last executing test programs: 18m35.233857788s ago: executing program 4 (id=285): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0xf7, 0x59, 0xba, 0x10, 0x525, 0xa4a0, 0xd32c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0x4, 0x20, 0xfa, "", [{{0x9, 0x4, 0x51, 0x7, 0x1, 0xd2, 0x7f, 0x57, 0x92, [], [{{0x9, 0x5, 0x6, 0x3, 0x20, 0xd7, 0x34}}]}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x2c, &(0x7f0000000000)="17000000020001000003d68c5ee17688a2003cecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a68336a636b489614b0e7f62cc093991f009cee4a5acb3da400001fb700674f19b44e09f9395033bf79ac2dff060115003901000000000000eaff0000000000000003ffff02dfccebf6ba0008400200000001e905174aa951f3c63e5c83f1ba2112ce68bf17a6e0000000000000000000", 0xb8) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)={0x20, 0x3, 0xc1, {0xc1, 0xc, "22e1ddeb16e883179e90601e25ae5fcbf87722e84c73fc1a918418af836c25667bd0a5d815fc55c1f1eb30e13b8ddf9690bc4d85edc0dcbc3b93a3fc8f3578e854c7966f775c010211d4fd47eef02bfc03c754274668c573147be238e2273a7afb9ce31f16e417805c793b7ca269be860913b9cdcedf70e35a1eb06250f4359e5fbfba1abafcb2c3a6c9019ea574bb6e978d3dbc0d51d2e4e56c89b081466fdce88dc2a7c574d55c103694af70e112da24938bade53b7ccde7602bb2f386b3"}}, &(0x7f0000000100)={0x0, 0x3, 0xf6, @string={0xf6, 0x3, "bc50ea7cabf29d0b06b9123113026268d2245bbafbf2d4acebdd9eb4661c86429a6b15ff1cca601c945948919ba2e35c961d491732c68a5f0d9c78c07f79a14e49389e484d27feb58d32284992705ef81e0970600555b8deea8c6032091995cfce53b41039dd14a930206cd00702836ebaadb94c2fb9d95970beb40e6f9dffc60f694aad87d1199b30674b9a1e9bd2e28bb543db4b76cc73be9fac04483608f899ae2c7cad14f015c0a9c6047e239cab52fd6c12310b1b944168eb3812b5c929ac4fe355a4dcdd59f18252ec2802e62013987f9edc042ea6dc76da328c22f016e3f8ad75f7a0e222fd0daba15d5ae9f24ba4b8b0"}}, &(0x7f0000000200)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x0, 0x8, 0xf7, "a01fadb2", "be1d6bfd"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x2, 0x1, 0xd, 0x10, 0x67, 0x8}}}, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x40, 0x11, 0x44, "bfdaee962d4022623ada3db6acd76e5df96075fde294049769b2f3a8b3b7792cb5758bde1100ed3571475a70b83e803396f3066e8c15b39df8947e4b6d495fc12dcd592c"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x120, 0x1, [0xf]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000540)={0x40, 0xb, 0x2, '\ar'}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000005c0)={0x40, 0x13, 0x6}, &(0x7f0000000600)={0x40, 0x17, 0x6, @local}, &(0x7f0000000640)={0x40, 0x19, 0x2, "87a7"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0xe}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xef}}) 18m33.581384869s ago: executing program 4 (id=292): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYBLOB="400001801400020070696d367265673000", @ANYBLOB="147d302b05427e8b163a6c2798f669c93c88517c9f1b2829b37e083d0ce259d420c00c06661bb1dc82f2f4fdf3bd5d44175ccf86d262dab1c24d9ecfca90301493e0f9eb35eb986e6cf2f8255817c899f24e245e60c32eab047935beb9e9248ce1bfbf6e409c87a22d80d7afb8662aaca7e0dc9ba8a631953e751ac00dfb"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000a80)=0x8, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 18m33.312173085s ago: executing program 4 (id=295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x1409, 0x100, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003800)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x1, 0x62f, 0x8, 0x24, 0xff}, 0x0, 0x4}, [{0x1, 0x6, 0xa6b, 0x0, 0x2, 0x2}, {0xa0000, 0x41, 0xd2, 0x2, 0xf, 0xc}, {0x6, 0x8, 0x25f, 0x41, 0x9}, {0x401, 0xffffffff, 0x0, 0x3, 0x7fffffff, 0x800}, {0xffffffff, 0x3, 0x9, 0xff, 0xc2d, 0x1b}, {0x3, 0x7, 0x6, 0x84, 0x8, 0x4}, {0x5, 0x3, 0x6, 0x9, 0x80000000, 0xea87}, {0x8, 0x0, 0xeb9, 0x5, 0x3, 0x5}, {0x6, 0x3, 0x1, 0xfffffffa, 0x500, 0x5}, {0xa2, 0x43, 0x8, 0x5, 0x101, 0x1}, {0x1, 0xd, 0x36, 0x4, 0x6, 0xe}, {0x400, 0x7, 0x2, 0x7, 0x3, 0xffffff03}, {0x9ce, 0x1, 0x8, 0xffff, 0x4, 0x713}, {0x6, 0x0, 0x3, 0x3, 0x52c6, 0x4}, {0x200, 0x6, 0x6, 0xd, 0xb, 0x5}, {0x5, 0x7a, 0x3, 0x7f, 0x3, 0x3f64}, {0x0, 0x6, 0xfffffff9, 0x5, 0x5, 0x6}, {0x6, 0x1, 0x4, 0xb, 0x67, 0xfffffffc}, {0x4, 0x9, 0x0, 0x53c9, 0x7, 0x3}, {0xfffeffff, 0x2, 0x8, 0x2, 0x1b9, 0xbf55}, {0x3, 0xb, 0x1, 0x10001, 0x9, 0x1}, {0x4, 0xfffffffb, 0x88f2, 0x100, 0x5, 0x5}, {0x6, 0x200, 0x401, 0x10, 0x5}, {0x7, 0xa, 0x1, 0x401, 0x33f2ac9, 0x3}, {0x9, 0x1888, 0x6, 0x5, 0x8ab, 0x2d81c681}, {0x9, 0x6fe, 0xd35, 0x80, 0x4, 0x6cc2}, {0xe, 0x1, 0x80000001, 0x9, 0x6, 0xffff}, {0x0, 0x9, 0x3, 0x10001, 0x8}, {0x5422, 0x6, 0x8, 0x7f, 0x3, 0x7}, {0xffffffff, 0xd, 0x1, 0x1, 0x3, 0x1}, {0x9, 0x10, 0x400, 0x25, 0x5, 0x10}, {0x7, 0x4, 0x9, 0x5, 0xfffffc01, 0x100}, {0x7, 0x10000, 0x0, 0x0, 0x0, 0x5}, {0xe45, 0xffffff89, 0xffffff83, 0x9, 0x43}, {0x0, 0x80000001, 0x9, 0x0, 0x1000, 0xd}, {0x3ff, 0x889, 0xfffffffb, 0x42d69b24, 0x7fffffff, 0x2}, {0x7d, 0x80000000, 0x401, 0x10, 0x5, 0x7}, {0x4, 0x80000000, 0x7, 0x0, 0x80000000, 0x9ffc}, {0x9, 0x100, 0x4, 0x8, 0x2, 0x6}, {0x3, 0x3, 0x4, 0x0, 0xf}, {0x271, 0xd000000, 0x6, 0xed, 0x5, 0x5}, {0x8, 0x3, 0x7, 0x3, 0x8, 0x4}, {0x2, 0x9, 0xc, 0x3ff, 0x0, 0x7}, {0x6, 0x4, 0xfff, 0xdaa, 0x101, 0x6}, {0x52, 0x7, 0x1, 0x0, 0x6, 0x2}, {0x9, 0x24c, 0x6, 0x9, 0xa8fc0, 0x1}, {0x8, 0x4, 0x7f, 0x2090, 0xd, 0xfff}, {0x101, 0x1, 0xf, 0x1af8, 0x5, 0x8ab}, {0x660, 0xb, 0x4b9, 0x1, 0x3, 0x81}, {0x5c, 0x8, 0x70, 0x2, 0x3, 0x2}, {0x7, 0x9, 0x154, 0x6, 0x62f, 0x3}, {0x4, 0xdea, 0x8000, 0x9, 0x150b, 0xde5}, {0xffffa806, 0xd25f, 0x1, 0x8, 0x0, 0x9}, {0x3, 0x5f10, 0x2, 0x3, 0x2, 0x21}, {0x10, 0x0, 0x221, 0x4, 0x0, 0x7fffffff}, {0x1c, 0x4, 0x1, 0xffff9b88}, {0x101, 0x2, 0x62e31c3b, 0x5, 0x3dad, 0x8}, {0x1, 0xb, 0x4, 0xffff, 0xf19, 0xf3f}, {0x9, 0x2, 0x6, 0x7, 0x61d630ee, 0x3f}, {0xf8cd, 0x9, 0x0, 0x8, 0x277, 0xd}, {0x7, 0x6, 0x3a53, 0x5, 0x3, 0x1c6}, {0x7, 0x7, 0x7, 0x2, 0x7, 0x74}, {0x1, 0x8, 0xffff288a, 0xeb8, 0x7f, 0x3}, {0x3, 0x6cd, 0x2, 0x8001, 0x9, 0x3}, {0x1b4, 0xfffffff1, 0x5, 0x0, 0xfffffffa, 0x8}, {0x1, 0x7, 0x4, 0x9, 0x3, 0x5}, {0x6, 0x2, 0xf0e, 0x1, 0x5, 0x9}, {0x40, 0x0, 0xdce0, 0x7fffffff, 0x1, 0x9}, {0xffffffff, 0xf, 0xf1c, 0x0, 0x1, 0x1}, {0xa6e6f87, 0x8, 0x9, 0x4, 0xde, 0xfffffffe}, {0xfffffff8, 0x7, 0x17, 0x6, 0x6, 0x10001}, {0x8, 0x1, 0x3, 0x9b, 0x800, 0x40}, {0xdbc, 0x1, 0xd, 0x549, 0x336b, 0x2}, {0xfffffffd, 0x0, 0x9, 0x3, 0x4}, {0x4, 0xad89, 0x8, 0x6, 0x8001, 0xffffff04}, {0x8, 0x8f91, 0x4, 0x9, 0x4ab, 0x8b}, {0xf, 0x100, 0x9, 0x397f2a30, 0x1, 0x1}, {0x3, 0xd50d, 0x8, 0x9, 0x3c1, 0x7}, {0x4, 0x200, 0xe5, 0x7, 0x5}, {0xffff, 0x14c9, 0x9, 0x0, 0xb, 0x500c}, {0x8, 0x0, 0x9, 0xc, 0xffffbab4, 0xc1}, {0xcab7, 0x7, 0x1, 0x38, 0x4, 0xefe9}, {0x9, 0x9, 0x4, 0x4, 0x2, 0x4}, {0x7b, 0x4b1, 0x11, 0x30f1, 0xfca5, 0x200}, {0x8, 0xd8, 0xa, 0x5, 0xfffffffc, 0x1}, {0x9, 0xff, 0x5287a449, 0x0, 0x4, 0x5}, {0x3, 0xeb, 0x1, 0x7, 0xa72, 0xfff}, {0xab, 0x2, 0x9, 0x562, 0x3ff}, {0x401, 0x80000000, 0x7e0217f7, 0x10001, 0x9, 0x7ff}, {0xffffffff, 0x1, 0x75, 0x30003157, 0x80000000, 0x3}, {0x2, 0x43, 0x7fffffff, 0x5, 0xc, 0x380a}, {0x200, 0x8, 0x1, 0x2, 0x8, 0x101}, {0x0, 0x2, 0x41, 0xfffffff9, 0x1, 0x92e}, {0x6, 0x3, 0x5, 0x80000000, 0x4, 0xffffffff}, {0x0, 0x3, 0xb5, 0x9, 0x0, 0x2}, {0x9, 0x47b, 0x8, 0x7ff, 0x101, 0x99}, {0x4, 0x6, 0xd68, 0xdbd5, 0x5, 0x5}, {0x482a9ac0, 0x80, 0x8, 0x2, 0x8, 0x7ff}, {0x8, 0xa5ec, 0x2, 0x1, 0x378, 0x6}, {0x400, 0x9256, 0x8, 0x0, 0x7, 0x6}, {0x7ff, 0x7, 0x7, 0x4, 0x2, 0xfffffffd}, {0x3, 0x7, 0x0, 0xfd, 0x4, 0x400}, {0x5, 0x8, 0x0, 0x1, 0x6, 0x5}, {0xb004a8e4, 0x5, 0x1, 0x3, 0x4, 0x1}, {0xc, 0x8, 0x2, 0x9, 0x16d4, 0x10001}, {0x3, 0x7ff, 0x5, 0x5, 0x9, 0x140000}, {0x7, 0x101, 0x40, 0xffff90cd, 0x1, 0x7}, {0x1, 0xffff6fe3, 0x5, 0x6, 0x9a, 0x1}, {0x80000000, 0x3, 0x9, 0x339, 0x5, 0x2}, {0x3, 0x2, 0x3ff, 0xb9, 0x9, 0x6}, {0x9, 0x6, 0x3ff, 0x1ef, 0x8, 0x2}, {0x80000001, 0xf8a, 0x81, 0x4, 0xaea0, 0x875}, {0x265f, 0x66c, 0x8, 0x9, 0x7f, 0x50b}, {0x2, 0x8, 0x0, 0x0, 0x0, 0x3ff}, {0x10001, 0x4080, 0x0, 0x0, 0x8, 0xffff}, {0x4, 0x5b, 0xe1f9, 0xa, 0x200, 0x2}, {0x7ff, 0x4, 0x1ff, 0x1, 0x8, 0x5}, {0x400, 0xd, 0x2, 0x1ff, 0x4, 0x612}, {0x10000, 0x8001, 0x5, 0x6, 0x6, 0x2}, {0x7, 0x8, 0x5, 0x2, 0x3, 0xb}, {0xf, 0x2, 0x3, 0x0, 0x10000000, 0x8}, {0x0, 0x100, 0x60f, 0x21e, 0x1, 0x9}, {0xe, 0x1e4000, 0x1, 0xfffffff9, 0x89d}, {0x1, 0x4, 0x9, 0x5, 0x7}, {0x1462, 0x8, 0x9, 0x8, 0x6, 0x4}, {0x527, 0x1ff, 0xa, 0xfffff800, 0x2f5d, 0x2}, {0x9, 0x7, 0xff, 0x1000, 0x40, 0x58}, {0x12e, 0x5, 0x3, 0x37d4, 0x89, 0x9}], [{0x2, 0x1}, {0x5}, {0x5}, {0x2}, {0x2}, {0x2}, {0x4}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {}, {0x1}, {0x5, 0x1}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x4, 0x1}, {0x5}, {0x2}, {0x5}, {0x5, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0xfc8fda93bade9b36}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x3}, {0x4}, {0x2}, {0x4}, {0x1, 0x1}, {0x1}, {0x2}, {0x5}, {0x5}, {0x5, 0x1}, {0x5}, {}, {0x4}, {0x4}, {0x3}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {0x4}, {}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {}, {0x2, 0x1}, {0x5}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {}, {0x1}, {}, {0x5}, {0x4}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {}, {}, {0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) accept4(r1, &(0x7f0000000140)=@ethernet={0x0, @dev}, &(0x7f00000001c0)=0x80, 0x800) 18m33.086136745s ago: executing program 4 (id=296): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$vbi(0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) pipe(0x0) socket$inet(0x2, 0x4000000000000001, 0x0) io_setup(0x3ff, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3}, {0x6, 0x24, 0x1a, 0x5}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102c9ccf310c80a01c305d40102030109021200010c0190060904"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, &(0x7f0000000780)={0x14, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000300)={0x14, &(0x7f0000000140)={0x40, 0x10, 0x96, {0x96, 0x5, "72585f8c17a0684d498bf853fb0e3fb6f72465770c0595676383c075a3d3b7a6a76af2f3a4fc0c6a218cd18d83994538ae048d74522e73b806326c7d3fb36f06aaed769a6b4018e6f5108fb04a070c124ca012427a6725d2d69a183c95dcfacde0db9c253bf2c2bc974ff0e2b8f59bb99da0d274e348dff10820637671770776158b8110a5fd7fa31591a1e07dd36aeea41de434"}}, &(0x7f0000000240)={0x0, 0x3, 0xad, @string={0xad, 0x3, "96e2f440c430d31b71a1798a65edcc00883caec0332228cda3c0539d7ad9fa723ba8dcca4811ebf5ee4a894c870f9ecc360cedb0a2a974667809c056022cee9ad5f60501eee298a0f220bed9a10f520381934028b7803b67515a4827dfa23b92615ae67bfc7d3b3655837627249ae76d37347fc1529b39058e4dd79886c3de14455b8b2a06c7d3d125f2caf028bfcd6614edd92e3107d71090471db0e00d2bfdb70a6a07eb20c6152c24e6"}}}, &(0x7f00000005c0)={0x2c, &(0x7f00000003c0)={0x0, 0xd, 0xcc, "36a2c43d453d485835dfa72ca8e1033f65a98f3a4f9cb3997fcde88db3a65fae696bf8374144b5472b9e42580f237f920b596760aa1710236e09a08220ff6b56ae9760ea0032812aba772758f29a99dec4e37cb602d0779e29019dc1c2cdd84c4cc7f7cf1474e9e71d1284aab5c050508cecfe385f2f876db5e396e147caafd499725ea0007708dba1e41660f96217feefbe2c4988d90053d366010279335d17d85b6cb23ed32cf404c761e202b6e1d2e2c402a16df0e3b52d40779c27b34237e2cd457fd4828d87c5a63768"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x23}, &(0x7f0000000540)={0xc0, 0x5, 0x2, "d675"}, &(0x7f0000000580)={0x40, 0x5, 0x6, "8113e6324458"}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xc2400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x37, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r4 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000380)={0x1, 0x1, 0x0, &(0x7f0000000100)=""/233, 0x0}) 18m31.485158255s ago: executing program 3 (id=301): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 18m31.357208798s ago: executing program 3 (id=302): r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 64) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) (rerun: 64) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000040)=0x3) (async) ioctl$OCFS2_IOC_UNRESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000080)={0x1, 0x0, 0x1, 0x0, 0xff, 0x7}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) (rerun: 64) sendmsg$nl_generic(r2, &(0x7f00000013c0)={&(0x7f0000000140), 0xc, &(0x7f0000001380)={&(0x7f00000001c0)={0x11b8, 0x20, 0x800, 0x70bd26, 0x25dfdbfe, {0x20}, [@nested={0x113d, 0xc3, 0x0, 0x1, [@nested={0x4, 0xbd}, @nested={0x4, 0xad}, @nested={0x4, 0x115}, @nested={0x4, 0x90}, @generic="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", @generic="009f4eb15973312b8ea271b3af016eca10b6cb58fead79e83b895f319744c94ea60a0f72aa3cd861e028230769531a66c09faee924cdf1777b44815085671181ab32c466ee8e1463079e265efc62433ff89eb32097fa3ac4445f2824905afdac16f969f8923b4b8799a6ccfb0fd0d1b56a3030336738e7183113cb9832485f4b366616fca51d89bf07802fe6eb0853bf9145730b9d23a7d457ce9374c9e1bd76ac51", @typed={0x8, 0x94, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x32}}, @generic="958c5ae0e54be99c4568dc70eb36fa163bec654c24d53db709d7880c0107b672dd71dd5f3ea1bc1029a15cd7646d2e4ad048d0ab6c1efe8b2499fffed82dbd28d85fe9a509321027af95e98451fa580994210bbd3534a513c11328240c34800813b56eb2180dec4bbe3167f903735e24d01092de68520132c70fc62306537a"]}, @generic="1e21b9b34b07b8426386ec7423e9ea82ba8a9426c540fa01fbf60d1917e5cf460ef450d5f7ab19caefedbaa5a848b015e1cf5f26b69ed38f8404000a643163d07aff5a2de2b1aa950f92f22c01217dcd8a2f8ca06e942014dcfaf9", @typed={0x8, 0xe9, 0x0, 0x0, @uid=r3}]}, 0x11b8}}, 0x4) (async) r4 = signalfd4(r1, &(0x7f0000001400)={[0x8]}, 0x8, 0x80000) pwrite64(r4, &(0x7f0000001440)="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", 0xfb, 0xfffffffffffffffb) (async, rerun: 64) r5 = syz_open_dev$hiddev(&(0x7f0000001540), 0x7, 0x22082) (rerun: 64) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, &(0x7f0000001580)={0x2, 0x0, 0xb, 0x5, 0x2, 0x2}) (async) recvmsg(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000015c0)=""/77, 0x4d}, {&(0x7f0000001640)=""/102, 0x66}, {&(0x7f00000016c0)=""/169, 0xa9}, {&(0x7f0000001780)=""/67, 0x43}, {&(0x7f0000001800)=""/30, 0x1e}, {&(0x7f0000001840)=""/38, 0x26}, {&(0x7f0000001880)=""/149, 0x95}], 0x7}, 0x120) (async) write$UHID_CREATE(r4, &(0x7f0000001a40)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000001a00)=""/50, 0x32, 0x101, 0x4, 0xffff, 0x8, 0x1}}, 0x120) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000001b80)={"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"}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000022c0)={'syztnl2\x00', &(0x7f0000002240)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0xff, 0x7f, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7, 0x40, 0x400040, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x1e, 0x35, &(0x7f0000001f80)=@raw=[@generic={0xd, 0x8, 0x3, 0xfffa, 0x101}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xac83}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x22a8a45b494e5c17, 0x1, 0x0, r4}, @generic={0x0, 0xe, 0xf, 0x5, 0x7ac17f5c}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @alu={0x4, 0x1, 0x3, 0x9, 0x3, 0xfb9adc96a5ea779c}], &(0x7f0000002140)='syzkaller\x00', 0x2, 0xac, &(0x7f0000002180)=""/172, 0x40f00, 0x23, '\x00', r6, @sk_lookup, r4, 0x8, &(0x7f0000002300)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000002340)={0x2, 0xb, 0xb, 0xb51}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000002380)=[r4], &(0x7f00000023c0)=[{0x3, 0x1, 0xf, 0xc}, {0x2, 0x5, 0x6, 0x9}, {0x0, 0x2, 0xc, 0x6}], 0x10, 0x3}, 0x94) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) (async, rerun: 32) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000024c0)=@req={0x7, 0x80, 0x200, 0x8}, 0x10) (async) getsockopt$netlink(r2, 0x10e, 0x4, &(0x7f0000002500)=""/115, &(0x7f0000002580)=0x73) (async) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000025c0), 0x200400, 0x0) flistxattr(r7, &(0x7f0000002600)=""/222, 0xde) (async) ioctl$INCFS_IOC_FILL_BLOCKS(r5, 0x80106720, &(0x7f00000028c0)={0x3, &(0x7f0000002840)=[{0xc9, 0xf, &(0x7f0000002700)="98695abaa7b6647010a20d96201073", 0x1}, {0x7, 0x88, &(0x7f0000002740)="ace049f6e37b6e79dd0b9f2f77afd9a417e3da595cf0a2478a75378b3d8e6fdb437e9d8aa8821fc7e1a2e4ba9ec20aeafe7b5e3bca1864bf9f3f1f2a29130c122c241547ed3e65d5b70a0879b6547f806c496423bcfb5b6685329fcc6ca8f7f1890892930c37d74388568d8e2fd89b89a2c57ea3c4ecb231bee0d8166862bb187daca77d49d864ac", 0x0, 0x1}, {0x9, 0x8, &(0x7f0000002800)="b7f6f2516699939f", 0x1b000b8f321ebe47}]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000002a00)={&(0x7f0000002900)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002940)=[0x0], &(0x7f0000002980)=[0x0, 0x0], &(0x7f00000029c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000002a80)={&(0x7f0000002a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000002b00)={r8, r9, 0x0, 0x0, 0x3}) (async) r10 = syz_open_dev$vcsn(&(0x7f0000002b40), 0xd9c, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7) (async) mkdir(&(0x7f0000002b80)='./file0\x00', 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000002bc0)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) 18m31.086047621s ago: executing program 3 (id=305): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000bfd2b357620012", 0x32}], 0x1}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000007c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x40, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4a}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42000}, 0x4000000) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6_vti0\x00', 0xc201}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000380)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e23, 0x7ff, @private0, 0x3}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e22, 0x5e4b, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00', 0x2}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @empty}], 0xc4) r5 = syz_mount_image$fuse(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0xa, &(0x7f0000000640)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0xc00}}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x100}}, {@max_read={'max_read', 0x3d, 0x2}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@obj_user={'obj_user', 0x3d, '\x00\x94'}}, {@subj_type}, {@uid_gt}]}}, 0x1, 0x0, &(0x7f0000000500)="ac48adfa631693f3fd1a3b7124f6f1f4cde60330bdbb2642efb1bf7101ae8d2f1f512762b2c0c2fd2d1aab32a5926fa65484d0") mknodat(r5, &(0x7f0000000540)='./file0\x00', 0x1, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 18m30.779143826s ago: executing program 3 (id=308): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000040)=""/141) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r2 = syz_ublk_setup_io_uring(0x79a8, &(0x7f0000000180)={0x0, 0x10b6, 0x200, 0x2, 0x1d}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) r3 = gettid() r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r4}, &(0x7f0000000000)) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r6, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kcmp(r3, r4, 0x6, r5, r2) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000000380)={0x1, 0x1, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/13, 0xd}], &(0x7f0000000340)=[0x7, 0x1, 0x1, 0x3ff]}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd23, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xffe0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x6}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xa59}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) 18m30.645691595s ago: executing program 3 (id=309): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000280)=0x2010, 0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000000c0)=@unspec, 0xc) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000017000/0x400000)=nil) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f00000002c0)="0707c4c12cc2c02ac4c3557e1c52008fc868ec5a35810f50d6060f01ca0f00d8c4c20190149a0f21ec", 0x29}], 0x1, 0x7f, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x8}, &(0x7f0000000240)=0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x80000001, 0x1, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044084) write$FUSE_DIRENT(r2, &(0x7f0000000340)={0xa0, 0xfffffffffffffff5, 0x0, [{0x4, 0x800, 0x3, 0x5, '.\x1b@'}, {0x6, 0x0, 0x11, 0xc9, '/dev/usb/hiddev#\x00'}, {0x4, 0x8001, 0x3, 0x8, '{\\\xc0'}, {0x2, 0x120000000000000, 0x4, 0x368, '@],{'}]}, 0xa0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) 18m29.47140114s ago: executing program 4 (id=313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x7, 0x3, 'ip6gretap0\x00'}]}]}], {0x14}}, 0xa0}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x7, 0x3, 'ip6gretap0\x00'}]}]}], {0x14}}, 0xa0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000018000000000b97dfeffffff00000000", @ANYRES32=0x0, @ANYBLOB="070d000001a0010014000300776c616e3100000000000000000000000a0001000180c20000010000"], 0x40}}, 0x0) 18m29.156526291s ago: executing program 4 (id=314): r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr(r0, &(0x7f0000000280)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000800) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load user:trusted: 00000000000000000061 '], 0x31, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, 0x0, 0x4004050) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r3, 0x6}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x12cd) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)={0x20, r5, 0x400, 0x70bd29, 0xe, {{}, {@void, @val={0xc, 0x99, {0x210, 0x3e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x24000000) close(0x3) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fgetxattr(r0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r6], 0x0, 0x0) 18m28.660036535s ago: executing program 3 (id=317): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="31032abd7000000000000900000008000300", @ANYRES32=r3], 0x24}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r2, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x81}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000005680), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x5, 0x1, 0x100, "1d075e6a7af9812e0000000001000000875800000000001000", 0x3147504d}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001200576d10000010fbdbdf2507000000", @ANYRESDEC=r7], 0x2c}, 0x1, 0x0, 0x0, 0x40c5}, 0x8800) close(r6) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000040)={0x6, @capture={0x1000, 0xcf4c3983ea142437, {0x8, 0x7}, 0x40, 0x7}}) r11 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xfffd, 0xb}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200040d0) r13 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r13, &(0x7f0000000140)="ba1b", 0x2, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r12, 0x1, 0x7, 0x6, @multicast}, 0x14) r14 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r14, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400"}) epoll_create1(0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 18m11.399669389s ago: executing program 32 (id=312): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000000203010800000000000000000a0000080800050500000028080900000c000010"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40088c0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4fcd7e5de2acb5dcb40eee5f6d9b1cad76a656202030fb9608", @ANYRES16=r1, @ANYRESOCT=r1], 0x24}, 0x1, 0x0, 0x0, 0x44014}, 0x20000010) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) clock_gettime(0x2, &(0x7f0000000040)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x204000) r7 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x42782, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) sendfile(r10, 0xffffffffffffffff, 0x0, 0x2000fb) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000300)=0x3) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r11 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) r12 = msgget$private(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRES16=r3, @ANYRESOCT=r7, @ANYRES32=r11], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r12, 0x2, 0x0) msgsnd(r12, &(0x7f0000000380)=ANY=[@ANYBLOB="d1cdc116c4c2d0cb3efcfdc352f7913e52d5dcf4e3cb1e049bc4149ac2672701ca242416320e67dc5c396713d63f6044746266e174c664a8", @ANYRESOCT=r4], 0xe3, 0x0) 18m11.231682737s ago: executing program 33 (id=318): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x0, 0x13, "00176a0000fcf7ffffa5e8673608f7ecfeff00"}) r3 = syz_open_pts(r2, 0x8182) dup3(r3, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) vmsplice(r5, &(0x7f0000000280)=[{&(0x7f0000001340)="ff", 0x1}], 0x1, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r6, 0x320, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20}, 0x40000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0xe4, 0x40, 0xb0, 0x0, 0x30, 0x19}, {0xeeef0000, 0x3000, 0x9, 0x0, 0x40, 0x5, 0x7d, 0x4, 0x58, 0x3, 0x3}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0xdddd0000, 0xffff1000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x9, 0xe, 0x4}, {0xdddd0000, 0x70000, 0x10, 0x0, 0x0, 0x7, 0xab, 0x3, 0x47, 0x83, 0xf7, 0x82}, {0x1000, 0xb000, 0x8, 0xa0, 0xb5, 0x8, 0x1, 0xd, 0x88, 0xf, 0x1, 0xfd}, {0x25000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x7e, 0xff, 0x70}, {0xd000, 0xb000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x16, 0x2, 0x13, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x3ff}, 0x80010031, 0x0, 0x6000, 0x42024, 0xb, 0x9501, 0x80a0000, [0x6840000000000002, 0x3, 0x91, 0xff]}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x15) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001b00)=[@textreal={0x8, 0x0}], 0x1, 0xe, 0x0, 0x0) 18m11.05458935s ago: executing program 34 (id=316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1b8}}, 0x24000040) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000f8ffffffff0300a4afa0a4006d610e9d0500020000", @ANYRES32=r0, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000200"/28], 0x50) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee0"], 0x1a0}, 0x41) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x3f, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) read(r6, &(0x7f00000001c0)=""/93, 0x5d) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r8 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0xfffffffffffffd5c}], 0x1, 0x51, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={0xffffffffffffffff, r1}, 0xc) socket$l2tp(0x2, 0x2, 0x73) 18m10.8804063s ago: executing program 35 (id=317): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="31032abd7000000000000900000008000300", @ANYRES32=r3], 0x24}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r2, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x81}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000005680), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x5, 0x1, 0x100, "1d075e6a7af9812e0000000001000000875800000000001000", 0x3147504d}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001200576d10000010fbdbdf2507000000", @ANYRESDEC=r7], 0x2c}, 0x1, 0x0, 0x0, 0x40c5}, 0x8800) close(r6) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000040)={0x6, @capture={0x1000, 0xcf4c3983ea142437, {0x8, 0x7}, 0x40, 0x7}}) r11 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xfffd, 0xb}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200040d0) r13 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r13, &(0x7f0000000140)="ba1b", 0x2, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r12, 0x1, 0x7, 0x6, @multicast}, 0x14) r14 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r14, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400"}) epoll_create1(0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 18m10.647549157s ago: executing program 36 (id=314): r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr(r0, &(0x7f0000000280)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000800) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load user:trusted: 00000000000000000061 '], 0x31, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, 0x0, 0x4004050) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r3, 0x6}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x12cd) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)={0x20, r5, 0x400, 0x70bd29, 0xe, {{}, {@void, @val={0xc, 0x99, {0x210, 0x3e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x24000000) close(0x3) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fgetxattr(r0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r6], 0x0, 0x0) 4m9.992607968s ago: executing program 7 (id=3114): syz_open_dev$video(&(0x7f0000000000), 0x8, 0x40800) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x40600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1f00000039000100faff07000400000001"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000fb0930000000060a0b04"], 0x58}, 0x1, 0x0, 0x0, 0x10010}, 0x24044054) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x60040004}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) r4 = syz_open_dev$sg(&(0x7f00000000c0), 0x7fffffffffffffff, 0x9672d70e0353bb72) (async) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x5, 0x5, 0xfffffffffffffffb, 0x2, 0x7, 0x3, 0x3, 0xe}, &(0x7f00000001c0)={0x80000001, 0x7f, 0xfffffffffffffffb, 0x7fffffffffffffff, 0xbe, 0x3, 0x4, 0x5}, &(0x7f0000000200)={0x0, 0x1, 0x83b4, 0x3, 0xc2, 0x2, 0xe, 0x8000000080000}, &(0x7f0000000280)={r5, r6+60000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000180)) 4m9.748307938s ago: executing program 7 (id=3116): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000980), 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) ioprio_get$pid(0x0, r3) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x7a, &(0x7f0000000080), 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x48800) ioperm(0x0, 0x6e, 0xe) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) 4m7.868046752s ago: executing program 7 (id=3122): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4888}, 0x4040) recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/227, 0xe3}, {&(0x7f0000000980)=""/90, 0x5a}, {&(0x7f0000000840)=""/146, 0x92}, {&(0x7f0000001840)=""/4104, 0x1008}], 0x4}, 0x70001}], 0x1, 0x102, 0x0) clock_nanosleep(0x4, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) dup2(r0, r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a9d8ca08450c038064f9010243010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x60, 0xf, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m6.350503351s ago: executing program 7 (id=3125): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x190) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f00000001c0)={0x1, 0x0, [{0x2, 0x4ed5df13bd56cd16, 0x0, 0x0, @sint={0x7f, 0x3}}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)="42f7a85b"}) r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r6, 0xc0505510, &(0x7f0000000480)={0x3, 0x1, 0x0, 0x0, &(0x7f0000001c00)=[{}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8800) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000380)) ioctl$int_in(r7, 0x5452, &(0x7f00000004c0)=0x3) 4m6.282351688s ago: executing program 9 (id=3126): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x1a4, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPRESSIONS={0x164, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x64, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x1c68}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x5a66}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x6}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xad36}]}}}, {0x5c, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x4}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, 'syz2\x00'}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x6092}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x30}, @NFTA_LOG_GROUP={0x6}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x7fffffff}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x58, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x9}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x80000001}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x171}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1cc}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffff2a}, {0x5, 0x87, 0x3}}]}, 0x4c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x1a4, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPRESSIONS={0x164, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x64, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x1c68}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x5a66}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x6}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xad36}]}}}, {0x5c, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x4}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, 'syz2\x00'}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x6092}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x30}, @NFTA_LOG_GROUP={0x6}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x7fffffff}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x58, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x9}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x80000001}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x171}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1cc}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffff2a}, {0x5, 0x87, 0x3}}]}, 0x4c}}, 0x0) (async) 4m5.988396878s ago: executing program 9 (id=3128): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=[{0x4, 0x0, 0x83}, {0x6, 0x0, 0xb187}], 0x2, 0x201, 0x0, 0x0, 0xa5, 0x5c}) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 4m5.936907251s ago: executing program 9 (id=3129): socket$netlink(0x10, 0x3, 0x9) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) (async) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) (async) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r5, &(0x7f0000002100)={0x2020}, 0x2020) write$dsp(r5, &(0x7f0000000b40)="37c6a9c08ca276e5cbbdc31676e70ec2a2907bfb56f1511a1c59297bd81a45c85f7e7b1b801d5d6b0c4d46b199fe4ecdc26fe0746a868af5272510b591646ac01341430277798ff0a32d131fbf2d1b44d104a602769b0acd455a150f4c248ad2a2d86a9774d30f0bd00c476bf8487db051a00c173c3b5f6a3fff2cef6790832a8d7904d325fc6bb1e4fc39c4ee85fa989639f9c81d78d2c16b276b3edd07c2468e85c60d6912d16d3d4f10eb5af9bba11a15b42ec278914530d18abc48b0eb8e0020cd9c0218564084abe4ff96aad462144614c31db933ae1b980123730feacab2ff2bedd9e40f82fb76771895f51ef7cd72df22484d12ce8d57a5e59b5b2049da1f64fcd39d8b38c5f129caa161f47466a8c7c9b16a8c41c9ef278ebd0968030fff24f2fc7a040b8f15c4b23783c6a2f5a3fad374fc42509da2c8581c47ceaf842320c67a03a5334eedd23c2f075a2d96045a8fb70791f3d052a68bd91eca2042bdaede173a02e370f93ca9ab33bcc2681290f5fa201ab64d0b695de3f2cb25228c054ea9754d8f17f7ba7396045b497dcaed27dabb2d6954c465d4f8ac5350dfa09e1a7623b5908196b7128ba30e47f2b132c7978712ef17770d4dfcf5b2b15b91cb734818c625d7539f51f34899208c21952cdf386f90d99567a4466a81156545dc0355730143ff459c3d910a5289088657b1188ec51e813f870c2d5d9232f890b72b38eebe872a3d23cc7fb6a203b5094d8d9019f70a746a1e4946ad90d2dcc154b42ec3a62e44142addd8d7e3c37e64928a75c01b61f43a9bf5eb621517f0e7e8fc8d568c11b23d458b7e4bba66ef40deef214e4192903c209d8d2b2a91f440c4e7312eed5db193691d72e8e06db0beb904d069541e3d9a7415c4f1fb1b41e42e1013588b260394bd025c31bf8e94030170d5346a75b528ac4cd800c46f8ac1cd64a169abd09668e3240114f0255485a314b581f0faeb97a503371676b11f5d49a69aa792e2fb5fe3059579a5035168a908afa8820625044206e17672269a91f5ba284be9538c125a562a4102174f5e0dfa7c28356d6a6b8479445450e10ecf93c1c4e9fc036e912ae205e8fead47adbf7aa4c934ef59b5f96b7d6a45a22383a64fa6e7597cb6596ab5f41b10a418f085716d6171c2c646389eedc3a195c3aa526c6e854316d86b5330eb0a5ae38ad00a31499f2519695823e0e69f949486543cb18dac860784b907c2ff829f9139bb097651bd6fb64cd8212726dbecf06cd5b0b67fd474e434024cac988a93f0bf3bb7a20c56a829c9cbecda4a2ae144b1b5ca7b747a67b9638764dc53322d5b74e550856c325d7c223df3bd42cb3432e20364bb4fb86461f427405137f4d9dec3af5343c7b45de0ee65bcc7f7619fc88f57b7527dfc389afde077d90b3dc0f0f088b9d07556b43d18f2e652027d91e1b8ed79841d32b8b603227e101c529b439341962b48d6d8147b7bde26d7b79a5a3e132107926bef0b42f806edb3168bd1c4b8af8688157732121dfdb120753075eaf5f4dbe56ea571076283c9a93f4da91b1a5b6afb34a3c4555f77808e7d3c537342fc422008274f568c24a29688a2499ed3e1ccca85b6fb71a3034d6f8f547c538e6f383af8ebb4cb77b6fafe099f6a54ff5f25779a36691ecff7370faea284d7a73844f999685b660e576b250591d1848fa5ebcab50df8f68424f2077ec4219c39cd81b3598f0f0f8c5a66a52338e5f09c073424a3d7a2fb693c0442320f1ac2f1c0679b52db6174ac6818f8b7ef34cb91c78c86e872edc3a92c50d9cfad4bb2bded5a3921264aa5fb16e767f3a2e6675b022f050e2da44ea826b6269303bba1dce831d2dab9d3735e8174a07cbaecc2e71bd0b01571141085ffe863263c2663b973d7d1716904446c7427f3228d80d4f8f071031adb10dc8bdcc81efa215b79afdc1f54f838125680417c698d2b840033bca00c54f7800450f7a10ddc2ac6cc452388b324016d54dc58f76880346d6cd8ffdd9aacbab2fa0316a3be9f9e6214a76bcdaabab10ed47200e24269912c55e1d982e41eb2d1b38aee3d0ab9991725c141329750bc91b2fd462474a710fedda5b01f3f2210dbe731b380419213a4baa152870999880ba44715d58fd623ce567a94cdbd447ca42c6186b243dafca0e9950d3c06eea1d57428868083072b21300343598c979d498799b859b39c2585e9cc1651e76a7021cb8ef95daaff71c66bf51fafe52fbba838302578d540444a43793a99cce8b06ef4875e0a2524172dae1c89e82e85ae81f62bbf76a48404456e4e7d0ea3bcd1de325b9bf91aba3db49c0fda24f52c0cb38d35a7183403e76997213b4f0bfb603a790b3dabb798aeef7f7bcbab9e2b56138a518e796d99f61f6361b3e54b3f1dc1157ecdbfe30b49ba7d701267024e7f076e4bf28e607ebc056e5124f98a0b6d095ed82c85c6ad0238ea078d0cb74e4b2e34b54bb6b4c923638c4ddeea172ad7db539e2cb18ae0fc68a419c6ca214002a7db9c7f2483315afb768fbf8d6626a0e3b284ccabb7d4ab81308e80d7f114e69759991a8dfe4729c75afe85f6b21ca6add5e2ff5e7dec811622f1013af5be0c6b8b08933c90b91a34b82c5cbb02c1902f54a1491e30c4740fdc0b05c1813fd5731821d838d9d26fc9eb9b77c30954d0547d0d132669476b6ca0707d821cd16020875911c28c1d75df908440acffaf0080120ea94795eef0a951b2f1eb647d0f70c078f3a1d1f4bf11a8f2539c1c072f9b7ffe78819bfa1aca1853d2b700274ffa4df146ebb90466c269598f665f3a60d688b0c85c1c8b02bd382bf1304e828b725a55793a61f173cf7d0e8f4130b9bba00b8dacb436e837903b8c2a7897d1dcd1df6942ea51294311100fe77185d34fd619db7fc28e155db0dd5011a3ab19f8536da1c1d76551ecd14271c11728aea59994a0bd8f350e45066d0b1dc419c3f88ede886341f090913bb875780ad47dcab1b3a0dd2212b38870ae4cf91a007e65bd91da538df92d655da5e9470caf2315499b9ea15b4004f4a0cc2ef5045aa79d58ee3567c7c38fcd5538b7c265ec8df32cae81b6bbc1fee4e1d4af3426dcba5739b138877e87da3934238c4cbed315eb04f81f8219c6e8226d2e32db8122cb8926c73f751d069f3f881995617673d2068256e8eb60a5f7b803d2447e85936beeee0b2fc9fc6003f599de747afd2cafbc047d980131d20fe0f24a48b92e6c86cc46f199061a4d2c089af1ef7176b7b592f150ac2825f59be4c1812276e9c004dbbd220c6ae0404b1bcc01014a9caf1922562b9a268884688ad7d8d07e796674ddda4edf5671595871d2544bf535eef09e4b2c0b3aed22edf935547e3f9a4bd624a54d33c560536daeffff6eda5f40a06118425e860b62a4ae95ec25c1392096ba6ee2b62c9fa36acc4f9e5124a7210154733aed94e4b344a6ef4739f2b723f9f87e3441bd4675db329d0d316b36e86deaabdafa57b843fcea1540284dcefda9880425d0585ceb35b20d09a5f5e4d6f3200634da65df65720be0f896187e47d4f28edb67aa777e1bd6498813f07d3493ec00fdb4775eeb50ad474cd05fdf7a3b207d7d703ad226912189e59ee5d5369c224c456a1ba21468f720eec4a7719d07afe0e39798e12a5c5e4d1b1189d52421db636dea68866b420854f8f332981e3b8b7daba5d48879f83707e56811ae322114e968fb948d5990e9ad5e7ec38d06cbc27eb56ff58b1765ff09443bf0c46e9aad3e81cdf55476b11d8b501112857838f3ceb90335eb5d4e75f107ad3deae8c62f4f0fa04661aee870395abc163e6b199033fc9d2f8575447f5e64bf44c635eeaaac1f1164d0fafe4ce1ea064b6bb44e2b7b862e8850e5a85a8fff8835fdf112f324a3c72c9861e0d57f3cfeaa508b744b0e3c9ba1296f32c74498bbfb050c3b00a00f91236c7563fdabf8bc39cd388ccd9d388533ff382484d1d3988e33f46640189cff8a00bb48ff4fbbc02008a0bfc3e98bba88214254f010b6503b1b44a48905c8cef83ed8e360309199971c41120fe69236e6c88a61dce7c873f05e48db400915add6a79759eb82509e967e35fe6706836f15e2b9622ada9dcff57b4299bd122add95eb27fb27812cbb25b0c94957cf4aecad369f917e1e8c9aadc19f9b8e1f68e08bba53e8254ec18526a35ec6a17e2f65119fba20bbc58450f1042e0965bd3e368a51736e79d4dda45a8f9d5a93f8e0e572b83da8fe4c4fc4668b0b16666dda0d3aeaf4933e46b4c1c15593ac81d6dacf67cf022d2f74d161a6cb52e0e785fcd17f546d16220e7e8a721ffe05b935e2cdd89848a8010bdc64f2213a2237a7988f3d77fb233ac4f921678cdc7d6a65e9f45b76356e5508f5b1a5f6fbc0c6f7c4f19aed934e35e9a6cece83ef3632646d7346765aaf2ce8438217cbb02d120d9b0995d11938a828b727536b9a6858bd794f80fc39b9e2d0203674cc1b574aac719e122a4ab183199f44419382f279a0a9c3bfbf4885494292b69149d1a4acc5b9b2731878a8e67612bf32ccfc2a183ac43d6805b38bf00ab6d33459c472af0979c3f26b30a3ce194448ddf8d0f0881a2c34c2a2b67278be0fce68c9294a9815c5d639e8695a334e5d624adec4ffe4207110f997386a8546f4f1abaa1cc3fb9176203115b873668a30e79f11e4e313e3222b57f499ed7587cec251a80da9b1d846479dd2979489eb1227cfa76f669ebed520df221f55b2394c2e1e589fd0a10e2d168dbd560bed92079f02306a46cf0392651a0a205a93cda4a2d3dabef0d742f690e0bcda585a25a57d4f4f577dcb4b92cf08cef59e097cc1465b47d1da80f4bc044f3b4538089d90403e158cdf41d667f9bf547e3ac13969db6086370cf8426fa10297a3a8b6dbdc2ad2d35be18b3ffba07bfd7a5590aee9031e7aa73c332ee79be4005e9e0d40a94d5269572c7932798fa5accd5a7e6ce939c41f918d03b3f7c11fe99ddef4a57a357f3212811ae202720cd97ae879c0e80b23e979531e4d01fdca4d7f5eb846cc1b950970bd412bf687c0ec367338ebdb22eccd1b4aa0511aad7cca6313c1532b2952ee02a1a192beb8ffdb7a95e0d9b078b3dabdd6d378cb0f0bd4b65e9c67fa0e84b20421a67cde94e58fea867fbff3ad6a551152cbcbd511ba87204269115817c1d2df7725ba10cf292864db633689989f8a728f2463dbcf4604f13063039e28d337c53c406ae9187a85aa9b41fe4f353739d653d605c701e753a3b4246808385e4fbc6a7065b6b5185c46d091fa5df3f582016eee264891729436237d48d63c6eb8e300f9ad7e67981db9406e2d771d196ec1a2d8ead08bb9ef5d50741eb02bcc46110b2ead76b781686fe621875b0c7e50d6bf46d495758b8482605e8b7f1bd71f14928ee38a69027ed86f696e1a0074597c20c7bbeee9f2f08f048c7d33b81bbcbea364cd85dc4f333ddbd1d12194f27b399bb66668f7a16935aee33e3bfa5778daa2f64488c5a7443e3ba49059a6b9a07500b21c9d0fa99d035110b0a693bf4f382436eef72c06547495ca37d3a9bfce7b91506c01ada1c0bceec6765e593f0ff0104efa84bbf26659a469af32bc817207674a6d8076d5d090982d489d5166a27fa557696be10b07ae3681c80bdc121d4093ac66f69671f3b5a1f63677ad434d00ccb980f5515f68323f9f3f8e3184409264f5b6b1cea3dd56c2defe6eb532a64d037940e490e0382a1f8addf910b104520a4e9d4e784e251025c1fdb12edfda3261fe4174117305da130f48", 0x1000) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [], [0x0, 0x0, 0x0, 0xff], 'veth0_macvtap\x00', 'wg1\x00', {}, {}, 0x6, 0x7d, 0x0, 0x48}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x4c00}, [@common=@inet=@ecn={{0x28}, {0x20, 0x0, 0x1, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x800}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x6, 0xa9b, 0x2c018, '\x00', 'syz1\x00', {0x5fd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4m5.755119352s ago: executing program 9 (id=3130): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$swradio(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f0000000040)={0x5, 0xb, 0x4, 0x2000, 0x9, {0x77359400}, {0x2, 0x0, 0x40, 0x5, 0x2, 0x4, "461649c4"}, 0x6, 0x4, {}, 0x2}) r4 = gettid() rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) tkill(r4, 0x7) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=@newsa={0x19c, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in=@private=0xa0100fe, 0x0, 0xecdf, 0x0, 0x0, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x1000000, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0x1, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x60, 0x2, {{'cbc(camellia)\x00'}, 0xc0, "6e000b000000002000000000190000000000feffff7f0000"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x19c}}, 0x44050) r5 = syz_open_procfs(0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000078000000060a010400000000000000000500000008000b400000000050000480240001800b00010074756e6e656c000014000280080001400000004108000240000000092800018008000100667764001c000280080002400000000a080003400000000a08000140000000090900010073797a30"], 0xec}}, 0x0) read$FUSE(r5, &(0x7f0000003480)={0x2020}, 0x2020) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x1b4, 0x16, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x194, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}]}]}, @NFT_MSG_NEWSETELEM={0x424, 0xc, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3f8, 0x3, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x80, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x15}]}}}, {0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}, {0x78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4e, 0x6, 0x1, 0x0, "98ea285bd9535e8b9908f0c42ab3f187dee2415a5aecd30180ae8adc170883d81323cc545abbf9acc363310ded664ef5cb8b4bbe2e8b364f90a4bc0011afde526922b0af10936adeaf81"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x200}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fff}]}, {0x2c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0xc5, 0x6, 0x1, 0x0, "9ba4922e5b0c1ab99f882bab3fab51bd962ebc62f46e362fe816e81210953a9e672a5cc7f835f3e856ce3edaff8974115af3c2d741e54abcbfdd69e1971163a65939c17ba5b022cfca62bd08b2b9fa7ff17781696a0292e648749ad1ba03609196e062bfdb00dea2c645ab4cfe7cf8a0987e5577979ac79b42661e2632622990823cf04d021c7ae6b02f32f50d28545bfae7fe71b9b0562b65ba65c28c81f3348c9fdcf5787ba0d105c0c41559ce0be490cecdda2832c27c6096a9400383425780"}, @NFTA_SET_ELEM_EXPRESSIONS={0xec, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x3c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xe}, @NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x6e}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x38, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, @NFTA_SET_ELEM_DATA={0x80, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7c, 0x1, "797ef55c81e11e088e8a3d1d42a2e5b97a3079f85a97b9849ae8c658ab0d785e1322be9e06b17b10b51ed6bce8a4ca99a019055f9ad34c9db4d6e813e68bc75c178dce88c8e6adfa1148e8971b92b5e5f379150936d280a88f3cb421c5a5a016e5954b30374b6901aed631d9c7d93427aaab083ffa482c75"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x620}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/237], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r11 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100050000000000000001000000000001090223ee01000045de090400000b030000000921200006012228000905810310000608c328569416774ea9b4b17ec51ebbe090c87fd4a16f3cee9a9524ae85760ed12322a80d1a1657af2ffbc7996ae02424f775d2e6a1eb549a122de23697f8d29cac89df3c5b6d8192507dd09e0f71bb5b73b5a9d4d5ea13f28930cd59a39ba14d84fd3fe60504b0690060745c4431754315b547ecf24cc0647308"], 0x0) syz_usb_control_io$hid(r11, &(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x3d1, {0x9, 0x21, 0xfffe}}}, &(0x7f0000000040)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair(0x2c, 0x1, 0x8, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40530, 0x5a1b5}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004884}, 0x40000) 4m5.332168061s ago: executing program 7 (id=3133): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000000)={0x20, 0x17, 0x73, "68b20d1302447c26ad1880929e1a4d0bd4406ef140a3d659bde746320261133f7addebb03f268a3fa2fcee8ccb58e84cd0da541a5e2f65f43b547905b07278b622e4178f5cd9d5f4ee1a48b5ccf1c62a2b98658449186dcf7c19705006f8e1c12c3684a2a23c74b4bc92e0e082ab0e676f99b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m3.535435154s ago: executing program 7 (id=3137): syz_usbip_server_init(0x3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000540)=[0x1], &(0x7f0000000200), 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) r0 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x87ffffffd, 0x16c282) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) ioctl$I2C_PEC(r0, 0x708, 0xfffffffffffffffa) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$cgroup_ro(r1, &(0x7f00000002c0)='cgroup.stat\x00', 0x275a, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24d81, 0x2) unshare(0x2c020400) fadvise64(r4, 0x81, 0x4, 0x5) 4m2.491335138s ago: executing program 9 (id=3141): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1d, 0x4, 0x3ff, 0x3, 0x2000, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@o_path={&(0x7f0000000000)='./file0\x00', r2, 0x4000, r0}, 0x18) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x9) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d903000008"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031400d3fc220000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 4m2.39677792s ago: executing program 9 (id=3142): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) socket$kcm(0x21, 0x2, 0xa) (async) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0}) (async) 3m48.450319039s ago: executing program 37 (id=3137): syz_usbip_server_init(0x3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000540)=[0x1], &(0x7f0000000200), 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) r0 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x87ffffffd, 0x16c282) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) ioctl$I2C_PEC(r0, 0x708, 0xfffffffffffffffa) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$cgroup_ro(r1, &(0x7f00000002c0)='cgroup.stat\x00', 0x275a, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef10542a2201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42731b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c32768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e179100a0000000000000021e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90a14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9edb6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc83cccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24d81, 0x2) unshare(0x2c020400) fadvise64(r4, 0x81, 0x4, 0x5) 3m47.191725002s ago: executing program 38 (id=3142): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) socket$kcm(0x21, 0x2, 0xa) (async) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0}) (async) 49.784167403s ago: executing program 8 (id=4116): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80402, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"04dfc86351907bcbc9293982262169af775bedfb0a63cb8031ecdc5351097e022d45a9640a4a4b506dc328f61ac030dacac442d82b9e81e6847961e65610b8f6e25f9eaf1a9f48ac011b67d68f8725991345a1f8ed6450a11246c6424cd7837f6bfc47209662ba0d0f44149fcefbbf6fa5b40644bce6cf7210107f57b850d0c9af06c766af1c637aa057167a6910e2e185b8d972e49eeda481d9a58394ef43958ce7407e73d6460653fc672aa4ab6a26bd1a631fa3a0f2b025ba137b8e3f933af28e1ea9984bc0438ea00b5f5b16893a22bb83ff1c92407a946d4dc7d347d526db0e71bb38f873937ca7343fb7248867adf5decd52e74f05c768c3b1c8282b9b1b1bc0f7ae08917b2abe3d3305e32b8db562d19dd7c83fde6dbe03ef72aa7ddc00144895b2a1981105046a28ca0852521afbcd560c15cd9f33e36417a251af7100392b6cdb0bbed4670d746c45fb5589f279cfd594911cb11f2a7336af10b2332e731f2eec8287c735f2346449f1629fde95d6c78bed90645bb280e222976d5721ee6dd6068cfd6174d2382e524672a2656eed5cf34eff27c2974deebf2aa6226e3fa2f15ea8db5891a062d422607a450a32cfdfaaeadfb2498e79fe9e47089b2a8bbdbdcbb0768c189c8fdc6246c00a34176a1c46a924ab4c3877215e5666c7b384e9238b3ad6ac559d90e22170d6915c7150a1858eb3f20a1847642018840b49c335074496991fb3193914f5213846ff8bf5b389298d797dfdd4a1d116caec17f13152c9699caab72a96d364134266030e67ada0de8d2bb05091f7d855fe1c435574856b0f8de9dc6af14ce179e3c0b6b563ccb8e02900fa9412784b0e5fa71a6e4499fecd1343d289daeb929d0cbd96f9f4501bc9d6d9d0b4f462aaf2556ce92ae6438bb3e3aa258c8c4ba6646f99f5a3d4f14f6773538faee834613461239487bee1b53724eb28301420ced16a8110a8680c91c665f8eff65e2d48f95db7ad4f30d079a39a2286fb3df3472d330f6f11fc7d1939a923c50263b3e0314037ec808df7cec279df5785fa2124d1650563799defc378cb9506ee7142eb108b3f4125ade3d9a73646bfdac795c753895b2ad51d358eff496d1c1a885c30b85b50eca89bf14ee50ae3301805f1691b3a391d7575c9a0a514710ad3e590491c60bdab122222c66cbb155452a01cb9750d14ffdc77ad11d4495c53bf38c8185c769c1409eb0b1c613eac8101d6784c9510790dd1df8fa6f2b4dbdbde3bdcbf6bfc456f68b680f2595853178e89a32e9c56d66fd2210fb0fc0e3cda61e6980e16e47ae8071182af80950c43ba221fe072e6945107a6edcd38bfeb201a657969bf340960a67e30987e56c953a177404fdf67b5d99bbc06d705a0fc9659336b458ea0d575ddfe59706738d1e65c50527200"}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002000)=[{{&(0x7f00000005c0), 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/83, 0x53}, {&(0x7f0000000780)=""/140, 0x8c}, {&(0x7f0000000840)=""/101, 0x65}, {&(0x7f00000008c0)=""/143, 0x8f}, {&(0x7f0000000980)=""/37, 0x25}, {&(0x7f00000009c0)=""/212, 0xd4}, {&(0x7f0000000ac0)=""/231, 0xe7}], 0x8, &(0x7f0000000c40)=""/148, 0x94}, 0x400004}, {{&(0x7f0000000d00)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000d80)=""/35, 0x23}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/103, 0x67}, {&(0x7f0000001e40)=""/101, 0x65}, {&(0x7f0000001ec0)=""/80, 0x50}], 0x5, &(0x7f0000001fc0)=""/57, 0x39}, 0xe}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sched_setattr(0x0, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (rerun: 32) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000100)={0x7, &(0x7f0000000280)=[{0x32, '\x00', @buffer={"fe65eabc4e42a4abe0af42d71bb73baa92e731dc7d2a7bdd51ba8035827906e3", 0x20}, 0x4}, {0x18, '\x00', @buffer={"c8387e37fe9d74e9db148c48a0b482a29c437bb180145f9a9486a702abb691b9", 0x20}, 0x9}, {0x1f, '\x00', @data=0xa, 0x7}]}) (async) r6 = io_uring_setup(0x1694, 0x0) (async) r7 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$FICLONE(r4, 0x40049409, r6) ioctl$SNDRV_PCM_IOCTL_UNLINK(r7, 0x4161, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x18, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="633e212dc5b05746730f5ea11805000000000400000000000000000085000008"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) (rerun: 64) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mremap(&(0x7f000065a000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f000035b000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x0, 0x0) 49.009771084s ago: executing program 8 (id=4121): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @private2, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000680)={r3, 0xc0000, 0x30}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000000000000000030c0001400000deff000001010800044000000001"], 0xe0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002fbd7040fbdbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="54ab5d6ef962575da0f1478a26a814c95a7ecdf5bdbb1a2e6a07522f56e6c7d28e00e4f849233600f7de1d1f806b67d442fe116b5637"], 0x1c}}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="011ad7bd7000fddbdf251cfb00000c00018008000100", @ANYRES32=r10, @ANYBLOB], 0x20}}, 0x20004080) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000a80)={@local, 0x0}, &(0x7f0000000ac0)=0x14) getpeername$packet(r1, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b40)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000bc0)={@initdev, @local, 0x0}, &(0x7f0000000c00)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000c40)={'batadv0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000c80)={@empty, @remote, 0x0}, &(0x7f0000000cc0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000010c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001080)={&(0x7f0000000d40)={0x304, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r10}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x11520e20}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r11}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x304}, 0x1, 0x0, 0x0, 0x4000890}, 0x20004040) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x7800, 0x700, 0x6, 0x3, {{0x25, 0x4, 0x3, 0x35, 0x94, 0x65, 0x0, 0xf, 0x4, 0x0, @multicast2, @private=0xa010101, {[@timestamp_addr={0x44, 0xc, 0x3c, 0x1, 0x8, [{@broadcast, 0x6}]}, @generic={0x88, 0xc, "35f9fb10c4628a6215b0"}, @lsrr={0x83, 0x7, 0xdc, [@multicast1]}, @timestamp_addr={0x44, 0xc, 0x8e, 0x1, 0xf, [{@multicast2, 0xb935}]}, @cipso={0x86, 0x40, 0x1, [{0x1, 0xe, "9ec04434941e95fcc1ab570c"}, {0x6, 0x3, "ea"}, {0x2, 0x9, "5912ebd0823e53"}, {0x7, 0x8, "c61a301f11a7"}, {0x0, 0xc, "41dc11a7b7a40035e5ad"}, {0x2, 0x4, "fbf0"}, {0x1, 0x8, "59a3b2336167"}]}, @rr={0x7, 0x13, 0x40, [@multicast2, @private=0xa010100, @remote, @empty]}]}}}}}) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x444630397d306b7f}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r6, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r18}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40840) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100), &(0x7f0000000200)=0x8) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000006c0)={0x310, 0x15, 0x100, 0x70bd26, 0x25dfdbfe, {0x15, 0xe}, [@INET_DIAG_REQ_BYTECODE={0xc7, 0x1, "3a21fbba60fe4d50a20587df55553bc10b2a7f5ed745cfa2307abcb5749d4e0f951a94e06bd8e0c88fef9958ed2bff1cbed3ee1a77bc70ea8f7a5582db448a39857c89b3ae98a5ffd2196956454ea11aac6af7b05e7c6dd9a2b7a483208d32ee335de53a4d44063adeb0513c16141482c75937c6e9178b3f80f9b107c84e45408ba92d1402ffff815533b21995271b2e3e4b31396bbc2a11bf2ad152ece56749e46db170999661a28700037df2e5aca242ba07a0932257ca183d3d58c9b2a7ab4ee25e"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "ddd7e059f9297b423272527cb444c5796a6b72d13325ba6288c22f16d8731bd957e8d97f2bef873f5678c0491f2b49d528647a84f55049f8afc25915519972e630375f463a752c867405a076de4cc665daa3327e4b6ede07fafc2d57f198bc0437e342e37f6b1881c71960ef8983e364e94ade45d8890f05005daa605e31d8198c719058b5707952a380be928ebb98b1c046188128501be358d17e06ce197120381de52d27abdc1db4a1448d47"}, @INET_DIAG_REQ_BYTECODE={0x23, 0x1, "0624e80dd6ea6146a28dc0fc6aa17e7b29c5a38df00a1884a595d5841c637c"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "955a2b40e7a96f9cb6f4158717aeb911b0d1486b1afadd26af86ec54165982f253cf42199ee000"/50}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "60c5c84b526e7825961eccf366e96af031ac90b043fa3d6d270438f38d58e7ed1f74b11946520b4b41924965559b950f2435b093dcf1dd626c6388ac24b86534eb69b8dbbe3dc41e3df7d6281ee44e52b5473cc5aac5709b779ad1384e9589025a4951a1b8b7909fcc0e0b48dc569fa15ebf1f95e6404cfcfd3dcc1e74c1891525e63f85bc79aa9b4e5ee0bde0de5e9e38a09d6ebce95b4562b7a8c3d6704aecdded92837b3741f6b2950c1c6e"}, @INET_DIAG_REQ_BYTECODE={0x6e, 0x1, "4b05400000000000006c20c5e9bf2330bfb3ff280a7abec61d4a95a79e85b9c16b05d652c32946b8a8aee24c43f65866ecae9f4742a395ecb3a3f0d2c6d953c5ce253399a1a2e0e3f4b2ef06e5ec46b3e35c3e304a285f7a5aef6680acc357cf8a891e78a995c2849975"}]}, 0x310}}, 0x80) 48.881137548s ago: executing program 8 (id=4122): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x1, {0x0, 0x0, 0x1}, 0xfe}, 0x18) bind$can_j1939(r4, &(0x7f0000000200)={0x1d, r5, 0x0, {0x0, 0x1, 0x7}, 0x2}, 0x18) getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f0000000040)=""/100, &(0x7f00000000c0)=0x64) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) sendmmsg$inet6(r6, &(0x7f0000000980)=[{{&(0x7f0000002440)={0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc63}, 0x1c, &(0x7f00000024c0)=[{&(0x7f0000000340)="35b3", 0x2}], 0x1}}, {{&(0x7f00000002c0)={0xa, 0x4e22, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000380)="01842211", 0x4}], 0x1}}, {{&(0x7f0000000780)={0xa, 0x4e21, 0x8, @local, 0x2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000007c0)="1ff9", 0x2}], 0x1}}], 0x3, 0x240848c0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000500)={0x0, 0x2, [0x640, 0x7a5, 0x891, 0x1bb]}) setsockopt(r6, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) r8 = socket$inet(0x2, 0x3, 0x1) setsockopt$sock_int(r8, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) sendmsg$inet(r8, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @broadcast}}}], 0x20}, 0x24008004) 48.092373645s ago: executing program 8 (id=4126): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="034888a8ae000500"], 0xfdef) syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002413b88400819151300000000000109022d00000000000009040000026bb22b000904fffffd1b070000091b40a10a14aa990809"], 0x0) 46.000836522s ago: executing program 8 (id=4139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x1c, 0x24, 0x107, 0xfffffefe, 0x0, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x5}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x8010) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x20000090}, 0x8084) socket$netlink(0x10, 0x3, 0x15) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000200), 0x4) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000340)={0x1, @pix_mp={0x63, 0x5, 0x7b0f2b5726150afa, 0x2, 0x8, [{0x10001, 0x5}, {0xfffffffe, 0x8}, {0x3, 0x5}, {0x5, 0x492a}, {0xfffffffe, 0x9}, {0x5, 0x102}, {0xb446, 0x4}, {0x10000, 0xf}], 0x70, 0x1, 0x8, 0x0, 0x4}}) 45.884610581s ago: executing program 8 (id=4140): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x7, 0x41, &(0x7f0000000080)={0x2, 0x3, 0x17, 0xff81}, 0x8, 0x20, 0x4, 0x0, 0x4bf, 0x404, 0x0}) 45.011671548s ago: executing program 39 (id=4140): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x7, 0x41, &(0x7f0000000080)={0x2, 0x3, 0x17, 0xff81}, 0x8, 0x20, 0x4, 0x0, 0x4bf, 0x404, 0x0}) 6.838537008s ago: executing program 1 (id=4315): r0 = syz_ublk_setup_io_uring(0x61d2, &(0x7f00000000c0)={0x0, 0x2364, 0x8, 0x0, 0x240}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x12, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f00000000c0)=0x7b, 0x19) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0x5, 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x1, 0x18c) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="39595ff6", 0x4}], 0x1) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f00000002c0)) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0x0, 0x0, 0x5}, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r5], 0xc4}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) iopl(0x3) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 5.839902381s ago: executing program 1 (id=4319): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) sendmmsg$inet6(r1, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000480)="bc", 0x1}], 0x1}}], 0x2, 0x8000) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) unshare(0x22020400) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', r2, &(0x7f0000000300)='./file0\x00', 0x41) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000380), 0x8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f4fd000010000104004000000201000000000000", @ANYRES32=0x0, @ANYBLOB="09000200010000002c001280080001006772650020000280060002000300000008000100", @ANYRES32=0x0, @ANYBLOB="060003000000000004001200144c98019e5681b3db8947c8f8766feeb535a424c2faf7696ca9a43ecbce83476a4ac28d31a7dac7c7517cbecd3fd17c52e1260b3e7edb8f2147e9fe4a9c871a9448368f11d05a51f209e3ebaa2b41c875c633885c0bd4998f1aa94de6fabca5dabc9e05762fcb56761c43c239548f7bb0ddc13a98c5daff25527761205e9e5a417457b32cee14fecc5842af6f8fb7f1c36ed368df682d"], 0x4c}, 0x1, 0x0, 0x0, 0x4014}, 0x0) 5.618113365s ago: executing program 1 (id=4321): socket$inet6_sctp(0xa, 0x1, 0x84) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x144) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r2, &(0x7f0000000180)=0xfe5f, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x4d39580f, 0x2, 0x3008, 0x3, 0xb, 0x6, 0x1}}) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000300)={0xfffffffb}, 0x10) sendmsg$nl_route(r5, 0x0, 0xc080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44090) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000280)={0x57, 0x80, 0x8000, {0xd, 0x3}, {0x12, 0x3}, @ramp={0x4, 0x9, {0x401, 0x4, 0x8, 0x1ff}}}) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000001800)=0x7, 0x6, 0x1) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x1c}}, 0x40) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ftruncate(r8, 0x2007ffd) sendfile(r4, 0xffffffffffffffff, 0x0, 0x1000a3) 5.51178173s ago: executing program 2 (id=4322): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000001063071220400001020301090269000342d35a50080b0101010620ca0904000000010120000924010900000900fe0904010000010220000904010101010220000905010940"], 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={0x1}) 4.647384805s ago: executing program 1 (id=4325): syz_usb_connect(0x5, 0x35, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x0) 4.059489703s ago: executing program 2 (id=4327): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') syz_usb_connect(0x0, 0x61, &(0x7f00000000c0)=ANY=[@ANYBLOB="120300000000000000040e0af761010203010d02120001090200dc090439d300030000e01b9d094cb408ea0eb2040177ba09"], &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1555555555555801}) syz_open_dev$usbfs(&(0x7f00000004c0), 0xffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001900010a0000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x0) r2 = io_uring_setup(0x4dc2, &(0x7f0000000400)={0x0, 0xb239, 0x40, 0xfffffffe, 0x32c}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x18, &(0x7f0000000000), 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060709050ae5"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x7, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xe}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x34000c24) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, 0x0, 0x44004) syz_usb_connect(0x5, 0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="12011003fe9a6910a4150010755d0000000000000000431129ce09023200020800b0630904c5090038ad2b0d09046003000202fff1052406000005240005000d240f01010000008e0109000a"], 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x80002, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000480)=""/212, 0xd4}, {0x0}, {&(0x7f0000000d80)=""/4096, 0x1000}, {0x0}], 0x4}, 0xffffffff}, {{&(0x7f0000001f00)=@sco={0x1f, @none}, 0x80, &(0x7f0000002140)=[{0x0}, {&(0x7f0000002000)=""/233, 0xe9}, {&(0x7f0000002100)=""/1, 0x1}], 0x3, &(0x7f0000002180)=""/59, 0x3b}, 0x10001}, {{&(0x7f00000021c0)=@rc, 0x80, &(0x7f0000002240), 0x0, &(0x7f0000002280)=""/167, 0xa7}, 0x3}], 0x3, 0x40002160, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x238, r3, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x80000000, 0x52}}}}, [@NL80211_ATTR_IE={0x55, 0x2a, [@link_id={0x65, 0x12, {@random="f640f721e37b"}}, @mesh_id={0x72, 0x6}, @prep={0x83, 0x1f, {{}, 0x8, 0x5, @broadcast, 0x3, @void, 0x7, 0x7ff, @device_a, 0xc1f}}, @mesh_id={0x72, 0x6}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @supported_rates={0x1, 0x7, [{0x5, 0x1}, {0x6, 0x1}, {0x30, 0x1}, {}, {0x56, 0x1}, {0xb}, {0x1, 0x1}]}]}, @NL80211_ATTR_IE={0xc2, 0x2a, [@perr={0x84, 0xbc, {0x34, 0xc, [{{}, @device_a, 0x3, @void, 0x36}, {{}, @device_b, 0x40, @void, 0x15}, {{}, @device_b, 0x9, @void, 0x42}, {{}, @device_a, 0x7, @void, 0xc}, {{0x0, 0x1}, @broadcast, 0x5, @value=@broadcast, 0xd}, {{0x0, 0x1}, @device_a, 0x1, @value=@device_b, 0xf}, {{}, @device_a, 0xb, @void, 0x25}, {{0x0, 0x1}, @device_a, 0x4fb, @value=@device_b, 0x34}, {{}, @device_a, 0x7, @void, 0x2e}, {{0x0, 0x1}, @device_a, 0x8001, @value, 0x1e}, {{}, @broadcast, 0x6, @void, 0x27}, {{0x0, 0x1}, @device_a, 0x23e9, @value=@device_b, 0x4}]}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x8, 0x34, @random="638d315a"}, @NL80211_ATTR_IE={0xc8, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @rann={0x7e, 0x15, {{}, 0x5, 0x0, @broadcast, 0x0, 0x3}}, @random={0xad, 0x78, "43646e9276d7e896dd6b4cf691c35136b7d325dab4f3dd5f28a99e7f47230f35cf9bff8f58b63faa26cdfe7f33f00002addc57482b4514d827b0616e9946c5e04b9d51326043ae39c26889c3187b61a92b4b31e582235e113c9e94bb8106fd445724decc20629b308b4fc0eb87d0e3486debf7ab54b6ab75"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0xd}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xe, 0xb7, 0x5}}, @link_id={0x65, 0x12, {@random="f0386064227c", @broadcast, @device_b}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ea95d0bd4392"}]}, 0x238}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.942123026s ago: executing program 0 (id=4328): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, 0x0) 3.732200071s ago: executing program 0 (id=4329): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2a020400) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f0000000000)={0x2, 0x1, 0x6, 0xfffe}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f627269646765001400010077"], 0xa8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32, @ANYBLOB="80007f0a0a0002000180c2000003000004000e8008000f"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x640801, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) unshare(0xc020600) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0f0000ff0f00000000000006000000000000008c17ffffffffffff05000000000000000000000000000000000000000000000000000000000000000400000004000000000000000000000002000000000000000002000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc77e8bdff6003600"/448]) fchown(r3, r5, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x200000, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 3.560997995s ago: executing program 6 (id=4330): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000001840)=ANY=[@ANYBLOB="08004305060005"], 0x1200) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='./file1\x00', 0x1) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xfc, 0x3c, 0x40, 0x10001, 0x2, 0x3e, 0x7, 0x294, 0x40, 0x1dd, 0x13, 0x0, 0x38, 0x1, 0x0, 0x333}, [{0x3, 0x3, 0x4, 0x100000000, 0x1c8, 0xe8, 0x4, 0x3}], "", ['\x00']}, 0x178) (async) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xfc, 0x3c, 0x40, 0x10001, 0x2, 0x3e, 0x7, 0x294, 0x40, 0x1dd, 0x13, 0x0, 0x38, 0x1, 0x0, 0x333}, [{0x3, 0x3, 0x4, 0x100000000, 0x1c8, 0xe8, 0x4, 0x3}], "", ['\x00']}, 0x178) close(r0) (async) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 3.416320345s ago: executing program 6 (id=4331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000000000a20000000000a03000000000000000000070000000900090073797a300000000044000000090a090400000000000000000700000008000a40000000000900020073797a310000000014000100627974656f726465720000000800054000000031140000001100010000000000000000000084000a00"/140], 0x8c}}, 0x0) 3.319905734s ago: executing program 6 (id=4332): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000000)={0x8}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000080)={0x5, 0x7, 0x3}) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)=0x7) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0xa, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000240)={&(0x7f0000000100), &(0x7f0000000140)=[{}], r2, 0x0, '\x00', 0x0, 0x1}) r3 = syz_ublk_setup_io_uring(0x7d19, &(0x7f0000000280)={0x0, 0xce26, 0x800, 0x0, 0xd0}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000400)={0x4, r4, 0x28, {0x9, 0x5}, 0x24}, 0x1) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000440)=0x5) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000480)) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x2580, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000500)={0x1, 0x5, 0x30000, 0x2000, &(0x7f0000ffe000/0x2000)=nil, 0x1000, r5}) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r0}, 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0xc8e00, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r5, 0x8010aebb, &(0x7f0000000640)={0xc000, 0x4000}) r7 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x228, &(0x7f0000000700)={[{0x21, 0x4e00, "d543fe951a4ef5f77a321e38abaecd5f9e3b8ea0acc50d83819bce8579984b0c22"}, {0x72, 0x4e00, "922cc8a9ff183a4a4804391ce09b0b114bc525196011f44499358cb06a45ebf0251edde343bcc128fb80f3fb98a31545ef1cbeb95f3cc9628d9c428608acf59be18aa0ef1bb127579fd4de4332fe8852b3b3f06c3b44f8dfa2bb08fe6d0191f14df7e5fbd09a50934245f352a10f35523af1"}, {0x13, 0x4e00, "7041c31c05ce8bdc57d076c31cd57f39edb7bc"}, {0xc4, 0x4e00, "cec3d76e16258d5e22b807466e3d22b53d8048af13eccb8fe80bbda633c49b3c3a545e7ff919a399a2cac0b412f26d5f23efd7fe36c6b1362b425d1236353d4696ee8b2c2f8ce4bbd099260baa51e02b87a081ef13d0983112fed021eb159afb687c2d8eee6399a7709ef05a413194b0e001930d3a6b809c4d87e434e05e5681a0bf678e0a36932415d7d450eec3a0addeb181e5a94c98e1aef382464eaa6aaf06d302fb801ac1c180dc626b8405b02484cb51a65c8456d1fa56561ce70cbc76864a69be"}, {0xa1, 0x4e00, "8320cf1ffd9eb38fc23d7f52736fed4a9d35d561c2e591af495ecba41a868aca8f877c42a745182799b33e2038e9c5ed60cee5bb08adda64d6b9645c09d933a30de2ad11ddc68f34e05f83b251f53157899ddd08b6bdc0e207423b240877937ee6f855d0342a05236ff20f10e8e4716c9913e03e123fae3e93010c78168e1b718fdc39283a59d0b3524af6f7d144e908cbb0fd600b9a6df423745edadc06c9ddc3"}]}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), r5) getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x53, &(0x7f0000000980)={0x7, 0x7, 0x3}, &(0x7f00000009c0)=0x28) ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x1) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000a00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8001) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000bc0)={0x0, @multicast1, @local}, &(0x7f0000000c00)=0xc) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000c40)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2}) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2000, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000d00)=@o_path={&(0x7f0000000c80)='./file0\x00', 0x0, 0x4008, r9}, 0x18) 3.139973769s ago: executing program 0 (id=4333): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fanotify_init(0x200, 0x48801) fanotify_mark(r4, 0x1, 0x1001, r2, 0x0) write$vhost_msg_v2(r3, &(0x7f0000002b00)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4}}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x2c, 0x40, 0x100, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0xffffffffffffff05, 0x5}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64=0x9550000}, @generic="b40ebfc01e56a0fcf098d75ddb67ad4daa44014cdf9dcafb5a604d9cb70afd18cb3681b0adf0e915c4318dd49d4e5f0cf95bf4a0eb8f0f439f47519621be0a0f62f9972d45f35e7f301bfa907d11165b4c1b8f489fd28aff28427fed09efe85e4bb3f97bfcf888163459c9520f09d90a3f", @typed={0x0, 0x108, 0x0, 0x0, @fd=r5}, @generic="b7ec18fb6e15286e8f7e2010674ac155013f904785e8a9504578694274932812484acd0b2fc4687e85752d0a8eb71a2a17af3b58fa37d6ba00e12e640aeff574097cb103b4558706d6912afa38f117d295bf4cb0a8b1ad294276f11419a238f7595fd95ba5936e3cf9fe1e3d3cba1259aab1c439b6361c0192aa0a8e4a35a42e2d35af9fd13f9cfe2fb7bb66bf5480dbdb46"]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_open_procfs$namespace(0x0, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff}) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0xffffffffffffff04, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x40012040) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0c0310bd7000fedbdf250b00000028000180080106000000000008000700", @ANYRES32=0x0, @ANYBLOB="1400040000000000000000000000ffffffffffff08000200070000000800030005000000080003000400000005000500020000000800020003000000050005007f000000"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x10) 2.935458166s ago: executing program 5 (id=4334): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) close(r1) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x200, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0xd, 0x0, 0x8}}, @TCA_GRED_DPS={0x10, 0x3, {0xb, 0x6, 0x0, 0x5}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x56b71c73}, @TCA_GRED_STAB={0x104, 0x2, "2fe92a8b53f42103801ff8e6621c314c8f25606ff6a27a8a58c5efbfa33e9ff72350a8a9c803809ddc5dc9f1dc75eacb314a82d51fb79fb261ec067a364dba187dde082f042932e76c88437a17f1bfe0b956baec86bd1027c9dbb2903df6ab5a20c36ca1f1dd1018377ca8578be69ba7266cec33da0559c846b9be19f7f98d7a61c4940629f79129c5346ea322e461bdb7bbaf2be47b0a0a66511aa11fe60d20f33f6bff2fd84929515f0eb32874f47c9d4884a6cabbe43bc5278e53ddda76507de914fb41dbdfc8f7383e3f14d37251e0de8d2bce4b1237c0ef1a05c46dff3f81cd8b2216c753a1f0e47b98cb321c3da9492673d0b5034023192a3059187b95"}, @TCA_GRED_LIMIT={0x8, 0x5, 0x72f0}, @TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x4, 0xc5, 0x8, 0x2d, 0x10001, 0x2, 0x9, 0xb071, 0x5, 0xb, 0x11, 0x1f, 0x40, 0x5, 0x1}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x2}, @TCA_GRED_PARMS={0x38, 0x1, {0x3, 0x4, 0x10000, 0x1, 0x7, 0xffffffff, 0x8, 0x800, 0x0, 0x3, 0x2, 0x5, 0x0, 0x7, 0xe973, 0x10}}, @TCA_GRED_DPS={0x10, 0x3, {0xe, 0xc, 0x1, 0x3}}, @TCA_GRED_DPS={0x10, 0x3, {0xb, 0xb, 0x1}}]}}]}, 0x200}, 0x1, 0x0, 0x0, 0x24040089}, 0x4800) r8 = fsopen(&(0x7f0000000240)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) (async) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000140), 0x12) clock_gettime(0x2, &(0x7f0000000300)) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x7, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x880) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x7, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x880) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$packet(0x11, 0x3, 0x300) r12 = syz_io_uring_complete(0x0, 0x0) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f00000000c0)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r11, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r13, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendto$packet(r11, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r13, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.664552784s ago: executing program 5 (id=4335): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="d80000001b00010000000000fedbdf25fc000000000000000000000000000000fe8800000000000000000000000000010000000006caa8f20700000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00080008000800000000000c0015000000000000000000"], 0xd8}}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000006c0)="75c1ccd07a5210ca6c94e254730800606759578db363f48925080034d4361384db13fd737428808959bcd0842fc930c81a8bd8b665cd232c5829977dd63ce2c88d43b177e47be6084fe6987e00000000003477dbf56c0a5a8cbc50d4078244404fee076b", 0x64}, {&(0x7f0000000380)="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", 0x24e}, {&(0x7f0000000fc0)="b62314417a72e12a7ab7f5601b3b351304000000000000007cd8a483d6dbc75ded58ba68758412", 0x27}, {&(0x7f0000000100)="d1e015496bc335", 0x7}], 0x4}, 0x8000) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/234, 0xea}], 0x1, &(0x7f0000002d00)=""/4087, 0xff7}, 0x0) close(r0) 2.588312622s ago: executing program 5 (id=4336): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ptrace$setregs(0xd, r0, 0x35, &(0x7f00000000c0)="7ce58a5c0b5dbea19b65eaeb192e5e567b373c49a1c66a16924ea189d06d9f359aee646687cc3a25ca1b8a933ef3ec2f19cdbe00b74007ec53bbadef339eae0c0208306a8253d4fe86bfdd89dac100154fee40e92953a9e5e9b40f63e29a90c3f05bbe86e86493867d00f64d7d1c40207beaa3ff92cf9a071857aa71b7ec584193f3745b15fe85d27f8d4a0b8cd45c50d35b29317c840c2a4ed9212466fe54109822bb8600c534fb2f4b3815f75b80e4f75b7f005a9e013dc5b90b79b5b6a28913f93dec415b86d738ff4a638143dd3027110edddabbeab3d375dc5e31ad") (async) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6d682db9, 0x800) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3007, 0x6, 0x805, 0x100000, 0x10001}) 2.545404508s ago: executing program 5 (id=4337): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x1) r0 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sg(0x0, 0x0, 0x5) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x17}, 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000100)="5360ca8758a35ee19a3439d93e5b89d45749bb26a95c9462c587fd7dcedc1ec3bc06c07e3ca04bac84514b138c86dbfa600a92423345d7acdc6bfa39d861d117", 0x40}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xf}, 0x1c, &(0x7f0000000880)}}], 0x2, 0x4000844) r3 = syz_open_dev$vim2m(0x0, 0x3, 0x2) set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000003c0)={0x0, 0x1, 0x2}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000040)=@overlay={0x6af, 0x1, 0x4, 0x28bfff5e0559917a, 0xd, {}, {0x3, 0xc, 0x1, 0x1, 0xfc, 0x0, "12848098"}, 0x1, 0x3, {}, 0x5}) r5 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000400)={0x6, 0x0, [{0x80000002, 0x0, 0x5, 0x2940, 0xf3570000, 0x1, 0x6}, {0x80000008, 0x0, 0x7, 0x90000, 0x9, 0x10, 0x1f89cc9}, {0x8000000c, 0x62, 0x2, 0x9, 0xffff, 0x400, 0x6}, {0xc0000000, 0x9, 0x2, 0x2, 0x7, 0xff, 0x2}, {0xc0000000, 0x7fffffff, 0x1, 0x6, 0x9, 0x7, 0x52b}, {0xc0000001, 0x1, 0xf96d0a697b0baaf0, 0x0, 0x1000, 0x1, 0xa}]}) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f00000000c0)=ANY=[], 0x8) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, 0x0, 0x0) sendfile(r7, r7, 0x0, 0x200000) 1.703941633s ago: executing program 0 (id=4338): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="210025bd7200000000003900000008000300", @ANYRES32=r1, @ANYBLOB="40005a803c00008005000200140000003000020049510f55111a28451e3b0f0f2e200530410815304c2608143f250520532b2e081553403224461d1049043b19"], 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110019bde521023398a71d7d8010203010902240001050940190904"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e9301020301090212"], 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x8) unshare(0x22020600) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f00000000c0)={0x0, 0x5, 0x400007f, 0x4000006, 0x8, "42341f9b1000007e4f00"}) r6 = syz_open_pts(r5, 0x60300) dup3(r6, r5, 0x0) splice(r5, 0x0, r4, 0x0, 0x7ffff000, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 1.600512668s ago: executing program 5 (id=4339): syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0x0, 0x8, 0x0, 0x43, 0x1000006, "00003f92000000a500000700000008", "0df52159", "0725eade", '\'q6O', ["aabe8400002224475793e8a7", "7f36ed000001000000e1d1e8", "fa0700f22b42a3023be516d1", "00fc3c51b1ad7e2b0cf63991"]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x32315241, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x7}, {0x0, 0x2}]}}) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x29, 0x5, 0x0) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x100, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000600)=""/246, &(0x7f0000000700)=0xf6) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r6, 0x10e, 0x4, &(0x7f0000000200)=""/42, &(0x7f0000000100)=0x2a) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r7) 1.524261673s ago: executing program 1 (id=4340): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x400000b7, 0x0, 0x4000000000000}]}) (async) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x80) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x2b, 0x3, 0x1c, 0x16, "238b6cb4ac08b98841947aa4d5f2c83607b8fd02c04bae924bed21ce3a55452eccb09d94db48d59b9c3427a25f934e61e975d790bfbf23e7b0abd71e7a4d2c2e", "0fa8b45ed52dca92bfa70261c8582196265709b5e33bd1fd7e0504467e8032c8", [0xf, 0x6]}) 1.374259563s ago: executing program 1 (id=4341): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000000)={{@host}, 0x200000000000, 0x0, 0x0, 0xfffffffc}) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000300)={0x13, &(0x7f0000000280)=[{0x29, '\x00', @data=0x7, 0x1}]}) r4 = io_uring_setup(0x654e, &(0x7f0000000200)={0x0, 0xca4a, 0x40, 0x3, 0x6}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000000000)=[@ioring_restriction_sqe_flags_required={0x3, 0xf}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) close(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000b1d000/0x2000)=nil, 0x2000) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x10050}], 0x1, 0x9d) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USERFAULTFD_IOC_NEW(r2, 0xaa00) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x29f}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000000000009050a", @ANYRES8], 0x0) 1.026562911s ago: executing program 0 (id=4342): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0xc011}, 0x400c0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000400, r2, &(0x7f0000000180)) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/73, 0x49}, 0x5}], 0x1, 0x0, 0x0) 954.333707ms ago: executing program 2 (id=4343): socket$kcm(0x10, 0x0, 0x0) (async) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) (async) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x101241, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x4000000000100) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x8c8c340d56c02591, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) sendmsg(r5, &(0x7f0000000500)={&(0x7f0000000340)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)="cc36bc654b9c98d5b5ba0c2b60b9d898b35899f33619bfd52b544aa1a90a74e4d3754e057409fc44fa30338d022dac8497ec5fdce496", 0x36}, {&(0x7f0000000400)="32282cb9e061d07c7aaadee0644c989ef8ef7fe4db3fc770cf93a02438cc18aa5368262b64d864214f8665b49be9ef373b", 0x31}], 0x2}, 0x4000040) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000100)="b800008ec0650f21980f18d6dbe0baf80c66b8c497458066efbafc0ced0f01ca440f20c066350d000000440f22c02664660ff83af20f1b893b00f3a7", 0x3c}], 0x1, 0x15, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000001340)={0x0, 0x23ad697ddad057f0}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r4, 0x4068aea3, &(0x7f0000000540)={0xce, 0x0, r8}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) (async) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) (async) close_range(r1, 0xffffffffffffffff, 0x400000000000000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d3000000000000014001680100001800c0005"], 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x0) 836.594497ms ago: executing program 0 (id=4344): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x6) 701.865436ms ago: executing program 5 (id=4345): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000010450c1251000000000001090224000100000000090400071903000000092100020301432d0009058103000400ff03624a751dff15ac8606b47ba537581eefaa8c3f9ba5dad47b259a5df89b9b0e32e7cad678044750eed100ccaaa1080a931537886da3ed142a8f0a47032aa315faf8baa6a2f2c73276250c2ad51f097c1523bfe5f230dc5336a60596"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000021) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000003c0)='.\x00', 0x5db) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r5 = inotify_init1(0x80800) inotify_add_watch(r5, &(0x7f0000000300)='./file1\x00', 0x10000200) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4e2603, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000080)={@host, 0x2}) set_mempolicy(0x6005, &(0x7f0000000080)=0x5, 0x7) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, 0x0, 0x5000) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r1, 0xffffffffffffffff, 0x0) 695.753821ms ago: executing program 2 (id=4346): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x33) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0xd0000540) r2 = socket(0x40000000015, 0x5, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$SIOCGETNODEID(r2, 0x89e1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000cc0)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100001a) syz_emit_ethernet(0x103, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x3, 0x0, [0x8b5, 0x664, 0x37b, 0xba5]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400078005001500040000000800124000000000050005000a000000050004000000000015000300686173683a69702c706f7274"], 0x64}}, 0x10000) mknod$loop(&(0x7f0000000040)='./control\x00', 0xfff, 0x1) syz_ublk_setup_io_uring(0x490d, &(0x7f0000000100)={0x0, 0x6a6d, 0x20000, 0x2, 0x28a, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000400)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r0, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r4, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000000)="974701000000201c2401e18d93d74c6f68bb1a761a4a946249c9a8349f39063fc3370030", 0x24}], 0x1, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010101}}}], 0x20}, 0x400c804) syz_io_uring_setup(0xd56, &(0x7f0000000440)={0x0, 0x2f0f, 0x2, 0x2, 0xf1}, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0xa, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a54b72bf8f6e6a9121bfb364", @ANYRES32=r7, @ANYBLOB="140012800b000100627269646765000004000280"], 0x3c}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 617.219814ms ago: executing program 2 (id=4347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, &(0x7f0000000640)=[{0x0}, {&(0x7f00000004c0)="158a540d", 0x4}], 0x2, 0x8, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c720000000000020000000002000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) 528.703568ms ago: executing program 2 (id=4348): syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000001063071220400001020301090269000342d35a50080b0101010620ca0904000000010120000924010900000900fe0904010000010220000904010101010220000905010940"], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 303.082814ms ago: executing program 6 (id=4349): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x48000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000001, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x0, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x9, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x8000003}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0xfffffffb, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x10000, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0x2}, {0x7, 0x9, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0xffff, 0x9, 0x44, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x80002, 0x6, 0x44}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x101, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x1}, {0x6, 0x7, 0x5, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x6f}, {0x5, 0x8, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x2, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x6}, {0x2, 0x31f1, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x3ff, 0x3649}, {0x800007, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x10, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x4, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0xfffffffe, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0xa, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x5, 0x94, 0x4, 0x40000088}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x2, 0x1ff, 0x80000001}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x4}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x10000007, 0x6, 0x8, 0x2, 0x2}, {0x10004, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xdb}, {0x5, 0x66, 0x41d0, 0x8001, 0xc851, 0x3}, {0x6, 0x731, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x2004, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x0, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x5a, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x29, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x8, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x5, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x3, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x9, 0xe61, 0xc5c3, 0x3, 0x1}, {0x4, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0x4}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x4}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0x7d}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000006f80)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000000c0)={0xffffffffffffff2c, 0x2, r6}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x48000, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) shutdown(r1, 0x2) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000001, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x0, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x9, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x8000003}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0xfffffffb, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x10000, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0x2}, {0x7, 0x9, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0xffff, 0x9, 0x44, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x80002, 0x6, 0x44}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x101, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x1}, {0x6, 0x7, 0x5, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x6f}, {0x5, 0x8, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x2, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x6}, {0x2, 0x31f1, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x3ff, 0x3649}, {0x800007, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x10, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x4, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0xfffffffe, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0xa, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x5, 0x94, 0x4, 0x40000088}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x2, 0x1ff, 0x80000001}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x4}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x10000007, 0x6, 0x8, 0x2, 0x2}, {0x10004, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xdb}, {0x5, 0x66, 0x41d0, 0x8001, 0xc851, 0x3}, {0x6, 0x731, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x2004, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x0, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x5a, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x29, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x8, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x5, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x3, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x9, 0xe61, 0xc5c3, 0x3, 0x1}, {0x4, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0x4}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x4}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0x7d}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000006f80)={0xc}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000000c0)={0xffffffffffffff2c, 0x2, r6}) (async) 183.140111ms ago: executing program 6 (id=4350): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) read$dsp(r0, &(0x7f0000000340)=""/36, 0x24) (async) read$dsp(r0, &(0x7f0000000280)=""/79, 0x4f) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = eventfd(0x8000) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r4, 0x5, 0x2, r2}) (async) init_module(&(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x9, 0x2, 0x7f, 0xa3bf, 0x3, 0x3, 0x3, 0x2c4, 0x40, 0x35e, 0x7, 0x9, 0x38, 0x2, 0x4000, 0x7, 0xb289}, [{0x3, 0xc98, 0x4b, 0x1, 0x1ff, 0x3, 0x8, 0x4}, {0x3, 0xe, 0x3, 0x7, 0x64, 0x6, 0x4, 0x6}], "5aa079ebcd21dcc8657581563f66ba94985a96dd995a6949b4510c071cb64b466b0987c97e82cabad2e6a6923348bda9bf57ee45c9c636828cbd2ca3302c6ebd291eb5cafc8da2ea4690637d57926c3a97ee86a375d0eeea3bd656ea", ['\x00']}, 0x20c, &(0x7f00000005c0)=':[\x00') (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8}}}, 0x4c}}, 0x50) 0s ago: executing program 6 (id=4351): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) (async) accept4(r1, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 64) listen(r2, 0x5) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r3, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x6c, 0x0) (async) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="000001080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}}, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r6 = io_uring_setup(0x400007, &(0x7f0000000040)={0x0, 0x641, 0x40, 0x8000008, 0x6000c1}) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) (rerun: 64) epoll_create(0x56) (async) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): dDevice= 0.40 [ 1167.682040][ T9435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.691461][ T9435] usb 6-1: Product: 䐊 [ 1167.696000][ T9435] usb 6-1: Manufacturer: ﳿ [ 1167.703573][ T9435] usb 6-1: SerialNumber: В [ 1167.839137][T19106] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 1167.943150][T22210] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3957'. [ 1167.969303][T22210] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3957'. [ 1168.001713][T19106] usb 2-1: device descriptor read/64, error -71 [ 1168.013467][ T9435] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1168.093995][ T9435] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1168.117194][ T9435] usb 6-1: USB disconnect, device number 55 [ 1168.162721][T15391] udevd[15391]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1168.269672][T19106] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 1168.411099][T19106] usb 2-1: device descriptor read/64, error -71 [ 1168.530885][T19106] usb usb2-port1: attempt power cycle [ 1168.541740][T18685] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1168.575489][T18685] usb 9-1: USB disconnect, device number 62 [ 1168.889045][T17360] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1168.919666][T19106] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 1168.961491][T19106] usb 2-1: device descriptor read/8, error -71 [ 1169.059029][T17360] usb 6-1: Using ep0 maxpacket: 16 [ 1169.070890][T17360] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1169.099034][T17360] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1169.119036][T17360] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1169.125739][T17360] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1169.143678][T17360] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.170936][T17360] usb 6-1: config 0 descriptor?? [ 1169.219847][T19106] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1169.252162][T19106] usb 2-1: device descriptor read/8, error -71 [ 1169.361109][T19106] usb usb2-port1: unable to enumerate USB device [ 1169.380170][ T7170] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1169.395515][T17360] hid_parser_main: 4 callbacks suppressed [ 1169.395536][T17360] kye 0003:0458:0138.004F: unknown main item tag 0x0 [ 1169.422436][T17360] kye 0003:0458:0138.004F: unknown main item tag 0x0 [ 1169.438055][T17360] kye 0003:0458:0138.004F: unknown main item tag 0x0 [ 1169.457875][T22227] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3961'. [ 1169.488362][T17360] kye 0003:0458:0138.004F: unknown main item tag 0x0 [ 1169.515948][T17360] kye 0003:0458:0138.004F: unknown main item tag 0x0 [ 1169.532388][T17360] kye 0003:0458:0138.004F: unknown main item tag 0x0 [ 1169.546376][T17360] kye 0003:0458:0138.004F: unknown main item tag 0x0 [ 1169.564318][ T7170] usb 9-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1169.574925][ T7170] usb 9-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1169.574933][T17360] kye 0003:0458:0138.004F: unknown main item tag 0x0 [ 1169.601182][ T7170] usb 9-1: Product: syz [ 1169.612043][T17360] kye 0003:0458:0138.004F: unknown main item tag 0x0 [ 1169.620805][ T7170] usb 9-1: config 0 descriptor?? [ 1169.635508][T17360] kye 0003:0458:0138.004F: unknown main item tag 0x0 [ 1169.641384][ T7170] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 1169.660634][ T7170] usb 9-1: Detected FT232H [ 1169.660722][T17360] kye 0003:0458:0138.004F: unexpected long global item [ 1169.691086][T17360] kye 0003:0458:0138.004F: parse failed [ 1169.703614][T17360] kye 0003:0458:0138.004F: probe with driver kye failed with error -22 [ 1169.736893][T17360] usb 6-1: USB disconnect, device number 56 [ 1169.837222][ T7170] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1170.069447][T17360] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1170.249036][T17360] usb 6-1: Using ep0 maxpacket: 16 [ 1170.265368][T17360] usb 6-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 1170.290381][T17360] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x86 has an invalid bInterval 51, changing to 9 [ 1170.303921][T17360] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x86 has invalid maxpacket 33540, setting to 1024 [ 1170.322787][ T7170] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1170.323445][T17360] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1170.343432][T17360] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1170.354898][T17360] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.398646][T17360] usb 6-1: config 0 descriptor?? [ 1170.540682][ T7170] usb 9-1: USB disconnect, device number 63 [ 1170.628696][ T7170] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1170.648759][ T7170] ftdi_sio 9-1:0.0: device disconnected [ 1170.762435][T22239] fuse: Bad value for 'fd' [ 1170.867683][T17360] usbhid 6-1:0.0: can't add hid device: -71 [ 1170.875381][T17360] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1170.886905][T17360] usb 6-1: USB disconnect, device number 57 [ 1171.127870][T22244] binder: 22243:22244 ioctl c0306201 0 returned -14 [ 1171.143324][T22244] binder: 22243:22244 ioctl 2271 200000000380 returned -22 [ 1171.153124][T22246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.162287][T22246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.490271][ T9435] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1171.679896][ T9435] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1171.697017][ T9435] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1171.708560][ T9435] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1171.710358][T22257] syz_tun: entered allmulticast mode [ 1171.721712][ T9435] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1171.738440][ T9435] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1171.769192][ T9435] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.780420][ T9435] usb 9-1: config 0 descriptor?? [ 1171.835722][T22259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.855019][T22259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.888781][T22259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.920286][T22259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.004651][T22265] netlink: 'syz.1.3977': attribute type 2 has an invalid length. [ 1172.015832][T22265] netlink: 'syz.1.3977': attribute type 2 has an invalid length. [ 1172.072514][T22267] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3975'. [ 1172.206022][ T9435] plantronics 0003:047F:FFFF.0050: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1172.339139][T17360] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1172.487621][T22273] binder: BINDER_SET_CONTEXT_MGR already set [ 1172.494539][T17360] usb 2-1: Using ep0 maxpacket: 32 [ 1172.501330][T22273] binder: 22272:22273 ioctl 4018620d 200000000100 returned -16 [ 1172.511891][T17360] usb 2-1: too many configurations: 140, using maximum allowed: 8 [ 1172.522162][T17360] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1172.530338][T17360] usb 2-1: can't read configurations, error -61 [ 1172.537323][T22273] binder: BINDER_SET_CONTEXT_MGR already set [ 1172.545076][T22273] binder: 22272:22273 ioctl 4018620d 2000000002c0 returned -16 [ 1172.559966][T22273] binder: 22272:22273 ioctl c0306201 0 returned -14 [ 1172.568122][T22273] binder: 22272:22273 ioctl 2271 200000000380 returned -22 [ 1172.689660][T17360] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1172.839281][T17360] usb 2-1: Using ep0 maxpacket: 32 [ 1172.851872][T17360] usb 2-1: too many configurations: 140, using maximum allowed: 8 [ 1172.871461][T17360] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1172.879876][T17360] usb 2-1: can't read configurations, error -61 [ 1172.888597][T17360] usb usb2-port1: attempt power cycle [ 1172.923998][T22287] fuse: Bad value for 'fd' [ 1173.034494][T18685] usb 9-1: USB disconnect, device number 64 [ 1173.118007][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880585a2000: rx timeout, send abort [ 1173.229113][T17360] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1173.269684][T17360] usb 2-1: Using ep0 maxpacket: 32 [ 1173.276786][T17360] usb 2-1: too many configurations: 140, using maximum allowed: 8 [ 1173.301935][T17360] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1173.319031][T17360] usb 2-1: can't read configurations, error -61 [ 1173.433137][T22292] netlink: 'syz.6.3984': attribute type 11 has an invalid length. [ 1173.449096][T17360] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1173.489513][T17360] usb 2-1: Using ep0 maxpacket: 32 [ 1173.499360][T17360] usb 2-1: too many configurations: 140, using maximum allowed: 8 [ 1173.530635][T17360] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1173.539177][T17360] usb 2-1: can't read configurations, error -61 [ 1173.552813][T17360] usb usb2-port1: unable to enumerate USB device [ 1173.618131][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880585a1000: rx timeout, send abort [ 1173.630050][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880585a2000: abort rx timeout. Force session deactivation [ 1173.905720][T22304] binder: BINDER_SET_CONTEXT_MGR already set [ 1173.920317][T22304] binder: 22303:22304 ioctl 4018620d 200000000100 returned -16 [ 1173.946846][T22304] binder: BINDER_SET_CONTEXT_MGR already set [ 1173.961698][T22304] binder: 22303:22304 ioctl 4018620d 2000000002c0 returned -16 [ 1173.995223][T22304] binder: 22303:22304 ioctl c0306201 0 returned -14 [ 1174.016689][T22304] binder: 22303:22304 ioctl 2271 200000000380 returned -22 [ 1174.126374][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880585a1000: abort rx timeout. Force session deactivation [ 1174.366131][T22311] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1174.835999][T22325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.845515][T22325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.869074][T18685] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1174.887450][T22328] netlink: 6 bytes leftover after parsing attributes in process `syz.8.3996'. [ 1174.915739][T22328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1174.943036][T22328] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3996'. [ 1175.052954][T18685] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1175.068495][T18685] usb 6-1: config 211 has an invalid interface number: 123 but max is 0 [ 1175.078691][T18685] usb 6-1: config 211 has no interface number 0 [ 1175.085497][T18685] usb 6-1: config 211 interface 123 has no altsetting 0 [ 1175.095373][T22343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1175.096985][T18685] usb 6-1: New USB device found, idVendor=07c4, idProduct=a4a5, bcdDevice=52.ed [ 1175.121246][T22343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1175.131792][T18685] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.141315][T18685] usb 6-1: Product: syz [ 1175.150203][T18685] usb 6-1: Manufacturer: syz [ 1175.161743][T18685] usb 6-1: SerialNumber: syz [ 1175.262251][T22345] loop8: detected capacity change from 0 to 7 [ 1175.278233][T22345] Dev loop8: unable to read RDB block 7 [ 1175.284730][T22345] loop8: unable to read partition table [ 1175.291003][T22345] loop8: partition table beyond EOD, truncated [ 1175.299227][T22345] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 1175.525696][T22355] fuse: Unknown parameter '0x0000000000000003' [ 1175.529294][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 1175.529310][ T29] audit: type=1326 audit(1780596889.195:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22354 comm="syz.8.4003" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde9f79ce59 code=0x0 [ 1175.732606][T22361] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4002'. [ 1175.959190][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1177.122880][T22381] fuse: Bad value for 'user_id' [ 1177.133489][T22381] fuse: Bad value for 'user_id' [ 1177.231246][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.238075][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.410773][T22403] kvm: kvm [22402]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1177.420302][T22403] kvm: kvm [22402]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1177.500749][T18685] usb-storage 6-1:211.123: USB Mass Storage device detected [ 1177.519350][T18685] usb-storage 6-1:211.123: Quirks match for vid 07c4 pid a4a5: 420 [ 1177.698310][T18685] usb 6-1: USB disconnect, device number 58 [ 1177.908259][T22421] bond1: invalid ARP target 0.0.0.0 specified for addition [ 1177.915848][T22421] bond1: option arp_ip_target: invalid value (0) [ 1177.926462][T22421] bond1 (unregistering): Released all slaves [ 1178.518426][T22437] bond1: option arp_interval: invalid value (18446744073709547520) [ 1178.568156][T22437] bond1: option arp_interval: allowed values 0 - 2147483647 [ 1178.612478][T22437] bond1 (unregistering): Released all slaves [ 1178.763907][T22454] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1178.909080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1179.103820][T22464] bridge0: entered promiscuous mode [ 1179.138461][T22464] bridge0: entered allmulticast mode [ 1179.149104][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 1179.175216][T22465] loop8: detected capacity change from 0 to 1 [ 1179.191315][T22465] Dev loop8: unable to read RDB block 1 [ 1179.204701][T22465] loop8: unable to read partition table [ 1179.217246][T22465] loop8: partition table beyond EOD, truncated [ 1179.241961][T22465] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1179.299030][ T7399] usb 9-1: new full-speed USB device number 65 using dummy_hcd [ 1179.471989][ T7399] usb 9-1: not running at top speed; connect to a high speed hub [ 1179.495179][ T7399] usb 9-1: config 10 has an invalid interface number: 249 but max is 0 [ 1179.517868][ T7399] usb 9-1: config 10 has an invalid interface number: 31 but max is 0 [ 1179.531701][ T7399] usb 9-1: config 10 contains an unexpected descriptor of type 0x1, skipping [ 1179.551075][ T7399] usb 9-1: config 10 has 2 interfaces, different from the descriptor's value: 1 [ 1179.570953][ T7399] usb 9-1: config 10 has no interface number 0 [ 1179.584566][ T7399] usb 9-1: config 10 has no interface number 1 [ 1179.599100][ T7399] usb 9-1: config 10 interface 249 altsetting 197 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1179.629031][ T7399] usb 9-1: too many endpoints for config 10 interface 31 altsetting 15: 230, using maximum allowed: 30 [ 1179.651598][ T7399] usb 9-1: config 10 interface 31 altsetting 15 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 1179.669829][ T7399] usb 9-1: config 10 interface 31 altsetting 15 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1179.689827][ T7399] usb 9-1: config 10 interface 31 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 230 [ 1179.708402][ T7399] usb 9-1: config 10 interface 249 has no altsetting 0 [ 1179.716839][ T7399] usb 9-1: config 10 interface 31 has no altsetting 0 [ 1179.727549][ T7399] usb 9-1: New USB device found, idVendor=199b, idProduct=ba30, bcdDevice=9a.0c [ 1179.736972][ T7399] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.745155][ T7399] usb 9-1: Product: syz [ 1179.750351][ T7399] usb 9-1: Manufacturer: ᐁ [ 1179.754969][ T7399] usb 9-1: SerialNumber: syz [ 1180.177733][ T7399] cp210x 9-1:10.249: cp210x converter detected [ 1180.185478][ T7399] cp210x 9-1:10.249: failed to get vendor val 0x370b size 1: -71 [ 1180.194836][ T7399] cp210x 9-1:10.249: querying part number failed [ 1180.205262][ T7399] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1180.225709][ T7399] cp210x 9-1:10.31: cp210x converter detected [ 1180.237610][ T7399] cp210x 9-1:10.31: failed to get vendor val 0x370b size 1: -71 [ 1180.257634][ T7399] cp210x 9-1:10.31: querying part number failed [ 1180.316033][ T7399] usb 9-1: cp210x converter now attached to ttyUSB1 [ 1180.343039][ T7399] usb 9-1: USB disconnect, device number 65 [ 1180.359977][ T7399] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1180.384024][ T7399] cp210x 9-1:10.249: device disconnected [ 1180.411353][ T7399] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 1180.447394][ T7399] cp210x 9-1:10.31: device disconnected [ 1181.171045][ T29] audit: type=1326 audit(1780596894.845:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22493 comm="syz.5.4032" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f74f259ce59 code=0x0 [ 1181.807847][T22503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.819831][T22503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.994425][T22509] fuse: Invalid rootmode [ 1182.105630][T22512] FAULT_INJECTION: forcing a failure. [ 1182.105630][T22512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1182.133348][T22512] CPU: 0 UID: 0 PID: 22512 Comm: syz.1.4037 Tainted: G L syzkaller #0 PREEMPT(full) [ 1182.133377][T22512] Tainted: [L]=SOFTLOCKUP [ 1182.133383][T22512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1182.133393][T22512] Call Trace: [ 1182.133401][T22512] [ 1182.133410][T22512] dump_stack_lvl+0xe8/0x150 [ 1182.133434][T22512] should_fail_ex+0x412/0x560 [ 1182.133451][T22512] _copy_from_user+0x2d/0xb0 [ 1182.133465][T22512] ___sys_sendmsg+0x1c6/0x360 [ 1182.133477][T22512] ? __lock_acquire+0x6b5/0x2cf0 [ 1182.133491][T22512] ? __pfx____sys_sendmsg+0x10/0x10 [ 1182.133517][T22512] ? __fget_files+0x2a/0x420 [ 1182.133529][T22512] ? __fget_files+0x3a0/0x420 [ 1182.133545][T22512] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1182.133556][T22512] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1182.133570][T22512] ? __pfx_ksys_write+0x10/0x10 [ 1182.133584][T22512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.133599][T22512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.133609][T22512] do_syscall_64+0x174/0x580 [ 1182.133621][T22512] ? trace_irq_disable+0x3b/0x140 [ 1182.133636][T22512] ? clear_bhb_loop+0x40/0x90 [ 1182.133648][T22512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.133658][T22512] RIP: 0033:0x7fbdcaf9ce59 [ 1182.133669][T22512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1182.133678][T22512] RSP: 002b:00007fbdcbd70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1182.133689][T22512] RAX: ffffffffffffffda RBX: 00007fbdcb215fa0 RCX: 00007fbdcaf9ce59 [ 1182.133696][T22512] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000004 [ 1182.133702][T22512] RBP: 00007fbdcbd70090 R08: 0000000000000000 R09: 0000000000000000 [ 1182.133708][T22512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1182.133714][T22512] R13: 00007fbdcb216038 R14: 00007fbdcb215fa0 R15: 00007fbdcb33fa48 [ 1182.133728][T22512] [ 1182.856464][T22533] Invalid argument reading file caps for ./file0 [ 1182.967722][T22537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.009205][T22537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.159057][T19106] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1183.320524][T19106] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.330800][T19106] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1183.340009][T19106] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.354986][T19106] usb 9-1: config 0 descriptor?? [ 1183.459084][T18685] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1183.591403][ T7399] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1183.608778][T18685] usb 6-1: device descriptor read/64, error -71 [ 1183.708070][T22555] fuse: Unknown parameter 'rotmode' [ 1183.768210][T19106] ath6kl: Unsupported hardware version: 0x0 [ 1183.775279][T19106] ath6kl: Failed to init ath6kl core: -22 [ 1183.794666][T19106] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 1183.815165][ T7399] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1183.862697][ T7399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.875820][T18685] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1183.884206][ T7399] usb 2-1: Product: syz [ 1183.896612][ T7399] usb 2-1: Manufacturer: syz [ 1183.901907][ T7399] usb 2-1: SerialNumber: syz [ 1183.977757][T19106] usb 9-1: USB disconnect, device number 66 [ 1184.039219][T18685] usb 6-1: device descriptor read/64, error -71 [ 1184.089224][T22571] syzkaller0: entered promiscuous mode [ 1184.094742][T22571] syzkaller0: entered allmulticast mode [ 1184.107703][T22571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1184.119907][T22571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1184.133541][T22571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1184.143268][T22571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1184.152910][T22571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1184.164742][T22571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1184.171491][T18685] usb usb6-port1: attempt power cycle [ 1184.177864][T22571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1184.178577][T22571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1184.209356][ T7399] rtl8150 2-1:1.0: couldn't reset the device [ 1184.216839][ T7399] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 1184.229903][ T7399] usb 2-1: USB disconnect, device number 93 [ 1184.402791][T22571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1184.412697][T22571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1184.519136][T18685] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1184.570365][T18685] usb 6-1: device descriptor read/8, error -71 [ 1184.693367][T22577] fuse: Invalid rootmode [ 1184.809431][T18685] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1184.864085][T18685] usb 6-1: device descriptor read/8, error -71 [ 1185.007227][T18685] usb usb6-port1: unable to enumerate USB device [ 1185.153890][T22583] binder: BINDER_SET_CONTEXT_MGR already set [ 1185.171729][T22583] binder: 22582:22583 ioctl 4018620d 2000000000c0 returned -16 [ 1185.188439][T22583] binder: BINDER_SET_CONTEXT_MGR already set [ 1185.194874][T22583] binder: 22582:22583 ioctl 4018620d 200000000040 returned -16 [ 1185.203932][T22583] binder: 22582:22583 ioctl c0306201 200000000180 returned -14 [ 1185.358065][ T29] audit: type=1326 audit(1780596899.025:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22588 comm="syz.8.4059" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde9f79ce59 code=0x0 [ 1185.470187][ T24] hid_parser_main: 74 callbacks suppressed [ 1185.470208][ T24] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 1185.496604][ T24] hid-generic 0000:0000:0000.0051: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1185.578064][T22595] fido_id[22595]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1185.642925][T22598] netlink: 'syz.1.4061': attribute type 1 has an invalid length. [ 1185.710669][T22598] bond1: entered promiscuous mode [ 1185.716105][T22598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1185.728327][T22603] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1185.742852][T22603] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1185.757795][T22603] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1185.930345][T18685] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1185.988903][T22610] netlink: 'syz.1.4064': attribute type 4 has an invalid length. [ 1186.120440][T18685] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1186.134988][T18685] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.150183][T18685] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1186.167825][T18685] usb 9-1: string descriptor 0 read error: -22 [ 1186.174976][T18685] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1186.196882][T18685] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.224895][T18685] usb 9-1: selecting invalid altsetting 1 [ 1186.255276][T18685] usb 9-1: unit 6 not found! [ 1186.262698][T22617] ip6t_srh: unknown srh invflags 4000 [ 1186.392787][T22621] program syz.5.4068 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1186.771317][T19106] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1186.965265][T19106] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.004108][T19106] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1187.035502][T19106] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.084391][T19106] usb 6-1: config 0 descriptor?? [ 1187.115819][T19106] rndis_host 6-1:0.0: ACM capabilities 4b, not really RNDIS? [ 1187.175416][T22640] fuse: Invalid rootmode [ 1187.646945][ T9413] usb 6-1: USB disconnect, device number 63 [ 1187.789934][ T29] audit: type=1326 audit(1780596901.465:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22646 comm="syz.1.4074" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcaf9ce59 code=0x7ffc0000 [ 1187.857335][ T29] audit: type=1326 audit(1780596901.465:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22646 comm="syz.1.4074" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcaf9ce59 code=0x7ffc0000 [ 1187.929089][ T29] audit: type=1326 audit(1780596901.465:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22646 comm="syz.1.4074" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbdcaf9ce59 code=0x7ffc0000 [ 1188.020172][ T29] audit: type=1326 audit(1780596901.465:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22646 comm="syz.1.4074" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcaf9ce59 code=0x7ffc0000 [ 1188.028350][T22654] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4075'. [ 1188.072506][ T29] audit: type=1326 audit(1780596901.465:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22646 comm="syz.1.4074" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcaf9ce59 code=0x7ffc0000 [ 1188.138857][T22656] sctp: [Deprecated]: syz.0.4076 (pid 22656) Use of int in max_burst socket option. [ 1188.138857][T22656] Use struct sctp_assoc_value instead [ 1188.143991][ T29] audit: type=1326 audit(1780596901.495:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22646 comm="syz.1.4074" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbdcaf9ce59 code=0x7ffc0000 [ 1188.156982][T22656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1188.182282][ T29] audit: type=1326 audit(1780596901.495:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22646 comm="syz.1.4074" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcaf9ce59 code=0x7ffc0000 [ 1188.190157][T22656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1188.216126][ T29] audit: type=1326 audit(1780596901.495:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22646 comm="syz.1.4074" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcaf9ce59 code=0x7ffc0000 [ 1188.273356][ T29] audit: type=1326 audit(1780596901.505:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22646 comm="syz.1.4074" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbdcaf9ce59 code=0x7ffc0000 [ 1188.304082][ T29] audit: type=1326 audit(1780596901.505:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22646 comm="syz.1.4074" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcaf9ce59 code=0x7ffc0000 [ 1188.488427][T22660] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4078'. [ 1188.505403][T22660] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4078'. [ 1188.745616][T22671] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1188.763651][T22671] bond4 (unregistering): Released all slaves [ 1189.921905][T22694] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1189.968116][T22697] fuse: Unknown parameter '00000000000000000000' [ 1190.179181][T19106] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1190.339047][T19106] usb 2-1: Using ep0 maxpacket: 32 [ 1190.353425][T19106] usb 2-1: config 242 has an invalid interface number: 195 but max is 0 [ 1190.379073][T19106] usb 2-1: config 242 has no interface number 0 [ 1190.385403][T19106] usb 2-1: config 242 interface 195 has no altsetting 0 [ 1190.404303][T19106] usb 2-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=54.03 [ 1190.429008][T19106] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.439023][T19106] usb 2-1: Product: syz [ 1190.448987][T19106] usb 2-1: Manufacturer: syz [ 1190.459314][T19106] usb 2-1: SerialNumber: syz [ 1190.687486][T19106] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 1190.709920][T19106] usb 2-1: selecting invalid altsetting 0 [ 1190.731571][T19106] usb 2-1: USB disconnect, device number 94 [ 1190.737555][ T2361] pvrusb2: Invalid write control endpoint [ 1190.849686][ T2361] pvrusb2: Invalid write control endpoint [ 1190.881441][ T2361] pvrusb2: Invalid write control endpoint [ 1190.899139][ T2361] pvrusb2: Invalid write control endpoint [ 1190.904989][ T2361] pvrusb2: Invalid write control endpoint [ 1190.916221][ T2361] pvrusb2: Invalid write control endpoint [ 1190.929137][ T2361] pvrusb2: Invalid write control endpoint [ 1190.940796][ T2361] pvrusb2: Invalid write control endpoint [ 1190.957558][ T2361] pvrusb2: Invalid write control endpoint [ 1190.987095][ T2361] pvrusb2: Invalid write control endpoint [ 1191.010266][ T2361] pvrusb2: Invalid write control endpoint [ 1191.027565][ T2361] pvrusb2: Invalid write control endpoint [ 1191.046186][ T2361] pvrusb2: Invalid write control endpoint [ 1191.067696][ T2361] pvrusb2: Invalid write control endpoint [ 1191.087766][ T2361] pvrusb2: Invalid write control endpoint [ 1191.113028][ T2361] pvrusb2: Invalid write control endpoint [ 1191.133900][ T2361] pvrusb2: Invalid write control endpoint [ 1191.154681][ T2361] pvrusb2: Invalid write control endpoint [ 1191.160807][ T2361] pvrusb2: Invalid write control endpoint [ 1191.177236][ T2361] pvrusb2: Invalid write control endpoint [ 1191.187862][ T2361] pvrusb2: Invalid write control endpoint [ 1191.208019][ T2361] pvrusb2: Invalid write control endpoint [ 1191.225663][ T2361] pvrusb2: Invalid write control endpoint [ 1191.232394][ T9413] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1191.243338][ T2361] pvrusb2: Invalid write control endpoint [ 1191.249388][ T2361] pvrusb2: Invalid write control endpoint [ 1191.255662][ T2361] pvrusb2: Invalid write control endpoint [ 1191.273548][ T2361] pvrusb2: Invalid write control endpoint [ 1191.283517][ T2361] pvrusb2: Invalid write control endpoint [ 1191.294609][T22714] FAULT_INJECTION: forcing a failure. [ 1191.294609][T22714] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.308468][ T2361] pvrusb2: Invalid write control endpoint [ 1191.328874][ T2361] pvrusb2: Invalid write control endpoint [ 1191.339836][T22714] CPU: 0 UID: 0 PID: 22714 Comm: syz.0.4091 Tainted: G L syzkaller #0 PREEMPT(full) [ 1191.339861][T22714] Tainted: [L]=SOFTLOCKUP [ 1191.339868][T22714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1191.339878][T22714] Call Trace: [ 1191.339886][T22714] [ 1191.339893][T22714] dump_stack_lvl+0xe8/0x150 [ 1191.339919][T22714] should_fail_ex+0x412/0x560 [ 1191.339951][T22714] should_failslab+0xa8/0x100 [ 1191.339969][T22714] ? skb_clone+0x212/0x3a0 [ 1191.340069][T22714] kmem_cache_alloc_noprof+0x87/0x650 [ 1191.340089][T22714] ? __netlink_lookup+0xc6/0x8b0 [ 1191.340107][T22714] skb_clone+0x212/0x3a0 [ 1191.340126][T22714] __netlink_deliver_tap+0x404/0x850 [ 1191.340154][T22714] ? netlink_deliver_tap+0x2e/0x1b0 [ 1191.340174][T22714] netlink_deliver_tap+0x19c/0x1b0 [ 1191.340196][T22714] netlink_unicast+0x730/0x8e0 [ 1191.340224][T22714] netlink_sendmsg+0x813/0xb40 [ 1191.340250][T22714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1191.340273][T22714] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1191.340298][T22714] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1191.340321][T22714] ____sys_sendmsg+0x972/0x9f0 [ 1191.340338][T22714] ? __might_fault+0xaf/0x130 [ 1191.340362][T22714] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1191.340385][T22714] ? import_iovec+0x73/0xa0 [ 1191.340406][T22714] ___sys_sendmsg+0x2a5/0x360 [ 1191.340420][T22714] ? __lock_acquire+0x6b5/0x2cf0 [ 1191.340439][T22714] ? __pfx____sys_sendmsg+0x10/0x10 [ 1191.340480][T22714] ? __fget_files+0x2a/0x420 [ 1191.340498][T22714] ? __fget_files+0x3a0/0x420 [ 1191.340523][T22714] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1191.340539][T22714] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1191.340564][T22714] ? __pfx_ksys_write+0x10/0x10 [ 1191.340592][T22714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.340608][T22714] do_syscall_64+0x174/0x580 [ 1191.340623][T22714] ? trace_irq_disable+0x3b/0x140 [ 1191.340644][T22714] ? clear_bhb_loop+0x40/0x90 [ 1191.340661][T22714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.340677][T22714] RIP: 0033:0x7fe59219ce59 [ 1191.340693][T22714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1191.340707][T22714] RSP: 002b:00007fe593110028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1191.340725][T22714] RAX: ffffffffffffffda RBX: 00007fe592415fa0 RCX: 00007fe59219ce59 [ 1191.340737][T22714] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000004 [ 1191.340747][T22714] RBP: 00007fe593110090 R08: 0000000000000000 R09: 0000000000000000 [ 1191.340757][T22714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1191.340766][T22714] R13: 00007fe592416038 R14: 00007fe592415fa0 R15: 00007fe59253fa48 [ 1191.340791][T22714] [ 1191.340996][ T2361] pvrusb2: Invalid write control endpoint [ 1191.619704][ T9413] usb 6-1: device descriptor read/64, error -71 [ 1191.650667][ T2361] pvrusb2: Invalid write control endpoint [ 1191.658504][ T2361] pvrusb2: Invalid write control endpoint [ 1191.675273][ T2361] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1191.791584][T18685] usb 9-1: 2:0: failed to get current value for ch 0 (-32) [ 1191.806547][T22729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.844005][T22729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.866464][ T2361] cs53l32a 3-0011: chip found @ 0x22 (pvrusb2_b) [ 1191.875135][ T9413] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1191.901466][ T2361] pvrusb2: Invalid write control endpoint [ 1191.911555][T15021] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1191.924715][ T2361] pvrusb2: Invalid write control endpoint [ 1191.966589][ T2361] pvrusb2: Invalid write control endpoint [ 1191.980660][ T2361] pvrusb2: Invalid write control endpoint [ 1191.988012][ T2361] pvrusb2: Invalid write control endpoint [ 1191.997340][T18685] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1192.011458][ T9413] usb 6-1: device descriptor read/64, error -71 [ 1192.027432][ T2361] pvrusb2: Invalid write control endpoint [ 1192.035703][ T2361] pvrusb2: Invalid write control endpoint [ 1192.043767][ T2361] pvrusb2: Invalid write control endpoint [ 1192.050831][ T2361] pvrusb2: Invalid write control endpoint [ 1192.056599][ T2361] pvrusb2: Invalid write control endpoint [ 1192.062480][ T2361] pvrusb2: Invalid write control endpoint [ 1192.068244][ T2361] pvrusb2: Invalid write control endpoint [ 1192.074521][ T2361] pvrusb2: Invalid write control endpoint [ 1192.080616][ T2361] pvrusb2: Invalid write control endpoint [ 1192.086461][ T2361] pvrusb2: Invalid write control endpoint [ 1192.092324][ T2361] pvrusb2: Invalid write control endpoint [ 1192.099534][ T2361] pvrusb2: Invalid write control endpoint [ 1192.102271][ T9435] usb 9-1: USB disconnect, device number 67 [ 1192.105330][ T2361] pvrusb2: Invalid write control endpoint [ 1192.117253][ T2361] pvrusb2: Invalid write control endpoint [ 1192.124510][ T2361] pvrusb2: Invalid write control endpoint [ 1192.130661][ T9413] usb usb6-port1: attempt power cycle [ 1192.136845][ T2361] pvrusb2: Invalid write control endpoint [ 1192.145769][ T2361] pvrusb2: Attached sub-driver cs53l32a [ 1192.182080][T22737] fuse: Unknown parameter '00000000000000000000' [ 1192.224223][ T2361] pvrusb2: Invalid write control endpoint [ 1192.248383][ T2361] pvrusb2: Invalid write control endpoint [ 1192.255054][ T2361] pvrusb2: Invalid write control endpoint [ 1192.275978][ T2361] pvrusb2: Invalid write control endpoint [ 1192.283319][ T2361] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1192.315285][ T2361] pvrusb2: Device being rendered inoperable [ 1192.323100][ T2361] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 1192.338866][ T2361] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 1192.469101][ T9413] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1192.499608][ T9413] usb 6-1: device descriptor read/8, error -71 [ 1192.670091][T19106] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1192.707562][T22764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4104'. [ 1192.720170][T22764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4104'. [ 1192.732780][T22764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4104'. [ 1192.743892][T22766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1192.744552][T22764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4104'. [ 1192.770382][ T9413] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1192.810067][ T9413] usb 6-1: device descriptor read/8, error -71 [ 1192.836233][T22768] FAULT_INJECTION: forcing a failure. [ 1192.836233][T22768] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.853041][T22768] CPU: 1 UID: 0 PID: 22768 Comm: syz.0.4106 Tainted: G L syzkaller #0 PREEMPT(full) [ 1192.853068][T22768] Tainted: [L]=SOFTLOCKUP [ 1192.853075][T22768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1192.853084][T22768] Call Trace: [ 1192.853091][T22768] [ 1192.853098][T22768] dump_stack_lvl+0xe8/0x150 [ 1192.853123][T22768] should_fail_ex+0x412/0x560 [ 1192.853146][T22768] should_failslab+0xa8/0x100 [ 1192.853165][T22768] __kmalloc_noprof+0xe8/0x760 [ 1192.853185][T22768] ? __asan_memset+0x22/0x50 [ 1192.853204][T22768] ? taprio_init+0x2cf/0xbe0 [ 1192.853390][T22768] ? __hrtimer_setup+0x1b7/0x260 [ 1192.853415][T22768] taprio_init+0x2cf/0xbe0 [ 1192.853438][T22768] ? is_dynamic_key+0xd6/0x1c0 [ 1192.853462][T22768] ? __pfx_taprio_init+0x10/0x10 [ 1192.853483][T22768] ? qdisc_alloc+0x6ec/0x9e0 [ 1192.853545][T22768] ? __pfx_taprio_init+0x10/0x10 [ 1192.853566][T22768] qdisc_create+0x7c4/0xf20 [ 1192.853588][T22768] ? lockdep_rtnl_is_held+0x26/0x40 [ 1192.853662][T22768] tc_modify_qdisc+0x16f0/0x2290 [ 1192.853681][T22768] ? rcu_is_watching+0x15/0xb0 [ 1192.853712][T22768] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1192.853732][T22768] ? __dev_queue_xmit+0x2b6/0x3950 [ 1192.853797][T22768] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1192.853816][T22768] rtnetlink_rcv_msg+0x77e/0xbe0 [ 1192.853840][T22768] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1192.853860][T22768] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1192.853879][T22768] ? ref_tracker_free+0x693/0x840 [ 1192.853943][T22768] ? __pfx_ref_tracker_free+0x10/0x10 [ 1192.853969][T22768] netlink_rcv_skb+0x232/0x4b0 [ 1192.853992][T22768] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1192.854015][T22768] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1192.854047][T22768] ? netlink_deliver_tap+0x2e/0x1b0 [ 1192.854068][T22768] ? netlink_deliver_tap+0x2e/0x1b0 [ 1192.854094][T22768] netlink_unicast+0x75c/0x8e0 [ 1192.854125][T22768] netlink_sendmsg+0x813/0xb40 [ 1192.854154][T22768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1192.854179][T22768] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1192.854202][T22768] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1192.854226][T22768] ____sys_sendmsg+0x972/0x9f0 [ 1192.854243][T22768] ? __might_fault+0xaf/0x130 [ 1192.854269][T22768] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1192.854294][T22768] ? import_iovec+0x73/0xa0 [ 1192.854316][T22768] ___sys_sendmsg+0x2a5/0x360 [ 1192.854331][T22768] ? __lock_acquire+0x6b5/0x2cf0 [ 1192.854351][T22768] ? __pfx____sys_sendmsg+0x10/0x10 [ 1192.854399][T22768] ? __fget_files+0x2a/0x420 [ 1192.854416][T22768] ? __fget_files+0x3a0/0x420 [ 1192.854441][T22768] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1192.854465][T22768] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1192.854495][T22768] ? __pfx_ksys_write+0x10/0x10 [ 1192.854524][T22768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.854547][T22768] do_syscall_64+0x174/0x580 [ 1192.854565][T22768] ? trace_irq_disable+0x3b/0x140 [ 1192.854586][T22768] ? clear_bhb_loop+0x40/0x90 [ 1192.854606][T22768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.854622][T22768] RIP: 0033:0x7fe59219ce59 [ 1192.854638][T22768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.854652][T22768] RSP: 002b:00007fe593110028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1192.854670][T22768] RAX: ffffffffffffffda RBX: 00007fe592415fa0 RCX: 00007fe59219ce59 [ 1192.854681][T22768] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000004 [ 1192.854691][T22768] RBP: 00007fe593110090 R08: 0000000000000000 R09: 0000000000000000 [ 1192.854701][T22768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1192.854711][T22768] R13: 00007fe592416038 R14: 00007fe592415fa0 R15: 00007fe59253fa48 [ 1192.854737][T22768] [ 1192.855417][T19106] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1192.939357][ T9413] usb usb6-port1: unable to enumerate USB device [ 1192.966232][T19106] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1193.248636][T22771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1193.272250][T22771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1193.319564][T22771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1193.322434][T19106] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1193.340151][T22771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1193.349135][T19106] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.357186][T19106] usb 2-1: Product: syz [ 1193.362067][T19106] usb 2-1: Manufacturer: syz [ 1193.366705][T19106] usb 2-1: SerialNumber: syz [ 1193.374556][T19106] usb 2-1: config 0 descriptor?? [ 1193.382290][T22733] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1193.390165][T22733] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1193.598316][T22733] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1193.605984][T22733] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1193.620380][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 1193.620399][ T29] audit: type=1400 audit(1780596907.285:3660): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=22765 comm="syz.8.4105" [ 1193.974475][T22781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1193.984127][T22781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.000423][T22781] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4110'. [ 1194.016456][T19106] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1194.159100][ T9413] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1194.233888][T19106] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1194.319184][ T9413] usb 9-1: Using ep0 maxpacket: 32 [ 1194.328655][ T9413] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1194.340497][ T9413] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1194.348153][ T9413] usb 9-1: can't read configurations, error -71 [ 1194.429270][T18685] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1194.604031][T18685] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1194.627317][T18685] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1194.650452][T18685] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.664085][T18685] usb 6-1: config 220 has no interface number 2 [ 1194.671392][T18685] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1194.684738][T18685] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1194.693427][T18685] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1194.701344][T18685] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1194.713100][T18685] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1194.731676][ T9421] usb 2-1: USB disconnect, device number 95 [ 1194.741870][T18685] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.750183][T18685] usb 6-1: Product: syz [ 1194.756664][T18685] usb 6-1: Manufacturer: syz [ 1194.769153][T18685] usb 6-1: SerialNumber: syz [ 1195.007491][T18685] usb 6-1: selecting invalid altsetting 0 [ 1195.046439][T22802] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1195.057717][T18685] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1195.065777][T18685] uvcvideo 6-1:220.0: No valid video chain found. [ 1195.079709][T22802] bond1 (unregistering): Released all slaves [ 1195.093146][T18685] usb 6-1: selecting invalid altsetting 0 [ 1195.116782][T18685] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1195.154905][T18685] usb 6-1: USB disconnect, device number 68 [ 1195.440261][T22809] FAULT_INJECTION: forcing a failure. [ 1195.440261][T22809] name failslab, interval 1, probability 0, space 0, times 0 [ 1195.460465][T22809] CPU: 0 UID: 0 PID: 22809 Comm: syz.0.4117 Tainted: G L syzkaller #0 PREEMPT(full) [ 1195.460492][T22809] Tainted: [L]=SOFTLOCKUP [ 1195.460497][T22809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1195.460504][T22809] Call Trace: [ 1195.460510][T22809] [ 1195.460516][T22809] dump_stack_lvl+0xe8/0x150 [ 1195.460537][T22809] should_fail_ex+0x412/0x560 [ 1195.460555][T22809] should_failslab+0xa8/0x100 [ 1195.460568][T22809] __kmalloc_noprof+0xe8/0x760 [ 1195.460584][T22809] ? __asan_memset+0x22/0x50 [ 1195.460600][T22809] ? taprio_init+0x2cf/0xbe0 [ 1195.460616][T22809] ? __hrtimer_setup+0x1b7/0x260 [ 1195.460635][T22809] taprio_init+0x2cf/0xbe0 [ 1195.460653][T22809] ? is_dynamic_key+0xd6/0x1c0 [ 1195.460672][T22809] ? __pfx_taprio_init+0x10/0x10 [ 1195.460690][T22809] ? qdisc_alloc+0x6ec/0x9e0 [ 1195.460709][T22809] ? __pfx_taprio_init+0x10/0x10 [ 1195.460726][T22809] qdisc_create+0x7c4/0xf20 [ 1195.460743][T22809] ? lockdep_rtnl_is_held+0x26/0x40 [ 1195.460760][T22809] tc_modify_qdisc+0x16f0/0x2290 [ 1195.460775][T22809] ? rcu_is_watching+0x15/0xb0 [ 1195.460798][T22809] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1195.460835][T22809] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1195.460849][T22809] rtnetlink_rcv_msg+0x77e/0xbe0 [ 1195.460868][T22809] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1195.460886][T22809] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1195.460906][T22809] ? do_raw_spin_unlock+0xf5/0x210 [ 1195.460929][T22809] netlink_rcv_skb+0x232/0x4b0 [ 1195.460947][T22809] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1195.460965][T22809] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1195.460980][T22809] ? lockdep_hardirqs_on+0x7a/0x110 [ 1195.461097][T22809] netlink_unicast+0x75c/0x8e0 [ 1195.461120][T22809] netlink_sendmsg+0x813/0xb40 [ 1195.461144][T22809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1195.461163][T22809] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1195.461190][T22809] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1195.461208][T22809] ____sys_sendmsg+0x972/0x9f0 [ 1195.461221][T22809] ? __might_fault+0xaf/0x130 [ 1195.461240][T22809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1195.461258][T22809] ? import_iovec+0x73/0xa0 [ 1195.461275][T22809] ___sys_sendmsg+0x2a5/0x360 [ 1195.461286][T22809] ? __lock_acquire+0x6b5/0x2cf0 [ 1195.461301][T22809] ? __pfx____sys_sendmsg+0x10/0x10 [ 1195.461337][T22809] ? __fget_files+0x2a/0x420 [ 1195.461351][T22809] ? __fget_files+0x3a0/0x420 [ 1195.461371][T22809] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1195.461385][T22809] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1195.461403][T22809] ? __pfx_ksys_write+0x10/0x10 [ 1195.461426][T22809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.461439][T22809] do_syscall_64+0x174/0x580 [ 1195.461450][T22809] ? trace_irq_disable+0x3b/0x140 [ 1195.461468][T22809] ? clear_bhb_loop+0x40/0x90 [ 1195.461483][T22809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.461494][T22809] RIP: 0033:0x7fe59219ce59 [ 1195.461507][T22809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1195.461518][T22809] RSP: 002b:00007fe593110028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1195.461532][T22809] RAX: ffffffffffffffda RBX: 00007fe592415fa0 RCX: 00007fe59219ce59 [ 1195.461540][T22809] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000004 [ 1195.461548][T22809] RBP: 00007fe593110090 R08: 0000000000000000 R09: 0000000000000000 [ 1195.461556][T22809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1195.461563][T22809] R13: 00007fe592416038 R14: 00007fe592415fa0 R15: 00007fe59253fa48 [ 1195.461583][T22809] [ 1195.987524][T22816] fuse: Unknown parameter '00000000000000000000' [ 1196.219786][T18685] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1196.383159][T18685] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1196.401533][T18685] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1196.435628][T18685] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1196.462190][T18685] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1196.490910][T18685] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1196.522716][T18685] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1196.539957][T18685] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1196.561438][T18685] usb 6-1: Product: syz [ 1196.570488][T18685] usb 6-1: Manufacturer: syz [ 1196.594626][T18685] cdc_wdm 6-1:1.0: skipping garbage [ 1196.608651][T18685] cdc_wdm 6-1:1.0: skipping garbage [ 1196.640083][T18685] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1196.659834][T18685] cdc_wdm 6-1:1.0: Unknown control protocol [ 1196.911814][T22840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1196.922464][T22840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1196.959129][T18685] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1197.132205][T18685] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1197.151691][T18685] usb 2-1: config 211 has an invalid interface number: 123 but max is 0 [ 1197.165940][T18685] usb 2-1: config 211 has no interface number 0 [ 1197.181199][T18685] usb 2-1: config 211 interface 123 has no altsetting 0 [ 1197.223821][T18685] usb 2-1: New USB device found, idVendor=07c4, idProduct=a4a5, bcdDevice=52.ed [ 1197.243391][T18685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.263531][T18685] usb 2-1: Product: syz [ 1197.268681][T18685] usb 2-1: Manufacturer: syz [ 1197.273761][T18685] usb 2-1: SerialNumber: syz [ 1197.313838][T22817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.323021][ T9413] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1197.334861][T22817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.481409][ T9413] usb 9-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1197.506206][T22845] tc_dump_action: action bad kind [ 1197.510813][ T9413] usb 9-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1197.529660][ T9413] usb 9-1: config 0 has no interfaces? [ 1197.535360][ T9413] usb 9-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1197.554243][ T9413] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.577098][ T9413] usb 9-1: config 0 descriptor?? [ 1197.585180][T17360] usb 6-1: USB disconnect, device number 69 [ 1197.692016][T22850] FAULT_INJECTION: forcing a failure. [ 1197.692016][T22850] name failslab, interval 1, probability 0, space 0, times 0 [ 1197.705100][T22850] CPU: 0 UID: 0 PID: 22850 Comm: syz.0.4128 Tainted: G L syzkaller #0 PREEMPT(full) [ 1197.705132][T22850] Tainted: [L]=SOFTLOCKUP [ 1197.705138][T22850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1197.705148][T22850] Call Trace: [ 1197.705155][T22850] [ 1197.705163][T22850] dump_stack_lvl+0xe8/0x150 [ 1197.705189][T22850] should_fail_ex+0x412/0x560 [ 1197.705212][T22850] should_failslab+0xa8/0x100 [ 1197.705232][T22850] __kmalloc_node_noprof+0xf0/0x7c0 [ 1197.705255][T22850] ? qdisc_alloc+0x92/0x9e0 [ 1197.705281][T22850] qdisc_alloc+0x92/0x9e0 [ 1197.705311][T22850] qdisc_create_dflt+0x8e/0x4e0 [ 1197.705336][T22850] taprio_init+0x3e5/0xbe0 [ 1197.705370][T22850] ? __pfx_taprio_init+0x10/0x10 [ 1197.705400][T22850] ? qdisc_alloc+0x6ec/0x9e0 [ 1197.705426][T22850] ? __pfx_taprio_init+0x10/0x10 [ 1197.705448][T22850] qdisc_create+0x7c4/0xf20 [ 1197.705470][T22850] ? lockdep_rtnl_is_held+0x26/0x40 [ 1197.705492][T22850] tc_modify_qdisc+0x16f0/0x2290 [ 1197.705512][T22850] ? rcu_is_watching+0x15/0xb0 [ 1197.705543][T22850] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1197.705563][T22850] ? __dev_queue_xmit+0x2b6/0x3950 [ 1197.705606][T22850] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1197.705625][T22850] rtnetlink_rcv_msg+0x77e/0xbe0 [ 1197.705651][T22850] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1197.705671][T22850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1197.705690][T22850] ? ref_tracker_free+0x693/0x840 [ 1197.705712][T22850] ? __pfx_ref_tracker_free+0x10/0x10 [ 1197.705740][T22850] netlink_rcv_skb+0x232/0x4b0 [ 1197.705763][T22850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1197.705786][T22850] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1197.705820][T22850] ? netlink_deliver_tap+0x2e/0x1b0 [ 1197.705842][T22850] ? netlink_deliver_tap+0x2e/0x1b0 [ 1197.705868][T22850] netlink_unicast+0x75c/0x8e0 [ 1197.705898][T22850] netlink_sendmsg+0x813/0xb40 [ 1197.705929][T22850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1197.705954][T22850] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1197.705977][T22850] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1197.706002][T22850] ____sys_sendmsg+0x972/0x9f0 [ 1197.706019][T22850] ? __might_fault+0xaf/0x130 [ 1197.706045][T22850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1197.706070][T22850] ? import_iovec+0x73/0xa0 [ 1197.706093][T22850] ___sys_sendmsg+0x2a5/0x360 [ 1197.706108][T22850] ? __lock_acquire+0x6b5/0x2cf0 [ 1197.706129][T22850] ? __pfx____sys_sendmsg+0x10/0x10 [ 1197.706179][T22850] ? __fget_files+0x2a/0x420 [ 1197.706197][T22850] ? __fget_files+0x3a0/0x420 [ 1197.706226][T22850] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1197.706245][T22850] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1197.706271][T22850] ? __pfx_ksys_write+0x10/0x10 [ 1197.706300][T22850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.706319][T22850] do_syscall_64+0x174/0x580 [ 1197.706335][T22850] ? trace_irq_disable+0x3b/0x140 [ 1197.706356][T22850] ? clear_bhb_loop+0x40/0x90 [ 1197.706374][T22850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.706388][T22850] RIP: 0033:0x7fe59219ce59 [ 1197.706411][T22850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1197.706425][T22850] RSP: 002b:00007fe593110028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1197.706443][T22850] RAX: ffffffffffffffda RBX: 00007fe592415fa0 RCX: 00007fe59219ce59 [ 1197.706455][T22850] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000004 [ 1197.706465][T22850] RBP: 00007fe593110090 R08: 0000000000000000 R09: 0000000000000000 [ 1197.706476][T22850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1197.706485][T22850] R13: 00007fe592416038 R14: 00007fe592415fa0 R15: 00007fe59253fa48 [ 1197.706513][T22850] [ 1198.275468][ T24] usb 9-1: USB disconnect, device number 70 [ 1198.451475][T22857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.461060][T22857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.470604][T22857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.492768][T22857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.765668][T22878] fuse: Unknown parameter 'user00000000000000000000' [ 1199.734291][T18685] usb-storage 2-1:211.123: USB Mass Storage device detected [ 1199.790692][T18685] usb-storage 2-1:211.123: Quirks match for vid 07c4 pid a4a5: 420 [ 1199.875471][ T3300] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.935343][T18685] usb 2-1: USB disconnect, device number 96 [ 1200.466626][ T3300] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.545774][ T29] audit: type=1326 audit(1780596914.215:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22900 comm="syz.1.4143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcaf9ce59 code=0x7ffc0000 [ 1200.610298][ T29] audit: type=1326 audit(1780596914.215:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22900 comm="syz.1.4143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcaf9ce59 code=0x7ffc0000 [ 1200.651203][T18713] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1200.670856][ T29] audit: type=1326 audit(1780596914.215:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22900 comm="syz.1.4143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcaf9ce59 code=0x7ffc0000 [ 1200.695761][T18713] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1200.710291][ T29] audit: type=1326 audit(1780596914.215:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22900 comm="syz.1.4143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcaf9ce59 code=0x7ffc0000 [ 1200.759103][T18713] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1200.782089][T18713] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1200.795096][T18713] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1200.865643][ T29] audit: type=1326 audit(1780596914.255:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22900 comm="syz.1.4143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fbdcaf9ce59 code=0x7ffc0000 [ 1200.911147][ T29] audit: type=1326 audit(1780596914.285:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22900 comm="syz.1.4143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbdcaf5d68e code=0x7ffc0000 [ 1200.936959][ T29] audit: type=1326 audit(1780596914.315:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22900 comm="syz.1.4143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbdcaf5d68e code=0x7ffc0000 [ 1201.008528][ T29] audit: type=1326 audit(1780596914.315:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22900 comm="syz.1.4143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbdcaf5d68e code=0x7ffc0000 [ 1201.071586][ T29] audit: type=1326 audit(1780596914.315:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22900 comm="syz.1.4143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbdcaf5d68e code=0x7ffc0000 [ 1201.126284][ T3300] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.171798][ T29] audit: type=1326 audit(1780596914.335:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22900 comm="syz.1.4143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbdcaf5d68e code=0x7ffc0000 [ 1201.436863][ T3300] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.609823][ T9421] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1201.762333][ T9421] usb 2-1: Using ep0 maxpacket: 32 [ 1201.781561][ T9421] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1201.802900][ T9421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.850798][ T9421] usb 2-1: config 0 descriptor?? [ 1201.918626][T22943] fuse: Unknown parameter 'user00000000000000000000' [ 1202.054013][ T3300] bridge_slave_1: left allmulticast mode [ 1202.064199][ T3300] bridge_slave_1: left promiscuous mode [ 1202.077849][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.101604][ T9421] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1202.117300][ T3300] bridge_slave_0: left allmulticast mode [ 1202.140253][ T3300] bridge_slave_0: left promiscuous mode [ 1202.148633][ T9421] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1202.178324][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.198150][ T9421] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1202.224089][ T9421] usb 2-1: media controller created [ 1202.275712][ T9421] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1202.388807][ T9421] DVB: Unable to find symbol dib7000p_attach() [ 1202.395252][ T9421] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1202.459022][ T9421] rc_core: IR keymap rc-dib0700-rc5 not found [ 1202.470416][ T9421] Registered IR keymap rc-empty [ 1202.481827][ T9421] dvb-usb: could not initialize remote control. [ 1202.497375][ T9421] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1202.519862][ T9421] usb 2-1: USB disconnect, device number 97 [ 1202.633679][ T9421] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1202.725249][ T3300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1202.775367][ T3300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1202.878626][ T3300] bond0 (unregistering): Released all slaves [ 1202.908440][T22964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.918688][T18713] Bluetooth: hci2: command tx timeout [ 1202.941677][T22964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.975337][T22952] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4152'. [ 1202.990646][T22962] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4153'. [ 1203.271232][ T3300] tipc: Left network mode [ 1203.512996][T22979] bridge0: left promiscuous mode [ 1203.529607][T22979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1203.534122][T22979] 8021q: adding VLAN 0 to HW filter on device team0 [ 1203.542244][T18685] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1203.644457][T22986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1203.673044][T22986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1203.690565][T18685] usb 2-1: Using ep0 maxpacket: 16 [ 1203.691518][T22979] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1203.706129][T22979] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1203.718559][T22979] 0: left allmulticast mode [ 1203.724965][T22979] hsr_slave_0: left allmulticast mode [ 1203.732778][T22979] hsr_slave_1: left allmulticast mode [ 1203.746622][T18685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1203.774918][T18685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1203.808662][T18685] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1203.835094][T22979] veth1_vlan: left promiscuous mode [ 1203.843608][T18685] usb 2-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1203.860594][T22979] veth0_vlan: left promiscuous mode [ 1203.871601][T18685] usb 2-1: Manufacturer: syz [ 1203.879942][T22979] veth0_vlan: entered promiscuous mode [ 1203.897237][T18685] usb 2-1: config 0 descriptor?? [ 1203.937833][T22979] veth1_vlan: entered promiscuous mode [ 1204.024509][T22979] veth1_macvtap: left promiscuous mode [ 1204.037181][T22979] veth0_macvtap: left promiscuous mode [ 1204.058028][T22979] veth0_macvtap: entered promiscuous mode [ 1204.109192][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1204.110685][T22979] veth1_macvtap: entered promiscuous mode [ 1204.216174][T22979] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1204.259066][T22979] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1204.270919][T22979] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1204.285478][T22979] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1204.356272][T22979] xfrm1: left allmulticast mode [ 1204.531393][T22979] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1204.551674][T22979] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1204.568389][T22979] bridge4: left promiscuous mode [ 1204.575211][T22979] bridge4: left allmulticast mode [ 1204.606714][T22979] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1204.673404][T23004] ipvlan1: entered promiscuous mode [ 1204.684735][T23004] ipvlan1: left promiscuous mode [ 1204.762687][T19106] bridge0: entered promiscuous mode [ 1204.800833][T16281] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.808028][T16281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1204.877558][T16281] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.884811][T16281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1204.976263][ T646] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1204.992091][T18713] Bluetooth: hci2: command tx timeout [ 1205.008672][ T646] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.034588][T22976] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1205.100732][T23002] bond2: (slave lo): Releasing backup interface [ 1205.141122][T23002] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1205.171233][T23002] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1205.202593][T23015] fuse: Unknown parameter 'user00000000000000000000' [ 1205.217383][T23002] bond4: (slave lo): Enslaving as an active interface with an up link [ 1205.227826][T23002] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1205.252876][T18685] usbhid 2-1:0.0: can't add hid device: -71 [ 1205.265532][T18685] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1205.302253][T18685] usb 2-1: USB disconnect, device number 98 [ 1205.366369][ T5295] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1205.439071][ T646] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1205.446342][T23026] netlink: 67 bytes leftover after parsing attributes in process `syz.1.4164'. [ 1205.464578][ T646] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.485912][ T646] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1205.512359][ T646] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.527674][T23028] xt_hashlimit: size too large, truncated to 1048576 [ 1205.572140][T23018] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1205.663582][ T646] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1205.688158][ T646] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.975791][ T3300] hsr_slave_0: left promiscuous mode [ 1206.001553][ T3300] hsr_slave_1: left promiscuous mode [ 1206.015684][ T3300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1206.038101][ T3300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1206.074622][ T3300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1206.124223][ T3300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1206.291590][ T3300] veth1_macvtap: left promiscuous mode [ 1206.327456][ T3300] veth0_macvtap: left promiscuous mode [ 1206.364485][ T3300] veth1_vlan: left promiscuous mode [ 1206.397956][ T3300] veth0_vlan: left promiscuous mode [ 1206.595678][T23059] netlink: 'syz.6.4168': attribute type 62 has an invalid length. [ 1207.069238][T18713] Bluetooth: hci2: command tx timeout [ 1207.353990][ T3300] team0 (unregistering): Port device team_slave_1 removed [ 1207.373978][ T3300] team0 (unregistering): Port device team_slave_0 removed [ 1207.569249][T22917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.591898][T22917] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.607954][T22917] bridge_slave_0: entered allmulticast mode [ 1207.622088][T22917] bridge_slave_0: entered promiscuous mode [ 1207.641875][T23062] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4170'. [ 1207.706710][ T5295] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1207.724591][T22917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.764483][T22917] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.772678][T22917] bridge_slave_1: entered allmulticast mode [ 1207.805687][T22917] bridge_slave_1: entered promiscuous mode [ 1207.978299][T22917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1208.062649][T22917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1208.215266][T23078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1208.230315][ T3300] IPVS: stop unused estimator thread 0... [ 1208.236671][T23078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1208.259595][T22917] team0: Port device team_slave_0 added [ 1208.287356][T22917] team0: Port device team_slave_1 added [ 1208.480151][T22917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1208.502913][T22917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1208.541639][T23095] fuse: Unknown parameter 'user_i00000000000000000000' [ 1208.595042][T22917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1208.828065][T22917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1208.871563][T22917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1209.007474][T22917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1209.024782][ T9435] raw-gadget.0 gadget.0: failed to queue reset event [ 1209.139236][ T9435] raw-gadget.0 gadget.0: failed to queue resume event [ 1209.159379][T18713] Bluetooth: hci2: command tx timeout [ 1209.219127][ T9435] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1209.227909][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 1209.247157][ T9435] raw-gadget.0 gadget.0: failed to queue reset event [ 1209.329540][ T9435] raw-gadget.0 gadget.0: failed to queue resume event [ 1209.411363][ T9435] usb 1-1: device descriptor read/64, error -32 [ 1209.466319][T22917] hsr_slave_0: entered promiscuous mode [ 1209.493153][T22917] hsr_slave_1: entered promiscuous mode [ 1209.550029][ T9435] raw-gadget.0 gadget.0: failed to queue suspend event [ 1209.570171][ T9435] raw-gadget.0 gadget.0: failed to queue reset event [ 1209.671419][ T9435] raw-gadget.0 gadget.0: failed to queue resume event [ 1209.749144][ T9435] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1209.765354][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 1209.775746][ T9435] raw-gadget.0 gadget.0: failed to queue reset event [ 1209.859242][ T9435] raw-gadget.0 gadget.0: failed to queue resume event [ 1209.949081][ T9435] usb 1-1: device descriptor read/64, error -32 [ 1210.079297][ T9435] raw-gadget.0 gadget.0: failed to queue suspend event [ 1210.113588][ T9435] usb usb1-port1: attempt power cycle [ 1210.136070][ T9435] raw-gadget.0 gadget.0: failed to queue disconnect event [ 1210.171177][ T9435] raw-gadget.0 gadget.0: failed to queue reset event [ 1210.217446][ T5295] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1210.289086][ T9435] raw-gadget.0 gadget.0: failed to queue resume event [ 1210.305442][ T9435] raw-gadget.0 gadget.0: failed to queue reset event [ 1210.342120][T23111] geneve0: entered allmulticast mode [ 1210.509233][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 1210.519902][ T9435] raw-gadget.0 gadget.0: failed to queue resume event [ 1210.590730][ T9435] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1210.629691][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 1210.637886][ T9435] usb 1-1: device descriptor read/8, error -32 [ 1210.750479][ T9435] raw-gadget.0 gadget.0: failed to queue suspend event [ 1210.797489][ T9435] raw-gadget.0 gadget.0: failed to queue reset event [ 1210.882781][ T9435] raw-gadget.0 gadget.0: failed to queue resume event [ 1210.949629][ T9435] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1211.002043][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 1211.022013][ T9435] usb 1-1: device descriptor read/8, error -32 [ 1211.140773][ T9435] raw-gadget.0 gadget.0: failed to queue suspend event [ 1211.150981][ T9435] usb usb1-port1: unable to enumerate USB device [ 1211.187978][T23135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1211.198842][T23135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1211.349499][T19106] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1211.539153][T19106] usb 6-1: Using ep0 maxpacket: 16 [ 1211.550123][T19106] usb 6-1: config 6 has an invalid interface number: 221 but max is 0 [ 1211.569428][T19106] usb 6-1: config 6 has no interface number 0 [ 1211.575961][T19106] usb 6-1: config 6 interface 221 altsetting 6 has an endpoint descriptor with address 0x13, changing to 0x3 [ 1211.594895][T19106] usb 6-1: config 6 interface 221 altsetting 6 endpoint 0x3 has an invalid bInterval 80, changing to 10 [ 1211.610144][T19106] usb 6-1: config 6 interface 221 has no altsetting 0 [ 1211.620564][T19106] usb 6-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=12.92 [ 1211.633687][T19106] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.652960][T19106] usb 6-1: Product: syz [ 1211.663135][T19106] usb 6-1: Manufacturer: syz [ 1211.673269][T19106] usb 6-1: SerialNumber: syz [ 1211.824595][ T5295] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1211.838719][T23158] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4185'. [ 1212.099909][T23164] fuse: Unknown parameter 'user_i00000000000000000000' [ 1212.208693][T23163] bridge_slave_0: left allmulticast mode [ 1212.255111][T23163] bridge_slave_0: left promiscuous mode [ 1212.297512][T23163] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.356018][T23163] bridge_slave_1: left allmulticast mode [ 1212.378745][T23163] bridge_slave_1: left promiscuous mode [ 1212.391718][T19106] f81534a_ctrl 6-1:6.221: probe with driver f81534a_ctrl failed with error -71 [ 1212.417038][T23163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.470756][T19106] usb 6-1: USB disconnect, device number 70 [ 1212.487524][T23163] bond0: (slave bond_slave_0): Releasing backup interface [ 1212.561261][T23163] bond0: (slave bond_slave_1): Releasing backup interface [ 1212.627669][T23163] team0: Port device team_slave_0 removed [ 1212.687134][T23163] team0: Port device team_slave_1 removed [ 1212.714638][T23163] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1213.541736][T23201] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4193'. [ 1213.823440][T23207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1213.871506][T23207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1213.922260][T23207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1213.971023][T23207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1214.018807][T23221] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1214.030011][T23207] batman_adv: batadv0: Interface deactivated: gretap1 [ 1214.042985][T23207] batman_adv: batadv0: Removing interface: gretap1 [ 1214.057591][T23223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.112242][T23223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1214.495348][T23234] fuse: Unknown parameter 'user_i00000000000000000000' [ 1214.582503][T22917] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1214.593408][T22917] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1214.612557][T22917] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1214.636429][T22917] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1214.646106][T22917] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1214.664168][T22917] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1214.676320][T22917] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1214.703956][T22917] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1214.711256][T17360] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1214.879036][T17360] usb 2-1: device descriptor read/64, error -71 [ 1214.892416][T22917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1215.001138][T22917] 8021q: adding VLAN 0 to HW filter on device team0 [ 1215.033895][T14261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.041103][T14261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.053064][T23251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1215.068911][T23251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1215.086931][ T194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.094117][ T194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1215.110758][T23251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4200'. [ 1215.169349][T17360] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1215.309743][T17360] usb 2-1: device descriptor read/64, error -71 [ 1215.400936][T22917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1215.442027][T17360] usb usb2-port1: attempt power cycle [ 1215.454867][T23259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1215.496906][T23259] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1215.563308][T22917] veth0_vlan: entered promiscuous mode [ 1215.588486][T22917] veth1_vlan: entered promiscuous mode [ 1215.672446][T22917] veth0_macvtap: entered promiscuous mode [ 1215.684221][T22917] veth1_macvtap: entered promiscuous mode [ 1215.713818][T23265] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4203'. [ 1215.738878][T22917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1215.763838][ T9421] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1215.770617][T22917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1215.809418][T17360] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1215.843715][T17360] usb 2-1: device descriptor read/8, error -71 [ 1215.883401][ T194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.907367][ T194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.934381][ T194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.940657][ T9421] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1215.975877][ T9421] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1215.976700][ T194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.001285][ T9421] usb 6-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 1216.048590][ T9421] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.103335][ T9421] usb 6-1: config 0 descriptor?? [ 1216.119567][T17360] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1216.191526][T17360] usb 2-1: device descriptor read/8, error -71 [ 1216.257329][T15711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.287018][T15711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.330389][T17360] usb usb2-port1: unable to enumerate USB device [ 1216.341528][T15710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.356149][T15710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.373162][T23287] loop9: detected capacity change from 0 to 7 [ 1216.386744][ C0] blk_print_req_error: 11 callbacks suppressed [ 1216.386773][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1216.402278][ C0] buffer_io_error: 11 callbacks suppressed [ 1216.402296][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1216.421372][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1216.430628][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1216.441247][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1216.450478][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1216.459007][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1216.468188][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1216.479255][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1216.488462][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1216.515350][T23291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1216.540380][T23291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1216.562780][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1216.572111][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1216.575269][ T9421] playstation 0003:054C:0BA0.0052: unknown main item tag 0x0 [ 1216.596140][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1216.605406][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1216.612878][ T9421] playstation 0003:054C:0BA0.0052: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.5-1/input0 [ 1216.613398][T23287] ldm_validate_partition_table(): Disk read failed. [ 1216.663736][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1216.673009][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1216.685713][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1216.695012][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1216.704912][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1216.714184][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1216.722899][T23287] Dev loop9: unable to read RDB block 0 [ 1216.740828][T23287] loop9: unable to read partition table [ 1216.747118][T23287] loop9: partition table beyond EOD, truncated [ 1216.771855][ T9421] playstation 0003:054C:0BA0.0052: Invalid byte count transferred, expected 16 got 0 [ 1216.772587][T23287] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 1216.790371][ T9421] playstation 0003:054C:0BA0.0052: Failed to retrieve DualShock4 pairing info: -22 [ 1216.819138][ T9421] playstation 0003:054C:0BA0.0052: Failed to get MAC address from DualShock4 [ 1216.838268][ T9421] playstation 0003:054C:0BA0.0052: Failed to create dualshock4. [ 1216.872711][ T9421] playstation 0003:054C:0BA0.0052: probe with driver playstation failed with error -22 [ 1216.979154][T17360] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1217.009827][T23259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1217.020000][T23259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1217.033398][ T9413] usb 6-1: USB disconnect, device number 71 [ 1217.170598][T17360] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1217.180888][T17360] usb 3-1: config 0 has no interface number 0 [ 1217.192870][T17360] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1217.203939][T17360] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1217.217791][T17360] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1217.227891][T17360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.236767][T17360] usb 3-1: Product: syz [ 1217.245093][T17360] usb 3-1: Manufacturer: syz [ 1217.249932][T17360] usb 3-1: SerialNumber: syz [ 1217.257539][T17360] usb 3-1: config 0 descriptor?? [ 1217.267116][T23299] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 1217.275344][T23299] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 1217.488606][T23299] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 1217.498313][T23299] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 1217.625035][T23328] fuse: Unknown parameter 'user_id00000000000000000000' [ 1217.707239][T17360] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1217.734337][T17360] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1217.789184][ T9413] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1217.939882][ T9413] usb 2-1: Using ep0 maxpacket: 32 [ 1217.949188][T17360] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1217.967657][T17360] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 1217.977080][ T9413] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1217.993873][ T9413] usb 2-1: config 86 has an invalid interface number: 175 but max is 0 [ 1218.016225][ T9413] usb 2-1: config 86 has no interface number 0 [ 1218.028198][ T9413] usb 2-1: config 86 interface 175 has no altsetting 0 [ 1218.041193][ T9413] usb 2-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice=a4.be [ 1218.053317][ T9413] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.061568][ T9413] usb 2-1: Product: syz [ 1218.065841][ T9413] usb 2-1: Manufacturer: syz [ 1218.070802][ T9413] usb 2-1: SerialNumber: syz [ 1218.295898][ T9413] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:86.175/input/input126 [ 1218.314146][ T4985] bcm5974 2-1:86.175: could not read from device [ 1218.331072][ T4985] bcm5974 2-1:86.175: could not read from device [ 1218.334914][ T9413] usb 2-1: USB disconnect, device number 103 [ 1218.353289][ T4985] bcm5974 2-1:86.175: could not read from device [ 1218.521053][T23358] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[12238] was attempted by " ; "[23358] [ 1219.120108][ T7170] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1219.172846][T23384] xt_hashlimit: size too large, truncated to 1048576 [ 1219.323681][ T7170] usb 2-1: Using ep0 maxpacket: 32 [ 1219.364776][ T7170] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1219.407399][ T7170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.438534][ T7170] usb 2-1: Product: Ы [ 1219.462427][ T7170] usb 2-1: Manufacturer: 움콃㏁셲长塰荇ｋ袘ᘻʲ뫸ℇ巀궶⽼뜒ഗ曣ꨪੑ찘柌Ș㢒 攐㲵專瓡೉孙㺲죥囆ࢬ웍﮲괋㶿䏿㝁췕붎鴌橏ᮟ [ 1219.546429][T23394] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4215'. [ 1219.554974][ T7170] usb 2-1: SerialNumber: а [ 1219.848420][ T7170] usb 2-1: 1:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 1219.914602][ T7170] usb 2-1: found format II with max.bitrate = 3, frame size=7 [ 1219.957861][ T7170] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 1220.027509][T23411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4219'. [ 1220.051714][ T7170] usb 2-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 1220.071714][T23411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4219'. [ 1220.088527][ T7170] usb 2-1: found format II with max.bitrate = 64888, frame size=9 [ 1220.100640][ T7170] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1220.127902][ T646] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1220.138044][T23411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4219'. [ 1220.183513][T23411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4219'. [ 1220.189819][ T646] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1220.243224][ T646] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1220.259663][ T3300] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1220.466325][ T7170] usb 2-1: USB disconnect, device number 104 [ 1220.498363][T23415] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1220.515962][ T24] usb 3-1: USB disconnect, device number 26 [ 1220.577087][T15391] udevd[15391]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1220.702562][T23418] fuse: Unknown parameter 'user_id00000000000000000000' [ 1220.978111][T23445] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4226'. [ 1221.172593][T23455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.186928][T23456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.196393][T23455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.205057][T23456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.218182][T23455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.228697][T23455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.351567][T17360] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1221.453826][ T9413] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1221.509954][T17360] usb 2-1: Using ep0 maxpacket: 8 [ 1221.532908][T17360] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1221.551639][T17360] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1221.565657][T17360] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice= 0.61 [ 1221.574955][T17360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1221.583921][T17360] usb 2-1: SerialNumber: syz [ 1221.613145][ T9413] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1221.622252][ T9413] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.637578][ T9413] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1221.649775][ T9413] usb 6-1: config 1 has no interface number 1 [ 1221.656055][ T9413] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1221.672598][ T9413] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1221.690137][ T9413] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1221.702748][ T9413] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.711241][ T9413] usb 6-1: Product: syz [ 1221.715542][ T9413] usb 6-1: Manufacturer: syz [ 1221.722546][ T9413] usb 6-1: SerialNumber: syz [ 1221.800611][T23450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4227'. [ 1221.832384][T17360] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1221.851289][T17360] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1221.878796][T17360] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1221.887079][T17360] usb 2-1: media controller created [ 1221.920231][T17360] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1221.957172][ T9413] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1221.972221][T17360] zl10353_read_register: readreg error (reg=127, ret==0) [ 1221.982885][ T9413] usb 6-1: MIDIStreaming interface descriptor not found [ 1222.116342][T17360] usb 2-1: USB disconnect, device number 105 [ 1222.145046][ T9413] usb 6-1: USB disconnect, device number 72 [ 1222.166883][T23486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1222.205503][T23486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1222.722359][T23508] tipc: Resetting bearer [ 1222.750500][T23508] syzkaller0: left allmulticast mode [ 1223.131730][ T9421] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1223.323290][ T9421] usb 2-1: Using ep0 maxpacket: 16 [ 1223.342313][ T9421] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1223.358063][ T9421] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.387003][ T9421] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1223.411191][ T9421] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1223.425844][ T9421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.440284][T23541] netlink: 'syz.2.4245': attribute type 1 has an invalid length. [ 1223.449975][ T9421] usb 2-1: Product: syz [ 1223.454473][ T9421] usb 2-1: Manufacturer: syz [ 1223.460448][ T9421] usb 2-1: SerialNumber: syz [ 1223.474202][ T9421] usb 2-1: 0:2 : does not exist [ 1223.515936][T23545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.537293][T23545] bridge_slave_1 (unregistering): left allmulticast mode [ 1223.550117][T23545] bridge_slave_1 (unregistering): left promiscuous mode [ 1223.557423][T23545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.739155][ T9435] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1224.020011][T23551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1224.040141][T23551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1224.687112][T23557] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 1224.913601][T23517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4238'. [ 1224.959374][T23560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1225.005254][T23560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1225.057980][T23560] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4250'. [ 1225.287843][T23566] kvm: pic: non byte write [ 1225.767937][ T9421] usb 2-1: USB disconnect, device number 106 [ 1225.987890][T23575] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4254'. [ 1226.300858][T23578] binder: 23577:23578 unknown command 0 [ 1226.321411][T23578] binder: 23577:23578 ioctl c0306201 200000000640 returned -22 [ 1227.139247][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1227.300667][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1227.346495][ T24] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1227.383823][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.446863][ T24] usb 3-1: config 0 descriptor?? [ 1227.468206][ T24] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1228.174471][T23616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1228.205942][T23616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.515761][T23629] syzkaller1: entered promiscuous mode [ 1228.529363][T23629] syzkaller1: entered allmulticast mode [ 1228.589050][ T9421] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 1228.672356][ T24] gspca_sq930x: reg_w 0105 bf00 failed -110 [ 1228.699523][T18685] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1228.751816][ T9421] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1228.754387][ T24] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 1228.761792][ T9421] usb 2-1: not running at top speed; connect to a high speed hub [ 1228.801959][ T9421] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.824001][ T9421] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1228.850777][ T9421] usb 2-1: string descriptor 0 read error: -22 [ 1228.857356][ T9421] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1228.873440][T18685] usb 6-1: too many configurations: 247, using maximum allowed: 8 [ 1228.883738][ T9421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.904547][ T9421] usb 2-1: 0:2 : does not exist [ 1228.935518][T18685] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1228.948654][T18685] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.960762][T18685] usb 6-1: Product: syz [ 1228.966771][T18685] usb 6-1: Manufacturer: syz [ 1228.977800][T18685] usb 6-1: SerialNumber: syz [ 1229.005803][T18685] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1229.028145][ T9413] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1229.093877][T23648] No memory to map [ 1229.103527][T23610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1229.123973][T23610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1229.182005][ T9421] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1229.215864][ T9421] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1229.227220][ T9421] usb 2-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/1/1 [ 1229.243322][ T9421] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1229.277784][ T9421] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 1229.358534][ T9421] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1229.422887][ T9421] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1229.491219][ T9421] usb 2-1: USB disconnect, device number 107 [ 1229.672773][ T24] usb 6-1: USB disconnect, device number 74 [ 1229.691485][T23665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4273'. [ 1229.820862][T23672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4275'. [ 1229.855926][T23670] input: syz1 as /devices/virtual/input/input127 [ 1230.071177][ T9421] usb 3-1: USB disconnect, device number 27 [ 1230.109844][ T9413] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1230.117062][ T9413] ath9k_htc: Failed to initialize the device [ 1230.125904][ T24] usb 6-1: ath9k_htc: USB layer deinitialized [ 1230.179048][T18685] usb 2-1: new low-speed USB device number 108 using dummy_hcd [ 1230.345615][T18685] usb 2-1: config 2 has an invalid interface number: 130 but max is 0 [ 1230.351890][T23689] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1230.409747][T18685] usb 2-1: config 2 has no interface number 0 [ 1230.444526][T18685] usb 2-1: config 2 interface 130 altsetting 9 endpoint 0xE has invalid maxpacket 16, setting to 8 [ 1230.479702][T18685] usb 2-1: config 2 interface 130 altsetting 9 endpoint 0xA has invalid maxpacket 1584, setting to 8 [ 1230.522645][T18685] usb 2-1: config 2 interface 130 altsetting 9 endpoint 0x6 has invalid maxpacket 64, setting to 0 [ 1230.561831][T18685] usb 2-1: config 2 interface 130 altsetting 9 endpoint 0x1 has invalid maxpacket 1023, setting to 8 [ 1230.603518][T18685] usb 2-1: config 2 interface 130 has no altsetting 0 [ 1230.709632][ T9413] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1230.869129][ T9413] usb 6-1: Using ep0 maxpacket: 16 [ 1230.886792][ T9413] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1230.905245][ T9413] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.923154][ T9413] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1230.937574][ T9413] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1230.947321][ T9413] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.955889][ T9413] usb 6-1: Product: syz [ 1230.960543][ T9413] usb 6-1: Manufacturer: syz [ 1230.965204][ T9413] usb 6-1: SerialNumber: syz [ 1230.988881][ T9413] usb 6-1: 0:2 : does not exist [ 1231.463447][T23714] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1231.722829][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 1231.722846][ T29] audit: type=1326 audit(1780596945.395:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23715 comm="syz.2.4287" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f475af9ce59 code=0x0 [ 1231.876299][T23722] Cannot find add_set index 4 as target [ 1231.934782][ T29] audit: type=1326 audit(1780596945.565:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23711 comm="syz.6.4286" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc94f19ce59 code=0x0 [ 1231.992929][ T29] audit: type=1326 audit(1780596945.665:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23708 comm="syz.0.4285" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe59219ce59 code=0x0 [ 1232.576776][T23730] netlink: 'syz.2.4288': attribute type 1 has an invalid length. [ 1232.611515][T23730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1232.690169][T23730] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4288'. [ 1233.062901][T18685] usb 2-1: New USB device found, idVendor=0499, idProduct=5009, bcdDevice=f5.d3 [ 1233.094911][T18685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.133760][ T9413] usb 6-1: USB disconnect, device number 75 [ 1233.156955][T18685] usb 2-1: can't set config #2, error -71 [ 1233.214986][T18685] usb 2-1: USB disconnect, device number 108 [ 1233.509227][ T24] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1233.549388][T18685] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 1233.649234][ T24] usb 3-1: device descriptor read/64, error -71 [ 1233.713077][T18685] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 1233.731574][T18685] usb 2-1: config 0 has no interface number 0 [ 1233.737757][T18685] usb 2-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1233.753926][T18685] usb 2-1: config 0 interface 235 has no altsetting 0 [ 1233.776178][T18685] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 1233.807143][T18685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.827523][T18685] usb 2-1: Product: syz [ 1233.841626][T18685] usb 2-1: Manufacturer: syz [ 1233.855830][T18685] usb 2-1: SerialNumber: syz [ 1233.875459][T18685] usb 2-1: config 0 descriptor?? [ 1233.882313][ T9421] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1233.898489][T18685] keyspan 2-1:0.235: Keyspan 1 port adapter converter detected [ 1233.907776][T18685] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 87 [ 1233.909477][ T24] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1233.916646][T18685] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 7 [ 1233.934540][T18685] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 81 [ 1233.943123][T18685] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 1 [ 1233.952091][T18685] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 85 [ 1233.969190][T18685] keyspan 2-1:0.235: unsupported endpoint type 0 [ 1233.985414][T18685] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1234.041934][ T9421] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.057949][ T9421] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1234.073486][ T24] usb 3-1: device descriptor read/64, error -71 [ 1234.089106][ T9421] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1234.120216][ T9421] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1234.129987][ T9421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.138329][ T9421] usb 6-1: Product: syz [ 1234.143621][ T9421] usb 6-1: Manufacturer: syz [ 1234.150454][T19106] usb 2-1: USB disconnect, device number 109 [ 1234.158214][ T9421] usb 6-1: SerialNumber: syz [ 1234.195566][T19106] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1234.195717][ T9421] cdc_mbim 6-1:1.0: skipping garbage [ 1234.209497][ T24] usb usb3-port1: attempt power cycle [ 1234.223861][T19106] keyspan 2-1:0.235: device disconnected [ 1234.230471][ T9421] usb 6-1: selecting invalid altsetting 1 [ 1234.394874][T23758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.410000][T23758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.419514][ T9421] cdc_mbim 6-1:1.0: bind() failure [ 1234.444111][ T9421] usb 6-1: USB disconnect, device number 76 [ 1234.559337][ T24] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1234.589753][ T24] usb 3-1: device descriptor read/8, error -71 [ 1234.870769][ T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1234.909531][ T24] usb 3-1: device descriptor read/8, error -71 [ 1235.051037][ T24] usb usb3-port1: unable to enumerate USB device [ 1235.168381][T23824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.194300][T23824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.319751][T13990] tipc: Disabling bearer [ 1235.369139][ T7399] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 1235.447335][T23827] xt_CT: No such helper "snmp_trap" [ 1235.468029][T23824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.472750][T15021] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1235.480188][T23824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.503265][T15021] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1235.507712][T23824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.525999][T15021] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1235.526348][T23824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.561529][T15021] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1235.561862][ T7399] usb 2-1: config 0 has an invalid interface number: 65 but max is 3 [ 1235.579238][T15021] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1235.582128][ T7399] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.601358][ T7399] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 1235.619310][ T7399] usb 2-1: config 0 has no interface number 0 [ 1235.669676][ T7399] usb 2-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=91.34 [ 1235.678990][ T7399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.699020][ T7399] usb 2-1: Product: syz [ 1235.703288][ T7399] usb 2-1: Manufacturer: syz [ 1235.707916][ T7399] usb 2-1: SerialNumber: syz [ 1235.717465][ T7399] usb 2-1: config 0 descriptor?? [ 1235.983761][ T7399] flexcop_usb: set interface failed. [ 1236.001363][ T7399] b2c2_flexcop_usb 2-1:0.65: probe with driver b2c2_flexcop_usb failed with error -22 [ 1236.031974][ T7399] usb 2-1: USB disconnect, device number 110 [ 1236.214113][T23836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1236.227590][T23836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1236.452523][T23831] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.460081][T23831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.467418][T23831] bridge_slave_0: entered allmulticast mode [ 1236.475707][T23831] bridge_slave_0: entered promiscuous mode [ 1236.485015][T23831] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.492505][T23831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.500475][T23831] bridge_slave_1: entered allmulticast mode [ 1236.508207][T23831] bridge_slave_1: entered promiscuous mode [ 1236.592644][T23831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1236.606806][T23831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1236.609542][ T24] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1236.649711][T23831] team0: Port device team_slave_0 added [ 1236.663446][T23831] team0: Port device team_slave_1 added [ 1236.703913][T23831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1236.711232][T23831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1236.738065][T23831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1236.821806][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.870722][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1236.897645][T23831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1236.902105][ T24] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1236.904790][ T7399] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1236.929758][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.937575][T23831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1236.963877][ T24] usb 3-1: Product: syz [ 1236.963898][ T24] usb 3-1: Manufacturer: syz [ 1236.963912][ T24] usb 3-1: SerialNumber: syz [ 1236.972036][ T24] usb 3-1: config 0 descriptor?? [ 1236.986780][T23831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1237.151088][ T7399] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1237.161576][ T7399] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1237.190977][ T7399] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.241585][T23831] hsr_slave_0: entered promiscuous mode [ 1237.252473][ T7399] usb 2-1: config 220 has no interface number 2 [ 1237.262586][T23831] hsr_slave_1: entered promiscuous mode [ 1237.268275][ T7399] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1237.283083][T23831] debugfs: 'hsr0' already exists in 'hsr' [ 1237.289413][T23831] Cannot create hsr debugfs directory [ 1237.294961][ T7399] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1237.314329][ T7399] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1237.330667][ T7399] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1237.350202][ T7399] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1237.363749][ T7399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.382370][ T7399] usb 2-1: Product: syz [ 1237.390803][ T7399] usb 2-1: Manufacturer: syz [ 1237.403551][ T7399] usb 2-1: SerialNumber: syz [ 1237.667142][ T7399] usb 2-1: selecting invalid altsetting 0 [ 1237.707787][ T7399] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1237.738857][T15021] Bluetooth: hci4: command tx timeout [ 1237.769156][ T7399] uvcvideo 2-1:220.0: No valid video chain found. [ 1237.794847][ T7399] usb 2-1: selecting invalid altsetting 0 [ 1237.811824][ T7399] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1237.829749][ T7399] usb 2-1: USB disconnect, device number 111 [ 1238.285882][T23831] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1238.340444][T23831] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.651481][T23831] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1238.662906][T23831] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.676293][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.683603][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.714362][T23876] bond4: (slave lo): Releasing backup interface [ 1238.721406][T23876] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1238.742766][T23876] bridge_slave_0: left allmulticast mode [ 1238.748474][T23876] bridge_slave_0: left promiscuous mode [ 1238.754813][T23876] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.769823][T23876] bridge_slave_1: left allmulticast mode [ 1238.775524][T23876] bridge_slave_1: left promiscuous mode [ 1238.784076][T23876] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.800081][T23876] bond0: (slave bond_slave_0): Releasing backup interface [ 1238.813854][T23876] bond0: (slave bond_slave_1): Releasing backup interface [ 1238.846284][T23876] team0: Port device team_slave_1 removed [ 1238.852833][T23876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1238.860714][T23876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1238.870551][T23876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1238.878046][T23876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1238.888197][T23876] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1238.977703][T23831] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1238.988949][T23831] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.107517][T23831] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1239.149253][T23831] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.346656][T17360] usb 3-1: USB disconnect, device number 32 [ 1239.678507][T23894] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1239.767631][T23894] netlink: 'syz.1.4321': attribute type 10 has an invalid length. [ 1239.789629][T15021] Bluetooth: hci4: command tx timeout [ 1239.807813][T23897] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4323'. [ 1239.861899][T23898] vivid-000: disconnect [ 1239.869379][T17360] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1240.029032][T17360] usb 3-1: Using ep0 maxpacket: 16 [ 1240.042033][T17360] usb 3-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.055848][T23894] team0 (unregistering): Port device team_slave_0 removed [ 1240.073653][T17360] usb 3-1: config 66 has 2 interfaces, different from the descriptor's value: 3 [ 1240.084757][T17360] usb 3-1: config 66 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1240.114554][T17360] usb 3-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 1240.124937][T23894] team0 (unregistering): Port device team_slave_1 removed [ 1240.127171][T17360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.141852][T17360] usb 3-1: Product: syz [ 1240.146192][T17360] usb 3-1: Manufacturer: syz [ 1240.151438][T17360] usb 3-1: SerialNumber: syz [ 1240.157387][T23896] vivid-000: reconnect [ 1240.227432][T23831] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1240.237475][T23831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1240.245692][T23831] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1240.256092][T23831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1240.264294][T23831] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1240.276568][T23831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1240.285377][T23831] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1240.311885][T23831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1240.359918][T23904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1240.388598][T17360] usb 3-1: Fast Track Pro config OK [ 1240.400010][T23904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1240.410506][T17360] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1240.441763][T23831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1240.482476][T23831] 8021q: adding VLAN 0 to HW filter on device team0 [ 1240.495265][T14261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.502513][T14261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1240.535873][T17360] usb 3-1: USB disconnect, device number 33 [ 1240.547310][T16281] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.554541][T16281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1240.603979][T15391] udevd[15391]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:66.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1240.662168][T23831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1240.704480][T23831] veth0_vlan: entered promiscuous mode [ 1240.715462][T23831] veth1_vlan: entered promiscuous mode [ 1240.747499][T23831] veth0_macvtap: entered promiscuous mode [ 1240.757181][T23831] veth1_macvtap: entered promiscuous mode [ 1240.775695][T23831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1240.791509][T23831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1240.807582][T15711] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.817555][T15711] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.826558][T18685] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1240.840320][T15711] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.849433][T15711] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.971717][T18685] usb 2-1: device descriptor read/64, error -71 [ 1241.062697][T15711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.079423][T15711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.190230][T15711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.206004][T15711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.239135][T18685] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1241.359755][ T9436] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1241.375570][T23926] bridge_slave_0: invalid flags given to default FDB implementation [ 1241.384201][T18685] usb 2-1: device descriptor read/64, error -71 [ 1241.499577][T18685] usb usb2-port1: attempt power cycle [ 1241.506314][T23926] xt_hashlimit: size too large, truncated to 1048576 [ 1241.509067][ T9436] usb 3-1: device descriptor read/64, error -71 [ 1241.791584][ T9436] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1241.849305][T18685] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1241.869836][T18713] Bluetooth: hci4: command tx timeout [ 1241.881301][T18685] usb 2-1: device descriptor read/8, error -71 [ 1241.941508][ T9436] usb 3-1: device descriptor read/64, error -71 [ 1242.079328][ T9436] usb usb3-port1: attempt power cycle [ 1242.119028][T18685] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1242.141095][T18685] usb 2-1: device descriptor read/8, error -71 [ 1242.256373][T23944] syzkaller0: entered promiscuous mode [ 1242.262473][T23944] syzkaller0: entered allmulticast mode [ 1242.275151][T18685] usb usb2-port1: unable to enumerate USB device [ 1242.435741][ T9436] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1242.459684][ T9436] usb 3-1: device descriptor read/8, error -71 [ 1242.721099][ T9436] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1242.763374][ T9436] usb 3-1: device descriptor read/8, error -71 [ 1242.882669][ T9436] usb usb3-port1: unable to enumerate USB device [ 1243.391862][T23958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.404242][T23958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1243.414868][T23958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.426976][T23958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1243.949183][T15021] Bluetooth: hci4: command tx timeout [ 1244.739032][T19106] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1244.739069][ T9421] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1244.789101][T18685] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1244.880010][T19106] usb 2-1: device descriptor read/64, error -71 [ 1244.902127][ T9421] usb 6-1: Using ep0 maxpacket: 16 [ 1244.910370][ T9421] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.922039][ T9421] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1244.937584][ T9421] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1244.944476][ T9421] usb 6-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1244.953712][T18685] usb 3-1: Using ep0 maxpacket: 16 [ 1244.961172][ T9421] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.971859][T18685] usb 3-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.985436][T18685] usb 3-1: config 66 has 2 interfaces, different from the descriptor's value: 3 [ 1244.999757][ T9421] usb 6-1: config 0 descriptor?? [ 1245.013408][T18685] usb 3-1: config 66 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1245.028528][ T9421] usbhid 6-1:0.0: can't add hid device: -22 [ 1245.035797][ T9421] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 1245.053009][T18685] usb 3-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 1245.066109][T18685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.078489][T18685] usb 3-1: Product: syz [ 1245.083010][T18685] usb 3-1: Manufacturer: syz [ 1245.087651][T18685] usb 3-1: SerialNumber: syz [ 1245.139292][T19106] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1245.270982][T19106] usb 2-1: device descriptor read/64, error -71 [ 1245.316054][T24001] [ 1245.318419][T24001] ============================================ [ 1245.324574][T24001] WARNING: possible recursive locking detected [ 1245.330848][T24001] syzkaller #0 Tainted: G L [ 1245.336832][T24001] -------------------------------------------- [ 1245.343003][T24001] syz.5.4345/24001 is trying to acquire lock: [ 1245.349049][T24001] ffffffff8f3d63b0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 1245.359335][T24001] [ 1245.359335][T24001] but task is already holding lock: [ 1245.366699][T24001] ffffffff8f3d63b0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 1245.376877][T24001] [ 1245.376877][T24001] other info that might help us debug this: [ 1245.384921][T24001] Possible unsafe locking scenario: [ 1245.384921][T24001] [ 1245.392354][T24001] CPU0 [ 1245.395688][T24001] ---- [ 1245.398955][T24001] lock(qp_broker_list.mutex); [ 1245.403852][T24001] lock(qp_broker_list.mutex); [ 1245.408703][T24001] [ 1245.408703][T24001] *** DEADLOCK *** [ 1245.408703][T24001] [ 1245.416895][T24001] May be due to missing lock nesting notation [ 1245.416895][T24001] [ 1245.425231][T24001] 1 lock held by syz.5.4345/24001: [ 1245.430323][T24001] #0: ffffffff8f3d63b0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 1245.440925][T24001] [ 1245.440925][T24001] stack backtrace: [ 1245.446805][T24001] CPU: 0 UID: 0 PID: 24001 Comm: syz.5.4345 Tainted: G L syzkaller #0 PREEMPT(full) [ 1245.446825][T24001] Tainted: [L]=SOFTLOCKUP [ 1245.446830][T24001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1245.446839][T24001] Call Trace: [ 1245.446847][T24001] [ 1245.446853][T24001] dump_stack_lvl+0xe8/0x150 [ 1245.446871][T24001] print_deadlock_bug+0x279/0x290 [ 1245.446889][T24001] __lock_acquire+0x253f/0x2cf0 [ 1245.446905][T24001] ? is_bpf_text_address+0x292/0x2b0 [ 1245.446947][T24001] ? is_bpf_text_address+0x26/0x2b0 [ 1245.446960][T24001] ? kernel_text_address+0xa5/0xe0 [ 1245.446978][T24001] ? __kernel_text_address+0xd/0x30 [ 1245.446996][T24001] ? vmci_qp_broker_detach+0x117/0xf20 [ 1245.447012][T24001] lock_acquire+0x106/0x350 [ 1245.447024][T24001] ? vmci_qp_broker_detach+0x117/0xf20 [ 1245.447042][T24001] __mutex_lock+0x1a3/0x1550 [ 1245.447056][T24001] ? vmci_qp_broker_detach+0x117/0xf20 [ 1245.447072][T24001] ? kasan_save_track+0x4f/0x80 [ 1245.447088][T24001] ? kasan_save_track+0x3e/0x80 [ 1245.447102][T24001] ? kasan_save_free_info+0x46/0x50 [ 1245.447114][T24001] ? __kasan_slab_free+0x5c/0x80 [ 1245.447128][T24001] ? kfree+0x1c5/0x640 [ 1245.447141][T24001] ? vmci_ctx_put+0x5ef/0xc40 [ 1245.447152][T24001] ? vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 1245.447163][T24001] ? vmci_datagram_dispatch+0x450/0xc60 [ 1245.447176][T24001] ? vmci_qp_broker_detach+0x8dd/0xf20 [ 1245.447191][T24001] ? vmci_host_close+0x98/0x160 [ 1245.447205][T24001] ? vmci_qp_broker_detach+0x117/0xf20 [ 1245.447220][T24001] ? exit_to_user_mode_loop+0x193/0x680 [ 1245.447231][T24001] ? __pfx___mutex_lock+0x10/0x10 [ 1245.447248][T24001] vmci_qp_broker_detach+0x117/0xf20 [ 1245.447267][T24001] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1245.447282][T24001] ? kasan_quarantine_put+0xbb/0x1f0 [ 1245.447299][T24001] ? lockdep_hardirqs_on+0x7a/0x110 [ 1245.447314][T24001] ? kfree+0x1c5/0x640 [ 1245.447328][T24001] ? vmci_ctx_put+0x5ef/0xc40 [ 1245.447342][T24001] ? vmci_ctx_put+0x141/0xc40 [ 1245.447355][T24001] vmci_ctx_put+0x64e/0xc40 [ 1245.447367][T24001] ? __pfx___schedule+0x10/0x10 [ 1245.447388][T24001] ? vmci_ctx_put+0x141/0xc40 [ 1245.447403][T24001] ? __pfx_vmci_ctx_put+0x10/0x10 [ 1245.447416][T24001] ? preempt_schedule_thunk+0x16/0x30 [ 1245.447436][T24001] ? preempt_schedule_common+0x82/0xd0 [ 1245.447459][T24001] vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 1245.447475][T24001] vmci_datagram_dispatch+0x450/0xc60 [ 1245.447491][T24001] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 1245.447507][T24001] vmci_qp_broker_detach+0x8dd/0xf20 [ 1245.447524][T24001] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1245.447538][T24001] ? kasan_quarantine_put+0xbb/0x1f0 [ 1245.447554][T24001] ? kfree+0x1c5/0x640 [ 1245.447567][T24001] ? vmci_ctx_put+0x5ef/0xc40 [ 1245.447585][T24001] ? vmci_ctx_put+0x141/0xc40 [ 1245.447597][T24001] vmci_ctx_put+0x64e/0xc40 [ 1245.447609][T24001] ? vmci_ctx_put+0x141/0xc40 [ 1245.447622][T24001] ? __pfx_vmci_ctx_put+0x10/0x10 [ 1245.447638][T24001] vmci_host_close+0x98/0x160 [ 1245.447653][T24001] ? __pfx_vmci_host_close+0x10/0x10 [ 1245.447668][T24001] __fput+0x44f/0xa60 [ 1245.447684][T24001] task_work_run+0x1d9/0x270 [ 1245.447700][T24001] ? __pfx_task_work_run+0x10/0x10 [ 1245.447717][T24001] exit_to_user_mode_loop+0x193/0x680 [ 1245.447728][T24001] ? rcu_is_watching+0x15/0xb0 [ 1245.447742][T24001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.447754][T24001] do_syscall_64+0x353/0x580 [ 1245.447765][T24001] ? trace_irq_disable+0x3b/0x140 [ 1245.447781][T24001] ? clear_bhb_loop+0x40/0x90 [ 1245.447794][T24001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.447806][T24001] RIP: 0033:0x7fbb6539ce59 [ 1245.447819][T24001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1245.447830][T24001] RSP: 002b:00007fbb66214028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1245.447844][T24001] RAX: 0000000000000000 RBX: 00007fbb65616090 RCX: 00007fbb6539ce59 [ 1245.447853][T24001] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000008 [ 1245.447862][T24001] RBP: 00007fbb65432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1245.447870][T24001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1245.447878][T24001] R13: 00007fbb65616128 R14: 00007fbb65616090 R15: 00007fbb6573fa48 [ 1245.447892][T24001] [ 1245.449255][T19106] usb usb2-port1: attempt power cycle [ 1245.467043][T18685] usb 3-1: Fast Track Pro config OK [ 1245.830565][T19106] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1245.840257][T18685] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1245.881558][T19106] usb 2-1: device descriptor read/8, error -71 [ 1245.928878][T18685] usb 3-1: USB disconnect, device number 38 [ 1246.169131][T19106] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1246.200534][T19106] usb 2-1: device descriptor read/8, error -71 [ 1246.309488][T19106] usb usb2-port1: unable to enumerate USB device