last executing test programs: 17m1.805236959s ago: executing program 2 (id=281): r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x80140, 0x112) ioctl$FE_READ_BER(r0, 0x80046f46, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) read$FUSE(r2, &(0x7f0000002280)={0x2020}, 0x2020) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) sendmmsg$inet(r3, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000d00000a690000001100010000000000000000000300000a"], 0x7}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000005600)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000003340)={0x2020}, 0x2020) pread64(r4, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) syz_fuse_handle_req(r4, &(0x7f0000000240)="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", 0x2000, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7f}}, @hoplimit={{0x14}}, @hopopts={{0x110, 0x29, 0x36, {0x5e, 0x1e, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xe7}, @generic={0x8, 0xe3, "5b23ee96da0c829e73eacc40ed3b962336155ffdc14aa07d00000000a7ef42203f152ece05d20ef9699897b829f1d5dc3a79886af23370fb206674a55c7757c0ca22b5fec4679c1bd59147bfb9f5608240068e018ab18924ff5903506cad2b94132fa0ae46b26bdf7f5b0ebb4a38afb6eadf15b36ee4a8508648510bc83a7ff6548c896564ae35e0ca51cd7b66408221388e694fd1d520c837486bc3e6dc0e33496b4d2ba0f2c2bd5fbb8afb1cc91d6df9ba2c1a34ffc767f6b0d34c7500ec0ebcb7152782fbdd981d5e82daf56b97a61601aae936b214914d3207088b98a130c20000"}, @generic={0x1, 0x2, "2bdb"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}], 0x158}}], 0x1, 0x810) futex(0x0, 0x204, 0x2, &(0x7f00000002c0)={0x77359400}, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x10}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)="6f46c908341889a11ea3992276d5ab9e10824f9fcfb7f6d042618c6866e3801459b03d38ea918910602c461a2efae322fa6119ac242a51d6da28c74d466e336b26c77454129b8f099137cbe49f4f0d25a1887a2a71ab45b6bed147c61d2108915369d90861af6441ec422495a54e03b9b8a72989a44ab1eb127d8b935e45b14c721e41b0ae5a78be", 0x88}], 0x1, 0x0, 0x0, 0x84}], 0x2, 0x4040000) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 17m1.491816854s ago: executing program 2 (id=283): pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) (async) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20000020, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe}, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81c0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="000080000000"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80800) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x0) 17m1.358181172s ago: executing program 2 (id=284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x3, 0x1c}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x7140}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) add_key$user(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) 17m1.032132104s ago: executing program 2 (id=287): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000), 0x4) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000001c0)={0x0, @raw_data="12b5070f451c0c60f337df8b7b520f41471a4357cd432e3ae791b1c23bb594071d80fd2ce0ecbe7b0e44d8d3fa0f6bde9d09968681713b6174296d07c2314e813abf4cbef5afd5d2ca20d3021258ca3cf62f3ea9da104c44e8a6661419ef3f4e003ce5a3fbd7e75ef344163d1ee78f9be035aa78e5b088423504818291d2e09dc949f6d30e8ca4585d69dbb33d5e8ebce23828f3aae47bc26f8ed6911b3e9cd595c411e92e2c380a7b88191c3ae4e0998ac1b2f844a9960f9433936e5ac72759d197b473c136c644"}) syz_usb_connect(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040011022a3e740009056cff7f0000100109050b36"], 0x0) 17m0.031579629s ago: executing program 2 (id=294): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x4}, @void, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xc482) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x1fe, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 17m0.030425715s ago: executing program 2 (id=296): r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000000)={&(0x7f0000000100)=[{0xfff2, 0xf10ac0bcbe721cb5, 0xbd, &(0x7f0000000800)="dcf2bb1c20d3affb4e44dd0b5d9753d971808f08ed038e81db459cd426261def6c8c11aa404416798e34d891d24eb93ba232aed7dd9ff5b20a1e53bad3afff4a7fe6bc59bb41b8e892d7d1ed0ce344ba0db8fefc5e54ae3c3b0a5b3150ba7ab5fce82b9da431856bfd0ae48a1fa7d94649f629c94c7d827a0d2533b7553be79b36685898734b2b90863f2a2e00e652bb3a163a5439a22f121e17596059b3812ccdcb51d17e62f286a257395d87620f97306d1ecbf9f3b1a75b6cfd86d3"}, {0x0, 0x200, 0x2, &(0x7f00000001c0)="36cc"}], 0x2}) 16m59.686268991s ago: executing program 32 (id=296): r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000000)={&(0x7f0000000100)=[{0xfff2, 0xf10ac0bcbe721cb5, 0xbd, &(0x7f0000000800)="dcf2bb1c20d3affb4e44dd0b5d9753d971808f08ed038e81db459cd426261def6c8c11aa404416798e34d891d24eb93ba232aed7dd9ff5b20a1e53bad3afff4a7fe6bc59bb41b8e892d7d1ed0ce344ba0db8fefc5e54ae3c3b0a5b3150ba7ab5fce82b9da431856bfd0ae48a1fa7d94649f629c94c7d827a0d2533b7553be79b36685898734b2b90863f2a2e00e652bb3a163a5439a22f121e17596059b3812ccdcb51d17e62f286a257395d87620f97306d1ecbf9f3b1a75b6cfd86d3"}, {0x0, 0x200, 0x2, &(0x7f00000001c0)="36cc"}], 0x2}) 10m50.572373732s ago: executing program 1 (id=2202): socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x3, 0x81) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0x61}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x700000000000000) 10m50.423199809s ago: executing program 1 (id=2203): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000280)='/dev/kvm\x00', 0x2, &(0x7f0000000380)={@align=0x6, {0xc, 0x3, 0x7ff, 0x80000001}}, 0x6, &(0x7f00000003c0), &(0x7f0000000400)=0x3}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0xffffffff, 0xf8, 0xf8, 0x0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, &(0x7f0000000480), {[{{@ipv6={@private1, @empty, [0xffffffff, 0x0, 0xff, 0xff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'veth1_to_bond\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x2f, 0x0, 0x1}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0xd, "01fc", 0x1}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@local, @local, [0xffffffff, 0xff000000, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffff00, 0xff], 'bond_slave_1\x00', 'batadv0\x00', {}, {}, 0x2f, 0x8, 0x1, 0x8}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x6, 0x6}, {0x3, 0x0, 0x2}, 0xffffffff, 0xfffffffa}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x42}, @mcast1, [0xff000000, 0x0, 0xffffff00], [0xff, 0xff, 0xffffff00], 'veth0_virt_wifi\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x7}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x40004) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x1, r3, 0x3}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010000000000fddbdf250a00000000000007000000000c001400ee"], 0x28}}, 0x40000) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f0000000940)={0x10000, 0x1, 0x50000, 0x1000, &(0x7f0000001000/0x1000)=nil, 0x4, r0}) syz_emit_ethernet(0x5f, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x29, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x80, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x1f, 0x2, "d462daf76d13b82ce3b95fcce69e43"}]}}}}}}, 0x0) (async) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r6, 0x80585414, &(0x7f0000000180)) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x81c, '\x00', 0x0, r4, 0x3, 0x2, 0x5}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050002000000009500"/32], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r8 = socket(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001500)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x2, 0xffff, 0x0, 0x5}}}}]}, 0x48}}, 0x24000890) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xc}, {0xfff2}, {0xfff1, 0x3d}}}, 0x24}}, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r7, 0x13, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 10m50.184506206s ago: executing program 1 (id=2206): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xcc_\xe3\x00\x00\x00\x00\x00\x00\x00\x00E}\xd6`\x84\xb9\x82\xa0\xbf\xa4\xaf\xe9\xbd\n\x92,x\xc8<\xa8WfCW\xee2\xd3\x87\xafT\x81V\xc4\xcbm\x12\xf5\xb4\v\xa14\xf4\x9d\x93Li\xbd\x7fU)a\xee[\xea\xb1\xe7/\x8b\xcb<\xb8\x1a\xdb/\x9c\xdbK\xfb', 0x0) ftruncate(r0, 0xdcb) pread64(r0, 0x0, 0x0, 0x1) 10m50.037977137s ago: executing program 1 (id=2207): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x1027, &(0x7f00000000c0)=ANY=[], 0x1, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r0], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 10m49.789304542s ago: executing program 1 (id=2210): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffdffffffffffff}, {0x100000000, 0x9fe, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0xa, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x0, 0x2}]}]}, 0xfc}}, 0x8000) r1 = socket$kcm(0xf, 0x3, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x830}]}) dup(r4) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x567}}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x0, 0x2, 0x44, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x10, 0x8000, 0x6, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', r6, 0x29, 0x68, 0x4, 0x8, 0x0, @loopback, @mcast2, 0x700, 0x80, 0x733, 0x3}}) r7 = socket(0xa, 0x3, 0xff) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000380)={0x1}, 0x4) socket$kcm(0x29, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x3a, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="671723d7c60133", 0x7}, {&(0x7f0000000280)="9e91d91a92dc7c8fff658bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a", 0x21}], 0x2}, 0x20008b88) 10m49.680353903s ago: executing program 1 (id=2211): socket$netlink(0x10, 0x3, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x161842, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007500)={0x14, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc040) 10m49.247592631s ago: executing program 33 (id=2211): socket$netlink(0x10, 0x3, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x161842, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007500)={0x14, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc040) 4m38.875102872s ago: executing program 5 (id=3957): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 32) syz_open_dev$video4linux(0x0, 0x9, 0x3ab2c1) (async) syz_open_dev$dri(0x0, 0x6, 0x0) (async, rerun: 64) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (rerun: 64) close(r2) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r4 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async, rerun: 32) r7 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000021c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xffe0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x4, 0x6}, 0x1, 0xfb}, [{0x48, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80001001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x3, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0xffff, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x4}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xfffffffc}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff004, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0xffffffff, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x5, 0x2, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x4, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x4}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1978, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x5, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x5, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x6, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0x9}, {0x6, 0x0, 0x1ff, 0x8, 0x80007ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x8000, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x3, 0xad, 0x2, 0xffff, 0x20000000}, {0x0, 0x6, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x6, 0x1, 0x8, 0x66a}, {0xffb, 0x6, 0x4, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x8, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0xe, 0x2, 0x53ce, 0x3}, {0xffffff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x9, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x2, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0xa, 0x1}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0x102, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x8, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x8ed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0x7be, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b5}, {0xa24b, 0x947d, 0x3, 0x4, 0x80000000, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x6}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x0, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0xffe00000, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x2000004, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x1, 0x7, 0xffffffff, 0x62f, 0x2, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x9, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x8000}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x2, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x4, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7c0, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x3}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x3dbce998cd2a5d2}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x1000000d, 0x8001, 0x299c0, 0x7, 0x800, 0xfc5, 0xfffffffe, 0x5}, 0x0) (async) syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) (async) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$rds(r10, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xaa000, 0x0) 4m38.75646029s ago: executing program 5 (id=3958): syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b00010000000009040000010e01000009058103"], 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000780)='none', &(0x7f00000007c0)='\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00^a&\xcd\x8c.\xda|\x9ex\x00\x1d\x1cL\t\\\x15Dk\xb7\x04\xd5\x7fj\xf4H\x9d\xb2\x8b\xf7\x8a3[\xc3\x99\x14\nc\xdfV\x1bR?\xaf\xe67\xa6\x99\xcc>', 0x0) 4m38.080561713s ago: executing program 5 (id=3962): setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="e197e82c0e7eec79e7b560f6dd7f4b44", 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) write(r0, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x320, 0x180, 0x0, 0x4, 0x2, {0x0, 0x9, 0x1}, {0x350, 0x20002, 0xffffffff}, {0xf4ef}, {0x4, 0x4000000, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x120, 0x0, 0x5}) 4m37.930731027s ago: executing program 5 (id=3965): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000001c0)={@local, r1}, 0x14) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xfff1}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x45040}, 0x20000000) setsockopt$inet6_int(r2, 0x29, 0x115dd29c377606b0, &(0x7f0000000000)=0x4, 0x4) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000100)='./file0\x00') (async) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/image_size', 0x201, 0x40) ioctl$VHOST_SET_VRING_BASE(r8, 0x4008af12, &(0x7f0000000200)={0x1, 0xffffffff}) (async) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x52, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) syz_usb_connect(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402749377", @ANYRES16=0x0], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x2, &(0x7f00000005c0)=@string={0x2}}, {0x11, &(0x7f0000000080)=@string={0x11, 0x3, "afee948e5f715a798280ec6fb0c9ba"}}, {0x0, 0x0}, {0x57, 0x0}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x4001}}]}) 4m37.285916097s ago: executing program 5 (id=3968): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x253, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7f, 0x90, 0x2, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x1, 0x7f, 0x1, {0x22, 0x5d8}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xf9, 0x9, 0xec}}}}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0xa, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x419}}, {0xec, &(0x7f0000000240)=@string={0xec, 0x3, "3a2da889f2138ca0e6532ad42667a939be709880706c724e6e03540c20d6647da3a2e37e56cbfd4df3b3b54eaaa92a7fb97985da82e7a8f4fb32354a57b8d8910c012499e1536005f88444566aad80200ad92e8b39b3640c5f2be99bda762de804286aedac16103ba982de842a2c6dac36d78d48e820b55c48b50d5b8771c188353a5136efe7a63bf4849e8373e965c1b2be1d775643e798045a61a3e419baf6b948f88292d7cc20d27d3cbae52e1cf928ed707a9ccb29be7f57bb51f65570721fe0e7c29e379d7f0705256ef05bb9634d339c459257b48d22f8f4e53552c04c8dfe864c00fcfb339d87"}}, {0xc2, &(0x7f0000000340)=@string={0xc2, 0x3, "5a597d44c69b65de3ccb49486e6695a66e6c1336a523b8f28b9a2343ba39d7bdbba45b613b0a21d3dbfcc64619ec8c8a67f9b64e99868294f57b7deaac2632e644d3052ab8f4ea6ce2ae0898ad71cc8685ce922cfec40f91d1c879670ee7eca2ba080f89621507d771ffcfe1a256ad68d2b1f9579ad76c1461328c5a029ebbd99503e9ee46c83af56aee180679c9b95bd50acd5ba0ddef1b8ed3539fd38883b56cc8f28690c72dbffee362dc995ad311f1db92646373fc26b2af70c06312a5f6"}}, {0x90, &(0x7f0000000440)=@string={0x90, 0x3, "44ab4bb648ad314955fc7831919f1592bb2c25f69be6c2d9541b05732d6f8b078e8e296b5bf8fed2ce0c018f2bd7eb0d7f9bd3e1eda361cc7feaa7b88079f8649668a4f135038db475b794a1a2778e600ba7126f3570cc4ab532b08d02688fb4da9975a182992ee5d88d2b87bdd6be1dfc56a87cceb67fda6929c4228c48d7516505e4816568658e194104f768c4"}}]}) 4m36.852180492s ago: executing program 5 (id=3970): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1eed2c00000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0xa0, 0x1, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x7, 0x1, 0x2, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x8, 0x8, 0x88}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x6, 0x2}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x3, 0x2, 0x7, 0x20, 0xf}, 0x42, &(0x7f00000001c0)={0x5, 0xf, 0x42, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x1, 0x9, 0x1000, 0x9}, @ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0xf, 0x110f, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x87, "3a0e6b1eb48d5ef50378a0c1714f75c9"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x16, 0x6, 0xff, 0x800a, 0x1}]}, 0x7, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x445}}, {0x1d, &(0x7f0000000280)=@string={0x1d, 0x3, "f0e837018d21610e5cca8387bf529a0f2bafe4a71fd5336f586ea7"}}, {0x24, &(0x7f00000002c0)=@string={0x24, 0x3, "407597108f935e0bb3e30874f0be89263591a9b96c331b951e87c1a21292b85b99ff"}}, {0x31, &(0x7f0000000300)=@string={0x31, 0x3, "846693e1f01e7ae1b8caf6bce51de67374552d7aeac20c7789a2866960c8bec9d14b0fc53ba2cd6df902d192bc5593"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x429}}, {0x54, &(0x7f0000000400)=@string={0x54, 0x3, "777048615d2f2fa5502df32989256362d80f077c94d82c7887253664f59bacf4dec983dd1bdcb4b08fa3a5008bf4ffb7367d089dc5d86c992992f9b47d96f7ed7a40259e91ccdd351a3ff4a9f63031c679bf"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1c09}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="4023050000000523f0"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4m36.546297306s ago: executing program 34 (id=3970): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1eed2c00000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0xa0, 0x1, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x7, 0x1, 0x2, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x8, 0x8, 0x88}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x6, 0x2}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x3, 0x2, 0x7, 0x20, 0xf}, 0x42, &(0x7f00000001c0)={0x5, 0xf, 0x42, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x1, 0x9, 0x1000, 0x9}, @ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0xf, 0x110f, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x87, "3a0e6b1eb48d5ef50378a0c1714f75c9"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x16, 0x6, 0xff, 0x800a, 0x1}]}, 0x7, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x445}}, {0x1d, &(0x7f0000000280)=@string={0x1d, 0x3, "f0e837018d21610e5cca8387bf529a0f2bafe4a71fd5336f586ea7"}}, {0x24, &(0x7f00000002c0)=@string={0x24, 0x3, "407597108f935e0bb3e30874f0be89263591a9b96c331b951e87c1a21292b85b99ff"}}, {0x31, &(0x7f0000000300)=@string={0x31, 0x3, "846693e1f01e7ae1b8caf6bce51de67374552d7aeac20c7789a2866960c8bec9d14b0fc53ba2cd6df902d192bc5593"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x429}}, {0x54, &(0x7f0000000400)=@string={0x54, 0x3, "777048615d2f2fa5502df32989256362d80f077c94d82c7887253664f59bacf4dec983dd1bdcb4b08fa3a5008bf4ffb7367d089dc5d86c992992f9b47d96f7ed7a40259e91ccdd351a3ff4a9f63031c679bf"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1c09}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="4023050000000523f0"], 0x0, 0x0, 0x0, 0x0}, 0x0) 11.126721599s ago: executing program 6 (id=5302): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) readv(r1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xf, 0xffff}, {0x0, 0x3}}, [@TCA_RATE={0x6, 0x5, {0xca, 0x1}}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x80) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffed3, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x1, 0xf}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x4}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 9.07956471s ago: executing program 6 (id=5312): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2009}}}, &(0x7f0000000300)={0x34, &(0x7f0000000140)={0x40, 0x31, 0x4, "3e8fd027"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000002600)={0x44, &(0x7f0000002440)={0x0, 0x7, 0x4, "a2efd7ab"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a800000010000304017b70000000000000b7b465", @ANYRES32=0x0, @ANYBLOB="00000000000000007800128009000100766c616e000000006800028010000380f8ff0100ffffff7f0800000006000100000000004c0004800c000100000000006a0000000c00050003000000018000000c000100220b0000000000000c00010004000005000000000c000100000000000400000002000100800000000000000008000500", @ANYRES32=r2], 0xa8}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) (async) syz_usb_control_io$uac1(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r3, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2009}}}, &(0x7f0000000300)={0x34, &(0x7f0000000140)={0x40, 0x31, 0x4, "3e8fd027"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000002600)={0x44, &(0x7f0000002440)={0x0, 0x7, 0x4, "a2efd7ab"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a800000010000304017b70000000000000b7b465", @ANYRES32=0x0, @ANYBLOB="00000000000000007800128009000100766c616e000000006800028010000380f8ff0100ffffff7f0800000006000100000000004c0004800c000100000000006a0000000c00050003000000018000000c000100220b0000000000000c00010004000005000000000c000100000000000400000002000100800000000000000008000500", @ANYRES32=r2], 0xa8}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) (async) 7.459433018s ago: executing program 7 (id=5322): syz_usbip_server_init(0x1) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x14e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r5, 0x1, 0x1070bd2e, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c805}, 0x8030) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) read$FUSE(r6, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open_by_handle_at(r8, &(0x7f0000000080)=@reiserfs_5={0x14, 0x5, {0xa1d6, 0x8, 0x8, 0x2, 0x6}}, 0x513300) write$FUSE_INIT(r8, &(0x7f0000000280)={0x50, 0x0, r7, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac901, 0x28) write$tcp_congestion(r9, &(0x7f00000000c0)='lp\x00', 0xfffffdef) (async) dup2(r9, r6) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x87, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x30, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x7f, 0x10, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "ef9926b902"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xff, 0x100, 0x8a}, {0x6, 0x24, 0x1a, 0x3, 0x2b}, [@obex={0x5, 0x24, 0x15, 0x5}, @dmm={0x7, 0x24, 0x14, 0x7ff, 0xfffe}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x0, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xf, 0x40, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xa2, 0x7, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x4, 0x6}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x8, 0x7, 0x99, 0x40, 0x4}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) (async) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000000c0)={0x6cb, 0x7d, 0x2, {{0x500, 0x319, 0x0, 0x0, {0x4, 0x2}, 0x0, 0x0, 0x7, 0x0, 0x2e, '\x04nodZ=\xbfd\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x9beq,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1', 0x9a, 'p\x02\x00}\xfag>\xff\xeb\t\xb55\x1f\x9e\xde\x05J\x00\x00\x00\x00\x18{\x82\xd9\xb5i(\xfb\xbf\v\x00\x00+Y_\xcb\x14\xa8\xf3\x0e&\xe5&\xab\xc1\x80jB\xdez\xdc\x81\x06\xb4\x94\xe1\x8d\xb5\x7f\xc1\xac\x8d\x06\x85\x95\xf0\x1c\x1c\xbe\x05\xc2v\x16/\x81\xb4\a\xe5\r\xb6\x939g!\xf3\xed\x9c\xe2\x01\x9e\xe6\xa9F\xe3\xa5Z\x1b@\xee\xb9:\xc2\x9f7[Z\xfd\xf1\xdf\x11,\x9a\xaf\xd3i\x94\xe1e\xb3:\xf7\x86\xc54\x05\x87]7\xa0E\"\x17\x8b7P\x9es\xc7\x02_\xc4\x13\xc7\xd1*\x80\x86?p#hf\x8d', 0x99, '-a\xcc\xeb\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\b\xe2\xe7H\xa2\x1dQH\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\xcf4\xd6\xa5\x99 \xc3z\x82D\x941\xbe\x81y\xbf2n#kz\xa2Bu\xd4y-\xe8\xa9QM\xe4\xe8\xc0eh:\xb8s\xd0\x1e\x0e\b\xff!20\x1a\x94\xf5K\x80\xb48E\x89T\\=\xd5\x12UT\xef\xf2\xa0B\xe3\xe1\x00d.\xc3\xc1Z>\xdd7\xbd\xa7JFq\x1fZ\xefw\xd4\xed\x9fVb~\xcc\xaa\xee\xfb\xef\xe3|\x14\xae\xe1:\xba\xbdN\v\x15[\xa8\xa2K\x00\xcf\xf3_', 0x185, '\xf8\xf6i\xfbqm\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00\x87\x0fFB\xe4\xc5\xde\x87\x14\xa2\xb0\x84L#E\xd8\xdfI\xd7\x00\xef\xc4R\xaf\xb5F\x9e\xaa\xd2\xc8\x85z5$F\xae+N\xa7\b\xfa\"\xc6\xdeH\x82\xe3FAQ\xdfC\xbeZ\'\x9a\x95\xf2\xa9\x00\x17D\xa9tSXF\xe1>-\f\xb4\x9eJ\x0f\xa1u3C\xb8\xa3\xc0\xaf\xca\xe6,\xc4)\xc0\xec}dT\x00\x00B\x8dX\x9du\x9fa~\xa1\x95\"\xc6/\x19$\x80\x11\x9b(\x01\xc9\xc1\x04\x14\x05`\xf2\r8Y\n\x81\x98*\x94\x90\xb3\x95\xe9\x00t\v\xdc\x1a\xb08w&A\x9b\xff\xd5\xc7s}L*\x17\xb9/\x18\xed\xc9\x9c\x10\x99\xe4\x0f\x13\xd8(\x04\x9f<[:\x7f\xe00\xd9\xc7\x8a\xea\x99\x03\xaf\x14#U\xf5I\xab\xb3\xf7\xb4\v\xb0\x10\"+O\xed\xec\xd3\x0e\xa3\x9e\xc49fG\"a\xb0\xd5\xabe\x14Cj\xc3\xb9pn\x01\xeb\xfe^\v\xb34w\xd1\xcfx\xe0l\\\xd5\x83\xa4\x9b3jV\xba\xb25\x90\xba\x87\x0f\xc2Et\xbf\xf1\x8c\xb5\x81\x92\xdet%>\xde\xab\xcc\n\x02\xcd\xc7\xd4>\xc4\x84\x88\x0e\xa7\xfb\xc4\x80e\"\xc7\x8e\x1f\xa7\x06\xda\x87\b\xeaQ~\\\x8b_*\x10w\xf6\xf6\xf3\xdd`\xfd\xf9B\"\xe9\xa2g/\x80:'}, 0x39d, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11\xe5\x9d\xfb\xd8\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xed\x8e<\xea\v^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xae-[\\\x99\xf7\x17\xf0\xa0wI#\x9b]\b\xf8\xc5\xc0\xadyQ\xe0\xa7\xc7\xf3\xdb\x8d\xfd?\x86W%\x8al\x04\xf3-W\xad(s\xdeE\xfa\x98\xb0\xf8&y\x17\xff\x9b\xbe\x9c\rt\xa5\xac\xa2\x06\xfe)\xe0\xc1\x03\x9f\"U<\'GB]\x83\x100x.\xe7\x8f\x8b\xa3]\xe3\x18\xc5?\tO\x92\\\xc9x.\x94\xb6\xc8p\xa4\x87g\x8b\xfa\xe7E\xdf\xf2h\xbd\xa7\xfd\xec\x87<\xe4\xfbK\x8d\xcb\xa0A\x9b0D\x9a\xdf\xefrAb\xbf\xb1\n\xaf\xcf\xeaH\xa6\x7f\xaew3\xcc:\x7f\x1e\xef\x91\xbeR\x85!^\xabA\xf6', 0xffffffffffffffff}}, 0x6cb) 6.865726434s ago: executing program 3 (id=5324): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001002dbd700000000000ff020000000000000000000000000001fe8000000000000000000000000000aa00000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000fffffffffffffdff000000000000000000000000000000000000000001000000fe09000000000000feffffffff7f4000020000000000000800002000000000000100060200000000"], 0xb8}}, 0x8000) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r5) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01430000000000000000170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x7f, 0x1}}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x101000, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x10002, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x40, 0x109, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0x6}, {0x9, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x13) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x4, 0x5) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 6.327597441s ago: executing program 7 (id=5325): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) (async) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000500)={0x0, [[0x8], [0x8000], [0x6]], '\x00', [{0x2, 0x3}, {}, {}, {0x0, 0x1, 0x0, 0x1}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) timer_create(0x5, &(0x7f00000007c0)={0x0, 0x38, 0x2, @thr={&(0x7f0000000340)="91db035f6d0e7f719aea769d38f79691ccee413f77a3cb8849ab352444fe6922047bcdfb167508b461bd87dcb5bbee03978d88e3ef5155c05995a3937ebd5c7174113178e0d3df5607487cd8dddca8ea676142ef7018bcf6438c46d8cade537980df1ca361dc07c48610c36dfb7f32b94d4450af7b6949dd6a9d58330538e5922ebc248ad9aa27b3226d2f0765695446204158a1ddc226c2d1470b145583c52380dd3ebfb0c007634c8deec93e4d8bd8a2d6701c3e3faeb7aad4e54b165e08eee315cffe102d51a3b4c5ea8e3b603f42faa9219f7321c365fcb9d4b452456739de2ce24a2f8f67bc0930c243962d", &(0x7f0000000780)="2265d815c11d5dedd5e230e0aa0fa03b6da97d9d"}}, &(0x7f0000000800)=0x0) timer_settime(r4, 0x0, &(0x7f0000000840)={{0x0, 0x989680}, {0x77359400}}, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000140)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$fscrypt_v1(0x0, &(0x7f0000000140)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$MRT_DEL_MFC_PROXY(r8, 0x0, 0xd3, 0x0, 0x0) syz_usb_control_io$rtl8150(r7, 0x0, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r9, 0x40015b19, &(0x7f0000000000)={0x2, 0xfffffffe, 0x7, 0xff, 0x1}) (async) ioctl$HIDIOCGUSAGE(r9, 0x40015b19, &(0x7f0000000000)={0x2, 0xfffffffe, 0x7, 0xff, 0x1}) readv(r9, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x1, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x6, 0xffffffffffffffff], 0x8000000, 0x80a05}) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x1, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x6, 0xffffffffffffffff], 0x8000000, 0x80a05}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580080001"], 0x5c}}, 0x0) 6.040864468s ago: executing program 6 (id=5327): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r3 = dup(r1) sendmmsg$inet(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}], 0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x6}}, 0x20) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @local}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x5}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e801a148002b02031109021200011c0780fe09040000000000", @ANYRES64=r0], 0xfffffffffffffffe) 5.877857764s ago: executing program 3 (id=5328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e1e, 0x5, @empty, 0x6}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') read$FUSE(r1, &(0x7f00000046c0)={0x2020}, 0x2020) syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002f638d408f01002204db10100000109022d00010b06800809045f40030a00004009050d02000202040c09050808"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) 5.288252807s ago: executing program 0 (id=5330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = fsopen(&(0x7f0000000440)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x3) fspick(r6, &(0x7f0000000180)='.\x00', 0x0) cachestat(r4, &(0x7f0000000280)={0x52a, 0x6}, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa03}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 4.697357289s ago: executing program 4 (id=5331): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)={0x14, 0x5e, 0x30d, 0x3, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x40) unshare(0x6a040000) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x940d, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000180)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010100, 0x15, 0x3, 'sh\x00', 0x28, 0x0, 0x70}, 0x2c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x4, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_thresh={0x8, 0xb, 0x7f}]}, 0x140}}, 0x844) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000100)={'veth0_to_team\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x9}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x4, 0x0, 0xc, 0xa, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x42}, 0x94) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0}, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r7 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) r8 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r8, 0x40046109, 0x0) close(r8) 4.073974137s ago: executing program 3 (id=5332): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500274aec440ffffff7f00000000030109021200010942109509046c0000410c180ab5d773ee323f16c0573eb998b360271c7d784297f376afa0e8500aec7af13015ced58979f4d7e37a0ab22c436cfe63baf52c79bfc069df74b6292cda61bc086e08ca3a77122c14250b64805ff6f5eb91de529b082138a61f2700d2d445ef43f4"], &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb16}, @in={0x2, 0x4e20, @local}], 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 3.688217686s ago: executing program 0 (id=5333): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x9}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x8844}, 0x400c005) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_XCRS(r7, 0x4188aea7, &(0x7f0000000240)={0x87, 0x0, [{0x0, 0x0, 0x9}, {0x400}, {0x4, 0x0, 0x27e6}, {0x3}, {0x200, 0x0, 0x8}, {0x4, 0x0, 0x1}, {0x4, 0x0, 0x7}, {0x10004, 0x0, 0xaa}, {0x7, 0x0, 0x803}, {0x7, 0x0, 0x2}, {0x10000003, 0x0, 0x1}, {0x0, 0x0, 0x866d}, {0x6, 0x0, 0x7f}, {0x25, 0x0, 0xffffffffffffffff}, {0xfffffffa, 0x0, 0x81}, {0x1d955, 0x0, 0x8003fe}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0xf5, 0x0, 0x1, 0x7, '\x00', 0x0, r7, 0x5, 0x4, 0x3}, 0x50) pwritev(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000500)}, {&(0x7f0000000600)="7164245da20fccdee39bb8f4f2055dfa97e2710832cd4a27793e79bc409cb5c38a8ad35c9ff44014744d4fab508d57d9fa7e1c831f7e576883c122358fec103da82522517d9243dfe9f77e8f69f4501e6070573756b0538bca622f5b51783625ac3ccea6782360267389f674cbf7e7c1d310bc9fb645bc7f20518e7ba5807ce4e54b1bd58f058215932892ed0a8a831b5441f58f6a2b63a2763923c51ae9b87c584171", 0xa3}, {&(0x7f00000002c0)="fb4a738b8fff03179d36d97a7e768c605c5a276efb8604f121d8c3432483ec477b13316313b6ebd165904c8e245bcd4fda069923032292004d8efce529dab99fa5d682b52473829f561f11ac11a428eab9985d916240ec7d21a11926bc5353ea29c9ebd9aed10aa3403a5e35a1116b", 0x6f}, {&(0x7f0000000880)="b8e4d28ec970bdf146d717bed673a03be982338e021e1058d00776227b342db7671f5a0a2d75e9e5a7fbd4ecc62684a793ab69989c8836473cf7744072ef0bd03758c8c6cb740f2c8abc1b69715c98796adbec917f572e32a4f6977abd032183f498075de23e212c05e37d608df3d5ca7f4b7e08f974d4f12d6c3b6c90c44b9355f52cf1e5a88049a7ab8952d5232e812f6cf20679d54d51950da095fbacb3365e30f62093a40e3c28728a31fb2de8702c", 0xb1}, {&(0x7f0000000780)="5c06f00294cc721081e366131c0fcd179066c58c4951ef284a51dfc59d67e247edf1b4fc93718f3d1d6f3bd71ab442cb6b6ebc9f4bb562848ec35bfd1a443267ca11db6125b298f33c1f", 0x4a}, {&(0x7f0000000980)}, {&(0x7f0000000ec0)="6598c590eb73ec1ac1cce9664c5dbc3b6d9685d587ebdf52f29b7cad419f7bb403de35224456e9f506a3ba418e022d95925faf708865169a6ba6250d6275cd6a87f81062b11c2cf0440cf3fb94fa8244fb33299dea4c69eda426e3f7475b57155062b609f56046302a44bfc56e32841c66b772326d2394596778149d4b1c9c788b1d70d0485447b3b2c683f8cdf37f5d5fcf837d48d671dbad0b918fcbc5633f56e4329d259d716c5f1fc663bbd106e9e3962ab76b0619d5329b39605552c5ed6e56d92fa515eb4bbb20defc655176a41edc1a4dc32b950579b8832ad92cc97914467ed3c7b24cf13032503e7d4a7332a0", 0xf1}, {&(0x7f0000000e00)="bf83903af3912b25320771861a97d9099887b5133b772fd4b99cb75c05cc6056c51d5bb95835f9b0158c4cfee49435eee968d62cc9e3f2170f885492", 0x3c}, {&(0x7f0000000c40)="8c87ae7dc3a1e41d808b729a7f992fcd10bf446bba2823fa0867f4ebbc9858852027a4c0a9681773961d1e44be4f2b9181e639856ced68ac4a29c8dd327abb9200876aae3fc55bcc6ff8f9a32a00b60448f8b57890578daddcddcad87ee7da5dd0df0f7fe978b92dfd2d2dbea58a81a037131eb4e1d00f7f29636d7dac7bc12420fb69d5e42df30502a17b31", 0x8c}], 0x9, 0xfffffffd, 0x2000008) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000000}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000540)={0x3, 0x1000003, 0x7}) r8 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="12f5ffffff677108030000003a22289259afa0e45ebb918f37b6fd", @ANYRES16=r1], 0x18}, 0x40c0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r9, 0xf502, 0x0) syz_kvm_setup_cpu$x86(r7, r6, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000700)="66ba210066eda1000000000000008064430f01cfc44178131766ba2000ed66f30f51fb460f01cf430fc7b2ad64409566b83f008ec866660f38816f0f"}], 0x1, 0x11, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000140)={{{@in=@rand_addr=0x64010102, @in6=@local, 0x4e20, 0x400, 0x4e20, 0xfffb, 0xa, 0x180, 0xa0, 0x2f}, {0xffffffff7fffffff, 0x600000, 0x4, 0x7, 0xe1, 0x4, 0x4, 0x5}, {0x2, 0x8, 0x40, 0xff}, 0x5e, 0x6e6bbe, 0x1, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d2, 0x33}, 0x2, @in=@multicast1, 0x3504, 0x4, 0x3, 0xf8, 0x1, 0xb, 0x4}}, 0xe8) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000280)) ioctl$KVM_RUN(r9, 0xae80, 0x0) 3.432231005s ago: executing program 0 (id=5334): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "b361c313d1e0dc501807804a59f1942a3efc7da8186104aee61705ae0a452a060f220d9faf56d996e64597cc6d5adc267a14ba2a072a8cd194b8779c2a42a978", 0x2f}, 0x48, 0xffffffffffffffff) keyctl$link(0x8, r0, r0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x101000) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1], 0x0) 3.227999784s ago: executing program 4 (id=5335): timer_create(0x7, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000000c0)) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) capget(0x0, 0x0) 3.055575233s ago: executing program 4 (id=5336): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20004084) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x38, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x11, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x9, &(0x7f0000000440)=""/9, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x1, 0xf, 0x0, 0x44}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000600)=[{0x0, 0x3, 0x9, 0x9}, {0x1, 0x5, 0xd, 0x9}, {0x0, 0x5, 0x6, 0xc}], 0x10, 0xaa}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000700)={r2, r6}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) readv(r7, &(0x7f00000004c0), 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1e009ce72950063ba98738e581a7cd58234e19b65f5b9c80c47c674c89aac827274a61c853b457ec1cb8bcc2340d480a924433588c4a9b80996631f94de580f74f5171c8e2b0396facf058e949ebe0784de9ff2fda0f7083f795c0f8190f4af49b5ecba35e4ed61e0b4ff5cadbed637fa5e08975bada12e1d0e2370d1a5b35ef1e8be6213fc76b94a63771e59f0433fb74ca416e44f40c7dc7c9c7aa15abf0c5b09b62db39b39f49e40163ab28a736068f9063ba4ed65b68891b1a65b4ab3635e7e98a48197b6f6befaf36b4d167687c18b657c635553d73dc45666800e35c2273fb", @ANYRES64=r6, @ANYRES64=r0, @ANYRES64=r0, @ANYRES16=r6, @ANYRES16=r7, @ANYRES64], 0x18) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000100)='%pB \x00'}, 0x20) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r8, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x8822d55593a2179}, 0xc) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff03000000000000000000000000000000000000000000000000000000000000000100"/101], 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x20040880) sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x622900, 0x0) 3.010477001s ago: executing program 7 (id=5337): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000000)="36666667c7f86e2b8bd40f3808f10fc76e85640f86c0f066b8010000000f01c13e0f0134260fc79ed900f40fc76800ba4100b81500ef", 0x36}], 0x1, 0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\r\x00\x00'], 0x50) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, 0xb, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4, 0x7, 0x0, 0x0}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x0) 2.955274607s ago: executing program 6 (id=5338): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x300}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.665743343s ago: executing program 6 (id=5339): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x4c, 0x1a, 0x180, 0x73, 0x328, 0x258, 0x258, 0x328, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x2e, 0x8, 0xfb, 0x87, 0x3, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0x8982e4c132e3b466, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x3420, 0x108}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x458) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000d00)={0x4, 0x20c, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0x7, 0x6, [0x10001, 0x10, 0x7]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x20, {0x1, 0x6, 0x3, 0x67, [0x4, 0x5, 0x28]}}, @generic={0x1, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x10, {0x3, 0x2, 0x6, 0x9, [0xfffffffffffff7f4]}}, @ra={0x5, 0x2, 0x88f2}]}, 0x1070) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r2, 0x2000000}}, 0x18) listen(r0, 0x2) 2.568425263s ago: executing program 6 (id=5340): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x41c41, 0x120) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000008340)=ANY=[@ANYBLOB="120150021e604240c21542f1b7ef0102030109021b00010d09a0040904b10401030c460909059903"], &(0x7f0000008a80)={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x802, 0x6b929545a606890f) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000200)={0x4, 0x2, 0x2c1af2a9, 0x40, 'syz0\x00', 0x2}) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0xa, 0xa, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0xf6, 0x9a}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x86, 0x81, 0x4, 0x10, 0x1}, 0x5a, &(0x7f0000000080)={0x5, 0xf, 0x5a, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x3, 0xf000, 0xfaa, [0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xf6, 0xa, 0x9}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x5, 0xf0f, 0x9, [0x0, 0xff0030, 0x3f3f, 0xff0000, 0xff0000]}, @ssp_cap={0x18, 0x10, 0xa, 0x2e, 0x3, 0x0, 0xff0f, 0xb, [0xff00c0, 0x0, 0xff0000]}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x2894}}, {0xf4, &(0x7f0000000140)=@string={0xf4, 0x3, "5549c4830101cd220cac5b5ad7d1213b47a0ebe99b64dc762c23cf11a999099c5b5c2a0d99017b4a3b80525dfcb2400611a42fba6ffbb4ca2b09e852af26705a76de045d5c0c2e99c1173b59ecda823ac65168f919b1b68fdc02679b0b6aa9a91414c990a2499dd49d9a54db6f26ee39c7d0db79ebdf7c77eeb6e7c9667bedb59f7da50bf94e70160d5f36a47a58a37c1055b7574036a53b2d86ba39cbc5606e7a8b9c68777dad2410315ee30c51ca6596575d325e7d08c6378217b1b0dbc60f7ef98628bffa7ced7af43b6b7d195c9c18c2b979d409af10d6ef1609976b667df6ad428626f1c41f09e2e3af648f8f80c65d"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x860}}]}) 2.342872526s ago: executing program 3 (id=5341): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000100)=0x401, 0x4) (async) r1 = socket$alg(0x26, 0x5, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x1, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) (async) mremap(&(0x7f000050b000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ecd000/0x3000)=nil) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000580)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001580)={0x0, r5, "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", "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"}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={0x20, r2}, 0x0) sendmsg$IPSET_CMD_LIST(r4, 0x0, 0x84) pipe(0x0) (async) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r7, @ANYRES16=r1, @ANYRES32, @ANYRES16=r6], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) (async) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xb9) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 2.090957958s ago: executing program 7 (id=5342): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x4, &(0x7f00000003c0)=[{0x8, 0x5d, 0x6, 0x15ba}, {0x7, 0x8, 0x2, 0x8}, {0x2, 0x2c, 0x3, 0x706}, {0x41ce, 0x65, 0x7, 0x10}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000002c0)={0x0, 0x80}, &(0x7f0000000300)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[{0x6, 0x4, 0x0, 0x7ffc0001}]}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0xfffffffffffffe95) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f0000002ac0)=[{{&(0x7f0000000240)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000340)=""/31, 0x1f}, {&(0x7f0000000380)=""/43, 0x2b}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/97, 0x61}], 0x4, &(0x7f0000001680)=""/166, 0xb7}, 0x400}, {{&(0x7f0000001740)=@ll, 0x80, &(0x7f00000029c0)=[{&(0x7f00000017c0)=""/112, 0x70}, {&(0x7f0000001840)=""/51, 0x33}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/159, 0x9f}, {&(0x7f0000002940)=""/60, 0x3c}, {&(0x7f0000002980)=""/63, 0x3f}], 0x6, &(0x7f0000002a40)=""/111, 0x6f}, 0x7}], 0x2, 0x143, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r2, 0x0, 0x0, 0x0, 0x1) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x113c}}, 0x8004) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000200)=0x8201) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) close(0xffffffffffffffff) r4 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000180)=@t={0x4, 0x8, 0x1, 0x2}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000304ffffffff0000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000002800000140012800a00010069706f69620000000400028008000500", @ANYRES8=r5, @ANYBLOB='t'], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) (async) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 2.003565094s ago: executing program 7 (id=5343): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x802, @private=0xa010102}, {0x2, 0x4e20, @local}, {0x2, 0x20, @private=0xa010101}, 0x142, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x7733f878, 0x6}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000140)=@arm64={0xe7, 0xe, 0x3, '\x00', 0xb44b}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000002c0)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x5, 0x6, 0x1}, {0x8000000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x2, 0x1}, {0x5000, 0x0, 0x0, 0x7, 0x3, 0x1, 0x7, 0xf, 0x8, 0x6, 0x2}, {0xeeef0000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x44, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0x6000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x40, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4064}, 0x4800) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="00f4ff00", @ANYRES16=r4, @ANYBLOB="31830000000000000000190000000c0001800800030006000000"], 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4008800) 1.97327357s ago: executing program 0 (id=5344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRESHEX=0x0], 0x7c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x10008001, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) kexec_load(0x0, 0x3, &(0x7f0000000600)=[{0x0, 0x0, 0x95d, 0x7}, {&(0x7f0000000340)="807daea8fccbf472146874b1d9330c6e06d467cc07bd3177a68d51dcafd68229a7169537d8a3a470efa1328f37004df48e2648f09112122756cdb4a143e877dc88dc25d8ed77c9ec0d54ba7c3c73885ab1402d41725028cb4f4c4ab398ada62fd5e6da35fca6c0bbe114d6533ecb3a9374f374bbd6d6068d54c5c235e82c8c150ed25162cb9c335acdd72004eb3ed51dffe6025eb0f45eea3cab3dd4ffe56a06337dcc0a9cdf4d82a63ce330f148497208ce8ce18aa4c4b7744cdf798e4a99cb06f55d3d977b257b102f75c2ca3865cac747ae00d45957b0eba494cb22a2e8c61b9c48dd7917ce1155f50025557e9ba4f2704a4c61", 0xf5, 0x5, 0x3}, {&(0x7f0000000540)="73ed1781fcd8906215fafd9475e202500a33d52623fd86019eaa05d428bedfa57b44a9c9c8dd26f47b2423486452e2776652277251a16ba45d28d746797a76ae072771168770af01653283551586af2d142291c18268715a1e65694ea91e7956abfebaae4fd1e55f046f739bffbde4c7c93963adaafe1da84967285d81da36ca3d7f248579518de0202ead9548d31c3c4da0219e962d47", 0x97, 0x0, 0x9}], 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x4000, 0x8000}) r6 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008800}, 0x20000000) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="400000000000000002004e22ac14142c00"/95], 0x110) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r7, 0x4611, 0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000020601080000000000000000030000062c0007800800134000007d2d0800124000000010080013400000004008ffffffff00000808001340800000100500010006000000050004000100000005683a69702c706f727400"/108], 0x6c}}, 0x8080) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRES16=r2, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r8, @ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424fc0080090001006d65746100000014000280080002400000000c080001400000000409000100730a0008b8062c51c87aa8a8f4f1d4bd797a30000000000900020073797a32000000001400000011"], 0x94}}, 0x0) 1.552340537s ago: executing program 7 (id=5345): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x976be000) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b9a48f10b1134200c9070102030109022400010100100009041302028367160009050402000200fa000905810b40"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) io_setup(0x5, &(0x7f00000000c0)=0x0) io_submit(r4, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x7, 0x291, 0x0, {}, {}, {0x3, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0xd, 0x2, 0x0, 0x0, "f11169bfcdcb4c1ed1acdbb8040f0160e7ce01b513249c17a05f5fba0f957c9eedceb6c7094b351b8eb4d820b9ffcd72eb979020e8e2880853974bed3ac4a489"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x8041) pread64(r0, &(0x7f00000000c0)=""/21, 0x15, 0x9) 891.411095ms ago: executing program 4 (id=5346): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x181400, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000380)={{0xffff1000, 0xe000, 0xa, 0x7, 0x1, 0x4, 0x4, 0x9, 0x8, 0x5, 0x5, 0x81}, {0x58000, 0x50000, 0xc, 0x9, 0x14, 0x8, 0x10, 0x2, 0x1, 0x3, 0xd, 0x9}, {0xeeee0000, 0x2000, 0xa, 0x1, 0x5, 0x1f, 0x9, 0xc6, 0x1, 0x55, 0xa, 0xff}, {0x1, 0x8080000, 0x3, 0x4, 0x80, 0x3, 0x88, 0x80, 0x8, 0xcd, 0x0, 0xfd}, {0x30000, 0x3000, 0xb, 0x94, 0x18, 0xbd, 0x80, 0x9, 0x2, 0x5, 0x81, 0x97}, {0x6000, 0x1a000, 0x3, 0xd, 0x6, 0xe7, 0x3, 0xfa, 0x80, 0x48, 0x67, 0xfe}, {0x3000, 0xeeef0000, 0x4, 0x9, 0x7, 0x8, 0x3, 0x1, 0x4, 0xfd, 0x8, 0xe}, {0x58000, 0xeeee0000, 0xe, 0x0, 0x1, 0x6, 0xc, 0xe, 0x44, 0x4, 0x7c, 0x17}, {0x2a0f5fff, 0xfffb}, {0xeeee0000, 0xfff}, 0xb, 0x0, 0x0, 0x2, 0x6, 0x5800, 0xffff1000, [0x93, 0x8, 0x9, 0x8]}) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x2) syz_emit_ethernet(0x82, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x16, 0x4, 0x0, 0x2, 0x5, 0x68, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1, {[@timestamp_addr={0x44, 0x24, 0x19, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@broadcast, 0x8}, {@remote, 0x852}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x4}]}, @cipso={0x86, 0x19, 0x2, [{0x5, 0xf, "7141d5fbb9b132bd91753bcc11"}, {0x2, 0x2}, {0x0, 0x2}]}, @timestamp_prespec={0x44, 0x4, 0x17, 0x3, 0x7}]}}}}}}}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) getsockopt(r4, 0x6, 0x6, &(0x7f0000000100)=""/241, &(0x7f0000000200)=0xf1) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) io_uring_enter(r5, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000500)={0x0, 'erspan0\x00', {0x1}, 0x9}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x38) socket$inet6(0xa, 0xa, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, &(0x7f0000000000)={0x5}, 0x1) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c00000004000000000000001c000000000000000000000008"], 0x68}, 0xfffe) 742.380975ms ago: executing program 3 (id=5347): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c20000020180c2000000810000000800450000484d0000000001019078ac1e0001ac1414aa05009078e00000e04b0000000000000000110000ac1414aaac1414aa004414000300000000010000040a01010101000000000000"], 0x0) (async) syz_emit_ethernet(0x5a, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c20000020180c2000000810000000800450000484d0000000001019078ac1e0001ac1414aa05009078e00000e04b0000000000000000110000ac1414aaac1414aa004414000300000000010000040a01010101000000000000"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000001c0)={0x7, {{0xa, 0x4e24, 0x5, @mcast2, 0x81}}, {{0xa, 0x4e20, 0xfffffffb, @empty, 0x8000}}}, 0x108) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYBLOB="9f06b0f6fbce09b8637ecedb34df58ea174c7f209b735ad09805f33ae7e45d645707fb16c42fb87a39297509a2f6cc039d451d9729212f", @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) socket(0x2, 0x80805, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) socket$inet_smc(0x2b, 0x1, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e22, 0x3, 'nq\x00', 0x2, 0x4, 0x38}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2) eventfd(0xb1c7) (async) r5 = eventfd(0xb1c7) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f00000000c0)=r5, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x10007, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x4, 0x72, 0x41, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2, 0x700, 0x60, 0x6, 0x1}}) connect$packet(r4, &(0x7f0000000280)={0x11, 0x6, r6, 0x1, 0x8}, 0x14) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$SNDCTL_TMR_SELECT(r7, 0x40045408) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) 511.876304ms ago: executing program 4 (id=5348): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f00000000c0)) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_flowlabel\x00') r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x76, &(0x7f0000000000), 0x8) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 510.923332ms ago: executing program 3 (id=5349): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) (async) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000001740)={{0x2, 0x100, 0x8, 0x5, 0x7, 0x5}, 0x2cf, [0x5, 0xfd1, 0x0, 0xfffffffc, 0x3, 0x2, 0xd, 0x400000, 0x1ff, 0x6, 0xfff, 0x800, 0xa, 0x5, 0x2, 0x8, 0x7ff, 0x200, 0x8, 0x6, 0xbc10, 0x9, 0x3, 0x3, 0x1, 0x8d1, 0x4, 0x3, 0x0, 0xe9d4, 0x4, 0x0, 0x4, 0x63a, 0x2, 0xd, 0x8, 0x8a800, 0x80, 0x6, 0xa, 0x1b0, 0x0, 0x8, 0xfffff9b7, 0xff, 0x7, 0x2, 0xfa, 0x3, 0x5e2, 0xffffffc0, 0x6, 0x2, 0xfffffffc, 0x6ee0, 0xf, 0x5, 0x16c9fc0a, 0x7, 0x27d38e92, 0x5, 0x2, 0x1, 0xf2, 0x4, 0x5, 0x7, 0x9, 0x6, 0xfc1, 0xe8, 0x0, 0x1, 0x2, 0x1, 0x1, 0x9, 0x1, 0xffffc56c, 0x6, 0x63, 0x6, 0x80, 0x3, 0x152, 0x52, 0x2, 0x3, 0xcf0, 0x1, 0x5f7d7f0b, 0x3, 0x4, 0x1, 0x1, 0x3b, 0x5, 0x5, 0x0, 0x5, 0x913, 0x4805d5d9, 0x3, 0x8000000, 0x58, 0x4, 0x1ff, 0x6, 0x5, 0x2, 0x2, 0x1, 0x6, 0x5, 0x400, 0x10001, 0x800, 0x200, 0x476b, 0xfffffc00, 0x7fff, 0xee, 0x8, 0x9, 0x8, 0x1, 0x9, 0x2, 0xffff0001, 0x80000000, 0x1, 0x0, 0x3, 0x3, 0x7, 0x5, 0x3, 0xb05, 0x9, 0x7, 0x8, 0x2, 0x7fff, 0x2, 0x0, 0x2, 0x5, 0x9, 0xc5e, 0xa8, 0xb, 0x4, 0x2fd4, 0x1, 0x10001, 0x6, 0x0, 0x7fff, 0x1, 0x8001, 0x5, 0x3a, 0x5, 0x2b, 0x4, 0x1, 0x10000, 0xca7a, 0x80000000, 0xb, 0x3, 0x1, 0xcb, 0x2, 0xfb59, 0x8001, 0x7e9, 0x8, 0x0, 0x7ff, 0x0, 0xd5, 0x3, 0xffff, 0x0, 0xffffff00, 0x2, 0x7, 0x8, 0x4, 0x432, 0x7, 0x9, 0x5, 0x1, 0xd, 0x2, 0x80000001, 0x6, 0x400, 0x5, 0x1, 0x6, 0xf6d3, 0x7, 0x4f, 0x2, 0x1, 0x10000, 0x43, 0x3b, 0xb1, 0x0, 0xff, 0x385, 0x800, 0x400, 0x0, 0x2, 0xe, 0x896, 0x7d, 0xe, 0x1, 0x80000001, 0x0, 0x1, 0x6, 0xffffffff, 0xc, 0x10000, 0xfffffe28, 0xfffffff5, 0x4, 0x5, 0x8, 0x8, 0x0, 0x546b, 0x7, 0x7, 0x1, 0xcd, 0x7fffffff, 0xffffff80, 0x5, 0x18, 0x0, 0x9, 0x9, 0x8, 0xfba4, 0x6, 0xd, 0x80000000, 0x9, 0x92, 0x4, 0xf, 0x2, 0xda, 0x1, 0x3, 0x7fff, 0x0, 0x131, 0x0, 0xfffffffa, 0x1, 0x1, 0x7, 0x1, 0x3, 0x6, 0x8, 0xff, 0x7, 0x7, 0x8, 0x1a5, 0x7, 0x80000000, 0xfffffff7, 0x4, 0x8f, 0x10000, 0x100, 0x80, 0x1, 0xb42, 0x795, 0x9, 0x2, 0x5, 0x69b8, 0x3, 0x401, 0x101, 0x7, 0x8, 0x6, 0x5, 0x5f, 0x9, 0x2, 0xd62, 0x1cb800, 0xaf8, 0xc65, 0x100, 0x5, 0x200, 0x3, 0x3, 0x1, 0x6, 0x401, 0x3, 0x10001, 0x8, 0x6, 0x7, 0x2, 0x3, 0x389429be, 0x401, 0x1, 0x6, 0x4, 0x7, 0x4, 0xfff, 0xa, 0xcaaf, 0x5, 0x3, 0x8, 0x0, 0x3, 0x1, 0x8, 0x5, 0x5, 0x80000000, 0x0, 0x5, 0xa7f, 0xe, 0x7, 0x4, 0x80, 0x7, 0x3, 0x3, 0x7, 0x1ad, 0x2, 0x0, 0x5, 0x10, 0x6, 0x10, 0x4, 0xf6, 0x384, 0x9, 0x5, 0x4, 0x6, 0x10001, 0x0, 0x1ff, 0x1, 0x9, 0x200, 0x3247, 0x6, 0xfffffff9, 0x5, 0x1, 0xda5, 0x1, 0x2, 0x6, 0xd, 0x4, 0x61de, 0x8, 0x21b, 0x80000000, 0x8, 0x18a7, 0x1ff, 0x7, 0x0, 0x3, 0x400, 0x1, 0x1, 0xaa, 0xa, 0xc, 0x3, 0x5, 0x3ff, 0x6, 0xf, 0x7f, 0x8, 0x4, 0x3, 0x40, 0xfffffffd, 0x8, 0x7c, 0x9, 0x0, 0x8, 0x400, 0xee, 0xffffffff, 0x1, 0x6, 0x6, 0x0, 0x7, 0x8, 0x8, 0x6, 0x80, 0x9, 0x0, 0x2, 0x6, 0xe08, 0xa, 0x96d1, 0x5, 0x6, 0x3, 0xb, 0x3, 0x6, 0x8, 0x5, 0x7f, 0x101, 0x4b, 0xff, 0x0, 0x50f, 0x5b, 0x0, 0x6, 0x1e4, 0x2b7, 0x1, 0x0, 0x13, 0x101, 0xd, 0x8, 0x8, 0x9a, 0x8, 0x401, 0x100, 0x2, 0x9, 0x371f, 0x5, 0x1, 0x7, 0xa93, 0x1, 0x7, 0x8, 0x4, 0x6, 0x7, 0x1, 0x2, 0xffffffff, 0x4, 0x101, 0x10001, 0x10, 0x7f, 0x9, 0x6, 0xd, 0x9, 0xb36, 0xf0, 0x5, 0x5, 0x2, 0x10, 0x8b7, 0x2, 0x9, 0x6, 0x5, 0x9, 0x2, 0x8, 0x4b, 0x4df4cf30, 0x7fffffff, 0x0, 0x5, 0xfffeffff, 0x5, 0x9, 0x591bce37, 0x0, 0x1ff00, 0x3285, 0x6, 0x4000000, 0x80000001, 0xfa7, 0xb8, 0x5f89a940, 0x20, 0xe59f, 0x46, 0x5, 0x1f, 0x1, 0x40, 0x80000000, 0x7, 0x1, 0x8, 0x3, 0xffff2cb8, 0x0, 0x0, 0x9, 0x80000000, 0x0, 0x3, 0x0, 0x6, 0x70000, 0x71e1, 0xffff, 0xc9e, 0x7fff, 0xd, 0x5, 0x1, 0x4e5, 0x7c5fdc4c, 0x5, 0x48d, 0x7, 0x4, 0xfffffffb, 0x700, 0x6, 0x4, 0xfffffffc, 0x4, 0x3, 0x9, 0x9, 0x7, 0x5, 0x7ff, 0x0, 0x7f, 0x4, 0x200, 0x4, 0xb, 0x3, 0x1, 0x4ab, 0xfff, 0x1, 0x4, 0x92dd, 0x0, 0x0, 0xffff, 0x0, 0xed60, 0x586, 0x4, 0x3000000, 0x6, 0x6, 0x1, 0x3, 0x3, 0x2e8, 0xab7a, 0x7f, 0x3, 0x8, 0xf, 0x5f, 0x6, 0x4000, 0x1, 0x9, 0x1, 0x9, 0x1, 0x80000000, 0xa, 0x0, 0x101, 0x9, 0x7, 0x400, 0x10, 0xfffffffd, 0x2, 0x8, 0x6, 0x8, 0x1, 0x6, 0x7, 0xffffc000, 0xb54, 0x0, 0x2, 0x4, 0x608, 0x3, 0x8, 0x6, 0x3a, 0x1, 0x0, 0x2, 0x4, 0x0, 0x7, 0x3f7d3e9f, 0x5bca, 0x401, 0x10, 0x8, 0x1, 0x6, 0x9, 0x7, 0x2, 0x4e, 0x1000, 0xd419, 0x5, 0xc0, 0x1, 0x9, 0x4, 0x7f, 0x7, 0x6, 0x3, 0x7, 0x0, 0x12820a69, 0xff, 0x3, 0x10, 0xffff, 0x8000800, 0x7, 0x3, 0x2, 0x9, 0x9, 0x1, 0x10000, 0x2, 0x1, 0x0, 0xfffffffd, 0x101, 0x0, 0x9, 0x7c, 0x1, 0x7, 0x80000001, 0x2, 0x5bcb810c, 0x5, 0x1d65, 0x3, 0x6, 0x2, 0x2, 0x800, 0x2, 0x8, 0x2384, 0x400, 0x1, 0x6, 0x2ae, 0x7, 0x2, 0x8, 0x4, 0x8, 0x8, 0x80, 0x10000, 0x5, 0x6, 0x5, 0x40, 0x8, 0x5, 0x2, 0x4, 0x2, 0x9, 0x4, 0x4, 0xffffff9d, 0x400, 0x2, 0xffffffff, 0x7, 0x401, 0x7, 0x40, 0x9, 0x9, 0xffffff80, 0xe, 0x9, 0x9, 0x401, 0x99e, 0x3, 0x3, 0x81, 0x101, 0x80000001, 0x0, 0x7, 0xfff, 0x5, 0x8000, 0x0, 0x7, 0x0, 0x7, 0x5, 0x1, 0x0, 0xff, 0x6, 0xd, 0x3, 0x0, 0x6, 0x2, 0x7, 0x0, 0x7, 0x3, 0x6, 0x8, 0x9, 0x8, 0x8000, 0xf, 0xfe2, 0x6, 0x26b1, 0x0, 0x7, 0x4, 0x200, 0xb, 0xc8, 0x4, 0x7fffffff, 0x5, 0x5668, 0x6, 0x8001, 0xfffff466, 0x6, 0x1, 0x0, 0xb, 0x400, 0x200, 0x10001, 0x3a8, 0x8, 0x2, 0x8, 0x3, 0x9, 0x5, 0x3, 0x7ff, 0x79, 0x2, 0x80, 0x7, 0x80, 0x6, 0x10, 0x478, 0x8, 0x3, 0x80000000, 0x6, 0x3, 0x0, 0x6, 0x7, 0x881d, 0xf8, 0xebe6, 0x7f, 0x7fff, 0x7ff, 0x4, 0x7, 0x800, 0x17, 0x0, 0x3ff, 0xffff, 0x9, 0xfff, 0x10, 0x6, 0x1, 0xffff, 0x5d15f75e, 0x9, 0xfff, 0x4, 0x2, 0xfffffffd, 0x484, 0x400, 0x3, 0x7, 0x4, 0x0, 0x9, 0x3, 0x8, 0x8, 0x2, 0x8, 0x5, 0x1, 0x3, 0x1, 0x7fffffff, 0x6, 0x9000000, 0x200, 0x2, 0x1, 0x46c8, 0x6, 0x8000, 0x1, 0xf1e, 0xb416, 0xb6b, 0x7, 0x1, 0x5, 0x3, 0x8, 0xffff, 0x7, 0x6, 0x1, 0x9ec, 0xc, 0x81, 0xc7e, 0x1, 0x2a4, 0x3, 0x8, 0x8, 0x0, 0x1, 0x9, 0x8dd6, 0x80000001, 0x0, 0xb50, 0x3, 0x200, 0x7, 0x8, 0x9, 0x1, 0x1, 0x3d, 0x9, 0x2, 0x9, 0x0, 0x4, 0x8, 0x7, 0x8, 0x2, 0x5598, 0xffff, 0xe57, 0xfffff016, 0xfff, 0x6d028a56, 0xff, 0x7, 0x6, 0x4, 0x6, 0x383e, 0x8, 0x1, 0x5, 0x7ff, 0x9, 0x1, 0xc0cd, 0x8, 0x10001, 0x4, 0x3, 0x7, 0x238, 0xf8f4, 0xd, 0x22, 0x3, 0x6, 0x400, 0x3, 0x7a4, 0x5, 0x3, 0x3, 0x4, 0x4, 0x0, 0x7b, 0x9, 0x5, 0x9, 0x8, 0x1, 0x3, 0xfff, 0x31a4, 0xfff, 0x3, 0x5, 0x7f, 0x8, 0xdf, 0x3, 0x9, 0x5, 0x79f, 0x7, 0x4, 0x4, 0xf5, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0x5, 0x200, 0x2, 0x1fc00, 0x2, 0x10001, 0xfffff800, 0xfffffffc, 0xe, 0x6, 0x101, 0x4, 0x9, 0x5, 0x8, 0x8000, 0x5, 0xc22, 0x31, 0x6, 0x5, 0x1000, 0x80000001, 0x9, 0x279, 0x6, 0x0, 0xfffffffa, 0x3, 0x0, 0x2, 0xa, 0xbab, 0x1, 0x8c16]}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="20830007000000"], 0x0, 0x0}) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000200)={0x0, 0x1, 0x6, '\x00', &(0x7f0000000140)=0x1}) syz_open_dev$media(&(0x7f0000004b80), 0xffffffffffffffff, 0x141000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x400, 0x2}) (async) io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x400, 0x2}) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff82}, {0x0, 0x3, 0x78, 0x4, 0x6, 0x0, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) (async) close(r7) socket$nl_generic(0x10, 0x3, 0x10) io_submit(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r8, 0x14003e}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="a2", 0x1}], 0x1}, 0x44) (async) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r8, 0x14003e}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="a2", 0x1}], 0x1}, 0x44) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) 500.97115ms ago: executing program 4 (id=5350): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r0, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}], 0x1) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x0, 0x2, 0x6, "6a9c780e", ',4;&'}}, 0x0}, 0x0) r1 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920007f04000a2525000400008f020006121a193a3363032c28f07b2896a698bb98f49a625041cf924225b00030fa941c2c1a2a935f8680b310378171e3e09292e8ab4f76a422f4b8316c73975a2da0b237552ca75dbbebd529b4a1cf193e1c1ddd552898338bb638be0d6b5d23ba7bced075619f58813df729d046aedc0990"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x8}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1407}}]}) syz_usb_control_io$uac3(r1, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0) syz_usb_control_io$uac3(r1, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) 262.074127ms ago: executing program 0 (id=5351): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES64], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) r2 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/136, 0x88}], 0x1}, 0x7}], 0x1, 0x40012023, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x100}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {0xffe0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r7, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r8, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {}, {0xfff1, 0x3d}}}, 0x24}}, 0x0) 0s ago: executing program 0 (id=5352): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) open(&(0x7f0000000100)='./bus\x00', 0x145542, 0x1c8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f0000001300)=[{&(0x7f0000002240)=""/4115, 0x1013}], 0x1, 0x142, 0xfffffffc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): t set [ 1015.133187][ T29] audit: type=1326 audit(1775556069.331:8001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23889 comm="syz.0.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f894919c819 code=0x7ffc0000 [ 1015.191456][ T29] audit: type=1326 audit(1775556069.331:8002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23889 comm="syz.0.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894919c819 code=0x7ffc0000 [ 1015.382437][ T29] audit: type=1326 audit(1775556069.331:8003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23889 comm="syz.0.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894919c819 code=0x7ffc0000 [ 1015.416905][T23917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.426016][T23917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.449476][T23917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.517279][ T29] audit: type=1326 audit(1775556069.331:8004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23889 comm="syz.0.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f894919c819 code=0x7ffc0000 [ 1015.546197][T23917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.605186][ T29] audit: type=1326 audit(1775556069.331:8005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23889 comm="syz.0.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894919c819 code=0x7ffc0000 [ 1015.675695][ T29] audit: type=1326 audit(1775556069.331:8006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23889 comm="syz.0.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894919c819 code=0x7ffc0000 [ 1015.762738][T23922] binder: 23921:23922 ioctl c0306201 2000000003c0 returned -14 [ 1015.773534][T23922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.785688][T23922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1016.125577][ T5903] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1016.287187][ T5903] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.297819][ T5903] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1016.313053][ T5903] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1016.322459][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.342509][ T5903] usb 1-1: Product: syz [ 1016.347960][ T5903] usb 1-1: Manufacturer: syz [ 1016.373819][ T5903] usb 1-1: SerialNumber: syz [ 1016.827252][ T5903] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1016.854887][T23950] dvmrp8: left allmulticast mode [ 1016.858512][ T5903] usb 1-1: USB disconnect, device number 64 [ 1016.930654][T23954] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4729'. [ 1017.219921][ T5903] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1017.371608][T23997] picdev_read: 55 callbacks suppressed [ 1017.371627][T23997] kvm: pic: non byte read [ 1017.382586][T23997] pic_ioport_write: 54 callbacks suppressed [ 1017.382605][T23997] kvm: pic: level sensitive irq not supported [ 1017.388736][T23997] kvm: pic: non byte read [ 1017.399782][T23997] kvm: pic: level sensitive irq not supported [ 1017.399901][T23997] kvm: pic: non byte read [ 1017.410784][T23997] kvm: pic: level sensitive irq not supported [ 1017.410842][T23997] kvm: pic: non byte read [ 1017.423275][ T5903] usb 1-1: Using ep0 maxpacket: 32 [ 1017.430726][ T5903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.441128][ T5903] usb 1-1: config 0 has no interfaces? [ 1017.449590][ T5903] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1017.459057][T23997] kvm: pic: level sensitive irq not supported [ 1017.459138][T23997] kvm: pic: non byte read [ 1017.459313][T23997] kvm: pic: level sensitive irq not supported [ 1017.459360][T23997] kvm: pic: non byte read [ 1017.459525][T23997] kvm: pic: level sensitive irq not supported [ 1017.477496][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.512296][T23997] kvm: pic: non byte read [ 1017.522143][T23997] kvm: pic: level sensitive irq not supported [ 1017.522235][ T5903] usb 1-1: Product: syz [ 1017.532771][T23997] kvm: pic: non byte read [ 1017.543537][T24001] fuse: Unexpected value for 'allow_other' [ 1017.565024][ T5903] usb 1-1: Manufacturer: syz [ 1017.572738][ T5903] usb 1-1: SerialNumber: syz [ 1017.583682][ T5903] usb 1-1: config 0 descriptor?? [ 1017.595865][T23997] kvm: pic: level sensitive irq not supported [ 1017.595925][T23997] kvm: pic: non byte read [ 1017.607557][T23997] kvm: pic: level sensitive irq not supported [ 1017.607693][T23997] kvm: pic: non byte read [ 1017.619009][T23997] kvm: pic: level sensitive irq not supported [ 1017.810320][T23955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.850514][T23955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.880535][ T980] usb 1-1: USB disconnect, device number 65 [ 1018.779719][T24027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4741'. [ 1019.583222][T24041] mac80211_hwsim hwsim35 syzkaller0: Caught tx_queue_len zero misconfig [ 1019.609164][T24041] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode [ 1019.616700][T24041] mac80211_hwsim hwsim35 syzkaller0: left allmulticast mode [ 1020.943485][T24067] input: syz1 as /devices/virtual/input/input102 [ 1021.013743][T24068] "syz.0.4755" (24068) uses obsolete ecb(arc4) skcipher [ 1021.074023][T24069] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4755'. [ 1021.086548][T24068] netlink: 648 bytes leftover after parsing attributes in process `syz.0.4755'. [ 1021.095846][T24068] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4755'. [ 1022.861672][ T5820] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1023.965320][T24120] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4770'. [ 1024.110654][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 1024.110666][ T29] audit: type=1326 audit(1775556079.001:8063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24123 comm="syz.6.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd989d9c819 code=0x7ffc0000 [ 1024.161601][ T29] audit: type=1326 audit(1775556079.001:8064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24123 comm="syz.6.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd989d9c819 code=0x7ffc0000 [ 1024.185734][T22690] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1024.207897][ T29] audit: type=1326 audit(1775556079.001:8065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24123 comm="syz.6.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd989d9c819 code=0x7ffc0000 [ 1024.243749][ T29] audit: type=1326 audit(1775556079.001:8066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24123 comm="syz.6.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd989d9c819 code=0x7ffc0000 [ 1024.268978][ T29] audit: type=1326 audit(1775556079.001:8067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24123 comm="syz.6.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd989d9c819 code=0x7ffc0000 [ 1024.294878][ T29] audit: type=1326 audit(1775556079.031:8068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24123 comm="syz.6.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd989d9c819 code=0x7ffc0000 [ 1024.318509][ T29] audit: type=1326 audit(1775556079.031:8069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24123 comm="syz.6.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd989d9c819 code=0x7ffc0000 [ 1024.344247][ T29] audit: type=1326 audit(1775556079.031:8070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24123 comm="syz.6.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd989d9c819 code=0x7ffc0000 [ 1024.366970][ T29] audit: type=1326 audit(1775556079.031:8071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24123 comm="syz.6.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd989d9c819 code=0x7ffc0000 [ 1024.377248][T22690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.391404][ T29] audit: type=1326 audit(1775556079.031:8072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24123 comm="syz.6.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd989d9c819 code=0x7ffc0000 [ 1024.400957][T22690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1024.435336][T22690] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1024.444548][T22690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.455620][T22690] usb 1-1: config 0 descriptor?? [ 1024.691485][T24127] netlink: 'syz.4.4772': attribute type 10 has an invalid length. [ 1024.702222][T24127] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1024.739378][T24127] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1024.761254][T24127] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4772'. [ 1024.772782][T24128] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4772'. [ 1024.799440][T24127] bond2: (slave macvlan2): Error -22 calling dev_set_mtu [ 1024.868710][T22690] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 1024.883297][T24131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.893924][T22690] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 1024.902265][T22690] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 1024.909718][T24131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.918872][T22690] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 1024.929800][T24131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.938291][T22690] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 1024.945299][T22690] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 1024.955884][T24131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.975717][T22690] cp2112 0003:10C4:EA90.0045: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1024.990372][T24131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.999309][T24131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.075618][T24117] xt_TCPMSS: Only works on TCP SYN packets [ 1025.082322][T22690] cp2112 0003:10C4:EA90.0045: Part Number: 0x00 Device Version: 0x00 [ 1025.267425][T24145] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4778'. [ 1025.276905][T24146] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4778'. [ 1025.319697][T24148] loop5: detected capacity change from 0 to 7 [ 1025.328175][ T5835] Dev loop5: unable to read RDB block 7 [ 1025.333765][ T5835] loop5: unable to read partition table [ 1025.339836][ T5835] loop5: partition table beyond EOD, truncated [ 1025.347558][T24148] Dev loop5: unable to read RDB block 7 [ 1025.353401][T24148] loop5: unable to read partition table [ 1025.359389][T24148] loop5: partition table beyond EOD, truncated [ 1025.365798][T24148] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1025.713304][T24158] openvswitch: netlink: Flow actions attr not present in new flow. [ 1025.754483][T24158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.765147][T24158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.775434][T24161] openvswitch: netlink: Flow actions attr not present in new flow. [ 1025.797792][T22690] cp2112 0003:10C4:EA90.0045: error reading lock byte: -71 [ 1025.822836][T22690] usb 1-1: USB disconnect, device number 66 [ 1025.865034][T24166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.899402][T24167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1025.916846][T24166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.954861][T24166] Context (ID=0x4db) not attached to queue pair (handle=0x2:0x2) [ 1025.967689][T24166] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4785'. [ 1026.035935][T24168] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4785'. [ 1026.566459][T24172] x_tables: duplicate underflow at hook 4 [ 1026.811312][T24180] usb usb8: usbfs: process 24180 (syz.7.4788) did not claim interface 0 before use [ 1027.358240][T24186] netlink: 'syz.3.4791': attribute type 20 has an invalid length. [ 1027.528489][T24192] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4795'. [ 1027.727434][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1027.738708][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1027.765994][T24192] bond3: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 1027.778546][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1027.789144][T24192] bond3 (unregistering): Released all slaves [ 1027.792453][T22703] usb 4-1: USB disconnect, device number 72 [ 1027.807387][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1027.866901][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1028.343823][T24199] chnl_net:caif_netlink_parms(): no params data found [ 1028.469880][T24199] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.477744][T24199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.485573][T24199] bridge_slave_0: entered allmulticast mode [ 1028.493357][T24199] bridge_slave_0: entered promiscuous mode [ 1028.512228][T24199] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.519629][T24199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.526959][T24199] bridge_slave_1: entered allmulticast mode [ 1028.534547][T24199] bridge_slave_1: entered promiscuous mode [ 1028.603489][T24199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.630949][T24199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1028.810929][T24199] team0: Port device team_slave_0 added [ 1028.817647][T24227] netlink: 'syz.4.4801': attribute type 1 has an invalid length. [ 1028.861307][T24199] team0: Port device team_slave_1 added [ 1028.894290][T24199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1028.901587][T24199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.971662][T24199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1028.986761][T24199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1028.996737][T24199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.068814][T24199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1029.345602][T22690] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1029.413725][T24199] hsr_slave_0: entered promiscuous mode [ 1029.423536][T24199] hsr_slave_1: entered promiscuous mode [ 1029.436076][T24199] debugfs: 'hsr0' already exists in 'hsr' [ 1029.441807][T24199] Cannot create hsr debugfs directory [ 1029.651475][T22690] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1029.664674][T22690] usb 1-1: config index 0 descriptor too short (expected 352, got 96) [ 1029.686963][T22690] usb 1-1: New USB device found, idVendor=030c, idProduct=1000, bcdDevice= 0.40 [ 1029.696907][T22690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 1029.728632][T22690] usb 1-1: Product: syz [ 1029.733209][T22690] usb 1-1: Manufacturer: syz [ 1029.745496][T22690] usb 1-1: SerialNumber: syz [ 1029.935771][ T5830] Bluetooth: hci3: command tx timeout [ 1030.519776][T23982] bridge_slave_1: left allmulticast mode [ 1030.526863][T23982] bridge_slave_1: left promiscuous mode [ 1030.532669][T23982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.566683][T23982] bridge_slave_0: left promiscuous mode [ 1030.572465][T23982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.592971][T24254] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4808'. [ 1030.630166][T22690] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1030.637818][T22690] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1030.754114][T22690] usb 1-1: USB disconnect, device number 67 [ 1030.841599][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1030.857444][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058e15400: rx timeout, send abort [ 1030.950527][T24267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.983612][T24267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.273142][T23982] bond0 (unregistering): left promiscuous mode [ 1031.296014][T23982] bond_slave_0: left promiscuous mode [ 1031.301586][T23982] bond_slave_1: left promiscuous mode [ 1031.318523][T23982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1031.336896][T23982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1031.345480][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058e16400: rx timeout, send abort [ 1031.357497][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058e15400: abort rx timeout. Force session deactivation [ 1031.378696][T23982] bond0 (unregistering): Released all slaves [ 1031.390673][T23982] bond1 (unregistering): Released all slaves [ 1031.421916][T23982] bond2 (unregistering): Released all slaves [ 1031.440647][T23982] bond3 (unregistering): Released all slaves [ 1031.464317][T23982] bond4 (unregistering): Released all slaves [ 1031.482415][T23982] bond5 (unregistering): Released all slaves [ 1031.505794][T23982] bond6 (unregistering): Released all slaves [ 1031.549661][T24274] syzkaller1: entered promiscuous mode [ 1031.575787][T24274] syzkaller1: entered allmulticast mode [ 1031.685287][T23982] : left promiscuous mode [ 1031.786205][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 1031.786223][ T29] audit: type=1326 audit(1775556086.671:8094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.0.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894919c819 code=0x7ffc0000 [ 1031.845584][ C0] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff888058e16400: abort rx timeout. Force session deactivation [ 1031.876485][ T29] audit: type=1326 audit(1775556086.671:8095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.0.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f894919c819 code=0x7ffc0000 [ 1031.960489][ T29] audit: type=1326 audit(1775556086.671:8096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.0.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894919c819 code=0x7ffc0000 [ 1031.988990][T23982] tipc: Disabling bearer [ 1032.017528][ T5830] Bluetooth: hci3: command tx timeout [ 1032.017660][T23982] tipc: Left network mode [ 1032.052629][T24295] netlink: 116 bytes leftover after parsing attributes in process `syz.6.4816'. [ 1032.713583][T24199] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1032.736516][T24199] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1032.769971][T24199] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1032.829152][T24199] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1033.004274][T24199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.036569][T24199] 8021q: adding VLAN 0 to HW filter on device team0 [ 1033.055007][T23973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.062256][T23973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.102321][T23973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.109523][T23973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.186804][T23982] batadv0: left promiscuous mode [ 1033.200273][T23982] hsr_slave_0: left promiscuous mode [ 1033.212123][T23982] hsr_slave_1: left promiscuous mode [ 1033.226329][T23982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1033.298824][T24341] xt_hashlimit: size too large, truncated to 1048576 [ 1033.423579][T24343] input: syz1 as /devices/virtual/input/input104 [ 1033.629279][T23982] team0 (unregistering): Port device team_slave_1 removed [ 1033.702878][T23982] team0 (unregistering): Port device team_slave_0 removed [ 1034.001086][T24337] bond0: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1034.057225][T24337] bond0 (unregistering): Released all slaves [ 1034.095882][ T5830] Bluetooth: hci3: command tx timeout [ 1034.265261][T24366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.306489][T24366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.347530][T24366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.360363][T24199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1034.412165][T24366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.504671][T24199] veth0_vlan: entered promiscuous mode [ 1034.552356][T23982] IPVS: stop unused estimator thread 0... [ 1034.569765][T24199] veth1_vlan: entered promiscuous mode [ 1034.686766][T24199] veth0_macvtap: entered promiscuous mode [ 1035.353307][T24199] veth1_macvtap: entered promiscuous mode [ 1035.495394][T24383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4827'. [ 1035.629828][T24199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1035.722662][T24199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1035.783032][T12848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.178624][ T5830] Bluetooth: hci3: command tx timeout [ 1036.225711][T12848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.261403][T12848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.287376][T23979] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.439413][T12848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1036.447988][T12848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1036.521629][T23979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1036.560967][T23979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.063777][T24429] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1037.141586][T24419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.148784][T24432] netlink: 200 bytes leftover after parsing attributes in process `syz.3.4838'. [ 1037.165068][T24432] loop6: detected capacity change from 0 to 524288000 [ 1037.591730][T24419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.712937][T24420] netlink: 'syz.4.4836': attribute type 8 has an invalid length. [ 1037.790513][T24425] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1037.807535][T24425] team0: Port device macvlan2 added [ 1038.585766][T22703] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1038.747272][T22703] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1038.756398][T22703] usb 4-1: config 3 has an invalid interface number: 4 but max is 0 [ 1038.764557][T22703] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.774801][T22703] usb 4-1: config 3 has no interface number 0 [ 1038.781034][T22703] usb 4-1: config 3 interface 4 altsetting 184 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1038.799550][T22703] usb 4-1: config 3 interface 4 altsetting 184 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1038.823131][T22703] usb 4-1: config 3 interface 4 altsetting 184 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1038.852412][T22703] usb 4-1: config 3 interface 4 has no altsetting 0 [ 1038.863965][T22703] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=7a.1f [ 1038.869319][T24443] loop2: detected capacity change from 0 to 7 [ 1038.875578][T22703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.888418][T24443] Dev loop2: unable to read RDB block 7 [ 1038.892494][T22703] usb 4-1: Product: syz [ 1038.894264][T24443] loop2: unable to read partition table [ 1038.898511][T22703] usb 4-1: Manufacturer: syz [ 1038.904457][T24443] loop2: partition table beyond EOD, truncated [ 1038.909176][T22703] usb 4-1: SerialNumber: syz [ 1038.915299][T24443] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1040.568594][T24473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4850'. [ 1040.578273][T24473] tc_dump_action: action bad kind [ 1040.583443][T24472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4850'. [ 1040.596436][T24472] tc_dump_action: action bad kind [ 1040.757664][T24480] loop2: detected capacity change from 0 to 7 [ 1040.765243][ T5835] Dev loop2: unable to read RDB block 7 [ 1040.772301][ T5835] loop2: unable to read partition table [ 1040.778632][ T5835] loop2: partition table beyond EOD, truncated [ 1040.785832][T24480] Dev loop2: unable to read RDB block 7 [ 1040.793899][T24480] loop2: unable to read partition table [ 1040.800242][T24480] loop2: partition table beyond EOD, truncated [ 1040.811467][T24480] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1040.839981][ T5192] Dev loop2: unable to read RDB block 7 [ 1040.849001][ T5192] loop2: unable to read partition table [ 1040.859282][ T5192] loop2: partition table beyond EOD, truncated [ 1041.194449][T22703] radio-si470x 4-1:3.4: could not find interrupt in endpoint [ 1041.208297][T22703] radio-si470x 4-1:3.4: probe with driver radio-si470x failed with error -5 [ 1041.217772][T22703] usbhid 4-1:3.4: couldn't find an input interrupt endpoint [ 1041.231241][T22703] usb 4-1: USB disconnect, device number 73 [ 1041.696502][T22703] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 1041.739531][T24492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1041.851715][T22703] usb 4-1: not running at top speed; connect to a high speed hub [ 1041.863978][T22703] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1041.875141][T22703] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40 [ 1041.887641][T22703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.896125][T22703] usb 4-1: Product: syz [ 1041.900421][T22703] usb 4-1: Manufacturer: Ч [ 1041.904986][T22703] usb 4-1: SerialNumber: syz [ 1042.135278][T24488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.153621][T24488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.513429][T22703] usbhid 4-1:1.0: can't add hid device: -71 [ 1042.520082][T22703] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1042.534223][T22703] usb 4-1: USB disconnect, device number 74 [ 1042.600511][T24506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1042.611398][T24506] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1042.955544][T22703] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1043.136986][T22703] usb 1-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 1043.154138][T22703] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1043.218130][T22703] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1043.235648][T22703] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1043.245587][T22703] usb 1-1: Product: syz [ 1043.259622][T22703] usb 1-1: Manufacturer: syz [ 1043.264468][T22703] usb 1-1: SerialNumber: syz [ 1043.288454][T22703] usb 1-1: config 0 descriptor?? [ 1043.310125][T24512] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1043.337148][T22703] usb 1-1: selecting invalid altsetting 0 [ 1043.401548][T24531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.452695][T24531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.543767][T24512] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1043.625518][T22692] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1043.770569][T22692] usb 4-1: device descriptor read/64, error -71 [ 1044.050038][T22692] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 1044.160927][T24544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.184388][T24544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.285559][T22692] usb 4-1: device descriptor read/64, error -71 [ 1044.395952][T22692] usb usb4-port1: attempt power cycle [ 1044.737209][T22692] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 1044.781655][T22692] usb 4-1: device descriptor read/8, error -71 [ 1045.048520][T22692] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 1045.076017][T22692] usb 4-1: device descriptor read/8, error -71 [ 1045.258444][T22692] usb usb4-port1: unable to enumerate USB device [ 1045.733084][ T980] usb 1-1: USB disconnect, device number 68 [ 1046.547940][T24573] fuse: Invalid gid '00000000000000000000003' [ 1046.822138][T24583] netlink: 'syz.4.4880': attribute type 4 has an invalid length. [ 1046.974490][T24569] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1047.316382][ T5903] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 1047.467563][T22703] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1047.499515][ T5903] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1047.507994][ T5903] usb 4-1: not running at top speed; connect to a high speed hub [ 1047.517408][ T5903] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.538278][ T5903] usb 4-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1047.575530][ T5903] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1047.583915][ T5903] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1047.606074][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.614077][ T5903] usb 4-1: Product: syz [ 1047.625509][ T5903] usb 4-1: Manufacturer: syz [ 1047.637902][ T5903] usb 4-1: SerialNumber: syz [ 1047.665570][T22703] usb 1-1: Using ep0 maxpacket: 32 [ 1047.698911][T22703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1047.720073][T22703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1047.745672][T22703] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1047.754839][T22703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.769646][T22703] usb 1-1: config 0 descriptor?? [ 1047.948287][ T5903] usb 4-1: bad CDC descriptors [ 1047.977659][ T5903] usb 4-1: USB disconnect, device number 79 [ 1048.088770][T24591] dvmrp0: entered allmulticast mode [ 1048.399457][T22703] ft260 0003:0403:6030.0046: unknown main item tag 0x0 [ 1048.413105][T22703] ft260 0003:0403:6030.0046: unknown main item tag 0x0 [ 1048.610616][T22703] ft260 0003:0403:6030.0046: failed to retrieve chip version [ 1048.629140][T22703] ft260 0003:0403:6030.0046: probe with driver ft260 failed with error -71 [ 1048.648715][T22703] usb 1-1: USB disconnect, device number 69 [ 1049.028783][T22703] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1049.207572][T22703] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1049.220412][T22703] usb 1-1: config 0 has no interface number 0 [ 1049.236757][T22703] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1049.246516][T22703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.254751][T22703] usb 1-1: Product: syz [ 1049.259699][T22703] usb 1-1: Manufacturer: syz [ 1049.264432][T22703] usb 1-1: SerialNumber: syz [ 1049.265546][T22692] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1049.282495][T22703] usb 1-1: config 0 descriptor?? [ 1049.427460][T22692] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.437823][T22692] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1049.446820][T22692] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 1049.458682][T22692] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1049.473449][T22692] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1049.482711][T22692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1049.489637][T22703] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1049.490833][T22692] usb 4-1: SerialNumber: syz [ 1049.503578][T22703] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1049.515051][T22703] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1049.528100][T22703] usb 1-1: media controller created [ 1049.550438][T22703] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1049.690143][T24597] dtv5100: wlen = 0, aborting. [ 1049.733881][T22692] usb 4-1: 0:2 : does not exist [ 1049.745804][T22692] usb 4-1: unit 5 not found! [ 1049.821702][T22692] usb 4-1: USB disconnect, device number 80 [ 1049.887930][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1049.960025][T24614] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1050.143713][T22703] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 1050.195070][T22703] usb 1-1: USB disconnect, device number 70 [ 1050.579277][T22703] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1050.580018][T24645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.596911][T24645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.695646][ T5910] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1050.725591][T22703] usb 4-1: device descriptor read/64, error -71 [ 1050.825591][ T5910] usb 1-1: device descriptor read/64, error -71 [ 1050.975555][T22703] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1051.075533][ T5910] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1051.105518][T22703] usb 4-1: device descriptor read/64, error -71 [ 1051.205554][ T5910] usb 1-1: device descriptor read/64, error -71 [ 1051.215869][T22703] usb usb4-port1: attempt power cycle [ 1051.326959][ T5910] usb usb1-port1: attempt power cycle [ 1051.470646][T24656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1051.493013][T24656] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4901'. [ 1051.559181][T24659] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1051.576550][T22703] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1051.609470][T22703] usb 4-1: device descriptor read/8, error -71 [ 1051.675694][ T5910] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1051.696864][ T5910] usb 1-1: device descriptor read/8, error -71 [ 1051.865611][T22703] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1051.886728][T22703] usb 4-1: device descriptor read/8, error -71 [ 1051.955658][ T5910] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1051.976495][ T5910] usb 1-1: device descriptor read/8, error -71 [ 1051.995722][T22703] usb usb4-port1: unable to enumerate USB device [ 1052.097192][ T5910] usb usb1-port1: unable to enumerate USB device [ 1052.539534][T24668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.548862][T24668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.764846][T24668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.775956][T24668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.124258][T24678] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4907'. [ 1053.164892][T24678] netlink: 'syz.6.4907': attribute type 4 has an invalid length. [ 1053.525421][T24684] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4910'. [ 1053.700770][T24693] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4911'. [ 1054.339045][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.348298][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.674259][T24699] netlink: 'syz.7.4913': attribute type 21 has an invalid length. [ 1054.707431][T24699] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4913'. [ 1054.738082][T24699] netlink: 'syz.7.4913': attribute type 4 has an invalid length. [ 1054.746697][T24699] netlink: 3 bytes leftover after parsing attributes in process `syz.7.4913'. [ 1055.112084][T24719] netlink: 'syz.4.4917': attribute type 1 has an invalid length. [ 1055.172502][T24719] bond4: entered promiscuous mode [ 1055.178148][T24719] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1055.294491][T24722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4915'. [ 1055.383036][T24719] bond4: (slave bridge5): making interface the new active one [ 1055.391274][T24719] bridge5: entered promiscuous mode [ 1055.397858][T24719] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 1055.719367][ T29] audit: type=1800 audit(1775556110.611:8097): pid=24717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4915" name="file0" dev="fuse" ino=3 res=0 errno=0 [ 1056.372202][T24733] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4920'. [ 1056.523162][T24733] team0: Port device team_slave_0 removed [ 1056.655941][T24737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4922'. [ 1056.675413][T24738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.700222][T24738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.777090][T24742] fuse: Unknown parameter '' [ 1056.878838][T24743] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4921'. [ 1057.310930][T24764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.384671][T24764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.497659][T24764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.603053][T24764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.691581][T24764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.731145][T24764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.783164][T24749] fuse: Bad value for 'user_id' [ 1057.795548][T24749] fuse: Bad value for 'user_id' [ 1057.902248][T24749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4926'. [ 1058.042783][T24768] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4929'. [ 1058.358157][T24780] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4933'. [ 1058.570382][ T29] audit: type=1400 audit(1775556113.461:8098): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1059.025568][T22689] usb 1-1: Using ep0 maxpacket: 32 [ 1059.038945][T22689] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1059.052878][T22689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.069785][T22689] usb 1-1: Product: syz [ 1059.077460][T22689] usb 1-1: Manufacturer: syz [ 1059.087818][T22689] usb 1-1: SerialNumber: syz [ 1059.109150][T22689] usb 1-1: config 0 descriptor?? [ 1059.120164][T22689] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1059.128449][T22689] dvb-usb: bulk message failed: -22 (4/0) [ 1059.134198][T22689] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1059.145025][T22689] dvb-usb: bulk message failed: -22 (5/0) [ 1059.150831][T22689] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1059.182562][T22689] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1059.200630][T22689] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1059.221672][T22689] usb 1-1: media controller created [ 1059.325959][T22689] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1059.327818][T24784] dtv5100: wlen = 0, aborting. [ 1059.356495][T22689] usb 1-1: selecting invalid altsetting 3 [ 1059.369449][T22689] ttusb2: set interface to alts=3 failed [ 1059.645655][T22689] DVB: Unable to find symbol tda10086_attach() [ 1059.693825][T22689] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1059.718287][T22689] dvb-usb: bulk message failed: -22 (4/0) [ 1059.726243][T22689] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1059.736612][T22689] dvb-usb: bulk message failed: -22 (5/0) [ 1059.742637][T22689] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1059.752846][T22689] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1059.765554][T22689] usb 1-1: USB disconnect, device number 75 [ 1059.823779][T22689] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1060.150263][T24811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.162445][T24811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.506389][T24816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4943'. [ 1060.865112][T24827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.897373][T24827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.241447][T24830] IPv6: Can't replace route, no match found [ 1061.904752][T24833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.937912][T24833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.063953][T24825] raw_sendmsg: syz.0.4946 forgot to set AF_INET. Fix it! [ 1062.595560][T22689] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1062.757217][T22689] usb 1-1: config 0 has an invalid interface number: 13 but max is 0 [ 1062.765587][T22689] usb 1-1: config 0 has no interface number 0 [ 1062.771714][T22689] usb 1-1: config 0 interface 13 has no altsetting 0 [ 1062.780817][T22689] usb 1-1: Dual-Role OTG device on HNP port [ 1062.787148][T22689] usb 1-1: New USB device found, idVendor=17cc, idProduct=1940, bcdDevice=1e.7a [ 1062.801705][T22689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.817229][T22689] usb 1-1: Product: syz [ 1062.825799][T22689] usb 1-1: Manufacturer: syz [ 1062.831911][T22689] usb 1-1: SerialNumber: syz [ 1062.841554][T22689] usb 1-1: config 0 descriptor?? [ 1062.891844][T24853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.901019][T24853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.058726][T22689] snd-usb-caiaq 1-1:0.13: can't set alt interface. [ 1063.065863][T22689] usb 1-1: unable to init card! (ret=-5) [ 1063.071817][T22689] snd-usb-caiaq 1-1:0.13: probe with driver snd-usb-caiaq failed with error -5 [ 1063.085466][T22689] usb 1-1: USB disconnect, device number 76 [ 1063.502657][T24858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4956'. [ 1063.714805][T24866] sg_write: data in/out 422364/112 bytes for SCSI command 0x0-- guessing data in; [ 1063.714805][T24866] program syz.4.4960 not setting count and/or reply_len properly [ 1063.766935][T22703] usb 4-1: new low-speed USB device number 85 using dummy_hcd [ 1063.930252][T22703] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.985718][T22703] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1064.287982][T22703] usb 4-1: string descriptor 0 read error: -22 [ 1064.294587][T22703] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1064.395092][T22703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.450567][T24881] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1064.457951][T22703] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1064.472417][T22703] usb 4-1: MIDIStreaming interface descriptor not found [ 1065.246922][T24885] fuse: Bad value for 'group_id' [ 1065.263597][T24886] fuse: Bad value for 'group_id' [ 1065.335462][T24885] fuse: Bad value for 'group_id' [ 1065.340589][T24886] fuse: Bad value for 'group_id' [ 1066.413368][T24908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.437078][T24908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1066.452406][T24908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.461122][T24908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.210610][T22703] usb 4-1: USB disconnect, device number 85 [ 1067.256197][T24922] netlink: 'syz.4.4975': attribute type 1 has an invalid length. [ 1067.312426][T24922] bond5: entered promiscuous mode [ 1067.339956][T24928] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4977'. [ 1067.351060][T24922] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1067.669518][T24935] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4978'. [ 1067.679174][T24935] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4978'. [ 1067.690640][T24935] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4978'. [ 1067.757266][T24940] veth1_to_bridge: Caught tx_queue_len zero misconfig [ 1069.185053][T24971] netlink: 'syz.7.4985': attribute type 3 has an invalid length. [ 1069.203799][T24971] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4985'. [ 1069.224158][T24971] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4985'. [ 1069.242206][T24971] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4985'. [ 1069.872491][T24981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4988'. [ 1070.068107][T22702] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1070.070549][T24984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.098026][T24984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.258438][T22702] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 1070.344826][T22702] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 1070.354504][T22702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.377257][T22702] usb 1-1: Product: syz [ 1070.381531][T22702] usb 1-1: Manufacturer: syz [ 1070.558838][T22702] usb 1-1: SerialNumber: syz [ 1070.885906][T22702] usb 1-1: USB disconnect, device number 77 [ 1072.060542][T25010] fuse: Bad value for 'fd' [ 1072.095211][T25010] ipip0: entered promiscuous mode [ 1072.100555][T25010] ipip0: entered allmulticast mode [ 1072.226402][T25011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1072.236257][T25011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.387923][ T29] audit: type=1800 audit(1775556128.281:8099): pid=25035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5002" name="bus" dev="tmpfs" ino=170 res=0 errno=0 [ 1073.569774][T22692] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1073.726532][T22692] usb 1-1: device descriptor read/64, error -71 [ 1073.865533][T22689] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1073.965562][T22692] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1074.005683][T22689] usb 4-1: device descriptor read/64, error -71 [ 1074.095573][T22692] usb 1-1: device descriptor read/64, error -71 [ 1074.205876][T22692] usb usb1-port1: attempt power cycle [ 1074.266418][T22689] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1074.415679][T22689] usb 4-1: device descriptor read/64, error -71 [ 1074.536077][T22689] usb usb4-port1: attempt power cycle [ 1074.565642][T22692] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1074.586832][T22692] usb 1-1: device descriptor read/8, error -71 [ 1074.845673][T22692] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1074.865224][T25038] loop2: detected capacity change from 0 to 7 [ 1074.873220][ T5835] Dev loop2: unable to read RDB block 7 [ 1074.879085][ T5835] loop2: unable to read partition table [ 1074.879240][T22692] usb 1-1: device descriptor read/8, error -71 [ 1074.885237][ T5835] loop2: partition table beyond EOD, truncated [ 1074.898287][T22689] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1074.915173][T25038] Dev loop2: unable to read RDB block 7 [ 1074.921404][T25038] loop2: unable to read partition table [ 1074.928568][T25038] loop2: partition table beyond EOD, truncated [ 1074.938885][T22689] usb 4-1: device descriptor read/8, error -71 [ 1074.945038][T25038] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1075.021444][T22692] usb usb1-port1: unable to enumerate USB device [ 1075.042663][T25041] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5004'. [ 1075.054550][T25040] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5004'. [ 1075.055995][T25041] netlink: 'syz.4.5004': attribute type 10 has an invalid length. [ 1075.076217][T25042] netlink: 'syz.4.5004': attribute type 10 has an invalid length. [ 1075.084841][T25042] veth0_vlan: left promiscuous mode [ 1075.090947][T25042] veth0_vlan: entered promiscuous mode [ 1075.098397][T25042] team0: Device veth0_vlan failed to register rx_handler [ 1075.118632][T25041] veth0_vlan: left promiscuous mode [ 1075.124436][T25041] veth0_vlan: entered promiscuous mode [ 1075.134083][T25041] team0: Device veth0_vlan failed to register rx_handler [ 1075.205577][T22689] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1075.219549][T25044] macsec1: entered promiscuous mode [ 1075.224795][T25044] macsec1: entered allmulticast mode [ 1075.235744][T22689] usb 4-1: device descriptor read/8, error -71 [ 1075.318530][T25047] syzkaller0: entered promiscuous mode [ 1075.324028][T25047] syzkaller0: entered allmulticast mode [ 1075.347249][T22689] usb usb4-port1: unable to enumerate USB device [ 1075.689592][T25055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.698805][T25055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.714991][T25055] openvswitch: netlink: Message has 592 unknown bytes. [ 1075.722245][T25055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1075.859915][T25060] syzkaller0: entered promiscuous mode [ 1075.865538][T25060] syzkaller0: entered allmulticast mode [ 1076.002837][T25064] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5011'. [ 1076.401673][T25078] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1076.452910][T25081] netlink: 'syz.3.5017': attribute type 1 has an invalid length. [ 1076.473408][T25084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5015'. [ 1076.484750][T25084] fuse: Bad value for 'fd' [ 1076.490754][T25084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1076.799612][ T5903] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 1076.967242][ T5903] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 1076.975915][ T5903] usb 4-1: config 0 has no interface number 0 [ 1076.982095][ T5903] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1076.996073][ T5903] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1077.020142][ T5903] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1077.056094][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.075069][ T5903] usb 4-1: Product: syz [ 1077.086023][ T5903] usb 4-1: Manufacturer: syz [ 1077.117995][ T5903] usb 4-1: SerialNumber: syz [ 1077.354782][ T5903] usb 4-1: config 0 descriptor?? [ 1077.586189][ T5903] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 1077.596471][ T5903] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1077.620618][ T5903] usb 4-1: USB disconnect, device number 90 [ 1077.849637][T25105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.858541][T25105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.218906][ T29] audit: type=1326 audit(1775556133.111:8100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25110 comm="syz.3.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de639c819 code=0x7ffc0000 [ 1078.587116][ T29] audit: type=1326 audit(1775556133.111:8101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25110 comm="syz.3.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de639c819 code=0x7ffc0000 [ 1078.731096][ T29] audit: type=1326 audit(1775556133.111:8102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25110 comm="syz.3.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de639c819 code=0x7ffc0000 [ 1078.880421][ T29] audit: type=1326 audit(1775556133.151:8103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25110 comm="syz.3.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6de639c819 code=0x7ffc0000 [ 1079.130735][ T29] audit: type=1326 audit(1775556133.151:8104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25110 comm="syz.3.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de639c819 code=0x7ffc0000 [ 1079.184295][ T29] audit: type=1326 audit(1775556133.151:8105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25110 comm="syz.3.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de639c819 code=0x7ffc0000 [ 1079.261735][ T29] audit: type=1326 audit(1775556133.151:8106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25110 comm="syz.3.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de639c819 code=0x7ffc0000 [ 1079.331340][ T29] audit: type=1326 audit(1775556133.151:8107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25110 comm="syz.3.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de639c819 code=0x7ffc0000 [ 1079.411939][ T29] audit: type=1326 audit(1775556133.151:8108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25110 comm="syz.3.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de639c819 code=0x7ffc0000 [ 1079.488544][ T29] audit: type=1326 audit(1775556133.151:8109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25110 comm="syz.3.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6de639c819 code=0x7ffc0000 [ 1079.572603][ T29] audit: type=1326 audit(1775556133.151:8110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25110 comm="syz.3.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de639c819 code=0x7ffc0000 [ 1079.955949][T25145] ipt_ECN: cannot use operation on non-tcp rule [ 1080.601160][T25153] netlink: 'syz.6.5035': attribute type 16 has an invalid length. [ 1080.609076][T25153] netlink: 'syz.6.5035': attribute type 2 has an invalid length. [ 1080.653154][T25154] input: syz0 as /devices/virtual/input/input107 [ 1080.690918][T25153] netlink: 64102 bytes leftover after parsing attributes in process `syz.6.5035'. [ 1080.701004][T25150] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.5034'. [ 1081.755590][ T5910] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1081.888368][ T5910] usb 4-1: device descriptor read/64, error -71 [ 1082.125567][ T5910] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1082.255627][ T5910] usb 4-1: device descriptor read/64, error -71 [ 1082.365799][ T5910] usb usb4-port1: attempt power cycle [ 1082.588913][T25207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.597823][T25207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.705707][ T5910] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1082.719876][T25213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.726236][ T5910] usb 4-1: device descriptor read/8, error -71 [ 1082.738152][T25213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.875559][T22703] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1082.975643][ T5910] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1082.995963][ T5910] usb 4-1: device descriptor read/8, error -71 [ 1083.025503][T22703] usb 1-1: Using ep0 maxpacket: 16 [ 1083.032250][T22703] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1083.041280][T22703] usb 1-1: config 9 has an invalid interface number: 88 but max is 0 [ 1083.049531][T22703] usb 1-1: config 9 has no interface number 0 [ 1083.055661][T22703] usb 1-1: config 9 interface 88 has no altsetting 0 [ 1083.064479][T22703] usb 1-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=52.b8 [ 1083.073602][T22703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.081731][T22703] usb 1-1: Product: syz [ 1083.085995][T22703] usb 1-1: Manufacturer: syz [ 1083.090591][T22703] usb 1-1: SerialNumber: syz [ 1083.105912][ T5910] usb usb4-port1: unable to enumerate USB device [ 1084.619961][T25222] syzkaller0: entered promiscuous mode [ 1084.633133][T25222] syzkaller0: entered allmulticast mode [ 1084.744044][T25218] syzkaller0: entered promiscuous mode [ 1084.757619][T25218] syzkaller0: entered allmulticast mode [ 1085.075840][T25225] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5056'. [ 1085.160409][T25225] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5056'. [ 1085.576857][T22703] ums-datafab 1-1:9.88: USB Mass Storage device detected [ 1085.606430][T22692] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1085.614456][T25238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5060'. [ 1085.660529][T22703] ums-sddr55 1-1:9.88: USB Mass Storage device detected [ 1085.771597][T22692] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.782291][T22703] usb 1-1: USB disconnect, device number 82 [ 1085.789442][T22692] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1085.825555][T22692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.843422][T25247] netlink: 'syz.4.5062': attribute type 1 has an invalid length. [ 1085.854487][T22692] usb 4-1: config 0 descriptor?? [ 1085.874200][T25247] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1085.883990][T22692] pwc: Askey VC010 type 2 USB webcam detected. [ 1085.889228][T25247] erspan0: entered allmulticast mode [ 1085.899595][T25247] bond6: (slave erspan0): making interface the new active one [ 1085.909403][T25247] bond6: (slave erspan0): Enslaving as an active interface with an up link [ 1085.964275][T25254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.977010][T25254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.030604][T25257] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1086.065780][T25256] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1086.078281][T25257] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5065'. [ 1086.087913][T25257] ..0·: renamed from hsr0 (while UP) [ 1086.096897][T25257] ..0·: entered allmulticast mode [ 1086.102030][T25257] hsr_slave_0: entered allmulticast mode [ 1086.112510][T25257] hsr_slave_1: entered allmulticast mode [ 1086.118867][T25257] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 1086.294221][T22692] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1086.301419][T22692] pwc: recv_control_msg error -32 req 02 val 2700 [ 1086.316330][T22692] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1086.330690][T22692] pwc: recv_control_msg error -32 req 04 val 1000 [ 1086.341021][T22692] pwc: recv_control_msg error -32 req 04 val 1300 [ 1086.356952][T22692] pwc: recv_control_msg error -32 req 04 val 1400 [ 1086.366023][T22692] pwc: recv_control_msg error -32 req 02 val 2000 [ 1086.381630][T22692] pwc: recv_control_msg error -32 req 02 val 2100 [ 1086.396732][T22692] pwc: recv_control_msg error -32 req 04 val 1500 [ 1086.415274][T22692] pwc: recv_control_msg error -32 req 02 val 2500 [ 1086.434008][T22692] pwc: recv_control_msg error -32 req 02 val 2400 [ 1086.447704][T22692] pwc: recv_control_msg error -32 req 02 val 2600 [ 1086.462146][T22692] pwc: recv_control_msg error -32 req 02 val 2900 [ 1086.475990][T22692] pwc: recv_control_msg error -32 req 02 val 2800 [ 1086.492686][T22692] pwc: recv_control_msg error -32 req 04 val 1100 [ 1086.508363][T22692] pwc: Registered as video103. [ 1086.515197][T22692] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input108 [ 1086.710567][T22702] usb 4-1: USB disconnect, device number 95 [ 1087.565883][T25278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5069'. [ 1087.735714][T22692] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 1087.917363][T22692] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.927704][T22692] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1087.981125][T22692] usb 1-1: config 1 has no interface number 0 [ 1088.016021][T22692] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1088.034318][T22692] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1088.065179][T22692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.097017][T22692] usb 1-1: Product: syz [ 1088.107940][T22692] usb 1-1: Manufacturer: syz [ 1088.131228][T22692] usb 1-1: SerialNumber: syz [ 1088.137335][T25281] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1088.159264][T22692] cdc_ncm 1-1:1.1: NCM or ECM functional descriptors missing [ 1088.167741][T22692] cdc_ncm 1-1:1.1: bind() failure [ 1088.338890][T25283] loop2: detected capacity change from 0 to 7 [ 1088.347844][T25283] Dev loop2: unable to read RDB block 7 [ 1088.371283][ T5903] usb 1-1: USB disconnect, device number 83 [ 1088.403170][T25283] loop2: unable to read partition table [ 1088.455709][T25283] loop2: partition table beyond EOD, truncated [ 1088.466097][T25283] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1088.717699][T25294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.729323][T25294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.932436][T25299] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 25299 comm: syz.3.5076) [ 1088.978627][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1088.978643][ T29] audit: type=1800 audit(1775556143.861:8117): pid=25299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5076" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=131958 res=0 errno=0 [ 1089.193920][T25304] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5075'. [ 1089.207435][T22702] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1089.367399][T22702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1089.378691][T22702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1089.389209][T22702] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 1089.410013][T22702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.430413][T22702] usb 1-1: config 0 descriptor?? [ 1089.489646][T25315] fuse: Bad value for 'fd' [ 1089.621756][T25317] fuse: Bad value for 'fd' [ 1089.847839][T25301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.857257][T25301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.069428][T22702] usbhid 1-1:0.0: can't add hid device: -71 [ 1090.075397][T22702] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1090.218575][T22702] usb 1-1: USB disconnect, device number 84 [ 1090.534501][T25332] netlink: 'syz.7.5083': attribute type 1 has an invalid length. [ 1090.775537][T22702] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1090.855598][T22692] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1090.925540][T22702] usb 4-1: Using ep0 maxpacket: 8 [ 1090.932198][T22702] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1090.940656][T22702] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1090.950719][T22702] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1090.960661][T22702] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1090.970889][T22702] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1090.988146][T22702] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1090.997409][T22702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.007180][T22692] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 175, changing to 11 [ 1091.023746][T22692] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1859, setting to 1024 [ 1091.035025][T22692] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1091.041859][T22692] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1091.051118][T22692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.062443][T22692] usb 1-1: config 0 descriptor?? [ 1091.068142][T25335] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1091.214299][T22702] usb 4-1: usb_control_msg returned -32 [ 1091.222610][T22702] usbtmc 4-1:16.0: can't read capabilities [ 1091.387582][T25339] pim6reg: entered allmulticast mode [ 1091.426475][T22702] usb 4-1: USB disconnect, device number 96 [ 1091.482644][T22692] playstation 0003:054C:0DF2.0047: unknown main item tag 0x0 [ 1091.499078][T22692] playstation 0003:054C:0DF2.0047: unknown main item tag 0x0 [ 1091.514429][T22692] playstation 0003:054C:0DF2.0047: unknown main item tag 0x0 [ 1091.525149][T22692] playstation 0003:054C:0DF2.0047: unknown main item tag 0x0 [ 1091.549127][T22692] playstation 0003:054C:0DF2.0047: unknown main item tag 0x0 [ 1091.568097][T22692] playstation 0003:054C:0DF2.0047: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 1091.796413][T25347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5090'. [ 1091.805396][T25347] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5090'. [ 1092.082053][T22692] playstation 0003:054C:0DF2.0047: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 1092.100553][T22692] input: HID 054c:0df2 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0047/input/input109 [ 1092.143675][T22692] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0047/input/input110 [ 1092.225568][ T5903] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1092.253808][T22692] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0047/input/input111 [ 1092.304457][T22692] input: HID 054c:0df2 Headset Jack as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0047/input/input112 [ 1092.375561][ T5903] usb 4-1: device descriptor read/64, error -71 [ 1092.480085][T22692] playstation 0003:054C:0DF2.0047: Registered DualSense controller hw_version=0xe8f2453f fw_version=0xa9ff1c9c [ 1092.504810][T22692] usb 1-1: USB disconnect, device number 85 [ 1092.642122][ T5903] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1092.776821][ T5903] usb 4-1: device descriptor read/64, error -71 [ 1092.896109][ T5903] usb usb4-port1: attempt power cycle [ 1093.282228][ T5903] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1093.328947][ T5903] usb 4-1: device descriptor read/8, error -71 [ 1093.628997][T25373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.663264][T25373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.694734][ T5903] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1093.706968][T25373] loop2: detected capacity change from 0 to 7 [ 1093.714023][T25373] Dev loop2: unable to read RDB block 7 [ 1093.720163][T25373] loop2: unable to read partition table [ 1093.734340][T25373] loop2: partition table beyond EOD, truncated [ 1093.741119][ T5903] usb 4-1: device descriptor read/8, error -71 [ 1093.764446][T25373] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà¶ ) failed (rc=-5) [ 1093.876294][ T5903] usb usb4-port1: unable to enumerate USB device [ 1094.176631][T25380] loop5: detected capacity change from 0 to 3 [ 1094.184560][ T5835] loop5: p1 < > p4 [ 1094.191032][ T5835] loop5: partition table partially beyond EOD, truncated [ 1094.202279][ T5835] loop5: p1 start 4 is beyond EOD, truncated [ 1094.212458][T25380] loop5: p1 < > p4 [ 1094.216493][T25380] loop5: partition table partially beyond EOD, truncated [ 1094.223640][T25380] loop5: p1 start 4 is beyond EOD, truncated [ 1094.323100][ T5835] udevd[5835]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1094.378865][ T5835] udevd[5835]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1094.610376][T25395] netlink: 212 bytes leftover after parsing attributes in process `syz.6.5101'. [ 1094.955536][T22702] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1095.051572][T25401] syzkaller0: entered promiscuous mode [ 1095.059118][T25401] syzkaller0: entered allmulticast mode [ 1095.085693][T22702] usb 1-1: device descriptor read/64, error -71 [ 1095.105087][T25401] tipc: Started in network mode [ 1095.114541][T25401] tipc: Node identity 063bc74261f1, cluster identity 4711 [ 1095.124935][T25401] tipc: Enabled bearer , priority 0 [ 1095.133081][T25401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5103'. [ 1095.145186][T25401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5103'. [ 1095.160711][T25400] tipc: Resetting bearer [ 1095.185840][T25400] tipc: Disabling bearer [ 1095.342533][T22702] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1095.361198][T25418] netlink: 'syz.4.5106': attribute type 4 has an invalid length. [ 1095.495920][T22702] usb 1-1: device descriptor read/64, error -71 [ 1095.616472][T22702] usb usb1-port1: attempt power cycle [ 1095.725722][T22692] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1095.886176][T22692] usb 4-1: Using ep0 maxpacket: 32 [ 1095.894719][T22692] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 1095.909962][T22692] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1095.920611][T22692] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1095.929370][T22692] usb 4-1: Product: syz [ 1095.933744][T22692] usb 4-1: Manufacturer: syz [ 1095.943754][T22692] usb 4-1: SerialNumber: syz [ 1095.955544][T22702] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1095.971595][T22692] usb 4-1: config 0 descriptor?? [ 1095.979904][T25422] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1095.988587][T22702] usb 1-1: device descriptor read/8, error -71 [ 1096.225531][T22702] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1096.246775][T22702] usb 1-1: device descriptor read/8, error -71 [ 1096.413483][T22702] usb usb1-port1: unable to enumerate USB device [ 1096.587479][T25426] ip6gretap0: entered promiscuous mode [ 1097.532826][T25446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5113'. [ 1097.542141][T25446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5113'. [ 1097.563530][T25446] team0: entered promiscuous mode [ 1097.571098][T25446] team_slave_0: entered promiscuous mode [ 1097.577835][T25446] team_slave_1: entered promiscuous mode [ 1097.591217][T25446] team0: left promiscuous mode [ 1097.596358][T25446] team_slave_0: left promiscuous mode [ 1097.602210][T25446] team_slave_1: left promiscuous mode [ 1098.525686][T25458] netlink: 'syz.0.5116': attribute type 8 has an invalid length. [ 1098.971980][T22694] usb 4-1: USB disconnect, device number 101 [ 1099.105373][T25472] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5119'. [ 1099.297349][T25426] ip6gretap0: left promiscuous mode [ 1099.342191][T25478] netlink: 212336 bytes leftover after parsing attributes in process `syz.7.5123'. [ 1099.409768][T25479] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5121'. [ 1099.635530][T22692] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 1099.808540][T22694] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1099.814174][T22692] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.835834][T22692] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1100.249156][T22692] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1100.271092][T22692] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1100.316670][T22692] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1100.350345][T22692] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1100.362784][T22692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1100.378707][T22692] usb 4-1: Product: syz [ 1100.393080][T22692] usb 4-1: Manufacturer: syz [ 1100.397015][T22694] usb 1-1: config 0 has an invalid interface number: 13 but max is 0 [ 1100.405457][T22692] usb 4-1: SerialNumber: syz [ 1100.410038][T22694] usb 1-1: config 0 has no interface number 0 [ 1100.421239][T22692] usb 4-1: config 0 descriptor?? [ 1100.436850][T22694] usb 1-1: config 0 interface 13 has no altsetting 0 [ 1100.464832][T22694] usb 1-1: Dual-Role OTG device on HNP port [ 1100.475172][T22694] usb 1-1: New USB device found, idVendor=17cc, idProduct=1940, bcdDevice=1e.7a [ 1100.500145][T22694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.520283][T22694] usb 1-1: Product: syz [ 1100.533511][T22694] usb 1-1: Manufacturer: syz [ 1100.546321][T22694] usb 1-1: SerialNumber: syz [ 1100.568405][T22694] usb 1-1: config 0 descriptor?? [ 1100.664791][T22692] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1100.705948][T22692] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 1100.807441][T22694] snd-usb-caiaq 1-1:0.13: can't set alt interface. [ 1100.824218][T22694] usb 1-1: unable to init card! (ret=-5) [ 1100.842762][T22694] snd-usb-caiaq 1-1:0.13: probe with driver snd-usb-caiaq failed with error -5 [ 1100.872094][T25504] netlink: 'syz.4.5130': attribute type 44 has an invalid length. [ 1100.873333][T22694] usb 1-1: USB disconnect, device number 90 [ 1100.884306][T25507] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5131'. [ 1100.983375][T25512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.011076][T25512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.617215][T25530] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 1101.625538][T25530] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 1101.721704][T25535] netlink: 'syz.0.5139': attribute type 10 has an invalid length. [ 1101.730714][T25535] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5139'. [ 1101.917679][ T29] audit: type=1326 audit(1775556156.811:8118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25538 comm="syz.4.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7434f9c819 code=0x7ffc0000 [ 1102.015643][ T29] audit: type=1326 audit(1775556156.811:8119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25538 comm="syz.4.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7434f9c819 code=0x7ffc0000 [ 1102.040572][ T29] audit: type=1326 audit(1775556156.811:8120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25538 comm="syz.4.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7434f9c819 code=0x7ffc0000 [ 1102.076309][ T29] audit: type=1326 audit(1775556156.811:8121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25538 comm="syz.4.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f7434f9c819 code=0x7ffc0000 [ 1102.169058][ T29] audit: type=1326 audit(1775556156.811:8122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25538 comm="syz.4.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7434f9c819 code=0x7ffc0000 [ 1102.237400][ T29] audit: type=1326 audit(1775556156.811:8123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25538 comm="syz.4.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7434f9c819 code=0x7ffc0000 [ 1102.443340][ T29] audit: type=1326 audit(1775556156.811:8124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25538 comm="syz.4.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7434f9c819 code=0x7ffc0000 [ 1102.504712][ T29] audit: type=1326 audit(1775556156.811:8125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25538 comm="syz.4.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7434f9c819 code=0x7ffc0000 [ 1102.530898][ T29] audit: type=1326 audit(1775556156.811:8126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25538 comm="syz.4.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7434f9c819 code=0x7ffc0000 [ 1102.573431][ T29] audit: type=1326 audit(1775556156.811:8127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25538 comm="syz.4.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7434f9c819 code=0x7ffc0000 [ 1102.859022][T22702] usb 4-1: USB disconnect, device number 102 [ 1102.915850][T22694] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 1102.955336][T25553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.967686][T25553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.991125][T25553] syzkaller1: entered promiscuous mode [ 1102.998823][T25553] syzkaller1: entered allmulticast mode [ 1103.007623][T25557] netlink: 'syz.6.5146': attribute type 9 has an invalid length. [ 1103.077838][T22694] usb 1-1: not running at top speed; connect to a high speed hub [ 1103.086879][T22694] usb 1-1: config 7 has an invalid interface number: 116 but max is 0 [ 1103.095136][T22694] usb 1-1: config 7 has no interface number 0 [ 1103.106824][T22694] usb 1-1: config 7 interface 116 has no altsetting 0 [ 1103.116419][T22694] usb 1-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=ca.2d [ 1103.125954][T22694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.134087][T22694] usb 1-1: Product: syz [ 1103.144489][T22694] usb 1-1: Manufacturer: syz [ 1103.152575][T22694] usb 1-1: SerialNumber: syz [ 1103.384172][T25548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.394012][T25548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.428389][T22694] usb-storage 1-1:7.116: USB Mass Storage device detected [ 1103.502254][T22694] usb 1-1: USB disconnect, device number 91 [ 1103.889657][T25574] loop2: detected capacity change from 0 to 7 [ 1103.915561][T22694] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1103.921526][T25574] Dev loop2: unable to read RDB block 7 [ 1103.966623][T25574] loop2: unable to read partition table [ 1103.985737][T25574] loop2: partition table beyond EOD, truncated [ 1104.016962][T25574] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1104.113935][T22694] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 1104.133686][T22694] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.165671][T22694] usb 1-1: config 0 has no interface number 0 [ 1104.235534][T22694] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1104.289592][T22694] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1104.450109][T25595] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5152'. [ 1104.932510][T22694] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1104.942121][T22694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.960094][T22694] usb 1-1: Product: syz [ 1105.122336][T22694] usb 1-1: Manufacturer: syz [ 1105.129181][T22694] usb 1-1: SerialNumber: syz [ 1105.142587][T22694] usb 1-1: config 0 descriptor?? [ 1105.182161][T25602] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5154'. [ 1105.731200][T25622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.765792][ T9] IPVS: starting estimator thread 0... [ 1105.782001][T25611] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1105.866880][T25622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.885609][T25623] IPVS: using max 60 ests per chain, 144000 per kthread [ 1105.945361][ T5903] usb 1-1: USB disconnect, device number 92 [ 1106.175753][ T9] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1106.260324][T25630] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5160'. [ 1106.277490][T25630] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode [ 1106.349449][ T9] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1106.475263][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.533494][ T9] usb 4-1: Product: syz [ 1106.556359][ T9] usb 4-1: Manufacturer: syz [ 1106.567409][ T9] usb 4-1: SerialNumber: syz [ 1106.584469][ T9] usb 4-1: config 0 descriptor?? [ 1106.595566][T22702] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1106.719932][T12848] IPVS: stop unused estimator thread 0... [ 1106.747274][T22702] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1106.756638][T22702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.780188][T22702] usb 1-1: config 0 descriptor?? [ 1107.013608][ T9] usb 4-1: Firmware: major: 2, minor: 0, hardware type: ATUSB (0) [ 1107.222071][ T9] usb 4-1: no permanent extended address found, random address set [ 1107.462328][ T9] usb 4-1: USB disconnect, device number 103 [ 1108.177768][T25649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.234650][T25649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.265566][T25650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.293578][T25650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.365623][T25650] dtv5100: wlen = 0, aborting. [ 1108.370594][T25649] dtv5100: wlen = 0, aborting. [ 1108.391574][T25649] ipvlan0: entered promiscuous mode [ 1108.400073][T25649] ipvlan0: entered allmulticast mode [ 1108.405387][T25649] veth0_vlan: entered allmulticast mode [ 1108.419448][T25649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.430219][T25649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.442442][T25650] binder: 25648:25650 ioctl c018620c 200000000000 returned -1 [ 1109.443560][T22702] usb 1-1: Cannot set autoneg [ 1109.451225][T22702] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1109.476187][T22702] usb 1-1: USB disconnect, device number 93 [ 1109.627102][T25678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5173'. [ 1109.698989][T25683] netlink: 16158 bytes leftover after parsing attributes in process `syz.3.5174'. [ 1110.129905][T25696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1110.140393][T25696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1110.242625][T25698] fuse: Unknown parameter '' [ 1111.115502][ T9] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1111.265528][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1111.272704][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.283970][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1111.334375][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1111.349082][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1111.361299][ T9] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1111.430515][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.464296][ T9] hub 1-1:1.0: bad descriptor, ignoring hub [ 1111.522014][ T9] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1111.538482][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 1111.551191][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 1111.564800][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1111.584647][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 1111.661088][T25709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.670143][T25709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.949439][ T9] usb 1-1: reset high-speed USB device number 94 using dummy_hcd [ 1111.959872][ T9] usb 1-1: device reset changed ep0 maxpacket size! [ 1111.969855][ T9] usb 1-1: USB disconnect, device number 94 [ 1112.005695][ T5903] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1112.116429][ T9] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1112.165656][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 1112.173176][ T5903] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1112.185707][ T5903] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1112.196432][ T5903] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1112.206718][ T5903] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1112.217182][ T5903] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1112.231048][ T5903] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1112.240928][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.264484][ T5903] usbtmc 4-1:16.0: bulk endpoints not found [ 1112.285560][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1112.297089][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1112.310576][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1112.322198][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 36816, setting to 1024 [ 1112.334296][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1112.347498][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12161, setting to 1024 [ 1112.359232][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1112.372242][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1112.381717][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.390020][ T9] usb 1-1: Product: syz [ 1112.394481][ T9] usb 1-1: Manufacturer: syz [ 1112.399446][ T9] usb 1-1: SerialNumber: syz [ 1112.415082][ T9] usb 1-1: config 0 descriptor?? [ 1112.449192][ C0] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 1112.457206][ T9] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 1112.457319][ C0] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 1112.468493][T22694] usb 4-1: USB disconnect, device number 104 [ 1112.622935][ C0] mcba_usb 1-1:0.0 can0: Unsupported msg (0x22) [ 1112.824727][ T5903] usb 1-1: USB disconnect, device number 95 [ 1112.842010][ T5903] mcba_usb 1-1:0.0 can0: device disconnected [ 1112.985529][ T9] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 1113.211088][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 1113.222074][ T9] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1113.235803][ T9] usb 4-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1113.249079][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1113.260878][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice= 0.40 [ 1113.276330][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.290895][ T9] usb 4-1: Product: syz [ 1113.301394][ T9] usb 4-1: Manufacturer: syz [ 1113.311660][ T9] usb 4-1: SerialNumber: syz [ 1113.358223][T25726] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1113.368693][T25726] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1114.172238][T25766] vti0: entered promiscuous mode [ 1114.177561][T25766] vti0: entered allmulticast mode [ 1114.816951][ T9] usbhid 4-1:1.0: can't add hid device: -71 [ 1114.824648][T25777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5191'. [ 1114.838423][ T9] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1114.968627][ T9] usb 4-1: USB disconnect, device number 105 [ 1115.789541][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.796374][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.161800][T22694] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 1116.195799][T22694] hid-generic 0000:0000:0000.0048: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1116.216907][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1116.216923][ T29] audit: type=1326 audit(1775556171.101:8138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25795 comm="syz.0.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894919c819 code=0x7ffc0000 [ 1116.271072][T25798] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1116.299384][ T29] audit: type=1326 audit(1775556171.101:8139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25795 comm="syz.0.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894919c819 code=0x7ffc0000 [ 1116.322439][ T29] audit: type=1326 audit(1775556171.101:8140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25795 comm="syz.0.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894919c819 code=0x7ffc0000 [ 1116.420148][ T29] audit: type=1326 audit(1775556171.101:8141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25795 comm="syz.0.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f894919c819 code=0x7ffc0000 [ 1116.474550][ T29] audit: type=1326 audit(1775556171.101:8142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25795 comm="syz.0.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894919c819 code=0x7ffc0000 [ 1116.555057][ T29] audit: type=1326 audit(1775556171.101:8143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25795 comm="syz.0.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894919c819 code=0x7ffc0000 [ 1116.606006][ T29] audit: type=1326 audit(1775556171.101:8144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25795 comm="syz.0.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894919c819 code=0x7ffc0000 [ 1116.716612][ T29] audit: type=1326 audit(1775556171.101:8145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25795 comm="syz.0.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f894919c819 code=0x7ffc0000 [ 1116.775615][ T29] audit: type=1326 audit(1775556171.101:8146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25795 comm="syz.0.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894919c819 code=0x7ffc0000 [ 1116.811178][ T29] audit: type=1326 audit(1775556171.101:8147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25795 comm="syz.0.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894919c819 code=0x7ffc0000 [ 1117.007949][T25814] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 1117.019262][T25814] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 1117.030272][T25814] netdevsim netdevsim7: Falling back to sysfs fallback for: ./file0 [ 1117.095523][T22692] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1117.115596][T22694] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1117.245580][T22694] usb 4-1: device descriptor read/64, error -71 [ 1117.245597][T22692] usb 1-1: Using ep0 maxpacket: 32 [ 1117.260066][T22692] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1117.270320][T22692] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1117.280161][T22692] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1117.289524][T22692] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1117.299107][T22692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.307186][T22692] usb 1-1: Product: syz [ 1117.311486][T22692] usb 1-1: Manufacturer: syz [ 1117.316183][T22692] usb 1-1: SerialNumber: syz [ 1117.322854][T22692] usb 1-1: config 0 descriptor?? [ 1117.495593][T22694] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1117.625736][T22694] usb 4-1: device descriptor read/64, error -71 [ 1117.735776][T22694] usb usb4-port1: attempt power cycle [ 1117.742431][T22692] gs_usb 1-1:0.0: Couldn't get device config: (err=-121) [ 1117.755854][T22692] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 1118.075552][T22694] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1118.098633][T22694] usb 4-1: device descriptor read/8, error -71 [ 1118.337001][T22694] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1118.355959][T22694] usb 4-1: device descriptor read/8, error -71 [ 1118.465763][T22694] usb usb4-port1: unable to enumerate USB device [ 1119.331111][T22694] usb 1-1: USB disconnect, device number 96 [ 1121.375531][T22694] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1121.375729][T22692] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1121.536731][T22694] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1121.545188][T22694] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1121.555497][T22692] usb 1-1: Using ep0 maxpacket: 16 [ 1121.562183][T22692] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1121.571166][T22692] usb 1-1: config 1 has an invalid interface number: 151 but max is 0 [ 1121.580307][T22692] usb 1-1: config 1 has no interface number 0 [ 1121.590415][T22694] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.605470][T22692] usb 1-1: config 1 interface 151 has no altsetting 0 [ 1121.625769][T22692] usb 1-1: string descriptor 0 read error: -22 [ 1121.632603][T22692] usb 1-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 1121.635524][T22694] usb 4-1: config 220 has no interface number 2 [ 1121.665674][T22694] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1121.699824][T22694] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1121.713631][T22692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.718712][T22694] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1121.734767][T22694] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1121.748905][T22694] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1121.759655][T22694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.805543][T22694] usb 4-1: Product: syz [ 1121.809920][T22694] usb 4-1: Manufacturer: syz [ 1121.810067][T22692] gspca_main: pac7311-2.14.0 probing 093a:260e [ 1121.814515][T22694] usb 4-1: SerialNumber: syz [ 1121.879132][T25861] tipc: Enabling of bearer rejected, failed to enable media [ 1122.053296][T22694] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1122.061181][T22694] uvcvideo 4-1:220.0: No valid video chain found. [ 1122.071076][T22694] usb 4-1: selecting invalid altsetting 0 [ 1122.084181][T22694] usb 4-1: selecting invalid altsetting 0 [ 1122.094716][T22694] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1122.127570][T22694] usb 4-1: USB disconnect, device number 110 [ 1122.252078][T22692] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 1122.270383][T22692] pac7311 1-1:1.151: probe with driver pac7311 failed with error -71 [ 1122.301938][T22692] usb 1-1: USB disconnect, device number 97 [ 1123.024045][T22702] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1123.086422][T22692] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1123.175591][T22702] usb 4-1: Using ep0 maxpacket: 32 [ 1123.193517][T22702] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1123.219353][T22702] usb 4-1: config 0 has no interface number 0 [ 1123.230136][T22702] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1123.245550][T22702] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1123.258195][T22692] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.269388][T22692] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1123.280298][T22702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.281981][T22692] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1123.298607][T22692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.300108][T22702] usb 4-1: Product: syz [ 1123.306955][T22692] usb 1-1: Product: syz [ 1123.315080][T22702] usb 4-1: Manufacturer: syz [ 1123.315225][T22692] usb 1-1: Manufacturer: syz [ 1123.359027][T22692] usb 1-1: SerialNumber: syz [ 1123.364522][T22702] usb 4-1: SerialNumber: syz [ 1123.373131][T22702] usb 4-1: config 0 descriptor?? [ 1123.387024][T22692] cdc_mbim 1-1:1.0: skipping garbage [ 1123.586108][T25876] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1124.005005][T22702] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1124.016203][T22702] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1124.202714][T22692] cdc_mbim 1-1:1.0: bind() failure [ 1124.214916][T22692] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1124.231038][T22692] cdc_ncm 1-1:1.1: bind() failure [ 1124.258303][T22692] usb 1-1: USB disconnect, device number 98 [ 1124.517950][T25902] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5226'. [ 1124.518285][T25903] loop9: detected capacity change from 0 to 524287936 [ 1125.042368][T25874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.054937][T25874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.070280][T25874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.082530][T25874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.094057][T25923] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5232'. [ 1125.125930][T25923] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5232'. [ 1126.288092][T22702] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000304: -71 [ 1126.299989][T22702] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX+4: -71 [ 1126.333609][T22702] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 1126.358808][T22702] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1126.382465][T22702] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1126.410810][ T29] kauditd_printk_skb: 970 callbacks suppressed [ 1126.410821][ T29] audit: type=1804 audit(1775556181.301:9118): pid=25945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5238" name="/newroot/490/file1" dev="tmpfs" ino=2574 res=1 errno=0 [ 1126.423438][T22702] usb 4-1: USB disconnect, device number 111 [ 1126.718490][T25954] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5240'. [ 1127.163128][T25955] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5241'. [ 1127.198400][T25958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5240'. [ 1128.235221][T25974] netlink: 'syz.0.5243': attribute type 1 has an invalid length. [ 1128.344718][T25974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1128.367884][T25976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5246'. [ 1129.005532][T22692] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1129.557268][T22692] usb 4-1: Using ep0 maxpacket: 16 [ 1129.693034][T22692] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1129.705464][T22692] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1129.751416][T22692] usb 4-1: Product: syz [ 1129.759069][T22692] usb 4-1: Manufacturer: syz [ 1129.767942][T22692] usb 4-1: SerialNumber: syz [ 1129.914152][T22692] usb 4-1: config 0 descriptor?? [ 1130.619591][T22703] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1130.797474][T22703] usb 1-1: Using ep0 maxpacket: 8 [ 1130.807766][T22703] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1130.819590][T22703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.829038][T22703] usb 1-1: Product: syz [ 1130.833756][T22703] usb 1-1: Manufacturer: syz [ 1130.839797][T22703] usb 1-1: SerialNumber: syz [ 1131.108965][T26006] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5252'. [ 1131.228843][T22689] hid-generic 0008:0091:0009.0049: reserved main item tag 0xd [ 1131.240507][T22689] hid-generic 0008:0091:0009.0049: item fetching failed at offset 28/32 [ 1131.366643][T22689] hid-generic 0008:0091:0009.0049: probe with driver hid-generic failed with error -22 [ 1131.563819][T22692] usb 4-1: USB disconnect, device number 112 [ 1131.662927][T22703] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 1131.670207][T22703] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1131.699828][T22703] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1131.722837][T22703] usb 1-1: clock source 0 is not valid, cannot use [ 1131.783911][T22703] usb 1-1: 2:1: cannot get freq (v2/v3): err -71 [ 1131.832198][T22703] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1131.960864][T22703] usb 1-1: USB disconnect, device number 99 [ 1132.053263][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1132.366481][T26032] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1132.372114][T26032] dvmrp1: linktype set to 769 [ 1132.905745][T22703] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1133.075492][T22703] usb 4-1: Using ep0 maxpacket: 32 [ 1133.084447][T22703] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1133.094778][T22703] usb 4-1: config 0 has no interface number 0 [ 1133.101691][T22703] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1133.130076][T22703] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1133.143025][T22703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.165542][T22703] usb 4-1: Product: syz [ 1133.181832][T22703] usb 4-1: Manufacturer: syz [ 1133.196272][T22703] usb 4-1: SerialNumber: syz [ 1133.208854][T22703] usb 4-1: config 0 descriptor?? [ 1133.230140][T22703] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1133.243871][T22703] em28xx 4-1:0.132: Video interface 132 found: [ 1133.305605][T26053] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode [ 1133.367463][T26053] mac80211_hwsim hwsim35 syzkaller0: left allmulticast mode [ 1133.623517][T22703] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1133.723916][T26059] loop5: detected capacity change from 0 to 4095 [ 1133.761795][T26059] netlink: 45 bytes leftover after parsing attributes in process `syz.0.5266'. [ 1134.033209][T26063] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1134.085516][ T5903] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1134.236461][ T5903] usb 1-1: Using ep0 maxpacket: 16 [ 1134.247863][ T5903] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1134.255681][T22703] em28xx 4-1:0.132: failed to read eeprom (err=-110) [ 1134.266149][T22703] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1134.280222][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1134.300240][ T5903] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1134.309644][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.317742][ T5903] usb 1-1: Product: syz [ 1134.322032][ T5903] usb 1-1: Manufacturer: syz [ 1134.328750][ T5903] usb 1-1: SerialNumber: syz [ 1134.336237][ T5903] usb 1-1: config 0 descriptor?? [ 1134.393608][T26079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.476767][T26079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.507562][T26037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.512725][ T5903] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1134.526795][T26037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.528221][ T5903] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1134.651589][T22703] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1134.660702][T22703] em28xx 4-1:0.132: analog set to bulk mode. [ 1134.666848][ T5910] em28xx 4-1:0.132: Registering V4L2 extension [ 1134.867896][ T5910] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1134.882129][T22703] usb 4-1: USB disconnect, device number 113 [ 1134.888808][ T5910] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1134.900191][T22703] em28xx 4-1:0.132: Disconnecting em28xx [ 1135.025285][ T5903] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1135.050951][ T5903] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1135.195524][ T5910] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1135.202707][ T5910] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1135.209970][ T5910] em28xx 4-1:0.132: No AC97 audio processor [ 1135.251787][ T5910] usb 4-1: Decoder not found [ 1135.270327][ T5910] em28xx 4-1:0.132: failed to create media graph [ 1135.286228][ T5910] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1135.298146][ T5910] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1135.325593][T22703] em28xx 4-1:0.132: Closing input extension [ 1135.369217][T22703] em28xx 4-1:0.132: Freeing device [ 1135.682600][ T5903] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 1136.306021][T22692] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1136.476073][T22692] usb 4-1: Using ep0 maxpacket: 16 [ 1136.483700][T22692] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 1136.515611][T22692] usb 4-1: string descriptor 0 read error: -71 [ 1136.521902][T22692] usb 4-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 1136.539442][T22692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.553626][ T5903] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1136.561343][ T5903] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1136.574557][ T5903] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1136.595586][T22692] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1136.602967][ T5903] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1136.616027][T22692] r8152-cfgselector 4-1: rejected 8 configurations due to insufficient available bus power [ 1136.636510][ T5903] usb 1-1: USB disconnect, device number 100 [ 1136.648801][T22692] r8152-cfgselector 4-1: no configuration chosen from 8 choices [ 1136.688906][T22692] r8152-cfgselector 4-1: USB disconnect, device number 114 [ 1137.247488][T26119] fuse: Bad value for 'rootmode' [ 1137.376053][T26121] kvm: kvm [26120]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x2 [ 1137.575495][T22692] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 1137.705557][T22692] usb 1-1: device descriptor read/64, error -71 [ 1137.835523][T22694] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1137.917751][T26141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.959339][T26141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.075488][T22692] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1138.107728][T26141] syz_tun: entered promiscuous mode [ 1138.118477][T26141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1138.138105][T22694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1138.191778][T22694] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1138.236905][T22694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.264193][T26141] 8021q: adding VLAN 0 to HW filter on device team0 [ 1138.283006][T22694] usb 4-1: config 0 descriptor?? [ 1138.315070][T26133] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1138.325491][T22692] usb 1-1: device descriptor read/64, error -71 [ 1138.376928][T26141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1138.445797][T22692] usb usb1-port1: attempt power cycle [ 1138.763116][T22694] asus 0003:0B05:1ABE.004A: unknown main item tag 0x0 [ 1138.774904][T22694] asus 0003:0B05:1ABE.004A: unknown main item tag 0x0 [ 1138.785498][T22692] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 1138.798753][T22694] asus 0003:0B05:1ABE.004A: unknown main item tag 0x0 [ 1138.818324][T22694] asus 0003:0B05:1ABE.004A: unknown main item tag 0x0 [ 1138.821823][T22692] usb 1-1: device descriptor read/8, error -71 [ 1138.825131][T22694] asus 0003:0B05:1ABE.004A: unknown main item tag 0x0 [ 1138.862584][T22694] asus 0003:0B05:1ABE.004A: unknown main item tag 0x0 [ 1138.874965][T22694] asus 0003:0B05:1ABE.004A: unknown main item tag 0x0 [ 1138.888373][T22694] asus 0003:0B05:1ABE.004A: unknown main item tag 0x0 [ 1138.901439][T22694] asus 0003:0B05:1ABE.004A: unknown main item tag 0x0 [ 1138.914810][T22694] asus 0003:0B05:1ABE.004A: unknown main item tag 0x0 [ 1138.953649][T22694] asus 0003:0B05:1ABE.004A: unbalanced collection at end of report description [ 1138.974742][T22694] asus 0003:0B05:1ABE.004A: Asus hid parse failed: -22 [ 1138.998265][T22694] asus 0003:0B05:1ABE.004A: probe with driver asus failed with error -22 [ 1139.023481][T22694] usb 4-1: USB disconnect, device number 115 [ 1139.075591][T22692] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 1139.109352][T22692] usb 1-1: device descriptor read/8, error -71 [ 1139.226401][T22692] usb usb1-port1: unable to enumerate USB device [ 1140.815641][T22689] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1140.990662][T26174] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5300'. [ 1141.027421][T22689] usb 1-1: config 0 has no interfaces? [ 1141.033442][T22689] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1141.039225][T26174] bridge1: port 1(geneve2) entered blocking state [ 1141.095651][T26174] bridge1: port 1(geneve2) entered disabled state [ 1141.181696][T26174] geneve2: entered allmulticast mode [ 1141.190809][T22689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.192122][T26174] geneve2: entered promiscuous mode [ 1141.257130][T22689] usb 1-1: config 0 descriptor?? [ 1141.511652][T26182] loop3: detected capacity change from 0 to 7 [ 1141.522656][T26182] Dev loop3: unable to read RDB block 7 [ 1141.528385][T26182] loop3: unable to read partition table [ 1141.536326][T26182] loop3: partition table beyond EOD, truncated [ 1141.564800][T26182] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1141.588866][T22689] usb 1-1: USB disconnect, device number 105 [ 1141.610524][T26193] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5302'. [ 1141.785347][T26193] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1141.945649][T22689] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1142.118574][T22689] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1142.129118][T22689] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1142.160432][T22689] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1142.209055][T22689] usb 1-1: string descriptor 0 read error: -22 [ 1142.219462][T22689] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1142.242447][T22689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.479849][T26202] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5306'. [ 1142.489087][T26202] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5306'. [ 1142.499517][T22689] usb 1-1: Can't get UAC3 power state for id 10 [ 1142.526119][T22689] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 1142.535471][T26205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5306'. [ 1142.589836][T22689] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1142.659501][T26210] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1142.877799][T22689] usb 1-1: USB disconnect, device number 106 [ 1143.500186][T22689] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1143.665867][T22689] usb 1-1: Using ep0 maxpacket: 16 [ 1143.682526][T22689] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1143.714735][T22689] usb 1-1: New USB device found, idVendor=0582, idProduct=004d, bcdDevice= 0.40 [ 1143.728295][T22689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.741801][T22689] usb 1-1: Product: syz [ 1143.750494][T22689] usb 1-1: Manufacturer: syz [ 1143.771190][T22689] usb 1-1: SerialNumber: syz [ 1143.991181][T22689] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1144.116451][T22689] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1144.153090][T22689] usb 1-1: USB disconnect, device number 107 [ 1144.214055][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1144.283460][T26237] netlink: 'syz.3.5317': attribute type 21 has an invalid length. [ 1144.315830][T26237] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5317'. [ 1144.320972][T26238] netlink: 'syz.3.5317': attribute type 21 has an invalid length. [ 1144.356033][T26238] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5317'. [ 1144.365851][T26237] netlink: 'syz.3.5317': attribute type 4 has an invalid length. [ 1144.398583][T26237] netlink: 'syz.3.5317': attribute type 5 has an invalid length. [ 1144.419843][T26237] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5317'. [ 1144.432308][T26238] netlink: 'syz.3.5317': attribute type 4 has an invalid length. [ 1144.445067][T26238] netlink: 'syz.3.5317': attribute type 5 has an invalid length. [ 1144.456491][T26238] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5317'. [ 1144.710709][T26247] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1144.722508][T26247] syzkaller0: entered promiscuous mode [ 1144.728096][T26247] syzkaller0: entered allmulticast mode [ 1144.737404][T26247] tipc: Enabled bearer , priority 0 [ 1144.765735][T26244] tipc: Resetting bearer [ 1144.787404][T26251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5321'. [ 1144.812314][T26244] tipc: Disabling bearer [ 1144.861359][T26251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1144.906791][T26251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1145.005157][T26255] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 1145.011703][T26255] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1145.073774][T26255] vhci_hcd vhci_hcd.0: Device attached [ 1145.335679][ T5903] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 1146.132251][T26258] vhci_hcd: connection reset by peer [ 1146.154728][T23983] vhci_hcd vhci_hcd.7: stop threads [ 1146.163024][T23983] vhci_hcd vhci_hcd.7: release socket [ 1146.191247][T23983] vhci_hcd vhci_hcd.7: disconnect device [ 1146.300725][T26279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.309535][T26279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1147.115608][T22702] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 1147.266800][T22702] usb 4-1: not running at top speed; connect to a high speed hub [ 1147.276384][T22702] usb 4-1: config 11 has an invalid interface number: 95 but max is 0 [ 1147.284776][T22702] usb 4-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.300697][T22702] usb 4-1: config 11 has no interface number 0 [ 1147.315483][T22702] usb 4-1: config 11 interface 95 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1147.331505][T22702] usb 4-1: config 11 interface 95 altsetting 64 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1147.342258][T22702] usb 4-1: config 11 interface 95 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1147.526400][T22702] usb 4-1: config 11 interface 95 has no altsetting 0 [ 1147.534893][T22702] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 1147.548142][T22702] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 1147.556367][T22702] usb 4-1: Manufacturer: syz [ 1147.587157][T26298] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1147.829518][T22702] usb 4-1: USB disconnect, device number 116 [ 1148.182951][T26311] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1148.230540][T22702] IPVS: starting estimator thread 0... [ 1148.395827][T26315] IPVS: using max 36 ests per chain, 86400 per kthread [ 1148.746493][T22702] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 1148.928260][T22702] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1148.937195][T22702] usb 4-1: not running at top speed; connect to a high speed hub [ 1148.963116][T22702] usb 4-1: config 9 has an invalid interface number: 108 but max is 0 [ 1149.001674][T22702] usb 4-1: config 9 has no interface number 0 [ 1149.044920][T22702] usb 4-1: New USB device found, idVendor=ffff, idProduct=7fff, bcdDevice= 0.00 [ 1149.062806][T22702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1149.081827][T22702] usb 4-1: SerialNumber: syz [ 1149.204363][T23981] IPVS: stop unused estimator thread 0... [ 1149.376107][T22703] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1149.402780][T22702] usb 4-1: USB disconnect, device number 117 [ 1149.558224][T22703] usb 1-1: config 160 has an invalid descriptor of length 73, skipping remainder of the config [ 1149.573925][T22703] usb 1-1: config 160 has 0 interfaces, different from the descriptor's value: 1 [ 1149.636693][T22703] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 1149.636723][T22703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.636752][T22703] usb 1-1: Product: syz [ 1149.636767][T22703] usb 1-1: Manufacturer: syz [ 1149.636778][T22703] usb 1-1: SerialNumber: syz [ 1149.862339][T22703] usb 1-1: USB disconnect, device number 108 [ 1150.034025][T26334] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5336'. [ 1150.399802][ T29] audit: type=1326 audit(1775556205.291:9119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26345 comm="syz.7.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6519c819 code=0x7ffc0000 [ 1150.498510][ T5903] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1150.515128][ T29] audit: type=1326 audit(1775556205.291:9120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26345 comm="syz.7.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0d6519c819 code=0x7ffc0000 [ 1150.591756][ T29] audit: type=1326 audit(1775556205.291:9121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26345 comm="syz.7.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6519c819 code=0x7ffc0000 [ 1150.652301][T26351] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1150.681579][ T29] audit: type=1326 audit(1775556205.291:9122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26345 comm="syz.7.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6519c819 code=0x7ffc0000 [ 1150.707763][T26357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5344'. [ 1150.747697][ T29] audit: type=1326 audit(1775556205.321:9123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26345 comm="syz.7.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0d6519c819 code=0x7ffc0000 [ 1150.792457][ T29] audit: type=1326 audit(1775556205.321:9124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26345 comm="syz.7.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6519c819 code=0x7ffc0000 [ 1150.854674][ T29] audit: type=1326 audit(1775556205.321:9125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26345 comm="syz.7.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0d6519c819 code=0x7ffc0000 [ 1150.900021][T26357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5344'. [ 1150.941283][ T29] audit: type=1326 audit(1775556205.321:9126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26345 comm="syz.7.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6519c819 code=0x7ffc0000 [ 1151.149102][ T29] audit: type=1326 audit(1775556205.321:9127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26345 comm="syz.7.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6519c819 code=0x7ffc0000 [ 1151.844780][T22690] IPVS: starting estimator thread 0... [ 1151.975887][T26373] IPVS: using max 60 ests per chain, 144000 per kthread [ 1152.077614][T26379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1152.087127][T26379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1152.265901][T26381] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5351'. [ 1152.299861][T26381] ip6gre1: entered promiscuous mode [ 1152.320445][T26381] ip6gre1: entered allmulticast mode [ 1152.369451][T26382] macsec2: entered promiscuous mode [ 1152.374765][T26382] macsec2: entered allmulticast mode [ 1152.456560][T26377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1152.469328][T26377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1152.506270][T26377] ------------[ cut here ]------------ [ 1152.511751][T26377] usb 5-1: BOGUS control dir, pipe 80004780 doesn't match bRequestType c0 [ 1152.520355][T26377] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#0: syz.3.5349/26377 [ 1152.530797][T26377] Modules linked in: [ 1152.535270][T26377] CPU: 0 UID: 0 PID: 26377 Comm: syz.3.5349 Tainted: G L syzkaller #0 PREEMPT(full) [ 1152.546549][T26377] Tainted: [L]=SOFTLOCKUP [ 1152.550885][T26377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1152.561029][T26377] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 1152.566719][T26377] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 1152.586566][T26377] RSP: 0018:ffffc9000555f6e8 EFLAGS: 00010246 [ 1152.592653][T26377] RAX: 0000000000000000 RBX: ffff888025b6a600 RCX: 0000000080004780 [ 1152.600675][T26377] RDX: ffff888028eb01c0 RSI: ffffffff8c7f2a00 RDI: ffffffff901f15c0 [ 1152.608686][T26377] RBP: 1ffff11006b43b60 R08: 00000000000000c0 R09: 0000000000000000 [ 1152.616739][T26377] R10: ffffc9000555f7e0 R11: fffff52000aabf08 R12: ffff8880562b9100 [ 1152.624708][T26377] R13: ffff888035a1db00 R14: 0000000080004780 R15: ffff888028eb01c0 [ 1152.632800][T26377] FS: 00007f6de71a36c0(0000) GS:ffff888125454000(0000) knlGS:0000000000000000 [ 1152.640793][T26389] netlink: 'syz.0.5352': attribute type 10 has an invalid length. [ 1152.641789][T26377] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1152.656273][T26377] CR2: 00007f6de71a1fd0 CR3: 0000000062d4c000 CR4: 00000000003526f0 [ 1152.664346][T26377] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1152.672385][T26377] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1152.680601][T26377] Call Trace: [ 1152.683882][T26377] [ 1152.686847][T26377] ? __init_swait_queue_head+0xa9/0x150 [ 1152.692400][T26377] usb_start_wait_urb+0x13f/0x5b0 [ 1152.697474][T26377] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1152.703035][T26377] usb_control_msg+0x234/0x3e0 [ 1152.707905][T26377] dtv5100_i2c_msg+0x231/0x2f0 [ 1152.712732][T26377] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 1152.717644][T26377] __i2c_transfer+0x79a/0x2020 [ 1152.722437][T26377] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1152.728327][T26377] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1152.734146][T26377] ? i2c_transfer+0xc8/0x2d0 [ 1152.738958][T26377] i2c_transfer+0x1cc/0x2d0 [ 1152.743482][T26377] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 1152.749198][T26377] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 1152.755369][T26377] ? _copy_from_user+0x94/0xb0 [ 1152.760191][T26377] i2cdev_write+0x113/0x1e0 [ 1152.764706][T26377] vfs_writev+0x4bd/0x990 [ 1152.769194][T26377] ? __pfx_i2cdev_write+0x10/0x10 [ 1152.774238][T26377] ? __pfx_vfs_writev+0x10/0x10 [ 1152.779164][T26377] ? __fget_files+0x2a/0x420 [ 1152.783785][T26377] ? __fget_files+0x3a0/0x420 [ 1152.788508][T26377] ? __fget_files+0x2a/0x420 [ 1152.793086][T26377] do_writev+0x154/0x2e0 [ 1152.797367][T26377] ? __pfx_do_writev+0x10/0x10 [ 1152.802123][T26377] do_syscall_64+0x14d/0xf80 [ 1152.806745][T26377] ? trace_irq_disable+0x3b/0x150 [ 1152.811776][T26377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.818102][T26377] ? clear_bhb_loop+0x40/0x90 [ 1152.822802][T26377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.828769][T26377] RIP: 0033:0x7f6de639c819 [ 1152.833192][T26377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1152.852814][T26377] RSP: 002b:00007f6de71a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1152.861341][T26377] RAX: ffffffffffffffda RBX: 00007f6de6615fa0 RCX: 00007f6de639c819 [ 1152.869368][T26377] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000005 [ 1152.877423][T26377] RBP: 00007f6de6432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1152.885388][T26377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1152.893411][T26377] R13: 00007f6de6616038 R14: 00007f6de6615fa0 R15: 00007f6de673fa48 [ 1152.901870][T26377] [ 1152.904903][T26377] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1152.912165][T26377] CPU: 0 UID: 0 PID: 26377 Comm: syz.3.5349 Tainted: G L syzkaller #0 PREEMPT(full) [ 1152.923079][T26377] Tainted: [L]=SOFTLOCKUP [ 1152.927384][T26377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1152.937446][T26377] Call Trace: [ 1152.940716][T26377] [ 1152.943638][T26377] vpanic+0x56c/0xa60 [ 1152.947615][T26377] ? __pfx__printk+0x10/0x10 [ 1152.952223][T26377] ? __pfx_vpanic+0x10/0x10 [ 1152.956711][T26377] ? is_bpf_text_address+0x292/0x2b0 [ 1152.961988][T26377] ? is_bpf_text_address+0x26/0x2b0 [ 1152.967194][T26377] panic+0xc5/0xd0 [ 1152.970937][T26377] ? __pfx_panic+0x10/0x10 [ 1152.975390][T26377] __warn+0x315/0x4f0 [ 1152.979381][T26377] ? usb_submit_urb+0x1053/0x18b0 [ 1152.984393][T26377] ? usb_submit_urb+0x1053/0x18b0 [ 1152.989407][T26377] __report_bug+0x29a/0x540 [ 1152.993901][T26377] ? unwind_get_return_address+0x4d/0x90 [ 1152.999527][T26377] ? usb_submit_urb+0x1053/0x18b0 [ 1153.004543][T26377] ? __pfx___report_bug+0x10/0x10 [ 1153.009559][T26377] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1153.015351][T26377] ? lockdep_hardirqs_on+0x7a/0x110 [ 1153.020535][T26377] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1153.026340][T26377] ? stack_depot_save_flags+0x3f3/0x810 [ 1153.031872][T26377] report_bug_entry+0x19a/0x290 [ 1153.036710][T26377] ? usb_submit_urb+0x1115/0x18b0 [ 1153.041717][T26377] ? usb_submit_urb+0x111a/0x18b0 [ 1153.046726][T26377] handle_bug+0xce/0x200 [ 1153.050962][T26377] exc_invalid_op+0x1a/0x50 [ 1153.055454][T26377] asm_exc_invalid_op+0x1a/0x20 [ 1153.060301][T26377] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 1153.065922][T26377] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 1153.085512][T26377] RSP: 0018:ffffc9000555f6e8 EFLAGS: 00010246 [ 1153.091568][T26377] RAX: 0000000000000000 RBX: ffff888025b6a600 RCX: 0000000080004780 [ 1153.099527][T26377] RDX: ffff888028eb01c0 RSI: ffffffff8c7f2a00 RDI: ffffffff901f15c0 [ 1153.107497][T26377] RBP: 1ffff11006b43b60 R08: 00000000000000c0 R09: 0000000000000000 [ 1153.115451][T26377] R10: ffffc9000555f7e0 R11: fffff52000aabf08 R12: ffff8880562b9100 [ 1153.123408][T26377] R13: ffff888035a1db00 R14: 0000000080004780 R15: ffff888028eb01c0 [ 1153.131380][T26377] ? usb_submit_urb+0x10a4/0x18b0 [ 1153.136396][T26377] ? __init_swait_queue_head+0xa9/0x150 [ 1153.141925][T26377] usb_start_wait_urb+0x13f/0x5b0 [ 1153.146942][T26377] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1153.152500][T26377] usb_control_msg+0x234/0x3e0 [ 1153.157257][T26377] dtv5100_i2c_msg+0x231/0x2f0 [ 1153.162019][T26377] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 1153.166858][T26377] __i2c_transfer+0x79a/0x2020 [ 1153.171615][T26377] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1153.177408][T26377] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1153.183201][T26377] ? i2c_transfer+0xc8/0x2d0 [ 1153.187776][T26377] i2c_transfer+0x1cc/0x2d0 [ 1153.192265][T26377] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 1153.197885][T26377] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 1153.204023][T26377] ? _copy_from_user+0x94/0xb0 [ 1153.208775][T26377] i2cdev_write+0x113/0x1e0 [ 1153.213263][T26377] vfs_writev+0x4bd/0x990 [ 1153.217583][T26377] ? __pfx_i2cdev_write+0x10/0x10 [ 1153.222595][T26377] ? __pfx_vfs_writev+0x10/0x10 [ 1153.227445][T26377] ? __fget_files+0x2a/0x420 [ 1153.232018][T26377] ? __fget_files+0x3a0/0x420 [ 1153.236672][T26377] ? __fget_files+0x2a/0x420 [ 1153.241252][T26377] do_writev+0x154/0x2e0 [ 1153.245485][T26377] ? __pfx_do_writev+0x10/0x10 [ 1153.250253][T26377] do_syscall_64+0x14d/0xf80 [ 1153.254829][T26377] ? trace_irq_disable+0x3b/0x150 [ 1153.259832][T26377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.265884][T26377] ? clear_bhb_loop+0x40/0x90 [ 1153.270548][T26377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.276426][T26377] RIP: 0033:0x7f6de639c819 [ 1153.280829][T26377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1153.300417][T26377] RSP: 002b:00007f6de71a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1153.308816][T26377] RAX: ffffffffffffffda RBX: 00007f6de6615fa0 RCX: 00007f6de639c819 [ 1153.316773][T26377] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000005 [ 1153.324724][T26377] RBP: 00007f6de6432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1153.332673][T26377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1153.340625][T26377] R13: 00007f6de6616038 R14: 00007f6de6615fa0 R15: 00007f6de673fa48 [ 1153.348591][T26377] [ 1153.351925][T26377] Kernel Offset: disabled [ 1153.356231][T26377] Rebooting in 86400 seconds..