15987] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1627'. [ 651.253421][ T5992] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 651.323861][ T5950] usb 8-1: new low-speed USB device number 32 using dummy_hcd [ 651.344136][ T5950] usb 8-1: Invalid ep0 maxpacket: 16 [ 651.393778][ T5992] usb 4-1: device descriptor read/64, error -71 [ 651.474530][ T5950] usb 8-1: new low-speed USB device number 33 using dummy_hcd [ 651.514552][ T5950] usb 8-1: Invalid ep0 maxpacket: 16 [ 651.535108][ T5950] usb usb8-port1: unable to enumerate USB device [ 651.678925][ T5992] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 651.823510][ T5992] usb 4-1: device descriptor read/64, error -71 [ 651.933931][ T5992] usb usb4-port1: attempt power cycle [ 652.003419][ T5954] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 652.115620][ T5932] usb 6-1: USB disconnect, device number 108 [ 652.175188][ T5954] usb 3-1: Using ep0 maxpacket: 8 [ 652.210619][ T5954] usb 3-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 652.260459][ T5954] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 652.293683][ T5992] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 652.317769][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.329544][ T5992] usb 4-1: device descriptor read/8, error -71 [ 652.543447][ T5932] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 652.602974][T15999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.626309][T15999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.696385][ T5932] usb 6-1: config 0 has no interfaces? [ 652.704051][ T5932] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 652.757462][ T5992] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 652.758094][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.806971][ T5992] usb 4-1: device descriptor read/8, error -71 [ 652.836107][ T5932] usb 6-1: config 0 descriptor?? [ 652.924224][ T5992] usb usb4-port1: unable to enumerate USB device [ 653.367105][T15994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.385349][T15994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.448602][T15994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.457857][T15994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.519089][ T5992] usb 6-1: USB disconnect, device number 109 [ 654.160091][ T5992] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 654.333402][ T5992] usb 6-1: Using ep0 maxpacket: 16 [ 654.426770][ T5992] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.443377][ T5992] usb 6-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice= 0.00 [ 654.475120][ T5992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.705056][ T5992] usb 6-1: config 0 descriptor?? [ 654.720291][ T5992] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 655.539036][ T5992] input: gspca_pac7302 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input40 [ 655.564158][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.571073][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.578336][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.585306][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.592154][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.599204][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.606286][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.613144][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.620160][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.627047][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.634005][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.640997][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.647880][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.654872][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.662189][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.669204][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.676081][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.683186][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.690040][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.697385][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.704448][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.711339][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.718482][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.725428][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.732279][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.739350][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.746218][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.753457][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.760445][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.767773][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.775118][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.782053][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.788925][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.795837][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.802975][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.810020][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.816891][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.824010][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.830933][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.837960][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.844949][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.851923][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.858886][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.865854][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.872793][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.879930][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.886771][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.893656][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.900870][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.907781][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.914682][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.921576][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.928527][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.935477][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.942449][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.949330][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.956325][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.963277][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.970258][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.977364][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.984425][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.991294][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 655.998268][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.008929][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.016075][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.022992][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.029912][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.036980][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.043940][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.050901][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.057771][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.064815][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.071955][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.078948][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.085908][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.092776][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.099636][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.106728][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.113650][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.120735][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.128017][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.134916][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.141929][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.149016][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.156047][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.163385][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.170374][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.177483][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.184953][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.192016][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.199083][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.206320][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.215395][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.222312][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.229342][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.236247][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 656.243022][ C1] gspca_main: Resubmit URB failed with error -19 [ 656.250151][ T5992] usb 6-1: USB disconnect, device number 110 [ 656.430372][ T5932] usb 3-1: USB disconnect, device number 106 [ 656.821972][T16032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.852941][T16032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.503252][ T5992] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 659.716490][ T5992] usb 6-1: config 0 has no interfaces? [ 659.731023][ T5992] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 659.771210][ T5992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.797009][ T5992] usb 6-1: Product: syz [ 659.820386][ T5992] usb 6-1: Manufacturer: syz [ 659.838877][ T5992] usb 6-1: SerialNumber: syz [ 659.866303][ T5992] usb 6-1: config 0 descriptor?? [ 660.093020][T16062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.104490][T16062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.873959][ T981] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 661.043377][ T981] usb 8-1: Using ep0 maxpacket: 8 [ 661.059083][ T981] usb 8-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 661.095408][ T981] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 661.141135][ T981] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.320718][T16097] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 663.102170][ T5932] usb 8-1: USB disconnect, device number 34 [ 663.623461][ T5932] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 663.675225][T16114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.774023][ T5932] usb 8-1: Using ep0 maxpacket: 8 [ 663.781131][ T5932] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 663.790681][ T5932] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 663.808770][T16114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.875763][ T5992] usb 6-1: USB disconnect, device number 111 [ 663.876213][ T5932] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 664.007315][ T5932] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 664.093898][ T5932] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 664.145384][ T5932] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 664.223094][ T5932] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.543213][T16121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.559296][T16121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.585069][ T5932] usb 8-1: usb_control_msg returned -32 [ 664.590774][ T5932] usbtmc 8-1:16.0: can't read capabilities [ 664.592391][T16121] netlink: 'syz.1.1659': attribute type 12 has an invalid length. [ 664.631385][T16121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.648138][T16121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.126437][T16124] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 665.148255][T16122] libceph: resolve '0.0' (ret=-3): failed [ 665.196348][ T5932] usb 8-1: USB disconnect, device number 35 [ 665.669921][T16129] tipc: Enabled bearer , priority 0 [ 665.710291][T16129] syzkaller0: entered promiscuous mode [ 665.762826][T16129] syzkaller0: entered allmulticast mode [ 665.841022][T16131] tipc: Resetting bearer [ 665.881817][T16128] tipc: Resetting bearer [ 665.924725][T16128] tipc: Disabling bearer [ 666.069376][T16126] sctp: [Deprecated]: syz.1.1660 (pid 16126) Use of int in maxseg socket option. [ 666.069376][T16126] Use struct sctp_assoc_value instead [ 666.315468][ T5932] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 666.483465][ T5932] usb 6-1: Using ep0 maxpacket: 16 [ 666.498432][ T5932] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.570745][ T5932] usb 6-1: config 0 has no interfaces? [ 666.610862][ T5932] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 666.655320][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.727496][ T5932] usb 6-1: config 0 descriptor?? [ 667.102022][ T981] usb 6-1: USB disconnect, device number 112 [ 667.719972][ T5992] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 667.763069][T16160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 667.903504][ T5992] usb 3-1: Using ep0 maxpacket: 8 [ 667.955379][ T5992] usb 3-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 668.008421][T16162] bridge0: entered promiscuous mode [ 668.014329][ T5992] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 668.045141][ T5992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.259296][T16165] netlink: 'syz.5.1671': attribute type 11 has an invalid length. [ 668.287098][ T45] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 668.440186][ T45] usb 8-1: device descriptor read/64, error -71 [ 668.698135][ T45] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 668.854600][ T45] usb 8-1: device descriptor read/64, error -71 [ 668.903454][ T5950] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 668.964129][ T45] usb usb8-port1: attempt power cycle [ 669.073369][ T5950] usb 4-1: Using ep0 maxpacket: 16 [ 669.082080][ T5950] usb 4-1: config 0 has no interfaces? [ 669.102870][ T5950] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 669.121422][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.130119][ T5950] usb 4-1: Product: syz [ 669.134962][ T5950] usb 4-1: Manufacturer: syz [ 669.139887][ T5950] usb 4-1: SerialNumber: syz [ 669.149578][ T5950] usb 4-1: config 0 descriptor?? [ 669.313679][ T45] usb 8-1: new full-speed USB device number 38 using dummy_hcd [ 669.404212][T14045] usb 4-1: USB disconnect, device number 116 [ 669.427491][ T45] usb 8-1: device descriptor read/8, error -71 [ 669.652030][T16174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.682372][T16174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.693436][ T45] usb 8-1: new full-speed USB device number 39 using dummy_hcd [ 669.734398][ T45] usb 8-1: device descriptor read/8, error -71 [ 669.750089][T16174] tipc: Enabled bearer , priority 0 [ 669.887035][T14045] usb 3-1: USB disconnect, device number 107 [ 669.923773][ T45] usb usb8-port1: unable to enumerate USB device [ 669.954219][T16174] syzkaller0: entered promiscuous mode [ 669.959843][T16174] syzkaller0: entered allmulticast mode [ 670.108997][T16173] tipc: Resetting bearer [ 670.290264][T16173] tipc: Disabling bearer [ 670.496908][T16191] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1679'. [ 671.085971][T16204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1682'. [ 671.109277][T16204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1682'. [ 671.205410][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 671.205435][ T30] audit: type=1800 audit(1755148078.595:1183): pid=16209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1681" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 671.474189][ T5932] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 671.502092][T16214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.548868][T16214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.752258][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.943713][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.051772][ T5932] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 672.218874][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.271801][ T5932] usb 3-1: config 0 descriptor?? [ 672.457294][ T10] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 672.623745][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 672.681898][ T10] usb 4-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 672.692802][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 672.705904][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.731118][T16236] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 672.874241][ T5932] cp2112 0003:10C4:EA90.001D: unknown main item tag 0x0 [ 673.007023][ T5932] cp2112 0003:10C4:EA90.001D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 673.167040][ T5932] cp2112 0003:10C4:EA90.001D: error requesting version [ 673.189638][ T5932] cp2112 0003:10C4:EA90.001D: probe with driver cp2112 failed with error -5 [ 673.930852][T16241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.948937][T16241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.928533][ T45] usb 4-1: USB disconnect, device number 117 [ 675.120006][T16246] netlink: 'syz.3.1692': attribute type 4 has an invalid length. [ 675.284308][T16252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.315064][T16252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.074262][ T45] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 676.276642][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 676.316972][ T45] usb 4-1: too many configurations: 124, using maximum allowed: 8 [ 676.335743][ T45] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 676.349769][ T45] usb 4-1: can't read configurations, error -61 [ 676.351097][ T981] usb 3-1: USB disconnect, device number 108 [ 676.364511][T16252] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 676.503617][ T45] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 676.606259][ T5932] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 676.706613][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 676.728416][ T45] usb 4-1: too many configurations: 124, using maximum allowed: 8 [ 676.755675][ T45] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 676.774282][ T5932] usb 8-1: Using ep0 maxpacket: 16 [ 676.786826][ T5932] usb 8-1: unable to get BOS descriptor or descriptor too short [ 676.789761][ T45] usb 4-1: can't read configurations, error -61 [ 676.816392][ T45] usb usb4-port1: attempt power cycle [ 676.817716][ T5932] usb 8-1: config 2 has an invalid interface number: 9 but max is 0 [ 676.843823][ T5932] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 676.894410][T16271] loop2: detected capacity change from 0 to 7 [ 676.900932][ T5932] usb 8-1: config 2 has no interface number 0 [ 676.901024][ T30] audit: type=1326 audit(1755148084.295:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16268 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a72f8ebe9 code=0x7ffc0000 [ 676.908886][ T5932] usb 8-1: config 2 interface 9 altsetting 10 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 676.984000][T16271] loop2: [ 676.987185][T16271] loop2: partition table partially beyond EOD, truncated [ 677.015071][ T30] audit: type=1326 audit(1755148084.295:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16268 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a72f8ebe9 code=0x7ffc0000 [ 677.038805][ T30] audit: type=1326 audit(1755148084.305:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16268 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f2a72f8ebe9 code=0x7ffc0000 [ 677.044712][ T5932] usb 8-1: config 2 interface 9 altsetting 10 bulk endpoint 0x8E has invalid maxpacket 32 [ 677.084393][ T30] audit: type=1326 audit(1755148084.305:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16268 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a72f8ebe9 code=0x7ffc0000 [ 677.113686][ T30] audit: type=1326 audit(1755148084.305:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16268 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a72f8ebe9 code=0x7ffc0000 [ 677.147716][ T30] audit: type=1326 audit(1755148084.305:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16268 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2a72f8ebe9 code=0x7ffc0000 [ 677.179889][ T30] audit: type=1326 audit(1755148084.305:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16268 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a72f8ebe9 code=0x7ffc0000 [ 677.214215][ T5231] loop2: [ 677.217433][ T5231] loop2: partition table partially beyond EOD, truncated [ 677.233449][ T45] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 677.265850][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 677.271536][ T45] usb 4-1: too many configurations: 124, using maximum allowed: 8 [ 677.280859][ T30] audit: type=1326 audit(1755148084.305:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16268 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2a72f8ebe9 code=0x7ffc0000 [ 677.307614][ T45] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 677.547730][ T5932] usb 8-1: config 2 interface 9 altsetting 10 endpoint 0xA has invalid wMaxPacketSize 0 [ 677.547835][ T45] usb 4-1: can't read configurations, error -61 [ 677.589910][ T30] audit: type=1326 audit(1755148084.305:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16268 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a72f8ebe9 code=0x7ffc0000 [ 677.593349][ T5932] usb 8-1: config 2 interface 9 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 677.863737][ T5932] usb 8-1: config 2 interface 9 has no altsetting 0 [ 677.873616][ T45] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 677.893605][ T30] audit: type=1326 audit(1755148084.305:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16268 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2a72f8d69f code=0x7ffc0000 [ 677.956479][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 677.956951][ T5932] usb 8-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=6f.97 [ 677.984048][ T45] usb 4-1: too many configurations: 124, using maximum allowed: 8 [ 677.992013][ T5932] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.025745][ T45] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 678.044621][ T45] usb 4-1: can't read configurations, error -61 [ 678.049051][ T5932] usb 8-1: Product: syz [ 678.070601][ T5932] usb 8-1: Manufacturer: syz [ 678.090831][ T5932] usb 8-1: SerialNumber: syz [ 678.091250][ T45] usb usb4-port1: unable to enumerate USB device [ 678.126938][T16256] raw-gadget.5 gadget.7: fail, usb_ep_enable returned -22 [ 678.484656][T16277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.507128][T16277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.527752][T16277] netlink: 'syz.1.1700': attribute type 11 has an invalid length. [ 678.997867][ T5932] pn533_usb 8-1:2.9: NFC: Could not find bulk-in or bulk-out endpoint [ 679.106537][ T5932] usb 8-1: USB disconnect, device number 40 [ 679.253511][T16285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.443532][T16285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.474579][T16285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.605886][T16285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.627289][T14045] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 679.638059][T14045] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 679.649055][T14045] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 679.676235][T14045] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 679.702423][T14045] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 679.727325][T14045] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 679.747574][T14045] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 679.763760][T14045] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 679.786244][T14045] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 679.803089][T14045] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 680.062706][T14045] hid-generic 0008:0006:0007.001E: hidraw0: HID v0.0b Device [syz1] on syz1 [ 680.399528][T16292] fido_id[16292]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 680.743811][ T5954] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 681.026028][ T5954] usb 8-1: Using ep0 maxpacket: 8 [ 681.071635][ T5954] usb 8-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 681.102757][ T5954] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 681.239489][ T5954] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.263534][ T5954] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 682.614696][ T5954] usb 4-1: Using ep0 maxpacket: 8 [ 682.628445][ T5954] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 682.639410][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.719024][ T5954] usb 4-1: config 0 descriptor?? [ 683.481872][T14045] usb 8-1: USB disconnect, device number 41 [ 684.884788][ T5954] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 684.957704][ T5954] asix 4-1:0.0: probe with driver asix failed with error -71 [ 685.007135][ T5954] usb 4-1: USB disconnect, device number 122 [ 685.273756][ T10] usb 8-1: new full-speed USB device number 42 using dummy_hcd [ 685.443618][ T10] usb 8-1: device descriptor read/64, error -71 [ 685.613628][T16350] sctp: [Deprecated]: syz.2.1716 (pid 16350) Use of struct sctp_assoc_value in delayed_ack socket option. [ 685.613628][T16350] Use struct sctp_sack_info instead [ 685.713803][ T10] usb 8-1: new full-speed USB device number 43 using dummy_hcd [ 685.863777][ T10] usb 8-1: device descriptor read/64, error -71 [ 685.998033][ T10] usb usb8-port1: attempt power cycle [ 686.050617][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.057023][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.099188][T16360] binfmt_misc: register: failed to install interpreter file ./file0 [ 686.373614][ T5950] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 686.413447][ T10] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 686.719457][ T5950] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 686.782758][ T5950] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 686.832223][ T10] usb 8-1: device descriptor read/8, error -71 [ 686.922180][ T5950] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 686.996508][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 687.043340][ T5950] usb 3-1: SerialNumber: syz [ 687.140931][ T5950] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 687.224887][ T5950] usb-storage 3-1:1.0: USB Mass Storage device detected [ 687.267901][ T5950] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 687.315536][ T5950] scsi host1: usb-storage 3-1:1.0 [ 687.564464][ T10] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 687.594546][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 687.603247][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.615401][ T10] usb 8-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 687.633645][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.773871][ T10] usb 8-1: config 0 descriptor?? [ 688.170991][ T10] belkin 0003:050D:3201.001F: item fetching failed at offset 5/7 [ 688.194954][ T10] belkin 0003:050D:3201.001F: parse failed [ 688.604002][ T10] belkin 0003:050D:3201.001F: probe with driver belkin failed with error -22 [ 688.645277][ T10] usb 8-1: USB disconnect, device number 45 [ 688.925852][ T5860] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 689.005195][ T5860] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 689.015623][ T5860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 689.031890][ T5860] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 689.046572][ T5860] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 689.083744][ T5866] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 689.097695][ T5866] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 689.107240][ T5866] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 689.203549][ T5866] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 689.214101][ T5866] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 690.423516][T14045] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 690.480178][T16372] chnl_net:caif_netlink_parms(): no params data found [ 690.634567][T14045] usb 8-1: Using ep0 maxpacket: 32 [ 690.655490][T14045] usb 8-1: config 0 has an invalid interface number: 230 but max is 0 [ 690.688577][T14045] usb 8-1: config 0 has no interface number 0 [ 690.708975][T14045] usb 8-1: config 0 interface 230 has no altsetting 0 [ 690.761367][T14045] usb 8-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 690.866365][T14045] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.920527][T14045] usb 8-1: Product: syz [ 690.944269][T14045] usb 8-1: Manufacturer: syz [ 690.949025][T14045] usb 8-1: SerialNumber: syz [ 690.999565][ T10] usb 3-1: USB disconnect, device number 109 [ 691.022746][T14045] usb 8-1: config 0 descriptor?? [ 691.026246][T16372] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.046030][T16372] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.053760][T16372] bridge_slave_0: entered allmulticast mode [ 691.065144][T16372] bridge_slave_0: entered promiscuous mode [ 691.065982][T14045] ums-usbat 8-1:0.230: USB Mass Storage device detected [ 691.075869][T16372] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.086206][T16372] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.093802][T16372] bridge_slave_1: entered allmulticast mode [ 691.101312][T16372] bridge_slave_1: entered promiscuous mode [ 691.157969][T14045] ums-usbat 8-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 691.232816][T16372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.270283][T16372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.324024][ T5860] Bluetooth: hci5: command tx timeout [ 691.394135][T16372] team0: Port device team_slave_0 added [ 691.402960][T16372] team0: Port device team_slave_1 added [ 691.467373][ T10] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 691.514057][T16372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.524580][T16372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.552886][T16372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.575615][T16372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.585925][T16372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.622581][T16372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.627572][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 691.651439][ T10] usb 3-1: config 8 has an invalid interface number: 206 but max is 0 [ 691.673987][ T10] usb 3-1: config 8 has no interface number 0 [ 691.680408][ T10] usb 3-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 691.710553][ T10] usb 3-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 691.732575][ T10] usb 3-1: config 8 interface 206 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 691.747872][ T10] usb 3-1: config 8 interface 206 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 691.761662][ T10] usb 3-1: config 8 interface 206 has no altsetting 0 [ 691.786254][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 691.800881][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.836149][ T10] usb 3-1: Product: syz [ 691.841049][T16372] hsr_slave_0: entered promiscuous mode [ 691.848994][ T10] usb 3-1: Manufacturer: syz [ 691.863865][ T10] usb 3-1: SerialNumber: syz [ 691.884944][T16372] hsr_slave_1: entered promiscuous mode [ 691.904659][T16372] debugfs: 'hsr0' already exists in 'hsr' [ 691.910662][T16372] Cannot create hsr debugfs directory [ 692.093744][ T5932] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 692.108202][ T10] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected [ 692.146046][ T10] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 692.278971][ T5932] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 692.318701][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.358184][ T5932] usb 4-1: Product: syz [ 692.364301][ T5932] usb 4-1: Manufacturer: syz [ 692.369164][ T5932] usb 4-1: SerialNumber: syz [ 692.402246][ T5932] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 692.472587][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 693.095347][T16372] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 693.139339][T16372] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 693.205029][T16372] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 693.257929][T16372] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 693.269050][T16397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.293848][T16397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.397960][T14045] ums-usbat 8-1:0.230: probe with driver ums-usbat failed with error -5 [ 693.404108][ T5860] Bluetooth: hci5: command tx timeout [ 693.539949][T16372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.649917][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 693.675811][T16372] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.690331][ T5992] usb 3-1: USB disconnect, device number 110 [ 693.706627][ T10] ath9k_htc: Failed to initialize the device [ 693.749028][ T5992] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 693.781407][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 693.789988][ T5992] garmin_gps 3-1:8.206: device disconnected [ 693.801817][ T8362] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.809542][ T8362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.872284][ T5954] usb 4-1: USB disconnect, device number 123 [ 693.952325][ T6208] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.960070][ T6208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.211101][T16372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.387510][T16372] veth0_vlan: entered promiscuous mode [ 694.453954][T16372] veth1_vlan: entered promiscuous mode [ 694.631952][T16372] veth0_macvtap: entered promiscuous mode [ 694.678475][T16372] veth1_macvtap: entered promiscuous mode [ 694.841254][T16372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.858854][T16372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.998673][ T8350] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.042234][ T8350] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.048427][T16417] random: crng reseeded on system resumption [ 695.070231][ T8350] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.080616][ T5954] usb 8-1: USB disconnect, device number 46 [ 695.345770][ T8350] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.484275][ T5860] Bluetooth: hci5: command tx timeout [ 695.633390][ T5954] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 695.756243][T16424] loop6: detected capacity change from 0 to 6 [ 695.788753][ T6234] Dev loop6: unable to read RDB block 6 [ 695.798058][ T8350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.810733][ T5954] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.833093][ T6234] loop6: unable to read partition table [ 695.841793][ T8350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.855380][ T6234] loop6: partition table beyond EOD, truncated [ 695.876681][ T5954] usb 8-1: config 0 has no interfaces? [ 695.882243][ T5954] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 695.908468][T16424] Dev loop6: unable to read RDB block 6 [ 695.954876][T16424] loop6: unable to read partition table [ 695.973674][ T5954] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.010839][T16424] loop6: partition table beyond EOD, truncated [ 696.035411][T16424] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 696.040601][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.098080][ T5954] usb 8-1: config 0 descriptor?? [ 696.142234][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.308156][T16431] ptrace attach of "./syz-executor exec"[11982] was attempted by ""[16431] [ 696.389810][T16435] ptrace attach of "./syz-executor exec"[11982] was attempted by ""[16435] [ 696.433948][ T45] usb 8-1: USB disconnect, device number 47 [ 696.954238][ T981] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 697.564201][ T5860] Bluetooth: hci5: command tx timeout [ 697.590889][ T5954] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 697.853522][ T5954] usb 8-1: Using ep0 maxpacket: 32 [ 697.910204][ T5954] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.954200][ T5954] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.000712][ T5954] usb 8-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 698.048400][ T5954] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.105110][ T5954] usb 8-1: config 0 descriptor?? [ 699.237377][T16463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1741'. [ 699.256936][T16463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1741'. [ 700.048785][ T5950] usb 2-1: USB disconnect, device number 6 [ 700.249160][ T981] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 700.405653][ T5954] usbhid 8-1:0.0: can't add hid device: -71 [ 700.442013][ T5954] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 700.529526][ T981] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 700.565054][ T5954] usb 8-1: USB disconnect, device number 48 [ 700.573403][ T981] usb 3-1: can't read configurations, error -61 [ 700.764615][ T981] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 700.946004][ T981] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 700.954560][ T10] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 700.984746][T16470] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1747'. [ 701.006662][ T981] usb 3-1: can't read configurations, error -61 [ 701.023961][ T981] usb usb3-port1: attempt power cycle [ 701.034800][T16472] fuse: Bad value for 'group_id' [ 701.057098][T16472] fuse: Bad value for 'group_id' [ 701.150981][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.182870][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.216388][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 701.259771][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 701.290320][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.304629][ T45] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 701.360168][ T10] usb 4-1: config 0 descriptor?? [ 701.374304][ T5866] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 701.388225][ T5866] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 701.396226][ T981] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 701.410087][ T5866] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 701.421449][ T5866] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 701.431770][ T5866] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 701.505144][ T981] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 701.573844][ T45] usb 8-1: Using ep0 maxpacket: 8 [ 701.587949][ T981] usb 3-1: can't read configurations, error -61 [ 701.663537][ T5950] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 701.805177][ T981] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 701.823437][ T5950] usb 9-1: Using ep0 maxpacket: 8 [ 701.831485][ T5950] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 701.848531][ T5950] usb 9-1: config 0 has no interface number 0 [ 701.860233][ T5950] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 701.871486][ T5950] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 701.887123][ T5950] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 701.887599][ T10] plantronics 0003:047F:FFFF.0020: item fetching failed at offset 12/15 [ 701.898612][ T5950] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 701.932662][ T5950] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 701.943024][ T5950] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.957036][ T981] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 701.996710][ T981] usb 3-1: can't read configurations, error -61 [ 702.005285][ T10] plantronics 0003:047F:FFFF.0020: parse failed [ 702.013331][ T5950] usb 9-1: config 0 descriptor?? [ 702.035666][ T981] usb usb3-port1: unable to enumerate USB device [ 702.058826][ T10] plantronics 0003:047F:FFFF.0020: probe with driver plantronics failed with error -22 [ 702.102961][ T5950] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 702.496756][ T5859] usb 9-1: USB disconnect, device number 2 [ 702.526199][ T5859] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 702.658666][T16477] chnl_net:caif_netlink_parms(): no params data found [ 703.201645][T16477] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.252061][T16477] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.295616][T16477] bridge_slave_0: entered allmulticast mode [ 703.338710][T16477] bridge_slave_0: entered promiscuous mode [ 703.384147][T16477] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.427707][T16477] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.450257][T16477] bridge_slave_1: entered allmulticast mode [ 703.460958][T16477] bridge_slave_1: entered promiscuous mode [ 703.566069][ T5866] Bluetooth: hci6: command tx timeout [ 703.666434][T16477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.699061][T16477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.836409][ T10] usb 4-1: USB disconnect, device number 124 [ 703.983143][T16499] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1751'. [ 704.060859][T16477] team0: Port device team_slave_0 added [ 704.105350][ T45] usb 8-1: unable to get BOS descriptor or descriptor too short [ 704.113224][ T45] usb 8-1: no configurations [ 704.171355][ T45] usb 8-1: can't read configurations, error -22 [ 704.311446][T16505] binder: BINDER_SET_CONTEXT_MGR already set [ 704.317866][T16505] binder: 16497:16505 ioctl 4018620d 200000000040 returned -16 [ 704.334404][T16505] binder: 16497:16505 unknown command 0 [ 704.340837][T16505] binder: 16497:16505 ioctl c0306201 2000000003c0 returned -22 [ 704.483414][ T5950] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 704.612694][T16507] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1753'. [ 704.833505][ T5950] usb 3-1: Using ep0 maxpacket: 16 [ 704.881902][ T5950] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid wMaxPacketSize 0 [ 705.117642][ T5950] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 0 [ 705.144680][ T5950] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 16 [ 705.211501][ T5950] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 705.345495][ T5950] usb 3-1: config 1 interface 0 has no altsetting 0 [ 705.376245][ T5950] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 705.393064][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.413133][ T5950] usb 3-1: Product: syz [ 705.433167][ T5950] usb 3-1: Manufacturer: syz [ 705.438086][ T5950] usb 3-1: SerialNumber: syz [ 705.451808][T16494] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 705.473718][ T45] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 705.643543][ T5866] Bluetooth: hci6: command tx timeout [ 705.651074][ T45] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.688585][ T45] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 705.752463][ T45] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 705.762469][ T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.774088][ T45] usb 8-1: Product: syz [ 705.785678][ T45] usb 8-1: Manufacturer: syz [ 705.797162][ T45] usb 8-1: SerialNumber: syz [ 705.842210][ T45] usb 8-1: config 0 descriptor?? [ 706.086557][T16510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.095968][T16510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.135663][ T10] usb 8-1: USB disconnect, device number 51 [ 706.353906][T16477] team0: Port device team_slave_1 added [ 706.816500][T16477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.836292][T16477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.965179][T16477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.490208][T16477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.548534][T16477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.699310][ T981] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 707.702924][ T5950] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 707.730102][ T5866] Bluetooth: hci6: command tx timeout [ 707.785594][T16477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.892829][ T981] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 707.893833][ T5950] usb 3-1: USB disconnect, device number 116 [ 707.916474][ T981] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 707.993424][ T981] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.052226][ T981] usb 9-1: config 0 descriptor?? [ 708.091706][T16523] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 708.366699][T16533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.414362][T16533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.433554][ T981] elan 0003:04F3:0755.0021: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 708.656348][ T981] usb 9-1: USB disconnect, device number 3 [ 708.685685][T16477] hsr_slave_0: entered promiscuous mode [ 708.718107][T16535] fido_id[16535]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 708.745249][T16477] hsr_slave_1: entered promiscuous mode [ 708.752735][T16477] debugfs: 'hsr0' already exists in 'hsr' [ 708.827646][T16477] Cannot create hsr debugfs directory [ 709.500470][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 709.500491][ T30] audit: type=1326 audit(1755148116.895:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16544 comm="syz.7.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b2b8ebe9 code=0x7ffc0000 [ 709.762418][ T30] audit: type=1326 audit(1755148116.895:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16544 comm="syz.7.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b2b8ebe9 code=0x7ffc0000 [ 709.817116][ T5866] Bluetooth: hci6: command tx timeout [ 709.895545][ T30] audit: type=1326 audit(1755148116.895:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16544 comm="syz.7.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f72b2b8ebe9 code=0x7ffc0000 [ 709.920693][ T30] audit: type=1326 audit(1755148116.895:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16544 comm="syz.7.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b2b8ebe9 code=0x7ffc0000 [ 709.944176][ C0] vkms_vblank_simulate: vblank timer overrun [ 710.304911][ T30] audit: type=1326 audit(1755148116.895:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16544 comm="syz.7.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f72b2b8ebe9 code=0x7ffc0000 [ 710.328140][ C0] vkms_vblank_simulate: vblank timer overrun [ 710.429713][ T30] audit: type=1326 audit(1755148116.905:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16544 comm="syz.7.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b2b8ebe9 code=0x7ffc0000 [ 710.584214][ T30] audit: type=1326 audit(1755148116.905:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16544 comm="syz.7.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f72b2b8ebe9 code=0x7ffc0000 [ 710.783555][ T30] audit: type=1326 audit(1755148116.905:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16544 comm="syz.7.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b2b8ebe9 code=0x7ffc0000 [ 710.825551][ T30] audit: type=1326 audit(1755148116.915:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16544 comm="syz.7.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f72b2b8ebe9 code=0x7ffc0000 [ 710.853503][ T30] audit: type=1326 audit(1755148116.915:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16544 comm="syz.7.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b2b8ebe9 code=0x7ffc0000 [ 710.963655][ T981] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 711.127940][T16477] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 711.224627][T16477] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 711.610309][T16477] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 711.715754][T16477] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 712.156773][T16589] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (48424) [ 712.403528][T16589] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 712.503727][ T45] usb 3-1: new low-speed USB device number 117 using dummy_hcd [ 712.676067][ T45] usb 3-1: config 0 has no interfaces? [ 712.682143][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 712.697134][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.763961][ T5860] Bluetooth: hci6: command 0x0405 tx timeout [ 712.826625][ T45] usb 3-1: config 0 descriptor?? [ 712.942752][T16477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.988367][T16477] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.026929][ T8348] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.034384][ T8348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.341605][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.348890][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.906389][T16477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.073801][ T10] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 714.254060][ T45] usb 3-1: USB disconnect, device number 117 [ 714.307324][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.320719][T16477] veth0_vlan: entered promiscuous mode [ 714.359542][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.397358][T16477] veth1_vlan: entered promiscuous mode [ 714.465267][ T10] usb 8-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 714.551400][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.598806][ T10] usb 8-1: config 0 descriptor?? [ 714.649792][T16477] veth0_macvtap: entered promiscuous mode [ 714.712387][T16477] veth1_macvtap: entered promiscuous mode [ 714.815321][T16477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.858149][ T981] usb 9-1: device descriptor read/all, error -71 [ 714.891700][T16477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.941008][ T8352] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.964374][ T5859] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 714.978621][ T8352] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.008815][ T8352] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.128209][ T10] hid-retrode 0003:0403:97C1.0022: hidraw0: USB HID v0.00 Device [HID 0403:97c1] on usb-dummy_hcd.7-1/input0 [ 715.158985][ T5859] usb 4-1: config 2 has an invalid interface number: 1 but max is 0 [ 715.181931][ T8352] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.191466][ T5859] usb 4-1: config 2 has no interface number 0 [ 715.251286][ T5859] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78 [ 715.320907][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.386395][ T5859] usb 4-1: Product: syz [ 715.390770][ T5859] usb 4-1: Manufacturer: syz [ 715.462372][ T5859] usb 4-1: SerialNumber: syz [ 715.593713][ T8357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.629573][ T8357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.752738][ T5859] usb 4-1: selecting invalid altsetting 1 [ 715.782854][ T8357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.813752][ T5859] snd-usb-us122l 4-1:2.1: usb_set_interface error [ 715.829414][ T8357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.849585][ T5859] snd-usb-us122l 4-1:2.1: probe with driver snd-usb-us122l failed with error -22 [ 715.904327][ T981] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 715.923489][ T5859] usb 4-1: USB disconnect, device number 125 [ 716.096967][ T981] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 716.139749][ T981] usb 9-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 716.164759][ T981] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.185115][ T981] usb 9-1: config 0 descriptor?? [ 716.205694][T16624] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 716.761826][ T981] logitech 0003:046D:C286.0023: hidraw1: USB HID v1.01 Device [HID 046d:c286] on usb-dummy_hcd.8-1/input0 [ 716.818451][ T981] logitech 0003:046D:C286.0023: no inputs found [ 716.919653][T16624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.974705][T16624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.463333][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 717.463358][ T30] audit: type=1326 audit(1755148124.865:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16623 comm="syz.8.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c438ebe9 code=0x7ffc0000 [ 717.515682][ T30] audit: type=1326 audit(1755148124.865:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16623 comm="syz.8.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c438ebe9 code=0x7ffc0000 [ 717.564828][T16643] fuse: Bad value for 'user_id' [ 717.570555][T16643] fuse: Bad value for 'user_id' [ 717.578841][ T5950] usb 9-1: USB disconnect, device number 5 [ 717.605791][ T30] audit: type=1326 audit(1755148124.865:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16623 comm="syz.8.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f32c438ebe9 code=0x7ffc0000 [ 717.666326][ T30] audit: type=1326 audit(1755148124.865:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16623 comm="syz.8.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c438ebe9 code=0x7ffc0000 [ 717.818810][ T30] audit: type=1326 audit(1755148124.865:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16623 comm="syz.8.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c438ebe9 code=0x7ffc0000 [ 717.868613][T16649] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1784'. [ 718.058932][ T30] audit: type=1326 audit(1755148124.865:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16623 comm="syz.8.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f32c438ebe9 code=0x7ffc0000 [ 718.530516][ T30] audit: type=1326 audit(1755148124.865:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16623 comm="syz.8.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c438ebe9 code=0x7ffc0000 [ 718.790634][ T10] usb 8-1: USB disconnect, device number 52 [ 718.840921][ T30] audit: type=1326 audit(1755148124.865:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16623 comm="syz.8.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c438ebe9 code=0x7ffc0000 [ 719.462214][ T30] audit: type=1326 audit(1755148125.325:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16644 comm="syz.3.1784" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f805f18ebe9 code=0x7ffe0000 [ 720.350950][T16675] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1788'. [ 720.647402][ T10] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 720.927644][T16675] netlink: 35 bytes leftover after parsing attributes in process `syz.7.1788'. [ 721.702041][T16677] syzkaller0: entered promiscuous mode [ 721.722770][T16677] syzkaller0: entered allmulticast mode [ 722.015666][T16685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.036377][T16685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.261104][ T45] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 722.448378][ T45] usb 3-1: device descriptor read/64, error -71 [ 722.564367][T14045] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 722.743744][ T45] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 722.775893][T14045] usb 10-1: Using ep0 maxpacket: 16 [ 722.783890][T14045] usb 10-1: config 0 has an invalid interface number: 107 but max is 0 [ 722.793063][T14045] usb 10-1: config 0 has no interface number 0 [ 722.809263][T14045] usb 10-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 722.879648][T14045] usb 10-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 722.903959][ T45] usb 3-1: device descriptor read/64, error -71 [ 722.934316][ T93] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 723.029979][ T45] usb usb3-port1: attempt power cycle [ 723.049222][T14045] usb 10-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 723.069648][T14045] usb 10-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 723.096548][T14045] usb 10-1: Product: syz [ 723.101080][T14045] usb 10-1: Manufacturer: syz [ 723.111377][T14045] usb 10-1: SerialNumber: syz [ 723.126521][T14045] usb 10-1: config 0 descriptor?? [ 723.146631][T14045] keyspan 10-1:0.107: Keyspan 4 port adapter converter detected [ 723.161737][T14045] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 81 [ 723.196016][ T93] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 723.205691][ T93] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 723.237308][T14045] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 1 [ 723.278712][ T93] usb 4-1: config 220 has no interface number 2 [ 723.368802][T14045] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 723.393413][ T93] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 723.423411][ T45] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 723.456719][T14045] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 2 [ 723.507978][ T93] usb 4-1: config 220 interface 0 has no altsetting 0 [ 723.563810][ T45] usb 3-1: device descriptor read/8, error -71 [ 723.593566][T14045] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 723.611619][ T93] usb 4-1: config 220 interface 76 has no altsetting 0 [ 723.622566][ T93] usb 4-1: config 220 interface 1 has no altsetting 0 [ 723.643234][T14045] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 4 [ 723.655087][ T93] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 723.672712][ T93] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.684035][T14045] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 723.709714][ T93] usb 4-1: Product: syz [ 723.729686][ T93] usb 4-1: Manufacturer: syz [ 723.753795][T14045] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 6 [ 723.778273][ T93] usb 4-1: SerialNumber: syz [ 723.806412][ T45] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 723.844312][ T45] usb 3-1: device descriptor read/8, error -71 [ 723.862113][T14045] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 723.924053][T14045] usb 10-1: USB disconnect, device number 2 [ 723.964207][ T45] usb usb3-port1: unable to enumerate USB device [ 723.992439][T14045] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 724.030802][T14045] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 724.067341][ T93] usb 4-1: selecting invalid altsetting 0 [ 724.097939][ T93] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 724.170019][ T93] usb 4-1: No valid video chain found. [ 724.189024][T14045] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 724.313221][ T93] usb 4-1: selecting invalid altsetting 0 [ 724.319304][ T93] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 724.341752][T14045] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 724.374248][T14045] keyspan 10-1:0.107: device disconnected [ 724.391564][ T93] usb 4-1: USB disconnect, device number 126 [ 725.163637][T14045] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 725.359637][T14045] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 725.418055][T14045] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.454200][T14045] usb 4-1: config 0 descriptor?? [ 725.463840][T16711] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1500) ! [ 725.492517][T14045] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 725.713456][T14045] gp8psk: usb in 128 operation failed. [ 725.753448][T14045] gp8psk: usb in 137 operation failed. [ 725.766688][T14045] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 725.803718][T14045] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 725.833766][ T45] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 725.870215][T14045] usb 4-1: USB disconnect, device number 127 [ 726.015371][ T45] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 726.025975][ T45] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 726.067166][ T45] usb 10-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 726.079405][ T45] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.100126][ T45] usb 10-1: Product: syz [ 726.110127][ T45] usb 10-1: Manufacturer: syz [ 726.125062][ T45] usb 10-1: SerialNumber: syz [ 726.198813][ T45] usb 10-1: config 0 descriptor?? [ 726.296028][T16717] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 726.304723][T16717] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 726.527644][T16717] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 726.583605][T16717] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 726.773880][T16724] tty tty24: ldisc open failed (-12), clearing slot 23 [ 726.873668][ T981] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 727.216161][ T981] usb 4-1: Using ep0 maxpacket: 16 [ 727.236338][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.241578][T16717] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1802'. [ 727.247851][ T10] usb 8-1: new full-speed USB device number 53 using dummy_hcd [ 727.311090][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.346928][ T981] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 727.462923][T16717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.484458][T16717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.492168][ T981] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 727.516349][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.779949][ T45] dm9601 10-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 727.823459][ T5859] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 727.832299][ T45] usb 10-1: USB disconnect, device number 3 [ 727.852769][ T981] usb 4-1: config 0 descriptor?? [ 728.024759][ T5859] usb 3-1: Using ep0 maxpacket: 16 [ 728.049752][ T5859] usb 3-1: config index 0 descriptor too short (expected 17170, got 18) [ 728.136197][ T5859] usb 3-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 728.240444][ T5859] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 728.348783][ T5859] usb 3-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 728.535918][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.545126][ T981] microsoft 0003:045E:07DA.0024: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 728.556964][ T5859] usb 3-1: Product: syz [ 728.579577][ T5859] usb 3-1: Manufacturer: syz [ 728.597766][ T981] microsoft 0003:045E:07DA.0024: no inputs found [ 728.623394][ T5859] usb 3-1: SerialNumber: syz [ 728.644519][ T981] microsoft 0003:045E:07DA.0024: could not initialize ff, continuing anyway [ 728.683411][ T5859] usb 3-1: config 0 descriptor?? [ 728.703824][ T45] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 728.791511][ T5859] ums-freecom 3-1:0.0: USB Mass Storage device detected [ 728.805040][ T981] usb 4-1: USB disconnect, device number 2 [ 728.868716][ T45] usb 9-1: device descriptor read/64, error -71 [ 728.920494][T16743] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.1810'. [ 729.201202][T16741] fido_id[16741]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 729.261406][ T5859] usb 3-1: USB disconnect, device number 122 [ 729.293396][ T45] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 729.597929][ T45] usb 9-1: device descriptor read/64, error -71 [ 729.713699][ T45] usb usb9-port1: attempt power cycle [ 730.053845][ T45] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 730.061969][ T93] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 730.142474][ T45] usb 9-1: device descriptor read/8, error -71 [ 730.273403][ T93] usb 4-1: Using ep0 maxpacket: 16 [ 730.325581][ T93] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.347441][ T93] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.377075][ T93] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 730.390263][ T45] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 730.514784][ T45] usb 9-1: device descriptor read/8, error -71 [ 730.661844][ T93] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 730.745621][ T93] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.756596][ T45] usb usb9-port1: unable to enumerate USB device [ 730.816033][ T93] usb 4-1: config 0 descriptor?? [ 731.123499][ T5954] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 731.133480][ T5992] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 731.301656][T16767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.305053][ T5954] usb 3-1: Using ep0 maxpacket: 8 [ 731.317132][T16767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.329623][ T5992] usb 10-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 731.347748][ T5992] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.403773][ T5992] usb 10-1: Product: syz [ 731.412615][ T5992] usb 10-1: Manufacturer: syz [ 731.430880][ T5954] usb 3-1: unable to get BOS descriptor or descriptor too short [ 731.470820][ T5954] usb 3-1: config 4 interface 0 has no altsetting 0 [ 731.473819][ T5992] usb 10-1: SerialNumber: syz [ 731.513901][ T93] usbhid 4-1:0.0: can't add hid device: -71 [ 731.519999][ T93] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 731.532903][ T5954] usb 3-1: string descriptor 0 read error: -22 [ 731.566298][ T5954] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 731.618437][ T5954] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 731.627917][ T5992] usb 10-1: config 0 descriptor?? [ 731.665504][ T93] usb 4-1: USB disconnect, device number 3 [ 731.684033][ T5992] ch341 10-1:0.0: ch341-uart converter detected [ 731.698495][ T5954] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 731.755936][ T5954] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 731.838397][T16776] netlink: 'syz.7.1818': attribute type 26 has an invalid length. [ 731.841954][ T5954] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 731.879517][ T5954] usb 3-1: media controller created [ 731.911761][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 731.940971][T16776] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1818'. [ 732.062028][T16782] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1819'. [ 732.329298][ T5954] zl10353_read_register: readreg error (reg=127, ret==0) [ 732.412433][T16788] bridge_slave_0: default FDB implementation only supports local addresses [ 732.642902][ T5954] usb 3-1: USB disconnect, device number 123 [ 732.838356][ T5992] usb 10-1: ch341-uart converter now attached to ttyUSB0 [ 733.078364][T16799] syzkaller0: entered promiscuous mode [ 733.160816][T16799] syzkaller0: entered allmulticast mode [ 733.356783][T16809] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 733.803727][T16820] ptrace attach of "./syz-executor exec"[5873] was attempted by "./syz-executor exec"[16820] [ 734.074302][ T5950] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 734.194108][ T93] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 734.195785][ T5954] usb 10-1: USB disconnect, device number 4 [ 734.310197][ T5954] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 734.311163][ T5950] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.363969][ T5950] usb 8-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 734.403590][ T5954] ch341 10-1:0.0: device disconnected [ 734.403739][ T93] usb 3-1: Using ep0 maxpacket: 8 [ 734.460946][ T93] usb 3-1: unable to get BOS descriptor or descriptor too short [ 734.481106][ T5950] usb 8-1: config 0 interface 0 has no altsetting 0 [ 734.512869][ T5950] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 734.532294][ T5950] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 734.557585][ T93] usb 3-1: config 11 has an invalid interface number: 244 but max is 0 [ 734.573337][ T5950] usb 8-1: Product: syz [ 734.577946][ T93] usb 3-1: config 11 has no interface number 0 [ 734.584851][ T5950] usb 8-1: Manufacturer: syz [ 734.600161][ T93] usb 3-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 734.603835][T16830] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1830'. [ 734.611414][ T5950] usb 8-1: SerialNumber: syz [ 734.624604][T16832] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1830'. [ 734.692836][ T93] usb 3-1: config 11 interface 244 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 734.773675][T16836] input: syz0 as /devices/virtual/input/input43 [ 734.797558][ T5950] usb 8-1: config 0 descriptor?? [ 734.813761][ T93] usb 3-1: config 11 interface 244 has no altsetting 0 [ 734.867869][ T93] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 734.882263][ T93] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.921029][ T93] usb 3-1: Product: syz [ 734.941322][ T93] usb 3-1: Manufacturer: syz [ 734.952775][ T93] usb 3-1: SerialNumber: syz [ 734.960523][ T5950] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 735.256686][ T5954] usb 8-1: USB disconnect, device number 54 [ 735.279603][ T6034] udevd[6034]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 736.089674][ T5950] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 736.125454][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 736.261289][T16857] vlan1: entered allmulticast mode [ 736.413732][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 736.418972][ T5950] usb 10-1: Using ep0 maxpacket: 16 [ 736.443469][ T5950] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 736.451795][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.514411][T16857] veth0_vlan: entered allmulticast mode [ 736.527102][ T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 736.561155][ T5950] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 736.609470][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.610588][ T5950] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 736.683416][ T5950] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.695886][ T10] usb 4-1: config 0 descriptor?? [ 736.763835][ T5950] usb 10-1: Product: syz [ 736.782784][ T5950] usb 10-1: Manufacturer: syz [ 736.805214][ T5950] usb 10-1: SerialNumber: syz [ 736.823140][ T5950] usb 10-1: config 0 descriptor?? [ 736.878517][ T5950] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 736.953384][ T93] peak_usb 3-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 736.971446][ T5950] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 737.002496][ T93] peak_usb 3-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 737.162390][ T10] mcp2221 0003:04D8:00DD.0025: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 737.286254][ T93] peak_usb 3-1:11.244: probe with driver peak_usb failed with error -71 [ 737.483808][ T5992] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 737.510406][ T5950] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 737.523372][T14045] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 737.553189][ T93] usb 3-1: USB disconnect, device number 124 [ 737.556901][ T10] usb 4-1: USB disconnect, device number 4 [ 737.584043][ T5950] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 737.743533][ T5992] usb 8-1: Using ep0 maxpacket: 8 [ 737.805446][T14045] usb 9-1: Using ep0 maxpacket: 32 [ 737.826718][T14045] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 737.840379][T14045] usb 9-1: config 0 has no interface number 0 [ 737.848521][T14045] usb 9-1: config 0 interface 184 has no altsetting 0 [ 737.869484][T14045] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 737.888943][T14045] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.902920][T14045] usb 9-1: Product: syz [ 737.917477][T14045] usb 9-1: Manufacturer: syz [ 737.938115][ T5992] usb 8-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 738.014231][T14045] usb 9-1: SerialNumber: syz [ 738.023354][ T5992] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 738.072426][T14045] usb 9-1: config 0 descriptor?? [ 738.085447][ T5992] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.115630][T14045] smsc75xx v1.0.0 [ 738.280942][T16877] netlink: 'syz.2.1844': attribute type 14 has an invalid length. [ 738.318291][T16869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.370387][T16869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.741513][ T5950] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 738.752803][ T5950] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 738.764796][ T5950] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 738.773820][ T5950] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 738.782484][ T5950] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 738.931732][ T5950] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 738.948720][T14045] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 738.963484][ T5954] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 739.108348][ T5950] usb 10-1: USB disconnect, device number 5 [ 739.128206][T14045] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 739.186740][T14045] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 739.230819][T14045] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -32 [ 739.259897][ T5954] usb 3-1: Using ep0 maxpacket: 32 [ 739.286517][ T5954] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 739.296546][ T5954] usb 3-1: config 0 has no interface number 0 [ 739.311348][ T5954] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 739.336304][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.657701][ T5954] usb 3-1: Product: syz [ 739.813879][ T5954] usb 3-1: Manufacturer: syz [ 739.818636][ T5954] usb 3-1: SerialNumber: syz [ 739.884581][ T5954] usb 3-1: config 0 descriptor?? [ 739.898108][ T5954] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 739.913990][ T5954] usb 3-1: selecting invalid altsetting 1 [ 739.925769][ T5954] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 739.943609][T16890] IPv6: addrconf: prefix option has invalid lifetime [ 739.987180][ T5954] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 739.998158][ T5954] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 740.013689][ T5954] usb 3-1: media controller created [ 740.107378][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 740.258737][ T5954] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 740.282473][T14045] usb 8-1: USB disconnect, device number 55 [ 740.289667][ T5954] zl10353_read_register: readreg error (reg=127, ret==-32) [ 740.331896][T16892] netlink: 324 bytes leftover after parsing attributes in process `syz.9.1848'. [ 740.338576][ T5954] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 740.538749][ T5954] usb 3-1: USB disconnect, device number 125 [ 740.684610][ T5950] usb 9-1: USB disconnect, device number 11 [ 740.853604][ T93] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 740.980529][ T5950] IPVS: starting estimator thread 0... [ 741.015535][ T93] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.074000][T16904] IPVS: using max 28 ests per chain, 67200 per kthread [ 741.084465][ T93] usb 8-1: config 0 interface 0 has no altsetting 0 [ 741.158133][ T93] usb 8-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 741.169948][ T93] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.179739][ T93] usb 8-1: Product: syz [ 741.184164][ T93] usb 8-1: Manufacturer: syz [ 741.189050][ T93] usb 8-1: SerialNumber: syz [ 741.211234][ T93] usb 8-1: config 0 descriptor?? [ 741.241535][ T93] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 741.273874][ T5950] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 741.292073][ T93] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 741.301991][T14045] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 741.339089][ T93] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 741.385398][ T93] usb 8-1: media controller created [ 741.439895][ T93] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 741.483377][ T5950] usb 3-1: Using ep0 maxpacket: 16 [ 741.488955][T14045] usb 9-1: Using ep0 maxpacket: 8 [ 741.508824][ T5950] usb 3-1: config 0 has no interfaces? [ 741.520528][T14045] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 741.543850][ T5950] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 741.561521][T14045] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.581844][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.590713][T14045] usb 9-1: Product: syz [ 741.613951][ T5950] usb 3-1: Product: syz [ 741.621223][T14045] usb 9-1: Manufacturer: syz [ 741.635957][ T5950] usb 3-1: Manufacturer: syz [ 741.641286][T14045] usb 9-1: SerialNumber: syz [ 741.660540][ T5950] usb 3-1: SerialNumber: syz [ 741.716137][T14045] usb 9-1: config 0 descriptor?? [ 741.737063][ T5950] usb 3-1: config 0 descriptor?? [ 741.926672][ T93] DVB: Unable to find symbol tda10046_attach() [ 741.950300][ T93] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 741.974625][T14045] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 741.984469][ T93] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 742.027820][T16905] tipc: Bearer : already 2 bearers with priority 0 [ 742.186282][T16905] tipc: Enabling of bearer rejected, cannot adjust to lower [ 742.243665][ T5954] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 742.264859][T16905] syzkaller0: entered promiscuous mode [ 742.273170][T16905] syzkaller0: entered allmulticast mode [ 742.684892][T16923] sch_tbf: peakrate 4 is lower than or equals to rate 6 ! [ 742.998812][ T5992] usb 3-1: USB disconnect, device number 126 [ 743.221878][T16894] kvm: kvm [16893]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x40600 [ 743.235317][ T93] dvb_usb_m920x 8-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 743.320617][ T93] usb 8-1: USB disconnect, device number 56 [ 743.345100][ T5950] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 743.511001][T14045] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 743.552019][T14045] usb 9-1: USB disconnect, device number 12 [ 743.594350][ T5950] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.614915][ T5950] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 743.656344][ T5950] usb 10-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 743.684982][ T5950] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.700112][ T5950] usb 10-1: config 0 descriptor?? [ 744.172847][ T5950] Bluetooth: Can't get state to change to load configuration err [ 744.186661][ T5950] Bluetooth: Loading sysconfig file failed [ 744.192601][ T5950] ath3k 10-1:0.0: probe with driver ath3k failed with error -16 [ 744.223015][ T5950] usb 10-1: USB disconnect, device number 6 [ 744.642940][T16949] fuse: Bad value for 'fd' [ 744.723794][ T10] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 744.964027][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 744.984137][ T10] usb 3-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 745.010192][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 745.067635][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.213671][ T5992] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 745.373671][ T5992] usb 10-1: Using ep0 maxpacket: 8 [ 745.488869][ T5992] usb 10-1: config index 0 descriptor too short (expected 28277, got 36) [ 745.508501][ T5992] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.552510][ T5992] usb 10-1: config 0 has no interfaces? [ 745.578816][ T5992] usb 10-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 745.613115][ T5992] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.661103][ T5992] usb 10-1: config 0 descriptor?? [ 746.533791][ T10] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 746.693862][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 746.702419][ T10] usb 8-1: config 0 has no interfaces? [ 746.710898][ T10] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 746.736960][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.802484][ T10] usb 8-1: Product: syz [ 746.837106][ T10] usb 8-1: Manufacturer: syz [ 746.892906][ T10] usb 8-1: SerialNumber: syz [ 746.920034][ T10] usb 8-1: config 0 descriptor?? [ 747.149316][T16971] tipc: Enabled bearer , priority 0 [ 747.157965][T16971] syzkaller0: entered promiscuous mode [ 747.163740][T16971] syzkaller0: entered allmulticast mode [ 747.192303][T16971] sch_tbf: peakrate 4 is lower than or equals to rate 6 ! [ 747.268347][T16970] tipc: Resetting bearer [ 747.323596][ T5954] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 747.379833][T16970] tipc: Disabling bearer [ 747.400927][ T10] usb 3-1: USB disconnect, device number 127 [ 747.502216][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.504550][ T5954] usb 4-1: Using ep0 maxpacket: 32 [ 747.522851][ T5954] usb 4-1: config 0 interface 0 has no altsetting 0 [ 747.530606][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.532522][ T5954] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 747.577935][ T981] usb 8-1: USB disconnect, device number 57 [ 747.586458][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.622319][ T5954] usb 4-1: Product: syz [ 747.643045][ T5954] usb 4-1: Manufacturer: syz [ 747.658149][ T5954] usb 4-1: SerialNumber: syz [ 747.680268][ T5954] usb 4-1: config 0 descriptor?? [ 747.843537][ T5859] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 747.901914][ T981] usb 10-1: USB disconnect, device number 7 [ 747.911769][T16973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.936116][T16973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.980162][ T5954] gs_usb 4-1:0.0: Couldn't send data format (err=-71) [ 748.010762][ T5954] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 748.047553][ T5859] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 748.067818][ T5859] usb 3-1: config 0 has an invalid interface number: 3 but max is 2 [ 748.078100][ T5859] usb 3-1: config 0 has no interface number 0 [ 748.086692][ T5954] usb 4-1: USB disconnect, device number 6 [ 748.174577][ T5859] usb 3-1: config 0 has no interface number 1 [ 748.180940][ T5859] usb 3-1: too many endpoints for config 0 interface 3 altsetting 255: 255, using maximum allowed: 30 [ 748.255585][ T5859] usb 3-1: config 0 interface 3 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 748.303452][ T981] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 748.331100][ T5859] usb 3-1: config 0 interface 3 has no altsetting 0 [ 748.344037][ T5859] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 748.353216][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.407881][ T5859] usb 3-1: config 0 descriptor?? [ 748.482906][ T981] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 748.505697][ T981] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.534175][ T10] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 748.564728][ T981] usb 10-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 748.612616][ T981] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.646667][ T5859] usb 3-1: Could not set interface, error -71 [ 748.679846][ T981] usb 10-1: config 0 descriptor?? [ 748.692162][T16983] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 748.725619][ T5859] usb 3-1: selecting invalid altsetting 0 [ 748.747606][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.770519][ T5859] usb 3-1: Could not set interface, error -22 [ 748.779031][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.799833][ T5859] usb 3-1: USB disconnect, device number 2 [ 748.810441][ T10] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 748.836934][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.874918][ T10] usb 8-1: config 0 descriptor?? [ 748.963513][ T5954] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 749.102924][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 749.103986][T16977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.112708][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 749.126865][T16977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.161862][ T5954] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 749.191340][ T10] usb 8-1: USB disconnect, device number 58 [ 749.199515][ T5954] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.236190][ T5954] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 749.267630][ T981] bigben 0003:146B:0902.0026: unexpected rdesc, please submit for review [ 749.297809][ T8362] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.315297][ T5954] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.361924][ T981] bigben 0003:146B:0902.0026: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.9-1/input0 [ 749.378845][ T8362] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.406346][ T5954] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 749.420503][ T8362] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.433599][ T981] bigben 0003:146B:0902.0026: not enough fields in HID_OUTPUT_REPORT 0 [ 749.443902][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 749.452031][ T5954] usb 4-1: Product: syz [ 749.464814][ T981] bigben 0003:146B:0902.0026: no output report found [ 749.479481][ T8362] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.489619][ T5954] usb 4-1: Manufacturer: syz [ 749.530750][ T5954] cdc_wdm 4-1:1.0: skipping garbage [ 749.599463][ T5954] cdc_wdm 4-1:1.0: skipping garbage [ 749.663420][ T10] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 749.672230][ T5954] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 749.706630][ T5954] cdc_wdm 4-1:1.0: Unknown control protocol [ 749.736114][ C0] cdc_wdm 4-1:1.0: unknown notification 97 received: index 12645 len 56 [ 749.954855][ T5954] usb 4-1: USB disconnect, device number 7 [ 749.997040][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 750.025683][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.041168][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.538746][ T10] usb 8-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 750.820433][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.912511][ T10] usb 8-1: config 0 descriptor?? [ 751.020344][ T981] usb 10-1: USB disconnect, device number 8 [ 751.346490][ T10] kye 0003:0458:5016.0027: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 751.399512][ T10] hid_parser_main: 43 callbacks suppressed [ 751.399540][ T10] kye 0003:0458:5016.0027: unknown main item tag 0x0 [ 751.688877][ T10] kye 0003:0458:5016.0027: hidraw0: USB HID v0.00 Device [HID 0458:5016] on usb-dummy_hcd.7-1/input0 [ 751.829835][ T10] kye 0003:0458:5016.0027: tablet-enabling feature report not found [ 751.860626][ T10] kye 0003:0458:5016.0027: tablet enabling failed [ 751.944320][ T10] usb 8-1: USB disconnect, device number 59 [ 752.327298][T17001] fido_id[17001]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 752.513610][T17008] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1881'. [ 752.534204][T17009] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1881'. [ 752.663377][ T5992] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 752.864407][ T5992] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 752.902751][ T5992] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 752.916040][ T5992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.943408][ T93] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 752.972512][ T5992] usb 3-1: Product: syz [ 752.994911][ T5992] usb 3-1: Manufacturer: syz [ 752.999687][ T5992] usb 3-1: SerialNumber: syz [ 753.024237][ T5950] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 753.133981][ T93] usb 10-1: Using ep0 maxpacket: 32 [ 753.150156][ T93] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 753.164285][ T93] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 753.173693][ T93] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 753.185282][ T93] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 753.196216][ T93] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 753.207406][ T93] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 753.222439][ T5950] usb 8-1: Using ep0 maxpacket: 16 [ 753.232255][T17006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.244432][ T93] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 753.261952][ T5950] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.273994][T17006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.284056][ T93] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.306423][ T5950] usb 8-1: config 0 has no interfaces? [ 753.321056][ T93] usb 10-1: config 0 descriptor?? [ 753.333812][ T5950] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.356895][ T5950] usb 8-1: config 0 has no interfaces? [ 753.388069][ T5950] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.408077][ T5950] usb 8-1: config 0 has no interfaces? [ 753.429704][ T5950] usb 8-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 753.470547][ T5950] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 753.479515][ T5992] cdc_ether 3-1:1.0: skipping garbage [ 753.513802][ T5992] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 753.531019][ T5950] usb 8-1: Product: syz [ 753.549395][ T5950] usb 8-1: Manufacturer: syz [ 753.574006][ T5992] usb 3-1: USB disconnect, device number 3 [ 753.586203][ T93] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 753.587713][T17015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.614453][ T5950] usb 8-1: config 0 descriptor?? [ 753.674165][ T93] usb 10-1: USB disconnect, device number 9 [ 753.695424][ T93] usblp0: removed [ 753.730241][T17015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.033430][ T93] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 754.213829][ T93] usb 10-1: Using ep0 maxpacket: 32 [ 754.259834][ T93] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 754.274533][ T93] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 754.284703][ T93] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 754.302488][ T93] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 754.324631][ T93] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 754.332309][ T981] usb 8-1: USB disconnect, device number 60 [ 754.340762][ T93] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 754.375397][ T93] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 754.415961][ T93] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.439988][ T93] usb 10-1: config 0 descriptor?? [ 754.666082][ T93] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 754.814318][ T10] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 755.002030][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 755.027132][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.057847][ T10] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 755.111735][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.160116][ T10] usb 3-1: config 0 descriptor?? [ 755.175952][ T981] usb 10-1: USB disconnect, device number 10 [ 755.223603][ T981] usblp0: removed [ 755.415228][T17027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.449413][T17027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.915345][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 755.946814][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 756.021159][ T10] usb 3-1: USB disconnect, device number 4 [ 756.791109][ T30] audit: type=1326 audit(1755148164.215:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17043 comm="syz.7.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b2b8ebe9 code=0x7fc00000 [ 756.901030][T17051] loop2: detected capacity change from 0 to 7 [ 756.993868][T17051] loop2: [ 757.002224][T17051] loop2: partition table partially beyond EOD, truncated [ 757.059608][ T30] audit: type=1326 audit(1755148164.305:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17045 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881b78ebe9 code=0x7ffc0000 [ 757.350703][ T30] audit: type=1326 audit(1755148164.305:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17045 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881b78ebe9 code=0x7ffc0000 [ 757.689617][ T30] audit: type=1326 audit(1755148164.315:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17045 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f881b78ebe9 code=0x7ffc0000 [ 757.857662][ T30] audit: type=1326 audit(1755148164.315:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17045 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881b78ebe9 code=0x7ffc0000 [ 757.947868][ T30] audit: type=1326 audit(1755148164.315:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17045 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881b78ebe9 code=0x7ffc0000 [ 758.042393][ T30] audit: type=1326 audit(1755148164.315:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17045 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f881b78ebe9 code=0x7ffc0000 [ 758.150863][ T30] audit: type=1326 audit(1755148164.315:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17045 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881b78ebe9 code=0x7ffc0000 [ 758.263639][ T30] audit: type=1326 audit(1755148164.315:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17045 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881b78ebe9 code=0x7ffc0000 [ 758.336640][ T30] audit: type=1326 audit(1755148164.315:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17045 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f881b78ebe9 code=0x7ffc0000 [ 760.379879][ T981] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 761.399653][T17080] loop2: detected capacity change from 0 to 7 [ 761.419364][T17080] loop2: [ 761.422460][T17080] loop2: partition table partially beyond EOD, truncated [ 763.672913][T17099] pimreg: tun_chr_ioctl cmd 1074812118 [ 764.953969][ T93] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 765.257282][ T93] usb 3-1: Using ep0 maxpacket: 16 [ 765.345942][ T93] usb 3-1: config 0 has no interfaces? [ 765.354714][ T93] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 765.363867][ T93] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.373076][ T93] usb 3-1: Product: syz [ 765.413530][ T93] usb 3-1: Manufacturer: syz [ 765.418201][ T93] usb 3-1: SerialNumber: syz [ 765.478344][ T93] usb 3-1: config 0 descriptor?? [ 765.726688][T17107] tipc: Bearer : already 2 bearers with priority 0 [ 765.735176][T17107] tipc: Enabling of bearer rejected, cannot adjust to lower [ 765.745554][T17107] syzkaller0: entered promiscuous mode [ 765.751327][T17107] syzkaller0: entered allmulticast mode [ 765.782338][T17107] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 765.996843][ T93] usb 3-1: USB disconnect, device number 5 [ 766.751908][T17112] loop2: detected capacity change from 0 to 7 [ 766.812438][T17112] loop2: [ 766.834544][T17112] loop2: partition table partially beyond EOD, truncated [ 767.228397][ T5866] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 767.239238][ T5866] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 767.250363][ T5866] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 767.265865][ T5866] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 767.274211][ T5866] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 767.797061][T17126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1915'. [ 767.808252][T17126] netlink: 'syz.2.1915': attribute type 7 has an invalid length. [ 767.821512][T17126] netlink: 'syz.2.1915': attribute type 8 has an invalid length. [ 767.903555][T17126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1915'. [ 767.993695][T17128] @ÿ: renamed from veth0_vlan (while UP) [ 768.305900][ T981] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 768.523658][ T981] usb 3-1: Using ep0 maxpacket: 32 [ 768.653932][ T981] usb 3-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 768.743688][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.813361][ T981] usb 3-1: Product: syz [ 768.848810][ T981] usb 3-1: Manufacturer: syz [ 768.908823][ T981] usb 3-1: SerialNumber: syz [ 769.049848][ T981] usb 3-1: config 0 descriptor?? [ 769.070881][T17125] chnl_net:caif_netlink_parms(): no params data found [ 769.215570][ T981] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 769.333861][ T5866] Bluetooth: hci7: command tx timeout [ 769.476561][ T981] usb 3-1: Found UVC 0.00 device syz (0d49:7000) [ 769.512447][ T981] usb 3-1: No valid video chain found. [ 770.049075][T17125] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.059410][T17125] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.104761][T17125] bridge_slave_0: entered allmulticast mode [ 770.165699][T17125] bridge_slave_0: entered promiscuous mode [ 771.403426][ T5866] Bluetooth: hci7: command tx timeout [ 771.753859][T17125] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.761284][T17125] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.904289][T17125] bridge_slave_1: entered allmulticast mode [ 771.924550][T17125] bridge_slave_1: entered promiscuous mode [ 772.061671][ T5950] usb 3-1: USB disconnect, device number 6 [ 773.563385][ T5866] Bluetooth: hci7: command tx timeout [ 773.784304][T17125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.861372][T17125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.187534][T17125] team0: Port device team_slave_0 added [ 774.207845][T17125] team0: Port device team_slave_1 added [ 774.599660][T17125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.619779][T17125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.646151][ C1] vkms_vblank_simulate: vblank timer overrun [ 774.719446][T17125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.768235][T17125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.804719][T17125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.929843][T17125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.137762][T17125] hsr_slave_0: entered promiscuous mode [ 775.167951][T17125] hsr_slave_1: entered promiscuous mode [ 775.193577][T17125] debugfs: 'hsr0' already exists in 'hsr' [ 775.219684][T17125] Cannot create hsr debugfs directory [ 775.643987][ T5866] Bluetooth: hci7: command tx timeout [ 777.712672][T17125] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 777.769143][T17125] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 777.826927][T17125] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 777.870660][T17125] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 778.203635][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.311284][T17125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.430826][T17125] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.521894][ T6208] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.529118][ T6208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.591889][ T8357] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.599085][ T8357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.686257][T17125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 778.823003][T17125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.027277][T17125] veth0_vlan: entered promiscuous mode [ 779.082837][T17125] veth1_vlan: entered promiscuous mode [ 779.220954][T17125] veth0_macvtap: entered promiscuous mode [ 779.249483][T17125] veth1_macvtap: entered promiscuous mode [ 779.287226][T17125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 779.302339][T17125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 779.359317][ T6208] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.455636][ T6208] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.526438][ T6208] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.561432][ T6208] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.756519][ T8357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.795516][ T8357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.887178][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.925753][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.433417][ T5950] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 780.584992][ T5950] usb 1-1: Using ep0 maxpacket: 16 [ 780.610757][ T5950] usb 1-1: unable to get BOS descriptor or descriptor too short [ 780.634853][ T5950] usb 1-1: config 8 has an invalid interface number: 132 but max is 0 [ 780.662756][ T5950] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 780.693165][ T5950] usb 1-1: config 8 has no interface number 0 [ 780.700328][ T5950] usb 1-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 780.723443][ T5950] usb 1-1: config 8 interface 132 has no altsetting 0 [ 780.737526][ T5950] usb 1-1: string descriptor 0 read error: -22 [ 780.744315][ T5950] usb 1-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 780.779692][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.847633][ T5950] usb-storage 1-1:8.132: USB Mass Storage device detected [ 780.908420][ T5950] usb-storage 1-1:8.132: Quirks match for vid 07cf pid 1001: a [ 781.062905][ T5950] usb 1-1: USB disconnect, device number 9 [ 808.935102][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.941512][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 816.127546][ T5860] Bluetooth: hci5: command 0x0406 tx timeout [ 817.884170][ T31] INFO: task syz.5.1689:16233 blocked for more than 143 seconds. [ 817.893060][ T31] Not tainted 6.17.0-rc1-syzkaller-00029-g91325f31afc1 #0 [ 817.902657][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 817.912011][ T31] task:syz.5.1689 state:D stack:25096 pid:16233 tgid:16228 ppid:6283 task_flags:0x440040 flags:0x00004004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 817.933554][ T31] Call Trace: [ 817.937299][ T31] [ 817.944380][ T31] __schedule+0x1798/0x4cc0 [ 817.949328][ T31] ? __pfx___schedule+0x10/0x10 [ 817.954838][ T31] ? schedule+0x91/0x360 [ 817.959255][ T31] schedule+0x165/0x360 [ 817.963790][ T31] schedule_preempt_disabled+0x13/0x30 [ 817.969403][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 817.975052][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 817.980816][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 817.987187][ T31] down_read+0x98/0x2e0 [ 817.991377][ T31] page_cache_ra_order+0x318/0xd40 [ 817.996978][ T31] ? maybe_unlock_mmap_for_io+0x16a/0x2d0 [ 818.003856][ T31] do_sync_mmap_readahead+0x25e/0x7a0 [ 818.009289][ T31] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 818.023417][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 818.028798][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 818.034212][ T31] filemap_fault+0x62c/0x1200 [ 818.039219][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 818.044899][ T31] __do_fault+0x138/0x390 [ 818.049383][ T31] __handle_mm_fault+0x1847/0x5440 [ 818.054672][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 818.060657][ T31] ? find_vma+0xe7/0x160 [ 818.065243][ T31] ? __pfx_find_vma+0x10/0x10 [ 818.070026][ T31] handle_mm_fault+0x40a/0x8e0 [ 818.074869][ T31] do_user_addr_fault+0x764/0x1390 [ 818.080136][ T31] exc_page_fault+0x76/0xf0 [ 818.093323][ T31] asm_exc_page_fault+0x26/0x30 [ 818.098437][ T31] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 818.203482][ T31] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 c1 44 03 00 90 90 90 90 90 90 90 90 90 90 [ 818.297388][ T31] RSP: 0018:ffffc9000ed978b8 EFLAGS: 00050202 [ 818.388346][ T31] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000047bb0 [ 818.423297][ T31] RDX: ffff888032da9e00 RSI: 0000000000000002 RDI: 00000000ffffffff [ 818.431348][ T31] RBP: ffffc9000ed97a30 R08: ffffc9000ed97667 R09: 1ffff92001db2ecc [ 818.473288][ T31] R10: dffffc0000000000 R11: fffff52001db2ecd R12: 0000000000000002 [ 818.481350][ T31] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000200000047b80 [ 818.503541][ T31] ____sys_recvmsg+0x2ab/0x460 [ 818.509165][ T31] ? __pfx_____sys_recvmsg+0x10/0x10 [ 818.553316][ T31] ? import_iovec+0x74/0xa0 [ 818.558101][ T31] ___sys_recvmsg+0x1b5/0x510 [ 818.563082][ T31] ? __pfx____sys_recvmsg+0x10/0x10 [ 818.593320][ T31] ? __might_fault+0xb0/0x130 [ 818.598181][ T31] do_recvmmsg+0x307/0x770 [ 818.602660][ T31] ? __pfx_do_recvmmsg+0x10/0x10 [ 818.663300][ T31] ? count_memcg_event_mm+0x21/0x260 [ 818.668745][ T31] ? count_memcg_event_mm+0x21/0x260 [ 818.713295][ T31] __x64_sys_recvmmsg+0x190/0x240 [ 818.719943][ T31] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 818.763529][ T31] ? do_syscall_64+0xbe/0x3b0 [ 818.768499][ T31] do_syscall_64+0xfa/0x3b0 [ 818.773159][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 818.853292][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.859562][ T31] ? clear_bhb_loop+0x60/0xb0 [ 818.883346][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.889335][ T31] RIP: 0033:0x7f06bd78ebe9 [ 818.913283][ T31] RSP: 002b:00007f06be6bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 818.933313][ T31] RAX: ffffffffffffffda RBX: 00007f06bd9b6090 RCX: 00007f06bd78ebe9 [ 818.942532][ T31] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 818.993282][ T31] RBP: 00007f06bd811e19 R08: 0000000000000000 R09: 0000000000000000 [ 819.001604][ T31] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 819.038638][ T31] R13: 00007f06bd9b6128 R14: 00007f06bd9b6090 R15: 00007f06bdadfa28 [ 819.047116][ T31] [ 819.050596][ T31] INFO: task syz.5.1689:16235 blocked for more than 144 seconds. [ 819.059178][ T31] Not tainted 6.17.0-rc1-syzkaller-00029-g91325f31afc1 #0 [ 819.067509][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 819.100534][ T31] task:syz.5.1689 state:D stack:23688 pid:16235 tgid:16228 ppid:6283 task_flags:0x400040 flags:0x00004006 [ 819.198538][ T31] Call Trace: [ 819.201875][ T31] [ 819.217182][ T31] __schedule+0x1798/0x4cc0 [ 819.221749][ T31] ? __pfx___schedule+0x10/0x10 [ 819.231043][ T31] ? schedule+0x91/0x360 [ 819.239683][ T31] schedule+0x165/0x360 [ 819.253910][ T31] schedule_preempt_disabled+0x13/0x30 [ 819.259798][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 819.266061][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 819.273506][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 819.279722][ T31] ? filemap_fault+0x86a/0x1200 [ 819.285618][ T31] ? maybe_unlock_mmap_for_io+0x16a/0x2d0 [ 819.293323][ T31] down_read+0x98/0x2e0 [ 819.297595][ T31] filemap_fault+0x86a/0x1200 [ 819.302491][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 819.308175][ T31] ? __handle_mm_fault+0x27b7/0x5440 [ 819.313847][ T31] __do_fault+0x138/0x390 [ 819.331805][ T31] __handle_mm_fault+0x3611/0x5440 [ 819.343727][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 819.349270][ T31] ? follow_page_pte+0x7ef/0x13e0 [ 819.354597][ T31] handle_mm_fault+0x40a/0x8e0 [ 819.359437][ T31] __get_user_pages+0x1699/0x2ce0 [ 819.394884][ T31] populate_vma_page_range+0x29f/0x3a0 [ 819.400448][ T31] ? __pfx_populate_vma_page_range+0x10/0x10 [ 819.414259][ T31] ? apply_vma_lock_flags+0x344/0x3c0 [ 819.427131][ T31] ? down_read+0x1ad/0x2e0 [ 819.431850][ T31] __mm_populate+0x24c/0x380 [ 819.438459][ T31] ? __pfx___mm_populate+0x10/0x10 [ 819.444422][ T31] ? up_write+0x1c4/0x420 [ 819.449364][ T31] do_mlock+0x625/0x740 [ 819.453821][ T31] ? __pfx_do_mlock+0x10/0x10 [ 819.458622][ T31] ? rcu_is_watching+0x15/0xb0 [ 819.464004][ T31] __x64_sys_mlock+0x60/0x70 [ 819.473357][ T31] do_syscall_64+0xfa/0x3b0 [ 819.478030][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.485355][ T31] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 819.494444][ T31] ? clear_bhb_loop+0x60/0xb0 [ 819.499395][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.513434][ T31] RIP: 0033:0x7f06bd78ebe9 [ 819.523093][ T31] RSP: 002b:00007f06be69e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 819.546726][ T31] RAX: ffffffffffffffda RBX: 00007f06bd9b6180 RCX: 00007f06bd78ebe9 [ 819.563765][ T31] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 819.573658][ T31] RBP: 00007f06bd811e19 R08: 0000000000000000 R09: 0000000000000000 [ 819.583797][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.591824][ T31] R13: 00007f06bd9b6218 R14: 00007f06bd9b6180 R15: 00007f06bdadfa28 [ 819.600368][ T31] [ 819.604360][ T31] [ 819.604360][ T31] Showing all locks held in the system: [ 819.612121][ T31] 3 locks held by kworker/1:0/24: [ 819.619321][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 819.696575][ T31] #1: ffffc900001e7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 819.793365][ T31] #2: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 819.929781][ T31] 1 lock held by khungtaskd/31: [ 819.935317][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 819.963938][ T31] 2 locks held by getty/5620: [ 819.968774][ T31] #0: ffff88803010b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 820.027655][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 820.073367][ T31] 9 locks held by kworker/1:6/5950: [ 820.078665][ T31] 2 locks held by kworker/u8:7/6208: [ 820.134742][ T31] 3 locks held by kworker/u8:9/8348: [ 820.140207][ T31] #0: ffff88802f4c3948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 820.185596][ T31] #1: ffffc90004af7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 820.244457][ T31] #2: ffffffff8f537c88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 820.263819][ T31] 3 locks held by kworker/u8:13/8357: [ 820.269425][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 820.370442][ T31] #1: ffffc90004aa7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 820.407469][ T31] #2: ffffffff8f537c88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 820.440771][ T31] 1 lock held by syz-executor/13765: [ 820.455239][ T31] 1 lock held by syz.5.1689/16233: [ 820.473632][ T31] #0: ffff888022d54e48 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x318/0xd40 [ 820.532714][ T31] 1 lock held by syz.5.1689/16235: [ 820.553582][ T31] #0: ffff888022d54e48 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_fault+0x86a/0x1200 [ 820.594196][ T31] 2 locks held by syz.5.1689/16237: [ 820.599549][ T31] 2 locks held by syz.1.1712/16333: [ 820.608529][ T31] #0: ffff88807b8e60a8 (&ctx->uring_lock){+.+.}-{4:4}, at: __se_sys_io_uring_enter+0x2d4/0x2b20 [ 820.619896][ T31] #1: ffff888022d54ca8 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: blkdev_read_iter+0x2f8/0x440 [ 820.651724][ T31] 1 lock held by syz.1.1712/16336: [ 820.667909][ T31] #0: ffff888022d54ca8 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: blkdev_read_iter+0x2f8/0x440 [ 820.686324][ T31] 2 locks held by syz-executor/16368: [ 820.691998][ T31] #0: ffff888030d68dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 820.715582][ T31] #1: ffff888030d680b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 820.747302][ T31] 1 lock held by syz-executor/16372: [ 820.752714][ T31] #0: ffffffff8f537c88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 820.770267][ T31] 4 locks held by syz-executor/16464: [ 820.787233][ T31] #0: ffff8880242f4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 820.807265][ T31] #1: ffff8880242f40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 820.829639][ T31] #2: ffffffff8f69c948 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 820.844747][ T31] #3: ffff888027835b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 820.863797][ T31] 1 lock held by syz-executor/16477: [ 820.870665][ T31] #0: ffffffff8f537c88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 820.883399][ T31] 1 lock held by syz.3.1877/16992: [ 820.889176][ T31] #0: ffff888022d54e48 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x318/0xd40 [ 820.903465][ T31] 3 locks held by syz-executor/17125: [ 820.913620][ T31] #0: ffff88803535cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 820.936802][ T31] #1: ffff88803535c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 820.953706][ T31] #2: ffffffff8f69c948 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 820.988396][ T31] [ 821.012731][ T31] ============================================= [ 821.012731][ T31] [ 821.065127][ T31] NMI backtrace for cpu 0 [ 821.065153][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00029-g91325f31afc1 #0 PREEMPT(full) [ 821.065177][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 821.065189][ T31] Call Trace: [ 821.065198][ T31] [ 821.065207][ T31] dump_stack_lvl+0x189/0x250 [ 821.065240][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 821.065266][ T31] ? __pfx__printk+0x10/0x10 [ 821.065308][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 821.065335][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 821.065361][ T31] ? __pfx__printk+0x10/0x10 [ 821.065403][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 821.065437][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 821.065464][ T31] watchdog+0xf93/0xfe0 [ 821.065499][ T31] ? watchdog+0x1de/0xfe0 [ 821.065532][ T31] kthread+0x70e/0x8a0 [ 821.065560][ T31] ? __pfx_watchdog+0x10/0x10 [ 821.065587][ T31] ? __pfx_kthread+0x10/0x10 [ 821.065614][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 821.065638][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 821.065663][ T31] ? __pfx_kthread+0x10/0x10 [ 821.065688][ T31] ret_from_fork+0x3f9/0x770 [ 821.065713][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 821.065741][ T31] ? __switch_to_asm+0x39/0x70 [ 821.065765][ T31] ? __switch_to_asm+0x33/0x70 [ 821.065789][ T31] ? __pfx_kthread+0x10/0x10 [ 821.065814][ T31] ret_from_fork_asm+0x1a/0x30 [ 821.065857][ T31] [ 821.065865][ T31] Sending NMI from CPU 0 to CPUs 1: [ 821.223840][ C1] NMI backtrace for cpu 1 [ 821.223860][ C1] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.17.0-rc1-syzkaller-00029-g91325f31afc1 #0 PREEMPT(full) [ 821.223880][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 821.223891][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 821.223921][ C1] RIP: 0010:__lock_acquire+0xac6/0xd20 [ 821.223947][ C1] Code: c0 48 8b 3c 24 48 83 78 40 00 0f 84 6a 01 00 00 4c 89 f6 89 ea 4c 89 f9 e8 17 38 00 00 85 c0 0f 84 e4 01 00 00 41 f6 46 22 10 <75> 2e 48 8b 1c 24 4c 89 bb e0 0a 00 00 8b 83 e8 0a 00 00 ff c0 89 [ 821.223961][ C1] RSP: 0018:ffffc90000a086a8 EFLAGS: 00000046 [ 821.223976][ C1] RAX: 0000000000000001 RBX: 0000000000000005 RCX: 4e83bbc8733f5400 [ 821.223987][ C1] RDX: 0000000000000000 RSI: ffff888022680bb8 RDI: ffff888022680000 [ 821.223998][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8172c195 [ 821.224009][ C1] R10: ffffc90000a088f8 R11: ffffffff81ac3890 R12: 00000000ad612e93 [ 821.224021][ C1] R13: ffff888022680af0 R14: ffff888022680bb8 R15: 609ebd065e342e4b [ 821.224033][ C1] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 821.224046][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 821.224058][ C1] CR2: 00007ffc2ae61fd4 CR3: 000000006c9f0000 CR4: 00000000003526f0 [ 821.224075][ C1] Call Trace: [ 821.224082][ C1] [ 821.224093][ C1] ? unwind_next_frame+0xa5/0x2390 [ 821.224110][ C1] lock_acquire+0x120/0x360 [ 821.224131][ C1] ? unwind_next_frame+0xa5/0x2390 [ 821.224152][ C1] ? unwind_next_frame+0xa5/0x2390 [ 821.224168][ C1] ? handle_softirqs+0x283/0x870 [ 821.224184][ C1] ? unwind_next_frame+0xa5/0x2390 [ 821.224200][ C1] unwind_next_frame+0xc2/0x2390 [ 821.224216][ C1] ? unwind_next_frame+0xa5/0x2390 [ 821.224235][ C1] ? unwind_next_frame+0xa5/0x2390 [ 821.224251][ C1] ? rcu_core+0xca8/0x1770 [ 821.224275][ C1] ? rcu_core+0xc37/0x1770 [ 821.224295][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 821.224314][ C1] arch_stack_walk+0x11c/0x150 [ 821.224334][ C1] ? handle_softirqs+0x283/0x870 [ 821.224350][ C1] stack_trace_save+0x9c/0xe0 [ 821.224368][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 821.224387][ C1] ? __lock_acquire+0xab9/0xd20 [ 821.224409][ C1] kasan_save_track+0x3e/0x80 [ 821.224427][ C1] ? kasan_save_track+0x3e/0x80 [ 821.224444][ C1] ? kasan_save_free_info+0x46/0x50 [ 821.224460][ C1] ? __kasan_slab_free+0x5b/0x80 [ 821.224478][ C1] ? slab_free_after_rcu_debug+0x129/0x2a0 [ 821.224495][ C1] ? rcu_core+0xca8/0x1770 [ 821.224515][ C1] ? handle_softirqs+0x283/0x870 [ 821.224546][ C1] kasan_save_free_info+0x46/0x50 [ 821.224562][ C1] __kasan_slab_free+0x5b/0x80 [ 821.224581][ C1] slab_free_after_rcu_debug+0x129/0x2a0 [ 821.224605][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 821.224621][ C1] ? rcu_core+0xc37/0x1770 [ 821.224642][ C1] rcu_core+0xca8/0x1770 [ 821.224669][ C1] ? __pfx_rcu_core+0x10/0x10 [ 821.224694][ C1] ? sched_balance_domains+0x121/0x9e0 [ 821.224717][ C1] ? sched_balance_domains+0x8be/0x9e0 [ 821.224743][ C1] handle_softirqs+0x283/0x870 [ 821.224759][ C1] ? do_softirq+0xec/0x180 [ 821.224775][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 821.224792][ C1] ? nsim_dev_trap_report_work+0x7c7/0xb80 [ 821.224814][ C1] do_softirq+0xec/0x180 [ 821.224828][ C1] [ 821.224834][ C1] [ 821.224841][ C1] ? __pfx_do_softirq+0x10/0x10 [ 821.224854][ C1] ? devlink_trap_report+0x216/0x6a0 [ 821.224875][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 821.224896][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 821.224912][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 821.224927][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 821.224946][ C1] ? nsim_dev_trap_report_work+0x7c7/0xb80 [ 821.224968][ C1] nsim_dev_trap_report_work+0x7c7/0xb80 [ 821.224995][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 821.225011][ C1] process_scheduled_works+0xade/0x17b0 [ 821.225036][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 821.225057][ C1] worker_thread+0x8a0/0xda0 [ 821.225081][ C1] kthread+0x70e/0x8a0 [ 821.225101][ C1] ? __pfx_worker_thread+0x10/0x10 [ 821.225116][ C1] ? __pfx_kthread+0x10/0x10 [ 821.225134][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 821.225153][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 821.225173][ C1] ? __pfx_kthread+0x10/0x10 [ 821.225190][ C1] ret_from_fork+0x3f9/0x770 [ 821.225207][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 821.225224][ C1] ? __switch_to_asm+0x39/0x70 [ 821.225243][ C1] ? __switch_to_asm+0x33/0x70 [ 821.225262][ C1] ? __pfx_kthread+0x10/0x10 [ 821.225280][ C1] ret_from_fork_asm+0x1a/0x30 [ 821.225305][ C1] [ 821.798852][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 821.805866][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00029-g91325f31afc1 #0 PREEMPT(full) [ 821.818508][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 821.830909][ T31] Call Trace: [ 821.834912][ T31] [ 821.837948][ T31] dump_stack_lvl+0x99/0x250 [ 821.843091][ T31] ? __asan_memcpy+0x40/0x70 [ 821.848130][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 821.853451][ T31] ? __pfx__printk+0x10/0x10 [ 821.858111][ T31] vpanic+0x281/0x750 [ 821.862225][ T31] ? __pfx_vpanic+0x10/0x10 [ 821.866844][ T31] ? preempt_schedule+0xae/0xc0 [ 821.872286][ T31] ? preempt_schedule_common+0x83/0xd0 [ 821.877976][ T31] panic+0xb9/0xc0 [ 821.882252][ T31] ? __pfx_panic+0x10/0x10 [ 821.886707][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 821.892205][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 821.899772][ T31] watchdog+0xfd2/0xfe0 [ 821.904457][ T31] ? watchdog+0x1de/0xfe0 [ 821.908941][ T31] kthread+0x70e/0x8a0 [ 821.913151][ T31] ? __pfx_watchdog+0x10/0x10 [ 821.918206][ T31] ? __pfx_kthread+0x10/0x10 [ 821.923204][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 821.929878][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 821.935679][ T31] ? __pfx_kthread+0x10/0x10 [ 821.940406][ T31] ret_from_fork+0x3f9/0x770 [ 821.945101][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 821.950342][ T31] ? __switch_to_asm+0x39/0x70 [ 821.955610][ T31] ? __switch_to_asm+0x33/0x70 [ 821.960506][ T31] ? __pfx_kthread+0x10/0x10 [ 821.965122][ T31] ret_from_fork_asm+0x1a/0x30 [ 821.970035][ T31] [ 821.973669][ T31] Kernel Offset: disabled [ 821.978114][ T31] Rebooting in 86400 seconds..