last executing test programs: 39m50.289218807s ago: executing program 32 (id=1467): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) stat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f00000004c0)="66b9800000c00f326635004000000f3007f30fc77153baa000b89600eff30f5e150fac4100090fc7acf9ffbaf80c66b8e0e1088f66efbafc0c66edf08302bb66b9800000c00f326635000100000f30", 0x4f}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) madvise(&(0x7f000000b000/0x2000)=nil, 0x2000, 0xf) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x40015b19, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000540)={[{0xfba, 0x0, 0x8, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x19, 0x0, 0x10000000a}, {0xeda7, 0x4, 0x1, 0x9, 0x0, 0x0, 0x8, 0x8, 0x9, 0x0, 0x0, 0xfc}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f00000002c0)={0x120001, 0x0, {[0xffffffffffffffff, 0x8000000000000000, 0x3ff, 0x0, 0x2, 0x62, 0x9, 0x4016]}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000001, 0x0, 0xfffffffffffffff8, 0x0, 0x100000000, 0x2004cb, 0xffffffffffffffe9, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0x81, 0x2000000000003ff, 0x2, 0x0, 0x9], 0x54000, 0x200306}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x120f2f719a9d6f11) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x138}}, 0x4) r8 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a020201"], 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000030000080008400000000a0400164008001540000000030400170058000d"], 0xd4}}, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000440)=0xac33) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000015f528f36a"], 0x14}}, 0x0) 37m3.971560949s ago: executing program 4 (id=2091): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="050000007d0000004300000001"], 0x50) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r1, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5c010000100001000600000000000004fe880000000000000000000000000001fc0100000000ea000000000000000001000107104e230405000000003a000000b51ba8de01a04cf010625795a00a61275d908aa0bee7e06cb39f93959670d9984f7aa9e050e0365918bba22ed0c9b25fd9d1ab0a65ae41d905d342b6819fec23d3d02a50fcc19271aa9f6c7f81d720ce45c7d0561fc6fbbc4f7998fbdc807f5dc2f656f34f484f5403c1435ae9bfe233fc21b4337f622316d9c9647c548c112be4fa3dd3a07f6cc87aee9b990be391183565f8fe8021fe2a2e86602787de0dc1bbd2900bf711ca7b829d0a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a3200000000"], 0xec}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d80)=ANY=[@ANYBLOB="400100001a000308feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107170e2300050a0000203a0000002e6fc0fb4891332669090dba630217f33515cf7a0a752383d3660816088e66af54273ee46c7d0731c01523b79697b415c210e765e33fe11cfba91f7b2e5e190430ab888017dd880299ed131abaa052945d698fddbde62f0885284b59a9b8a56a9b4287a640a9987bc5b5d92d16315b6ad490c5c2ef2eddb3e1d1bdac9f26ea0e132059f9766d6c7774f3531555a5da225040f30f9e21de21938248e31fb09bf11570a1b5001103f5019867e07b7a0e53f17499a54c7e3fe6f2dd741b3c37dc46ce9b9b19501b79942acaa8e2bde392dcf5d3922bb879ec645a99aef049e2035068b853d64290766ba5591fbead3960cf4af169d545456e27b95443363e18bb817fecb9a873204ebc57aa3c706f9535e17c1d58e547f0883644712e301c212ce076e4d3e2e8042755b07e36cb8de87c645c48318bcab73dfb909f3e413470a11619b186f98c9cc3d8f75f703b7a52771cff030ee6e0e5aa3191d9e248d36eb6170d901dcd94aa7e30fda662c53ab830a653459f648d13cab8e5828a3a105f322ccdc6358b2dcd2354e332d9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe000000000000009201000000000010a39b00000000080001000100000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d0005000000"], 0x140}}, 0x844) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x15, 0x2}, 0x7) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131be7839ff"}) 37m1.860990587s ago: executing program 4 (id=2101): r0 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r0, r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r1, 0x0, 0x0, 0xc17) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf}, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x0, 0x0, 0xee01}, {0x4000000, 0x7f, 0x10000000007, 0x3, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x300, 0x0, @mcast2={0xff, 0x3}}, 0x1c) r6 = openat$cgroup_pressure(r3, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x20040000) write$cgroup_pressure(r6, &(0x7f0000000080)={'some', 0x20, 0x2000000002, 0x20, 0x10000000fffff}, 0x2f) r7 = socket$nl_route(0x10, 0x3, 0x0) fchdir(0xffffffffffffffff) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4110) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000280)}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r2, @ANYBLOB="ee0d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001000000050000000000000000000000000000000000000037835ef3490713292feb759d734f"], 0x50) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r0) 37m1.405255125s ago: executing program 4 (id=2105): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f407000904018002200000000000000000000800010000000000", 0x24) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4c080}, 0x4008811) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x1, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) writev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0xa, @sliced={0x7f, [0x2, 0x4, 0x2, 0xfffc, 0x7ff, 0x3, 0x65, 0x1401, 0x7, 0x4, 0xd9, 0x6, 0x7ff, 0xfff, 0x40, 0x42, 0x0, 0xf52a, 0x81, 0x6, 0x0, 0x80, 0x783a, 0x7, 0x7, 0xe, 0x3ff, 0x6, 0x3, 0x7, 0x1ff, 0xa, 0x6, 0xf578, 0x6, 0x55, 0x3, 0x4, 0x6, 0xfa, 0x8003, 0x5, 0x5, 0x69d, 0xc, 0x1, 0x51, 0x27], 0x7beee4a9}}) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa6f81, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r5) dup3(r4, r5, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) r6 = add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r6, r6}, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) r7 = dup2(r3, r3) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r7, &(0x7f00000063c0)={0x2020}, 0x2020) r8 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000400)='{\x00', &(0x7f0000000440)='\x00', 0x0) 36m59.033636501s ago: executing program 4 (id=2108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1e, 0x1, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x4000000}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r0, r1, 0x0) recvmmsg(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)=""/186, 0xba}, {&(0x7f0000000500)=""/4, 0x4}], 0x2}, 0x5}], 0x1, 0x40000001, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='\x00', &(0x7f0000002100), 0x110004, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2]) bind$alg(r1, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x218, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x88900) move_mount(r6, &(0x7f00000005c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r7 = open_tree(r6, &(0x7f00000000c0)='./file0\x00', 0x1000) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x61) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000040c0002800500010000000000080007400000000104001080e7911217be504a03b36b8a00713df138722315dae15e8f6a580c73731507a7a52dfb25c792d0546c041a296090194010f586860dee8f82e60e439692ac"], 0x44}}, 0x4000) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)={[&(0x7f00000001c0)='fuse\x00', &(0x7f0000000200)='fuse\x00']}, &(0x7f0000000400)={[&(0x7f0000000280)='fuse\x00', &(0x7f00000002c0)='/dev/fuse\x00', &(0x7f0000000340)='\x0f\x00\x00\x00', &(0x7f0000000840)='\x00\x00\x00\xc5?\xccv\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000003c0)='\x00\x00\b\'\x00\x00']}) r9 = gettid() timer_create(0x3, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000001080)) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$ARCH_SHSTK_LOCK(0x1e, r10, 0x2, 0x5003) syz_clone3(&(0x7f0000000b00)={0x2800c000, &(0x7f0000000600), &(0x7f00000007c0), &(0x7f0000000800), {0x11}, &(0x7f0000000840), 0x0, &(0x7f0000000940)=""/191, &(0x7f0000000ac0)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, r9, r10], 0x8, {r6}}, 0x58) sendmmsg$alg(r7, &(0x7f0000000680), 0x0, 0x1) 36m57.184505253s ago: executing program 4 (id=2111): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="050000007d0000004300000001"], 0x50) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r1, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5c010000100001000600000000000004fe880000000000000000000000000001fc0100000000ea000000000000000001000107104e230405000000003a000000b51ba8de01a04cf010625795a00a61275d908aa0bee7e06cb39f93959670d9984f7aa9e050e0365918bba22ed0c9b25fd9d1ab0a65ae41d905d342b6819fec23d3d02a50fcc19271aa9f6c7f81d720ce45c7d0561fc6fbbc4f7998fbdc807f5dc2f656f34f484f5403c1435ae9bfe233fc21b4337f622316d9c9647c548c112be4fa3dd3a07f6cc87aee9b990be391183565f8fe8021fe2a2e86602787de0dc1bbd2900bf711ca7b829d0a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000800000000000092010000000000000600000000000000ffff0000000000001c25080000000000d84bb96900000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240009000f00000000000000cbed01000000000009000000000000000900000000000000"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a3200000000"], 0xec}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe000000000000009201000000000010a39b00000000080001000100000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d0005000000"], 0x140}}, 0x844) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x15, 0x2}, 0x7) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131be7839ff"}) 36m56.727989755s ago: executing program 4 (id=2113): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r4, 0x0, 0x100010, r2, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00ca1205e83e51e95f07245ac45077036701b1c11af500eed0380e2e135401730b00000000", @ANYRES32=r5, @ANYBLOB="000000000000000018003480140035006970365f767469300000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d30000000000200140014006e657464657673696d3000000000000034001680300001802c000c80140001"], 0x7c}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x48000}, 0x20000800) 36m55.987384886s ago: executing program 33 (id=2113): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r4, 0x0, 0x100010, r2, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00ca1205e83e51e95f07245ac45077036701b1c11af500eed0380e2e135401730b00000000", @ANYRES32=r5, @ANYBLOB="000000000000000018003480140035006970365f767469300000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d30000000000200140014006e657464657673696d3000000000000034001680300001802c000c80140001"], 0x7c}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x48000}, 0x20000800) 25m55.250765551s ago: executing program 1 (id=4977): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110200000000000000000700000030000180060005004e21000014000400000000000000000000000000000000010800070001000000060006000a"], 0x44}}, 0x0) 25m54.876668389s ago: executing program 1 (id=4979): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000340)={0x0, 0x0, 0x1500, 0x0, 0x1e4}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000, 0x1, {0x0, 0x0, 0x1}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) bind$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x6000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2718, 0x0, &(0x7f00000001c0)) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002222000000962313927b7c070c0000002a92009b01f62166831403000093cdd2f3610b5d8c3dda29"], 0x0}, 0x0) 25m51.593593313s ago: executing program 1 (id=4989): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) listen(0xffffffffffffffff, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14007c001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000080003"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r2, 0x0, 0x4000010) pipe(&(0x7f00000002c0)) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_ublk_setup_io_uring(0x39e7, &(0x7f0000000240)={0x0, 0x4434, 0x80, 0x1024002, 0x4d}, &(0x7f0000000000)=0x0, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, 0x0, r7, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) syz_ublk_add_dev(r5, r6, r3, r4, &(0x7f0000000480)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x2, 0xfa4, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x11}}}, 0x0) syz_ublk_add_dev(r5, r6, 0x0, r7, &(0x7f00000003c0)={0x2e, 0x4, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x682c, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) 25m49.961116143s ago: executing program 1 (id=4996): r0 = socket$inet(0x2, 0x5, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000300)='./file0\x00', 0x41) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000080)) ioctl$KVM_RUN(r5, 0xae80, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x220) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) 25m49.54578141s ago: executing program 1 (id=4999): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sendmmsg$inet(r1, &(0x7f00000051c0)=[{{&(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000050c0)=[{&(0x7f0000000340)="67d628c20f6a631cc7", 0xffe3}], 0xc, 0x0, 0x64}}], 0x1, 0x4000004) 25m49.217922493s ago: executing program 1 (id=5001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000001c0)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r2, 0x0, 0x0, 0xc17) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf}, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x0, 0x0, 0xee01}, {0x4000000, 0x7f, 0x10000000007, 0x3, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x300, 0x0, @mcast2={0xff, 0x3}}, 0x1c) r7 = openat$cgroup_pressure(r4, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x20040000) write$cgroup_pressure(r7, &(0x7f0000000080)={'some', 0x20, 0x2000000002, 0x20, 0x10000000fffff}, 0x2f) r8 = socket$nl_route(0x10, 0x3, 0x0) fchdir(0xffffffffffffffff) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4110) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000280)}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=r3, @ANYBLOB="ee0d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001000000050000000000000000000000000000000000000037835ef3490713292feb759d734f"], 0x50) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r0) 25m48.85956733s ago: executing program 34 (id=5001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000001c0)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r2, 0x0, 0x0, 0xc17) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf}, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x0, 0x0, 0xee01}, {0x4000000, 0x7f, 0x10000000007, 0x3, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x300, 0x0, @mcast2={0xff, 0x3}}, 0x1c) r7 = openat$cgroup_pressure(r4, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x20040000) write$cgroup_pressure(r7, &(0x7f0000000080)={'some', 0x20, 0x2000000002, 0x20, 0x10000000fffff}, 0x2f) r8 = socket$nl_route(0x10, 0x3, 0x0) fchdir(0xffffffffffffffff) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4110) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000280)}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=r3, @ANYBLOB="ee0d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001000000050000000000000000000000000000000000000037835ef3490713292feb759d734f"], 0x50) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r0) 25m20.421603969s ago: executing program 5 (id=5110): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0x67e) ptrace$pokeuser(0x6, r0, 0x358, 0xff) socket(0x400000000010, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_PEC(r2, 0x708, 0x6) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000100)={0x0, 0x6, 0x2, &(0x7f0000000040)={0xc, "810556c721393f4084c89e00"}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) fallocate(r3, 0x3, 0x10003, 0x2d22) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000010000008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ptrace$peek(0x1, r4, &(0x7f0000000240)) r6 = socket$key(0xf, 0x3, 0x2) connect$unix(r6, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001a00)=ANY=[], 0x3c}}, 0x400c810) preadv(r7, &(0x7f0000000500)=[{&(0x7f0000000040)=""/70, 0x46}], 0x1, 0xbb21, 0x3) socket$nl_generic(0x10, 0x3, 0x10) fdatasync(r6) 25m19.496405874s ago: executing program 5 (id=5112): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) close(r0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x3, 0x12) readv(r3, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/204, 0xcc}], 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r11, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000003f40)=""/4080, 0xff0}], 0x1}, 0xfff}], 0x1, 0x10022, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r4, 0x0) accept(r4, 0x0, 0x0) r12 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r12, 0x110, 0x4, &(0x7f0000000000), 0x4) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 25m15.493260737s ago: executing program 5 (id=5120): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) (async) io_setup(0x4fe, &(0x7f00000009c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40, r2, &(0x7f0000000200)='8', 0x1, 0x10000000005971, 0x0, 0x0, r2}]) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) recvfrom$inet(r2, &(0x7f0000000000)=""/20, 0x14, 0xc9100143, 0x0, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) (async) accept4$alg(r2, 0x0, 0x0, 0x0) (async) io_setup(0x1, &(0x7f0000000140)) (async) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async) io_destroy(r3) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) (async) io_submit(r3, 0xa, &(0x7f00000023c0)=[&(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x7, 0x1, r4, &(0x7f0000000ac0)="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", 0x1000, 0x8, 0x0, 0x1, r2}, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x3, 0x5, r1, &(0x7f0000001b00)="6565ef81f0cbc125467baed401d42bd6100292deb893c8fd9150176e8ce1da3dd7a2a719ac71e8cdfe30398b16a6ec774ceab7263f3222188d4d9eecbaadcc57c1af30c0e6ece9f132fe3bbaeb8891182ee7f2c239aedab4e8f6de204adc43bed4be366c2dea971b54f19ad0cd15321ac3f571a2b61b393fa833715676dd7806413b74f83409479a0bdaf2284677484f35e81fd831597b4564c43509a4239bcfddb38ac8dfd1b5b8025edb838ffa4934256e521b745442d9533e35c7", 0xbc, 0x3, 0x0, 0x0, r2}, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f0000001c80)="a3c1e1ef12342a2c394b9c25e37114f9ec5229fc3af44e4223e43e7e0ad24d8d305b6ac56850bd7a46557ad7aa918a782f67ede207522f7a03cc986948719d8ff0bb9685e02a6a54a36cae123e2edd21e4c91b8ba9bbf34498c84753043a2d36584e1ed8a467593df44a4eb768974f020a0b18f17494792745b8ab52dec46465279285aaad39a89ea05159a1a22a63dec187780f835040ea67317df1b9e02eb215b9363c72552b8c42d8bf039258f2d990cc592d1fab7e3ad86781ad9ed224e186ab2b3d5e6fc9", 0xc7, 0xfffffdfff9605506, 0x0, 0x2, r2}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x2, 0x1, r4, &(0x7f0000001dc0)="25bb624eb5f7b5a13ae712ed18354c", 0xf, 0x1, 0x0, 0x2}, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x3, 0x1, 0xffffffffffffffff, &(0x7f0000001ec0)="610f9fcfccb8ef1edfd6b46a2273ee", 0xf, 0x0, 0x0, 0x6}, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x3, 0x37, r2, &(0x7f0000001f40)="d957468f00bf591704f8fbdbfe8f3e0b078453b567fa8d08bd36b9bfa3f38cad270a9b7567b9703d3e75363aefb8c0e6827d683b8069a124806c1e3e1ba1bc9498a6587a9cccdf756f956eb9dae1c479b05eb0b388c08c3f1a089db03914216c3630ea52c9786d65ec3923b2db2a89e247f971a7a191074f8d68b83d9d7d68e54840c13dd25d45610b024305d95d02f0d6882cfc9e", 0x95, 0x7, 0x0, 0x1, r2}, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x5, 0x80, r4, &(0x7f0000002040)="9ae88f0d475e31b5eaa4f280c7dd312d043e45abfb163a3211f035b79ee6da7993cca2d05043df6a34391a358537105a185f730505fd946c5ec34befcd8ce8ac648fe497ebe494a6a3ecaa311672008665ec876826e577ea6b84c268c17242307867e89d91fc831d54dd945bedb0bd8c3c5dd51ec59a8c", 0x77, 0x4, 0x0, 0x1}, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, &(0x7f0000002100)="a1b201d49330e268e56600309b9511e44e231b9e95d8c30335cb2c0daad7332e19a08ba0ce531f6e1b6f22c676f2d7f7099ab8b7368e86dd99609548c961bdc9f7f1cdd83c23ae5a6d8ddf4ee8fddecdedbead08b5140f6d506bf1ce6e39fff0a236c034178fea738fccf63687244ad45fda6df7dd6ec9dea7fe4e6b675d65ef2ac7926f9fb1d4f3afe09facbd2aa455d1c7ed97d5790342d0901b487cd206ba24baf29ac9e64b4dac788c0fa3327d1d24d071ae0f0441784e6d28e5da985b", 0xbf, 0x4}, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x8, 0x7f, r2, &(0x7f0000002200)="b9e1b017099243a7c3a1eabdb3183c74dabc7bbd15d72485f8ce181655dd7023d2a97cd9a5d1f24134a0b165b5c8b54caa70378e53d4d6f5928e0bcc10fdcb548b6191d4cfc77bc41b4da975e5589cd03d21f8be0d6ec12baf07c81ff18ea3d77f0a4d25ef6967a21211", 0x6a, 0x7f, 0x0, 0x0, r2}, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x3, 0xfff, 0xffffffffffffffff, &(0x7f00000022c0)="f8f1c429ed542d67db751436f8c5f7a71ac1e66f3be34827e197d4d79764fb299d56867b45929eb3332ba4bb04dfec25a46bb31d5bda32047fec2b72edd15399a9bce8d6a2a45de5363c86d46dd4e767c21651398b413145b7931924fc14ca6c532f8332471207befef2288ee0e71ea5ab398954be1f4b93723c0a7e08a3dc7423b6a8ae3dffb5f6d28c5a8dcf5159bc", 0x90, 0x8, 0x0, 0x0, r2}]) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000) (async) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x50, 0xffffffffffffffff, 0x1d8e000) (async) mremap(&(0x7f0000161000/0x400000)=nil, 0x400000, 0x4000, 0x0, &(0x7f000063a000/0x4000)=nil) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x28}, @l2cap_cid_signaling={{0x24}, [@l2cap_create_chan_rsp={{0xd, 0x7, 0x8}, {0xff, 0x9, 0x80, 0x401}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0x8, 0xc1c}}, @l2cap_move_chan_cfm={{0x10, 0x3, 0x4}, {0xff, 0xf476}}, @l2cap_move_chan_rsp={{0xf, 0x44, 0x4}, {0x40, 0x396}}]}}, 0x2d) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000768000/0x2000)=nil) (async) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000200)=0x800, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 25m15.228998249s ago: executing program 5 (id=5124): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x20001, 0xcb) socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r4 = syz_open_dev$dri(&(0x7f0000000440), 0xffffffffffffffff, 0x4aec0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 25m15.063216279s ago: executing program 5 (id=5127): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0xd, 0x0, 0x5, 0xfbffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x90, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa, 0x11, r2, 0xa70e9000) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x54, 0xb0cf5, 0x10000000, 0x2, 0x6, 0x5, 0x80000001, 0x0, 0x2, 0x20}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0xfffffffc, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000240)={0x800100, 0x63, 0xfffffffe, 0x8, 0x9, 0x6}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x6}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r12, 0x0, 0xf3a, 0x0) write(r9, &(0x7f0000000240)="94", 0x1) vmsplice(r12, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb12", 0xb8}], 0x1, 0x0) tee(r8, r12, 0x8f5, 0x0) write$cgroup_devices(r12, 0x0, 0x8) write(r10, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740), 0x2, 0x5}}, 0x20) r13 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) 25m14.596178022s ago: executing program 5 (id=5131): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) fcntl$notify(r1, 0x402, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) socket$rds(0x15, 0x5, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12011003a2b051e31114625126f362a01ddc62402952ddafedbe01020301090200000000e0f2ed2b37af2608030106003a8b0000000000000000ecffffffffffffff2cb3e07437460c5620b7954c68c0b6db14e58ff8d1d9ab7388277e820d1ed2622628f0b032267f587f39ae33afefe1aaf55f8714de65a5449bdfd1e2d0c649e6fc02cfced3ab41a63ec64d384ea6d2cfcef0b848f8b80f7563347c73e0787e30b0534b660243919300f4eace7dba74c7d933e9ac64e7f20f219a7608cc42da298c05498e84d1c2fe39abaeb1d038f5fd226479c0ad8866ac1877e82aa17a7d23a4890823d9aecf9fc8a870ebdda5a65b82c4"], &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x1, @pix={0x203, 0x807c2, 0x32314d59, 0x32315659, 0xffffffff, 0x10004, 0xa, 0x807, 0xfeedcafe, 0x3, 0x2, 0x3}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {0x5, 0xffff}, {0x6, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x803}, 0x20044004) r6 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740), 0x42, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r7, 0x4010e501, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$usbmon(&(0x7f00000000c0), 0x3f3, 0x101000) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000580)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x0, 0xfffffffffffffffd, 0x9b0308, r4}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @remote, 0x9, 0x0, 0x9, 0x400, 0x4000000010000009, 0x10200}) 25m14.203131443s ago: executing program 35 (id=5131): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) fcntl$notify(r1, 0x402, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) socket$rds(0x15, 0x5, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12011003a2b051e31114625126f362a01ddc62402952ddafedbe01020301090200000000e0f2ed2b37af2608030106003a8b0000000000000000ecffffffffffffff2cb3e07437460c5620b7954c68c0b6db14e58ff8d1d9ab7388277e820d1ed2622628f0b032267f587f39ae33afefe1aaf55f8714de65a5449bdfd1e2d0c649e6fc02cfced3ab41a63ec64d384ea6d2cfcef0b848f8b80f7563347c73e0787e30b0534b660243919300f4eace7dba74c7d933e9ac64e7f20f219a7608cc42da298c05498e84d1c2fe39abaeb1d038f5fd226479c0ad8866ac1877e82aa17a7d23a4890823d9aecf9fc8a870ebdda5a65b82c4"], &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x1, @pix={0x203, 0x807c2, 0x32314d59, 0x32315659, 0xffffffff, 0x10004, 0xa, 0x807, 0xfeedcafe, 0x3, 0x2, 0x3}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {0x5, 0xffff}, {0x6, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x803}, 0x20044004) r6 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740), 0x42, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r7, 0x4010e501, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$usbmon(&(0x7f00000000c0), 0x3f3, 0x101000) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000580)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x0, 0xfffffffffffffffd, 0x9b0308, r4}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @remote, 0x9, 0x0, 0x9, 0x400, 0x4000000010000009, 0x10200}) 24m38.885860278s ago: executing program 2 (id=5318): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom1\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40004) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) socket(0xb, 0x4, 0x1000) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)=""/4067, 0xfe3}, {&(0x7f0000001680)=""/238, 0xee}, {&(0x7f00000014c0)=""/116, 0x74}, {&(0x7f00000029c0)=""/4097, 0x1001}], 0x4}}], 0x1, 0x10002, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000480)={'ip6gretap0\x00', 0x401}) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9f, 0x2) r5 = creat(0x0, 0x0) fsetxattr$system_posix_acl(r5, 0x0, 0x0, 0x0, 0x2) clock_getres(0xfffffffffffffff6, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f045}) ppoll(&(0x7f0000000000)=[{r4, 0x9f712fd3135d63af}], 0x1, 0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r7 = fcntl$dupfd(r6, 0x0, r6) syz_emit_ethernet(0x4a, &(0x7f0000001600)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd604dd31800140601fc4ed8a6eb3b1190016900000000000000000000000002fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000c90780000"], 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000001580), &(0x7f00000015c0)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x70, &(0x7f0000000100)}, 0x1c) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x39, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6b5, 0x0, 0x0, 0x0, 0x10}, @exit, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3fb, 0x400, 0x70bd25, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000c4}, 0x44001) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149014006040800", 0x58}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) 24m38.715713714s ago: executing program 2 (id=5319): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r2, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x11}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x23, 0x34, @random="85253f183630aab6131d5b48168d488b2cd8c462dfde1760aa9e512ec2be40"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) close(0x3) syz_usb_connect$uac3(0x1, 0x88, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0x1978, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x3, 0x1, 0x6, 0x80, 0x81, {0x8, 0xb, 0x0, 0x1, 0x1, 0x22, 0x30, 0xe}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0xa, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xf, 0xf, 0xa, {0xa, 0x25, 0x25, 0x8, 0xdd, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xcb, 0x4, 0xc, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x0, 0x7, {0xa, 0x25, 0x25, 0x5, 0x7f, 0x5}}}}}}}}]}}, 0x0) (async) syz_usb_connect$uac3(0x1, 0x88, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0x1978, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x3, 0x1, 0x6, 0x80, 0x81, {0x8, 0xb, 0x0, 0x1, 0x1, 0x22, 0x30, 0xe}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0xa, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xf, 0xf, 0xa, {0xa, 0x25, 0x25, 0x8, 0xdd, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xcb, 0x4, 0xc, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x0, 0x7, {0xa, 0x25, 0x25, 0x5, 0x7f, 0x5}}}}}}}}]}}, 0x0) 24m37.949015183s ago: executing program 2 (id=5322): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162f", 0x26}, {&(0x7f0000002900)="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", 0xed2}, {&(0x7f00000000c0)="01d2df2e944cdb8a291a4db764bf54514270708beff053fb989b6411", 0x1c}, {&(0x7f00000002c0)="eb9ed01e38c94511860902384f515ef9baad259491c278913e5d6a7f5cac64be0208e09e1eca2479c6c03c6b3e80c0c8ed4a3f5de076", 0x36}], 0x4}, 0x40000) (fail_nth: 8) 24m37.821457592s ago: executing program 2 (id=5323): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) (async) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000010101020000000000050800084000"], 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000"], 0x28}, 0x4004004) (async) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000"], 0x28}, 0x4004004) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r2, &(0x7f0000000000)=@known='system.posix_acl_default\x00') r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x2}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x4, 0x4, 0x1, 0x0, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x23, 0x9, 0x70bd25, 0x25dfd3ff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) (async) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) readv(r4, &(0x7f0000000380)=[{&(0x7f0000000200)=""/28, 0x1c}], 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000240)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000240)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x181000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_open_dev$vim2m(&(0x7f0000000200), 0x7f, 0x2) (async) r7 = syz_open_dev$vim2m(&(0x7f0000000200), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000340)={0x3d, 0x1, 0x8, "ee4f6da8d2cf4011ac7b00", 0x35315241}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) 24m37.398164393s ago: executing program 2 (id=5324): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x0, 0x58, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0x9, 0x8, 0x1, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 24m35.379263444s ago: executing program 2 (id=5331): bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = getpgid(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000000)='task\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000180)=""/219, 0xdb}], 0x1, 0x44, 0x0) 24m34.873445124s ago: executing program 36 (id=5331): bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = getpgid(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000000)='task\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000180)=""/219, 0xdb}], 0x1, 0x44, 0x0) 20m56.645629023s ago: executing program 6 (id=6367): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs={0x3, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000180)={0x1008c2200, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) socket$igmp(0x2, 0x3, 0x2) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x6000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0xb2, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xe2, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x10000, 0x9, 0x0, 0xff, 0x2, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x6, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x4, 0x0, 0x1]}) close(0x5) munlockall() mprotect(&(0x7f0000525000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 20m52.411843808s ago: executing program 6 (id=6390): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x7ffffff}) 20m52.073738437s ago: executing program 6 (id=6392): r0 = socket(0xa, 0x80805, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window], 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r2, @in={{0x2, 0x4e24, @empty}}, 0xe, 0x2040, 0x8, 0x5, 0x10, 0x8000401, 0x9}, &(0x7f0000000240)=0x9c) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) 20m51.886629666s ago: executing program 6 (id=6395): setpgid(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0xb, r1}) r2 = syz_clone(0x8000000, &(0x7f0000000080)="cfbf16aba44ad1aae354d3c16f880614008b8f72f92fabee2951e6fec832f59c8f71a7c1d1f23b35f2f7", 0x2a, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000340)="14623df18e6c1049dfc274ac0ad91c4d30eab4b2ae1464cb35bc2b3bf26ddbd8f8ff8caf5d33e6ab7844e92645c2bcaf0575c3d26d81f99554b13a4c7ebc775924df466ddd4073a5d4663f1d4899ab99d6ee4e2290bf42facb096250dec39f4bd87e8e2591213aefff9a9071f0215b6bbf7c1b8d1a71a38974377b47ee36769a8e41c7f89492b53471021b2dedb4f2eaa70e7fcbb1b96bfee56e5d73562bef1f160f358feba2b435cbb6389dbac0e788b7c2638b7ccf4c1c") sched_setaffinity(r2, 0x8, &(0x7f0000000400)=0x5) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00') lseek(r4, 0x9, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000200), 0x8, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={[0xa]}, 0xfffffffffffffee4) write$tun(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xfc4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0xb) sendfile(r5, r5, 0x0, 0x7) 20m51.27372912s ago: executing program 6 (id=6398): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000000)={[{0xff, 0x4, 0x3, 0x61, 0x6, 0xc, 0x46, 0x9, 0x5, 0xbe, 0x5, 0x1, 0x7fffffff}, {0xa, 0xbf3, 0xb, 0x1, 0x0, 0x40, 0x9, 0x6, 0x8, 0xf, 0x6, 0x2, 0x453a}, {0x756, 0x1, 0x7, 0xbe, 0x5a, 0xb0, 0x0, 0x2, 0x8b, 0x2, 0xd, 0x6, 0x101}], 0x80000001}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x6000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0xb2, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xe2, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x10000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x6, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x4, 0x0, 0x1]}) close(0x5) close(0x4) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 20m50.681775636s ago: executing program 6 (id=6401): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0)=0x2001) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000080)={{&(0x7f000004e000/0x1000)=nil, 0x1000}, 0x1}) readv(r2, &(0x7f0000000480)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="ee87961c8fff486ae4412ba8074a3cd1d232b6ee8fcde1f794380b9bacdf230780ce8455104e635ffdbdc7c24dd4c0044e623e97ba3af6d97d263bf3a0b1aa48120b5a854f6f9218d13f7d1241db6e0d960685fef42ee5892b32c8405918d9918b3becd12165263d5a932c19fde46f0a7058a017354358a6b9275aec28b88d8df86ab43a1ccb312a32929825646f", 0x8e}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935", 0x34}, {&(0x7f00000006c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db394e97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158d443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc43671bb793f054c7a92e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26dd73fbcd84a46", 0xbe}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) close(r4) 20m50.107635862s ago: executing program 37 (id=6401): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0)=0x2001) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000080)={{&(0x7f000004e000/0x1000)=nil, 0x1000}, 0x1}) readv(r2, &(0x7f0000000480)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="ee87961c8fff486ae4412ba8074a3cd1d232b6ee8fcde1f794380b9bacdf230780ce8455104e635ffdbdc7c24dd4c0044e623e97ba3af6d97d263bf3a0b1aa48120b5a854f6f9218d13f7d1241db6e0d960685fef42ee5892b32c8405918d9918b3becd12165263d5a932c19fde46f0a7058a017354358a6b9275aec28b88d8df86ab43a1ccb312a32929825646f", 0x8e}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935", 0x34}, {&(0x7f00000006c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db394e97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158d443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc43671bb793f054c7a92e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26dd73fbcd84a46", 0xbe}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) close(r4) 42.478969822s ago: executing program 9 (id=10662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0x403d, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001240)={0x2, 0x16, 0xe8, 0x5, 0xa, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x3, 0x3, 0x0, 0x6e6bb7, 0x4, {0x6, 0x6c, 0x3, 0x0, 0x0, 0x1, 0x0, @in=@empty, @in=@private=0xa010100}}]}, 0x50}}, 0x4004800) timer_create(0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0xc03e) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r7, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r7, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @stop_pts=0x5}) ioctl$VIDIOC_DECODER_CMD(r7, 0xc0485660, &(0x7f0000000300)={0x0, 0x1, @stop_pts=0x3}) 38.458290187s ago: executing program 9 (id=10673): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x475, 0x4, 0x3}, 0x1c) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000700)=""/4080, 0xff0}], 0x1}, 0x20) close(0x4) 37.487601759s ago: executing program 9 (id=10676): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10000, '\x00', 0x0, 0x0, 0x2}, 0x50) r1 = socket(0x25, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x4, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xd1, 0x0, 0x0) readv(r1, &(0x7f0000003600)=[{&(0x7f0000002340)=""/138, 0x8a}], 0x1) r3 = landlock_create_ruleset(&(0x7f0000000740)={0x182, 0x2}, 0x18, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x15, 0xfffffffffffffe4b, 0x0}) landlock_restrict_self(r3, 0xa) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = fsopen(&(0x7f0000000700)='msdos\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r7 = fsopen(&(0x7f0000000300)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xa151) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb702000008000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007f0ff00b700"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TCSETSF2(r8, 0x402c542d, 0x0) 37.296571621s ago: executing program 9 (id=10677): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4020845) 36.674615103s ago: executing program 9 (id=10680): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 35.603795133s ago: executing program 9 (id=10682): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) r1 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) unshare(0x400) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0x403d, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001240)={0x2, 0x16, 0xe8, 0x5, 0xa, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x3, 0x3, 0x0, 0x6e6bb7, 0x4, {0x6, 0x6c, 0x3, 0x0, 0x0, 0x1, 0x0, @in=@empty, @in=@private=0xa010100}}]}, 0x50}}, 0x4004800) timer_create(0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0xc03e) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @stop_pts=0x5}) ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f0000000300)={0x0, 0x1, @stop_pts=0x3}) 20.063337583s ago: executing program 38 (id=10682): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) r1 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) unshare(0x400) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0x403d, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001240)={0x2, 0x16, 0xe8, 0x5, 0xa, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x3, 0x3, 0x0, 0x6e6bb7, 0x4, {0x6, 0x6c, 0x3, 0x0, 0x0, 0x1, 0x0, @in=@empty, @in=@private=0xa010100}}]}, 0x50}}, 0x4004800) timer_create(0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0xc03e) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @stop_pts=0x5}) ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f0000000300)={0x0, 0x1, @stop_pts=0x3}) 15.559163428s ago: executing program 7 (id=10700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0xc03e) 15.449690628s ago: executing program 0 (id=10701): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 15.154158762s ago: executing program 8 (id=10702): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa"], 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x6, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x8100015, &(0x7f0000000000)={0x2000004, 0x87, 0x10001000}) 14.113763805s ago: executing program 0 (id=10704): socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5434, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x4e23, 0x0, @empty, 0xfffffffc}, 0x0, {[0xfffffffe, 0x0, 0x0, 0x0, 0x50, 0x5]}}, 0x5c) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffb000/0x4000)=nil) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x480000, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='statm\x00') syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x3, 0x3) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/kexec_loaded', 0x103080, 0x103) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x4f23, 0xfffc, 0x4e23, 0x6, 0x2, 0x2a11bad3d5f03f04, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x4, 0x9}, 0xd6, 0x0, 0x1, 0x1, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x210000, 0x33}, 0x0, @in=@remote, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0xe5e54be0630c28fa, 0x4, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) socket(0x1, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x7fff, 0xffffffffffffffff, 0x6c4ba42, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x4, 0x0, 0x0, 0x0, 0x5, 0x2000000000, 0xffffffffffffffff, 0x20000000000, 0xfffffffffffffffc, 0x3, 0x8000000000000000, 0x2, 0xff, 0x800, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x1, 0x0, 0x3, 0x4, 0x1, 0x6, 0x0, 0xfffffffffffffffc, 0x800, 0x1772cf4f, 0x0, 0x0, 0x7ffffffffc, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0xfffffffffffffffd, 0x4a, 0x0, 0x3000000000000, 0xfffffffffffffffd, 0x2, 0x40000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x8, 0x0, 0x2, 0x2001, 0x0, 0x0, 0x400000, 0x40, 0x0, 0x40000000000, 0x801, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x8, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2000000000000002, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x6, 0x0, 0x1000000003, 0x10000000010, 0x4000100000001]}) syz_usb_connect$uac2(0x2, 0x98, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) 13.983535895s ago: executing program 3 (id=10705): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) r2 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd\x9b`;\x1c\xfc\xaf9\x98\x91\xe7\x00'/52, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x400c5, 0x5) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffe3e) 12.402872559s ago: executing program 3 (id=10706): socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5434, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb48, 0x9, 0x8, 0x2, 0x21}, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x4e23, 0x0, @empty, 0xfffffffc}, 0x0, {[0xfffffffe, 0x0, 0x0, 0x0, 0x50, 0x5]}}, 0x5c) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffb000/0x4000)=nil) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x480000, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='statm\x00') syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x3, 0x3) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/kexec_loaded', 0x103080, 0x103) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x4f23, 0xfffc, 0x4e23, 0x6, 0x2, 0x2a11bad3d5f03f04, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x4, 0x9}, 0xd6, 0x0, 0x1, 0x1, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x210000, 0x33}, 0x0, @in=@remote, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0xe5e54be0630c28fa, 0x4, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) socket(0x1, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x7fff, 0xffffffffffffffff, 0x6c4ba42, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x4, 0x0, 0x0, 0x0, 0x5, 0x2000000000, 0xffffffffffffffff, 0x20000000000, 0xfffffffffffffffc, 0x3, 0x8000000000000000, 0x2, 0xff, 0x800, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x1, 0x0, 0x3, 0x4, 0x1, 0x6, 0x0, 0xfffffffffffffffc, 0x800, 0x1772cf4f, 0x0, 0x0, 0x7ffffffffc, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0xfffffffffffffffd, 0x4a, 0x0, 0x3000000000000, 0xfffffffffffffffd, 0x2, 0x40000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x8, 0x0, 0x2, 0x2001, 0x0, 0x0, 0x400000, 0x40, 0x0, 0x40000000000, 0x801, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x8, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2000000000000002, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x6, 0x0, 0x1000000003, 0x10000000010, 0x4000100000001]}) syz_usb_connect$uac2(0x2, 0x98, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) 11.806226596s ago: executing program 8 (id=10707): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fanotify_init(0x200, 0x48801) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000002b00)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4}}, 0x48) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4", 0x33}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedf", 0x3d}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52ee", 0x25}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d6b", 0xb2}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd1", 0x62}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 11.142838687s ago: executing program 7 (id=10708): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r3) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7, 0x6361, 0x7, 0xffffffff, 0x5}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x80000000}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10.71904959s ago: executing program 8 (id=10709): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) syz_open_procfs$pagemap(0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000200)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r4 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r4}, &(0x7f0000000080)) timer_settime(0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x5, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x4, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_dev$dvb_demux(0x0, 0x0, 0x62400) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc0002, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000200)={0x0, 0x7, 0x4, 0x0, 0x2, 0x1}) getpid() r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000029c0)={0x30, r5, 0x100, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0x30}}, 0x2008040) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r6, r6}, &(0x7f0000000100)=""/83, 0x53, &(0x7f0000000340)={&(0x7f0000000300)={'sha3-224\x00'}}) 10.005466979s ago: executing program 0 (id=10710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0x403d, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001240)={0x2, 0x16, 0xe8, 0x5, 0xa, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x3, 0x3, 0x0, 0x6e6bb7, 0x4, {0x6, 0x6c, 0x3, 0x0, 0x0, 0x1, 0x0, @in=@empty, @in=@private=0xa010100}}]}, 0x50}}, 0x4004800) timer_create(0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0xc03e) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r7, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r7, 0xc0485660, &(0x7f0000000300)={0x0, 0x1, @stop_pts=0x3}) 9.87977974s ago: executing program 7 (id=10711): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) 8.725935681s ago: executing program 3 (id=10712): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0xfffffffffffffe94, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x5}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 8.549747727s ago: executing program 8 (id=10713): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 8.111577229s ago: executing program 7 (id=10714): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 7.448196655s ago: executing program 3 (id=10715): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000004000)=[{{&(0x7f0000001300)=@l2, 0x80, &(0x7f0000003e40)=[{&(0x7f0000001380)=""/101, 0x65}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/18, 0x12}, {&(0x7f0000002a80)=""/148, 0x94}, {&(0x7f0000001400)=""/114, 0x72}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/148, 0x94}, {&(0x7f0000003c80)=""/223, 0xdf}, {&(0x7f0000003d80)=""/14, 0xe}, {&(0x7f0000003dc0)=""/104, 0x68}], 0xa, &(0x7f0000003f00)=""/239, 0xd5}, 0xa}], 0x1, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = fsopen(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1, &(0x7f0000000040), 0x4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f00000011c0)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001200)='/proc/sys.#\x00\x00\x00\x01\x00\x00\x00', &(0x7f0000001240)='^$\x9fdS;G\xcf+\xa8V\xba#Y\x1a\xf1\xb1V\x03\x1e\x00', 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x80000020, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001140)=ANY=[@ANYRES16=r0, @ANYRESHEX], 0xff2e) socket$kcm(0x10, 0x3, 0x10) 6.99994457s ago: executing program 7 (id=10716): socket(0x2b, 0x1, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs={0x3, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000180)={0x1008c2200, &(0x7f0000000040), 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x6000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0xb2, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xe2, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x10000, 0x9, 0x0, 0xff, 0x2, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x6, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x4, 0x0, 0x1]}) close(0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 6.8221042s ago: executing program 8 (id=10717): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0xc03e) 5.254219392s ago: executing program 0 (id=10718): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000004000)=[{{&(0x7f0000001300)=@l2, 0x80, &(0x7f0000003e40)=[{&(0x7f0000001380)=""/101, 0x65}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/18, 0x12}, {&(0x7f0000002a80)=""/148, 0x94}, {&(0x7f0000001400)=""/114, 0x72}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/148, 0x94}, {&(0x7f0000003c80)=""/223, 0xdf}, {&(0x7f0000003d80)=""/14, 0xe}, {&(0x7f0000003dc0)=""/104, 0x68}], 0xa, &(0x7f0000003f00)=""/239, 0xd5}, 0xa}], 0x1, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = fsopen(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040), 0x4) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f00000011c0)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001200)='/proc/sys.#\x00\x00\x00\x01\x00\x00\x00', &(0x7f0000001240)='^$\x9fdS;G\xcf+\xa8V\xba#Y\x1a\xf1\xb1V\x03\x1e\x00', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x80000020, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001140)=ANY=[@ANYRES16=r0, @ANYRESHEX], 0xff2e) socket$kcm(0x10, 0x3, 0x10) 4.204282375s ago: executing program 3 (id=10719): openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000900)=ANY=[], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0xda, 0x45, 0xa1, 0x40, 0x424, 0x12c, 0x4e40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7f, 0x0, 0x50, 0xd, "", [{{0x9, 0x4, 0x8a, 0x0, 0x1, 0xf5, 0x81, 0x89, 0x2c, [], [{{0x9, 0x5, 0xc, 0x2, 0x400, 0x7, 0x7, 0xa}}]}}]}}]}}, 0x0) syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x20, 0x0, {0x8, 0xb, 0x3, 0x1, 0x1, 0x5, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xb2e, 0x6, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0xf, 0xab, {0x8, 0x25, 0x1, 0x81, 0x33, 0xfa, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x81, 0x0, {0x8, 0x25, 0x1, 0x3, 0x3, 0xe, 0x8}}}}}}}}]}}, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) open_tree(r0, 0x0, 0x89901) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x40, 0x20001, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) pipe(&(0x7f0000000340)) 2.444492157s ago: executing program 8 (id=10720): syz_usb_connect(0x3, 0x2d, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x0, 0xfb, 0xdc, 0x42}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x58, &(0x7f0000000000)=@string={0x58, 0x3, "845e312bc72352b5fa16ae8ee95a346092aec9a01fb86527fb83ea8ac8b4780fb842edc56ca5900475aacfbcf26c2ab253b9932d382c02498082e2c3764c29200b1d47322bd5ebe1371c87cd9ea3563fcc8a7b85d6b0"}}, {0xef, &(0x7f00000001c0)=@string={0xef, 0x3, "3766cd294fe2a994f19adedd710572aedd352da85f01b693cc04622aad3a7fedd8f9ea9a5fd1ed707a5537a909262c38e561a7539ac8f9ee13b4061966c1d1b2949d0ea5426ba2c4e158680d4abd44fe03ea1dabf2000000b8941c0e0900ae25b60ee22b22c6d1c70d4c3ac93140d2b07657d451b016ad4e6d885e64f14f2766209fce7cfa1df72456a9483b35f782a801b5fa03d54a0863a74aebb64ccb67583d2c321b863a1a1720e0b1698a63ecfe4cee723cdb8aaea809b66b52279b75e6af0105d2d9c7deba322bd8449529f5e40be99da0fc08016ac7e74010b6b83c56491651425f7f5531fc79fc77be"}}, {0x4e, &(0x7f0000000100)=@string={0x4e, 0x3, "ea06b1cd0cf944a1c3366ad5001ffe6d93f78c14000753c907aab155f9679e7646dcc165fd3554822550b03e16fb9f5b4413017d03fe8681ff3e4a42b4054597354ccf96c1ca44565d3d518b"}}]}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) mlockall(0x2) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x5000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') preadv(r3, &(0x7f00000011c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x200000, 0x9) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f00000005c0)=""/255, 0xff}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x4, &(0x7f00000006c0)=""/68, 0x44}, 0x2}, {{&(0x7f0000001840)=@vsock, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000018c0)=""/159, 0x9f}, {&(0x7f0000001980)=""/231, 0xe7}, {&(0x7f0000001a80)=""/21, 0x15}, {&(0x7f0000001ac0)=""/166, 0xa6}, {&(0x7f0000001b80)=""/26, 0x1a}], 0x5, &(0x7f0000001c40)=""/136, 0x88}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001d00)=""/199, 0xc7}], 0x1, &(0x7f0000001e40)=""/4096, 0x1000}, 0xcf9}, {{&(0x7f0000002e40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003240)=[{&(0x7f0000002ec0)=""/7, 0x7}, {&(0x7f0000002f00)=""/51, 0x33}, {&(0x7f0000002f40)=""/160, 0xa0}, {&(0x7f0000003000)=""/30, 0x1e}, {&(0x7f0000003040)=""/75, 0x4b}, {&(0x7f00000030c0)=""/112, 0x70}, {&(0x7f0000003140)=""/91, 0x5b}, {&(0x7f00000031c0)=""/75, 0x4b}], 0x8}, 0x6}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f00000032c0)=""/88, 0x58}, {&(0x7f0000003340)=""/6, 0x6}], 0x2}, 0x1}, {{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f00000033c0)=""/49, 0x31}, {&(0x7f0000003400)=""/93, 0x5d}, {&(0x7f0000003480)=""/166, 0xa6}, {&(0x7f0000003540)=""/167, 0xa7}, {&(0x7f0000003600)=""/146, 0x92}], 0x5, &(0x7f0000003740)=""/108, 0x6c}, 0xd}, {{&(0x7f00000037c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000003840)=""/198, 0xc6}, {&(0x7f0000003940)=""/128, 0x80}, {&(0x7f00000039c0)=""/250, 0xfa}, {&(0x7f0000003ac0)=""/152, 0x98}], 0x4}, 0x7}], 0x7, 0x40000002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000003d80)={0x0, @in6={{0xa, 0x4e24, 0x2, @remote, 0x5}}}, &(0x7f0000003e40)=0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x1000000, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x20, 0x5}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@dev}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="16e0c1571e59eb0c2318793aeb73a7d2", 0x10) 2.114780692s ago: executing program 0 (id=10721): memfd_secret(0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x39000, 0x0) r2 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd\x9b`;\x1c\xfc\xaf9\x98\x91\xe7\x00'/52, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) splice(r0, 0x0, r2, 0x0, 0x400c5, 0x5) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffe3e) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa80008000300", @ANYRES16], 0x84}}, 0x20008040) ioctl(r3, 0x1, &(0x7f00000003c0)="548ce897c19937d13f6e6ef6c32c424cf427ce05013854214db81a3c412a0d57905e613f78aa1c172a58fc8c7b3e811b0dbd8e7d54c8b484126e7a9ab4c73dfc77de291e445d47952de207bcba79f006c35787d6671238ed09fb89f3617be9b91b00e269bea0eb98fe0071ee693b982a4d7533eacb1957108549d1b66ea4e50fdd23474b42ca53229ddf37419a3729bbb5a373bd9682743c7e41e45ac0575048f4c261d1a354b5") io_setup(0x8, &(0x7f0000000180)) 1.701612653s ago: executing program 7 (id=10722): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0xfffffe78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r5, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, &(0x7f0000000180)={0xa, 0x63, 0xd, 0x1, 0x3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)=0x24) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2"], 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) 879.040148ms ago: executing program 3 (id=10723): openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x84) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000900)=ANY=[@ANYBLOB="1201010200000040"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0xda, 0x45, 0xa1, 0x40, 0x424, 0x12c, 0x4e40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7f, 0x0, 0x50, 0xd, "", [{{0x9, 0x4, 0x8a, 0x0, 0x1, 0xf5, 0x81, 0x89, 0x2c, [], [{{0x9, 0x5, 0xc, 0x2, 0x400, 0x7, 0x7, 0xa}}]}}]}}]}}, 0x0) syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x20, 0x0, {0x8, 0xb, 0x3, 0x1, 0x1, 0x5, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xb2e, 0x6, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0xf, 0xab, {0x8, 0x25, 0x1, 0x81, 0x33, 0xfa, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x81, 0x0, {0x8, 0x25, 0x1, 0x3, 0x3, 0xe, 0x8}}}}}}}}]}}, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) creat(0x0, 0xecf86c37d53049cc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x40, 0x20001, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r1}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) pipe(&(0x7f0000000340)) 0s ago: executing program 0 (id=10724): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0xfffffffffffffe94, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x5}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) kernel console output (not intermixed with test programs): s in process `syz.3.10203'. [ 2640.734248][ T6040] usb 4-1: USB disconnect, device number 22 [ 2640.848702][ T6051] usb 8-1: Using ep0 maxpacket: 32 [ 2640.856685][ T6051] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2640.870544][ T6051] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2640.883515][ T6051] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2640.895628][ T6051] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2640.916007][ T6051] usb 8-1: config 0 descriptor?? [ 2640.929167][ T6051] hub 8-1:0.0: USB hub found [ 2641.126314][ T6051] hub 8-1:0.0: 1 port detected [ 2641.479025][ T8699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2641.502458][ T8699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2641.540865][ T8701] fuse: Bad value for 'fd' [ 2641.741891][ T6051] hub 8-1:0.0: activate --> -90 [ 2642.093044][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10214'. [ 2642.139405][ T8708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2642.205406][ T6051] usb 8-1-port1: config error [ 2642.205501][ T6040] usb 8-1: USB disconnect, device number 121 [ 2642.314157][ T8712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2642.344759][ T8712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2642.748933][T30266] az6027: usb out operation failed. (-110) [ 2642.769638][T30266] az6027: usb out operation failed. (-32) [ 2642.786189][T30266] stb0899_attach: Driver disabled by Kconfig [ 2642.818563][T30266] az6027: no front-end attached [ 2642.818563][T30266] [ 2642.855639][T30266] az6027: usb out operation failed. (-32) [ 2642.871196][T30266] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2642.899989][T30266] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input193 [ 2642.937234][T30266] dvb-usb: schedule remote query interval to 400 msecs. [ 2642.972364][T30266] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2644.259105][ T8724] syzkaller0: entered promiscuous mode [ 2644.288166][ T8724] syzkaller0: entered allmulticast mode [ 2644.414720][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10220'. [ 2644.451853][ T8727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2644.947377][ T6046] usb 8-1: new full-speed USB device number 122 using dummy_hcd [ 2645.097078][ T6046] usb 8-1: device descriptor read/64, error -71 [ 2645.299886][ T8733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2645.320470][ T8733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2645.367773][ T6046] usb 8-1: new full-speed USB device number 123 using dummy_hcd [ 2645.507131][ T6046] usb 8-1: device descriptor read/64, error -71 [ 2645.637567][ T6046] usb usb8-port1: attempt power cycle [ 2646.007470][ T6046] usb 8-1: new full-speed USB device number 124 using dummy_hcd [ 2646.047791][ T6046] usb 8-1: device descriptor read/8, error -71 [ 2646.243048][ T8745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2646.253837][ T8745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2646.317071][ T6046] usb 8-1: new full-speed USB device number 125 using dummy_hcd [ 2646.349665][ T6046] usb 8-1: device descriptor read/8, error -71 [ 2646.477756][ T6046] usb usb8-port1: unable to enumerate USB device [ 2648.358714][ T6051] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2648.490583][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10234'. [ 2648.504520][ T8768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2648.532462][ T6051] usb 4-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 2648.545914][ T6051] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2648.561868][ T6051] usb 4-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 2648.573457][ T6051] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2648.593183][ T6051] usb 4-1: config 0 descriptor?? [ 2648.622095][ T6051] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2651.899308][T32141] usb 4-1: USB disconnect, device number 23 [ 2652.052791][ T8793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2652.092893][ T8793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2652.143959][ T8793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2652.174813][ T8793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2652.191127][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.199663][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.219622][ T8793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2652.262084][ T8793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2652.758384][ T8806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2652.819332][ T8806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2652.881518][ T8806] netlink: 56 bytes leftover after parsing attributes in process `syz.9.10245'. [ 2653.306259][ T8808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2653.346133][ T8808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2654.005168][ T8816] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2654.049934][ T8816] syzkaller1: linktype set to 823 [ 2655.961819][ T8829] syzkaller0: entered promiscuous mode [ 2656.053211][ T8829] syzkaller0: entered allmulticast mode [ 2656.560839][T32141] usb 8-1: new high-speed USB device number 126 using dummy_hcd [ 2656.750615][T32141] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2656.779306][T32141] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2656.819019][T32141] usb 8-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 2656.853384][T32141] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2656.880066][T32141] usb 8-1: Product: syz [ 2656.902294][T32141] usb 8-1: Manufacturer: syz [ 2656.928668][T32141] usb 8-1: SerialNumber: syz [ 2657.379726][ T30] audit: type=1326 audit(1782882909.598:14517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.7.10251" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6d9de59 code=0x7ffc0000 [ 2657.465927][T32141] usb 8-1: 0:1 : does not exist [ 2657.586588][ T30] audit: type=1326 audit(1782882909.598:14518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.7.10251" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6d9de59 code=0x7ffc0000 [ 2657.625944][T32141] usb 8-1: unit 4 not found! [ 2657.642994][T32141] usb 8-1: unit 80 not found! [ 2657.754917][ T30] audit: type=1326 audit(1782882909.608:14519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.7.10251" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd2c6d9de59 code=0x7ffc0000 [ 2657.822994][T32141] usb 8-1: USB disconnect, device number 126 [ 2657.919608][ T7732] udevd[7732]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2657.958228][ T30] audit: type=1326 audit(1782882910.178:14520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.7.10251" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c6d5e68e code=0x7ffc0000 [ 2658.074905][ T30] audit: type=1326 audit(1782882910.278:14521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.7.10251" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c6d5e68e code=0x7ffc0000 [ 2658.161129][ T30] audit: type=1326 audit(1782882910.388:14522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.7.10251" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c6d5e68e code=0x7ffc0000 [ 2658.251863][ T30] audit: type=1326 audit(1782882910.488:14523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.7.10251" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c6d5e68e code=0x7ffc0000 [ 2658.352019][ T30] audit: type=1326 audit(1782882910.588:14524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.7.10251" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c6d5e68e code=0x7ffc0000 [ 2658.452522][ T30] audit: type=1326 audit(1782882910.688:14525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.7.10251" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd2c6d9de59 code=0x7ffc0000 [ 2658.904747][ T8835] syzkaller0: entered promiscuous mode [ 2658.923495][ T8835] syzkaller0: entered allmulticast mode [ 2658.934768][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10254'. [ 2660.057974][ T8847] bridge0: port 3(erspan0) entered blocking state [ 2660.064701][ T8847] bridge0: port 3(erspan0) entered disabled state [ 2660.121200][ T8847] erspan0: entered allmulticast mode [ 2660.181973][ T8853] fuse: Invalid rootmode [ 2660.263243][ T8847] erspan0: entered promiscuous mode [ 2660.301778][ T8847] bridge0: port 3(erspan0) entered blocking state [ 2660.308477][ T8847] bridge0: port 3(erspan0) entered forwarding state [ 2660.375808][ T8851] erspan0: left allmulticast mode [ 2660.388609][ T8851] erspan0: left promiscuous mode [ 2660.397632][ T8851] bridge0: port 3(erspan0) entered disabled state [ 2663.252316][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10266'. [ 2663.729765][ T8891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2663.770890][ T8891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2663.825763][ T8891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2663.855735][ T8891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2663.899926][ T8891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2663.940868][ T8891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2664.531640][ T8896] syzkaller0: entered promiscuous mode [ 2664.541941][ T8896] syzkaller0: entered allmulticast mode [ 2664.826189][ T8901] syzkaller0: entered promiscuous mode [ 2664.853365][ T8901] syzkaller0: entered allmulticast mode [ 2664.890963][T32141] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2665.162960][T32141] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2665.212741][T32141] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2665.233138][T32141] usb 4-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 2665.248446][T32141] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2665.283717][T32141] usb 4-1: Product: syz [ 2665.303644][T32141] usb 4-1: Manufacturer: syz [ 2665.323467][T32141] usb 4-1: SerialNumber: syz [ 2665.779701][T32141] usb 4-1: 0:1 : does not exist [ 2665.787368][ T30] audit: type=1326 audit(1782882917.958:14526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.3.10272" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12fb79de59 code=0x7ffc0000 [ 2665.795048][T32141] usb 4-1: unit 4 not found! [ 2665.873497][T32141] usb 4-1: unit 80 not found! [ 2665.922724][ T30] audit: type=1326 audit(1782882917.958:14527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.3.10272" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f12fb79de59 code=0x7ffc0000 [ 2666.012074][ T30] audit: type=1326 audit(1782882917.958:14528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.3.10272" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12fb79de59 code=0x7ffc0000 [ 2666.143200][T32141] usb 4-1: USB disconnect, device number 24 [ 2666.360162][ T7732] udevd[7732]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2666.456587][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10278'. [ 2666.626038][ T30] audit: type=1326 audit(1782882918.858:14529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.3.10272" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f12fb75e68e code=0x7ffc0000 [ 2666.755898][ T30] audit: type=1326 audit(1782882918.988:14530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.3.10272" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f12fb75e68e code=0x7ffc0000 [ 2666.892371][ T30] audit: type=1326 audit(1782882919.118:14531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.3.10272" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f12fb75e68e code=0x7ffc0000 [ 2667.045225][ T30] audit: type=1326 audit(1782882919.278:14532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.3.10272" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f12fb75e68e code=0x7ffc0000 [ 2667.142569][ T30] audit: type=1326 audit(1782882919.378:14533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.3.10272" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f12fb75e68e code=0x7ffc0000 [ 2667.246594][ T30] audit: type=1326 audit(1782882919.478:14534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.3.10272" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f12fb79de59 code=0x7ffc0000 [ 2667.718984][ T6051] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2667.891767][ T6051] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2667.989126][ T6051] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2668.035928][ T6051] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2668.155782][ T6051] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2668.243620][ T6051] usb 4-1: config 0 descriptor?? [ 2668.718623][ T6051] usb 8-1: new high-speed USB device number 127 using dummy_hcd [ 2668.878269][ T6051] usb 8-1: Using ep0 maxpacket: 8 [ 2668.888324][ T6051] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2668.923199][ T6051] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2668.971705][ T6051] usb 8-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2669.116666][ T6051] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2669.179526][ T6051] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2669.236536][ T6051] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2669.265637][ T8946] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2669.273641][ T8946] syzkaller1: linktype set to 823 [ 2669.283852][ T6051] usbtmc 8-1:16.0: bulk endpoints not found [ 2670.041096][ T8950] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10288'. [ 2670.279201][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10289'. [ 2670.501659][ T6046] usb 4-1: USB disconnect, device number 25 [ 2670.802199][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10293'. [ 2670.868783][ T8964] netlink: 'syz.8.10293': attribute type 10 has an invalid length. [ 2670.943258][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10293'. [ 2671.515371][T24695] usb 8-1: USB disconnect, device number 127 [ 2672.020330][T24695] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 2672.231548][T24695] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2672.249500][T24695] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2672.299357][T24695] usb 8-1: Product: syz [ 2672.312866][T24695] usb 8-1: Manufacturer: syz [ 2672.333552][T24695] usb 8-1: SerialNumber: syz [ 2672.406423][T24695] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2672.423171][ T6046] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2673.344864][ T8987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2673.379185][ T8987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2673.551487][ T6046] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 2673.579028][ T6046] ath9k_htc: Failed to initialize the device [ 2673.656033][ T6046] usb 8-1: ath9k_htc: USB layer deinitialized [ 2674.347255][ T6040] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2674.537079][ T6040] usb 4-1: Using ep0 maxpacket: 8 [ 2674.569661][ T6040] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2674.643225][ T6040] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2674.702336][ T6040] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2674.792420][ T6040] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 2674.813985][T24695] usb 8-1: USB disconnect, device number 2 [ 2674.831972][ T6040] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 2674.859596][ T6040] usb 4-1: Product: syz [ 2674.865443][ T6040] usb 4-1: Manufacturer: syz [ 2674.931811][ T6040] usb 4-1: SerialNumber: syz [ 2675.002535][ T6040] usb 4-1: config 0 descriptor?? [ 2675.033968][ T6040] imon_raw 4-1:0.0: IR endpoint missing [ 2675.188706][ T9001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2675.873645][T32141] usb 4-1: USB disconnect, device number 26 [ 2676.287072][ T6040] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 2676.489748][ T6040] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2676.557725][ T6040] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2676.586807][ T6040] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2676.690210][ T6040] usb 8-1: config 0 descriptor?? [ 2676.954985][ T6040] usbhid 8-1:0.0: can't add hid device: -71 [ 2676.968776][ T6040] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2677.006568][ T6040] usb 8-1: USB disconnect, device number 3 [ 2677.625064][ T6040] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 2677.840498][ T6040] usb 8-1: Using ep0 maxpacket: 32 [ 2677.866379][ T6040] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2677.933573][ T6040] usb 8-1: New USB device found, idVendor=0f11, idProduct=3321, bcdDevice= 0.40 [ 2677.972274][ T6040] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2678.021680][ T6040] usb 8-1: config 0 descriptor?? [ 2678.050280][ T9020] syzkaller0: entered promiscuous mode [ 2678.070612][ T9020] syzkaller0: entered allmulticast mode [ 2678.472209][ T6040] usbhid 8-1:0.0: can't add hid device: -71 [ 2678.498022][ T6040] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2678.555364][ T6040] usb 8-1: USB disconnect, device number 4 [ 2679.009248][ T9029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2679.025405][ T9029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2679.178791][ T6051] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 2679.343376][ T6051] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2679.369674][ T6051] usb 4-1: not running at top speed; connect to a high speed hub [ 2679.405278][ T6051] usb 4-1: config 1 has an invalid interface number: 37 but max is 0 [ 2679.433283][ T6051] usb 4-1: config 1 has no interface number 0 [ 2679.479234][ T6051] usb 4-1: config 1 interface 37 has no altsetting 0 [ 2679.539477][ T6051] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0116, bcdDevice=63.56 [ 2679.551830][ T6051] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2679.600975][ T6051] usb 4-1: Product: syz [ 2679.635958][ T6051] usb 4-1: Manufacturer: syz [ 2679.675921][ T6051] usb 4-1: SerialNumber: syz [ 2682.263726][ T6051] kvaser_usb 4-1:1.37: error -ENODEV: Cannot get usb endpoint(s) [ 2682.356507][ T6051] usb 4-1: USB disconnect, device number 27 [ 2682.849699][ T6051] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2683.025854][ T6051] usb 4-1: too many configurations: 13, using maximum allowed: 8 [ 2683.039387][ T6051] usb 4-1: config 0 has no interfaces? [ 2683.046256][ T6051] usb 4-1: config 0 has no interfaces? [ 2683.060326][ T6051] usb 4-1: config 0 has no interfaces? [ 2683.070200][ T6051] usb 4-1: config 0 has no interfaces? [ 2683.079636][ T6051] usb 4-1: config 0 has no interfaces? [ 2683.086779][ T6051] usb 4-1: config 0 has no interfaces? [ 2683.102885][ T6051] usb 4-1: config 0 has no interfaces? [ 2683.113423][ T6051] usb 4-1: config 0 has no interfaces? [ 2683.124260][ T6051] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2683.161763][ T6051] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2683.172626][ T6051] usb 4-1: Product: syz [ 2683.179039][ T6051] usb 4-1: Manufacturer: syz [ 2683.183679][ T6051] usb 4-1: SerialNumber: syz [ 2683.194126][ T6051] usb 4-1: config 0 descriptor?? [ 2683.418404][ T9038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2683.465031][ T9038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2683.502361][ T6051] usb 4-1: USB disconnect, device number 28 [ 2684.219100][ T6056] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2684.390871][ T6056] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2684.408694][ T6056] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2684.450309][ T6056] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2684.530415][ T6056] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2684.540900][ T6056] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2684.595239][ T6056] usb 4-1: Product: syz [ 2684.606291][ T6056] usb 4-1: Manufacturer: syz [ 2684.614890][ T6056] usb 4-1: SerialNumber: syz [ 2684.684402][ T6056] usb 4-1: config 0 descriptor?? [ 2684.751198][ T6056] adutux 4-1:0.0: interrupt endpoints not found [ 2685.354613][ T9053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2685.389426][ T9053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2685.396234][T24695] usb 4-1: USB disconnect, device number 29 [ 2686.072358][ T9057] netlink: 84 bytes leftover after parsing attributes in process `syz.3.10322'. [ 2687.996900][ T9070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2688.062221][ T9070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2690.110613][ T9105] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2690.201045][ T9105] syzkaller1: linktype set to 823 [ 2690.604370][ T9111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2690.650739][ T9111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2691.976303][ T9116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2692.030632][ T9116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2692.933634][ T9128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2692.994220][ T9128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2693.091510][ T6056] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 2693.267773][ T6056] usb 8-1: Using ep0 maxpacket: 32 [ 2693.304683][ T6056] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2693.353191][ T6056] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2693.372904][ T6056] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2693.386664][ T6056] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2693.454328][ T6056] usb 8-1: config 0 descriptor?? [ 2693.515426][ T6056] hub 8-1:0.0: USB hub found [ 2693.712142][ T6056] hub 8-1:0.0: 1 port detected [ 2694.354911][ T6056] hub 8-1:0.0: activate --> -90 [ 2695.182456][T24695] usb 8-1: USB disconnect, device number 5 [ 2695.182903][ T6056] usb 8-1-port1: config error [ 2695.218593][ T9156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2695.301345][ T9156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2695.850124][ T9148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2695.925605][ T9148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2697.740713][ T9168] bridge0: port 1(erspan0) entered blocking state [ 2697.761974][ T9168] bridge0: port 1(erspan0) entered disabled state [ 2697.795990][ T9168] erspan0: entered allmulticast mode [ 2697.833294][ T9168] erspan0: entered promiscuous mode [ 2697.882604][ T9173] erspan0: left allmulticast mode [ 2697.905788][ T9173] erspan0: left promiscuous mode [ 2697.921259][ T9173] bridge0: port 1(erspan0) entered disabled state [ 2698.727200][ T9175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2698.744080][ T9175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2702.060585][ T9213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2702.128466][ T9213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2702.918663][ T6040] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 2703.202598][ T6040] usb 8-1: descriptor type invalid, skip [ 2703.220025][ T6040] usb 8-1: descriptor type invalid, skip [ 2703.240516][ T6040] usb 8-1: descriptor type invalid, skip [ 2703.272400][ T6040] usb 8-1: not running at top speed; connect to a high speed hub [ 2703.310217][ T6040] usb 8-1: config 1 has an invalid descriptor of length 165, skipping remainder of the config [ 2703.363619][ T6040] usb 8-1: too many endpoints for config 1 interface 0 altsetting 58: 242, using maximum allowed: 30 [ 2703.396569][ T6040] usb 8-1: config 1 interface 0 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 242 [ 2703.435577][ T6040] usb 8-1: config 1 interface 0 has no altsetting 0 [ 2703.464389][ T9219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2703.484056][ T6040] usb 8-1: New USB device found, idVendor=04b4, idProduct=9320, bcdDevice= 0.40 [ 2703.526196][ T6040] usb 8-1: New USB device strings: Mfr=222, Product=2, SerialNumber=3 [ 2703.556458][ T6040] usb 8-1: Product: syz [ 2703.566680][ T6040] usb 8-1: Manufacturer: syz [ 2703.586626][ T6040] usb 8-1: SerialNumber: syz [ 2705.780462][ T6040] usb 8-1: selecting invalid altsetting 0 [ 2705.810798][ T6040] usb 8-1: can't set first interface for hiFace device. [ 2705.831724][ T6040] snd-usb-hiface 8-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 2705.872684][ T6040] usb 8-1: USB disconnect, device number 6 [ 2706.066302][ T9240] syzkaller0: entered promiscuous mode [ 2706.083178][ T9242] netlink: 84 bytes leftover after parsing attributes in process `syz.0.10376'. [ 2706.092760][ T9240] syzkaller0: entered allmulticast mode [ 2706.377058][T24695] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 2706.549033][T24695] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2706.580475][T24695] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2706.609911][T24695] usb 8-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 2706.643508][T24695] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2706.664230][T24695] usb 8-1: Product: syz [ 2706.674871][T24695] usb 8-1: Manufacturer: syz [ 2706.688572][T24695] usb 8-1: SerialNumber: syz [ 2706.989831][ T30] audit: type=1326 audit(1782882959.218:14535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.7.10375" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6d9de59 code=0x7ffc0000 [ 2707.031882][T24695] usb 8-1: 0:1 : does not exist [ 2707.036820][T24695] usb 8-1: unit 4 not found! [ 2707.060581][T24695] usb 8-1: unit 80 not found! [ 2707.065617][ T30] audit: type=1326 audit(1782882959.258:14536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.7.10375" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6d9de59 code=0x7ffc0000 [ 2707.197533][ T30] audit: type=1326 audit(1782882959.258:14537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.7.10375" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd2c6d9de59 code=0x7ffc0000 [ 2707.228194][T24695] usb 8-1: USB disconnect, device number 7 [ 2707.272172][ T7732] udevd[7732]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2707.357548][ T30] audit: type=1326 audit(1782882959.588:14538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.7.10375" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c6d5e68e code=0x7ffc0000 [ 2707.484113][ T30] audit: type=1326 audit(1782882959.718:14539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.7.10375" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c6d5e68e code=0x7ffc0000 [ 2707.584655][ T30] audit: type=1326 audit(1782882959.818:14540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.7.10375" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c6d5e68e code=0x7ffc0000 [ 2707.684969][ T30] audit: type=1326 audit(1782882959.918:14541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.7.10375" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c6d5e68e code=0x7ffc0000 [ 2707.785702][ T30] audit: type=1326 audit(1782882960.018:14542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.7.10375" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c6d5e68e code=0x7ffc0000 [ 2707.911066][ T30] audit: type=1326 audit(1782882960.118:14543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.7.10375" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd2c6d9de59 code=0x7ffc0000 [ 2708.223992][ T9258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2708.454117][ T9266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2708.492675][ T9266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2708.532925][ T3509] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2708.584521][ T3509] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2708.664246][ T3509] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2708.736809][ T3509] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2711.213930][ T9293] netlink: 84 bytes leftover after parsing attributes in process `syz.0.10390'. [ 2713.649744][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.658216][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.929072][ T6056] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 2714.119623][ T6056] usb 8-1: Using ep0 maxpacket: 16 [ 2714.132418][ T6056] usb 8-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 2714.142425][ T6056] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2714.152116][ T6056] usb 8-1: Product: syz [ 2714.156399][ T6056] usb 8-1: Manufacturer: syz [ 2714.179477][ T6056] usb 8-1: SerialNumber: syz [ 2714.521146][ T6056] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 2714.663962][ T6056] usb 8-1: USB disconnect, device number 8 [ 2715.632084][ T9330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2715.649905][ T9327] syzkaller0: entered promiscuous mode [ 2715.655962][ T9327] syzkaller0: entered allmulticast mode [ 2716.179952][ T9335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2716.239890][ T9335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2717.485288][ T9338] netlink: 84 bytes leftover after parsing attributes in process `syz.0.10403'. [ 2718.429605][ T9346] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2718.611502][ T9346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2718.668882][ T9346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2725.711485][ T9356] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2725.733882][ T9356] syzkaller1: linktype set to 823 [ 2725.976073][ T9366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2726.007551][ T9366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2726.318727][ T9376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2726.359051][ T9376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2726.393786][ T9376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2726.403222][ T9376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2726.698215][ T6056] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 2726.824048][ T9376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2726.834376][ T9376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2726.860184][ T6056] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2726.871689][ T6056] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2726.882897][ T6056] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2726.894133][ T6056] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2726.912852][ T6056] usb 8-1: config 0 descriptor?? [ 2727.256563][ T9381] bridge0: port 3(erspan0) entered blocking state [ 2727.266178][ T9381] bridge0: port 3(erspan0) entered disabled state [ 2727.273970][ T9381] erspan0: entered allmulticast mode [ 2727.283122][ T9381] erspan0: entered promiscuous mode [ 2727.290815][ T9381] bridge0: port 3(erspan0) entered blocking state [ 2727.297471][ T9381] bridge0: port 3(erspan0) entered forwarding state [ 2727.314141][ T9385] erspan0: left allmulticast mode [ 2727.319459][ T9385] erspan0: left promiscuous mode [ 2727.327431][ T9385] bridge0: port 3(erspan0) entered disabled state [ 2727.767075][ T6040] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2727.826715][ T9395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2727.842519][ T9395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2727.861146][ T9395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2727.879031][ T9395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2727.892224][ T9395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2727.911665][ T9395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2727.924457][ T6040] usb 4-1: Using ep0 maxpacket: 32 [ 2728.085517][ T6040] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2728.101429][ T6040] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2728.110453][ T6040] usb 4-1: can't read configurations, error -71 [ 2728.516222][ T9398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2728.538605][ T9398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2729.537504][ T6040] usb 8-1: USB disconnect, device number 9 [ 2730.708702][ T9423] syzkaller0: entered promiscuous mode [ 2730.778676][ T9423] syzkaller0: entered allmulticast mode [ 2731.242942][ T9429] tipc: Started in network mode [ 2731.258430][ T9429] tipc: Node identity ba118a32486b, cluster identity 4711 [ 2731.284631][ T9429] tipc: Enabled bearer , priority 0 [ 2731.309417][ T9431] syzkaller0: entered promiscuous mode [ 2731.347902][ T9431] syzkaller0: entered allmulticast mode [ 2731.389496][ T9429] tipc: Resetting bearer [ 2731.433138][ T9428] tipc: Resetting bearer [ 2731.561417][ T9428] tipc: Disabling bearer [ 2731.876240][ T9433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2731.930101][ T9433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2731.992536][ T9433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2732.030214][ T9433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2732.116011][ T9433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2732.150620][ T9433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2732.277255][ T6040] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 2732.448287][ T6040] usb 4-1: Using ep0 maxpacket: 32 [ 2732.901212][ T6040] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2732.933498][ T6040] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2732.953172][ T6040] usb 4-1: can't read configurations, error -71 [ 2732.976454][ T9442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2733.015800][ T9442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2733.032726][ T9445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2733.050451][ T9442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2733.060279][ T9445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2733.078403][ T9442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2733.107692][ T9442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2733.124701][ T9442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2734.170994][ T9464] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2734.257881][ T6056] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 2734.374584][ T9468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2734.406099][ T9468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2734.465086][ T9464] syzkaller1: linktype set to 823 [ 2734.502280][ T6056] usb 8-1: Using ep0 maxpacket: 32 [ 2734.535584][ T6056] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2734.680733][ T6056] usb 8-1: config 3 has an invalid interface number: 223 but max is 1 [ 2734.714332][ T6056] usb 8-1: config 3 has an invalid interface number: 25 but max is 1 [ 2734.749594][ T6056] usb 8-1: config 3 has an invalid interface number: 223 but max is 1 [ 2734.790451][ T6056] usb 8-1: config 3 has no interface number 0 [ 2734.823605][ T6056] usb 8-1: config 3 has no interface number 1 [ 2734.864582][ T6056] usb 8-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 2734.911777][ T6056] usb 8-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30 [ 2734.976056][ T6056] usb 8-1: config 3 interface 223 altsetting 155 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 2735.045840][ T6056] usb 8-1: config 3 interface 223 has no altsetting 1 [ 2735.076747][ T6056] usb 8-1: config 3 interface 25 has no altsetting 0 [ 2735.094453][ T6056] usb 8-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 2735.104849][ T6056] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2735.123395][ T6056] usb 8-1: Product: ۪춱奈ꅄ㛃핪ἀ淾ᒌ܀쥓ꨇ喱柹皞旁㗽艔倥㺰ﬖ実ፄ紁︃膆㻿䉊ִ靅䰵雏쫁噄㵝譑༰䃮৲䒽ᚤ [ 2735.162121][ T6056] usb 8-1: Manufacturer: 昷⧍钩髱ձ깲㗝꠭ş鎶ӌ⩢㪭律髪텟热啺ꤷ☉㠬懥厧좚됓ᤆ셦닑鶔ꔎ歂쒢壡൨뵊﹄꬝ò [ 2735.195310][ T6056] usb 8-1: SerialNumber: syz [ 2735.209707][ T9466] bridge0: port 1(erspan0) entered blocking state [ 2735.235823][ T9466] bridge0: port 1(erspan0) entered disabled state [ 2735.264125][ T9466] erspan0: entered allmulticast mode [ 2735.291671][ T9466] erspan0: entered promiscuous mode [ 2735.317422][ T9473] erspan0: left allmulticast mode [ 2735.330464][ T9473] erspan0: left promiscuous mode [ 2735.348520][ T9473] bridge0: port 1(erspan0) entered disabled state [ 2735.934477][ T9476] tipc: Enabled bearer , priority 0 [ 2735.963710][ T9476] syzkaller0: entered promiscuous mode [ 2735.989746][ T9476] syzkaller0: entered allmulticast mode [ 2736.022623][ T9476] tipc: Resetting bearer [ 2736.052387][ T9475] tipc: Resetting bearer [ 2736.114296][ T9475] tipc: Disabling bearer [ 2736.381631][ T9478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2736.423446][ T9478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2736.465762][ T9478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2736.492422][ T9478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2736.529219][ T9478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2736.563411][ T9478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2737.182633][ T6056] usb 8-1: USB disconnect, device number 10 [ 2737.781490][ T6056] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 2737.835155][ T9492] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 2737.841750][ T9492] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2737.850733][ T9492] vhci_hcd vhci_hcd.0: Device attached [ 2737.981301][ T6056] usb 8-1: Using ep0 maxpacket: 8 [ 2738.078959][ T6056] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2738.100161][ T6056] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2738.157159][ T6040] usb 50-1: SetAddress Request (58) to port 0 [ 2738.158198][ T6056] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2738.199556][ T6040] usb 50-1: new SuperSpeed USB device number 58 using vhci_hcd [ 2738.309749][ T6056] usb 8-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 2738.320393][ T9494] vhci_hcd: connection reset by peer [ 2738.346770][ T3499] vhci_hcd vhci_hcd.8: stop threads [ 2738.362940][ T3499] vhci_hcd vhci_hcd.8: release socket [ 2738.369571][ T6056] usb 8-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 2738.416172][ T3499] vhci_hcd vhci_hcd.8: disconnect device [ 2738.432537][ T6056] usb 8-1: Product: syz [ 2738.476681][ T6056] usb 8-1: Manufacturer: syz [ 2738.502009][ T6056] usb 8-1: SerialNumber: syz [ 2738.540068][ T6056] usb 8-1: config 0 descriptor?? [ 2738.583342][ T6056] imon_raw 8-1:0.0: IR endpoint missing [ 2740.314866][ T6046] usb 8-1: USB disconnect, device number 11 [ 2740.653360][ T9514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2740.679604][ T9514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2740.717328][T24695] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2740.857077][ T6046] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 2740.880933][T24695] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2740.905938][T24695] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2740.940190][T24695] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2740.967686][T24695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2741.000189][T24695] usb 4-1: config 0 descriptor?? [ 2741.070399][ T6046] usb 8-1: Using ep0 maxpacket: 32 [ 2741.097805][ T6046] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2741.125884][ T6046] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2741.153721][ T6046] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2741.191321][ T6046] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2741.233436][ T6046] usb 8-1: config 0 descriptor?? [ 2741.299842][ T6046] hub 8-1:0.0: USB hub found [ 2741.509731][ T6046] hub 8-1:0.0: 1 port detected [ 2742.216442][ T6046] hub 8-1:0.0: activate --> -90 [ 2742.861552][T32141] usb 8-1: USB disconnect, device number 12 [ 2742.861577][ T6046] usb 8-1-port1: config error [ 2743.279079][ T9546] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2743.303886][ T9546] syzkaller1: linktype set to 823 [ 2743.309373][ T6040] usb 50-1: device descriptor read/8, error -110 [ 2743.339929][ T9548] syzkaller0: entered promiscuous mode [ 2743.348732][ T9548] syzkaller0: entered allmulticast mode [ 2743.375100][ T9548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2743.396577][ T9548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2743.492306][T32141] usb 4-1: USB disconnect, device number 34 [ 2743.543739][ T30] audit: type=1326 audit(1782882995.778:14544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.9.10454" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bfd9de59 code=0x7ffc0000 [ 2743.724414][ T30] audit: type=1326 audit(1782882995.808:14545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.9.10454" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bfd9de59 code=0x7ffc0000 [ 2743.760079][ T6040] usb usb50-port1: attempt power cycle [ 2743.848810][ T30] audit: type=1326 audit(1782882995.808:14546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.9.10454" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bfd9de59 code=0x7ffc0000 [ 2743.899080][ T9552] syzkaller0: entered promiscuous mode [ 2743.911212][ T9552] syzkaller0: entered allmulticast mode [ 2743.950007][ T30] audit: type=1326 audit(1782882995.808:14547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.9.10454" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f29bfd9de59 code=0x7ffc0000 [ 2744.046414][ T30] audit: type=1326 audit(1782882996.078:14548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.9.10454" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f29bfd5e68e code=0x7ffc0000 [ 2744.068568][T32141] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 2744.141138][ T30] audit: type=1326 audit(1782882996.178:14549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.9.10454" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f29bfd5e68e code=0x7ffc0000 [ 2744.245512][T32141] usb 4-1: device descriptor read/64, error -71 [ 2744.287019][ T30] audit: type=1326 audit(1782882996.278:14550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.9.10454" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f29bfd5e68e code=0x7ffc0000 [ 2744.355924][ T30] audit: type=1326 audit(1782882996.378:14551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.9.10454" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f29bfd5e68e code=0x7ffc0000 [ 2744.394242][ T6040] usb usb50-port1: unable to enumerate USB device [ 2744.424758][ T30] audit: type=1326 audit(1782882996.478:14552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.9.10454" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f29bfd5e68e code=0x7ffc0000 [ 2744.459388][ T30] audit: type=1326 audit(1782882996.638:14553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.9.10454" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f29bfd9de59 code=0x7ffc0000 [ 2744.588418][T32141] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 2744.739889][T32141] usb 4-1: device descriptor read/64, error -71 [ 2744.848303][T32141] usb usb4-port1: attempt power cycle [ 2744.948410][T32140] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 2745.124792][ T9564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2745.148223][ T9564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2745.181678][ T9564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2745.199385][T32141] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 2745.223971][ T9564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2745.230878][T32141] usb 4-1: device descriptor read/8, error -71 [ 2745.478502][T32141] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 2745.510443][T32141] usb 4-1: device descriptor read/8, error -71 [ 2745.638917][T32141] usb usb4-port1: unable to enumerate USB device [ 2745.907932][T32140] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2745.943979][T32140] usb 8-1: no configurations [ 2745.959044][T32140] usb 8-1: can't read configurations, error -22 [ 2746.966669][ T9581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2746.982456][ T9581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2747.018366][T32140] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 2747.180491][T32140] usb 8-1: Using ep0 maxpacket: 32 [ 2747.193670][T32140] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2747.219014][T32141] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2747.244834][T32140] usb 8-1: config 3 has an invalid interface number: 223 but max is 1 [ 2747.261236][T32140] usb 8-1: config 3 has an invalid interface number: 25 but max is 1 [ 2747.273817][T32140] usb 8-1: config 3 has an invalid interface number: 223 but max is 1 [ 2747.286215][T32140] usb 8-1: config 3 has no interface number 0 [ 2747.295179][T32140] usb 8-1: config 3 has no interface number 1 [ 2747.304920][T32140] usb 8-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 2747.321281][T32140] usb 8-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30 [ 2747.340762][ T9587] syzkaller0: entered promiscuous mode [ 2747.346508][ T9587] syzkaller0: entered allmulticast mode [ 2747.354023][T32140] usb 8-1: config 3 interface 223 altsetting 155 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 2747.382949][T32140] usb 8-1: config 3 interface 223 has no altsetting 1 [ 2747.391613][T32141] usb 4-1: Using ep0 maxpacket: 8 [ 2747.410383][T32141] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2747.425868][ T9587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2747.438928][T32140] usb 8-1: config 3 interface 25 has no altsetting 0 [ 2747.450367][T32141] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2747.464875][T32141] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2747.479311][ T9587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2747.490742][T32140] usb 8-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 2747.503790][T32140] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2747.515119][T32141] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2747.530665][T32140] usb 8-1: Product: ۪춱奈ꅄ㛃핪ἀ淾ᒌ܀쥓ꨇ喱柹皞旁㗽艔倥㺰ﬖ実ፄ紁︃膆㻿䉊ִ靅䰵雏쫁噄㵝譑༰䃮৲䒽ᚤ [ 2747.550588][T32141] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2747.563273][T32140] usb 8-1: Manufacturer: 昷⧍钩髱ձ깲㗝꠭ş鎶ӌ⩢㪭律髪텟热啺ꤷ☉㠬懥厧좚됓ᤆ셦닑鶔ꔎ歂쒢壡൨뵊﹄꬝ò [ 2747.581079][T32141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2747.598988][T32140] usb 8-1: SerialNumber: syz [ 2747.792857][ T9590] fuse: Bad value for 'fd' [ 2747.834108][T32141] usb 4-1: GET_CAPABILITIES returned 0 [ 2747.843444][T32141] usbtmc 4-1:16.0: can't read capabilities [ 2748.002060][T32140] usb 8-1: USB disconnect, device number 14 [ 2748.105086][T32141] usb 4-1: USB disconnect, device number 39 [ 2748.235909][ T9592] syzkaller0: entered promiscuous mode [ 2748.247186][ T9592] syzkaller0: entered allmulticast mode [ 2748.356600][ T9592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2748.413170][ T9592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2748.996241][ T9601] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2749.024206][ T9601] syzkaller1: linktype set to 823 [ 2749.764133][ T9609] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 2749.770719][ T9609] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2749.872243][ T9609] vhci_hcd vhci_hcd.0: Device attached [ 2750.076208][ T6040] usb 40-1: SetAddress Request (22) to port 0 [ 2750.084638][ T6040] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd [ 2750.551320][ T9610] vhci_hcd: connection reset by peer [ 2750.584466][ T3509] vhci_hcd vhci_hcd.3: stop threads [ 2750.591858][ T3509] vhci_hcd vhci_hcd.3: release socket [ 2750.664334][ T3509] vhci_hcd vhci_hcd.3: disconnect device [ 2750.846573][ T9617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2750.915212][ T9617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2751.044985][ T9617] netlink: 56 bytes leftover after parsing attributes in process `syz.9.10474'. [ 2751.737190][ T9620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2751.759221][ T9620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2751.810452][ T9620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2751.858377][ T9620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2751.903364][ T9620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2751.972857][ T9620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2752.313026][ T9626] tipc: Enabled bearer , priority 0 [ 2752.336022][ T9626] syzkaller0: entered promiscuous mode [ 2752.356203][ T9626] syzkaller0: entered allmulticast mode [ 2752.389410][ T9626] tipc: Resetting bearer [ 2752.425182][ T9625] tipc: Resetting bearer [ 2752.523134][ T9625] tipc: Disabling bearer [ 2752.682974][ T9630] syzkaller0: entered promiscuous mode [ 2752.693778][ T9630] syzkaller0: entered allmulticast mode [ 2752.789711][T32141] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2752.950448][T32141] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2752.963118][T32141] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2752.977069][ T6047] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 2752.983584][T32141] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2753.011924][T32141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2753.038760][T32141] usb 4-1: config 0 descriptor?? [ 2753.135802][ T6047] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2753.153104][ T6047] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2753.180144][ T6047] usb 8-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 2753.190041][ T6047] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2753.204886][ T6047] usb 8-1: Product: syz [ 2753.214234][ T6047] usb 8-1: Manufacturer: syz [ 2753.221878][ T6047] usb 8-1: SerialNumber: syz [ 2753.531725][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 2753.531755][ T30] audit: type=1326 audit(1782883005.768:14565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9629 comm="syz.7.10480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6d9de59 code=0x7ffc0000 [ 2753.593039][ T6047] usb 8-1: 0:1 : does not exist [ 2753.636299][ T6047] usb 8-1: unit 4 not found! [ 2753.649871][ T6047] usb 8-1: unit 80 not found! [ 2753.663605][ T30] audit: type=1326 audit(1782883005.798:14566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9629 comm="syz.7.10480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd2c6d9de59 code=0x7ffc0000 [ 2753.784646][ T30] audit: type=1326 audit(1782883005.768:14564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9629 comm="syz.7.10480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6d9de59 code=0x7ffc0000 [ 2753.874093][ T6047] usb 8-1: USB disconnect, device number 15 [ 2753.896935][ T30] audit: type=1326 audit(1782883005.808:14567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9629 comm="syz.7.10480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6d9de59 code=0x7ffc0000 [ 2753.980919][ T30] audit: type=1326 audit(1782883006.068:14568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9629 comm="syz.7.10480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c6d5e68e code=0x7ffc0000 [ 2754.112745][ T30] audit: type=1326 audit(1782883006.188:14569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9629 comm="syz.7.10480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c6d5e68e code=0x7ffc0000 [ 2754.251697][ T30] audit: type=1326 audit(1782883006.288:14570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9629 comm="syz.7.10480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c6d5e68e code=0x7ffc0000 [ 2754.323134][ T30] audit: type=1326 audit(1782883006.398:14571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9629 comm="syz.7.10480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c6d5e68e code=0x7ffc0000 [ 2754.391476][ T30] audit: type=1326 audit(1782883006.538:14572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9629 comm="syz.7.10480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c6d5e68e code=0x7ffc0000 [ 2754.483150][ T30] audit: type=1326 audit(1782883006.668:14573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9629 comm="syz.7.10480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd2c6d9de59 code=0x7ffc0000 [ 2754.664601][ T9648] syzkaller0: entered promiscuous mode [ 2754.686994][ T9648] syzkaller0: entered allmulticast mode [ 2755.037239][ T6047] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 2755.210949][ T6047] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2755.227159][ T6040] usb 40-1: device descriptor read/8, error -110 [ 2755.236127][ T6047] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2755.272242][ T6047] usb 8-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 2755.297837][ T6047] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2755.321069][ T6047] usb 8-1: Product: syz [ 2755.331879][ T6047] usb 8-1: Manufacturer: syz [ 2755.349166][ T6047] usb 8-1: SerialNumber: syz [ 2755.493265][ T9656] syzkaller0: entered promiscuous mode [ 2755.507024][ T9656] syzkaller0: entered allmulticast mode [ 2755.600214][ T6056] usb 4-1: USB disconnect, device number 40 [ 2755.618339][ T6040] usb usb40-port1: attempt power cycle [ 2756.039509][ T6056] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2756.199076][ T6040] usb usb40-port1: unable to enumerate USB device [ 2756.233117][ T6056] usb 4-1: Using ep0 maxpacket: 32 [ 2756.260446][ T6056] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2756.290106][ T6056] usb 4-1: config 3 has an invalid interface number: 223 but max is 1 [ 2756.326656][ T6056] usb 4-1: config 3 has an invalid interface number: 25 but max is 1 [ 2756.362159][ T6056] usb 4-1: config 3 has no interface number 0 [ 2756.383575][ T6056] usb 4-1: config 3 has no interface number 1 [ 2756.410432][ T6056] usb 4-1: config 3 interface 25 has no altsetting 0 [ 2756.431692][ T6056] usb 4-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 2756.455108][ T6056] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2756.489602][ T6056] usb 4-1: Product: syz [ 2756.504387][ T6056] usb 4-1: Manufacturer: syz [ 2756.535461][ T6056] usb 4-1: SerialNumber: syz [ 2756.737449][ T6047] usb 8-1: 0:1 : does not exist [ 2756.770025][ T6047] usb 8-1: unit 4 not found! [ 2756.796458][ T6047] usb 8-1: unit 80 not found! [ 2756.832692][ T9666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2756.853095][ T9666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2757.094266][ T6047] usb 8-1: USB disconnect, device number 16 [ 2757.216360][ T9664] udevd[9664]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2757.481634][ T6056] usb 4-1: USB disconnect, device number 41 [ 2759.315644][ T9685] syzkaller0: entered promiscuous mode [ 2759.343495][ T9685] syzkaller0: entered allmulticast mode [ 2759.687112][ T6046] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2759.912176][ T6046] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2759.964095][ T6046] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2760.072129][ T6046] usb 4-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 2760.091549][ T6046] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2760.142684][ T6046] usb 4-1: Product: syz [ 2760.151894][ T6046] usb 4-1: Manufacturer: syz [ 2760.161792][ T6046] usb 4-1: SerialNumber: syz [ 2760.197002][ T6047] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 2760.418121][ T6047] usb 8-1: Using ep0 maxpacket: 8 [ 2760.426197][ T6047] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2760.452584][ T6047] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2760.508528][ T30] audit: type=1326 audit(1782883012.728:14574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9684 comm="syz.3.10494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12fb79de59 code=0x7ffc0000 [ 2760.546364][ T6047] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2760.570178][ T6046] usb 4-1: 0:1 : does not exist [ 2760.586449][ T6047] usb 8-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 2760.600165][ T6046] usb 4-1: unit 4 not found! [ 2760.617791][ T6046] usb 4-1: unit 80 not found! [ 2760.623197][ T6047] usb 8-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 2760.634248][ T30] audit: type=1326 audit(1782883012.728:14575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9684 comm="syz.3.10494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12fb79de59 code=0x7ffc0000 [ 2760.673609][ T6047] usb 8-1: Product: syz [ 2760.685954][ T6047] usb 8-1: Manufacturer: syz [ 2760.699360][ T6047] usb 8-1: SerialNumber: syz [ 2760.815067][ T6047] usb 8-1: config 0 descriptor?? [ 2760.825672][ T30] audit: type=1326 audit(1782883012.768:14576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9684 comm="syz.3.10494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12fb79de59 code=0x7ffc0000 [ 2760.869197][ T6046] usb 4-1: USB disconnect, device number 42 [ 2760.881828][ T6047] imon_raw 8-1:0.0: IR endpoint missing [ 2760.970436][ T30] audit: type=1326 audit(1782883012.768:14577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9684 comm="syz.3.10494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f12fb79de59 code=0x7ffc0000 [ 2761.135648][ T30] audit: type=1326 audit(1782883013.368:14578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9684 comm="syz.3.10494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f12fb75e68e code=0x7ffc0000 [ 2761.232610][ T30] audit: type=1326 audit(1782883013.468:14579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9684 comm="syz.3.10494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f12fb75e68e code=0x7ffc0000 [ 2761.348861][ T30] audit: type=1326 audit(1782883013.568:14580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9684 comm="syz.3.10494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f12fb75e68e code=0x7ffc0000 [ 2761.449688][ T30] audit: type=1326 audit(1782883013.668:14581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9684 comm="syz.3.10494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f12fb75e68e code=0x7ffc0000 [ 2761.542447][ T30] audit: type=1326 audit(1782883013.768:14582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9684 comm="syz.3.10494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f12fb75e68e code=0x7ffc0000 [ 2761.675522][ T30] audit: type=1326 audit(1782883013.868:14583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9684 comm="syz.3.10494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f12fb79de59 code=0x7ffc0000 [ 2762.838208][ T6046] usb 8-1: USB disconnect, device number 17 [ 2765.324523][ T9736] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10506'. [ 2765.583101][ T9736] bridge0: port 2(bridge_slave_1) entered disabled state [ 2765.590489][ T9736] bridge0: port 1(bridge_slave_0) entered disabled state [ 2766.171628][ T9736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2766.203678][ T9736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2766.881484][ T9738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2766.905535][ T9738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2767.210007][ T3509] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2767.248855][ T3509] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2767.281144][ T3509] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2767.303710][ T3509] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2767.519299][ T9753] syzkaller0: entered promiscuous mode [ 2767.530367][ T9753] syzkaller0: entered allmulticast mode [ 2769.078949][ T6056] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2769.237843][ T6056] usb 4-1: Using ep0 maxpacket: 8 [ 2769.252262][ T6056] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2769.283594][ T6056] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2769.335092][ T6056] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2769.378835][ T6056] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2769.404800][ T6056] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2769.432654][ T6056] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2769.604853][ T9761] netlink: 84 bytes leftover after parsing attributes in process `syz.9.10513'. [ 2769.676306][ T6056] usb 4-1: GET_CAPABILITIES returned 0 [ 2769.683489][ T6056] usbtmc 4-1:16.0: can't read capabilities [ 2769.916834][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2769.964589][T32141] usb 4-1: USB disconnect, device number 43 [ 2771.271815][ T9776] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2771.316546][ T9779] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10519'. [ 2771.623001][ T9786] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2771.645245][ T9786] syzkaller1: linktype set to 823 [ 2774.958856][ T6047] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 2775.069233][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.076454][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.141262][ T6047] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2775.172886][ T6047] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2775.211213][ T6047] usb 8-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 2775.255357][ T6047] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2775.287397][ T6047] usb 8-1: Product: syz [ 2775.304895][ T6047] usb 8-1: Manufacturer: syz [ 2775.305488][ T9814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2775.334243][ T6047] usb 8-1: SerialNumber: syz [ 2775.344451][ T9814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2775.465601][ T9818] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10532'. [ 2775.671424][ T30] audit: type=1326 audit(1782883027.898:14584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9805 comm="syz.7.10526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6d9de59 code=0x7ffc0000 [ 2775.731660][ T6047] usb 8-1: 0:1 : does not exist [ 2775.737321][ T6047] usb 8-1: unit 4 not found! [ 2775.742067][ T30] audit: type=1326 audit(1782883027.908:14585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9805 comm="syz.7.10526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6d9de59 code=0x7ffc0000 [ 2775.766770][ T6047] usb 8-1: unit 80 not found! [ 2775.804360][ T30] audit: type=1326 audit(1782883027.908:14586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9805 comm="syz.7.10526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd2c6d9de59 code=0x7ffc0000 [ 2775.872084][ T6047] usb 8-1: USB disconnect, device number 18 [ 2775.921852][ T30] audit: type=1326 audit(1782883028.158:14587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9805 comm="syz.7.10526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c6d5e68e code=0x7ffc0000 [ 2775.984261][ T9664] udevd[9664]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2776.022087][ T30] audit: type=1326 audit(1782883028.258:14588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9805 comm="syz.7.10526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c6d5e68e code=0x7ffc0000 [ 2776.122674][ T30] audit: type=1326 audit(1782883028.358:14589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9805 comm="syz.7.10526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c6d5e68e code=0x7ffc0000 [ 2776.224160][ T30] audit: type=1326 audit(1782883028.458:14590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9805 comm="syz.7.10526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c6d5e68e code=0x7ffc0000 [ 2776.324552][ T30] audit: type=1326 audit(1782883028.558:14591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9805 comm="syz.7.10526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c6d5e68e code=0x7ffc0000 [ 2776.434864][ T30] audit: type=1326 audit(1782883028.658:14592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9805 comm="syz.7.10526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd2c6d9de59 code=0x7ffc0000 [ 2776.583821][ T9830] tipc: Enabled bearer , priority 0 [ 2776.606037][ T9830] syzkaller0: entered promiscuous mode [ 2776.625241][ T9830] syzkaller0: entered allmulticast mode [ 2776.655075][ T9830] tipc: Resetting bearer [ 2776.672619][ T9829] tipc: Resetting bearer [ 2776.789630][ T9829] tipc: Disabling bearer [ 2780.183862][ T9863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2780.203240][ T9863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2780.276933][ T6047] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 2780.446953][ T6047] usb 8-1: Using ep0 maxpacket: 32 [ 2780.473097][ T6047] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2780.491226][ T6047] usb 8-1: config 3 has an invalid interface number: 223 but max is 1 [ 2780.530470][ T6047] usb 8-1: config 3 has an invalid interface number: 25 but max is 1 [ 2780.560243][ T6047] usb 8-1: config 3 has an invalid interface number: 223 but max is 1 [ 2780.596629][ T6047] usb 8-1: config 3 has no interface number 0 [ 2780.616947][ T6047] usb 8-1: config 3 has no interface number 1 [ 2780.649149][ T6047] usb 8-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 2780.683455][ T6047] usb 8-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30 [ 2780.726759][ T6047] usb 8-1: config 3 interface 223 altsetting 155 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 2780.765113][ T6047] usb 8-1: config 3 interface 223 has no altsetting 1 [ 2780.783583][ T6047] usb 8-1: config 3 interface 25 has no altsetting 0 [ 2780.809030][ T6047] usb 8-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 2780.825652][ T6047] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2780.847320][ T6047] usb 8-1: Product: ۪춱奈ꅄ㛃핪ἀ淾ᒌ܀쥓ꨇ喱柹皞旁㗽艔倥㺰ﬖ実ፄ紁︃膆㻿䉊ִ靅䰵雏쫁噄㵝譑༰䃮৲䒽ᚤ [ 2780.882761][ T6047] usb 8-1: Manufacturer: 昷⧍钩髱ձ깲㗝꠭ş鎶ӌ⩢㪭律髪텟热啺ꤷ☉㠬懥厧좚됓ᤆ셦닑鶔ꔎ歂쒢壡൨뵊﹄꬝ò [ 2780.936683][ T6047] usb 8-1: SerialNumber: syz [ 2781.142320][ T9867] tipc: Enabled bearer , priority 0 [ 2781.163266][ T9869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2781.185784][ T9867] syzkaller0: entered promiscuous mode [ 2781.195105][ T9869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2781.214921][ T9867] syzkaller0: entered allmulticast mode [ 2781.230154][ T9869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2781.271325][ T9869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2781.281787][ T9867] tipc: Resetting bearer [ 2781.298658][ T9866] tipc: Resetting bearer [ 2781.363328][ T9869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2781.375203][ T9866] tipc: Disabling bearer [ 2781.403614][ T9869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2781.902024][ T9879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2782.447039][T30266] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 2782.637035][ T9884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2782.649972][ T9884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2782.690011][ T9884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2782.731380][ T9884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2783.175970][ T6047] usb 8-1: USB disconnect, device number 19 [ 2783.365910][T30266] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2783.407219][T30266] usb 4-1: no configurations [ 2783.422405][T30266] usb 4-1: can't read configurations, error -22 [ 2783.779281][ T6047] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 2783.961420][ T6047] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2783.972307][ T6047] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2783.992560][ T6047] usb 8-1: Product: syz [ 2783.997402][ T6047] usb 8-1: Manufacturer: syz [ 2784.002338][ T6047] usb 8-1: SerialNumber: syz [ 2784.042914][ T6047] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2784.071047][ T6040] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2784.496994][T30266] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2784.637068][T30266] usb 4-1: device descriptor read/64, error -71 [ 2784.768791][T30266] usb usb4-port1: attempt power cycle [ 2785.127308][T30266] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2785.148113][ T6040] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 2785.168776][ T6040] ath9k_htc: Failed to initialize the device [ 2785.188215][T30266] usb 4-1: device descriptor read/8, error -71 [ 2785.220495][ T6040] usb 8-1: ath9k_htc: USB layer deinitialized [ 2785.427215][T30266] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2785.463058][T30266] usb 4-1: device descriptor read/8, error -71 [ 2785.591114][T30266] usb usb4-port1: unable to enumerate USB device [ 2785.800916][ T9908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2785.817377][ T9908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2786.314029][ T9914] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2786.336131][ T9914] syzkaller1: linktype set to 823 [ 2786.568472][T32141] usb 8-1: USB disconnect, device number 20 [ 2786.802830][ T9918] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2786.810780][ T9918] syzkaller1: linktype set to 823 [ 2789.721638][ T9936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2789.778356][ T9936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2789.885899][ T30] audit: type=1326 audit(1782883042.118:14593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9935 comm="syz.9.10565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bfd9de59 code=0x7ffc0000 [ 2789.999369][ T30] audit: type=1326 audit(1782883042.118:14595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9935 comm="syz.9.10565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bfd9de59 code=0x7ffc0000 [ 2790.082534][ T30] audit: type=1326 audit(1782883042.118:14596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9935 comm="syz.9.10565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f29bfd9de59 code=0x7ffc0000 [ 2790.175142][ T30] audit: type=1326 audit(1782883042.118:14594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9935 comm="syz.9.10565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bfd9de59 code=0x7ffc0000 [ 2791.249669][ T30] audit: type=1326 audit(1782883043.488:14597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9935 comm="syz.9.10565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f29bfd5e68e code=0x7ffc0000 [ 2791.359896][ T30] audit: type=1326 audit(1782883043.588:14598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9935 comm="syz.9.10565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f29bfd5e68e code=0x7ffc0000 [ 2791.489674][ T30] audit: type=1326 audit(1782883043.688:14599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9935 comm="syz.9.10565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f29bfd5e68e code=0x7ffc0000 [ 2791.599992][ T30] audit: type=1326 audit(1782883043.788:14600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9935 comm="syz.9.10565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f29bfd5e68e code=0x7ffc0000 [ 2791.671050][ T30] audit: type=1326 audit(1782883043.888:14601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9935 comm="syz.9.10565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f29bfd5e68e code=0x7ffc0000 [ 2791.696981][ T6040] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 2791.774822][ T30] audit: type=1326 audit(1782883043.988:14602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9935 comm="syz.9.10565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f29bfd9de59 code=0x7ffc0000 [ 2791.857025][ T9939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2791.887618][ T9939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2791.923925][ T9939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2791.963453][ T9941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2791.973127][ T9939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2792.047537][ T9941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2792.688341][T30266] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2792.857265][T30266] usb 4-1: Using ep0 maxpacket: 32 [ 2792.884361][T30266] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2792.907943][T30266] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2792.949093][T30266] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2792.960574][T30266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2793.016768][T30266] usb 4-1: config 0 descriptor?? [ 2793.084044][T30266] hub 4-1:0.0: bad descriptor, ignoring hub [ 2793.118705][T30266] hub 4-1:0.0: probe with driver hub failed with error -5 [ 2793.156006][T30266] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2794.556543][ T6040] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2794.594088][ T6040] usb 8-1: no configurations [ 2794.621718][ T6040] usb 8-1: can't read configurations, error -22 [ 2795.068686][ T6040] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 2795.216946][ T6040] usb 8-1: device descriptor read/64, error -71 [ 2795.349919][ T6040] usb usb8-port1: attempt power cycle [ 2795.716981][ T6040] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 2795.758700][ T6040] usb 8-1: device descriptor read/8, error -71 [ 2796.027362][ T6040] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 2796.080427][ T6040] usb 8-1: device descriptor read/8, error -71 [ 2796.138267][T32141] usb 4-1: USB disconnect, device number 48 [ 2796.213803][ T6040] usb usb8-port1: unable to enumerate USB device [ 2798.013924][ T9973] syzkaller0: entered promiscuous mode [ 2798.039058][ T9973] syzkaller0: entered allmulticast mode [ 2798.274157][ T9979] netlink: 44 bytes leftover after parsing attributes in process `syz.8.10578'. [ 2798.417210][ T6040] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2798.588879][ T6040] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2798.608116][ T6040] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2798.639177][ T6040] usb 4-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 2798.652428][ T6040] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2798.678585][ T6040] usb 4-1: Product: syz [ 2798.684128][ T6040] usb 4-1: Manufacturer: syz [ 2798.690235][ T6040] usb 4-1: SerialNumber: syz [ 2798.785057][ T9985] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2798.851442][ T9985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2798.904954][ T9985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2798.980060][ T30] audit: type=1326 audit(1782883051.218:14603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.3.10577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12fb79de59 code=0x7ffc0000 [ 2799.091724][ T30] audit: type=1326 audit(1782883051.218:14604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.3.10577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f12fb75e68e code=0x7ffc0000 [ 2799.098954][ T6040] usb 4-1: 0:1 : does not exist [ 2799.181427][ T6040] usb 4-1: unit 4 not found! [ 2799.200400][ T6040] usb 4-1: unit 80 not found! [ 2799.239695][ T30] audit: type=1326 audit(1782883051.248:14605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.3.10577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f12fb75e68e code=0x7ffc0000 [ 2799.350371][ T30] audit: type=1326 audit(1782883051.258:14606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.3.10577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f12fb75e68e code=0x7ffc0000 [ 2799.443976][ T6040] usb 4-1: USB disconnect, device number 49 [ 2799.465791][ T30] audit: type=1326 audit(1782883051.258:14607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.3.10577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f12fb75e68e code=0x7ffc0000 [ 2799.606709][ T30] audit: type=1326 audit(1782883051.258:14608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.3.10577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f12fb75e68e code=0x7ffc0000 [ 2799.645661][ T9664] udevd[9664]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2799.693868][ T30] audit: type=1326 audit(1782883051.258:14609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.3.10577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f12fb75e68e code=0x7ffc0000 [ 2799.760398][ T30] audit: type=1326 audit(1782883051.258:14611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.3.10577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f12fb75e68e code=0x7ffc0000 [ 2799.829002][ T30] audit: type=1326 audit(1782883051.258:14610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.3.10577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12fb79de59 code=0x7ffc0000 [ 2799.910799][ T30] audit: type=1326 audit(1782883051.268:14612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.3.10577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12fb79de59 code=0x7ffc0000 [ 2800.256928][ T6040] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2800.433322][ T6040] usb 4-1: Using ep0 maxpacket: 32 [ 2800.453790][ T6040] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2800.468457][ T6040] usb 4-1: config 3 has an invalid interface number: 223 but max is 1 [ 2800.482390][ T6040] usb 4-1: config 3 has an invalid interface number: 25 but max is 1 [ 2800.499930][ T6040] usb 4-1: config 3 has an invalid interface number: 223 but max is 1 [ 2800.514914][ T6040] usb 4-1: config 3 has no interface number 0 [ 2800.523529][ T6040] usb 4-1: config 3 has no interface number 1 [ 2800.532950][ T6040] usb 4-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 2800.549045][ T6040] usb 4-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30 [ 2800.568308][ T6040] usb 4-1: config 3 interface 223 altsetting 155 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 2800.593265][ T6040] usb 4-1: config 3 interface 223 has no altsetting 1 [ 2800.607874][ T6040] usb 4-1: config 3 interface 25 has no altsetting 0 [ 2800.621132][ T6040] usb 4-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 2800.631598][ T6040] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2800.645135][ T6040] usb 4-1: Product: ۪춱奈ꅄ㛃핪ἀ淾ᒌ܀쥓ꨇ喱柹皞旁㗽艔倥㺰ﬖ実ፄ紁︃膆㻿䉊ִ靅䰵雏쫁噄㵝譑༰䃮৲䒽ᚤ [ 2800.675771][ T6040] usb 4-1: Manufacturer: 昷⧍钩髱ձ깲㗝꠭ş鎶ӌ⩢㪭律髪텟热啺ꤷ☉㠬懥厧좚됓ᤆ셦닑鶔ꔎ歂쒢壡൨뵊﹄꬝ò [ 2800.700551][ T6040] usb 4-1: SerialNumber: syz [ 2800.857372][ T9988] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10581'. [ 2800.869004][ T9988] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10581'. [ 2801.414741][ T6040] usb 4-1: USB disconnect, device number 50 [ 2801.996912][ T6040] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 2802.559006][T10007] tipc: Enabled bearer , priority 0 [ 2802.572445][T10007] syzkaller0: entered promiscuous mode [ 2802.580045][T10007] syzkaller0: entered allmulticast mode [ 2802.601873][T10007] tipc: Resetting bearer [ 2802.616135][T10006] tipc: Resetting bearer [ 2802.684721][T10006] tipc: Disabling bearer [ 2803.049077][ T6040] usb 8-1: device descriptor read/64, error -71 [ 2803.326982][ T6040] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 2803.487196][ T6040] usb 8-1: Using ep0 maxpacket: 32 [ 2803.502767][ T6040] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2803.519272][ T6040] usb 8-1: config 3 has an invalid interface number: 223 but max is 1 [ 2803.538291][ T6040] usb 8-1: config 3 has an invalid interface number: 25 but max is 1 [ 2803.563910][ T6040] usb 8-1: config 3 has no interface number 0 [ 2803.583746][ T6040] usb 8-1: config 3 has no interface number 1 [ 2803.598646][ T6040] usb 8-1: config 3 interface 25 has no altsetting 0 [ 2803.618280][ T6040] usb 8-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 2803.628124][ T6040] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2803.636317][ T6040] usb 8-1: Manufacturer: 昷⧍钩髱ձ깲㗝꠭ş鎶ӌ⩢㪭律髪텟热啺ꤷ☉㠬懥厧좚됓ᤆ셦닑鶔ꔎ歂쒢壡൨뵊﹄꬝ò [ 2803.652368][ T6040] usb 8-1: SerialNumber: syz [ 2803.898810][T10011] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10589'. [ 2803.932894][T10011] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10589'. [ 2804.067933][T10011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2804.079536][T10011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2804.456950][T24695] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2804.621177][T24695] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2804.660592][T24695] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2804.688566][T24695] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2804.738775][T24695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2804.761189][T24695] usb 4-1: config 0 descriptor?? [ 2805.673082][ T6040] usb 8-1: USB disconnect, device number 26 [ 2805.776288][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10596'. [ 2805.811688][T10038] netlink: 'syz.7.10596': attribute type 10 has an invalid length. [ 2805.841595][T10038] netlink: 32 bytes leftover after parsing attributes in process `syz.7.10596'. [ 2806.268515][ T6040] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 2806.365123][T10042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2806.401614][T10042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2806.436975][ T6040] usb 8-1: Using ep0 maxpacket: 32 [ 2806.452548][ T6040] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2806.476649][ T6040] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2806.526510][ T6040] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2806.552101][ T6040] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2806.601697][ T6040] usb 8-1: config 0 descriptor?? [ 2806.632990][ T6040] hub 8-1:0.0: USB hub found [ 2806.834138][ T6040] hub 8-1:0.0: 1 port detected [ 2807.254409][ T6056] usb 4-1: USB disconnect, device number 51 [ 2807.501451][ T6040] hub 8-1:0.0: activate --> -90 [ 2807.755443][T10052] bridge0: port 2(bridge_slave_1) entered disabled state [ 2807.762771][T10052] bridge0: port 1(bridge_slave_0) entered disabled state [ 2808.050086][T10052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2808.070699][ T6040] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 2808.071089][ T6056] usb 8-1: USB disconnect, device number 27 [ 2808.089202][T10052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2808.439021][T27835] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2808.452608][T27835] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2808.486657][T27835] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2808.545547][T27835] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2809.209659][T10063] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10604'. [ 2809.230200][T10063] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10604'. [ 2809.317913][ T6056] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 2809.479179][ T6056] usb 8-1: Using ep0 maxpacket: 32 [ 2809.514087][ T6056] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2809.545310][T10063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2809.549061][ T6056] usb 8-1: config 3 has an invalid interface number: 223 but max is 1 [ 2809.589363][ T6056] usb 8-1: config 3 has an invalid interface number: 25 but max is 1 [ 2809.602972][ T6056] usb 8-1: config 3 has an invalid interface number: 223 but max is 1 [ 2809.613704][ T6056] usb 8-1: config 3 has no interface number 0 [ 2809.621906][ T6056] usb 8-1: config 3 has no interface number 1 [ 2809.639024][ T6056] usb 8-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 2809.648946][T10063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2809.654493][ T6056] usb 8-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30 [ 2809.674010][ T6056] usb 8-1: config 3 interface 223 altsetting 155 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 2809.690609][ T6056] usb 8-1: config 3 interface 223 has no altsetting 1 [ 2809.700487][ T6056] usb 8-1: config 3 interface 25 has no altsetting 0 [ 2809.712352][ T6056] usb 8-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 2809.718751][T10077] netlink: 'syz.0.10609': attribute type 1 has an invalid length. [ 2809.731306][ T6056] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2809.760018][ T6056] usb 8-1: Product: ۪춱奈ꅄ㛃핪ἀ淾ᒌ܀쥓ꨇ喱柹皞旁㗽艔倥㺰ﬖ実ፄ紁︃膆㻿䉊ִ靅䰵雏쫁噄㵝譑༰䃮৲䒽ᚤ [ 2809.794450][T10077] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2809.855837][ T6056] usb 8-1: Manufacturer: 昷⧍钩髱ձ깲㗝꠭ş鎶ӌ⩢㪭律髪텟热啺ꤷ☉㠬懥厧좚됓ᤆ셦닑鶔ꔎ歂쒢壡൨뵊﹄꬝ò [ 2809.906696][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10609'. [ 2809.968460][ T6056] usb 8-1: SerialNumber: syz [ 2810.271122][T10087] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2810.697978][T32141] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 2810.839248][T32141] usb 4-1: device descriptor read/64, error -71 [ 2810.926109][T10097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2810.941452][T10097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2811.088568][T32141] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 2811.238966][T32141] usb 4-1: device descriptor read/64, error -71 [ 2811.359964][T32141] usb usb4-port1: attempt power cycle [ 2811.570929][T10104] syzkaller0: entered promiscuous mode [ 2811.576755][T10104] syzkaller0: entered allmulticast mode [ 2811.619955][T10104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2811.631038][T10104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2811.709378][T32141] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 2811.752088][T32141] usb 4-1: device descriptor read/8, error -71 [ 2811.757698][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 2811.757717][ T30] audit: type=1326 audit(1782883063.988:14621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.0.10616" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506259de59 code=0x7ffc0000 [ 2811.792678][ T30] audit: type=1326 audit(1782883064.028:14622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.0.10616" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506259de59 code=0x7ffc0000 [ 2811.819689][ T30] audit: type=1326 audit(1782883064.028:14623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.0.10616" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f506259de59 code=0x7ffc0000 [ 2811.851727][ T30] audit: type=1326 audit(1782883064.028:14624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.0.10616" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506259de59 code=0x7ffc0000 [ 2811.931358][ T30] audit: type=1326 audit(1782883064.168:14625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.0.10616" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f506255e68e code=0x7ffc0000 [ 2812.028603][T32141] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 2812.036312][ T30] audit: type=1326 audit(1782883064.268:14626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.0.10616" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f506255e68e code=0x7ffc0000 [ 2812.080774][T32141] usb 4-1: device descriptor read/8, error -71 [ 2812.132403][ T30] audit: type=1326 audit(1782883064.368:14627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.0.10616" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f506255e68e code=0x7ffc0000 [ 2812.198251][T32141] usb usb4-port1: unable to enumerate USB device [ 2812.213146][ T6056] usb 8-1: USB disconnect, device number 28 [ 2812.233932][ T30] audit: type=1326 audit(1782883064.468:14628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.0.10616" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f506255e68e code=0x7ffc0000 [ 2812.335344][ T30] audit: type=1326 audit(1782883064.568:14629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.0.10616" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f506255e68e code=0x7ffc0000 [ 2812.435620][ T30] audit: type=1326 audit(1782883064.668:14630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.0.10616" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f506259de59 code=0x7ffc0000 [ 2813.290249][T10123] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10620'. [ 2814.357168][ T6047] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 2814.413250][T10130] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10624'. [ 2814.514185][T10130] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10624'. [ 2814.569207][ T6047] usb 4-1: descriptor type invalid, skip [ 2814.580075][ T6047] usb 4-1: descriptor type invalid, skip [ 2814.603414][ T6047] usb 4-1: descriptor type invalid, skip [ 2814.628936][ T6047] usb 4-1: not running at top speed; connect to a high speed hub [ 2814.670241][ T6047] usb 4-1: config 1 has an invalid descriptor of length 165, skipping remainder of the config [ 2814.701461][ T6047] usb 4-1: too many endpoints for config 1 interface 0 altsetting 58: 242, using maximum allowed: 30 [ 2814.739321][ T6047] usb 4-1: config 1 interface 0 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 242 [ 2814.789058][ T6047] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2814.819802][ T6047] usb 4-1: New USB device found, idVendor=04b4, idProduct=9320, bcdDevice= 0.40 [ 2814.855089][ T6047] usb 4-1: New USB device strings: Mfr=222, Product=2, SerialNumber=3 [ 2814.876024][ T6047] usb 4-1: Product: syz [ 2814.889408][ T6047] usb 4-1: Manufacturer: syz [ 2814.906315][ T6047] usb 4-1: SerialNumber: syz [ 2815.119892][T10140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2815.185705][T10140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2817.510147][ T6047] usb 4-1: selecting invalid altsetting 0 [ 2817.560467][ T6047] usb 4-1: can't set first interface for hiFace device. [ 2817.605753][ T6047] snd-usb-hiface 4-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 2817.627411][ T6047] usb 4-1: USB disconnect, device number 56 [ 2820.854624][T10188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2820.893260][T10191] netlink: 116 bytes leftover after parsing attributes in process `syz.8.10637'. [ 2820.970378][T10188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2823.500912][T10214] tipc: Enabled bearer , priority 0 [ 2823.552141][T10214] tipc: Resetting bearer [ 2823.586399][T10213] tipc: Disabling bearer [ 2824.086517][T10206] bridge0: port 1(erspan0) entered blocking state [ 2824.103728][T10206] bridge0: port 1(erspan0) entered disabled state [ 2824.110737][ T6047] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2824.132597][T10206] erspan0: entered allmulticast mode [ 2824.149004][T10206] erspan0: entered promiscuous mode [ 2824.277266][ T6047] usb 4-1: Using ep0 maxpacket: 8 [ 2824.308371][ T6047] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2824.350405][ T6047] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2824.390395][ T6047] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2824.426739][ T6047] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 2824.455744][ T6047] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 2824.488381][ T6047] usb 4-1: Product: syz [ 2824.503863][ T6047] usb 4-1: Manufacturer: syz [ 2824.525188][ T6047] usb 4-1: SerialNumber: syz [ 2824.541562][T10229] syzkaller0: entered promiscuous mode [ 2824.551089][ T6047] usb 4-1: config 0 descriptor?? [ 2824.560375][T10229] syzkaller0: entered allmulticast mode [ 2824.575661][ T6047] imon_raw 4-1:0.0: IR endpoint missing [ 2825.008370][ T6040] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 2825.282936][ T6040] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2825.303095][ T6040] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2825.333181][ T6040] usb 8-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 2825.352767][ T6040] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2825.364342][ T6040] usb 8-1: Product: syz [ 2825.375240][ T6040] usb 8-1: Manufacturer: syz [ 2825.381908][ T6040] usb 8-1: SerialNumber: syz [ 2825.831066][ T30] audit: type=1326 audit(1782883078.068:14631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.7.10651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6d9de59 code=0x7ffc0000 [ 2825.882409][ T6040] usb 8-1: 0:1 : does not exist [ 2825.918914][ T6040] usb 8-1: unit 4 not found! [ 2825.934461][ T6040] usb 8-1: unit 80 not found! [ 2826.020346][ T6040] usb 8-1: USB disconnect, device number 29 [ 2826.080035][ T9664] udevd[9664]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2826.122780][ T30] audit: type=1326 audit(1782883078.068:14633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.7.10651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c6d9de59 code=0x7ffc0000 [ 2826.226071][ T30] audit: type=1326 audit(1782883078.068:14632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.7.10651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd2c6d9de59 code=0x7ffc0000 [ 2826.306295][ T30] audit: type=1326 audit(1782883078.298:14634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.7.10651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c6d5e68e code=0x7ffc0000 [ 2826.414006][ T30] audit: type=1326 audit(1782883078.398:14635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.7.10651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c6d5e68e code=0x7ffc0000 [ 2826.485760][ T30] audit: type=1326 audit(1782883078.498:14636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.7.10651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c6d5e68e code=0x7ffc0000 [ 2826.615620][ T30] audit: type=1326 audit(1782883078.608:14637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.7.10651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c6d5e68e code=0x7ffc0000 [ 2826.737092][ T30] audit: type=1326 audit(1782883078.708:14638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.7.10651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c6d5e68e code=0x7ffc0000 [ 2826.820036][ T6040] usb 4-1: USB disconnect, device number 57 [ 2826.918972][T10252] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10658'. [ 2827.003183][ T30] audit: type=1326 audit(1782883078.808:14639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.7.10651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd2c6d9de59 code=0x7ffc0000 [ 2827.824053][T10271] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2827.940632][T10271] syzkaller1: linktype set to 823 [ 2829.291210][T10284] tipc: Enabled bearer , priority 0 [ 2829.341507][T10284] syzkaller0: entered promiscuous mode [ 2829.361772][T10284] syzkaller0: entered allmulticast mode [ 2829.529006][T10284] tipc: Resetting bearer [ 2829.563698][T10284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2829.574307][T10284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2829.634587][T10283] tipc: Resetting bearer [ 2829.696266][T10283] tipc: Disabling bearer [ 2830.247394][ T6040] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2830.418864][ T6040] usb 4-1: Using ep0 maxpacket: 8 [ 2830.456270][ T6040] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2830.473528][ T6040] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2830.485671][ T6040] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2831.437082][ T6040] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 2831.608400][T10301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2831.642845][T10301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2831.670590][T10301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2831.685741][T10301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2832.169577][ T6040] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2832.189920][ T6040] usb 8-1: no configurations [ 2832.197015][ T6040] usb 8-1: can't read configurations, error -22 [ 2833.015988][ T6047] usb 4-1: USB disconnect, device number 58 [ 2833.037385][ T6040] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 2833.258777][ T6040] usb 8-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 2833.313135][ T6040] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2833.373783][ T6040] usb 8-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 2833.415454][ T6040] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2833.463001][ T6040] usb 8-1: config 0 descriptor?? [ 2833.510835][ T6040] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 2833.760598][T10334] syzkaller0: entered promiscuous mode [ 2833.786912][T10334] syzkaller0: entered allmulticast mode [ 2836.519715][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.526182][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.743674][T10349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2836.755419][T10349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2838.904019][T10355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2838.930983][T10355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2842.374706][ T6056] usb 8-1: USB disconnect, device number 31 [ 2842.480180][T10366] syzkaller0: entered promiscuous mode [ 2842.520947][T10366] syzkaller0: entered allmulticast mode [ 2842.726728][T10377] netlink: 'syz.7.10691': attribute type 1 has an invalid length. [ 2842.780287][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10691'. [ 2845.277856][ T6056] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2845.464916][ T6056] usb 4-1: Using ep0 maxpacket: 8 [ 2845.538945][ T6056] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2845.554512][ T6056] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2845.570123][ T6056] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2845.665174][ T6056] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 2845.675534][ T6056] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 2845.691378][ T6056] usb 4-1: Product: syz [ 2845.702034][ T6056] usb 4-1: Manufacturer: syz [ 2845.710812][ T6056] usb 4-1: SerialNumber: syz [ 2845.752802][ T6056] usb 4-1: config 0 descriptor?? [ 2845.863649][ T6056] imon_raw 4-1:0.0: IR endpoint missing [ 2847.840539][ T6040] usb 4-1: USB disconnect, device number 59 [ 2850.029031][T10407] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2850.047994][T10407] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2850.064173][ T6040] usb 10-1: USB disconnect, device number 38 [ 2850.078857][T10407] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2850.103535][T10407] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2850.169523][T10407] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2852.284558][T22431] Bluetooth: hci1: command tx timeout [ 2853.494305][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10699'. [ 2853.557547][T10414] netlink: 'syz.8.10699': attribute type 10 has an invalid length. [ 2853.588136][T10414] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10699'. [ 2854.175203][T10377] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2854.235391][T10401] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2854.257606][T10401] syzkaller1: linktype set to 823 [ 2854.348507][T22431] Bluetooth: hci1: command tx timeout [ 2856.014756][T10438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2856.128943][T10438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2856.427245][T22431] Bluetooth: hci1: command tx timeout [ 2857.471412][T10408] bridge0: port 1(bridge_slave_0) entered blocking state [ 2857.504601][T10408] bridge0: port 1(bridge_slave_0) entered disabled state [ 2857.533909][T10408] bridge_slave_0: entered allmulticast mode [ 2857.571373][T10408] bridge_slave_0: entered promiscuous mode [ 2857.609086][T10408] bridge0: port 2(bridge_slave_1) entered blocking state [ 2857.649678][T10408] bridge0: port 2(bridge_slave_1) entered disabled state [ 2857.679740][T10408] bridge_slave_1: entered allmulticast mode [ 2857.701901][T10408] bridge_slave_1: entered promiscuous mode [ 2857.920283][T10408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2857.972787][T10408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2858.078297][T32141] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 2858.268344][T32141] usb 4-1: device descriptor read/64, error -71 [ 2858.509128][T22431] Bluetooth: hci1: command tx timeout [ 2858.541464][T32141] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 2858.665713][T10408] team0: Port device team_slave_0 added [ 2858.700789][T10408] team0: Port device team_slave_1 added [ 2858.748913][T32141] usb 4-1: device descriptor read/64, error -71 [ 2858.868894][T32141] usb usb4-port1: attempt power cycle [ 2859.024917][T10457] syzkaller0: entered promiscuous mode [ 2859.046672][T10457] syzkaller0: entered allmulticast mode [ 2859.228290][T32141] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 2859.264763][T32141] usb 4-1: device descriptor read/8, error -71 [ 2859.276052][T10408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2859.308779][T10408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2859.434733][T10408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2859.528676][T32141] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 2859.589301][T32141] usb 4-1: device descriptor read/8, error -71 [ 2859.711577][T32141] usb usb4-port1: unable to enumerate USB device [ 2859.730785][T10408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2859.795576][T10408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2859.884462][T10408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2859.926438][ T3509] erspan0: left allmulticast mode [ 2859.952472][ T3509] erspan0: left promiscuous mode [ 2860.000594][ T3509] bridge0: port 1(erspan0) entered disabled state [ 2860.012060][T10479] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10711'. [ 2860.162323][T10479] netlink: 'syz.7.10711': attribute type 10 has an invalid length. [ 2860.257915][T10479] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10711'. [ 2861.293459][ T3509] bond0 (unregistering): Released all slaves [ 2861.315740][ T3509] bond1 (unregistering): Released all slaves [ 2861.364048][ T3509] bond2 (unregistering): Released all slaves [ 2861.573250][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2861.661533][ T3509] tipc: Left network mode [ 2861.783769][T10408] hsr_slave_0: entered promiscuous mode [ 2861.840380][T10408] hsr_slave_1: entered promiscuous mode [ 2861.850642][T10408] debugfs: 'hsr0' already exists in 'hsr' [ 2861.857823][T10408] Cannot create hsr debugfs directory [ 2864.422356][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2864.701742][ T3509] hsr_slave_0: left promiscuous mode [ 2866.018206][T32141] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 2866.174264][T32141] usb 4-1: device descriptor read/64, error -71 [ 2866.443471][T32141] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 2866.583532][ T3509] IPVS: stop unused estimator thread 0... [ 2866.608238][T32141] usb 4-1: device descriptor read/64, error -71 [ 2866.722724][T32141] usb usb4-port1: attempt power cycle [ 2867.069009][T32141] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 2867.098388][T32141] usb 4-1: device descriptor read/8, error -71 [ 2867.337946][T32141] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 2867.373543][T32141] usb 4-1: device descriptor read/8, error -71 [ 2867.498400][T32141] usb usb4-port1: unable to enumerate USB device [ 2867.702105][T10408] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2867.736281][T10408] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2867.761211][T10408] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2867.801595][T10408] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2867.824022][T10408] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2867.857370][T10408] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2867.880719][T10408] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2867.905167][T10408] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2868.005191][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2868.083424][T10547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10721'. [ 2868.149852][T10547] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10721'. [ 2868.204969][T10408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2868.271154][T10408] 8021q: adding VLAN 0 to HW filter on device team0 [ 2868.300539][T27835] bridge0: port 1(bridge_slave_0) entered blocking state [ 2868.307785][T27835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2868.369494][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 2868.376739][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2868.684071][T10408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2868.909290][T10408] veth0_vlan: entered promiscuous mode [ 2868.978496][T10408] veth1_vlan: entered promiscuous mode [ 2869.017075][T24695] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 2869.192112][T24695] usb 8-1: Using ep0 maxpacket: 8 [ 2869.209345][T10057] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 2869.220339][T24695] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2869.223233][T10408] veth0_macvtap: entered promiscuous mode [ 2869.259506][T24695] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2869.281221][T24695] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2869.304708][T24695] usb 8-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 2869.324848][T10408] veth1_macvtap: entered promiscuous mode [ 2869.327661][T24695] usb 8-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 2869.357275][T24695] usb 8-1: Product: syz [ 2869.370319][T24695] usb 8-1: Manufacturer: syz [ 2869.383743][T24695] usb 8-1: SerialNumber: syz [ 2869.424837][T10570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2869.431236][T10408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2869.449107][T24695] usb 8-1: config 0 descriptor?? [ 2869.458891][T10570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2869.478286][T24695] imon_raw 8-1:0.0: IR endpoint missing [ 2869.524611][T10570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2869.552184][T10408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2869.578215][T10570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2869.679674][ T3499] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2869.712691][ T3499] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2869.764941][ T3499] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2869.806253][ T3499] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2869.940748][T10579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2870.044061][T10579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2870.081334][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 2870.319933][ T3499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2870.364405][ T3499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2870.555588][T27835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2870.582720][T27835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2870.712914][T10057] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2870.736570][T10588] syzkaller0: entered promiscuous mode [ 2870.745579][T10588] syzkaller0: entered allmulticast mode [ 2870.760674][T10057] usb 4-1: no configurations [ 2870.797434][T10057] usb 4-1: can't read configurations, error -22 [ 2871.150935][T10571] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 2871.346512][T10592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2871.366593][T10592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2871.403344][T10592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2871.420894][T10592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2871.975457][T16032] usb 8-1: USB disconnect, device number 32 [ 2872.363181][T10571] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2872.406426][T10571] usb 5-1: no configurations [ 2872.427125][T10571] usb 5-1: can't read configurations, error -22 [ 2873.412853][T10633] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 2873.419447][T10633] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2873.659673][T10633] vhci_hcd vhci_hcd.0: Device attached [ 2873.826232][T26312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2873.843398][T26312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2874.086950][T10571] usb 34-1: SetAddress Request (35) to port 0 [ 2874.105074][T10571] usb 34-1: new SuperSpeed USB device number 35 using vhci_hcd [ 2874.856468][T10634] vhci_hcd: connection reset by peer [ 2874.878275][ T3509] vhci_hcd vhci_hcd.0: stop threads [ 2874.883710][ T3509] vhci_hcd vhci_hcd.0: release socket [ 2874.915253][ T3509] vhci_hcd vhci_hcd.0: disconnect device [ 2876.017829][T16032] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 2876.188524][T16032] usb 8-1: Using ep0 maxpacket: 32 [ 2876.196667][T16032] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2876.239608][T16032] usb 8-1: config 3 has an invalid interface number: 223 but max is 1 [ 2876.264143][T16032] usb 8-1: config 3 has an invalid interface number: 25 but max is 1 [ 2876.311393][T16032] usb 8-1: config 3 has an invalid interface number: 223 but max is 1 [ 2876.343467][T16032] usb 8-1: config 3 has no interface number 0 [ 2876.365467][T16032] usb 8-1: config 3 has no interface number 1 [ 2876.388625][T16032] usb 8-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 2876.413597][T16032] usb 8-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30 [ 2876.430181][T16032] usb 8-1: config 3 interface 223 altsetting 155 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 2876.445136][T16032] usb 8-1: config 3 interface 223 has no altsetting 1 [ 2876.455268][T16032] usb 8-1: config 3 interface 25 has no altsetting 0 [ 2876.472478][T16032] usb 8-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 2876.483308][T16032] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2876.494338][T16032] usb 8-1: Product: ۪춱奈ꅄ㛃핪ἀ淾ᒌ܀쥓ꨇ喱柹皞旁㗽艔倥㺰ﬖ実ፄ紁︃膆㻿䉊ִ靅䰵雏쫁噄㵝譑༰䃮৲䒽ᚤ [ 2876.513428][T16032] usb 8-1: Manufacturer: 昷⧍钩髱ձ깲㗝꠭ş鎶ӌ⩢㪭律髪텟热啺ꤷ☉㠬懥厧좚됓ᤆ셦닑鶔ꔎ歂쒢壡൨뵊﹄꬝ò [ 2876.532283][T16032] usb 8-1: SerialNumber: syz [ 2877.075255][T16032] usb 8-1: USB disconnect, device number 33 [ 2879.237262][T10571] usb 34-1: device descriptor read/8, error -110 [ 2879.640183][T10571] usb usb34-port1: attempt power cycle [ 2880.238343][T10571] usb usb34-port1: unable to enumerate USB device [ 2897.949626][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.956318][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.390921][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.397727][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 2976.829505][T22431] Bluetooth: hci1: command 0x0406 tx timeout [ 3011.227303][ T31] INFO: task kworker/1:5:6040 blocked for more than 143 seconds. [ 3011.235385][ T31] Tainted: G L syzkaller #0 [ 3011.242530][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3011.251800][ T31] task:kworker/1:5 state:D stack:21016 pid:6040 tgid:6040 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 3011.264025][ T31] Workqueue: usb_hub_wq hub_event [ 3011.269567][ T31] Call Trace: [ 3011.272891][ T31] [ 3011.275855][ T31] __schedule+0x17d9/0x56c0 [ 3011.280805][ T31] ? __pfx___schedule+0x10/0x10 [ 3011.285725][ T31] ? schedule+0x90/0x2b0 [ 3011.290332][ T31] schedule+0x164/0x2b0 [ 3011.294810][ T31] schedule_timeout+0xc0/0x2c0 [ 3011.299780][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 3011.305198][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 3011.310491][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3011.315748][ T31] ? wait_for_completion+0x272/0x5e0 [ 3011.321102][ T31] wait_for_completion+0x2ca/0x5e0 [ 3011.326258][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 3011.332015][ T31] ? kobject_put+0x50f/0x550 [ 3011.336740][ T31] i2c_del_adapter+0x281/0x430 [ 3011.341660][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 3011.348060][ T31] ? kfree+0x4d/0x640 [ 3011.352164][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 3011.356997][ T31] dvb_usb_device_exit+0x1cb/0x350 [ 3011.362672][ T31] ? __pfx_rpm_resume+0x10/0x10 [ 3011.367681][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 3011.373564][ T31] ? usb_disable_interface+0x31d/0x350 [ 3011.379877][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 3011.385156][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 3011.391425][ T31] usb_unbind_interface+0x295/0x9f0 [ 3011.396880][ T31] ? kernfs_remove_by_name_ns+0x101/0x140 [ 3011.403056][ T31] ? kernfs_remove_by_name_ns+0x101/0x140 [ 3011.409179][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 3011.415437][ T31] device_release_driver_internal+0x4f5/0x880 [ 3011.421964][ T31] bus_remove_device+0x444/0x560 [ 3011.427019][ T31] ? __pfx_bus_remove_device+0x10/0x10 [ 3011.432544][ T31] ? kernfs_remove_by_name_ns+0x101/0x140 [ 3011.438462][ T31] device_del+0x524/0x8f0 [ 3011.442918][ T31] ? __pfx_device_del+0x10/0x10 [ 3011.448640][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3011.453750][ T31] usb_disable_device+0x3d4/0x8d0 [ 3011.459161][ T31] usb_disconnect+0x346/0x9a0 [ 3011.464081][ T31] hub_event+0x1bbb/0x4d30 [ 3011.468687][ T31] ? register_lock_class+0x31/0x2e0 [ 3011.473936][ T31] ? trace_hrtimer_start+0x82/0x200 [ 3011.479277][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 3011.484881][ T31] ? __pfx_hub_event+0x10/0x10 [ 3011.489806][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 3011.495607][ T31] ? rcu_is_watching+0x15/0xb0 [ 3011.500491][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 3011.506250][ T31] process_scheduled_works+0xa8e/0x14e0 [ 3011.512160][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 3011.518409][ T31] ? assign_work+0x3cf/0x5d0 [ 3011.523068][ T31] worker_thread+0xa47/0xfb0 [ 3011.527826][ T31] kthread+0x388/0x470 [ 3011.531938][ T31] ? __pfx_worker_thread+0x10/0x10 [ 3011.537535][ T31] ? __pfx_kthread+0x10/0x10 [ 3011.542262][ T31] ret_from_fork+0x514/0xb70 [ 3011.547295][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3011.553537][ T31] ? __switch_to+0xc89/0x1420 [ 3011.558348][ T31] ? __pfx_kthread+0x10/0x10 [ 3011.562989][ T31] ret_from_fork_asm+0x1a/0x30 [ 3011.568218][ T31] [ 3011.571312][ T31] [ 3011.571312][ T31] Showing all locks held in the system: [ 3011.579091][ T31] 1 lock held by khungtaskd/31: [ 3011.583984][ T31] #0: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 3011.594063][ T31] 2 locks held by getty/5379: [ 3011.598863][ T31] #0: ffff8880322360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 3011.608885][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 3011.619147][ T31] 5 locks held by kworker/1:5/6040: [ 3011.624362][ T31] #0: ffff888022ae6d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 3011.635857][ T31] #1: ffffc90003f4fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 3011.647823][ T31] #2: ffff88802a0491d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 3011.657715][ T31] #3: ffff888056d7a1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 3011.666989][ T31] #4: ffff8880344c91a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 3011.677985][ T31] [ 3011.680399][ T31] ============================================= [ 3011.680399][ T31] [ 3011.688900][ T31] NMI backtrace for cpu 1 [ 3011.688922][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 3011.688945][ T31] Tainted: [L]=SOFTLOCKUP [ 3011.688951][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3011.688963][ T31] Call Trace: [ 3011.688971][ T31] [ 3011.688980][ T31] dump_stack_lvl+0xe8/0x150 [ 3011.689009][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 3011.689048][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3011.689086][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 3011.689117][ T31] sys_info+0x135/0x170 [ 3011.689144][ T31] watchdog+0xfd7/0x1030 [ 3011.689199][ T31] ? watchdog+0x1c7/0x1030 [ 3011.689240][ T31] kthread+0x388/0x470 [ 3011.689263][ T31] ? __pfx_watchdog+0x10/0x10 [ 3011.689292][ T31] ? __pfx_kthread+0x10/0x10 [ 3011.689316][ T31] ret_from_fork+0x514/0xb70 [ 3011.689343][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3011.689367][ T31] ? __switch_to+0xc89/0x1420 [ 3011.689402][ T31] ? __pfx_kthread+0x10/0x10 [ 3011.689425][ T31] ret_from_fork_asm+0x1a/0x30 [ 3011.689465][ T31] [ 3011.689474][ T31] Sending NMI from CPU 1 to CPUs 0: [ 3011.808413][ C0] NMI backtrace for cpu 0 [ 3011.808437][ C0] CPU: 0 UID: 0 PID: 392 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 3011.808462][ C0] Tainted: [L]=SOFTLOCKUP [ 3011.808468][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3011.808479][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 3011.808625][ C0] RIP: 0010:_mutex_trylock_nest_lock+0x57/0x130 [ 3011.808649][ C0] Code: b1 00 00 00 83 3d 78 29 95 0e 00 75 1d 49 8d 7e 58 48 89 f8 48 c1 e8 03 42 80 3c 38 00 74 05 e8 3f ba 7d f6 4d 39 76 58 75 4b <4c> 89 f7 31 f6 e8 4f 53 eb f5 49 89 c7 48 85 c0 75 26 49 83 c6 60 [ 3011.808664][ C0] RSP: 0018:ffffc9000401fa18 EFLAGS: 00000246 [ 3011.808679][ C0] RAX: 1ffff1100ffcc24a RBX: 0000000000000000 RCX: ffffffff9a4b5503 [ 3011.808692][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807fe61250 [ 3011.808703][ C0] RBP: ffffc9000401fce8 R08: ffffffff9032f8f7 R09: 1ffffffff2065f1e [ 3011.808716][ C0] R10: dffffc0000000000 R11: ffffffff8730c340 R12: ffff8880325e7e18 [ 3011.808728][ C0] R13: dffffc0000000000 R14: ffff88807fe611f8 R15: dffffc0000000000 [ 3011.808741][ C0] FS: 0000000000000000(0000) GS:ffff888125220000(0000) knlGS:0000000000000000 [ 3011.808756][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3011.808768][ C0] CR2: 000055792bc0c168 CR3: 000000000e746000 CR4: 00000000003526f0 [ 3011.808785][ C0] DR0: 0000000000000000 DR1: 00000000000000ff DR2: 0000000000000000 [ 3011.808795][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3011.808806][ C0] Call Trace: [ 3011.808814][ C0] [ 3011.808822][ C0] nsim_dev_trap_report_work+0x57/0xb40 [ 3011.808846][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 3011.808872][ C0] ? rcu_is_watching+0x15/0xb0 [ 3011.808892][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 3011.808913][ C0] process_scheduled_works+0xa8e/0x14e0 [ 3011.808946][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 3011.808970][ C0] ? assign_work+0x3cf/0x5d0 [ 3011.808993][ C0] worker_thread+0xa47/0xfb0 [ 3011.809026][ C0] kthread+0x388/0x470 [ 3011.809044][ C0] ? __pfx_worker_thread+0x10/0x10 [ 3011.809064][ C0] ? __pfx_kthread+0x10/0x10 [ 3011.809082][ C0] ret_from_fork+0x514/0xb70 [ 3011.809102][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 3011.809119][ C0] ? __switch_to+0xc89/0x1420 [ 3011.809143][ C0] ? __pfx_kthread+0x10/0x10 [ 3011.809161][ C0] ret_from_fork_asm+0x1a/0x30 [ 3011.809188][ C0] [ 3012.052717][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 3012.059787][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 3012.070781][ T31] Tainted: [L]=SOFTLOCKUP [ 3012.075118][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3012.085188][ T31] Call Trace: [ 3012.088488][ T31] [ 3012.091432][ T31] vpanic+0x56c/0xa60 [ 3012.095432][ T31] ? __pfx___schedule+0x10/0x10 [ 3012.100293][ T31] ? __pfx_vpanic+0x10/0x10 [ 3012.104809][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 3012.111017][ T31] panic+0xc5/0xd0 [ 3012.114756][ T31] ? __pfx_panic+0x10/0x10 [ 3012.119267][ T31] ? preempt_schedule_common+0x82/0xd0 [ 3012.124912][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 3012.130394][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 3012.136566][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 3012.142767][ T31] watchdog+0x1030/0x1030 [ 3012.147230][ T31] ? watchdog+0x1c7/0x1030 [ 3012.151792][ T31] kthread+0x388/0x470 [ 3012.155971][ T31] ? __pfx_watchdog+0x10/0x10 [ 3012.160699][ T31] ? __pfx_kthread+0x10/0x10 [ 3012.165312][ T31] ret_from_fork+0x514/0xb70 [ 3012.169919][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3012.175047][ T31] ? __switch_to+0xc89/0x1420 [ 3012.179755][ T31] ? __pfx_kthread+0x10/0x10 [ 3012.184372][ T31] ret_from_fork_asm+0x1a/0x30 [ 3012.189196][ T31] [ 3012.192499][ T31] Kernel Offset: disabled [ 3012.196926][ T31] Rebooting in 86400 seconds..