last executing test programs: 30m22.994492528s ago: executing program 32 (id=211): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0xae002, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) clock_gettime(0x73d120d1a3af8f7f, 0x0) madvise(&(0x7f00002f0000/0x2000)=nil, 0x2000, 0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x0, 0x8080) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) r5 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0004000200000100c2800008000500", @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f00000008c0)="e3ef7f670000ec6789b4241544940000000000000000000000040033a42c9550f5a10011e0f0544b00aab05450dc72ff6e8f62d070e87f2c73d153bf01de50151803", 0x0, 0x9ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r8 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x89882) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000040)=0x85) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRESHEX=r8, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="0500000001070000050008000500000004002800"], 0x30}, 0x1, 0x0, 0x0, 0x4805}, 0x8000) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) 28m2.076019201s ago: executing program 33 (id=1027): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x12}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x4c, 0x10, 0xd03, 0x70bc2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20, 0x203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}, @IFLA_BOND_ARP_ALL_TARGETS={0x8}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008011}, 0x16c3035550932880) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0xf659, 0x34324d59, 0x1, @discrete={0x8, 0x83b6}}) madvise(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000001000ffff25bd70df25000100000000", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000001406"], 0xfdef) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x79}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r7 = socket$inet_smc(0x2b, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x62, 0x43, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r8}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r8, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x3, 0x0}}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) 25m36.866343952s ago: executing program 34 (id=1958): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x60841, 0x12f) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100ab51a0407b0500000000000000010902120001200000000904", @ANYRES32=0xffffffffffffffff, @ANYRES16=r5], 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0) pwritev(r7, &(0x7f0000000500), 0x0, 0xffffff01, 0x2) semop(0x0, &(0x7f00000001c0), 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRESOCT=r0, @ANYRESHEX, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b000000000000000000000000ff000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC=r6, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x1, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000a302000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000950000000000000049048d20c347487e24bc94031310c3170065842238555e7f7bf0e6cca02b395a36a7f5c210336d359420cadaa72f0273bf53ccc687800d9c232cc3e95e3276d50300143d312539130db56015946f4e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x8, 0xb, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000140)=""/11, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r10, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x36, &(0x7f0000001200)=ANY=[@ANYBLOB="aa0600aaaaaaffffffffffff86dd60b8192300000000fe8000000000000000000000000000aafe8000000000000000000000000000aa"], 0x0) r11 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x804) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) 20m58.880252445s ago: executing program 36 (id=3554): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000000}]}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000004580)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8000}], 0x1, 0x20000000) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r5, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r4, &(0x7f0000000340), 0x41}]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c41}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x9}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8840}, 0x20000000) 20m22.58201761s ago: executing program 37 (id=3771): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@gettaction={0x3c, 0x32, 0x200, 0x8070bd29, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x81}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x2004c8d8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0x9, 0xf}, {0xfff3, 0xffe0}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x1b}, {0x2, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xd, 0x6}}}]}, 0x38}}, 0x4814) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r1 = socket(0x10, 0x80002, 0x0) socketpair(0x2c, 0x803, 0x0, &(0x7f0000000240)) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x2) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_SET_LABEL(0xffffffffffffffff, 0xc010644d, &(0x7f0000000480)={0x0, 0x0, 0x0}) (async) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) (async) getsockopt(0xffffffffffffffff, 0x200000000114, 0x8, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 15m2.031058756s ago: executing program 3 (id=4885): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000300)={0x2d, 0xfffffffe, 0x1bffe}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'syztnl2\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x47, 0x7800, 0x2, 0x101, {{0x1f, 0x4, 0x1, 0x4, 0x7c, 0x65, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0xcd, 0x3, 0x2, [{@loopback, 0x401}, {@empty, 0x74}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x2c, 0x45, 0x0, 0x1, [0xff, 0x80000001, 0x800, 0x5, 0xc4, 0xf36, 0xffcb, 0x9, 0xb62, 0x1]}, @end, @end, @timestamp_prespec={0x44, 0x14, 0xd3, 0x3, 0x2, [{@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff8}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'gre0\x00', r1, 0x8, 0x7800, 0x10001, 0xa2, {{0xe, 0x4, 0x1, 0x1d, 0x38, 0x68, 0x0, 0x43, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x2b}, {[@rr={0x7, 0x1f, 0xba, [@broadcast, @multicast1, @local, @empty, @empty, @private=0xa010100, @empty]}, @ra={0x94, 0x4}]}}}}}) r2 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x202, &(0x7f0000000080)={&(0x7f0000000000)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x900) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xe, 0x9, 0x7e, 0x2, 0x10001, 0xc, 0x7, 0x200, 0x99, 0x8, 0x7, 0x9, 0x7, 0x8, 0x3, 0x1, 0x1a00, 0x8, 0xeeea, 0x401, 0x10000, 0x8}}) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) writev(r3, &(0x7f0000000480)=[{&(0x7f0000000180)="012a8f4d20f4bb14680d7a379cb74fd8cd7b35e834b192eaface7bb8da7f6c5359db7924b0edb4b13795080c059cd0b8ea33f78c181c153697ca00b3f0f8fe0c5b4fe23853b26f5382e5415b1e701eb87309693910aa53f51f30b7bdf705a0727ccc26069604894aced356677578571da21adb0dd0000000", 0x78}, {&(0x7f0000000380)="541682635cd6e477799fcc380dd0dec760ef15df36f27f00221eae083006deb99d4d150dd17265f93990deda71d3b0b39059bd717418b681a5d2b6c4a09853930916e7fea0bc946cc17b2d59e29a683461b82bca9989e4f95b0437d30160b9def5589718cd967dc6b526df5423263545b73ef70103c0aa98a96c04fd6b36a8ec4f5fe146dcc5c2301fb42b3e31f0a7c3e512954b0d9368a9d552600c89f5d879d35f22af4948a21ea0f608399d8c93f0d359ed3b376b183e5ab9210294bebab622b2c5", 0xc3}], 0x2) 15m2.029895013s ago: executing program 3 (id=4886): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x1000, 0xe000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0x25000, 0x70000, 0x4, 0xff, 0xff, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x1, 0x8080000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0x0, 0xfc}, {0x1, 0x3000, 0xa, 0x0, 0x81, 0x0, 0x9, 0x0, 0x8, 0x2, 0x6}, {0x6000, 0xffff1000, 0xf, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x3a}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x40, 0x2, 0x0, 0x40, 0xfe, 0x5, 0x4}, {0x4, 0xa000, 0xd, 0x3, 0x3, 0x2, 0x9f, 0x20, 0x0, 0x3}, {0x10000, 0x54000, 0xc, 0x0, 0x40, 0x7, 0x8, 0x40, 0x26, 0x5, 0x0, 0x2}, {0xdddd0000, 0x3}, {0x30000, 0xfffe}, 0xddf8ffdb, 0x0, 0x0, 0x130, 0x0, 0x0, 0x26000, [0x4, 0x0, 0x40000000002]}) 15m1.960218045s ago: executing program 3 (id=4887): syz_usb_connect$midi(0x1, 0x68, &(0x7f0000000140)={{0x12, 0x1, 0xc974134031c523a0, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56, 0x1, 0x1, 0x2, 0xad05a0f0c4afa3f5, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x9, [@midi_out_jack={0x7, 0x24, 0x3, 0x1, 0x7, 0x0, [], 0x4}, @midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x1, 0x0, [], 0x5}], [{{0x9, 0x5, 0x9, 0x3, 0x10, 0x9, 0x2, 0x5, {0x13, 0x25, 0x1, 0xf, "bb203ebbd558c33ae1f56e32914d3a"}}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0x3, 0x2, 0x0, {0x11, 0x25, 0x1, 0xd, "8eb3e5eb01a390904e838885b7"}}}]}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 15m1.387180662s ago: executing program 3 (id=4896): socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5434, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000069c0)=[{{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000002680)=[{&(0x7f0000000440)=""/4080, 0xff0}, {&(0x7f0000001440)=""/135, 0x87}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/53, 0x35}, {&(0x7f0000002540)=""/141, 0x8d}, {&(0x7f0000002600)=""/81, 0x51}], 0x6, &(0x7f0000002700)=""/37, 0x25}, 0x61}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002740)=""/33, 0x21}, {&(0x7f0000002780)=""/102, 0x66}], 0x2, &(0x7f0000002840)=""/105, 0x69}, 0x4}, {{0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f00000028c0)=""/172, 0xac}, {&(0x7f0000002980)=""/82, 0x52}, {&(0x7f0000002a00)=""/207, 0xcf}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/91, 0x5b}, {&(0x7f0000003b80)=""/236, 0xec}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/27, 0x1b}], 0x8, &(0x7f0000004d40)=""/241, 0xf1}, 0x6}, {{0x0, 0x0, &(0x7f0000006100)=[{&(0x7f0000004e40)=""/200, 0xc8}, {&(0x7f0000004f40)=""/46, 0x2e}, {&(0x7f0000005040)=""/143, 0x8f}, {&(0x7f0000005040)}, {&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000005100)=""/4096, 0x1000}], 0x6, &(0x7f0000006180)=""/135, 0x87}, 0x80c}, {{0x0, 0x0, &(0x7f0000006300)=[{&(0x7f0000006240)=""/178, 0xb2}], 0x1}, 0x65c2}, {{&(0x7f0000006340)=@nl=@unspec, 0x80, &(0x7f0000006440)=[{&(0x7f00000063c0)=""/43, 0x2b}, {&(0x7f0000006400)=""/47, 0x2f}], 0x2, &(0x7f0000006480)=""/231, 0xe7}}, {{&(0x7f0000006580)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000006880)=[{&(0x7f0000006600)=""/124, 0x7c}, {&(0x7f0000006680)=""/68, 0x44}, {&(0x7f0000006700)=""/21, 0x15}, {&(0x7f0000006740)=""/69, 0x45}, {&(0x7f00000067c0)=""/110, 0x6e}, {&(0x7f0000006840)=""/36, 0x24}], 0x6, &(0x7f0000006900)=""/171, 0xab}, 0x34a919b}], 0x7, 0x40000162, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb48, 0x9, 0x8, 0x2, 0x21}, 0x0) r2 = socket(0xb, 0x3, 0x3c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x1, 0x0, @private2}, {0xa, 0x4e23, 0xfffffffe, @empty, 0xfffffffc}, 0x0, {[0xfffffffe, 0x0, 0x0, 0x3, 0x50, 0x5]}}, 0x5c) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffb000/0x4000)=nil) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x480000, 0x0) syz_open_procfs(0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='statm\x00') syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x3, 0x3) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/kexec_loaded', 0x103080, 0x103) connect$inet6(0xffffffffffffffff, &(0x7f0000004f80)={0xa, 0x4e22, 0x6, @mcast1, 0x101}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x4f23, 0xfffc, 0x4e23, 0x1ff, 0x2, 0x2a11bad3d5f03f04, 0x90}, {0x100000000, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x6, 0x9, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x4, 0x9}, 0xd6, 0x0, 0x1, 0x1, 0x5, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x210000, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00', 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 14m58.321224941s ago: executing program 3 (id=4909): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000019440)='net/ip_tables_targets\x00') pread64(r0, &(0x7f0000000080)=""/102350, 0xc345, 0x54) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000019140)={&(0x7f0000019240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000019100)={&(0x7f0000019080)={0x50, 0x5, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4005001}, 0x40001) syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000006980)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x80, 0x90, 0x1, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0x2, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x47b1544a55d5904c, 0x1, 0xce, 0x4, {0x8, 0x25, 0x1, 0x2, 0x0, 0x88, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8f, 0x4, 0x3, {0x8, 0x25, 0x1, 0x2, 0x3f, 0x95, 0x7}}}}}}}}]}}, &(0x7f0000006ec0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000019180)=ANY=[@ANYBLOB="020342442b8a340c28e5d1c7f7eb9efc486d645befe931d1854470a778b7120295c89c5c3cdec4967603227cef9655ad79307af6c0c020c9de77a757a1fb69311a40c6913ec4a3aaa0fb46f41bd01dd8daa4b2ada4dbbfe3aea05d2fa5c8b3069eeae1fd61e050bd4ef79976e5161cecd70eea2d9345e6423494d7eb37d6b3bfd97687142c14932f5c9d37fccd4bec8e305844c4c19a433900ea779fd0f8c3fd5c8ac1c3"]}, {0x26, &(0x7f0000006b80)=@string={0x26, 0x3, "7f34cdaa3463492124070017ceeecd0044bce35be3f278a14d87ec891ac31be0906ac334"}}, {0x0, 0x0}, {0x0, 0x0}]}) fallocate(r2, 0x3, 0x1c0000000000000, 0x4ffffffff000) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14m57.515807423s ago: executing program 3 (id=4918): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYRES16=r0], 0x12eb) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) lseek(r2, 0x3ff, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r5, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) r7 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf2500000000080001", @ANYRES32=0x0, @ANYBLOB="0800080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="0100", 0x2}], 0x1}, 0x240448c1) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="04", 0x1}], 0x1}, 0x1) recvmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)}, 0x40010021) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0xa801, 0x0) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x1, &(0x7f0000ffd000/0x1000)=nil, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000040)={0x48}) 14m42.473282426s ago: executing program 38 (id=4918): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYRES16=r0], 0x12eb) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) lseek(r2, 0x3ff, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r5, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) r7 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf2500000000080001", @ANYRES32=0x0, @ANYBLOB="0800080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="0100", 0x2}], 0x1}, 0x240448c1) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="04", 0x1}], 0x1}, 0x1) recvmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)}, 0x40010021) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0xa801, 0x0) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x1, &(0x7f0000ffd000/0x1000)=nil, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000040)={0x48}) 13m25.807277237s ago: executing program 7 (id=5504): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1, 0x2}}, './file0\x00'}) fcntl$setlease(r0, 0x400, 0x2) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)={0x2, {0x8, 0x101, 0x7, 0x9}}) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000480)={0x2, 0x1, 0x14, 0x16, 0x151, &(0x7f0000000080)="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"}) io_uring_enter(r0, 0x9ff, 0xb9c4, 0x1, &(0x7f00000004c0)={[0x3]}, 0x8) sendfile(r0, r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x4, 0x20, 0x3, 0xebb, 0x16, @loopback, @mcast2, 0x40, 0x7, 0x84}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'syzkaller1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000780)={'gretap0\x00', &(0x7f00000006c0)={'gre0\x00', 0x0, 0x10, 0x40, 0x7, 0x7, {{0x24, 0x4, 0x0, 0x9, 0x90, 0x67, 0x0, 0xa, 0x29, 0x0, @rand_addr=0x64010101, @broadcast, {[@ssrr={0x89, 0xf, 0x9b, [@multicast1, @broadcast, @multicast2]}, @generic={0x82, 0x12, "dee5b941cb6c45c960d32fc29b1c2309"}, @end, @timestamp_prespec={0x44, 0x1c, 0xb3, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@private=0xa010101, 0x6}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x83}]}, @noop, @timestamp={0x44, 0xc, 0xcc, 0x0, 0xd, [0x4, 0x101]}, @generic={0x94, 0x11, "0502bd9564a61ccd061638c7d2ee3b"}, @generic={0xfa961bc45b28e344, 0x11, "d9fb76164d12a34a8e41f1c65506b2"}, @lsrr={0x83, 0xf, 0x9a, [@empty, @remote, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000840)={'gretap0\x00', &(0x7f00000007c0)={'gre0\x00', 0x0, 0x8000, 0x7, 0x17, 0x3, {{0x14, 0x4, 0x1, 0x4, 0x50, 0x67, 0x0, 0xa1, 0x4, 0x0, @private=0xa010100, @multicast2, {[@timestamp_addr={0x44, 0x3c, 0xb6, 0x1, 0x1, [{@loopback, 0x3}, {@multicast1}, {@multicast2, 0x4}, {@local, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9bcf}, {@multicast1, 0x8}, {@broadcast, 0x4}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x7800, 0x40, 0x8, 0x6, {{0x18, 0x4, 0x1, 0x1, 0x60, 0x67, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x17, 0x22, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0xd}]}, @timestamp={0x44, 0x1c, 0x10, 0x0, 0x0, [0xf1, 0xf, 0xf9d, 0x5, 0x55ef, 0x10001]}, @timestamp={0x44, 0x14, 0x6d, 0x0, 0xa, [0x100000, 0x9, 0x1, 0xe9f]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000009c0)={'gretap0\x00', &(0x7f0000000940)={'gre0\x00', 0x0, 0x1, 0x7800, 0x1, 0x4, {{0x14, 0x4, 0x1, 0x22, 0x50, 0x67, 0x0, 0x41, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@generic={0x44, 0x4, "2591"}, @timestamp={0x44, 0x24, 0x47, 0x0, 0xc, [0x6, 0x1, 0x101, 0x8, 0x491, 0x1, 0x7fffffff, 0x5]}, @lsrr={0x83, 0x13, 0xf3, [@multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x26}, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000b00)={'gre0\x00', &(0x7f0000000a00)={'syztnl0\x00', 0x0, 0x8, 0x7, 0x0, 0xaf7, {{0x37, 0x4, 0x0, 0x1c, 0xdc, 0x68, 0x0, 0xbb, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x34, 0x37, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0xffffffb1}, {@local, 0x400}, {@private=0xa010100, 0xffff}, {@multicast2, 0x9}, {@empty, 0x5}, {@loopback, 0x2}]}, @timestamp={0x44, 0x28, 0x3e, 0x0, 0x5, [0x0, 0x0, 0x4, 0xff, 0x10000, 0x0, 0x5, 0x4, 0x2]}, @end, @timestamp_prespec={0x44, 0x34, 0x78, 0x3, 0x1, [{@multicast1, 0x3}, {@empty, 0xfa44}, {@multicast1, 0x1}, {@multicast1, 0x10000}, {@multicast2, 0x4}, {@multicast2, 0x9}]}, @end, @lsrr={0x83, 0x7, 0xe7, [@local]}, @timestamp_prespec={0x44, 0x2c, 0x65, 0x3, 0x8, [{@broadcast, 0xfb4}, {@loopback, 0xf8000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@local, 0x7f}, {@private=0xa010101, 0x45}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000d00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x130, r1, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000d40)={'veth1_vlan\x00'}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) bind$alg(r0, &(0x7f0000000d80)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000e00), 0x100, 0x0) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000e40), 0xa0100, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000e80)={0x4d00000000000000, 0x7, 0x7, 0x0, 0x0, [{{r0}, 0xb}, {{r12}, 0xca1}, {{r0}, 0x100}, {{r0}, 0x2d35}, {{r0}}, {{r0}, 0x3}, {{r11}, 0x3ff}]}) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000f80), 0x305000, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(r13, 0x4010586e, &(0x7f0000000fc0)={0x6, 0x8}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000001000)=0x8, 0x4) sendmsg$sock(r0, &(0x7f00000013c0)={&(0x7f0000001040)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x893, @dev={0xfe, 0x80, '\x00', 0x41}, 0x96d9}}, 0x80, &(0x7f00000012c0)=[{&(0x7f00000010c0)="f0d54d7d440795c26d1ebdd1df70b33d434329c79778e2e364b10ea0ea1543b9452ed647059a8a3c934c9c7506d85bb777c261e81020438007bc3fadbc0f682ac972b8a50dfb864d5f03c05eadc43282ef03550f682d08616d4c906cf12684dbc547af14f71109526c04b18f10b62b5dc7f85e3b7688441b46cde564fa6e5a8bcf41c3af4be45375faddda75299a0e9ba4ed33270aaeeb7478af28e800583677fa1b5c01ccf77ee29e7cb35cc0638884a1f98ecfae1932738cb7", 0xba}, {&(0x7f0000001180)="0c3db5ee16c7a0e2b233ffd8998f207b57f3e186b0940471d1dc626c6adec655538432ed1ff4eeda98d16e96dbc5ab0e14ddee6f5f0f37c9bdcfb8d387f56e78ce71864023ac2f839bb065a9559c7ca69c60c9d4a2790138dff360291ff242e7526c9d89b291ed21fbc51c896ac4a1b6af03cb487a219bac872c6b06efce30e73417e7938dc1cb61c7db7c298a6279a4128125411ac04b9c6cd1b26f03344c172f8757ca41724cebe00f3fea7518acddb0d1510ac64e5cfd07cbe1be41530b80", 0xc0}, {&(0x7f0000001240)="d7f4e76b81f1011819f789173b0f84d59e02557e450b717e4c69377305d19bc4d48963ca2b5e7e2cc4e53443392f6f0682f4c271518d64d3bdc46bd3bac69a24b6802f85dc7ba4dfd3e6c76ebf8e541f7add5b6f6e4ffcc15e613299ca09de3de5ff8b28a54f61301a23226b432b7745002e8e71f2616484", 0x78}], 0x3, &(0x7f0000001300)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x5a6}}, @txtime={{0x18, 0x1, 0x3d, 0xe0e1}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xffff}}], 0xa8}, 0x4) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000001400), 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000001440), r0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, 0xa, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 13m24.960115276s ago: executing program 7 (id=5507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) r3 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) 13m24.00459527s ago: executing program 7 (id=5511): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) (async) syz_usb_disconnect(r0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x57) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) syz_usb_disconnect(r1) 13m23.213274667s ago: executing program 7 (id=5515): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4840) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 13m22.259507494s ago: executing program 7 (id=5521): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x270bd2b, 0x4004, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000280)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000200)={0x401, 0x1, &(0x7f0000000180)=[r5], &(0x7f00000000c0), &(0x7f0000000640)=[r7, r6, r6], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x4e21, 0xb11, @mcast2}}, {{0xa, 0x4e1e, 0x8, @private0}}}, 0x108) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x384, &(0x7f0000001940)={@empty, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x34e, 0x3a, 0x0, @private0, @mcast2, {[@routing={0x0, 0x6, 0x1, 0x5, 0x0, [@private0, @mcast1, @empty]}, @routing={0x6, 0xe, 0x1, 0x0, 0x0, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x3b}, @loopback, @private0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3b}]}, @routing={0x2b, 0x8, 0x2, 0x7, 0x0, [@mcast2, @local, @mcast2, @mcast2]}, @dstopts={0x0, 0x2, '\x00', [@ra={0x5, 0x2, 0x9}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @srh={0x89, 0x4, 0x4, 0x2, 0xc, 0x40, 0x8, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @remote]}, @dstopts={0x0, 0x21, '\x00', [@pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @ra={0x5, 0x2, 0xff}, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0xe}, @generic={0x7, 0xe8, "5f151520b02f29b4a569263c162f334e173309ae00a14325c9df3f07ac475dabbc3927cb47c271c1c19f70ece37f7fa32b42537b8bd463a7438d44487a63ea75af01e0a9e6ffe52ec7f99a3d57996e255a6168e8c1b25c64adbeb6cb977e24016e159fa1769b06466eddfdfd731d306ea69e6856a3e06318c70e453254aae8dd8020fc7cb9d76a81633836bf9f3502255a27d7e16ace31de8442f288346d6e67985d0a25d657501c60819150cbc7bc0a8bcc29e7686a64e7dd5f2262a65eec976e3915ebaa4edc9863d2b8289fdef86507d829a2d8e0fb9b5180ed970a977f1b582dab02869182d1"}]}], @ndisc_na={0x88, 0x0, 0x0, 0x1b, '\x00', @dev={0xfe, 0x80, '\x00', 0x2f}, [{0x1, 0x1b, "cb1dc2e71a7f78fc6ad49d3eaab35a8324e7a56de9f06163d6665c96a1e1214da0666f8ea16d6377c103c34d1d9d1c686b16979b21ee5fceb9c68d301c98ea430bbdc876cbc78a8b5eb39382a7d2910d64e1dab2b6b0a73f26d0238e46b17921e04b30802f3ea3dbe3dfc3871780ee52a00c6937613cbdcbe5bf745714731d33e5ad8a35413cb5591274a0a2c998e12d4978f2404039641ba3d059356f0bf67c1b204079e34856f589e0184127d1b3609a8170de358fc9caaf0902888cda63a34bc31ee73650f6e5f9557aa0fec9966fa616aeb15362acd754878b7d"}]}}}}}}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r9 = ioctl$TIOCGPTPEER(r8, 0x5441, 0xa000000b) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) accept$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000340)={{r0}, "fde1e2515edb66f50ed6e409a5963ffb3d99bf511016453b07acd42847f66bb5faa1609ee2a6b17a8fae236e722aae9fc879bd4b9fc476bda3e0e4d2cb1b3ea82ea8a3d34c6275ce25ef910f2afc99edb668cfc6f9a4e3e3349b95cd0db3530fef98704c57b45393f28e15892063e2aa8d6c676bf92b7fa4cc6082e4d422c79d7e6c462c2d870fc26c09c02e566d7b0bad32c64ee59c1a995f7bc0201f2be4db09182245f6178e04038ab649c262dfbb20928fd1c4c58d5202170ef09f1055a46e6e407281737b5ee8734f75c64a5ba3fd79a96956c20f4a60c52976030fc7934b405f2d327f998af5474e3f0f067deda7f9a950aefe0a0b24e94273c7aaa0d547e69f7c9db31f2866434f30c33eb3ad1b962a7b5bddd4dcb75a845d6787d4dce480d18fc7c4e5a6150c6c28f7d1b386e9c1f45d4986107f7b7680d37abbacb95c671a7a13b2780b92275ddf0891ace35f7ab830cab7591824d5579e8a9cfbcbc2fd4294859042da538d7c342878864a18e63d84df1b153459436497eca3af38f2e31a7912c06511bf796c9224acac934194b65cd842e8e5073da0b18469ef136b9cd499eea8e7dfb72efb7c45ca44a539f536a53f0e3ade9fb1fbd562e2bf25cda515673dac3d06eb2ccc703b92289e7ddf801ed5176f37d29f5127738c7bd906a46d89f680c19c6536917d0bdadef9e0e6abbdb1b00d0a978fda01ee29dc8030ccac92465ed1e6d5f827607a08823656ec4cc9604cf2ff2768e3165e833ba2f097638cd29b648484737b894a056648e7c7845c4770d750052d00b9ba4500870f023c1a6aa2504d4e762fe2d023f8edd5d78771766a036a9b9c5b51158cfbaac442cc160c30ac67ef09dffc35ca973964824f52aacacc498727b5c32b932d81eb79851f2b9196a4e27db2d6c29a4277b1b02fb93e887d08f2a34c38ae6254da3ce46803bf4d100ed5994ccaad1e57a57c3a62cd3ed18b1c7a4cfc093099d9343eaa418d5a93a12c6cb53b1b38448c4c9134100f92bd5109666e11a0930330a70ac40caea6e5dadb4192cda894ee98290ccdf25225101920182557b0a9f0b5e811032ca2d440b411944dd89c63cde5fd12c09e7058d3b0d3fee3e9c770cfadf0a5965ecd3cdcaada7376dea961ba27391b9901b94fe1e6c44aade97f991298b28947f4b7dbe1facd97536d0fbf3732a881b953eb1975ad753691eaf68d70f83fd47554252595936aaeebcd1e90c9391740eebd27f3e00d63c27466468409a67cb9351117169071e256f350ad95df1a1643e0d6cfa63c10111a63512c916f549fdecc2a426cb6941030508254c95a46b455f51532ba196634e32c37d767a9e919a3becfe75e81abdeaaf6812582b7e4f21a7b2e21a96fc8fb70d04d27bee77d7f30abae23cff8cf1082d201354c3f97713bc121e4f08fcbe118e1435212830203c5e067e1fb0defd14e14a29c7bed95eedd48a96cb00f1e54c390223b7e22f3b2a22727dc1c95d99c00ca54255a996d2ad025b534e5ab137c7ac59e5236dd942ddd8923f739107d4bfadb2bf459770c79993505a667e9eb915c72545b389cb863752d4b9949ea5b836e5ef164ff10a74f2c203eb4711795bbd391022ca2cc6c2aaea37b8fc3576591d63dfeb14bea528e443e925988ede1760f56ad0af296662a1980fb4071f6895e874a4621508a5d2976663da1ac6f212fad8ba198e1c5040af6220b22636780553dc2296ca1fee24e9cf31179b22aca33065fbaacb8af38d06ba09b59b23f13aa7822a60fc1015e2f2f5f65ecac4d01c1b3ce0baf98a01ad356a4c4e032019da07b65abf17069297e3e28aea5b2862a6a1d4b1dd3365522d4981fd50300513b8b0afeab5a800b6f85e7b236ba996d9e400a116ae7288a4178efdcd35c1abf87550f476d3240ce07a0fbd0dc480853309671518cd4e40e5f1e7dc5d7d9e71cfa80de350eb8291e99ca23149da46dfabe596657256234ac014ce68bee7a901cf20831b13a64e7c90587c3af5dcb70a91cb03fc0bc97c4e49cdbd539f56d3b82bb79ca7d656d42253ee7e36d6b14b51f6cbfef7241d39249c9319fca8b62363fd9cf1b7baa32621add45f9b34aff0371cb42caa408ad76487b9c83ad0a270a240d2027560d508bd2c67cb0426f4195c2502e0ec94f387f15a03dfb5aa1d1a3405e31113623d409de556fc86bd77ffa983680cdb23c129b5a83cc3d0d100c275e65d4609e709f8a1a473d4fc7407f72c84cab5b58256942fd8a9f3096d606b2687e21130c47b727bffb7c3910c1c4ebe5a0a036539a80b642d2cc8062b1d755f8247faa14ee07c27afd3d66263287e90671bd1001708dda1cd03bf24bf0ba394696be23bb7c7ffca2d7d1729cbfd426a4996cced00471417cf6e211e6a797dbeef5168b6bb5160fd15e3510dae05d57261417eb1fd89d09fa88b4142e06b4ff11a2da1de1d640e43998f652dd7ffd7accfaac611da84cfece448be975420d576803a280c8565498c9d6c0da16079215eb9a1d76d461ffe6f1fde0fcab82e0381f21d87854ea9fc3dc3f17a338fb4e41c4700cbdb2cf049a0ee94b92d48d3ae77bee7442f61fde117da81fbf4e86c337f1916b341b4b294fc3eab3ddea20f3be8673c4ce0267e76ba02cbafe96838254b32931ef1ebbe05841925221fef1f3c688851b05e2450be9dfc110f52e08635e7f6242cac7e7255ce54e955c3c2a33d924917bbcbc5bf09949a1b8ee29058928d887a1d08ea2a4093d1bc7ae45f8d993adf9a8b43c02443f491cf2b3ed2fb0eb0c846768184099246fefdbfbe8b4c77951a7f34cfad701bca2c5abc8b2d373aebd6a093243440bede5867f8140570f1a6dd52c5e9c8290150356083b4641b3b7731943623d601b3935a4acf9d0844215d264659adc42a32425d9e04d67c038ffa4de114ab9287de88c0ddee22f9b328e1b938c8768e5321f7753e3fedcd390abb2beb8194ba496268d192ccdca7590e74412b9c1416bd6fb153f9bf54c2bb6b60fb4818e1d3be7fd0bde2714a06726c2b3e53a6812f3c5bfadb15bbdf87deb8cfc0853ce42f5e0656dabfe1d063b2fc2c354c3e13b67713fa4229e5c9dbb9dfb25d0edd3e2259ded24e9d24ec430b8f1a6f99aad1846ca6305ba54d76f0ae3be344d2ffc4fbcb88711169d5464c485a8108c2e7b571f031421ac56022e6f9dcdea0fb8f4bc87b21e8cdeb7f6b86c0cba457c8ec4aec241adc5b6f81b41147db3b3daa3fc620dc30c0ce667efe3de1da1ad8aa4ae17546fec976ab586da2ddb692ae74f84727a4b9eacd9ed0f541bc049a27ffcf221fa0cb681835fbc612d15fe89c8f5a930b4e30164033c5941ea2af9af553f8170a03d5ffc4ef442d45d8b7c8262898e234152c8f9f53b47782d64d5d7e82dd679bcfec33d22816010efa9ea33bfa3ed38178dd3a9f8432f4b3264667a714b4aee20075d0d8c6b4ca4c97321542e88df2c64b6342a5700887d907a236eea9fef3bc9903e19dee869d146856b1bd8e9b869f89e0bf657db53c862d06b444f5212415aa69848220bcc5dc822050b5356f6637c7be863b709932c6148c25f66cb7450ac20fcc045cce1fc4295e541e64c1d6753cc7ec88c643e141aa82bac5c8fdfffa74d0d28fe99541f93ca292615f2bdeeb178dedc73669d3ba1a62d101e34495c7436ee6358a2a0e2c8ca7db4abb13f372ce8f13c0104a013704782d3b626912bc0cae6576c3f839af5a29e12f2b87ce18bd97203a848c4c617735be0e8fc65d0c66677a1d943a208b12d08b4e833e7fef6a58bd01c05b1fb427dc47ebf470bd26a3605278df71f03dcde1724338b97ee844695773a5a36c235b1b8330df0ca4a0360cc73c64d4cb4344689d8f079bc2b22c79c1c40f388d0f80938515541fcab2eb74bbc5215d4d1b3efcd74971e950821bf1343463f11078c8ae559ce35925ed4bb200a0114a64fca5c6e934c39ae99ee9a44e593939011b4333cdfdc94646331b7d2391d63d448f7d9dc78dc59de9cb82e5e23c653fd19a43cdab5549149dcf2c69a8a3375950cd96f913cc812f0d10e93c2cc1b4f5a0def820ffa426f5f0278daada8341c45b59124fb5d77b3899eefccd7ccbf5c2262b8964f28b7a0d0d0507871ddb92f22f2a1809d432f6c6fdf1b6512518fe897bec8facf87b1da54e20aac270e30d866de1140078c736977c0b56b9a0864e6390a2ed68d6c63b5fb372be343e36b7c2f934db1331abd9b130b9ccc59c2af0ec67a180a1d7106c6f27929e604bf9ea1037779e23cf8f44379133902614400826107351a6a3fbfe10cb50f7fcda0af93e3db7badde14e2ad4ef61409e6770b8a9137c9edcb58323c75772a2cb423cdfc65d696204f14c894fd5d023cae2915702c3719631e2ccbef9a38425077802f92b0c53ba9472e0c4bf4c558da295294c6a2f6559ccef7083d629df20a530898fd4b9ca2d4c4f54660d6b3cef7a33a0d7330605dbcd158ec57b230ebfdf5d665147bb62ce1bd651b748f81492e54e443566bc498cf91bb7779c8e4150ac86bf32fca5f8846af7a38f11281cafce92812d1ecd7259414bdb30595378b9cc30748e7812eaccce97f24e09686109de7ec2c30434606a9911b17226cda71146d3205511677a821bf06a4edc4e81eb5b721c4509c46f53e61fc3f0015e34a3f2aee3b20863de54d3e9dca56d091fca5f607fae555188c33e1eb04adf86557e17dadc5573ec67d52c6bcd1ee67983fc749f51656cc5ee0cf71a455c5402c144df9003fe942df26e7d7b64a60f7bcf85594bec0409a3c50210316639fa9c98178e52b673a166c53c32f1b31b6d6513837f0e69c280f00d0dfb4a089abc4086aa030c09de1bb28393935adb1caf36b5f4a20bb29632d1ff2079711f664518148e4b9885ad86345342a0b5ace684ad777d8d6e4bb4e3cb9e29740f2ea98f38a5c78a41e4558867efb20f18b705da38504626982646b4a39c5fcf4a120f4b1e7ff827aa11b4e22e5c7a4ecc1888602883f8466fd1a9c0fdf7277a970e1f9d0cf9546c3e7f92b2ead87fccad565b7c0cb4fe5488ed4742ab41473baa253c58efc753f8962842979a2c9c04e9e8717b89531b0a42cbb8cd257d09bc4cc82c468917e4386e8961acd46401dc766e8cfd87a2e7691fa83a1f078fa902697975715073bc6f54451a31c15ea2e35e5c3c595bed268f0f0b5f872df5a1f1c6257a72e017dec5abde202ffa6201ff37d358708c64518ca4631ca18d58b5865019c4b0335bbd6cb4f4dd92969c93935a45dea2aaa5c72374d4ffccfb9e10221149731063de1cae06ee107ebdf8ea68d8752c14bc181ffb2b29176b8e33bcc79dde3236d8f82f938cf96e021761b82610f16b076fb165466bef78713bbb45960643a516a179208f0592ce5fc982521f2e161f37b9acc7e6ed6b8e60254429bb97ddafbef4b6813ed907656a3d680fdf3df83e94c9f9a5d2bb593c7707f4b5adc65c1f3f22aa99fe2aa7dd1047a798fa269ba47ad874636654b383260c385a2190766feb322b95964cd1a09ded6c5392ef0ee68e812ac32cef029a6bba949cc1a3a92bc2aec9f4f15b648f4bfef3120dbee50be3f6dc8c7e17113af60e07591c4494276b31d133e190a2f73a93fbc630eb0619407fc8b50948b90e716798bcc4f984306b3ac22419d9e886569227c111e52cb6e823f74d2b17d97f107bbbe4247173216c9b662b2c050934d9ef21d717a2aa8d68ecdd9a2b46132c400147eb39457746731bfdfcfdcc0975bcc47e5c0b42ecd85"}) dup2(r9, r8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4040805, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, &(0x7f0000000540)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r12, 0xffffffffffffffff, 0x0) unshare(0xc040480) 13m22.062889121s ago: executing program 7 (id=5522): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1, 0x803, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xfff2}}}, 0x24}}, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70fd2b, 0x25d7dbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x23, 0x8e, 0x2}}]}, 0x79}, 0x1, 0x0, 0x0, 0x4c040}, 0xc800) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r7, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x842a01) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCGMASK(r8, 0x80104592, &(0x7f0000000140)={0x12, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="163280", 0x3}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x40000070, 0x0, 0x100000001}]}) 13m21.811088181s ago: executing program 39 (id=5522): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1, 0x803, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xfff2}}}, 0x24}}, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70fd2b, 0x25d7dbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x23, 0x8e, 0x2}}]}, 0x79}, 0x1, 0x0, 0x0, 0x4c040}, 0xc800) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r7, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x842a01) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCGMASK(r8, 0x80104592, &(0x7f0000000140)={0x12, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="163280", 0x3}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x40000070, 0x0, 0x100000001}]}) 6m5.922783454s ago: executing program 1 (id=8241): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000001200000000000001"], 0xfdef) 6m5.759732399s ago: executing program 1 (id=8243): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40104) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRES8=r0, @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000500190001000000080008000700000008001700ff00f2ff050018"], 0x4c}}, 0x14) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f000107"], 0x18}}, 0x0) 6m5.699055502s ago: executing program 1 (id=8244): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201ab00c4b20710200e01015a7a0102030109021b00010000000009040000012e6d0a000905ff276b"], 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842) (async, rerun: 32) syz_emit_ethernet(0x12, &(0x7f0000000080)={@link_local={0x3}, @multicast, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@generic={0x8906}}}, 0x0) (rerun: 32) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000600)={0x0, 0x7, 0x8}) (async) r2 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000040)={0xc, r4}) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f00000000c0), 0x4) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000340)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000500)={r6, 0x10, "0b4dda512cd70b17400dbe3da4a197b7"}, &(0x7f0000000480)=0x18) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000003c0)={r6, @in={{0x2, 0x4e24, @multicast1}}, 0x1, 0x5, 0x80008001, 0x4, 0x6, 0x400, 0x80}, &(0x7f00000004c0)=0x9c) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(r7, 0x3b80, &(0x7f0000000280)={0x3a, r8}) (async, rerun: 32) syz_usb_connect$uac3(0x6, 0xe9, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8004, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7, 0x3, 0x1, 0x98, 0x60, 0x8, {0x8, 0xb, 0x2, 0x0, 0x1, 0x0, 0x30, 0xe5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x3c, 0x5}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x307, 0x4, 0x4, 0x7f, 0x3ff, 0x2, 0x101, 0xfff}, @multiply_unit={0xb, 0x24, 0xd, 0x3, 0x4, 0xc2a, 0x26c0}, @input_terminal={0x14, 0x24, 0x2, 0x2, 0x202, 0x6, 0x2, 0x3f, 0x8001, 0x7ff, 0x2, 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x2, 0x4, 0x6, {0xa, 0x25, 0x25, 0x0, 0x4, 0x413}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xa}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x6, 0x7d6, 0x5, "243506d22473bddd"}, @as_header={0x17, 0x24, 0x1, 0xc, 0x80000001, 0x24, 0x1001, 0xfb, 0x65, 0x3, 0x7}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x7, 0x0, 0x9b, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x1, 0x81, {0xa, 0x25, 0x25, 0x2, 0x8, 0x10}}}}}}}}]}}, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x38, &(0x7f0000000200)={0x5, 0xf, 0x38, 0x3, [@ptm_cap={0x3}, @generic={0x1c, 0x10, 0xa, "cfc6eabdd849225a9b5d4042178045bd474f3f1e37122ee3a0"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "36bb48b37ddfa38918e00ca3243b5161"}]}}) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010004b04000000000034f27c76000000", @ANYRESDEC=r0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008000800810000000a000100aa"], 0x48}}, 0x4) 6m5.625752925s ago: executing program 1 (id=8245): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x102, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10002b00, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) (async) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x102, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10002b00, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000180)=0x2) (async) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000180)=0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00') r4 = open_tree(r3, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x1027, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x1027, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) mknod$loop(&(0x7f0000000440)='./file0\x00', 0x8000, 0x0) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140)) setns(r5, 0x10000000) (async) setns(r5, 0x10000000) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0xa8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x22) (async) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x22) 6m5.469084109s ago: executing program 1 (id=8247): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000000c0), 0x400000000000161, 0x40050) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000100)) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="00220500001307efb9ce47"], 0x0}, 0x0) socket$inet6(0xa, 0x3, 0x5) socket$kcm(0xa, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b77, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) socket$inet(0x2, 0x80001, 0x84) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x0, 0x5c49, 0x200, 0x3, 0x388}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x31c1, 0x4000, 0x1, 0x2f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xee24, 0x4000, 0x2, 0x49}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa26, 0x4000, 0x0, 0xdb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x49e, 0x1000, 0x1, 0x1b0}, 0xffffffffffffffff}], 0x4, &(0x7f0000001c80)={0x2e, 0x22, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, '\x00', {0x0, 0x3f4, 0x0, &(0x7f0000000c80)=@buf_512="43f63f6875b4a208097a105c9197484a6b812be43805c15e47cfa6ff573a755ed2c2757dbc31944402019b36ccf40cc8ab723c9f4bd8838fd4dc18845467981e8b048b454d88cb64bdb022524a86edf9e7c68c4956a65ee9b5d86408d8ed410086a84fa41c2ec942e8492507ff8123af0e37eaecb26fb5bc1e0ac92a919e92dca4cb1445fdb21602017a49f0732a97a47841b59000b8ddea5456e2fe3a51769ad2ac3df40b05a84c54c82c9f65daccf0360b30771c3138c7d4afb4f67fc0d654335ced8c058350c93421377f3ce8707468fecb4b6b17cfad153a078d63fa2a314311849270ddb2927b9cf4ccdaf4f8c17bc5bfb8b3b325c03706971e9e2146c745e47372408b17f6b8e2d9f072aa54eb106a441a68110bca82e11ad7d570713e6356947d5ee7cab07b6585b1a7444200a03224b5bfb054e8c1c61adf50229c1f86eec746b269fdb1b4f6c6afd0ca4c4348b2979ec2c6e1738f47a11b7f89e2fab82718b445d2d9bbf922a5d14370064e90246904597f9637769b18786b053972b354a5f46232e6a4414c0c66a7ec51022777bbc33055a6d4d09c13126c4ee1ae119631f606a555926ef83aaea1c943067397f56d1a4ce8ad88e17d2b1873165dcdb2570f6c2c824b1ffd0e4cce1c096ac837e40e28f6ec3c5ad3f857e4f82d4d05129f820343d07b22cc2d682413b91e53fdbbce23270e6d9c36c21ccc627653"}}, &(0x7f0000001d00)) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xddd4, 0x4000, 0x3, 0x0, 0x0, r4}, &(0x7f0000000340), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES32, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6m4.596500287s ago: executing program 1 (id=8250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000880)=@urb_type_iso={0x0, {0x1, 0x1}, 0x49e, 0xc0, 0x0, 0x34, 0x3, 0x60000, 0x1, 0x800, 0x8, 0x0, [{0xa, 0x7, 0x3}]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xee}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) 6m4.266484267s ago: executing program 40 (id=8250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000880)=@urb_type_iso={0x0, {0x1, 0x1}, 0x49e, 0xc0, 0x0, 0x34, 0x3, 0x60000, 0x1, 0x800, 0x8, 0x0, [{0xa, 0x7, 0x3}]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xee}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) 5m3.241140901s ago: executing program 5 (id=8579): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) 5m3.225934519s ago: executing program 5 (id=8580): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xea5bc50b6199d77e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018", @ANYBLOB="00000000f6ffffffb708000000bc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044080}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xc0}}, 0x200000b0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000", @ANYBLOB="83"], 0xa0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = io_uring_setup(0x1162, &(0x7f0000002380)={0x0, 0x2fd9, 0x1046}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl(r2, 0x3, &(0x7f0000000500)="7a3cb27efa3c8b767213af88e8d029126c911ef89f90b062d514e45a344e0d723c50b976aa0dc7748f3e2f081fcd89e6e7e18362ec47edfe4e2cc3aad05f27851a2ddfda5d4e3d7d5319b105e2faacb7f0f5") syz_io_uring_setup(0x1e0c, &(0x7f0000000580)={0x0, 0x0, 0x8000, 0x0, 0x4, 0x0, r3}, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0xffffffffffffffff]}) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, &(0x7f00000006c0)={0x1c, &(0x7f00000001c0)={0x20, 0x14, 0x76, "5a5cf70dc6d40f3255f7523152bbf556b7a088554b53d5481bc01f420a6b124fb08d345461b74d24416f95fcb8309b076f87aad215668c518a6a9174fb4cc08af447ea8a6cf2a49ce5fe32d67934697f1808b3cc294eee5057c316b41fffff0952a39eec763fb76caf14113f66a9705c7dc1a3812a5b"}, &(0x7f0000000240)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000680)={0x21, 0x0, 0x1, "a2"}}) syz_usb_control_io$uac2(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(r4, 0x0, 0x0) 5m0.071514491s ago: executing program 5 (id=8594): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011801000000405804155000000000000109022d00010000000909040004010300000009210400040122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x9181}, {0x4, 0x2, 0x8, 0x2, 0x8, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) close(r7) (async) close(r7) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x42}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="9a", 0x1}], 0x1}, 0x4) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) (async) r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r9, &(0x7f0000005740)=[{&(0x7f0000000280)='\n', 0x1}], 0x1) sendmsg$NFT_BATCH(r9, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0xb4, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x88, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x1f}]}}}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_KEY_END={0x20, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}]}]}, @NFT_MSG_NEWTABLE={0xf0, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0xdc, 0x6, "be2c9d4034c4e9c7f25fbbd56cbe894feff3aec11ae9fbc2d5369a4263e6ebe6c50b44262dab01573a2ceededa7e73c39ffed841b4ab6e5867f039818636e086b3db0b4e6405ec63b58da6264b48e6f52547fb9d21c5b01c8ee908c363827b82d898b8a8c725ce4e22503b46abf9bf91dd09c2d2ec5a446cc6018775384c071aed60f684c2286aaa69832be79ce1c758e82598579c99a0bbe2f4b25a8d1c4cfcec12d0433e951009ffbb91f181269cd62cd4f6cc7c51faca6233966e9d6bd40572f077d28c06c6d5f7c080b345d2a2abf91820ee81df90a7"}]}, @NFT_MSG_DELRULE={0x44, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0xc8, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xb1, 0x6, "83ef712fcb98ef77c3dd6bca31ff4a91896e79e4ae1b57ac8b28f817c6daef8bd17e38190fc5cdd8af60bc605be2ea112aa63e751a78185a33c229e05d1a3c5eb9005a755936abefe6e6715df3bce004f1938b3d8b7a3c6b0b30b019e0e0c05435669ea1292d0d79057fa0c66d3298a4916c60d57c6fdc691d6dba6fa53bd718416924fca0fafee331c530c92b38c6cb48fa6a65924ee86cc9affba2aec873d08ed86bb021cada7a4f787881ed"}]}, @NFT_MSG_NEWOBJ={0x90, 0x12, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_DATA={0x7c, 0x4, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xaf}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x400}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x39c}}, 0x8d4) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x2, 0x2, 0xeeef0000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002207000000a20a09a20c0804"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002207000000a20a09a20c0804"], 0x0}, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r10, 0x40405514, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x5, 'syz1\x00', 0x8000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000840)) syz_usb_connect$midi(0x5, 0x4b, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x133e, 0x815, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x39, 0x1, 0x1, 0x9, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x8, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x7, 0x3}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x823, 0x7}], [{{0x9, 0x5, 0xb, 0x0, 0x20, 0x5, 0xcc, 0x6, {0xa, 0x25, 0x1, 0x6, "ff243790d6b8"}}}]}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x0, 0x7, 0x9, 0x20, 0xc7}, 0x101, &(0x7f0000000240)={0x5, 0xf, 0x101, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xf, 0x9, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0xd, 0x60}, @generic={0xdc, 0x10, 0xa, "b1c1df771b15f653eedd679bb67c94a8aceb590a7ed24c8eaa23f754eeb736c4db8c8e12cedc47e3099d69f675c977c234b78b5d335f41347a3d73786baf4eb085154081dd81965597e2f9515064f65ed14f3c1eb2d15f5f2383cdaf1eba84ae1b766f1d07591a06b9089708bb7fb6b5e1e496e953f5ab727e96b6ed516084c455867860482c3e979ae438c8897e193886d661a37204244f1a100f4d3104841d84c3a1e7b9efada726c24766369d5d8004b963975f6582e00727538fa91701ffee59e1fe6c819d6f604d2f93e44a201b82f97758d14ace5c0f"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x94, 0x10, 0x0, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0xd, 0x8}]}, 0x1, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1c09}}]}) 4m56.962798561s ago: executing program 5 (id=8606): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x2, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x8001, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x80008, 0xffffffff}, 0xd0, 0x8}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0) unshare(0x26020480) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0) syz_open_dev$usbmon(&(0x7f0000000180), 0xfffffffffffffffb, 0x101040) umount2(&(0x7f0000000000)='./file0\x00', 0x3) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x208402, &(0x7f00000021c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000002f00090027bd7000000000000400000004000d"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 4m56.09607847s ago: executing program 5 (id=8612): syz_usb_connect$uac1(0x0, 0x81, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000206307012040000102030109026f00030109403f0904e0ac3e67000000010100000a2401d2000a0002010209040100000102000009040101010102000009050109ff037808ba0725010804030009040200000102000009040201010102000008240201fc03080107240108050210090582092000030200072501"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) 4m55.942446123s ago: executing program 5 (id=8614): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200"], 0xfe44, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200, 0x489c}, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, @dev}}}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c0}, 0x40004) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e000100000000000000", @ANYRES32=r2, @ANYBLOB="000000000a0002"], 0x28}}, 0x40040) 4m55.821840405s ago: executing program 41 (id=8614): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200"], 0xfe44, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200, 0x489c}, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, @dev}}}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c0}, 0x40004) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e000100000000000000", @ANYRES32=r2, @ANYBLOB="000000000a0002"], 0x28}}, 0x40040) 4m42.783840551s ago: executing program 0 (id=8662): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000300)="7800000018002507b9409b02ffff48000203be04020406050a08040c5c000900580004020a0000000d0085a168d0bf46d32345653600648d270016000a09000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004070b0015000a0000000000e000e218d1dd3b6ed538640f3250", 0x78, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="06000000040000005b0010008a00000004000000", @ANYRES32, @ANYBLOB="ffffffff000000000000000000000000000000008034706e1da371894771219af90e7a859c0ce3b2be04015255d999cf7ca99dbb5118e92cfcc8af22d2d46f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3a}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3a}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) shmget$private(0x0, 0x1000, 0x1008, &(0x7f0000bcb000/0x1000)=nil) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10rust/|\xa2\xae\xc6\x01\x00\x00\x00:D%', 0x0) (async) request_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10rust/|\xa2\xae\xc6\x01\x00\x00\x00:D%', 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000319000/0x4000)=nil, 0x4000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0xffff9000) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) (async) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r7, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r7, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) signalfd(r7, &(0x7f0000000140)={[0x8000003ff]}, 0x2f) sendmmsg$inet(r5, &(0x7f0000000900), 0x0, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) socket$nl_generic(0x10, 0x3, 0x10) 4m42.620836727s ago: executing program 0 (id=8663): syz_usb_connect(0x6, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220009000000440904770001039a02000905333100000000000005d3"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0xc0081) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)='\x00', 0x1, 0x20008801, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x7}, 0x14) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000200)=0x102, 0x4) recvmmsg(r0, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x180}, 0x48) r3 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, &(0x7f0000001240), 0x80000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8}, 0x50) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r7, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r9, &(0x7f00000063c0)=""/1024, 0x400) syz_fuse_handle_req(r7, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008880)={0x30, 0x0, 0x0, [{0x0, 0x0, 0x4, 0x0, '#,,-'}]}, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m41.603215227s ago: executing program 0 (id=8670): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0x9, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0a}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000480)={{0xc, @broadcast, 0x4e24, 0x0, 'rr\x00', 0x6, 0x9, 0x14}, {@multicast2, 0x4e22, 0x1, 0x7, 0x0, 0x8}}, 0x44) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r2, r7, &(0x7f00000005c0)={0x0, 0x2, 0x0, 0x3, 0x256, 0x0, r2}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b6, 0x80, 0x1000000, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffb, 0x480, 0x0, 0x2a8, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc25b, 0x4, 0x1, 0x35c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x1d, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x1000000, 0x1, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) r8 = syz_open_dev$media(&(0x7f0000000000), 0xe, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r8, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) 4m41.147576286s ago: executing program 0 (id=8671): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000280)={0x18, 0x2, {0x3, @local}}, 0x1e) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000480)={{0x3, 0xa20e, 0xfffd}, 'syz1\x00', 0x2a}) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000002340)={0x2020}, 0xffffffffffffff0f) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(r0, &(0x7f0000000700)={0x18, 0x2, {0x2, @multicast1}}, 0x1e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000200)) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x7) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000009c}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4m40.945241855s ago: executing program 0 (id=8672): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x64306, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) 4m40.728007985s ago: executing program 0 (id=8674): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffa, 0x1c5401) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB="0000000000000000000000fb0000000000000080", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[], 0x130}}, 0x20008040) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00010100004000", 0x7}, {&(0x7f0000000080)='%y', 0x2}], 0x2}, 0x4004) readv(r1, &(0x7f00000002c0), 0x44) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c00028018000380100001800800010009000000040003"], 0x48}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000200)={0x4000000, 0xfffffffe, 0x7fff}) close(r0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x800002, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x3, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0xa000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x7, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="0700000000000000000005000000"], 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0xeeee0000, 0x9000, 0xd, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0x70000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0xc, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0x1, 0x4, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x25000, 0xa, 0x4, 0xfd, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0xfffffffffffffffe, 0x8, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4m40.662335869s ago: executing program 42 (id=8674): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffa, 0x1c5401) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB="0000000000000000000000fb0000000000000080", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[], 0x130}}, 0x20008040) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00010100004000", 0x7}, {&(0x7f0000000080)='%y', 0x2}], 0x2}, 0x4004) readv(r1, &(0x7f00000002c0), 0x44) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c00028018000380100001800800010009000000040003"], 0x48}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000200)={0x4000000, 0xfffffffe, 0x7fff}) close(r0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x800002, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x3, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0xa000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x7, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="0700000000000000000005000000"], 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0xeeee0000, 0x9000, 0xd, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0x70000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0xc, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0x1, 0x4, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x25000, 0xa, 0x4, 0xfd, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0xfffffffffffffffe, 0x8, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 32.397778163s ago: executing program 2 (id=10097): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000000c0), 0x400000000000161, 0x40050) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000100)) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="00220500001307efb9ce"], 0x0}, 0x0) socket$inet6(0xa, 0x3, 0x5) socket$kcm(0xa, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b77, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x0, 0x5c49, 0x200, 0x3, 0x388}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x31c1, 0x4000, 0x1, 0x2f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xee24, 0x4000, 0x2, 0x49}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa26, 0x4000, 0x0, 0xdb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x49e, 0x1000, 0x1, 0x1b0}, 0xffffffffffffffff}], 0x4, &(0x7f0000001c80)={0x2e, 0x22, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, '\x00', {0x0, 0x3f4, 0x0, &(0x7f0000000c80)=@buf_512="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"}}, &(0x7f0000001d00)) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xddd4, 0x4000, 0x3, 0x0, 0x0, r4}, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES32, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 30.703960444s ago: executing program 9 (id=10102): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x4800000000000, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x6, 0xf, 0x1) (async) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x6, 0xf, 0x1) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000180)=0xb515, 0x9, 0x1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000480)={{0x1, 0x3, 0x93, 0x8, 'syz0\x00', 0x47}, 0x1, [0xe, 0x80000001, 0xffff, 0x7, 0x1, 0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0, 0x3, 0x5, 0x8, 0x4, 0x45, 0x5, 0xfffffffffffffff1, 0x4, 0x1bf, 0x8, 0x800, 0x5, 0xfff, 0x0, 0x75, 0x1, 0x6, 0x2, 0xd637, 0x4b70, 0x1ff, 0x6, 0x3, 0x1, 0x40, 0x0, 0xfffffffffffffff9, 0x5, 0x4af6, 0x0, 0x5, 0x134, 0x4, 0xffffffff, 0x100000000, 0xeed, 0x2, 0x6, 0x9, 0x10001, 0x4, 0x7e9, 0x3, 0xa9, 0x4, 0x90, 0x0, 0x0, 0xccc, 0x6, 0x4aa, 0x8, 0x8000000000000001, 0x868, 0x100, 0x0, 0x3, 0x6, 0xffffffffffffffb0, 0x9, 0x4, 0x6, 0x101, 0x1000, 0x8, 0x0, 0xe5d5, 0x2, 0x9, 0xfff, 0x7, 0x4, 0x7f, 0x7, 0xfffffffffffffa0b, 0xffffffffffffffff, 0xa93, 0xfffffffffffffff7, 0x2, 0x6, 0x4, 0xff, 0xb4, 0xfc00000000000000, 0x1, 0xa0, 0x3, 0x0, 0x5, 0x6f92, 0xffffffffffffffff, 0x0, 0x5, 0x6, 0x800, 0x4, 0x1, 0x8e, 0x3, 0x107, 0x2, 0x6c73, 0x5, 0x1, 0x5, 0xcc9b, 0x0, 0x2, 0x332, 0x1, 0x1, 0x2, 0x184, 0x2, 0x8, 0x0, 0x0, 0x7]}) fcntl$dupfd(r0, 0x406, r0) (async) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000000c0)=""/23) (async) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000000c0)=""/23) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x80000) r4 = fcntl$dupfd(r2, 0x406, r3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xb, 0xc9}}}, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0x2011}) kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r4, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x20004}) (async) kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r4, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x20004}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000780)={'gretap0\x00', &(0x7f00000006c0)=@ethtool_gstrings={0x1b, 0x8, 0x5, "c917dd91ac"}}) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x4, 0x100}}, @l2cap_move_chan_req={{0xe, 0x67, 0x3}, {0x1, 0x81}}, @l2cap_conn_req={{0x2, 0x5, 0x4}, {0x463c, 0x9}}]}}, 0x20) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r9, &(0x7f0000000080)=ANY=[], 0xff2e) (async) write$binfmt_aout(r9, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCXONC(r9, 0x540a, 0x2) ioctl$TCXONC(r9, 0x540a, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000100)=0x2) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x5a, r7, 0x1, 0x70bd29, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000bc0)={0x0, 0xfffffa31}, &(0x7f0000000cc0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000d00)={r10, 0x3}, 0x8) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) 29.64802077s ago: executing program 9 (id=10108): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_pidfd_open(r2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000000c0)="01", 0x24}]) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) fsopen(&(0x7f0000000300)='ext4\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700930000ffffffff0a000000060001001000000008000a00", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008000) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') write$tcp_mem(r8, &(0x7f0000000100)={0xffffffffffffffff, 0x20, 0x7418, 0x20, 0x6e}, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201100372680c400d108a424c92a3febace9375e72591313f4233ba990132264c331802030002f1cb7c37077019869f68a908fe40d509043d3eb1b11ddd03a4049e08019ea154ca0905010c100005f806"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x1c09}}, {0xf6, &(0x7f0000000140)=@string={0xf6, 0x3, "9c803659f90ec27b590766ecf2bfb354c29f61de1f8a0bddbc99a87394da1e1ffe5ecd4192d212a8269b96a3becbb8c5b5898b6b0527022c4cb694a313b3a34f3f12eab2fcb22497c6f645945b7b090c4f51ad0e9632cf32f5af0e48fb16edc9388cc02aa217fae4a0a766cf6d5ef27bc56d2af31384e50a66716fdad3241e840c1092b85a8f27d17aa2205caaa4f83bad551533875ab77c92d7604d4d7f731495d7d6873b731799b11f4ac621989b7ddc3396f4128121284f4cf0e6a8ab3556ce50fb995e28e4f56aaae9a4d6728261dc586d77d70cb2193e911afac1902f38d7ffec5dfa573f08b70e426c37b286172ed1b5f5"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x827}}]}) 29.282924281s ago: executing program 2 (id=10109): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) flock(r1, 0x5) (async) flock(r1, 0x5) ioctl$TCXONC(r0, 0x5608, 0x1) (async) ioctl$TCXONC(r0, 0x5608, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0) (async) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000ec0)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="4014280000001015fd8a0f0edbba429ab40f0c59"], 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000200)=ANY=[@ANYRES64=r3], 0x0, 0x0, 0x0, 0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7fbc}]}, 0x2c}}, 0x24040000) (async) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7fbc}]}, 0x2c}}, 0x24040000) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbc1, {0x0, 0x0, 0x0, r11, {0xc}, {}, {0xfff1, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20045080}, 0x140c0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbc1, {0x0, 0x0, 0x0, r11, {0xc}, {}, {0xfff1, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20045080}, 0x140c0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)="9d", 0x1}], 0x1}, 0x20004014) r12 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12011001000000405804125000000000000109022400010000800109040002ff0300020048fac00e000122eb00090581031000f60000ebcaad41f42fa6c1960ed3f3fd816c94b803a11baca991ef1d48a0a697dcdbb5cab55b82220a21430a60c97411a716a8"], 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000280)={{0x2, 0x4e21, @empty}, {0x306, @remote}, 0xa8, {0x2, 0x4e24, @empty}, 'veth1_macvtap\x00'}) syz_usb_control_io$hid(r12, 0x0, 0x0) 27.418955067s ago: executing program 4 (id=10122): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf9}}, 0x4000010}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0002, 0xc, 0x1, 0x81, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xff}, {0x10000, 0x5000, 0x3, 0xfc, 0x8, 0x0, 0x0, 0x64, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x10000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x1, 0x4, 0x2}, {0xffff1000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x3, 0x7}, {0x6000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x6, 0xfd}, {0x4000, 0x1000, 0x0, 0x5, 0x9b, 0xfd, 0xfc, 0x4, 0x0, 0x5, 0xc0, 0x10}, {0x3000, 0x100000, 0x10, 0x0, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0xe, 0x2, 0x2, 0x7f, 0x1, 0xfd, 0x0, 0x9, 0x3, 0x5}, {0x2000, 0xb}, {}, 0x9df9ffdf, 0x0, 0x2, 0x20, 0xe, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3c, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c357825577583a5fde8a3427cc42f7d63c6cf", 0x40) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x183200) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b4a0d93481b232b11b819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x1000008]}}) connect$unix(r5, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 26.35985242s ago: executing program 9 (id=10123): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101840) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000080)={0x2, 0x0, 0x9, {0xe7ff, 0x0, 0x406, 0xadd7}}) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) (async) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r5, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x11, r6, 0x13906000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f00000003c0)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e20, 0xfffffffd, @local}, 0x0, {[0x6, 0x0, 0x1, 0x2, 0x0, 0x9]}}, 0x5c) (async) r8 = socket$inet6(0xa, 0x400000000001, 0x100) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e1d, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) (async) unshare(0x80) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x7, 0x9}]}) (async) fsopen(0x0, 0x1) close_range(r9, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 26.073757666s ago: executing program 2 (id=10124): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)="c16b", 0x2}], 0x1, 0x0, 0x0, 0x44000}], 0x1, 0x20048004) syz_usb_connect$cdc_ecm(0x2, 0x110, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfe, 0x1, 0x1, 0x1, 0xf0, 0x6, "", [{{0x9, 0x4, 0x0, 0xc2, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x9, 0x6, 0x9}, [@mdlm={0x15, 0x24, 0x12, 0x4}, @acm={0x4, 0x24, 0x2, 0x4}, @dmm={0x7, 0x24, 0x14, 0xff, 0xd}, @mdlm_detail={0x9a, 0x24, 0x13, 0x8, "34b9096446db4c32de5ce368059a41f4413d250e4e0e788715374469f0af0c8f10d5e0d71b63d1c5493b603d0dd7d7bad611e46541aa881173ae6a84d32c407e41caae5417f0473e231bc579052e199b1750c451959b2ef2198d9547f7937f6e12295e21ba243c2300df9993821eb631cc55dc929eb554a23f16fff16b2c13b3c461216eddb0ec7153768c8701f2db7e3dfe3e767f09"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x58, 0x2, 0x10}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x80, 0x7, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x10, 0x8, 0x6}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x88, 0x2, 0x7d, 0x20, 0x2}, 0x31, &(0x7f0000000280)={0x5, 0xf, 0x31, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1, 0x4, 0x543e}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x6, 0xf00, 0x4, [0xff3fc0, 0x3f30]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x7, 0x0, 0x5, 0xfff, 0x9}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x443}}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 26.046063991s ago: executing program 9 (id=10125): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000000040)='7', 0x1) (async) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) (async) capset(0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 25.678009622s ago: executing program 4 (id=10126): sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x24000884) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000180)}], 0x5, 0x4, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {0x0}, {&(0x7f0000001680)}], 0x3}}], 0x1, 0x4000000) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000003c0)="440f20c066350b000000440f22c00f32e1970f9d4b000f01d13e650fc0910000660f3a144800fbbaf80c66b8a8f6768566efbafc0cedbaf80c66b8c6fea28066efbafc0ced260f797300", 0x4a}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x33, 0x0, 0x0) r3 = socket(0x11, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0xa0179e08}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r1) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYBLOB="346a88f96c1864aa9c0a91b66632047a4941efe751d4db5d27bbc0f93efcb2143df61d84ffc72dd18e1e7f89fcdebed060bd67", @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200) r7 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$link(0x8, r7, r7) prctl$PR_SCHED_CORE(0x3e, 0x40005, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x121, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 25.667166684s ago: executing program 4 (id=10127): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) (async) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x7) (async) landlock_restrict_self(r0, 0x3) (async) landlock_restrict_self(r1, 0x9) landlock_restrict_self(r0, 0x5) landlock_restrict_self(r0, 0x0) (async) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r0, 0x6) (async) madvise(&(0x7f000021e000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) landlock_restrict_self(r1, 0x5) (async) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') 25.631960757s ago: executing program 4 (id=10128): r0 = gettid() timer_create(0x1, &(0x7f0000000900)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000008c0)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000680)={0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="000705000000050c8698d6"], 0x0}, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000080), 0x2, 0x200) splice(0xffffffffffffffff, &(0x7f0000000040)=0x5, r4, &(0x7f00000000c0)=0x6, 0x6, 0x8) r5 = syz_usb_connect$cdc_ecm(0x2, 0x65, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES64=r0], &(0x7f00000003c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x8, 0x1, 0xfc, 0x8, 0x2}, 0x3b, &(0x7f0000000a40)=ANY=[@ANYBLOB="050f3b00031b10031566a3a3e1f3166f8346220c3120792c430a0743000000000008336f0000002e3f000030c00000779d02a073f99f2eea52bb3f6bb4f1eded20527efab09471e0509936e048b02eda0e630febd27a17782840cd2a8deee8a1f02b3a292fa90b14e779447fe6718454963e0406c25858bec1b8aebdbbdc96e1e36da27c5ce72c4a8201b7a1c25e1084dc8e9b9c278b80dea46f2173493949451076f103911d15dc20f58e2d9398df9b49ffc1d8ca7fa7519f"], 0x3, [{0x88, &(0x7f0000000300)=@string={0x88, 0x3, "376a35ded3b31fc52565de7c0a8eddf76c25d8c0f85def0000f85864624cddae80d09a7985aeeaa0c8a644cc1c853c7c267efe7a5ddba4bd2e7527752821984c358c7655a75a4fbca1bdb3789955198466b79e7ae5ce0ba532bd5025009c0fd88356aaae4ccd8155960913f527db4694e0033aba0711a162ecc3d14a0ce931708fbe1d720d93"}}, {0x48, &(0x7f00000006c0)=ANY=[@ANYRES64=r1]}, {0x39, &(0x7f0000000200)=@string={0x39, 0x3, "474207c91ea3045f37a3641ad3ec5c5a57a09a5ce708add36ce6d319ac8391f5a42a4876d81f5625c9782c14c91c7cedb1debb15e03240"}}]}) syz_usb_control_io$cdc_ecm(r5, &(0x7f00000004c0)={0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="6021690080006d0334f46733777fc888a871a301445a6cc715f79677a85df8e6c73070f376540f38fc9ded2f862679b1a56d35b579aa82d8a4b65472315b89dd1c2f9b6478d3da15f22ccd1c6d48e9023011a95c0ecace07a4cdf879c614fa172f7570c62541a345438c1683ada2206e8505bb"], &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="4007180000003a61060c00000000e2ec088fed57171cc2e01e20ee0000001c9624cc675bef03000000f868"], &(0x7f0000000540)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000100)={0x0, 0x8, 0x1, 0x21}}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) r6 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) preadv(r6, &(0x7f00000004c0)=[{&(0x7f0000000940)=""/197, 0xc5}], 0x1, 0x37, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[], 0x6a) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1c, 0x0, @thr={&(0x7f0000000700)="830cb2d0298e89fbd648bffca432dcc679a6bb107ceee126f49f0ec58ca952a74056f905ca93217e62bfd179a52a6d45f5e8785830fc9180273d7d06d2c2323dfc5a5a4b60620b74c6cc1b6fc355dc8fe614209a25840e60cd8c662064916ac9fa1b8479a535e94f0646304376abefdedcb355c28d36754afb77f7fbe4579fce7eeee3a6e4340757f61dbbd9cee66ccf392d99ab1491b289c823d4b0d18da5ef109883800ed2fe5ad08fe924298d578d0190efda6cdceb9bdeaac8798b727e61a326fba2febd2262", &(0x7f0000000c80)="4a0a4ae007db0c8c38d7b72c926ddfe7248ca31c281c494e01878758653eb4d470c4901701de6fa3f942ff5e7a04bec6aba17a76c2c8305083527d8c043cc8c0ca29ce08fa1460ba33a0c3080eaac0e988a2e8fef84bb522e18f7a683f02985d3c3bb31f7ac8d9a22e9141e8c8d9b27c723659a2079b0f6ddf10cf76764f32e3afc422e732da0b33dda20b1058414722b278d74b046b2da9009d5f3f16726fef53e435dc76b32b8c1437c3a8f6e2df10a2ecbb1cea01c5c99d04950093eeffd62e9f497272badb483b477e"}}, &(0x7f0000000000)) 25.186964366s ago: executing program 6 (id=10130): r0 = io_uring_setup(0x7dd4, &(0x7f0000000000)={0x0, 0xfa20, 0x20400, 0x0, 0x2fe}) mmap$IORING_OFF_CQ_RING(0x0, 0xfffffff8, 0x6, 0x30, r0, 0x8000000) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x101, 0x800) r2 = syz_io_uring_setup(0x7a79, &(0x7f00000000c0)={0x0, 0x2e53, 0x200, 0x1, 0x17c, 0x0, r0}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap$IORING_OFF_CQ_RING(0x0, 0x5, 0xd, 0x10, r2, 0x8000000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x85, "8d1f96c4f646205a76e4ac9a52691150c1b6efc0f373096643e99bc38ab4543f3d79e5ddabbb81333b31a25935315b3136feb170bec5d2fddead6d3c547cddc9aae6b1ee0247957103522a0b75b98ccab2b7416807116aaec135c6086db1d313aaa0b1a8ef48ddad192dcb50336d49424aa889219f1131ac82ba05cfde655f4c8febef2bf4"}, &(0x7f00000002c0)=0x8d) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x85, "8d1f96c4f646205a76e4ac9a52691150c1b6efc0f373096643e99bc38ab4543f3d79e5ddabbb81333b31a25935315b3136feb170bec5d2fddead6d3c547cddc9aae6b1ee0247957103522a0b75b98ccab2b7416807116aaec135c6086db1d313aaa0b1a8ef48ddad192dcb50336d49424aa889219f1131ac82ba05cfde655f4c8febef2bf4"}, &(0x7f00000002c0)=0x8d) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000300)={r8, 0x1}, 0x8) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x80c00, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000380)={0x5, 0x3, 0xa000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000380)={0x5, 0x3, 0xa000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) getsockopt$sock_int(r6, 0x1, 0x6, &(0x7f00000003c0), &(0x7f0000000400)=0x4) (async) getsockopt$sock_int(r6, 0x1, 0x6, &(0x7f00000003c0), &(0x7f0000000400)=0x4) syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f0000000480)={0x2e, 0x0, 0x0, r9, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x4eb, 0x0, 0x0, 0x1000, 0x4, 0xffffffffffffffff, 0x0, 0x140}}}, &(0x7f0000000500)) (async) syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f0000000480)={0x2e, 0x0, 0x0, r9, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x4eb, 0x0, 0x0, 0x1000, 0x4, 0xffffffffffffffff, 0x0, 0x140}}}, &(0x7f0000000500)=0x0) syz_ublk_setup_queues(r9, 0x0, &(0x7f0000000840)={0x0, 0x30fb, 0x2000, 0x2, 0x322, 0x0, r2}, &(0x7f00000008c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x37bf, 0x10, 0x0, 0x19b, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2bf5, 0x800, 0x2, 0xf5}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x34c, 0x0, 0x2, 0x2b8}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x740d, 0x8000, 0x3, 0x12c}, 0xffffffffffffffff, 0x0, 0x0, 0x0}], 0x4, &(0x7f0000001b40)={0x2e, 0x41, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x8001}, 0x0, 0x0, '\x00', {0x0, 0xbb5, 0x0, &(0x7f0000000b40)=@buf_1k="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"}}, &(0x7f0000001bc0)) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_ublk_setup_queues(r9, r10, &(0x7f0000000540)={0x0, 0xd4c4, 0x2002, 0x0, 0x32b, 0x0, r2}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x43fe, 0x800, 0x1, 0x1db, 0x0, r2}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5ac4, 0x1, 0x3, 0xa4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35e5, 0x10, 0x1, 0x247, 0x0, r9}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc443, 0x62dd19063c42cc68, 0x2, 0x22b}, 0xffffffffffffffff}], 0x4, &(0x7f0000002c00)={0x2e, 0x20, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, r15, '\x00', {0x1, 0xb7c, 0x0, &(0x7f0000001c00)=@buf_max_buf="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"}}, &(0x7f0000002c80)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r22 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r22, &(0x7f0000002d80)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x2008c081) (async) sendmsg$IPSET_CMD_CREATE(r22, &(0x7f0000002d80)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x2008c081) write$char_usb(r9, &(0x7f0000002dc0)="2278acd79b94a13f096c9ea1995099e5cd5c17265cee12eda1d98995bd8945da09b9892ac10d74e92787720e0433f81ec7d11d30bb6ca30608d7822b4e0e6d71609b8206fe5db4207a160edc059259e1248abad3e98da5860eb75ae9928b95c84f72cb6876676cbaf92769a472861a13b05be0853c", 0x75) syz_ublk_setup_queues(r18, r10, &(0x7f0000002e40)={0x0, 0xa03e, 0x8804, 0x2, 0x338, 0x0, r12}, &(0x7f0000002ec0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa7fe, 0x800, 0x2, 0x253, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3e81, 0x10, 0x3, 0xa2, 0x0, r19}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9d40, 0x6, 0x0, 0x9c, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xea5a, 0x100, 0x0, 0xc8, 0x0, r20}}], 0x4, &(0x7f0000004140)={0x2e, 0x20, 0x0, r16, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x703}, 0x0, r21, '\x00', {0x4, 0xdd9, 0x0, &(0x7f0000003140)=@buf_512="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"}}, &(0x7f00000041c0)) (async) syz_ublk_setup_queues(r18, r10, &(0x7f0000002e40)={0x0, 0xa03e, 0x8804, 0x2, 0x338, 0x0, r12}, &(0x7f0000002ec0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa7fe, 0x800, 0x2, 0x253, 0x0, r13}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3e81, 0x10, 0x3, 0xa2, 0x0, r19}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9d40, 0x6, 0x0, 0x9c, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xea5a, 0x100, 0x0, 0xc8, 0x0, r20}}], 0x4, &(0x7f0000004140)={0x2e, 0x20, 0x0, r16, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x703}, 0x0, r21, '\x00', {0x4, 0xdd9, 0x0, &(0x7f0000003140)=@buf_512="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"}}, &(0x7f00000041c0)) r24 = io_uring_register$IORING_REGISTER_PERSONALITY(r17, 0x9, 0x0, 0x0) syz_ublk_add_dev(r20, r3, r23, r14, &(0x7f0000004240)={0x2e, 0x2, 0x0, r9, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, r24, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000004200)=@any_dev={0x1, 0x8f6, 0x0, 0x0, 0x1000, 0x4, 0xffffffffffffffff, 0x0, 0x4}}}, &(0x7f00000042c0)) r25 = request_key(&(0x7f0000004300)='ceph\x00', &(0x7f0000004340)={'syz', 0x0}, &(0x7f0000004380)='-\x00', 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r25, r9, 0x7f) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r25, r9, 0x7f) syz_clone(0x8000, &(0x7f00000043c0)="f50ed3ddd556c79eeed5861315c7161987c999cb6d62a347cbe9816ca6186de780803ac93ef7bc14c82c916ec16f49bda2e00b2485240828013929502316200183e471c43501ed9ebbc0f46bca36df45bb0072c711c68de437267c56246e5cf1813b27079058bf15a4131c9016beb04901fa55b0da65279b1247d05bee450e8dfa0dcfcad88eba7f891a2c2537", 0x8d, &(0x7f0000004480), &(0x7f00000044c0), &(0x7f0000004500)="435e63627a3efb51ff") (async) r26 = syz_clone(0x8000, &(0x7f00000043c0)="f50ed3ddd556c79eeed5861315c7161987c999cb6d62a347cbe9816ca6186de780803ac93ef7bc14c82c916ec16f49bda2e00b2485240828013929502316200183e471c43501ed9ebbc0f46bca36df45bb0072c711c68de437267c56246e5cf1813b27079058bf15a4131c9016beb04901fa55b0da65279b1247d05bee450e8dfa0dcfcad88eba7f891a2c2537", 0x8d, &(0x7f0000004480), &(0x7f00000044c0), &(0x7f0000004500)="435e63627a3efb51ff") ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r9, 0xc1105518, &(0x7f00000045c0)={{0x2, 0x2, 0x200, 0x6, 'syz0\x00', 0x3}, 0x6, 0x20000000, 0x5, r26, 0xa, 0x80000001, 'syz1\x00', &(0x7f0000004540)=['/dev/input/event#\x00', 'J\x00', '{/w[\'\x00', '&\x00', '/dev/input/event#\x00', '\x00', '-@u\\\x00', '\x00', '\x00', '/dev/ubi_ctrl\x00'], 0x44}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r1, &(0x7f0000004840)={&(0x7f0000004700), 0x6e, &(0x7f00000047c0)=[{&(0x7f0000004780)=""/24, 0x18}], 0x1, &(0x7f0000004800)=[@cred={{0x1c}}], 0x20}, 0x2020) ioctl$FS_IOC_MEASURE_VERITY(r22, 0xc0046686, &(0x7f0000004880)={0x790d32be23886eb4, 0xf7, "1228b5709806df232b42772c27200450e25f9ca5df6522a80db9939475f27cb4a6e506327401028f742e1c41fcc67464b0958cb4f316cf1f6f3c064c9867578e6f413a1d911c473503ad5a5928648df291c16aec867aecde1c15d325b6f5e3d39b21d9c38477ac7ae6d5def174eefb0c4b5c30b6330e7f8c369c85a3cccceaedd8c989e53104f41b9370be7f7956628b47d2a527ab05eb206b64785775fba3782cd29d48e9a061b6c953f13a1348f5e7834dcc2cb8b3928a674587326e2632d2bfffcbd7d3c69b3f0af7c470e6b856340c4e0fdd054449086c22494ba3c5e8e12a359769999d380a0481f7b67ce30e4ac7aa31275e70f7"}) write$P9_RREADLINK(r9, &(0x7f0000004980)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 25.154285829s ago: executing program 6 (id=10131): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) capset(&(0x7f0000000040)={0x20071026, r0}, &(0x7f0000000080)={0x8, 0x3, 0xb, 0xa5, 0x2, 0x6}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) capget(&(0x7f0000000200)={0x19980330, r0}, &(0x7f0000000240)={0x3, 0x10000, 0x0, 0x5374, 0x0, 0x9}) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000280)={[0xe9]}) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f00000002c0)=@s={0x5, @generic=0x18, 0x5, 0x4}) r2 = fcntl$getown(r1, 0x9) capset(&(0x7f0000000300)={0x20080522, r2}, &(0x7f0000000340)={0x3, 0x2, 0x0, 0x2}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) epoll_pwait(0xffffffffffffffff, &(0x7f0000000380)=[{}, {}], 0x2, 0x5, &(0x7f00000003c0)={[0x5]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x1d, r3}, 0x10, &(0x7f0000000500)={&(0x7f0000000480)={0x2, 0x2, 0x8, {0x77359400}, {}, {0x4}, 0x1, @canfd={{0x2, 0x1, 0x1}, 0x2f, 0x1, 0x0, 0x0, "ce9c9b170ac21f86ae98cff6173afcc37c8103cbbf77efc988f69cad97135112d39d6acdb8f9a08b6eddf2de622826620add89f4ea63611556b3f46dcabc8209"}}, 0x80}, 0x1, 0x0, 0x0, 0x20004000}, 0x4080) socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000580)={0x0, 0xf318, 0x4d}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000600)={r4, 0x6}, 0x8) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000640)={0x2e7}) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000a40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000780)={0x254, 0x40, 0x1, 0x70bd2c, 0x25dfdbfb, {0x1}, [@typed={0xc, 0x9c, 0x0, 0x0, @u64=0x9}, @typed={0xc4, 0x133, 0x0, 0x0, @binary="91329212b50df856bd4fc3a8f0e825ee8bcc374f8e141764d5224fae0c6e937fb51ec51ac2b5aa95bd6a330ba3e66f455bafa14f9b27a867f6cf5d6de06ad06ac19c7510aba1958b7a04729c06c8fa0a842f634cd0e1ff4ee96ca3836cf0e764724cdd7f82b3264690127dc20d7f91b1d8a911f30368691d69801a44c2750098c8cd78c74450b34ba6a6d9ef4456456f09ec9371e352e245b4a7444edb230f95abeaf81d1a4d29cacaa93460072bdacc0946537cbb4d568bc4d33045983afdf0"}, @nested={0x16f, 0x11e, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @uid}, @typed={0x8, 0xd9, 0x0, 0x0, @uid=r5}, @generic="062fe6e49215088d9e4a8cd1e8442e6eef7e34c15b1c2950e2ef471761cfe49637a1b063cbd85f1abc2267e7a0625b1967f4bf75fcdf1a38ddddebd61a446b1fc6986cd051b5c507da03bc02fc6579ac44ef93bd8b4d1d7f78cbf46fcdc5e0d0431c3d53ccff63dba41ed497057379842ae427efcee04a412a150f18081a6fa493e3c4ac477bc0", @nested={0x4, 0x146}, @nested={0x4, 0x14a}, @generic="79b218e108bb9242df2d46c2a5ec7beeeab0f39552bd8d9d4dc9a4dcb84bff04b6c8bf4c052218f293cad39f03b89a0f0494c68878e0887bdd38f0f094d8757b17a005822f7fc4a8137de979bee6e659577d54a1000cdf5a77de33d2a7845ff78c718337a6267d0e331499f61bc09b365ccc1839d777afa45b73968b2c3008b41a3afbc095c83e30bc4c72ad312583e4ac972346a9c03d8c07573c8220ea64272f4ed190117e79c739c962742aa1f7f7d7f45f4820808e9953701f47054b6dd52226cf405b16d636", @typed={0x4, 0x155}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x21}, 0x20004000) read$FUSE(r1, &(0x7f0000000a80)={0x2020}, 0x2020) socket$inet6(0xa, 0x6, 0x5) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000002ac0)={0x18, 0x8, 0x5, 0xe, 0xe, 0x1, 0x2, 0xfff, r4}, &(0x7f0000002b00)=0x20) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000002b40)={r6, 0x6, 0x2, [0x51ee, 0x7]}, 0xc) r7 = open(&(0x7f0000002b80)='./file0\x00', 0x123c02, 0xb6) ioctl$BLKGETDISKSEQ(r7, 0x80081280, &(0x7f0000002bc0)) ioctl$BLKCLOSEZONE(r1, 0x40101287, &(0x7f0000002c00)={0xfffffffffffff9f3}) capget(&(0x7f0000002c40)={0x20071026, r0}, &(0x7f0000002c80)={0x5, 0x1, 0xd, 0x7, 0x2, 0x9c1}) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000002cc0)=0x7f, 0x4) 25.071823203s ago: executing program 6 (id=10132): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x99}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000015c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000001580)={0x34, &(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x6, 0xf, 0x400, 0x8, 0x1, 0x0, 0x81, {0x0, @in={{0x2, 0x4e24, @loopback}}, 0x6, 0x1bae2b84, 0x101, 0x527a, 0x9}}, &(0x7f0000000300)=0xb0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000340)={r6, 0xe}, &(0x7f0000000380)=0x8) write$char_usb(r4, &(0x7f0000000480)='\x00', 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) r9 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r9, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)=""/84, 0x54}, 0x4}], 0x1, 0x40, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080)) dup(r5) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x12c, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 25.012251957s ago: executing program 4 (id=10133): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1, 0xc, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1, 0x2], [0x0, 0x1, 0x0, 0x0, 0x1, 0x3], [0x45, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0xfffffffd]], '\x00', [{0xfffffffc, 0xf8}, {}, {0xffffffff}, {0xfffffff, 0xfffffff, 0x0, 0x1}, {0x3, 0xffffffff}, {0x1, 0x5}, {}, {0x0, 0x4}, {0x0, 0x7f}, {0x2}, {0x0, 0x1}, {0x401, 0xfffffffc}], '\x00', 0x1, 0x0, 0x0, 0xf8}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='4'], 0x34}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) r4 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000000)={0x0, 0x4, 0x5, &(0x7f0000000100)={0x0, "fd5a44512b7e1b0020ed2abb4301002700"}}) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, 0x0, 0x0) r6 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0) r7 = memfd_secret(0xec41271164e363eb) socket$rxrpc(0x21, 0x2, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, 0x0, 0x0, 0xffffffffffffff9c) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000000)=0x1, 0x4) getsockopt$SO_TIMESTAMP(r8, 0x1, 0x1d, 0x0, &(0x7f0000000080)) close(r5) ioctl$KVM_GET_DEBUGREGS(r7, 0x8080aea1, &(0x7f00000002c0)) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b00010000100009"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000"], &(0x7f00000003c0)='GPL\x00', 0x2, 0xffd, &(0x7f00000005c0)=""/4093, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) 24.59614754s ago: executing program 2 (id=10134): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00'], 0x50) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6a, 0x11, r0, 0xffffd000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x42002, 0x0) fallocate(r1, 0x11, 0x600, 0x7c000) ptrace(0x10, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) unshare(0x6020400) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x182, 0x3}, 0x18, 0x0) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x9, 0x4) 24.034676275s ago: executing program 2 (id=10135): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[r1, r2], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x210000, 0x0) (async, rerun: 32) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000240)={0x5, 0x1}) (rerun: 32) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000280), &(0x7f00000002c0)=0xc) (async, rerun: 64) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000300)='pimreg0\x00', 0x10) (rerun: 64) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x4040) (async) read$FUSE(r3, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000025c0)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f00000026c0)=0xe8) (async) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000002d00)=0x0) sendmsg$netlink(r5, &(0x7f0000004000)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfe, 0x20000}, 0xc, &(0x7f0000003f80)=[{&(0x7f0000002400)={0x190, 0x17, 0x100, 0x70bd26, 0x25dfdbfc, "", [@typed={0x8, 0xbe, 0x0, 0x0, @uid=0xee01}, @generic="c0d783f6126ddf65ed9cae953573519c36268ed6c03c582931cf039edeba62d40b6b054f0dd6154a4c5bfb6b023286e7f329fac84245baa6ff6ce17e670966d968777cece90060866e85c5c3ac9db3b425db67c783b0c2d64948b1cab61f9dcafd5cd782d2282b7ce3da0d1f642782a17d07f9808d33b7bce2eae52ee779a5685425b4b20dff381dde6dc71b15ccd4c5a321b2bccb355e7d0c9a6336f327157612943a633e7c57eabb903af10fe9561807baaeaf5a97ffe0dd15d462e9fb15d7bf2a0d66b57a428f6418d9321ca73bd39fcd729c562a6b9f1b1e34c52793fdcfdabc4b9364444c5e0d4654e06f", @typed={0x8, 0x82, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x71, 0xbc, 0x0, 0x1, [@nested={0x4, 0x5c}, @typed={0x8, 0x32, 0x0, 0x0, @pid=r6}, @nested={0x4, 0xd9}, @generic="9c6f2a986050ce6958f1ca912df239c348d701a4900546d4d8c32722de082faec057ac9a48204f3e3c11a615d022aebd69d676edbac9e10e02e5a4bd672741fe9598916d806a668861ae1973f5fa0fe91258dc27b8", @typed={0x8, 0x158, 0x0, 0x0, @fd=r4}]}, @typed={0xc, 0x6d, 0x0, 0x0, @u64=0x9}]}, 0x190}, {&(0x7f0000002700)={0x3ac, 0x23, 0x400, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x119, 0xc5, 0x0, 0x1, [@nested={0x4, 0x13d}, @generic="757febcba5caee730cc202bff6f39558cd6e6bf094bf8675a52f1f9038a65d0b588bbe9e9c0450c5eff935f6a8519825682a83afe19dd69346de23828304e5d834ef88fac2cf7829b9316e320d12b57f86a8fb8fb9b5957e18d8c122fc124d1674f220abcd303456f49f60c7a043d6fa6e65d865cd5e6f05a8c6c600986b04b92c5dfca81f35998a980c121703a995b193d03e2fff83880e6fc62225708e1b660c147e5781cbedf6e673dc1f92adc30fedc0a4aa6946601df6f325944710ca7dfa414864f2f7aa4539ba680382d96f7c845430bd9636e0a487dd188b5dd1b582aed991587c7145ee9ba17310ecc1198fe1", @typed={0x18, 0xdf, 0x0, 0x0, @str='/dev/dri/renderD128\x00'}, @nested={0x4, 0x112}, @nested={0x4, 0x3d}]}, @nested={0x48, 0x5d, 0x0, 0x1, [@typed={0x2c, 0x82, 0x0, 0x0, @binary="15c807a46ce324be5d8aa52173e1b4bde8f32dfce3da9abe9322f9a684ff9e28c49cb386830b05c5"}, @nested={0x4, 0x58}, @nested={0x4, 0x1a}, @typed={0xf, 0x163, 0x0, 0x0, @str='\xf3}/.(\\,}^}\x00'}]}, @nested={0x1ba, 0x89, 0x0, 0x1, [@nested={0x4, 0x12}, @nested={0x4, 0x15}, @generic="1e234519d12dc4f5d12129958969b33134bbec4f8b8bb23f4345f3720ef99ea439c54844443fcd5b664d141b59fbbf04d3f3080e966e1fd6d3726c087b", @generic="501ccc1228ac46903db05ebfee28ea826eae9d11ed3adb91771783dc86ae692541a3b52dc55038e895ef34ce570e487b042842889f4f90233389d0c01e6c722da1426e360c482d0f400b6b5e5774fe8c0f54d4d8456338efeb1b04ea6a", @typed={0x8, 0x3d, 0x0, 0x0, @uid=r7}, @typed={0x8, 0xec, 0x0, 0x0, @u32=0x1}, @generic="66b3e0c2cd338c733397a4bfd7214c5c260abec2b7a1c6c575697dd3dc9e7cb15142ff5a41187e213e41122f506400e9f71e076043c6ea0b196999c8aefe7f263ea89e4dbbcdc8fe668e3447f1d61631a10e7d26b2a88c6b6ab4cde8c273629373dac6adfbb967e52d281be3e6c13210b3e4599d7a4710f2a66fbc100d38f1a623e12094c8a869051570144a0efc6bb4991ce549cac8", @nested={0x4, 0x165}, @generic="9fcab6998c10aab3144b6073a70f4d9ed443a87d1de875a76e2fc81a7784ffe182e7b7e6d85df5c3973f332fcc723956af736af980c7f55e0c01b72f07b96585add053a9ba41a550a67f13e9e463a7a33d382bd4e34da84f352e2f289572fd375585011c4b3c28732e00"]}, @typed={0xc, 0x13f, 0x0, 0x0, @u64=0x100000000}, @generic="2ad932f21c3bb037d624cd837a7e56817024780c57634d7404acc5a96ca98a22c0c725bc6a7036884c18a7c0ce529070e6cfeb516d673ace470614b6faf9d6f07af7735219d76298c5ea8cbc3108b4867f117ef75383b9a42278c1c060e1206b648d3237cd7b10d71255", @nested={0x4, 0xe2}]}, 0x3ac}, {&(0x7f0000002ac0)={0x28, 0x23, 0x8, 0x70bd28, 0x25dfdbfd, "", [@typed={0x8, 0x88, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0x8, 0x167, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x8d, 0x0, 0x0, @pid}]}, 0x28}, {&(0x7f0000002b00)={0x1f4, 0x15, 0x8, 0x70bd26, 0x25dfdbff, "", [@typed={0x28, 0xf8, 0x0, 0x0, @binary="14896a7ec9d4d3bb7671152876bef68e1dc63897b46f2f393afad225dd5dc49eea4cf9a7"}, @nested={0x1bb, 0x56, 0x0, 0x1, [@typed={0x14, 0x124, 0x0, 0x0, @ipv6=@remote}, @generic="ad9371f991fea8db7b706254c35696ef046a1a62f306020ade704ac7b6d0757fe14ba1c104653eaccc7a4bb934128bb15d0b24af24ce2218", @generic="c50ea02ea63310892b5f74c69b7d777adb6f40fc9e12d3fd8894d20de958db89409c48a64f2fcfabcd4d7fa77a5d8dda10d3ba5e17ad52ff1199c29b1885a845070c78d278fb0de3c7e3bc7c5ddb955bdc20d3a1ad58022b4705ec5d597fcffcb3e490897a81db458fa8b0d92dbaf1625c779bfce383aefe282604043ac414a3c24afe", @typed={0x8, 0xf3, 0x0, 0x0, @ipv4=@broadcast}, @generic="0d5c25ccb871382f5a808bca1bcf6a1b0f9d0d30af1cfb5b126d7265cfb67385acf9cd19748f194c00d41d0a4fe02935841e29e6add58b7c92f28385e0a8b1336337bed361cc256316033b36c7db8c2ef548b22ab5a2f087c18a7c8834f1bbeb2edccde22ec0a66dca0fab55569d0b8059cff622949470c7cc8ff16b44ce6995faf29b0e6edfd032742ac1945468f4d3e2931576756cc272218f3ef10c6208511a40f9d2e973cd450f3f075b7df93f9e06f22c92bd291166e977930d166ff55e9c7940f3a946a4e6f2cf8a22", @typed={0x14, 0xbc, 0x0, 0x0, @ipv6=@loopback}]}]}, 0x1f4}, {&(0x7f0000002d40)={0x1228, 0x3e, 0x2, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x14, 0x7f, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @typed={0x3b, 0xa5, 0x0, 0x0, @binary="7d9230f4f7be22b6fc6c55addf4a3004abb10b2eff4525e0b7d9d1a90139678d53be9bb29b9e0c02e86fa41b5179fc379328966318751e"}, @generic='W', @nested={0xee, 0x119, 0x0, 0x1, [@generic="5f3e9983bc130febc2691120c0fb854fae124e7f8a1929c7897c892505d241404262aefbaacb22c746aae08a1200c3f25479fe278632a02e7f6870cfda4fa631f7a82b4b69d1978090d75fc9752b6dae", @typed={0x8, 0x89, 0x0, 0x0, @uid=r8}, @nested={0x4, 0x12a}, @generic="4c029dc48b1961fb66d3cda27ed6a86fb8e643e324a73e50df75ecc3d9c9978c7a4e731f88cbe0b44e7c01854dbbb7ed094055bde1866acf40402d55c6e6e55ccdaf018f32bbd35ff839a9d935e15417a185f8203a3e68c4b2dff041b4dfd972dfd21a354844fd1dea3c52e7c1b69fd9d1168c32ee1a10fea881cbddb94955e215b8006883655e7c44799b8b5bfb"]}, @typed={0x1004, 0xfa, 0x0, 0x0, @binary="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"}, @nested={0xd0, 0x85, 0x0, 0x1, [@generic="f1bbc5c9e888dfe49a161249e82d8eed5511585338f307d56f19427f54afe74705f6c2754048905d99c3bd63964e67fd0bd963e1f9e794c73f7ccc2443ca3b1f9ae1a313faf7daaadafa2c23d29a1c5e6c512fc3c9c461369b3fadea38b35072201ba3e16a0dfb", @typed={0x8, 0x135, 0x0, 0x0, @u32=0x4}, @typed={0x5, 0x15f, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x106}, @nested={0x4, 0x12}, @typed={0x8, 0x15b, 0x0, 0x0, @u32=0x200}, @nested={0x4, 0x7b}, @generic="3abfac858f32a243d4ee470a4bd719a43fd410a57c2d902d9234c982825fd4cd9d382f424114e42a34c7a551d2a96a96fa7263613a", @typed={0xa, 0x103, 0x0, 0x0, @str='(+:)]\x00'}]}]}, 0x1228}], 0x5}, 0x10) (async) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000004040), 0x200000, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000004080)={r9}) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000004180)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004140)={&(0x7f0000004100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) (async, rerun: 64) timer_create(0x3, &(0x7f00000041c0)={0x0, 0x11, 0x2}, &(0x7f0000004200)) (async, rerun: 64) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) (async) r10 = syz_open_dev$midi(&(0x7f0000004240), 0x6, 0x50000) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r10, 0x810c5701, &(0x7f0000004280)) (async, rerun: 64) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 64) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000043c0), 0x2, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000004400)) timer_create(0x5, &(0x7f0000004440)={0x0, 0xe, 0x1, @tid=r6}, &(0x7f0000004480)=0x0) timer_delete(r11) openat$full(0xffffffffffffff9c, &(0x7f00000044c0), 0x800040, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000004500)={0x7ff, 0x0, 0x1}) (rerun: 64) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000004540)={r12, 0x6}) (async) ioctl$SG_BLKTRACESTOP(r5, 0x1275, 0x0) (async) openat$incfs(r5, &(0x7f0000004580)='.pending_reads\x00', 0x28000, 0x4) 23.967879665s ago: executing program 2 (id=10136): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0aca60"], 0xd) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec010203010902"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x5, 0x1, 0x9, 0x7, 0xf, 0xda, 0xae, 0x4c, 0x9, 0x2, 0x2, 0x5, 0x9, 0x48}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r2, 0xcc6}, &(0x7f0000000200)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x48800}, 0x20000000) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) close(0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x800, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1000}, 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r10, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) 23.710091255s ago: executing program 8 (id=10140): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x2, &(0x7f0000000200)=[{0x24, '\x00', @buffer={"b963719aff27f15312bb8aa935bd6982e2e6aa62ab418bbd8ac717e893c09de8", 0x20}, 0x5}, {0x8, '\x00', @data=0x22bd70a1, 0x7ff}]}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0xffffffff, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x44, 0x1300c}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_UDP_CSUM={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x800, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r7 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x1}) io_uring_enter(r7, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r8, 0x84, 0x7f, 0x0, 0x0) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r4, &(0x7f0000000280)={0x2c, 0x1, r6, 0x3c, r5}, 0x10) bind$packet(r2, &(0x7f0000000140)={0x11, 0x15, r6, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 23.448786694s ago: executing program 8 (id=10141): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0x3050, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x3) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x2481, 0x7, 0x1, 0x0, 0x8, 0x3}, 0x30, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r5, 0xd) r6 = getpgrp(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r6}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}, @typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x4800) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="9605dcfe8650b674b1e848a8329a5ec70d6ab6a508fa41e15068e6dc7b9400700ce311ed5435bc4c9c15f2e8c28d24bf79398dee94e988a5fa26bc644ce42021", @ANYRES16=r10, @ANYBLOB="000825bd7000fddb46b9df250e000000"], 0x14}, 0x1, 0x0, 0x0, 0x41004}, 0x1) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb3}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 23.407533135s ago: executing program 8 (id=10142): syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x5, 0x40, 0x5, {0x8, 0xb, 0x0, 0x1, 0x1, 0x25, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x7, 0xf9, 0x81, {0xa, 0x25, 0x25, 0x2, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x2, 0x3, 0x0, {0xa, 0x25, 0x25, 0x0, 0x0, 0x2}}}}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="fc03"]}, {0x0, 0x0}, {0x16, &(0x7f0000000400)=@string={0x16, 0x3, "820003a4a56f6003102bc7a2e9014b41cb5a3500"}}]}) r0 = open(&(0x7f0000000000)='./file0\x00', 0x840, 0x191) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x20) fcntl$dupfd(r1, 0x0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x4}}, 0x20) ppoll(&(0x7f0000000040)=[{r1, 0x102}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0xfffffffffffffffc, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000016c0)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x140, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0xff000000], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@tos={{0x28}, {0x2, 0x9}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, [0xffffffff, 0xff000000], [], 'erspan0\x00', 'gre0\x00', {0xccab8b8dbbd34e93}}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff000000, 0xff, 0xff000000], 0x4e24, 0x4e21, 0x4e22, 0x4e22, 0x2, 0xff, 0xfffffff8, 0xa94}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @dev, @remote}, &(0x7f00000001c0)=0xc) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) r7 = socket(0x1e, 0x4, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) recvmsg(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)=""/119, 0x77}], 0x1}, 0x21) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r8, 0xc01c64a3, &(0x7f0000000340)={0x3, r9, 0xfffffffa, 0x6, 0xff, 0x1fd, 0x1}) sendmsg$nl_xfrm(r1, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRESDEC=r4, @ANYRESDEC=r6, @ANYRES8=r4, @ANYRESHEX=r7, @ANYRES32=r9, @ANYRESHEX=r8, @ANYRES8=r5], 0x1bc}, 0x1, 0x0, 0x0, 0x24000040}, 0x440c4) 22.96209694s ago: executing program 9 (id=10143): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8002}, 0x4) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)={0xa}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x5, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}]}, 0x50}, 0x1, 0x7}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 22.928249023s ago: executing program 9 (id=10144): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) syz_emit_ethernet(0x5a, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2786dd604dc58c00240600fe80ff0300000000000000000000001afe800000000000007b4313e1aaeffe400100000000000000b40ad8a8f12239ce842ef687636148257d2b861a57dbe188b2a6417178ea0c5e74e76ee703c241a4f4728b47a825505a40322fd2633b39030bb73797295beb25aedfca065c4c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9002fffd90780000220d4b3328108ed397e1447ee20403d7"], 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) write$cgroup_netprio_ifpriomap(r1, &(0x7f00000000c0)={'netdevsim0', 0x32, 0x31}, 0xd) (async) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0xfffffffffffffe73, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x480c0}, 0x20004080) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f90f0000010000002e0700000000000002000000000000002700000000000000ffffffffffffffff000000000000000000000000000100ff0100000100000001000000ffffffffffffffff0200000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/563]) (async) set_mempolicy(0x3, &(0x7f0000000080)=0x1ff, 0x5) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async, rerun: 32) sendmsg$can_j1939(r2, &(0x7f0000000500)={&(0x7f0000000100)={0x1d, 0x0, 0x1, {0x1, 0xff, 0x7}, 0xff}, 0x18, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x40001d0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000be02e708cf100355678f0102030109022d00010806007c0904bc0003e404ac00090504"], 0x0) 22.162909819s ago: executing program 8 (id=10145): request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3\x9f*sgrVen:De', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) r2 = syz_io_uring_setup(0x3d1a, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x1}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000200)) io_uring_enter(r2, 0x0, 0x235c, 0x3, 0x0, 0x0) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000140)=[0x0, 0x7fff], 0x2) fcntl$setstatus(r1, 0x4, 0x2c00) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="07010100ffd9f810f80600b0f97d0102030109022c0401000000020904000001ff615a00090588"], 0x0) 22.007576748s ago: executing program 6 (id=10146): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000000c0), 0x400000000000161, 0x40050) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000100)) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="00220500001307efb9ce"], 0x0}, 0x0) socket$inet6(0xa, 0x3, 0x5) socket$kcm(0xa, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b77, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x0, 0x5c49, 0x200, 0x3, 0x388}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x31c1, 0x4000, 0x1, 0x2f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xee24, 0x4000, 0x2, 0x49}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa26, 0x4000, 0x0, 0xdb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x49e, 0x1000, 0x1, 0x1b0}, 0xffffffffffffffff}], 0x4, &(0x7f0000001c80)={0x2e, 0x22, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, '\x00', {0x0, 0x3f4, 0x0, &(0x7f0000000c80)=@buf_512="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"}}, &(0x7f0000001d00)) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xddd4, 0x4000, 0x3, 0x0, 0x0, r4}, &(0x7f0000000340), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) 21.919889409s ago: executing program 4 (id=10147): socket$kcm(0x11, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) unshare(0x26020480) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r3, 0x402, 0x29) fcntl$getown(r3, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000008c0)=@delqdisc={0x3a0, 0x25, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xa, 0xfff2}, {0xf, 0x9}, {0xfff3, 0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1ff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1000}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x664, 0x0, 0x1, 0x40, 0x7, 0xe8, 0x2, 0x984, 0x4}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xae, 0x3, 0x40c, 0x2, 0x1, 0x5, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x81, 0x9, 0x4, 0x932, 0x0, 0xd, 0x7, 0x4}}, {0xc, 0x2, [0x1ff, 0x3, 0xe281, 0x200]}}, {{0x1c, 0x1, {0xc, 0x54, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x1}}, {0x6, 0x2, [0x10]}}, {{0x1c, 0x1, {0xb8, 0x73, 0x9, 0x404, 0x0, 0x0, 0x8, 0x1}}, {0x6, 0x2, [0x8001]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0xfffffff7, 0x1, 0x7f, 0x2, 0x2}}, {0x8, 0x2, [0x6, 0x8]}}, {{0x1c, 0x1, {0x6, 0x0, 0x5, 0x3, 0x1, 0x9, 0x4, 0x2}}, {0x8, 0x2, [0x96, 0x0]}}]}, @TCA_STAB={0x128, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x58, 0x35, 0x2, 0x7ff, 0x0, 0x5, 0xfffffffe, 0x5}}, {0xe, 0x2, [0x8001, 0xff, 0x13, 0x7, 0xfffa]}}, {{0x1c, 0x1, {0x7, 0x6, 0x4, 0x1a1, 0x1, 0x57, 0x44eb47b3, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x42, 0x81, 0x2d91, 0x4, 0x1, 0x8, 0xb, 0x7}}, {0x12, 0x2, [0xfff7, 0x8, 0x4, 0x5610, 0x0, 0x9, 0x1]}}, {{0x1c, 0x1, {0x91, 0x4e, 0x13, 0x7ca2, 0x2, 0x16b, 0x0, 0x2}}, {0x8, 0x2, [0x455, 0xfff6]}}, {{0x1c, 0x1, {0x1c, 0x4, 0x6, 0x9, 0x0, 0x2, 0xc}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x6, 0x101, 0x7, 0x2, 0x9, 0x7, 0x8}}, {0x14, 0x2, [0xd, 0x7fff, 0xdc8b, 0x1, 0xfffe, 0x7d, 0x40, 0x95b]}}, {{0x1c, 0x1, {0x1, 0x0, 0x4, 0xcc, 0x2, 0x0, 0x9c, 0x8}}, {0x14, 0x2, [0x7, 0x8, 0x6, 0x8, 0x0, 0x5, 0xc, 0x5]}}]}, @TCA_RATE={0x6, 0x5, {0x5, 0xc}}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x78, 0xc0, 0x9, 0x7afc, 0x2, 0x6988973e, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0xf7, 0x7, 0xfffffffb, 0x0, 0x800, 0x2, 0x1}}, {0x6, 0x2, [0xfff]}}]}, @TCA_STAB={0xd0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0x3, 0x10, 0x3, 0x2, 0x101, 0xed, 0x8}}, {0x14, 0x2, [0xa, 0x5, 0xaa, 0x6, 0x5, 0x9, 0x9, 0x3]}}, {{0x1c, 0x1, {0x9, 0x5, 0xfff9, 0x0, 0x0, 0x100, 0x0, 0x4}}, {0xc, 0x2, [0x8, 0x40, 0x1, 0x2]}}, {{0x1c, 0x1, {0x3, 0x6, 0x3, 0x7ff, 0x0, 0x4, 0xfffffff9, 0x3}}, {0xa, 0x2, [0x0, 0x3, 0x8]}}, {{0x1c, 0x1, {0x4, 0x0, 0xb, 0x984, 0x2, 0x1000, 0x0, 0x4}}, {0xc, 0x2, [0x4, 0x3, 0x9, 0x6]}}, {{0x1c, 0x1, {0x2, 0x4, 0x4, 0xc, 0x0, 0xffff7fff, 0xb18, 0x2}}, {0x8, 0x2, [0x5, 0x4]}}]}, @TCA_RATE={0x6, 0x5, {0x8, 0x2}}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x4008881}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48006) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x2, 0x0) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) unshare(0x8040480) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r6, 0x80105014, 0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) unshare(0x28000200) 19.115444388s ago: executing program 8 (id=10148): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4}, 0x57) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) 19.063459087s ago: executing program 8 (id=10149): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12001, 0x0) (async, rerun: 32) r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r1 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) (async) r3 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001280)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x4, 0x4, 0x0, 0x5, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) ioctl$SIOCSIFMTU(r0, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x10000}) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) (async) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}, {&(0x7f00000002c0)="e543bdc19b09dcb1c05f97d422cd317fa4b3da67f57ef84a0d7c55bae13ec9562e214704cc86290702f1b8ed74599ca569b9258df4b75797b6b7548e1ebaabdd115e", 0x42}], 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async) write$binfmt_aout(r5, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r7, 0x81, 0x8100) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) (async, rerun: 32) move_pages(0x0, 0x2, &(0x7f0000000040)=[&(0x7f000009a000/0xb000)=nil, &(0x7f00000d7000/0x4000)=nil], &(0x7f00000000c0), 0x0, 0x2) (async, rerun: 32) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB]) sendmmsg$sock(r7, &(0x7f0000000580)=[{{&(0x7f0000000100)=@phonet={0x23, 0x5, 0x9}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="c401933c00c271ab016134e0b183c2c4651994f10aba043617738b5a4193c4240edef75778c07f0d2fb06989c6646aa6b5c1daf6ee22ecb412968b13ea65", 0x3e}, {&(0x7f0000000700)="11545d8b196baef82f6afe8209737efacaa0975ba168fa83ea52e871daa33143bd36dca72c7a00969198929a2666cbd82e1400eae0ed4ab19bc0f71e38cd4fc416c4ba6dd201ed0f714e5a757588b5a4326e165944391f94b032025e7a12d3c47a14dce760be0fd1d9ac3fc32e3c6b9c07dbb9c8a30b3ed8a040bafa9c3b7f13e53b9fbed665ba73000fff92bdbf4a9f6cb04de57a9a753bd78f612bde42cdbb8ae0913c60e6a6edb1024967f3e8c7c6c0e59f7a805c21bdf056b52ca85028cfbc0cca7d27ea0513a420025295b0e41f63ff4e773a1049674d5f82b0f637ee4e4a2df8d45beb99e83a2bc2b0130082a1ff2ba3719de63a9db2f506805c9116d4ab791cb7786aef599977b58733fe508115feed7f3f66322dff0091da4de1bf05b8512f0e65d0e99ffc7f10493db6ff45247190e157c6543f57302ba6da2c071b9ae1f1cea91464580a50fd32d13f63a01882a3fe4a304a3c1de72a181adf64f35f8f7a2e0cf92b0d770203954be81fe558f0da8ed182ab431f6a80030e5a0b6db6becd7f8366a178642ba53b95ba002bb278fb2fb8a8b534d008f412790b705d4b3dcbfd4f47f64a8192bd1d1c91fed291a74fe6e3faebb5ad2de054d7a935859339317cb1f6bf6c7537adb464423da7f735c40da9c9b6ffffb38c8ada0e85eb028ad09c5c52b2", 0x1e7}], 0x2, &(0x7f0000000480)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffff7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x72ec}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000005}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0xf0}}], 0x1, 0x40080) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000240)={'\x00', 0xfffffff8, 0x2, 0x8}) madvise(&(0x7f00006a0000/0x4000)=nil, 0x4000, 0x15) (async) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async, rerun: 32) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 32) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 18.927828328s ago: executing program 6 (id=10150): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f000640035f31e48868820f0c4dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5deb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000060000009ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000087f2bb4024042c017e22010203010902240001020000000904ae0002c39c2a0009059e02ff030000000905820267020b00f4a4a832d830ed72e653b8afc67b24b9ba52580ad660f5cb63514ce69795fb8299634bc0d78d9f62b2123b286081c8cb35ad5851cd8cd1f8ff3d0fc8ab3effbe9afc43cf09cc6c39b6c025007da7e92272fba9355ad45a5c7704bf211729b13e09f1012f07bafc5c07770d7fd73136f7ace0d58030a7353db275278a5c83375820c97be151bdf1832e1e2e4750089dd0334952842632f784f8eefce4c1fa6d169dce7023c087144208e5d56d72ed2ed9112e3a0baa736980956f54538b7f6ca917deba24e0bdb606f2d6653ab2889d8f71a731bc3e10813b94c8f2f915e7f38647d6d15561391684e8f2fd637e8b63d0f2649dea26b2bf1d43a8f95aca9bd4676ccfc1edddba32e34ea7c21d807b447ca781bf5b22c04068ab08900dfc8c6cf5914f49b944458af0813101000000e30bff5286abcd630195a6015df54278cc3ab62b3a887d4445f168a9cb6aab31bbab431f14b6106e276ed818518f466a874c46c66be15c2258305a9d565ea5c138a731cbec5e", @ANYRES32=r0, @ANYRES16=r0], 0x0) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f000640035f31e48868820f0c4dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5deb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000060000009ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES16=r0], 0x0) (async) 15.938564901s ago: executing program 6 (id=10151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x20009084) sched_setscheduler(0x0, 0x2, 0x0) r2 = fsopen(&(0x7f0000000340)='aufs\x00', 0x0) fsmount(r2, 0x1, 0x7c) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={r0, &(0x7f0000000000)='#&\x00', 0x2001, &(0x7f0000000040)={@_ha_fsid={[0x2, 0x6]}, {0x1, 0x2, 0x4, 0xf0b}}, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x2}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0xb}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@gettfilter={0x44, 0x2e, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x8, 0x8}, {0x9, 0xffff}, {0x4, 0x8}}, [{0x8, 0xb, 0x3ff80000}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x46080}, 0x44810) 8.508796833s ago: executing program 43 (id=10136): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0aca60"], 0xd) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec010203010902"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x5, 0x1, 0x9, 0x7, 0xf, 0xda, 0xae, 0x4c, 0x9, 0x2, 0x2, 0x5, 0x9, 0x48}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r2, 0xcc6}, &(0x7f0000000200)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x48800}, 0x20000000) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) close(0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x800, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1000}, 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r10, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) 7.005982033s ago: executing program 44 (id=10144): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) syz_emit_ethernet(0x5a, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2786dd604dc58c00240600fe80ff0300000000000000000000001afe800000000000007b4313e1aaeffe400100000000000000b40ad8a8f12239ce842ef687636148257d2b861a57dbe188b2a6417178ea0c5e74e76ee703c241a4f4728b47a825505a40322fd2633b39030bb73797295beb25aedfca065c4c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9002fffd90780000220d4b3328108ed397e1447ee20403d7"], 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) write$cgroup_netprio_ifpriomap(r1, &(0x7f00000000c0)={'netdevsim0', 0x32, 0x31}, 0xd) (async) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0xfffffffffffffe73, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x480c0}, 0x20004080) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f90f0000010000002e0700000000000002000000000000002700000000000000ffffffffffffffff000000000000000000000000000100ff0100000100000001000000ffffffffffffffff0200000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/563]) (async) set_mempolicy(0x3, &(0x7f0000000080)=0x1ff, 0x5) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async, rerun: 32) sendmsg$can_j1939(r2, &(0x7f0000000500)={&(0x7f0000000100)={0x1d, 0x0, 0x1, {0x1, 0xff, 0x7}, 0xff}, 0x18, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x40001d0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000be02e708cf100355678f0102030109022d00010806007c0904bc0003e404ac00090504"], 0x0) 6.006013304s ago: executing program 45 (id=10147): socket$kcm(0x11, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) unshare(0x26020480) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r3, 0x402, 0x29) fcntl$getown(r3, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000008c0)=@delqdisc={0x3a0, 0x25, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xa, 0xfff2}, {0xf, 0x9}, {0xfff3, 0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1ff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1000}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x664, 0x0, 0x1, 0x40, 0x7, 0xe8, 0x2, 0x984, 0x4}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xae, 0x3, 0x40c, 0x2, 0x1, 0x5, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x81, 0x9, 0x4, 0x932, 0x0, 0xd, 0x7, 0x4}}, {0xc, 0x2, [0x1ff, 0x3, 0xe281, 0x200]}}, {{0x1c, 0x1, {0xc, 0x54, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x1}}, {0x6, 0x2, [0x10]}}, {{0x1c, 0x1, {0xb8, 0x73, 0x9, 0x404, 0x0, 0x0, 0x8, 0x1}}, {0x6, 0x2, [0x8001]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0xfffffff7, 0x1, 0x7f, 0x2, 0x2}}, {0x8, 0x2, [0x6, 0x8]}}, {{0x1c, 0x1, {0x6, 0x0, 0x5, 0x3, 0x1, 0x9, 0x4, 0x2}}, {0x8, 0x2, [0x96, 0x0]}}]}, @TCA_STAB={0x128, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x58, 0x35, 0x2, 0x7ff, 0x0, 0x5, 0xfffffffe, 0x5}}, {0xe, 0x2, [0x8001, 0xff, 0x13, 0x7, 0xfffa]}}, {{0x1c, 0x1, {0x7, 0x6, 0x4, 0x1a1, 0x1, 0x57, 0x44eb47b3, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x42, 0x81, 0x2d91, 0x4, 0x1, 0x8, 0xb, 0x7}}, {0x12, 0x2, [0xfff7, 0x8, 0x4, 0x5610, 0x0, 0x9, 0x1]}}, {{0x1c, 0x1, {0x91, 0x4e, 0x13, 0x7ca2, 0x2, 0x16b, 0x0, 0x2}}, {0x8, 0x2, [0x455, 0xfff6]}}, {{0x1c, 0x1, {0x1c, 0x4, 0x6, 0x9, 0x0, 0x2, 0xc}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x6, 0x101, 0x7, 0x2, 0x9, 0x7, 0x8}}, {0x14, 0x2, [0xd, 0x7fff, 0xdc8b, 0x1, 0xfffe, 0x7d, 0x40, 0x95b]}}, {{0x1c, 0x1, {0x1, 0x0, 0x4, 0xcc, 0x2, 0x0, 0x9c, 0x8}}, {0x14, 0x2, [0x7, 0x8, 0x6, 0x8, 0x0, 0x5, 0xc, 0x5]}}]}, @TCA_RATE={0x6, 0x5, {0x5, 0xc}}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x78, 0xc0, 0x9, 0x7afc, 0x2, 0x6988973e, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0xf7, 0x7, 0xfffffffb, 0x0, 0x800, 0x2, 0x1}}, {0x6, 0x2, [0xfff]}}]}, @TCA_STAB={0xd0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0x3, 0x10, 0x3, 0x2, 0x101, 0xed, 0x8}}, {0x14, 0x2, [0xa, 0x5, 0xaa, 0x6, 0x5, 0x9, 0x9, 0x3]}}, {{0x1c, 0x1, {0x9, 0x5, 0xfff9, 0x0, 0x0, 0x100, 0x0, 0x4}}, {0xc, 0x2, [0x8, 0x40, 0x1, 0x2]}}, {{0x1c, 0x1, {0x3, 0x6, 0x3, 0x7ff, 0x0, 0x4, 0xfffffff9, 0x3}}, {0xa, 0x2, [0x0, 0x3, 0x8]}}, {{0x1c, 0x1, {0x4, 0x0, 0xb, 0x984, 0x2, 0x1000, 0x0, 0x4}}, {0xc, 0x2, [0x4, 0x3, 0x9, 0x6]}}, {{0x1c, 0x1, {0x2, 0x4, 0x4, 0xc, 0x0, 0xffff7fff, 0xb18, 0x2}}, {0x8, 0x2, [0x5, 0x4]}}]}, @TCA_RATE={0x6, 0x5, {0x8, 0x2}}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x4008881}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48006) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x2, 0x0) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) unshare(0x8040480) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r6, 0x80105014, 0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) unshare(0x28000200) 4.002473803s ago: executing program 46 (id=10149): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12001, 0x0) (async, rerun: 32) r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r1 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) (async) r3 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001280)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x4, 0x4, 0x0, 0x5, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) ioctl$SIOCSIFMTU(r0, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x10000}) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) (async) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}, {&(0x7f00000002c0)="e543bdc19b09dcb1c05f97d422cd317fa4b3da67f57ef84a0d7c55bae13ec9562e214704cc86290702f1b8ed74599ca569b9258df4b75797b6b7548e1ebaabdd115e", 0x42}], 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async) write$binfmt_aout(r5, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r7, 0x81, 0x8100) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) (async, rerun: 32) move_pages(0x0, 0x2, &(0x7f0000000040)=[&(0x7f000009a000/0xb000)=nil, &(0x7f00000d7000/0x4000)=nil], &(0x7f00000000c0), 0x0, 0x2) (async, rerun: 32) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB]) sendmmsg$sock(r7, &(0x7f0000000580)=[{{&(0x7f0000000100)=@phonet={0x23, 0x5, 0x9}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="c401933c00c271ab016134e0b183c2c4651994f10aba043617738b5a4193c4240edef75778c07f0d2fb06989c6646aa6b5c1daf6ee22ecb412968b13ea65", 0x3e}, {&(0x7f0000000700)="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", 0x1e7}], 0x2, &(0x7f0000000480)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffff7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x72ec}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000005}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0xf0}}], 0x1, 0x40080) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000240)={'\x00', 0xfffffff8, 0x2, 0x8}) madvise(&(0x7f00006a0000/0x4000)=nil, 0x4000, 0x15) (async) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async, rerun: 32) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 32) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 0s ago: executing program 47 (id=10151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x20009084) sched_setscheduler(0x0, 0x2, 0x0) r2 = fsopen(&(0x7f0000000340)='aufs\x00', 0x0) fsmount(r2, 0x1, 0x7c) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={r0, &(0x7f0000000000)='#&\x00', 0x2001, &(0x7f0000000040)={@_ha_fsid={[0x2, 0x6]}, {0x1, 0x2, 0x4, 0xf0b}}, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x2}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0xb}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@gettfilter={0x44, 0x2e, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x8, 0x8}, {0x9, 0xffff}, {0x4, 0x8}}, [{0x8, 0xb, 0x3ff80000}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x46080}, 0x44810) kernel console output (not intermixed with test programs): 37][T24962] usb usb3-port1: attempt power cycle [ 1827.616224][T16891] loop4: detected capacity change from 0 to 7 [ 1827.624002][T16891] Dev loop4: unable to read RDB block 7 [ 1827.630632][T16891] loop4: AHDI p1 p2 p3 [ 1827.635222][T16891] loop4: partition table partially beyond EOD, truncated [ 1827.644630][T16891] loop4: p1 start 1601398130 is beyond EOD, truncated [ 1827.652473][T16891] loop4: p2 start 1702059890 is beyond EOD, truncated [ 1827.659319][T24967] usb 5-1: device descriptor read/64, error -71 [ 1827.669440][ T4992] Dev loop4: unable to read RDB block 7 [ 1827.675137][ T4992] loop4: AHDI p1 p2 p3 [ 1827.679542][ T4992] loop4: partition table partially beyond EOD, truncated [ 1827.689252][ T4992] loop4: p1 start 1601398130 is beyond EOD, truncated [ 1827.696765][ T4992] loop4: p2 start 1702059890 is beyond EOD, truncated [ 1827.768327][T24967] usb usb5-port1: attempt power cycle [ 1827.918087][T24962] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1827.933449][T16910] syzkaller0: entered promiscuous mode [ 1827.939912][T16910] syzkaller0: entered allmulticast mode [ 1827.948277][T16925] binder: 16922:16925 ioctl c0306201 200000000240 returned -11 [ 1827.983500][T24962] usb 3-1: no configurations [ 1827.988321][T24962] usb 3-1: can't read configurations, error -22 [ 1828.126919][T24962] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1828.134813][T24967] usb 5-1: new low-speed USB device number 95 using dummy_hcd [ 1828.157840][T24962] usb 3-1: no configurations [ 1828.162474][T24962] usb 3-1: can't read configurations, error -22 [ 1828.173143][T24967] usb 5-1: device descriptor read/8, error -71 [ 1828.183139][T24962] usb usb3-port1: unable to enumerate USB device [ 1828.427039][T24967] usb 5-1: new low-speed USB device number 96 using dummy_hcd [ 1828.447657][T24967] usb 5-1: device descriptor read/8, error -71 [ 1828.557166][T24967] usb usb5-port1: unable to enumerate USB device [ 1829.047195][T31419] Bluetooth: hci5: command 0x0c1a tx timeout [ 1829.126993][T31419] Bluetooth: hci0: command 0x0c1a tx timeout [ 1829.276955][T24967] usb 9-1: new full-speed USB device number 103 using dummy_hcd [ 1829.439496][T24967] usb 9-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1829.464976][T24967] usb 9-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1829.493394][T24967] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1829.508812][T24967] usb 9-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1829.528937][T24967] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.550624][T24967] usb 9-1: config 0 descriptor?? [ 1829.569506][T16960] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1829.682115][T16972] loop4: detected capacity change from 0 to 7 [ 1829.693178][T16972] Dev loop4: unable to read RDB block 7 [ 1829.700996][T16972] loop4: AHDI p1 p2 p3 [ 1829.708180][T16972] loop4: partition table partially beyond EOD, truncated [ 1829.717889][T16972] loop4: p1 start 1601398130 is beyond EOD, truncated [ 1829.724703][T16972] loop4: p2 start 1702059890 is beyond EOD, truncated [ 1829.900665][T16982] syzkaller0: entered promiscuous mode [ 1829.930069][T16982] syzkaller0: entered allmulticast mode [ 1829.946318][T16982] netlink: 'syz.6.9771': attribute type 10 has an invalid length. [ 1830.257237][T24962] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1830.407096][T24962] usb 5-1: device descriptor read/64, error -71 [ 1830.656897][T24962] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1830.796909][T24962] usb 5-1: device descriptor read/64, error -71 [ 1830.887006][T20913] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1830.907087][T24962] usb usb5-port1: attempt power cycle [ 1831.057031][T20913] usb 3-1: Using ep0 maxpacket: 8 [ 1831.063333][T20913] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 1831.071699][T20913] usb 3-1: config 2 has no interface number 0 [ 1831.077955][T20913] usb 3-1: config 2 interface 31 has no altsetting 0 [ 1831.086208][T20913] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1831.095508][T20913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.103569][T20913] usb 3-1: Product: syz [ 1831.107812][T20913] usb 3-1: Manufacturer: syz [ 1831.112422][T20913] usb 3-1: SerialNumber: syz [ 1831.216976][T31419] Bluetooth: hci0: command 0x0c1a tx timeout [ 1831.257049][T24962] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1831.287852][T24962] usb 5-1: device descriptor read/8, error -71 [ 1831.547052][T24962] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1831.567576][T24962] usb 5-1: device descriptor read/8, error -71 [ 1831.677552][T24962] usb usb5-port1: unable to enumerate USB device [ 1831.730192][T20913] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 1831.741040][T20913] usb 3-1: USB disconnect, device number 105 [ 1831.866893][T24967] usbhid 9-1:0.0: can't add hid device: -71 [ 1831.877214][T24967] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1831.887151][T24967] usb 9-1: USB disconnect, device number 103 [ 1831.941174][T17055] bridge1: entered promiscuous mode [ 1831.946458][T17055] bridge1: entered allmulticast mode [ 1831.954145][T17055] team0: Port device bridge1 added [ 1832.255373][T17062] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9779'. [ 1832.288732][T24967] usb 9-1: new high-speed USB device number 104 using dummy_hcd [ 1832.457051][T24967] usb 9-1: Using ep0 maxpacket: 8 [ 1832.463430][T24967] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1832.470106][T24967] usb 9-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.00 [ 1832.479290][T24967] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.489239][T24967] usb 9-1: config 0 descriptor?? [ 1832.607954][T12989] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1832.767297][T12989] usb 3-1: Using ep0 maxpacket: 8 [ 1832.775633][T12989] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1832.785152][T12989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.793508][T12989] usb 3-1: Product: syz [ 1832.797717][T12989] usb 3-1: Manufacturer: syz [ 1832.802306][T12989] usb 3-1: SerialNumber: syz [ 1832.808706][T12989] usb 3-1: config 0 descriptor?? [ 1832.819828][T12989] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1832.900694][T24967] ntrig 0003:1B96:0005.009A: unknown main item tag 0x2 [ 1832.907799][T24967] ntrig 0003:1B96:0005.009A: unknown main item tag 0x6 [ 1832.914691][T24967] ntrig 0003:1B96:0005.009A: unknown main item tag 0x0 [ 1832.921757][T24967] ntrig 0003:1B96:0005.009A: unknown main item tag 0x0 [ 1832.928956][T24967] ntrig 0003:1B96:0005.009A: unknown main item tag 0x0 [ 1832.935862][T24967] ntrig 0003:1B96:0005.009A: unknown main item tag 0x0 [ 1832.944301][T24967] ntrig 0003:1B96:0005.009A: hidraw0: USB HID v0.01 Device [HID 1b96:0005] on usb-dummy_hcd.8-1/input0 [ 1833.032914][T17096] fuse: Bad value for 'fd' [ 1833.100407][T17055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1833.120332][T17055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1833.130573][T24967] ntrig 0003:1B96:0005.009A: Firmware version: 1.2.7.56.2 (48d3 0aff) [ 1833.244831][T17122] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9785'. [ 1833.342131][T17055] bridge0: port 3(team0) entered blocking state [ 1833.349974][T17055] bridge0: port 3(team0) entered disabled state [ 1833.369373][T17055] team0: entered allmulticast mode [ 1833.387131][T17055] team_slave_0: entered allmulticast mode [ 1833.393329][T17055] team_slave_1: entered allmulticast mode [ 1833.404999][T17055] team0: entered promiscuous mode [ 1833.418334][T17055] team_slave_0: entered promiscuous mode [ 1833.419541][T17132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1833.437533][T17055] team_slave_1: entered promiscuous mode [ 1833.441417][T17132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1833.465945][T17055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1833.487491][T17055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1833.512333][T12990] usb 9-1: USB disconnect, device number 104 [ 1833.526937][T24967] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 1833.689379][T24967] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1833.697670][T24967] usb 5-1: not running at top speed; connect to a high speed hub [ 1833.709823][T24967] usb 5-1: config 9 has an invalid interface number: 65 but max is 0 [ 1833.718411][T24967] usb 5-1: config 9 has no interface number 0 [ 1833.746915][T24967] usb 5-1: config 9 interface 65 has no altsetting 0 [ 1833.765495][T24967] usb 5-1: New USB device found, idVendor=12d1, idProduct=ccef, bcdDevice=e5.56 [ 1833.786013][T24967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.806903][T24967] usb 5-1: Product: syz [ 1833.817205][T24967] usb 5-1: Manufacturer: syz [ 1833.831133][T24967] usb 5-1: SerialNumber: syz [ 1833.922904][T17077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9780'. [ 1834.174275][T12989] gspca_sonixj: reg_w err -110 [ 1834.184026][T12989] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 1834.575994][T24967] cdc_mbim 5-1:9.65: More than one union descriptor, skipping ... [ 1834.593484][T24967] cdc_mbim 5-1:9.65: CDC Union missing and no IAD found [ 1834.600605][T24967] cdc_mbim 5-1:9.65: bind() failure [ 1834.609755][T24967] usb 5-1: USB disconnect, device number 101 [ 1834.805020][T17222] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1834.871236][T17225] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1835.227461][T17243] loop5: detected capacity change from 0 to 7 [ 1835.231496][T24967] usb 3-1: USB disconnect, device number 106 [ 1835.239877][T17243] Dev loop5: unable to read RDB block 7 [ 1835.245737][T17243] loop5: unable to read partition table [ 1835.252566][T17243] loop5: partition table beyond EOD, truncated [ 1835.260018][T17243] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1835.784621][T17258] tipc: Failed to remove unknown binding: 66,1,1/0:3015894809/3015894811 [ 1835.803749][T17257] tipc: Failed to remove unknown binding: 66,1,1/0:3015894809/3015894811 [ 1836.128102][T17277] CUSE: info not properly terminated [ 1837.206993][T24967] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1837.368492][T24967] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1837.380380][T24967] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1837.391500][T24967] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1837.401620][T24967] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1837.416240][T24967] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1837.425623][T24967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1837.433938][T24967] usb 5-1: SerialNumber: syz [ 1837.550118][T17324] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9812'. [ 1837.644658][T24967] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 1837.654379][T24967] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 1837.666243][T24967] usb 5-1: USB disconnect, device number 102 [ 1837.952999][T17376] CUSE: DEVNAME unspecified [ 1837.966900][T24962] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1837.995919][T17377] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9814'. [ 1838.005813][T17377] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9814'. [ 1838.185927][T24962] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1838.212734][T24962] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1838.232574][T24962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.267349][T24967] usb 10-1: new high-speed USB device number 96 using dummy_hcd [ 1838.275646][T24962] usb 3-1: config 0 descriptor?? [ 1838.309168][T24962] pwc: Askey VC010 type 2 USB webcam detected. [ 1838.446910][T24967] usb 10-1: Using ep0 maxpacket: 32 [ 1838.452712][T24967] usb 10-1: too many configurations: 17, using maximum allowed: 8 [ 1838.461657][T24967] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 1838.469977][T24967] usb 10-1: config 0 has no interface number 0 [ 1838.476180][T24967] usb 10-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1838.486277][T24967] usb 10-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1838.497395][T24967] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 1838.505612][T24967] usb 10-1: config 0 has no interface number 0 [ 1838.511988][T24967] usb 10-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1838.521934][T24967] usb 10-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1838.534170][T24967] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 1838.542355][T24967] usb 10-1: config 0 has no interface number 0 [ 1838.548622][T24967] usb 10-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1838.558509][T24967] usb 10-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1838.571955][T24967] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 1838.580806][T24967] usb 10-1: config 0 has no interface number 0 [ 1838.587230][T24967] usb 10-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1838.597315][T24967] usb 10-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1838.609427][T24967] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 1838.617725][T24967] usb 10-1: config 0 has no interface number 0 [ 1838.623915][T24967] usb 10-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1838.633818][T24967] usb 10-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1838.644946][T24967] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 1838.654370][T24967] usb 10-1: config 0 has no interface number 0 [ 1838.660765][T24967] usb 10-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1838.670622][T24967] usb 10-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1838.681553][T24967] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 1838.691210][T24967] usb 10-1: config 0 has no interface number 0 [ 1838.697621][T24967] usb 10-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1838.707497][T24967] usb 10-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1838.718214][T24967] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 1838.726309][T24967] usb 10-1: config 0 has no interface number 0 [ 1838.732663][T24967] usb 10-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1838.743150][T24967] usb 10-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1838.755749][T24967] usb 10-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1838.765075][T24967] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.773262][T24967] usb 10-1: Product: syz [ 1838.777560][T24967] usb 10-1: Manufacturer: syz [ 1838.782243][T24967] usb 10-1: SerialNumber: syz [ 1838.789385][T24967] usb 10-1: config 0 descriptor?? [ 1838.795757][T24967] etas_es58x 10-1:0.2: Starting syz syz (Serial Number syz) [ 1838.956885][T24962] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1838.964751][T24962] pwc: recv_control_msg error -32 req 02 val 2700 [ 1838.972624][T24962] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1838.979945][T24962] pwc: recv_control_msg error -32 req 04 val 1000 [ 1838.986924][T24962] pwc: recv_control_msg error -32 req 04 val 1300 [ 1838.996973][T24967] etas_es58x 10-1:0.2: could not retrieve the product info string [ 1839.016183][T24967] usb 10-1: USB disconnect, device number 96 [ 1839.025114][T24967] etas_es58x 10-1:0.2: Disconnecting syz syz [ 1839.218719][T24962] pwc: recv_control_msg error -32 req 02 val 2000 [ 1839.247447][T24962] pwc: recv_control_msg error -32 req 02 val 2100 [ 1839.256390][T24962] pwc: recv_control_msg error -32 req 04 val 1500 [ 1839.272776][T24962] pwc: recv_control_msg error -32 req 02 val 2500 [ 1839.285443][T24962] pwc: recv_control_msg error -32 req 02 val 2400 [ 1839.501247][T17324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1840.160170][T17324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1840.171927][T24962] pwc: recv_control_msg error -71 req 02 val 2900 [ 1840.197876][T24962] pwc: recv_control_msg error -71 req 02 val 2800 [ 1840.207719][T24962] pwc: recv_control_msg error -71 req 04 val 1100 [ 1840.227477][T24962] pwc: recv_control_msg error -71 req 04 val 1200 [ 1840.235993][T24962] pwc: Registered as video103. [ 1840.248487][T24962] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input264 [ 1840.292604][T24962] usb 3-1: USB disconnect, device number 107 [ 1840.398662][T13001] usb 10-1: new high-speed USB device number 97 using dummy_hcd [ 1840.537475][T13001] usb 10-1: device descriptor read/64, error -71 [ 1840.786936][T13001] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 1840.917684][T13001] usb 10-1: device descriptor read/64, error -71 [ 1841.027936][T13001] usb usb10-port1: attempt power cycle [ 1841.142256][T12990] IPVS: starting estimator thread 0... [ 1841.236878][T17548] IPVS: using max 83 ests per chain, 199200 per kthread [ 1841.278812][T17559] netlink: 27 bytes leftover after parsing attributes in process `syz.8.9833'. [ 1841.367593][T13001] usb 10-1: new high-speed USB device number 99 using dummy_hcd [ 1841.398129][T13001] usb 10-1: device descriptor read/8, error -71 [ 1841.464939][T17581] loop4: detected capacity change from 0 to 7 [ 1841.472346][T17581] Dev loop4: unable to read RDB block 7 [ 1841.478735][T17581] loop4: AHDI p1 p2 p3 [ 1841.483038][T17581] loop4: partition table partially beyond EOD, truncated [ 1841.491748][T17581] loop4: p1 start 1601398130 is beyond EOD, truncated [ 1841.498957][T17581] loop4: p2 start 1702059890 is beyond EOD, truncated [ 1841.647522][T13001] usb 10-1: new high-speed USB device number 100 using dummy_hcd [ 1841.667693][T13001] usb 10-1: device descriptor read/8, error -71 [ 1841.687224][T12990] usb 9-1: new full-speed USB device number 106 using dummy_hcd [ 1841.778033][T13001] usb usb10-port1: unable to enumerate USB device [ 1841.817425][T12990] usb 9-1: device descriptor read/64, error -71 [ 1841.846980][T24967] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1841.863033][T17599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9840'. [ 1841.873841][T17599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9840'. [ 1841.996860][T24967] usb 5-1: Using ep0 maxpacket: 16 [ 1842.002433][T24967] usb 5-1: too many configurations: 112, using maximum allowed: 8 [ 1842.017683][T24967] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1842.026731][T24967] usb 5-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 1842.035185][T24967] usb 5-1: Product: syz [ 1842.039367][T24967] usb 5-1: Manufacturer: syz [ 1842.047667][T24967] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1842.053947][T24967] r8152-cfgselector 5-1: config 0 descriptor?? [ 1842.057622][T12990] usb 9-1: new full-speed USB device number 107 using dummy_hcd [ 1842.197332][T12990] usb 9-1: device descriptor read/64, error -71 [ 1842.263041][T24967] rndis_host 5-1:0.0: rndis: master #0/ffff888077aac000 slave #1/0000000000000000 [ 1842.277967][T24967] r8152-cfgselector 5-1: USB disconnect, device number 103 [ 1842.307615][T12990] usb usb9-port1: attempt power cycle [ 1842.458912][T17615] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9841'. [ 1842.647249][T12990] usb 9-1: new full-speed USB device number 108 using dummy_hcd [ 1842.667511][T12990] usb 9-1: device descriptor read/8, error -71 [ 1842.708008][T17620] net_ratelimit: 28 callbacks suppressed [ 1842.708018][T17620] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1842.833444][T17620] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9842'. [ 1842.851028][T17631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1842.908130][T12990] usb 9-1: new full-speed USB device number 109 using dummy_hcd [ 1842.948998][T12990] usb 9-1: device descriptor read/8, error -71 [ 1843.067740][T12990] usb usb9-port1: unable to enumerate USB device [ 1843.080445][T17657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9847'. [ 1843.167444][T13001] usb 10-1: new high-speed USB device number 101 using dummy_hcd [ 1843.327363][T13001] usb 10-1: Using ep0 maxpacket: 32 [ 1843.345163][T13001] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1843.367384][T13001] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1843.385652][T13001] usb 10-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1843.407201][T13001] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.428953][T13001] usb 10-1: config 0 descriptor?? [ 1843.644185][T13001] usbhid 10-1:0.0: can't add hid device: -71 [ 1843.658735][T13001] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1843.682131][T13001] usb 10-1: USB disconnect, device number 101 [ 1843.987071][T12990] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 1844.140652][T17677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1844.150244][T17677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1844.271153][T17684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1844.280234][T17684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1844.524046][T17707] syzkaller0: entered promiscuous mode [ 1844.530489][T17707] syzkaller0: entered allmulticast mode [ 1844.867345][T13001] usb 9-1: new high-speed USB device number 110 using dummy_hcd [ 1845.028474][T13001] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1845.058077][T13001] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1845.072139][T13001] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1845.090753][T13001] usb 9-1: SerialNumber: syz [ 1845.105702][T13001] hub 9-1:1.0: bad descriptor, ignoring hub [ 1845.120227][T13001] hub 9-1:1.0: probe with driver hub failed with error -5 [ 1845.712380][T13001] cdc_ether 9-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.8-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1845.797431][T12988] usb 10-1: new high-speed USB device number 102 using dummy_hcd [ 1845.909480][T17721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1845.925489][T17721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1845.957697][T12988] usb 10-1: Using ep0 maxpacket: 16 [ 1845.986521][T12988] usb 10-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1846.012416][T12988] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.021326][T12988] usb 10-1: Product: syz [ 1846.028660][T12988] usb 10-1: Manufacturer: syz [ 1846.033722][T12988] usb 10-1: SerialNumber: syz [ 1846.042402][T12988] usb 10-1: config 0 descriptor?? [ 1846.052890][T12988] usb 10-1: selecting invalid altsetting 1 [ 1846.059925][T12989] usb 9-1: USB disconnect, device number 110 [ 1846.070498][T12989] cdc_ether 9-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.8-1, CDC Ethernet Device [ 1846.080855][T12988] technisat-usb2: could not set alternate setting to 0 [ 1846.274532][T12988] technisat-usb2: firmware version: 0.0 [ 1846.280823][T12988] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 1846.468886][T12989] usb 9-1: new low-speed USB device number 111 using dummy_hcd [ 1846.640041][T12989] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 1846.654342][T12989] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 1846.665351][T12989] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 1846.679341][T12989] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1846.691538][T12988] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1846.702360][T12989] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.711733][T12988] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 1846.721389][T12989] usb 9-1: Product: ࠔ [ 1846.725713][T12989] usb 9-1: Manufacturer: ʱꈭᗉꗶ맼㘼ꨌ萨뮷뜂䫂둨る᳷饛㽞ꆤꏎ⹪帥윍迩퟈⳽繌店๴獲顊͵붶ᒩ嗼⢢ヴ츂⎪拦ᖨﾜ觇奙トキ쑑꧒♠ꝏ똁⎟ᮟ좰䤀ｮ갪ᣬ셦쵗䀚Ⓟ匭⧘譌ꈓ늧륣쑄뛝萧졶됖捦ⱜ㚤ಧ๏ [ 1846.753034][T12988] usb 10-1: media controller created [ 1846.759457][T12988] technisat-usb2: i2c-error: out failed 53 = -22 [ 1846.765867][T12988] dvb-usb: MAC address reading failed. [ 1846.780813][T12988] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1846.797407][T12989] usb 9-1: SerialNumber: 㐁 [ 1846.809368][T17787] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1846.846727][T17822] netlink: 'syz.4.9862': attribute type 1 has an invalid length. [ 1846.860294][T12988] DVB: Unable to find symbol stv090x_attach() [ 1846.884163][T12990] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1846.893308][T12988] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 1846.906558][T12990] usb 3-1: no configurations [ 1846.914290][T12990] usb 3-1: can't read configurations, error -22 [ 1846.987507][T12988] rc_core: IR keymap rc-technisat-usb2 not found [ 1846.993904][T12988] Registered IR keymap rc-empty [ 1847.002182][T12988] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0 [ 1847.016586][T12988] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input265 [ 1847.035700][T17787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1847.046310][T17787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1847.060130][T17787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1847.069931][T12988] dvb-usb: schedule remote query interval to 100 msecs. [ 1847.081507][T17787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1847.090709][T17787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1847.100076][T17787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1847.109680][T12988] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 1847.113994][T17787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1847.125798][T12988] usb 10-1: USB disconnect, device number 102 [ 1847.129660][T17787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1847.149048][T17787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1847.169856][T17787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1847.201643][T12988] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 1847.238482][T12989] cdc_ncm 9-1:1.0: bind() failure [ 1847.253478][T12989] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1847.262078][T12989] cdc_ncm 9-1:1.1: bind() failure [ 1847.267261][T24967] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1847.287575][T12989] usb 9-1: USB disconnect, device number 111 [ 1847.308887][T17896] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9866'. [ 1847.437044][T24967] usb 5-1: Using ep0 maxpacket: 32 [ 1847.444960][T24967] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 1847.460284][T24967] usb 5-1: config 0 has no interface number 0 [ 1847.469539][T24967] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1847.483409][T24967] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1847.493340][T24967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.501537][T24967] usb 5-1: Product: syz [ 1847.505958][T24967] usb 5-1: Manufacturer: syz [ 1847.510957][T24967] usb 5-1: SerialNumber: syz [ 1847.519318][T24967] usb 5-1: config 0 descriptor?? [ 1847.590514][T26385] udevd[26385]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1847.730019][T17931] loop4: detected capacity change from 0 to 2640 [ 1847.946958][T24967] usb 10-1: new high-speed USB device number 103 using dummy_hcd [ 1847.987859][T17948] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9871'. [ 1848.136889][T24967] usb 10-1: Using ep0 maxpacket: 16 [ 1848.156475][T24967] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1848.198552][T24967] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1848.231086][T24967] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1848.254299][T24967] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1848.274963][T24967] usb 10-1: config 0 descriptor?? [ 1848.300317][T24967] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1848.428060][T12988] usb 9-1: new high-speed USB device number 112 using dummy_hcd [ 1848.588662][T12988] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1848.602865][T12988] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1848.631243][T12988] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1848.653559][T12988] usb 9-1: config 0 descriptor?? [ 1848.678484][T12988] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1849.023091][T17970] netdevsim netdevsim6: Firmware load for '..' refused, path contains '..' component [ 1850.026637][T12988] usb 5-1: USB disconnect, device number 104 [ 1850.367283][T12988] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1850.376983][T24967] usb 3-1: new low-speed USB device number 110 using dummy_hcd [ 1850.518108][T12988] usb 5-1: Using ep0 maxpacket: 32 [ 1850.524515][T12988] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1850.533518][T12988] usb 5-1: config 0 has no interface number 0 [ 1850.540157][T12988] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1850.547057][T24967] usb 3-1: Invalid ep0 maxpacket: 64 [ 1850.552837][T12988] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1850.564850][T12988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.573476][T12988] usb 5-1: Product: syz [ 1850.578243][T12988] usb 5-1: Manufacturer: syz [ 1850.582848][T12988] usb 5-1: SerialNumber: syz [ 1850.589035][T12988] usb 5-1: config 0 descriptor?? [ 1850.598722][T12988] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1850.608989][T12988] em28xx 5-1:0.132: Video interface 132 found: [ 1850.686987][T24967] usb 3-1: new low-speed USB device number 111 using dummy_hcd [ 1850.713203][T12989] usb 10-1: USB disconnect, device number 103 [ 1850.858808][T24967] usb 3-1: Invalid ep0 maxpacket: 64 [ 1850.865683][T24967] usb usb3-port1: attempt power cycle [ 1850.998442][T12988] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1851.177380][T12989] usb 10-1: new high-speed USB device number 104 using dummy_hcd [ 1851.201658][T24962] usb 9-1: USB disconnect, device number 112 [ 1851.208833][T24967] usb 3-1: new low-speed USB device number 112 using dummy_hcd [ 1851.250029][T24967] usb 3-1: Invalid ep0 maxpacket: 64 [ 1851.337214][T12989] usb 10-1: Using ep0 maxpacket: 8 [ 1851.343566][T12989] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1851.355158][T12989] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1851.364930][T12989] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1851.373662][T12989] usb 10-1: Product: syz [ 1851.378339][T12989] usb 10-1: Manufacturer: syz [ 1851.383024][T12989] usb 10-1: SerialNumber: syz [ 1851.386930][T24967] usb 3-1: new low-speed USB device number 113 using dummy_hcd [ 1851.417350][T24967] usb 3-1: Invalid ep0 maxpacket: 64 [ 1851.423103][T24967] usb usb3-port1: unable to enumerate USB device [ 1851.566883][T24962] usb 9-1: new high-speed USB device number 113 using dummy_hcd [ 1851.600323][T12989] usb 10-1: Handspring Visor / Palm OS: No valid connect info available [ 1851.609516][T12989] usb 10-1: Handspring Visor / Palm OS: port 231, is for unknown use [ 1851.618605][T12989] usb 10-1: Handspring Visor / Palm OS: port 193, is for Debugger use [ 1851.627938][T12989] usb 10-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1851.677155][T12988] em28xx 5-1:0.132: failed to read eeprom (err=-110) [ 1851.684704][T12988] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1851.719991][T24962] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1851.729322][T24962] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.737601][T24962] usb 9-1: Product: syz [ 1851.742021][T24962] usb 9-1: Manufacturer: syz [ 1851.746629][T24962] usb 9-1: SerialNumber: syz [ 1851.752839][T24962] usb 9-1: config 0 descriptor?? [ 1851.762372][T24962] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1851.806467][T12989] usb 10-1: palm_os_3_probe - error -71 getting bytes available request [ 1851.819235][T12989] visor 10-1:1.0: Handspring Visor / Palm OS converter detected [ 1851.830457][T12989] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1851.842902][T12989] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1851.855958][T12989] usb 10-1: USB disconnect, device number 104 [ 1851.868937][T18011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1851.878672][T12989] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1851.888819][T18011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1851.900656][T12989] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1851.911579][T12989] visor 10-1:1.0: device disconnected [ 1851.947413][T12988] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1851.955282][T12988] em28xx 5-1:0.132: analog set to bulk mode. [ 1851.963063][T12990] em28xx 5-1:0.132: Registering V4L2 extension [ 1851.965345][T24962] gspca_sunplus: reg_r err -71 [ 1851.990160][T24962] usb 9-1: USB disconnect, device number 113 [ 1852.010410][T12988] usb 5-1: USB disconnect, device number 105 [ 1852.031436][T12990] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 1852.062633][T12990] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 1852.072548][T12988] em28xx 5-1:0.132: Disconnecting em28xx [ 1852.139075][T12990] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1852.146219][T12990] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1852.154487][T12990] em28xx 5-1:0.132: No AC97 audio processor [ 1852.161770][T12990] usb 5-1: Decoder not found [ 1852.169864][T12990] em28xx 5-1:0.132: failed to create media graph [ 1852.183725][T12990] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1852.197881][T12990] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1852.208582][T12988] em28xx 5-1:0.132: Closing input extension [ 1852.219951][T12988] em28xx 5-1:0.132: Freeing device [ 1852.491157][ T29] audit: type=1326 audit(1782292977.874:10014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18155 comm="syz.9.9889" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5bb59ce59 code=0x7ffc0000 [ 1852.539479][ T29] audit: type=1326 audit(1782292977.874:10015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18155 comm="syz.9.9889" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5bb59ce59 code=0x7ffc0000 [ 1852.582229][ T29] audit: type=1326 audit(1782292977.904:10016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18155 comm="syz.9.9889" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5bb59ce59 code=0x7ffc0000 [ 1852.608747][ T29] audit: type=1326 audit(1782292977.904:10017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18155 comm="syz.9.9889" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd5bb59ce59 code=0x7ffc0000 [ 1852.636460][ T29] audit: type=1326 audit(1782292977.904:10018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18155 comm="syz.9.9889" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5bb59ce59 code=0x7ffc0000 [ 1852.671410][ T29] audit: type=1326 audit(1782292977.954:10019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18155 comm="syz.9.9889" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5bb55d68e code=0x7ffc0000 [ 1852.698752][ T29] audit: type=1326 audit(1782292977.954:10020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18155 comm="syz.9.9889" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5bb55d68e code=0x7ffc0000 [ 1852.724013][ T29] audit: type=1326 audit(1782292977.954:10021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18155 comm="syz.9.9889" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5bb55d68e code=0x7ffc0000 [ 1852.752253][ T29] audit: type=1326 audit(1782292977.954:10022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18155 comm="syz.9.9889" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5bb55d68e code=0x7ffc0000 [ 1852.798240][ T29] audit: type=1326 audit(1782292977.964:10023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18155 comm="syz.9.9889" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5bb55d68e code=0x7ffc0000 [ 1852.837594][T12988] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1852.999993][T12988] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1853.011867][T12988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.027978][T12988] usb 5-1: config 0 descriptor?? [ 1853.036129][T12988] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1853.087591][T12990] usb 10-1: new high-speed USB device number 105 using dummy_hcd [ 1853.097285][T24975] usb 9-1: new high-speed USB device number 114 using dummy_hcd [ 1853.128414][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.136310][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.237462][T12990] usb 10-1: Using ep0 maxpacket: 8 [ 1853.245769][T12990] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1853.256329][T12990] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.260018][T18203] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1853.265692][T12990] usb 10-1: Product: syz [ 1853.278546][T12990] usb 10-1: Manufacturer: syz [ 1853.283261][T12990] usb 10-1: SerialNumber: syz [ 1853.288746][T24975] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1853.304678][T24975] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1853.314868][T12990] usb 10-1: config 0 descriptor?? [ 1853.320383][T24975] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.330670][T12990] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 1853.340147][T12990] dvb-usb: bulk message failed: -22 (2/0) [ 1853.346639][T24975] usb 9-1: config 0 descriptor?? [ 1853.355125][T24975] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1853.367907][T12990] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1853.378311][T12990] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 1853.388030][T12990] usb 10-1: media controller created [ 1853.398789][T12990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1853.535018][T18176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1853.545534][T18176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1853.571805][T12990] cxusb: set interface failed [ 1853.577910][T12990] dvb-usb: bulk message failed: -22 (1/0) [ 1853.631131][T12990] DVB: Unable to find symbol mt352_attach() [ 1853.643423][T12990] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 1853.708824][T12990] rc_core: IR keymap rc-dvico-portable not found [ 1853.715192][T12990] Registered IR keymap rc-empty [ 1853.721193][T12990] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0 [ 1853.733171][T12990] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input266 [ 1853.746156][T12990] dvb-usb: schedule remote query interval to 100 msecs. [ 1853.753699][T12990] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 1853.766255][T12990] usb 10-1: USB disconnect, device number 105 [ 1853.811608][T12990] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 1853.857654][T12988] usb 5-1: USB disconnect, device number 106 [ 1854.237236][T12988] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1854.337198][T12990] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1854.387140][T12988] usb 5-1: Using ep0 maxpacket: 16 [ 1854.393566][T12988] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 1854.401899][T12988] usb 5-1: config 1 has no interface number 0 [ 1854.408869][T12988] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1854.419490][T12988] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1854.430536][T12988] usb 5-1: config 1 interface 105 has no altsetting 0 [ 1854.439899][T12988] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1854.449527][T12988] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1854.458011][T12988] usb 5-1: Product: syz [ 1854.462168][T12988] usb 5-1: Manufacturer: syz [ 1854.466736][T12988] usb 5-1: SerialNumber: syz [ 1854.475369][T18276] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1854.483521][T18276] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1854.491264][T12990] usb 3-1: Using ep0 maxpacket: 8 [ 1854.499193][T12990] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1854.512344][T12990] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 1854.522178][T12990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1854.532005][T12990] usb 3-1: config 0 descriptor?? [ 1854.899236][T18276] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1854.906519][T18276] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1854.940483][T12990] hid (null): unknown global tag 0xa3 [ 1854.949378][T12990] itetech 0003:258A:6A88.009B: unexpected long global item [ 1854.957428][T12990] itetech 0003:258A:6A88.009B: probe with driver itetech failed with error -22 [ 1855.149042][T24967] usb 3-1: USB disconnect, device number 114 [ 1855.315534][T12988] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1855.530107][T18276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1855.539297][T18276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1855.548692][T18276] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[14293] was attempted by "   l@ \x09$rQ \x09 \x07 \x09 \x09    Zml\x09$  \x09iZ \x09 \x09@ cgroup  k# [ 1855.869576][T24967] usb 9-1: USB disconnect, device number 114 [ 1856.095630][T12988] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1856.173186][T12988] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f6:6b:a5:fe:84:23 [ 1856.203798][T18338] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9904'. [ 1856.239601][T12988] usb 5-1: USB disconnect, device number 107 [ 1856.260545][T12988] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1856.353682][T12988] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1856.366881][T24967] usb 9-1: new high-speed USB device number 115 using dummy_hcd [ 1856.404620][T12988] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1856.458458][T12988] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1856.516889][T24967] usb 9-1: device descriptor read/64, error -71 [ 1856.637025][ T808] usb 10-1: new high-speed USB device number 106 using dummy_hcd [ 1856.787704][T24967] usb 9-1: new high-speed USB device number 116 using dummy_hcd [ 1856.796873][ T808] usb 10-1: Using ep0 maxpacket: 8 [ 1856.803829][ T808] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1856.817041][ T808] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1856.827289][ T808] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1856.837443][ T808] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1856.849662][ T808] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1856.867028][ T808] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1856.877348][ T808] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1856.927189][T24967] usb 9-1: device descriptor read/64, error -71 [ 1857.027112][T24962] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1857.047211][T24967] usb usb9-port1: attempt power cycle [ 1857.095437][ T808] usb 10-1: usb_control_msg returned -32 [ 1857.101709][ T808] usbtmc 10-1:16.0: can't read capabilities [ 1857.196890][T24962] usb 3-1: Using ep0 maxpacket: 32 [ 1857.204886][T24962] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1857.214316][T24962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.223147][T24962] usb 3-1: Product: syz [ 1857.227565][T24962] usb 3-1: Manufacturer: syz [ 1857.232174][T24962] usb 3-1: SerialNumber: syz [ 1857.238414][T24962] usb 3-1: config 0 descriptor?? [ 1857.386910][T24967] usb 9-1: new high-speed USB device number 117 using dummy_hcd [ 1857.417517][T24967] usb 9-1: device descriptor read/8, error -71 [ 1857.456002][T18441] usbtmc 10-1:16.0: INDICATOR_PULSE returned 0 [ 1857.456544][T24962] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 115 [ 1857.492853][T18441] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9906'. [ 1857.652145][ T808] usb 3-1: USB disconnect, device number 115 [ 1857.658383][T24967] usb 9-1: new high-speed USB device number 118 using dummy_hcd [ 1857.667858][T12988] usb 10-1: USB disconnect, device number 106 [ 1857.688100][T24967] usb 9-1: device descriptor read/8, error -71 [ 1857.806903][T24962] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1857.827148][T24967] usb usb9-port1: unable to enumerate USB device [ 1857.958451][T24962] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1857.971516][T24962] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1857.980790][T24962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.990427][T24962] usb 5-1: config 0 descriptor?? [ 1857.999310][T24962] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1858.222223][T18482] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9913'. [ 1858.233614][T18482] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9913'. [ 1858.258172][T18482] bond0: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 1858.269755][T18482] bond0 (unregistering): Released all slaves [ 1858.556880][T24967] usb 10-1: new high-speed USB device number 107 using dummy_hcd [ 1858.716938][T24967] usb 10-1: Using ep0 maxpacket: 16 [ 1858.789083][T24967] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1858.806977][T24967] usb 10-1: no configurations [ 1858.816099][T24967] usb 10-1: can't read configurations, error -22 [ 1858.824768][T18586] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9918'. [ 1858.838007][T18586] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9918'. [ 1859.023777][T18606] xt_hashlimit: size too large, truncated to 1048576 [ 1859.138458][T18622] netlink: 32 bytes leftover after parsing attributes in process `syz.9.9923'. [ 1859.192038][T18627] netlink: 'syz.6.9925': attribute type 1 has an invalid length. [ 1859.250476][T18627] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1859.278319][T18627] bond1: (slave bond2): making interface the new active one [ 1859.302353][T18627] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1859.456972][T24962] usb 9-1: new high-speed USB device number 119 using dummy_hcd [ 1859.559656][T18729] tipc: Started in network mode [ 1859.564707][T18729] tipc: Node identity ac14140f, cluster identity 4711 [ 1859.573151][T18729] tipc: Enabled bearer , priority 10 [ 1859.616934][T24962] usb 9-1: Using ep0 maxpacket: 8 [ 1859.628534][T24962] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1859.650497][T24962] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 1859.661188][T24967] usb 10-1: new high-speed USB device number 108 using dummy_hcd [ 1859.674672][T24962] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1859.699036][T24962] usb 9-1: Product: syz [ 1859.731250][T24962] usb 9-1: Manufacturer: syz [ 1859.747123][T24962] usb 9-1: SerialNumber: syz [ 1859.848780][T24967] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1859.863385][T24967] usb 10-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1859.875003][T24967] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1859.883557][T24967] usb 10-1: Product: К [ 1859.887994][T24967] usb 10-1: Manufacturer: ఉ [ 1859.892740][T24967] usb 10-1: SerialNumber: syz [ 1859.980268][T24962] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1859.987924][T24962] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1860.005444][T24962] usb 9-1: USB disconnect, device number 119 [ 1860.317081][T24967] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1860.332659][T24967] usb 10-1: MIDIStreaming interface descriptor not found [ 1860.399026][T24967] usb 10-1: USB disconnect, device number 108 [ 1860.635145][T24967] usb 5-1: USB disconnect, device number 108 [ 1860.697786][T24962] tipc: Node number set to 2886997007 [ 1860.739541][T18792] kvm: kvm [18791]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1861.141374][T18846] fuse: Bad value for 'group_id' [ 1861.147376][T12989] usb 10-1: new high-speed USB device number 109 using dummy_hcd [ 1861.158430][T18846] fuse: Bad value for 'group_id' [ 1861.221494][T18846] can: request_module (can-proto-0) failed. [ 1861.307710][T12989] usb 10-1: Using ep0 maxpacket: 32 [ 1861.320053][T12989] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1861.338984][T12989] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1861.352271][T12989] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1861.367453][T12989] usb 10-1: string descriptor 0 read error: -22 [ 1861.380755][T12989] usb 10-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1861.402167][T12989] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.485551][T18857] tipc: Started in network mode [ 1861.491244][T18857] tipc: Node identity fc01, cluster identity 4711 [ 1861.498397][T18857] tipc: Enabling of bearer rejected, failed to enable media [ 1861.623988][T12989] usb 10-1: cannot find UAC_HEADER [ 1861.656259][T12989] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1861.816950][T24967] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1861.832819][T18817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1861.841916][T18817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1861.851795][ T808] usb 10-1: USB disconnect, device number 109 [ 1861.980563][T24967] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1862.008677][T24967] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1862.018852][T24967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1862.035904][T24967] usb 5-1: config 0 descriptor?? [ 1862.049182][T24967] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1862.077068][T24962] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1862.102080][T18935] netlink: 'syz.8.9949': attribute type 1 has an invalid length. [ 1862.129333][T18935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1862.140176][T18935] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9949'. [ 1862.151978][T18935] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9949'. [ 1862.167589][T18935] bond1: (slave geneve2): making interface the new active one [ 1862.175949][T18935] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1862.184800][ T8666] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1862.194653][ T8666] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1862.211239][ T8666] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1862.227400][ T8666] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1862.237884][T24962] usb 3-1: Using ep0 maxpacket: 8 [ 1862.265506][T24962] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1862.275337][T24962] usb 3-1: config 6 has an invalid interface number: 172 but max is 0 [ 1862.283897][T24962] usb 3-1: config 6 has no interface number 0 [ 1862.290099][T24962] usb 3-1: config 6 interface 172 has no altsetting 0 [ 1862.306980][T24962] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=76.1a [ 1862.316224][T24962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.325042][T24962] usb 3-1: Product: syz [ 1862.334429][T24962] usb 3-1: Manufacturer: syz [ 1862.339316][T24962] usb 3-1: SerialNumber: syz [ 1862.640425][T18987] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9952'. [ 1862.647920][T12989] usb 10-1: new high-speed USB device number 110 using dummy_hcd [ 1862.811187][T12989] usb 10-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1862.823675][T12989] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.832867][T12989] usb 10-1: Product: syz [ 1862.841711][T12989] usb 10-1: Manufacturer: syz [ 1862.846567][T12989] usb 10-1: SerialNumber: syz [ 1862.856323][T12989] usb 10-1: config 0 descriptor?? [ 1862.867905][T12989] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1863.844063][T12989] usb 10-1: USB disconnect, device number 110 [ 1864.050475][T19050] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9961'. [ 1864.115981][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1864.116015][ T29] audit: type=1326 audit(1782292989.494:10032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.8.9962" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562db9ce59 code=0x7ffc0000 [ 1864.150768][ T29] audit: type=1326 audit(1782292989.494:10033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.8.9962" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562db9ce59 code=0x7ffc0000 [ 1864.177601][ T29] audit: type=1326 audit(1782292989.534:10034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.8.9962" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562db9ce59 code=0x7ffc0000 [ 1864.202500][ T29] audit: type=1326 audit(1782292989.534:10035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.8.9962" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562db9ce59 code=0x7ffc0000 [ 1864.227208][ T29] audit: type=1326 audit(1782292989.534:10036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.8.9962" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f562db9ce59 code=0x7ffc0000 [ 1864.251866][ T29] audit: type=1326 audit(1782292989.534:10037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.8.9962" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562db9ce59 code=0x7ffc0000 [ 1864.277417][ T29] audit: type=1326 audit(1782292989.534:10038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.8.9962" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562db9ce59 code=0x7ffc0000 [ 1864.302353][ T29] audit: type=1326 audit(1782292989.534:10039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.8.9962" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562db9ce59 code=0x7ffc0000 [ 1864.327591][ T29] audit: type=1326 audit(1782292989.534:10041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.8.9962" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f562db9ce59 code=0x7ffc0000 [ 1864.352636][ T29] audit: type=1326 audit(1782292989.534:10040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19057 comm="syz.8.9962" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562db9ce59 code=0x7ffc0000 [ 1864.588347][T24967] usb 5-1: USB disconnect, device number 109 [ 1864.639964][T19070] loop4: detected capacity change from 0 to 7 [ 1864.649316][T19070] Dev loop4: unable to read RDB block 7 [ 1864.655075][T19070] loop4: AHDI p1 p2 p3 [ 1864.660067][T19070] loop4: partition table partially beyond EOD, truncated [ 1864.667807][T19070] loop4: p1 start 1601398130 is beyond EOD, truncated [ 1864.674964][T19070] loop4: p2 start 1702059890 is beyond EOD, truncated [ 1864.858040][T24962] usb_8dev 3-1:6.172 can0: sending command message failed [ 1864.865961][T24962] usb_8dev 3-1:6.172 can0: can't get firmware version [ 1864.918568][T24962] usb_8dev 3-1:6.172: probe with driver usb_8dev failed with error -22 [ 1864.956432][T24962] usb 3-1: USB disconnect, device number 116 [ 1865.027807][T19114] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9968'. [ 1865.066872][T24967] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1865.218992][T24967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1865.235119][T24967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1865.245742][T24967] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1865.259303][T24967] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1865.269013][T24967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1865.279825][T24967] usb 5-1: config 0 descriptor?? [ 1865.713931][T24967] plantronics 0003:047F:FFFF.009C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1866.290762][T19158] netlink: 'syz.9.9972': attribute type 1 has an invalid length. [ 1866.293662][T19159] binder: 19157:19159 ioctl c0306201 200000000680 returned -14 [ 1866.316180][T19158] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1866.374582][T19158] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9972'. [ 1866.431164][T19158] bond4: (slave dummy0): making interface the new active one [ 1866.441665][T19158] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1866.532014][T19204] loop4: detected capacity change from 0 to 7 [ 1866.540065][T19204] Dev loop4: unable to read RDB block 7 [ 1866.545772][T19204] loop4: AHDI p1 p2 p3 [ 1866.550440][T19204] loop4: partition table partially beyond EOD, truncated [ 1866.561675][T19204] loop4: p1 start 1601398130 is beyond EOD, truncated [ 1866.576596][T19204] loop4: p2 start 1702059890 is beyond EOD, truncated [ 1866.654734][T19211] netlink: 'syz.9.9975': attribute type 1 has an invalid length. [ 1866.663308][T24967] usb 9-1: new high-speed USB device number 120 using dummy_hcd [ 1866.707915][T19211] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1866.740586][T19211] bond5: (slave geneve2): making interface the new active one [ 1866.750685][T19211] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 1866.760201][ T8667] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1866.771196][ T8667] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1866.792710][T19211] ip6erspan1: entered allmulticast mode [ 1866.798649][ T8667] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1866.809943][ T8667] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1866.839720][T24967] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1866.863330][T24967] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1866.874150][T24967] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1866.885455][T24967] usb 9-1: config 0 descriptor?? [ 1866.895663][T24967] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1867.017008][T20913] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1867.097316][T12988] usb 10-1: new high-speed USB device number 111 using dummy_hcd [ 1867.156999][T24967] usb 5-1: reset high-speed USB device number 110 using dummy_hcd [ 1867.177853][T20913] usb 3-1: Using ep0 maxpacket: 32 [ 1867.184738][T20913] usb 3-1: config 0 has no interfaces? [ 1867.192902][T20913] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1867.202193][T20913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.210367][T20913] usb 3-1: Product: syz [ 1867.215062][T20913] usb 3-1: Manufacturer: syz [ 1867.219704][T20913] usb 3-1: SerialNumber: syz [ 1867.222013][T19283] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1867.231474][T20913] usb 3-1: config 0 descriptor?? [ 1867.233424][T19283] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1867.246428][T19284] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9980'. [ 1867.257374][T12988] usb 10-1: Using ep0 maxpacket: 8 [ 1867.265423][T12988] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1867.281650][T12988] usb 10-1: config 9 has an invalid interface number: 111 but max is 0 [ 1867.297628][T24967] usb 5-1: device descriptor read/64, error -32 [ 1867.303009][T12988] usb 10-1: config 9 has no interface number 0 [ 1867.315827][T12988] usb 10-1: config 9 interface 111 has no altsetting 0 [ 1867.325915][T12988] usb 10-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=f7.35 [ 1867.335667][T12988] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.344366][T12988] usb 10-1: Product: syz [ 1867.349245][T12988] usb 10-1: Manufacturer: syz [ 1867.353940][T12988] usb 10-1: SerialNumber: syz [ 1867.440854][T19252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9976'. [ 1867.460250][T20913] usb 3-1: USB disconnect, device number 117 [ 1867.504694][T19304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9982'. [ 1867.518330][T19304] netlink: 'syz.2.9982': attribute type 10 has an invalid length. [ 1867.548478][T19304] 8021q: adding VLAN 0 to HW filter on device  [ 1867.550758][T24967] usb 5-1: reset high-speed USB device number 110 using dummy_hcd [ 1867.559077][T19304] team0: Port device  added [ 1867.574885][T19260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1867.589970][T19260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1867.619092][T12988] peak_usb 10-1:9.111 can0: unable to request usb[type=0 value=1] err=-71 [ 1867.640534][T12988] peak_usb 10-1:9.111: unable to read PCAN-USB Pro FD firmware info (err -71) [ 1867.659385][T19325] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 1867.694398][T19340] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 1867.719354][T12988] peak_usb 10-1:9.111: probe with driver peak_usb failed with error -71 [ 1867.735360][T12988] usb 10-1: USB disconnect, device number 111 [ 1867.772967][T19358] loop4: detected capacity change from 0 to 7 [ 1867.780536][T19358] Dev loop4: unable to read RDB block 7 [ 1867.786200][T19358] loop4: AHDI p1 p2 p3 [ 1867.791711][T19358] loop4: partition table partially beyond EOD, truncated [ 1867.799637][T19358] loop4: p1 start 1601398130 is beyond EOD, truncated [ 1867.806436][T19358] loop4: p2 start 1702059890 is beyond EOD, truncated [ 1867.851856][T19365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9986'. [ 1868.350048][T19389] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1868.367798][T24962] usb 5-1: USB disconnect, device number 110 [ 1868.758527][T19426] loop4: detected capacity change from 0 to 7 [ 1868.765634][T19426] Dev loop4: unable to read RDB block 7 [ 1868.771837][T19426] loop4: AHDI p1 p2 p3 [ 1868.776004][T19426] loop4: partition table partially beyond EOD, truncated [ 1868.783597][T19426] loop4: p1 start 1601398130 is beyond EOD, truncated [ 1868.791734][T19426] loop4: p2 start 1702059890 is beyond EOD, truncated [ 1868.817261][T12988] usb 10-1: new full-speed USB device number 112 using dummy_hcd [ 1868.876908][T24962] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1868.947610][T12988] usb 10-1: device descriptor read/64, error -71 [ 1869.038224][T24962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1869.049253][T24962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1869.061299][T24962] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1869.070432][T24962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1869.079797][T24962] usb 5-1: config 0 descriptor?? [ 1869.187354][T12988] usb 10-1: new full-speed USB device number 113 using dummy_hcd [ 1869.206925][T31419] Bluetooth: hci5: command 0x0c1a tx timeout [ 1869.287074][T31419] Bluetooth: hci0: command 0x0c1a tx timeout [ 1869.317355][T12988] usb 10-1: device descriptor read/64, error -71 [ 1869.418967][ T808] usb 9-1: USB disconnect, device number 120 [ 1869.427583][T12988] usb usb10-port1: attempt power cycle [ 1869.494992][T24962] pyra 0003:1E7D:2CF6.009D: unknown main item tag 0x0 [ 1869.503575][T24962] pyra 0003:1E7D:2CF6.009D: unknown main item tag 0x0 [ 1869.511728][T24962] pyra 0003:1E7D:2CF6.009D: unknown main item tag 0x0 [ 1869.531719][T24962] pyra 0003:1E7D:2CF6.009D: unknown main item tag 0x0 [ 1869.538918][T24962] pyra 0003:1E7D:2CF6.009D: unknown main item tag 0x0 [ 1869.545743][T24962] pyra 0003:1E7D:2CF6.009D: unknown main item tag 0x0 [ 1869.552982][T24962] pyra 0003:1E7D:2CF6.009D: unknown main item tag 0x0 [ 1869.566421][T24962] pyra 0003:1E7D:2CF6.009D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 1869.694190][T24962] pyra 0003:1E7D:2CF6.009D: couldn't init struct pyra_device [ 1869.702476][T24962] pyra 0003:1E7D:2CF6.009D: couldn't install mouse [ 1869.712115][T24962] pyra 0003:1E7D:2CF6.009D: probe with driver pyra failed with error -32 [ 1869.786937][T12988] usb 10-1: new full-speed USB device number 114 using dummy_hcd [ 1869.829240][T12988] usb 10-1: device descriptor read/8, error -71 [ 1869.868938][T19468] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[31879] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[19468] [ 1870.067375][T12988] usb 10-1: new full-speed USB device number 115 using dummy_hcd [ 1870.097382][T12988] usb 10-1: device descriptor read/8, error -71 [ 1870.193002][T19480] fuse: Bad value for 'fd' [ 1870.217595][T12988] usb usb10-port1: unable to enumerate USB device [ 1870.529256][T19529] loop4: detected capacity change from 0 to 7 [ 1870.536063][T19529] Dev loop4: unable to read RDB block 7 [ 1870.541775][T19529] loop4: AHDI p1 p2 p3 [ 1870.546056][T19529] loop4: partition table partially beyond EOD, truncated [ 1870.558298][T19529] loop4: p1 start 1601398130 is beyond EOD, truncated [ 1870.568767][T19529] loop4: p2 start 1702059890 is beyond EOD, truncated [ 1870.906900][T24967] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 1871.068582][T24967] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1871.077816][T24967] usb 3-1: config 0 has no interface number 0 [ 1871.084159][T24967] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1871.096413][T24967] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1871.108210][T24967] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1871.120294][T24967] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1871.131331][T24967] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1871.139815][T24967] usb 3-1: Product: syz [ 1871.144269][T24967] usb 3-1: SerialNumber: syz [ 1871.151842][T24967] usb 3-1: config 0 descriptor?? [ 1871.163373][T24967] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 1871.173844][T24967] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input268 [ 1871.366611][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1871.367629][T12988] usb 3-1: USB disconnect, device number 118 [ 1871.373595][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1871.395110][T12988] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1871.537464][T19575] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10011'. [ 1871.546702][T19575] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10011'. [ 1871.558310][T19575] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10011'. [ 1871.742914][T19592] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10015'. [ 1871.753011][T19592] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10015'. [ 1871.764019][T19592] syzkaller0: entered promiscuous mode [ 1871.769670][T19592] syzkaller0: entered allmulticast mode [ 1871.812172][T24967] usb 5-1: USB disconnect, device number 111 [ 1871.941254][T19622] loop4: detected capacity change from 0 to 7 [ 1871.952359][T19622] Dev loop4: unable to read RDB block 7 [ 1871.960395][T19622] loop4: AHDI p1 p2 p3 [ 1871.964566][T19622] loop4: partition table partially beyond EOD, truncated [ 1871.973417][T19622] loop4: p1 start 1601398130 is beyond EOD, truncated [ 1871.980451][T19622] loop4: p2 start 1702059890 is beyond EOD, truncated [ 1872.148464][T19646] kvm: user requested TSC rate below hardware speed [ 1872.156933][T24967] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1872.248729][T19664] netlink: 'syz.9.10025': attribute type 3 has an invalid length. [ 1872.249256][T19663] netlink: 312 bytes leftover after parsing attributes in process `syz.2.10024'. [ 1872.291685][T19663] netlink: 1 bytes leftover after parsing attributes in process `syz.2.10024'. [ 1872.317228][T24967] usb 5-1: Using ep0 maxpacket: 32 [ 1872.323993][T24967] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1872.334397][T24967] usb 5-1: config 0 has no interface number 0 [ 1872.342959][T24967] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1872.352590][T24967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.360841][T24967] usb 5-1: Product: syz [ 1872.365137][T24967] usb 5-1: Manufacturer: syz [ 1872.370802][T24967] usb 5-1: SerialNumber: syz [ 1872.377118][T24967] usb 5-1: config 0 descriptor?? [ 1872.383340][T19674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10027'. [ 1872.385188][T24967] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1872.587524][T24967] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1872.599476][T24967] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1872.608949][ T808] usb 10-1: new full-speed USB device number 116 using dummy_hcd [ 1872.768793][ T808] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1872.777140][ T808] usb 10-1: not running at top speed; connect to a high speed hub [ 1872.785977][ T808] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 1872.797523][ T808] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1872.807644][ T808] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64 [ 1872.818745][ T808] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1872.828558][ T808] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC7, changing to 0x87 [ 1872.840571][ T808] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 28672, setting to 64 [ 1872.854869][ T808] usb 10-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1872.864296][ T808] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.872424][ T808] usb 10-1: Product: syz [ 1872.876734][ T808] usb 10-1: Manufacturer: syz [ 1872.881481][ T808] usb 10-1: SerialNumber: syz [ 1872.891434][ T808] usb 10-1: config 0 descriptor?? [ 1872.897921][T19664] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1872.907710][ T808] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1872.964564][T18921] udevd[18921]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1873.160459][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1873.160632][T12989] usb 5-1: USB disconnect, device number 112 [ 1873.180823][T12989] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1873.194765][T12989] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1873.209968][T12989] quatech2 5-1:0.51: device disconnected [ 1873.391563][T19740] loop4: detected capacity change from 0 to 7 [ 1873.401486][T19740] Dev loop4: unable to read RDB block 7 [ 1873.407537][T19740] loop4: AHDI p1 p2 p3 [ 1873.411838][T19740] loop4: partition table partially beyond EOD, truncated [ 1873.419575][T19740] loop4: p1 start 1601398130 is beyond EOD, truncated [ 1873.426432][T19740] loop4: p2 start 1702059890 is beyond EOD, truncated [ 1873.500225][T19750] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10034'. [ 1873.690327][T19765] geneve3: entered allmulticast mode [ 1873.691535][T12989] usb 10-1: USB disconnect, device number 116 [ 1873.699325][T19765] tipc: Started in network mode [ 1873.706653][T19765] tipc: Node identity , cluster identity 4711 [ 1873.746872][ T808] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 1873.774005][T19765] tipc: Failed to obtain node identity [ 1873.798478][T19765] tipc: Enabling of bearer rejected, failed to enable media [ 1873.834631][ T8667] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20003 - 0 [ 1873.846197][T19781] syzkaller0: entered promiscuous mode [ 1873.865629][T19781] syzkaller0: entered allmulticast mode [ 1873.878287][T19790] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10038'. [ 1873.893401][ T8667] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20003 - 0 [ 1873.912955][ T8667] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20003 - 0 [ 1873.939098][ T8667] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20003 - 0 [ 1873.985233][ T808] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 1873.993706][ T808] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1874.002981][ T808] usb 3-1: config 8 has an invalid descriptor of length 86, skipping remainder of the config [ 1874.008761][T12988] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1874.021599][ T808] usb 3-1: config 8 has no interface number 0 [ 1874.041095][ T808] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 1874.066671][ T808] usb 3-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1874.105520][T19798] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10039'. [ 1874.117190][ T808] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1874.126948][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.135131][ T808] usb 3-1: Product: syz [ 1874.139776][ T808] usb 3-1: Manufacturer: syz [ 1874.144951][ T808] usb 3-1: SerialNumber: syz [ 1874.229912][T12988] usb 5-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 1874.270917][T12988] usb 5-1: config 0 interface 0 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1874.328454][T12988] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1874.356435][T12988] usb 5-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 1874.383338][ T808] usb 3-1: USB disconnect, device number 119 [ 1874.430695][T12988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1874.463468][T12988] usb 5-1: config 0 descriptor?? [ 1874.502944][T12988] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1874.557024][T24967] usb 9-1: new high-speed USB device number 121 using dummy_hcd [ 1874.718240][T24967] usb 9-1: Using ep0 maxpacket: 32 [ 1874.748243][T24967] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 1874.767032][T24967] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1874.792415][T24967] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1874.819228][T24967] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 92 [ 1874.840499][T24967] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1874.868294][T24967] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.113352][T19803] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10040'. [ 1875.130844][T19803] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10040'. [ 1875.620031][T19851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1875.640021][T19851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1876.808243][T12990] usb 5-1: USB disconnect, device number 113 [ 1876.916854][T24967] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 1877.071369][T24967] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1877.080514][T24967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.089067][T24967] usb 3-1: Product: syz [ 1877.096275][T24967] usb 3-1: Manufacturer: syz [ 1877.106034][T24967] usb 3-1: SerialNumber: syz [ 1877.120994][T24967] usb 3-1: config 0 descriptor?? [ 1877.129423][ T808] usb 9-1: USB disconnect, device number 121 [ 1877.144597][T24967] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1877.160826][T19898] PKCS7: Unknown OID: [4] 0.0(bad) [ 1877.166263][T19898] PKCS7: Only support pkcs7_signedData type [ 1877.174389][T12990] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1877.277127][T24962] usb 10-1: new high-speed USB device number 117 using dummy_hcd [ 1877.328672][T12990] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1877.339435][T12990] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1877.351800][T12990] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1877.364815][T12990] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1877.374616][T12990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.383210][T12990] usb 5-1: Product: syz [ 1877.388107][T12990] usb 5-1: Manufacturer: syz [ 1877.392718][T12990] usb 5-1: SerialNumber: syz [ 1877.399521][T12990] usb 5-1: config 0 descriptor?? [ 1877.405418][T19878] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1877.413212][T19878] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1877.422116][T12990] usb 5-1: ucan: probing device on interface #0 [ 1877.438664][T24962] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1877.452180][T24962] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1877.461903][T24962] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1877.476523][T24962] usb 10-1: config 0 descriptor?? [ 1877.486110][T24962] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1877.606942][ T808] usb 9-1: new high-speed USB device number 122 using dummy_hcd [ 1877.758899][ T808] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1877.768226][ T808] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1877.776716][T24967] gspca_stk1135: reg_w 0x5 err -71 [ 1877.784200][ T808] usb 9-1: config 0 descriptor?? [ 1877.794446][T24967] gspca_stk1135: serial bus timeout: status=0x00 [ 1877.801034][T24967] gspca_stk1135: Sensor write failed [ 1877.806407][T24967] gspca_stk1135: serial bus timeout: status=0x00 [ 1877.815950][T24967] gspca_stk1135: Sensor write failed [ 1877.821665][T24967] gspca_stk1135: serial bus timeout: status=0x00 [ 1877.828418][T24967] gspca_stk1135: Sensor read failed [ 1877.833652][T24967] gspca_stk1135: serial bus timeout: status=0x00 [ 1877.840443][T24967] gspca_stk1135: Sensor read failed [ 1877.845652][T24967] gspca_stk1135: Detected sensor type unknown (0x0) [ 1877.852653][T24967] gspca_stk1135: serial bus timeout: status=0x00 [ 1877.859075][T24967] gspca_stk1135: Sensor read failed [ 1877.864299][T24967] gspca_stk1135: serial bus timeout: status=0x00 [ 1877.870667][T24967] gspca_stk1135: Sensor read failed [ 1877.875878][T24967] gspca_stk1135: serial bus timeout: status=0x00 [ 1877.882265][T24967] gspca_stk1135: Sensor write failed [ 1877.887650][T24967] gspca_stk1135: serial bus timeout: status=0x00 [ 1877.894004][T24967] gspca_stk1135: Sensor write failed [ 1877.899428][T24967] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 1877.910786][T24967] usb 3-1: USB disconnect, device number 120 [ 1878.020581][ T808] usb 9-1: Cannot read MAC address [ 1878.024925][T12990] ucan 5-1:0.0: probe with driver ucan failed with error -71 [ 1878.025880][ T808] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1878.039494][T12990] usb 5-1: USB disconnect, device number 114 [ 1878.070500][ T808] usb 9-1: USB disconnect, device number 122 [ 1878.704384][T19982] syzkaller0: entered promiscuous mode [ 1878.847074][ T808] usb 9-1: new high-speed USB device number 123 using dummy_hcd [ 1879.008278][ T808] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1879.018029][ T808] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1879.027721][ T808] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1879.037465][ T808] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1879.048344][ T808] usb 9-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1879.058220][ T808] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.069322][ T808] usb 9-1: config 0 descriptor?? [ 1879.277117][ T808] hdpvr 9-1:0.0: firmware version 0x1e dated [ 1879.698211][ T808] hdpvr 9-1:0.0: Could not setup controls [ 1879.705229][ T808] hdpvr 9-1:0.0: registering videodev failed [ 1879.718391][ T808] hdpvr 9-1:0.0: probe with driver hdpvr failed with error -71 [ 1879.729401][ T808] usb 9-1: USB disconnect, device number 123 [ 1880.028927][T12989] usb 10-1: USB disconnect, device number 117 [ 1880.837743][ T808] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1881.007277][ T808] usb 5-1: Using ep0 maxpacket: 8 [ 1881.023314][ T808] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1881.038464][ T808] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 1881.048606][ T808] usb 5-1: config 0 has no interface number 0 [ 1881.056532][ T808] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1881.070235][ T808] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1881.088021][ T808] usb 5-1: config 0 interface 255 has no altsetting 0 [ 1881.098830][ T808] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1881.108407][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.116396][ T808] usb 5-1: Product: syz [ 1881.120766][ T808] usb 5-1: Manufacturer: syz [ 1881.125630][ T808] usb 5-1: SerialNumber: syz [ 1881.139069][ T808] usb 5-1: config 0 descriptor?? [ 1881.146997][ T808] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1881.155396][ T808] usb 5-1: setting power ON [ 1881.160208][ T808] dvb-usb: bulk message failed: -22 (2/0) [ 1881.167161][ T808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1881.179508][ T808] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1881.188789][ T808] usb 5-1: media controller created [ 1881.198528][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1881.214992][ T808] usb 5-1: digital interface selection failed (-22) [ 1881.222210][ T808] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1881.232468][ T808] usb 5-1: setting power OFF [ 1881.237139][ T808] dvb-usb: bulk message failed: -22 (2/0) [ 1881.242897][ T808] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1881.252232][ T808] (NULL device *): no alternate interface [ 1881.263559][ T808] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1881.391899][T20095] IPv6: NLM_F_CREATE should be specified when creating new route [ 1881.442464][T12990] usb 5-1: USB disconnect, device number 115 [ 1881.656884][T24962] usb 9-1: new high-speed USB device number 124 using dummy_hcd [ 1881.831115][T24962] usb 9-1: Using ep0 maxpacket: 16 [ 1881.844156][T24962] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1881.853677][T24962] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1881.868704][T24962] usb 9-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1881.878219][T24962] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.886592][T24962] usb 9-1: Product: ꘽ᬏ鋠ꁖᜮꤺﷃ睮뾰康㍜犐㲞딞浊䲪㗾菓ᰑ蚨溉츗澵㝻䦕ⵚ덒섦팽舴잡Ⲗ촟഻័￪㷾굺엂碃밚⁄젘␶【笕젗池쿎쀚⪥２Ņ篸꧰伹綏㞪퓫⯅꧚Ľ賬嶚⫒驗Ⴖ룉㤱㮴 [ 1881.912623][T24962] usb 9-1: Manufacturer: з [ 1881.917222][T24962] usb 9-1: SerialNumber: 皴䅴뷜ᤇ䞭⋏ஜ慺셵⹏抈縜瓊뿽≺붩Ⅱ徆簵쭮ᘶ䎞⽂琪ꛤꃿ縜㟷圸줏殜⥟䖻㾪䟛샌ⷖ︆誏ʍ䰆睳久Ꞿᵍ鐞슚먞郓瞾⍾횫喓 [ 1882.029804][T12989] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1882.202511][T12989] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 1882.216940][T24967] usb 10-1: new high-speed USB device number 118 using dummy_hcd [ 1882.230770][T12989] usb 3-1: config 1 has no interface number 0 [ 1882.259786][T12989] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1882.305808][T12989] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 8 [ 1882.318817][T12989] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1882.346018][T12989] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1882.356117][T12989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.364722][T12989] usb 3-1: Product: syz [ 1882.369681][T12989] usb 3-1: Manufacturer: syz [ 1882.374985][T12989] usb 3-1: SerialNumber: syz [ 1882.383232][T20108] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1882.389336][T24967] usb 10-1: config 253 has an invalid interface number: 130 but max is 0 [ 1882.399768][T24967] usb 10-1: config 253 has no interface number 0 [ 1882.406173][T24967] usb 10-1: config 253 interface 130 has no altsetting 0 [ 1882.418862][T24967] usb 10-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 1882.429065][T24967] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.437561][T24967] usb 10-1: Product: syz [ 1882.442085][T24967] usb 10-1: Manufacturer: syz [ 1882.447147][T24967] usb 10-1: SerialNumber: syz [ 1882.517398][T12990] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1882.623417][T12989] usb 3-1: Error in usbnet_get_endpoints (-71) [ 1882.639917][T12989] usb 3-1: USB disconnect, device number 121 [ 1882.668167][T12990] usb 5-1: Using ep0 maxpacket: 16 [ 1882.674613][T12990] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 1882.685609][T12990] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1882.696339][T12990] usb 5-1: config 1 has no interface number 0 [ 1882.702923][T12990] usb 5-1: config 1 interface 105 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1882.714603][T12990] usb 5-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1882.729001][T12990] usb 5-1: config 1 interface 105 has no altsetting 0 [ 1882.740453][T12990] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1882.750079][T12990] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1882.758656][T12990] usb 5-1: Product: syz [ 1882.762806][T12990] usb 5-1: Manufacturer: syz [ 1882.768101][T12990] usb 5-1: SerialNumber: syz [ 1882.813440][T24962] snd-ua101 9-1:1.0: invalid num_altsetting [ 1882.846667][T24962] usb 9-1: USB disconnect, device number 124 [ 1882.972944][T20219] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10081'. [ 1882.982964][T12990] aqc111 5-1:1.105: probe with driver aqc111 failed with error -22 [ 1882.994936][T20221] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10081'. [ 1883.071859][T20120] veth1: Caught tx_queue_len zero misconfig [ 1883.086677][T24967] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 1883.099312][T24967] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1883.107688][T24967] dib0700: firmware download failed at 7 with -22 [ 1883.116599][T24967] usb 10-1: USB disconnect, device number 118 [ 1883.213131][T20237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10083'. [ 1884.189685][ T29] kauditd_printk_skb: 886 callbacks suppressed [ 1884.189702][ T29] audit: type=1800 audit(1782293009.574:10928): pid=20272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.10086" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 1885.098594][T20283] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10088'. [ 1885.380083][T24967] usb 5-1: USB disconnect, device number 116 [ 1885.826862][T24967] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 1885.998562][T24967] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1886.010030][T24967] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1886.022353][T24967] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1886.035456][T24967] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1886.049192][T24967] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1886.058380][T24967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.066445][T24967] usb 5-1: Product: syz [ 1886.071004][T24967] usb 5-1: Manufacturer: syz [ 1886.075625][T24967] usb 5-1: SerialNumber: syz [ 1886.086324][T20338] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1886.217257][T24975] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1886.310988][T20338] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1886.369064][T24975] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1886.382757][T24975] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1886.392484][T24975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1886.403764][T24975] usb 3-1: config 0 descriptor?? [ 1886.419477][T24975] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1886.537065][T24962] usb 10-1: new high-speed USB device number 119 using dummy_hcd [ 1886.686915][T24962] usb 10-1: Using ep0 maxpacket: 32 [ 1886.693342][T24962] usb 10-1: config 0 has no interfaces? [ 1886.700887][T24962] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1886.710359][T24962] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.718685][T24962] usb 10-1: Product: syz [ 1886.722968][T24962] usb 10-1: Manufacturer: syz [ 1886.727782][T24962] usb 10-1: SerialNumber: syz [ 1886.733738][T24962] usb 10-1: config 0 descriptor?? [ 1886.947594][T20376] netlink: 'syz.9.10099': attribute type 11 has an invalid length. [ 1886.963343][T24975] usb 10-1: USB disconnect, device number 119 [ 1887.014240][T20338] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1887.228180][T24967] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1887.234775][T24967] cdc_ncm 5-1:1.0: dwNtbInMaxSize=15 is too small. Using 2048 [ 1887.242288][T24967] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 1887.463829][T24967] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1887.480421][T24967] usb 5-1: USB disconnect, device number 117 [ 1887.487441][T24967] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 1887.623864][T20423] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10101'. [ 1887.633588][T20423] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10101'. [ 1887.917129][T24975] usb 10-1: new high-speed USB device number 120 using dummy_hcd [ 1887.967424][T12990] usb 9-1: new high-speed USB device number 125 using dummy_hcd [ 1888.068348][T24975] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1888.077578][T24975] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1888.088761][T24975] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1888.098935][T24975] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1888.111214][T24975] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1888.124894][T12990] usb 9-1: config index 0 descriptor too short (expected 65183, got 72) [ 1888.134909][T24975] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1888.149631][T24975] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1888.162762][T12990] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1888.174637][T24975] usb 10-1: Product: syz [ 1888.179923][T12990] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.188917][T24975] usb 10-1: Manufacturer: syz [ 1888.195206][T12990] usb 9-1: Product: syz [ 1888.203971][T24975] cdc_wdm 10-1:1.0: skipping garbage [ 1888.211226][T12990] usb 9-1: Manufacturer: syz [ 1888.215894][T24975] cdc_wdm 10-1:1.0: skipping garbage [ 1888.221914][T12990] usb 9-1: SerialNumber: syz [ 1888.222051][T20452] libceph: secret too big 289 [ 1888.228146][T24975] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1888.243473][T12990] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1888.264476][T24975] cdc_wdm 10-1:1.0: Unknown control protocol [ 1888.271817][T12989] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1888.287875][T12988] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1888.294055][T20462] xt_TCPMSS: Only works on TCP SYN packets [ 1888.453833][T12989] usb 5-1: config 0 has an invalid interface number: 252 but max is 0 [ 1888.479951][T12989] usb 5-1: config 0 has no interface number 0 [ 1888.497552][T12989] usb 5-1: config 0 interface 252 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1888.512840][ T29] audit: type=1326 audit(1782293013.894:10929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20432 comm="syz.8.10103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562db9ce59 code=0x7ffc0000 [ 1888.545588][T12989] usb 5-1: config 0 interface 252 has no altsetting 0 [ 1888.558986][T12989] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1888.569589][T12989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.578562][T12989] usb 5-1: Product: syz [ 1888.583040][T12989] usb 5-1: Manufacturer: syz [ 1888.588501][T12989] usb 5-1: SerialNumber: syz [ 1888.596738][T12989] usb 5-1: config 0 descriptor?? [ 1888.654065][ T29] audit: type=1326 audit(1782293013.894:10930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20432 comm="syz.8.10103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562db9ce59 code=0x7ffc0000 [ 1888.677161][T12989] usb 10-1: USB disconnect, device number 120 [ 1888.750625][ T29] audit: type=1326 audit(1782293013.944:10931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20432 comm="syz.8.10103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f562db9ce59 code=0x7ffc0000 [ 1888.814637][ T29] audit: type=1326 audit(1782293013.944:10932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20432 comm="syz.8.10103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562db9ce59 code=0x7ffc0000 [ 1888.851438][T24967] usb 5-1: USB disconnect, device number 118 [ 1888.876834][ T29] audit: type=1326 audit(1782293013.944:10933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20432 comm="syz.8.10103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562db9ce59 code=0x7ffc0000 [ 1888.906525][ T29] audit: type=1326 audit(1782293013.944:10934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20432 comm="syz.8.10103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f562db9ce59 code=0x7ffc0000 [ 1888.935280][ T29] audit: type=1326 audit(1782293013.944:10935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20432 comm="syz.8.10103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562db9ce59 code=0x7ffc0000 [ 1888.986841][ T29] audit: type=1326 audit(1782293013.944:10936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20432 comm="syz.8.10103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562db9ce59 code=0x7ffc0000 [ 1889.011627][ T29] audit: type=1326 audit(1782293013.944:10937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20432 comm="syz.8.10103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f562db9ce59 code=0x7ffc0000 [ 1889.066024][T12990] usb 3-1: USB disconnect, device number 122 [ 1889.102841][T20511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1889.112622][T12989] usb 10-1: new high-speed USB device number 121 using dummy_hcd [ 1889.113743][T24967] usb 9-1: USB disconnect, device number 125 [ 1889.131516][T20511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1889.160041][T20511] syzkaller0: entered promiscuous mode [ 1889.165515][T20511] syzkaller0: entered allmulticast mode [ 1889.174810][T20511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1889.183998][T20511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1889.279290][T12989] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1889.298867][T12989] usb 10-1: too many configurations: 206, using maximum allowed: 8 [ 1889.324138][T12989] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1889.334989][T12989] usb 10-1: can't read configurations, error -61 [ 1889.367452][T12988] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 1889.385248][T12988] ath9k_htc: Failed to initialize the device [ 1889.406165][T24967] usb 9-1: ath9k_htc: USB layer deinitialized [ 1889.418270][T12990] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1889.476670][T12989] usb 10-1: new high-speed USB device number 122 using dummy_hcd [ 1889.569614][T12990] usb 3-1: device descriptor read/64, error -71 [ 1889.640309][T12989] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1889.649620][T12989] usb 10-1: too many configurations: 206, using maximum allowed: 8 [ 1889.659867][T12989] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1889.668729][T12989] usb 10-1: can't read configurations, error -61 [ 1889.675763][T12989] usb usb10-port1: attempt power cycle [ 1889.801366][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 1889.801383][ T29] audit: type=1326 audit(1782293015.184:10982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20565 comm="syz.4.10117" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f159bd9ce59 code=0x0 [ 1889.834940][T12990] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1889.935686][T20538] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1889.994430][T12990] usb 3-1: device descriptor read/64, error -71 [ 1890.025276][T12989] usb 10-1: new high-speed USB device number 123 using dummy_hcd [ 1890.060414][T12989] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1890.077212][T12989] usb 10-1: too many configurations: 206, using maximum allowed: 8 [ 1890.092777][T12989] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1890.109343][T12989] usb 10-1: can't read configurations, error -61 [ 1890.137503][T12990] usb usb3-port1: attempt power cycle [ 1890.146451][T20592] Cannot find add_set index 0 as target [ 1890.158109][T24975] usb 9-1: new high-speed USB device number 126 using dummy_hcd [ 1890.208855][T20592] netlink: 164 bytes leftover after parsing attributes in process `syz.4.10120'. [ 1890.237901][T12989] usb 10-1: new high-speed USB device number 124 using dummy_hcd [ 1890.278382][T12989] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1890.295110][T12989] usb 10-1: too many configurations: 206, using maximum allowed: 8 [ 1890.315197][T12989] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1890.328390][T24975] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1890.347363][T12989] usb 10-1: can't read configurations, error -61 [ 1890.356642][T24975] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1890.370774][T12989] usb usb10-port1: unable to enumerate USB device [ 1890.385192][T24975] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1890.405537][T24975] usb 9-1: config 0 descriptor?? [ 1890.429419][T24975] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1890.477253][T12990] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1890.508350][T12990] usb 3-1: device descriptor read/8, error -71 [ 1890.757735][T12990] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1890.777657][T12990] usb 3-1: device descriptor read/8, error -71 [ 1890.889601][T12990] usb usb3-port1: unable to enumerate USB device [ 1891.196832][T24962] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 1891.368541][T24962] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1891.380271][T24962] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1891.390804][T24962] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1891.398128][T24962] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1891.407475][T24962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1891.416469][T24962] usb 5-1: config 0 descriptor?? [ 1891.831698][T24962] hid-steam 0003:28DE:1102.009E: unknown main item tag 0x0 [ 1891.859837][T24962] hid-steam 0003:28DE:1102.009E: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 1891.926915][T24962] hid-steam 0003:28DE:1102.009E: Steam Controller 'XXXXXXXXXX' connected [ 1891.936650][T24962] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.009E/input/input269 [ 1891.964994][T24962] hid-steam 0003:28DE:1102.009F: unknown main item tag 0x0 [ 1891.998637][T24962] hid-steam 0003:28DE:1102.009F: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 1892.041012][T20603] loop5: detected capacity change from 0 to 7 [ 1892.059366][T20603] Dev loop5: unable to read RDB block 7 [ 1892.079401][T20603] loop5: unable to read partition table [ 1892.085190][T20603] loop5: partition table beyond EOD, truncated [ 1892.104097][T20603] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1892.129276][T24962] usb 5-1: USB disconnect, device number 119 [ 1892.165101][T24962] hid-steam 0003:28DE:1102.009E: Steam Controller 'XXXXXXXXXX' disconnected [ 1892.586905][T24967] usb 10-1: new high-speed USB device number 125 using dummy_hcd [ 1892.669032][T20673] fuse: Bad value for 'user_id' [ 1892.674009][T20673] fuse: Bad value for 'user_id' [ 1892.679559][T12990] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 1892.716838][T24967] usb 10-1: device descriptor read/64, error -71 [ 1892.766285][T20681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1892.775870][T20681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1892.838498][T12990] usb 3-1: not running at top speed; connect to a high speed hub [ 1892.847459][T12990] usb 3-1: config 1 interface 0 altsetting 194 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1892.860273][T12990] usb 3-1: config 1 interface 0 altsetting 194 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1892.873798][T12990] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1892.882630][T12990] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1892.892428][T12990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.901200][T12990] usb 3-1: Product: syz [ 1892.905486][T12990] usb 3-1: Manufacturer: syz [ 1892.910665][T12990] usb 3-1: SerialNumber: syz [ 1892.923880][T24962] usb 9-1: USB disconnect, device number 126 [ 1892.938908][T20658] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1892.959911][T24967] usb 10-1: new high-speed USB device number 126 using dummy_hcd [ 1892.978258][T20658] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1893.106906][T24967] usb 10-1: device descriptor read/64, error -71 [ 1893.217893][T24967] usb usb10-port1: attempt power cycle [ 1893.296871][T24962] usb 9-1: new full-speed USB device number 127 using dummy_hcd [ 1893.364217][T12990] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1893.378557][T12990] usb 3-1: USB disconnect, device number 127 [ 1893.488726][T24962] usb 9-1: config 0 has an invalid interface number: 37 but max is 1 [ 1893.498381][T24962] usb 9-1: config 0 has an invalid interface number: 255 but max is 1 [ 1893.506620][T24962] usb 9-1: config 0 has no interface number 0 [ 1893.514405][T24962] usb 9-1: config 0 has no interface number 1 [ 1893.523459][T24962] usb 9-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1893.536414][T24962] usb 9-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1893.550491][T24962] usb 9-1: config 0 interface 255 has no altsetting 0 [ 1893.559292][T24962] usb 9-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 1893.569270][T24962] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.577945][T24967] usb 10-1: new high-speed USB device number 127 using dummy_hcd [ 1893.586042][T24962] usb 9-1: Product: syz [ 1893.590621][T24962] usb 9-1: Manufacturer: syz [ 1893.595417][T24962] usb 9-1: SerialNumber: syz [ 1893.605107][T24962] usb 9-1: config 0 descriptor?? [ 1893.611610][T24967] usb 10-1: device descriptor read/8, error -71 [ 1893.625654][T24962] usb 9-1: selecting invalid altsetting 0 [ 1893.633393][T24962] usb 9-1: Could not set interface, error -22 [ 1893.696840][T20913] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 1893.803714][T20748] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[31879] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[20748] [ 1893.849846][T20913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1893.860258][T24967] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1893.872185][T20913] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1893.886476][T20913] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1893.896018][T20913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.904239][T20913] usb 5-1: Product: syz [ 1893.909094][T24967] usb 10-1: device descriptor read/8, error -71 [ 1893.915372][T20913] usb 5-1: Manufacturer: syz [ 1893.920329][T20913] usb 5-1: SerialNumber: syz [ 1893.926524][T20913] usb 5-1: config 0 descriptor?? [ 1894.027001][T24967] usb usb10-port1: unable to enumerate USB device [ 1894.160133][T12990] usb 9-1: USB disconnect, device number 127 [ 1894.552626][ C1] sd 0:0:1:0: [sda] tag#1033 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1894.563112][ C1] sd 0:0:1:0: [sda] tag#1033 CDB: Read(6) 08 00 05 02 00 00 [ 1894.606925][T24967] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1894.766888][T24967] usb 3-1: Using ep0 maxpacket: 32 [ 1894.773434][T24967] usb 3-1: config 0 has no interfaces? [ 1894.780937][T24967] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1894.790979][T24967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.809929][T24967] usb 3-1: Product: syz [ 1894.819352][T24967] usb 3-1: Manufacturer: syz [ 1894.828548][T24967] usb 3-1: SerialNumber: syz [ 1894.840536][T24967] usb 3-1: config 0 descriptor?? [ 1895.207094][T12990] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1895.357512][T12990] usb 9-1: Using ep0 maxpacket: 16 [ 1895.364684][T12990] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1895.375360][T12990] usb 9-1: language id specifier not provided by device, defaulting to English [ 1895.394424][T12990] usb 9-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1895.404012][T12990] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.413168][T12990] usb 9-1: Product: ‚ꐃ澥͠⬐ꋇǩ䅋嫋5 [ 1895.419786][T12990] usb 9-1: SerialNumber: syz [ 1895.459448][T20838] netlink: 412 bytes leftover after parsing attributes in process `syz.9.10144'. [ 1895.468811][T20838] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10144'. [ 1895.479951][T20837] netlink: 'syz.9.10144': attribute type 13 has an invalid length. [ 1895.489625][T20837] netlink: 'syz.9.10144': attribute type 17 has an invalid length. [ 1895.523429][T20837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1895.532334][T20837] 8021q: adding VLAN 0 to HW filter on device team0 [ 1895.542125][T20837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1895.573684][T20837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1895.583786][T20837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1895.595658][T20837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1895.606671][T20837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1895.621179][T20837] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1895.636494][T20837] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1895.681575][T12990] usb 9-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 1895.706552][T12990] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1895.722382][T12990] usb 9-1: USB disconnect, device number 2 [ 1895.735871][T26385] udevd[26385]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1896.391259][T12988] usb 5-1: USB disconnect, device number 120 [ 1896.588271][T24967] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1896.757109][T24967] usb 9-1: Using ep0 maxpacket: 16 [ 1896.765165][T24967] usb 9-1: config index 0 descriptor too short (expected 1068, got 27) [ 1896.773873][T24967] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1896.785623][T24967] usb 9-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 1896.794850][T24967] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.802957][T24967] usb 9-1: Product: syz [ 1896.807656][T24967] usb 9-1: Manufacturer: syz [ 1896.812743][T24967] usb 9-1: SerialNumber: syz [ 1896.819007][T24967] usb 9-1: config 0 descriptor?? [ 1899.235890][T24967] usb 9-1: USB disconnect, device number 3 [ 1899.413276][T20916] netlink: 'syz.6.10150': attribute type 2 has an invalid length. [ 1899.421939][T20916] netlink: 132 bytes leftover after parsing attributes in process `syz.6.10150'. [ 1909.926509][T22970] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1909.939736][T22970] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1909.953136][T22970] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1909.961417][T22970] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1909.969025][T22970] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1911.408187][T31419] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1911.415443][T31419] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1911.423010][T31419] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1911.431091][T31419] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1911.439188][T31419] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1912.007324][T22970] Bluetooth: hci4: command tx timeout [ 1912.405661][T31419] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1912.414445][T31419] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1912.422535][T31419] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1912.430521][T31419] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1912.438664][T31419] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1913.526858][T22970] Bluetooth: hci1: command tx timeout [ 1914.086934][T22970] Bluetooth: hci4: command tx timeout [ 1914.412126][T31419] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1914.419703][T31419] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1914.428361][T31419] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1914.435970][T31419] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1914.443829][T31419] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1914.497732][T22970] Bluetooth: hci6: command tx timeout [ 1914.568236][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.574662][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.607495][T22970] Bluetooth: hci1: command tx timeout [ 1916.166892][T22970] Bluetooth: hci4: command tx timeout [ 1916.486885][T22970] Bluetooth: hci7: command tx timeout [ 1916.566850][T22970] Bluetooth: hci6: command tx timeout [ 1917.686921][T22970] Bluetooth: hci1: command tx timeout [ 1918.246881][T22970] Bluetooth: hci4: command tx timeout [ 1918.427915][T31419] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1918.435260][T31419] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1918.442856][T31419] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1918.450675][T31419] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1918.458612][T31419] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1918.567570][T31419] Bluetooth: hci7: command tx timeout [ 1918.647372][T31419] Bluetooth: hci6: command tx timeout [ 1919.767433][T31419] Bluetooth: hci1: command tx timeout [ 1920.487434][T31419] Bluetooth: hci8: command tx timeout [ 1920.647147][T31419] Bluetooth: hci7: command tx timeout [ 1920.727631][T31419] Bluetooth: hci6: command tx timeout [ 1922.567200][T31419] Bluetooth: hci8: command tx timeout [ 1922.727124][T31419] Bluetooth: hci7: command tx timeout [ 1924.647512][T31419] Bluetooth: hci8: command tx timeout [ 1926.727680][T31419] Bluetooth: hci8: command tx timeout [ 1970.470712][T22970] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1970.478479][T22970] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1970.485694][T22970] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1970.493781][T22970] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1970.502011][T22970] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1971.481399][T31419] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1971.488766][T31419] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1971.496194][T31419] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1971.504234][T31419] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1971.512640][T31419] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1972.469205][T22970] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1972.476548][T22970] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1972.484102][T22970] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1972.492374][T22970] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1972.500557][T22970] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1972.567308][T31419] Bluetooth: hci9: command tx timeout [ 1973.527246][T31419] Bluetooth: hci10: command tx timeout [ 1974.567483][T31419] Bluetooth: hci11: command tx timeout [ 1974.647120][T31419] Bluetooth: hci9: command tx timeout [ 1974.972217][T22970] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1974.979780][T22970] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1974.988036][T22970] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1974.995691][T22970] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1975.004403][T22970] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1975.607182][T31419] Bluetooth: hci10: command tx timeout [ 1976.008075][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.014379][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.647737][T31419] Bluetooth: hci11: command tx timeout [ 1976.727137][T31419] Bluetooth: hci9: command tx timeout [ 1977.047016][T31419] Bluetooth: hci12: command tx timeout [ 1977.686887][T31419] Bluetooth: hci10: command tx timeout [ 1978.474396][T22970] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1978.482149][T22970] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1978.490137][T22970] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1978.497954][T22970] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1978.505407][T22970] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1978.727202][T31419] Bluetooth: hci11: command tx timeout [ 1978.807329][T31419] Bluetooth: hci9: command tx timeout [ 1979.137316][T31419] Bluetooth: hci12: command tx timeout [ 1979.767624][T31419] Bluetooth: hci10: command tx timeout [ 1980.566853][T31419] Bluetooth: hci13: command tx timeout [ 1980.806893][T31419] Bluetooth: hci11: command tx timeout [ 1981.207033][T31419] Bluetooth: hci12: command tx timeout [ 1982.646883][T31419] Bluetooth: hci13: command tx timeout [ 1983.287006][T31419] Bluetooth: hci12: command tx timeout [ 1984.726894][T31419] Bluetooth: hci13: command tx timeout [ 1986.806961][T31419] Bluetooth: hci13: command tx timeout [ 2030.602135][T22970] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 2030.609540][T22970] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 2030.617931][T22970] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 2030.625687][T22970] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 2030.633394][T22970] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 2031.575182][T31419] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 2031.583022][T31419] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 2031.590729][T31419] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 2031.599198][T31419] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 2031.606657][T31419] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 2032.578371][T21041] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 2032.585690][T21041] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 2032.593742][T21041] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 2032.602329][T21041] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 2032.610236][T21041] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 2032.647136][T21041] Bluetooth: hci14: command tx timeout [ 2033.686974][T21041] Bluetooth: hci15: command tx timeout [ 2034.406767][T21041] Bluetooth: hci4: command 0x0406 tx timeout [ 2034.417549][T22970] Bluetooth: hci1: command 0x0406 tx timeout [ 2034.647302][T22970] Bluetooth: hci16: command tx timeout [ 2034.726806][T22970] Bluetooth: hci14: command tx timeout [ 2035.078959][T21041] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 2035.086260][T21041] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 2035.094104][T21041] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 2035.102284][T21041] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 2035.110341][T21041] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 2035.766965][T21041] Bluetooth: hci15: command tx timeout [ 2036.726793][T21041] Bluetooth: hci16: command tx timeout [ 2036.807010][T21041] Bluetooth: hci14: command tx timeout [ 2037.126815][T21041] Bluetooth: hci17: command tx timeout [ 2037.447711][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.454012][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.847622][T22970] Bluetooth: hci15: command tx timeout [ 2038.806827][T22970] Bluetooth: hci16: command tx timeout [ 2038.886882][T22970] Bluetooth: hci14: command tx timeout [ 2039.082800][T20933] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 2039.090359][T20933] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 2039.097883][T20933] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 2039.105631][T20933] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 2039.113760][T20933] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 2039.207109][T20933] Bluetooth: hci17: command tx timeout [ 2039.527462][T20933] Bluetooth: hci6: command 0x0406 tx timeout [ 2039.534355][T22970] Bluetooth: hci7: command 0x0406 tx timeout [ 2039.926792][T21041] Bluetooth: hci15: command tx timeout [ 2040.886787][T21041] Bluetooth: hci16: command tx timeout [ 2041.136812][T21041] Bluetooth: hci18: command tx timeout [ 2041.286925][T21041] Bluetooth: hci17: command tx timeout [ 2042.568097][ T30] INFO: task kworker/0:6:24975 blocked for more than 143 seconds. [ 2042.575977][ T30] Tainted: G L syzkaller #0 [ 2042.583534][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2042.592308][ T30] task:kworker/0:6 state:D stack:20240 pid:24975 tgid:24975 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2042.604501][ T30] Workqueue: events netdev_rx_mode_work [ 2042.610298][ T30] Call Trace: [ 2042.613601][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2042.616540][ T30] __schedule+0x17d9/0x56c0 [ 2042.621520][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 2042.626603][ T30] ? __pfx___schedule+0x10/0x10 [ 2042.631554][ T30] ? rcu_is_watching+0x15/0xb0 [ 2042.636346][ T30] ? rcu_is_watching+0x15/0xb0 [ 2042.641155][ T30] ? lock_release+0x4b/0x3c0 [ 2042.645747][ T30] ? rcu_is_watching+0x15/0xb0 [ 2042.650627][ T30] ? schedule+0x90/0x360 [ 2042.654893][ T30] ? trace_irq_enable+0x3b/0x140 [ 2042.659950][ T30] schedule+0x164/0x360 [ 2042.664131][ T30] schedule_preempt_disabled+0x13/0x30 [ 2042.669686][ T30] __mutex_lock+0x7bf/0x1550 [ 2042.674303][ T30] ? __mutex_lock+0x5d4/0x1550 [ 2042.679126][ T30] ? netdev_rx_mode_work+0x18/0x3c0 [ 2042.684330][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2042.689465][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2042.694866][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 2042.700669][ T30] ? rcu_is_watching+0x15/0xb0 [ 2042.705452][ T30] ? lock_acquire+0x5f/0x350 [ 2042.710246][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 2042.716001][ T30] netdev_rx_mode_work+0x18/0x3c0 [ 2042.721089][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 2042.726899][ T30] process_scheduled_works+0xa8e/0x14e0 [ 2042.732479][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 2042.738568][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 2042.743624][ T30] ? assign_work+0x3cf/0x5d0 [ 2042.748294][ T30] worker_thread+0xa47/0xfb0 [ 2042.752924][ T30] kthread+0x388/0x470 [ 2042.757054][ T30] ? __pfx_worker_thread+0x10/0x10 [ 2042.762171][ T30] ? __pfx_kthread+0x10/0x10 [ 2042.766848][ T30] ret_from_fork+0x514/0xb70 [ 2042.771467][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2042.776589][ T30] ? __switch_to+0xc89/0x1420 [ 2042.781361][ T30] ? __pfx_kthread+0x10/0x10 [ 2042.803746][ T30] ret_from_fork_asm+0x1a/0x30 [ 2042.825579][ T30] [ 2042.828935][ T30] INFO: task kworker/u8:37:11895 blocked for more than 143 seconds. [ 2042.837179][ T30] Tainted: G L syzkaller #0 [ 2042.843686][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2042.852437][ T30] task:kworker/u8:37 state:D stack:21624 pid:11895 tgid:11895 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2042.864490][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 2042.870620][ T30] Call Trace: [ 2042.873912][ T30] [ 2042.876888][ T30] __schedule+0x17d9/0x56c0 [ 2042.881399][ T30] ? unwind_next_frame+0x8f/0x2550 [ 2042.886517][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 2042.891562][ T30] ? arch_stack_walk+0x11b/0x150 [ 2042.896522][ T30] ? __pfx___schedule+0x10/0x10 [ 2042.901399][ T30] ? rcu_is_watching+0x15/0xb0 [ 2042.906160][ T30] ? rcu_is_watching+0x15/0xb0 [ 2042.910980][ T30] ? lock_release+0x4b/0x3c0 [ 2042.915583][ T30] ? wq_worker_sleeping+0x66/0x250 [ 2042.920713][ T30] schedule+0x164/0x360 [ 2042.924867][ T30] schedule_preempt_disabled+0x13/0x30 [ 2042.930420][ T30] __mutex_lock+0x7bf/0x1550 [ 2042.935030][ T30] ? __mutex_lock+0x5d4/0x1550 [ 2042.939944][ T30] ? addrconf_dad_work+0x116/0x15c0 [ 2042.945145][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2042.950231][ T30] ? kvm_sched_clock_read+0x11/0x20 [ 2042.955443][ T30] ? sched_clock+0x3f/0x60 [ 2042.959881][ T30] addrconf_dad_work+0x116/0x15c0 [ 2042.964987][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2042.970448][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 2042.975920][ T30] ? rcu_is_watching+0x15/0xb0 [ 2042.980702][ T30] ? lock_acquire+0x5f/0x350 [ 2042.985289][ T30] ? rcu_is_watching+0x15/0xb0 [ 2042.990133][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 2042.995876][ T30] process_scheduled_works+0xa8e/0x14e0 [ 2043.001484][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 2043.007566][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 2043.012622][ T30] ? assign_work+0x3cf/0x5d0 [ 2043.017235][ T30] worker_thread+0xa47/0xfb0 [ 2043.022165][ T30] kthread+0x388/0x470 [ 2043.026232][ T30] ? __pfx_worker_thread+0x10/0x10 [ 2043.031975][ T30] ? __pfx_kthread+0x10/0x10 [ 2043.036585][ T30] ret_from_fork+0x514/0xb70 [ 2043.041213][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2043.046336][ T30] ? __switch_to+0xc89/0x1420 [ 2043.051695][ T30] ? __pfx_kthread+0x10/0x10 [ 2043.056288][ T30] ret_from_fork_asm+0x1a/0x30 [ 2043.061083][ T30] [ 2043.064127][ T30] INFO: task kworker/u8:41:16208 blocked for more than 143 seconds. [ 2043.072472][ T30] Tainted: G L syzkaller #0 [ 2043.079194][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2043.087969][ T30] task:kworker/u8:41 state:D stack:24952 pid:16208 tgid:16208 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2043.100614][ T30] Workqueue: events_unbound linkwatch_event [ 2043.106531][ T30] Call Trace: [ 2043.109870][ T30] [ 2043.112810][ T30] __schedule+0x17d9/0x56c0 [ 2043.117352][ T30] ? __pfx___schedule+0x10/0x10 [ 2043.122258][ T30] ? rcu_is_watching+0x15/0xb0 [ 2043.127142][ T30] ? rcu_is_watching+0x15/0xb0 [ 2043.131927][ T30] ? lock_release+0x4b/0x3c0 [ 2043.136518][ T30] ? wq_worker_sleeping+0x66/0x250 [ 2043.141709][ T30] schedule+0x164/0x360 [ 2043.145863][ T30] schedule_preempt_disabled+0x13/0x30 [ 2043.151377][ T30] __mutex_lock+0x7bf/0x1550 [ 2043.155982][ T30] ? __mutex_lock+0x5d4/0x1550 [ 2043.160977][ T30] ? linkwatch_event+0xe/0x60 [ 2043.165663][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2043.170785][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 2043.176520][ T30] ? rcu_is_watching+0x15/0xb0 [ 2043.181308][ T30] ? rcu_is_watching+0x15/0xb0 [ 2043.186071][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 2043.191923][ T30] linkwatch_event+0xe/0x60 [ 2043.196439][ T30] process_scheduled_works+0xa8e/0x14e0 [ 2043.202078][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 2043.208186][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 2043.209640][T31419] Bluetooth: hci18: command tx timeout [ 2043.213231][ T30] ? assign_work+0x3cf/0x5d0 [ 2043.223342][ T30] worker_thread+0xa47/0xfb0 [ 2043.228005][ T30] kthread+0x388/0x470 [ 2043.232085][ T30] ? __pfx_worker_thread+0x10/0x10 [ 2043.237208][ T30] ? __pfx_kthread+0x10/0x10 [ 2043.241791][ T30] ret_from_fork+0x514/0xb70 [ 2043.246363][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2043.251583][ T30] ? __switch_to+0xc89/0x1420 [ 2043.256290][ T30] ? __pfx_kthread+0x10/0x10 [ 2043.260917][ T30] ret_from_fork_asm+0x1a/0x30 [ 2043.265693][ T30] [ 2043.268933][ T30] INFO: task syz.2.10136:20771 blocked for more than 144 seconds. [ 2043.278688][ T30] Tainted: G L syzkaller #0 [ 2043.286463][ T30] Blocked by coredump. [ 2043.291169][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2043.299866][ T30] task:syz.2.10136 state:D stack:26232 pid:20771 tgid:20770 ppid:31879 task_flags:0x40054c flags:0x00080003 [ 2043.311840][ T30] Call Trace: [ 2043.315131][ T30] [ 2043.318104][ T30] __schedule+0x17d9/0x56c0 [ 2043.322617][ T30] ? rcu_is_watching+0x15/0xb0 [ 2043.327479][ T30] ? __pfx___schedule+0x10/0x10 [ 2043.332345][ T30] ? rcu_is_watching+0x15/0xb0 [ 2043.337157][ T30] ? rcu_is_watching+0x15/0xb0 [ 2043.341922][ T30] ? lock_release+0x4b/0x3c0 [ 2043.346494][ T30] ? rcu_is_watching+0x15/0xb0 [ 2043.351349][ T30] schedule+0x164/0x360 [ 2043.355521][ T30] schedule_preempt_disabled+0x13/0x30 [ 2043.360991][ T30] __mutex_lock+0x7bf/0x1550 [ 2043.365582][ T30] ? __mutex_lock+0x5d4/0x1550 [ 2043.370403][T31419] Bluetooth: hci17: command tx timeout [ 2043.375914][ T30] ? tun_chr_close+0x3e/0x1c0 [ 2043.380878][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2043.385927][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 2043.391089][ T30] tun_chr_close+0x3e/0x1c0 [ 2043.395609][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 2043.400756][ T30] __fput+0x418/0xa50 [ 2043.404737][ T30] task_work_run+0x1d9/0x270 [ 2043.409409][ T30] ? __pfx_task_work_run+0x10/0x10 [ 2043.414533][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 2043.419670][ T30] do_exit+0x73a/0x2360 [ 2043.423823][ T30] ? cgroup1_freezing+0x20/0x350 [ 2043.428832][ T30] ? rcu_is_watching+0x15/0xb0 [ 2043.433608][ T30] ? __pfx_do_exit+0x10/0x10 [ 2043.438215][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 2043.443238][ T30] ? rcu_is_watching+0x15/0xb0 [ 2043.450869][ T30] do_group_exit+0x22d/0x2f0 [ 2043.455456][ T30] ? trace_irq_enable+0x3b/0x140 [ 2043.460877][ T30] get_signal+0x121b/0x12c0 [ 2043.465392][ T30] arch_do_signal_or_restart+0xbb/0x860 [ 2043.471013][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2043.477220][ T30] ? __fget_files+0x2a/0x420 [ 2043.481805][ T30] ? rcu_is_watching+0x15/0xb0 [ 2043.486549][ T30] exit_to_user_mode_loop+0x104/0x730 [ 2043.492119][ T30] ? rcu_is_watching+0x15/0xb0 [ 2043.496933][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2043.503004][ T30] do_syscall_64+0x353/0x580 [ 2043.507699][ T30] ? trace_irq_disable+0x3b/0x140 [ 2043.512756][ T30] ? clear_bhb_loop+0x40/0x90 [ 2043.517466][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2043.523355][ T30] RIP: 0033:0x7feabfb9caeb [ 2043.528057][ T30] RSP: 002b:00007feac0aacf50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2043.536480][ T30] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007feabfb9caeb [ 2043.544464][ T30] RDX: 00007feac0aadfe0 RSI: 0000000080085502 RDI: 0000000000000003 [ 2043.552471][ T30] RBP: 00007feabfc32e6f R08: 0000000000000000 R09: 0000000000000000 [ 2043.560551][ T30] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 2043.568648][ T30] R13: 0000000000000000 R14: 00007feabfe15fa0 R15: 00007feabff3fa48 [ 2043.576639][ T30] [ 2043.579770][ T30] INFO: task syz.9.10144:20837 blocked for more than 144 seconds. [ 2043.587714][ T30] Tainted: G L syzkaller #0 [ 2043.594225][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2043.603051][ T30] task:syz.9.10144 state:D stack:22960 pid:20837 tgid:20836 ppid:4698 task_flags:0x400140 flags:0x00080002 [ 2043.615097][ T30] Call Trace: [ 2043.618402][ T30] [ 2043.621327][ T30] __schedule+0x17d9/0x56c0 [ 2043.625821][ T30] ? __pfx___schedule+0x10/0x10 [ 2043.630710][ T30] ? rcu_is_watching+0x15/0xb0 [ 2043.635480][ T30] ? rcu_is_watching+0x15/0xb0 [ 2043.640277][ T30] ? lock_release+0x4b/0x3c0 [ 2043.644870][ T30] ? rcu_is_watching+0x15/0xb0 [ 2043.649681][ T30] schedule+0x164/0x360 [ 2043.653840][ T30] schedule_preempt_disabled+0x13/0x30 [ 2043.659340][ T30] __mutex_lock+0x7bf/0x1550 [ 2043.663962][ T30] ? __mutex_lock+0x5d4/0x1550 [ 2043.668746][ T30] ? __ethtool_get_link_ksettings+0x109/0x250 [ 2043.674809][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2043.679851][ T30] ? igmp_group_added+0x238/0x910 [ 2043.684874][ T30] ? igmpv3_del_delrec+0x204/0x710 [ 2043.690006][ T30] __ethtool_get_link_ksettings+0x109/0x250 [ 2043.695902][ T30] bond_netdev_event+0x643/0xf80 [ 2043.700930][ T30] ? __pfx_bond_netdev_event+0x10/0x10 [ 2043.706388][ T30] ? __pfx_inetdev_event+0x10/0x10 [ 2043.711681][ T30] ? ipmr_device_event+0x1f6/0x220 [ 2043.716881][ T30] notifier_call_chain+0x1a5/0x3d0 [ 2043.721991][ T30] __dev_notify_flags+0x1aa/0x310 [ 2043.727104][ T30] ? __pfx___dev_notify_flags+0x10/0x10 [ 2043.732652][ T30] ? __dev_change_flags+0x5f1/0x820 [ 2043.737878][ T30] ? __pfx___dev_change_flags+0x10/0x10 [ 2043.743425][ T30] ? _printk+0xdd/0x130 [ 2043.747642][ T30] ? __kmalloc_cache_noprof+0x150/0x660 [ 2043.753202][ T30] ? vlan_vid_add+0x303/0x750 [ 2043.757999][ T30] netif_change_flags+0xde/0x1b0 [ 2043.762953][ T30] dev_change_flags+0x128/0x260 [ 2043.767934][ T30] vlan_device_event+0x1b4e/0x1f00 [ 2043.773065][ T30] ? packet_notifier+0xf1b/0xf70 [ 2043.778031][ T30] ? br_device_event+0x282/0x9c0 [ 2043.783031][ T30] ? __pfx_phonet_device_notify+0x10/0x10 [ 2043.788774][ T30] ? __pfx_vlan_device_event+0x10/0x10 [ 2043.794233][ T30] ? bcm_notifier+0xa9/0x890 [ 2043.798901][ T30] ? raw_notifier+0x9d/0x7d0 [ 2043.803489][ T30] ? cgw_notifier+0x314/0x380 [ 2043.808193][ T30] notifier_call_chain+0x1a5/0x3d0 [ 2043.813304][ T30] __dev_notify_flags+0x1aa/0x310 [ 2043.818499][ T30] ? __pfx___dev_notify_flags+0x10/0x10 [ 2043.824050][ T30] ? __dev_change_flags+0x64b/0x820 [ 2043.829281][ T30] ? __pfx___dev_change_flags+0x10/0x10 [ 2043.834826][ T30] ? do_setlink+0x3c9f/0x4670 [ 2043.839520][ T30] netif_change_flags+0xde/0x1b0 [ 2043.844460][ T30] do_setlink+0xdd6/0x4670 [ 2043.849104][ T30] ? __wake_up_klogd+0xe6/0x120 [ 2043.853983][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 2043.859053][ T30] ? __pfx_do_setlink+0x10/0x10 [ 2043.863909][ T30] ? _printk+0xdd/0x130 [ 2043.868118][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2043.873929][ T30] ? ___ratelimit+0x584/0x8e0 [ 2043.878733][ T30] ? __mutex_trylock_common+0x15f/0x270 [ 2043.884281][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2043.890200][ T30] ? rcu_is_watching+0x15/0xb0 [ 2043.894960][ T30] ? trace_contention_end+0x3d/0x140 [ 2043.900263][ T30] ? __mutex_lock+0x30d/0x1550 [ 2043.905036][ T30] ? rtnl_newlink+0x8a3/0x1bd0 [ 2043.909818][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2043.914845][ T30] ? ns_capable+0x89/0xe0 [ 2043.919197][ T30] ? rtnl_link_get_net_capable+0xd3/0x310 [ 2043.924922][ T30] rtnl_newlink+0x148e/0x1bd0 [ 2043.929773][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 2043.934797][ T30] ? unwind_next_frame+0x8f/0x2550 [ 2043.939927][ T30] ? rcu_is_watching+0x15/0xb0 [ 2043.944688][ T30] ? unwind_next_frame+0x8f/0x2550 [ 2043.949829][ T30] ? rcu_is_watching+0x15/0xb0 [ 2043.954608][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 2043.959832][ T30] ? rcu_is_watching+0x15/0xb0 [ 2043.964600][ T30] ? unwind_next_frame+0x8f/0x2550 [ 2043.969737][ T30] ? rcu_is_watching+0x15/0xb0 [ 2043.974502][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 2043.979732][ T30] ? rcu_is_watching+0x15/0xb0 [ 2043.984498][ T30] ? rcu_is_watching+0x15/0xb0 [ 2043.989318][ T30] ? lock_release+0x4b/0x3c0 [ 2043.993912][ T30] ? lock_release+0x4b/0x3c0 [ 2043.998552][ T30] ? is_bpf_text_address+0x292/0x2b0 [ 2044.003847][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 2044.009107][ T30] ? kernel_text_address+0xa5/0xe0 [ 2044.014220][ T30] ? __kernel_text_address+0xd/0x30 [ 2044.019452][ T30] ? unwind_get_return_address+0x4d/0x90 [ 2044.025095][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2044.031270][ T30] ? arch_stack_walk+0xfb/0x150 [ 2044.036131][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 2044.041422][ T30] ? rcu_is_watching+0x15/0xb0 [ 2044.046187][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 2044.051257][ T30] ? rcu_is_watching+0x15/0xb0 [ 2044.056025][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 2044.061058][ T30] ? lock_release+0x4b/0x3c0 [ 2044.065653][ T30] ? bpf_lsm_capable+0x9/0x20 [ 2044.070355][ T30] ? security_capable+0x7e/0x2c0 [ 2044.075289][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 2044.080384][ T30] rtnetlink_rcv_msg+0x802/0xc00 [ 2044.085340][ T30] ? netlink_sendmsg+0x5d4/0xb40 [ 2044.090513][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 2044.095639][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2044.101127][ T30] ? __netlink_lookup+0xc6/0x8b0 [ 2044.106061][ T30] ? rcu_is_watching+0x15/0xb0 [ 2044.110881][ T30] netlink_rcv_skb+0x226/0x4a0 [ 2044.115662][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2044.121207][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2044.126513][ T30] ? net_generic+0x1e/0x240 [ 2044.131076][ T30] ? net_generic+0x1e/0x240 [ 2044.135580][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 2044.140820][ T30] netlink_unicast+0x7bb/0x940 [ 2044.145596][ T30] netlink_sendmsg+0x813/0xb40 [ 2044.150528][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2044.155872][ T30] ? futex_unqueue+0x22/0x240 [ 2044.160571][ T30] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 2044.167029][ T30] ? lock_release+0x4b/0x3c0 [ 2044.171619][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2044.176927][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 2044.181954][ T30] ____sys_sendmsg+0x54e/0x850 [ 2044.186764][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2044.192054][ T30] ? lock_release+0x4b/0x3c0 [ 2044.196623][ T30] ? import_iovec+0x73/0xa0 [ 2044.201154][ T30] ___sys_sendmsg+0x2a5/0x360 [ 2044.205842][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 2044.211083][ T30] ? futex_wait+0x2a2/0x390 [ 2044.215596][ T30] ? __fget_files+0x2a/0x420 [ 2044.220205][ T30] ? __fget_files+0x3a2/0x420 [ 2044.224879][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 2044.229855][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2044.235329][ T30] ? rcu_is_watching+0x15/0xb0 [ 2044.240149][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2044.246222][ T30] do_syscall_64+0x174/0x580 [ 2044.250969][ T30] ? trace_irq_disable+0x3b/0x140 [ 2044.256053][ T30] ? clear_bhb_loop+0x40/0x90 [ 2044.260901][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2044.266832][ T30] RIP: 0033:0x7fd5bb59ce59 [ 2044.271244][ T30] RSP: 002b:00007fd5bc4c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2044.279676][ T30] RAX: ffffffffffffffda RBX: 00007fd5bb815fa0 RCX: 00007fd5bb59ce59 [ 2044.287690][ T30] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000046 [ 2044.295653][ T30] RBP: 00007fd5bb632e6f R08: 0000000000000000 R09: 0000000000000000 [ 2044.303650][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2044.311641][ T30] R13: 00007fd5bb816038 R14: 00007fd5bb815fa0 R15: 00007fd5bb93fa48 [ 2044.319644][ T30] [ 2044.322670][ T30] INFO: task syz.4.10147:20884 blocked for more than 145 seconds. [ 2044.330614][ T30] Tainted: G L syzkaller #0 [ 2044.337133][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2044.345790][ T30] task:syz.4.10147 state:D stack:28760 pid:20884 tgid:20883 ppid:14293 task_flags:0x400140 flags:0x00080006 [ 2044.357758][ T30] Call Trace: [ 2044.361040][ T30] [ 2044.363971][ T30] __schedule+0x17d9/0x56c0 [ 2044.368661][ T30] ? __pfx___schedule+0x10/0x10 [ 2044.373518][ T30] ? rcu_is_watching+0x15/0xb0 [ 2044.378317][ T30] ? rcu_is_watching+0x15/0xb0 [ 2044.383078][ T30] ? lock_release+0x4b/0x3c0 [ 2044.387674][ T30] ? rcu_is_watching+0x15/0xb0 [ 2044.392441][ T30] schedule+0x164/0x360 [ 2044.396589][ T30] schedule_preempt_disabled+0x13/0x30 [ 2044.402095][ T30] __mutex_lock+0x7bf/0x1550 [ 2044.406716][ T30] ? __mutex_lock+0x5d4/0x1550 [ 2044.411495][ T30] ? __tun_chr_ioctl+0x3bc/0x1e10 [ 2044.416503][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2044.421577][ T30] ? lock_release+0x4b/0x3c0 [ 2044.426166][ T30] ? __might_fault+0xaf/0x130 [ 2044.430871][ T30] ? __might_fault+0xcb/0x130 [ 2044.435550][ T30] __tun_chr_ioctl+0x3bc/0x1e10 [ 2044.440434][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2044.445720][ T30] ? __fget_files+0x2a/0x420 [ 2044.450354][ T30] ? __fget_files+0x3a2/0x420 [ 2044.455025][ T30] ? __fget_files+0x2a/0x420 [ 2044.459642][ T30] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2044.464586][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2044.469725][ T30] __se_sys_ioctl+0xfc/0x170 [ 2044.474319][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2044.480588][ T30] do_syscall_64+0x174/0x580 [ 2044.485215][ T30] ? trace_irq_disable+0x3b/0x140 [ 2044.490717][ T30] ? clear_bhb_loop+0x40/0x90 [ 2044.495429][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2044.501505][ T30] RIP: 0033:0x7f159bd9ce59 [ 2044.505936][ T30] RSP: 002b:00007f159ccc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2044.514376][ T30] RAX: ffffffffffffffda RBX: 00007f159c015fa0 RCX: 00007f159bd9ce59 [ 2044.522384][ T30] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 2044.530369][ T30] RBP: 00007f159be32e6f R08: 0000000000000000 R09: 0000000000000000 [ 2044.538374][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2044.546324][ T30] R13: 00007f159c016038 R14: 00007f159c015fa0 R15: 00007f159c13fa48 [ 2044.554336][ T30] [ 2044.557393][ T30] INFO: task syz.4.10147:20885 blocked for more than 145 seconds. [ 2044.565190][ T30] Tainted: G L syzkaller #0 [ 2044.571811][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2044.580561][ T30] task:syz.4.10147 state:D stack:28760 pid:20885 tgid:20883 ppid:14293 task_flags:0x400040 flags:0x00080006 [ 2044.592650][ T30] Call Trace: [ 2044.595933][ T30] [ 2044.598891][ T30] __schedule+0x17d9/0x56c0 [ 2044.603410][ T30] ? rcu_is_watching+0x15/0xb0 [ 2044.608218][ T30] ? __pfx___schedule+0x10/0x10 [ 2044.613069][ T30] ? rcu_is_watching+0x15/0xb0 [ 2044.617868][ T30] ? rcu_is_watching+0x15/0xb0 [ 2044.622633][ T30] ? lock_release+0x4b/0x3c0 [ 2044.627228][ T30] ? rcu_is_watching+0x15/0xb0 [ 2044.631996][ T30] schedule+0x164/0x360 [ 2044.636133][ T30] schedule_preempt_disabled+0x13/0x30 [ 2044.641618][ T30] __mutex_lock+0x7bf/0x1550 [ 2044.646205][ T30] ? __mutex_lock+0x5d4/0x1550 [ 2044.647663][T31419] Bluetooth: hci8: command 0x0406 tx timeout [ 2044.651437][ T30] ? tun_chr_close+0x3e/0x1c0 [ 2044.661727][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2044.666816][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 2044.671928][ T30] tun_chr_close+0x3e/0x1c0 [ 2044.676410][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 2044.681533][ T30] __fput+0x418/0xa50 [ 2044.685518][ T30] fput_close_sync+0x11f/0x240 [ 2044.690313][ T30] ? __pfx_fput_close_sync+0x10/0x10 [ 2044.695598][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2044.701840][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2044.707944][ T30] __x64_sys_close+0x7e/0x110 [ 2044.712618][ T30] do_syscall_64+0x174/0x580 [ 2044.717252][ T30] ? trace_irq_disable+0x3b/0x140 [ 2044.722285][ T30] ? clear_bhb_loop+0x40/0x90 [ 2044.726994][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2044.732890][ T30] RIP: 0033:0x7f159bd9ce59 [ 2044.737608][ T30] RSP: 002b:00007f159cca5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2044.746028][ T30] RAX: ffffffffffffffda RBX: 00007f159c016090 RCX: 00007f159bd9ce59 [ 2044.754024][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2044.762025][ T30] RBP: 00007f159be32e6f R08: 0000000000000000 R09: 0000000000000000 [ 2044.770022][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2044.778019][ T30] R13: 00007f159c016128 R14: 00007f159c016090 R15: 00007f159c13fa48 [ 2044.785995][ T30] [ 2044.789249][ T30] INFO: lockdep is turned off. [ 2044.794044][ T30] NMI backtrace for cpu 1 [ 2044.794061][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2044.794082][ T30] Tainted: [L]=SOFTLOCKUP [ 2044.794088][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2044.794097][ T30] Call Trace: [ 2044.794104][ T30] [ 2044.794110][ T30] dump_stack_lvl+0xe8/0x150 [ 2044.794135][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 2044.794154][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2044.794175][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 2044.794193][ T30] sys_info+0x135/0x170 [ 2044.794214][ T30] watchdog+0xfd7/0x1030 [ 2044.794241][ T30] ? watchdog+0x1c7/0x1030 [ 2044.794265][ T30] kthread+0x388/0x470 [ 2044.794281][ T30] ? __pfx_watchdog+0x10/0x10 [ 2044.794302][ T30] ? __pfx_kthread+0x10/0x10 [ 2044.794328][ T30] ret_from_fork+0x514/0xb70 [ 2044.794346][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2044.794361][ T30] ? __switch_to+0xc89/0x1420 [ 2044.794385][ T30] ? __pfx_kthread+0x10/0x10 [ 2044.794403][ T30] ret_from_fork_asm+0x1a/0x30 [ 2044.794428][ T30] [ 2044.794434][ T30] Sending NMI from CPU 1 to CPUs 0: [ 2044.909488][ C0] NMI backtrace for cpu 0 [ 2044.909508][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2044.909529][ C0] Tainted: [L]=SOFTLOCKUP [ 2044.909535][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2044.909545][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2044.909570][ C0] Code: 5c 77 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 e8 16 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 2044.909584][ C0] RSP: 0018:ffffffff8e607de0 EFLAGS: 00000246 [ 2044.909599][ C0] RAX: ffff88812522d000 RBX: ffffffff819a72e0 RCX: 0000000080000001 [ 2044.909611][ C0] RDX: 0000000000000001 RSI: ffffffff8c2a8c60 RDI: ffffffff819a72e0 [ 2044.909622][ C0] RBP: ffffffff8e607eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 2044.909634][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 2044.909645][ C0] R13: 1ffffffff1cd1de8 R14: 1ffffffff1cc0fc4 R15: dffffc0000000000 [ 2044.909657][ C0] FS: 0000000000000000(0000) GS:ffff88812522d000(0000) knlGS:0000000000000000 [ 2044.909670][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2044.909681][ C0] CR2: 000055d05b4454c0 CR3: 000000000e746000 CR4: 00000000003526f0 [ 2044.909695][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000000c [ 2044.909705][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2044.909715][ C0] Call Trace: [ 2044.909722][ C0] [ 2044.909728][ C0] default_idle+0x9/0x20 [ 2044.909748][ C0] default_idle_call+0x72/0xb0 [ 2044.909768][ C0] do_idle+0x2e0/0x540 [ 2044.909783][ C0] ? __pfx_do_idle+0x10/0x10 [ 2044.909807][ C0] cpu_startup_entry+0x43/0x60 [ 2044.909821][ C0] rest_init+0x2de/0x300 [ 2044.909841][ C0] start_kernel+0x392/0x3e0 [ 2044.909881][ C0] x86_64_start_reservations+0x24/0x30 [ 2044.909956][ C0] x86_64_start_kernel+0x137/0x1b0 [ 2044.909977][ C0] common_startup_64+0x13e/0x157 [ 2044.910004][ C0] [ 2045.106024][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2045.112857][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2045.123512][ T30] Tainted: [L]=SOFTLOCKUP [ 2045.127820][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2045.137861][ T30] Call Trace: [ 2045.141128][ T30] [ 2045.144046][ T30] vpanic+0x56c/0xa60 [ 2045.148020][ T30] ? __pfx___schedule+0x10/0x10 [ 2045.152865][ T30] ? __pfx_vpanic+0x10/0x10 [ 2045.157372][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 2045.163517][ T30] panic+0xc5/0xd0 [ 2045.167226][ T30] ? __pfx_panic+0x10/0x10 [ 2045.171627][ T30] ? preempt_schedule_common+0x82/0xd0 [ 2045.177073][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 2045.182434][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 2045.188574][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 2045.194721][ T30] watchdog+0x1030/0x1030 [ 2045.199048][ T30] ? watchdog+0x1c7/0x1030 [ 2045.203456][ T30] kthread+0x388/0x470 [ 2045.207509][ T30] ? __pfx_watchdog+0x10/0x10 [ 2045.212174][ T30] ? __pfx_kthread+0x10/0x10 [ 2045.216753][ T30] ret_from_fork+0x514/0xb70 [ 2045.221339][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2045.226438][ T30] ? __switch_to+0xc89/0x1420 [ 2045.231113][ T30] ? __pfx_kthread+0x10/0x10 [ 2045.235700][ T30] ret_from_fork_asm+0x1a/0x30 [ 2045.240457][ T30] [ 2045.243739][ T30] Kernel Offset: disabled [ 2045.248042][ T30] Rebooting in 86400 seconds..