last executing test programs: 25m31.025678332s ago: executing program 32 (id=983): socket$nl_xfrm(0x10, 0x3, 0x6) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = semget$private(0x0, 0x207, 0xc0) semop(r0, &(0x7f0000000000)=[{0x0, 0x1, 0x1000}], 0x1) semop(0x0, &(0x7f0000000000)=[{0x1, 0x6, 0x1800}], 0x1) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x104, 0x0) epoll_create(0x2) r3 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000003c0)={0x9, {{0xa, 0x0, 0x3, @mcast1}}, {{0xa, 0x2, 0x6, @private1, 0xfffffff8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000300)={0x9, {{0xa, 0x40, 0x3, @mcast2, 0xf3}}}, 0x90) r4 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r5 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x0, 0x338}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x18, 0x6000, @fd=r2, 0x3, 0x0, 0x0, 0x2, 0x1, {0x0, r8}}) io_uring_enter(r5, 0x47ba, 0x98f1, 0x2a, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) 23m52.203878776s ago: executing program 33 (id=1358): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x1, 0x24, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x82}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000040)="020000", 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0000008019000000000001fe00", [0x0, 0x2000000000001]}}) 23m36.451164154s ago: executing program 34 (id=1366): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x8c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_SYNPROXY={0x54, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xd879}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x80000000}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x40ba}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xbc}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x80000001}]}, 0x8c}}, 0x4004000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000240)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) read$FUSE(r8, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x2066012, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffff}}, 0x50) syz_fuse_handle_req(r8, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket(0x10, 0x803, 0x0) fcntl$lock(r10, 0x403, &(0x7f0000000700)) r11 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) ioctl$VIDIOC_S_INPUT(r11, 0xc0045627, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) 22m6.788888404s ago: executing program 4 (id=1676): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=@deltfilter={0x490, 0x2d, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x10, 0xfff1}, {0xffff, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x6f}}, @filter_kind_options=@f_route={{0xa}, {0x450, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xe, 0x3}}, @TCA_ROUTE4_TO={0x8, 0x2, 0x13}, @TCA_ROUTE4_POLICE={0x414, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0xe}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x7, 0x3, 0xf4d7, 0x4, 0x14, 0xb99, 0x1, 0xb89, 0x1, 0x0, 0x3cacf657, 0x1, 0x9, 0x7fffffff, 0x0, 0x5, 0xe813, 0x8, 0x4, 0x3, 0x4, 0x10, 0xd, 0x8, 0x1, 0x88, 0xc, 0x6, 0x80, 0x1, 0x5, 0x6, 0x0, 0x5, 0xcb, 0xffffffff, 0xf, 0x2, 0x100, 0x2, 0x7fff, 0x0, 0x0, 0x6, 0x1, 0x9, 0x7, 0x5, 0x9, 0x1, 0xfffffffb, 0x7fffffff, 0x3ff, 0x100, 0x89, 0x401, 0x3, 0x5000000, 0x78, 0x3, 0xff, 0x88a, 0x3, 0x7, 0x5, 0x3, 0x8ed, 0x6, 0x1, 0x5, 0x7f, 0x1, 0x5, 0x4448, 0xba4, 0x8, 0xfffffffd, 0x5, 0x2, 0x5, 0x2, 0x7, 0x5, 0xffffff80, 0xbce, 0x0, 0x1, 0x2, 0x200, 0x3, 0x1, 0xfffffbec, 0x3, 0x73be, 0x4, 0x9, 0x8, 0x3, 0x200, 0x2, 0x6, 0x6, 0x1, 0x40, 0x5, 0x3, 0x5, 0xfffffffe, 0x2, 0x2, 0x0, 0x400, 0x81, 0x5, 0x5, 0x0, 0xc, 0x7fffffff, 0x4000000, 0xfffffffe, 0x0, 0x8, 0x9, 0xc, 0x7, 0xb, 0x7, 0x8, 0x8, 0x1, 0x10000, 0xffff, 0x40, 0x3ff, 0x855, 0x0, 0x0, 0xab, 0xa12, 0x4, 0x2, 0xc4, 0x3, 0xb4a, 0x7, 0x2, 0x4, 0x2, 0x6, 0x60, 0x4, 0x7, 0x4, 0x6, 0xfffffff9, 0x21, 0x7, 0x5, 0x2, 0x3, 0x8ef, 0xf0, 0x9, 0x3, 0x6, 0x8, 0x1, 0x8, 0x45a, 0x4, 0x200, 0x5, 0x3, 0x1, 0x4, 0x9, 0x9, 0x18, 0x6, 0xfffffffe, 0x6c6, 0x4, 0x5, 0x1, 0x4, 0x3, 0xde, 0xa8, 0xd0de, 0x8, 0x5, 0x1, 0xbfd7, 0xffff0001, 0x1, 0x607, 0xfffffbff, 0x8, 0xff, 0x7, 0x0, 0xa, 0x53b, 0xfffffff9, 0x9, 0x1, 0x4, 0x81, 0x5, 0x80000000, 0xf77, 0x7, 0x1, 0x0, 0x4, 0x7, 0x6, 0x5, 0x1, 0x8, 0x6, 0x7, 0x1, 0x2, 0x81, 0xc, 0x7, 0x3274, 0x8, 0x60000, 0x3ff, 0x3000, 0x2, 0x7, 0x338, 0x3, 0x0, 0x6, 0xa, 0x0, 0x2, 0xfffffffc, 0x2, 0x9, 0x81, 0x9, 0x9, 0x10, 0x10001, 0x5, 0xfffffff4, 0x881, 0x0, 0x7, 0x401]}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xd6}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x5a}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x10, 0xffff}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x9}}]}, 0x490}, 0x1, 0x0, 0x0, 0x10}, 0xc0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='attr/current\x00') exit(0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$UHID_CREATE2(r3, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 22m5.594325432s ago: executing program 4 (id=1678): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2000}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r10, 0x0, r9, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r8, r11, 0x4e, 0x0) write$binfmt_script(r9, &(0x7f0000000800)={'#! ', './file0'}, 0xb) read$FUSE(r4, &(0x7f0000000240)={0x2020}, 0x2020) pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) syz_io_uring_setup(0x2ed3, &(0x7f0000002340)={0x0, 0xbc48, 0x8, 0x2, 0x3b6, 0x0, r1}, &(0x7f00000000c0), &(0x7f0000002300)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 22m4.36464222s ago: executing program 4 (id=1684): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x3, 0x8, 0x2, {0x1, @sliced={0xffff, [0x5, 0xc, 0x2840, 0x4, 0x1, 0x800, 0x3, 0x1, 0x7, 0x1, 0x5, 0x7ff, 0x4, 0x1, 0x6, 0x70b, 0x2, 0x3, 0x5, 0x6, 0xf, 0xc, 0x5, 0x1, 0x4, 0x10, 0x93d, 0x3, 0x5, 0x9, 0x9, 0x0, 0x3, 0x2f24, 0x6, 0x8, 0x3, 0x7b, 0x0, 0x5, 0x2, 0x6, 0x7b, 0xd, 0xa, 0xe0, 0x8, 0xc], 0x7}}, 0x3ff}) gettid() r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4140aecd, &(0x7f00000000c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22m4.105072751s ago: executing program 4 (id=1686): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0xa, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000600)={{0x0, 0x2, 0x0, 0xffffff7f, 'syz0\x00', 0x1}, 0x6, 0x30, 0x40, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000010340)=[{{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000180)}, {&(0x7f0000000400)="9c50850381292a2b0de763d17f1a10544a2b85dd36c68e953b726490bc8eb732c3d06c7c183fd03a4c7a0b08e361120a33b4b65f17abe79cd3dc0e753d45a70520a016bb626e7fc257de001363f96e9a85fbcb0e879984abebbd6aef9ba86d548e2b2f53358ca914f44437a27f0ff4ee66869b0095828babb0df2fa24c69988d94e8c94285e6c4b43baf0bc8cab98a49c35954a911fd2ca2be28d0dc1238893e1ab6265bac966956eb3ea09cca108c2b7bea560823dd780a664bcad37d2672fa3442182011107e9a84d2f06a755b19efa8b5298265e787a446a0062fbdbdd843449ee39e3d9dc4955249c1b0d4bbc7888d3f790b30148c60", 0xf8}, {&(0x7f0000000500)="8931ba453a4bef4a406c18d5aeff9454b72b012abcb74709f8c4f6008acc9f1e42b9c078bc26", 0x26}, {&(0x7f0000000540)}, {&(0x7f0000000f80)="1ca8ebf6e12532cb02ce4593c44295f029a9929844b9f1729ed10320c3c10e0ed27afc30f8a49f82d6ee29230cb25fbcab1392869175b7fb0f042317d0d276d597490a3e972e5087faa649c0a761b8fb8566422b9226eba970a4dccf862d041d18e088a32d073243e23d6417cb8c4f00c68d0b5edfb8ad6568a07e94e5a1b41ee0c867339c88fd4769de392d2e2470c0cc5abbddc2e27e6002099848d895492f522241f921608af7eb09c3430407d3e5464e0c7a9d1b8d1a15825c34554bb10c61ee7c4c9494935b697cb19e397b46d963e00228ba64043da4fc81803ddf281ff16389785ae0fb9c61a4f91b29f3db91fbc0d61ea0aa24", 0xf7}, {&(0x7f0000000580)="be003d87c9695cf2b638cc1651684bab1581d29f835f7ef35f1586a03cbf9c5f97e875c3a71a2ca85b00", 0x2a}], 0x6, &(0x7f0000001180)=[@rights={{0x2c, 0x1, 0x1, [r1, r1, r0, r1, r1, r2, r2]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, r2, r0, 0xffffffffffffffff, r1, r0]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r0, 0xffffffffffffffff, r2, r1, 0xffffffffffffffff, r1]}}], 0xb0, 0x4010}}, {{&(0x7f0000001240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000015c0)=[{&(0x7f00000012c0)="c3dea7f2d80abe1a9b52f285999821cc5c200e50481e6379534ac7339582fcd2f34e715b4e8d6e06790d83dd076a7aa68db131e3fc80a208109d9ee7a57a4f77dbc1271e54997269b9aa6e99855cc7147cd668e9423ed708b31c8f9429a01e056a9f5095a6229ced82cdae8e60d24fcd34d89f96b005f787d814638d84171994818525d9de", 0x85}, {&(0x7f0000001380)="1733d3f4a203563b65abd54ca431985433691fb4fd0ff5903b38948185659862d34f16aa7ff16f2380e78a96abc3aee2619dd7f7c68e0aec85d058eda7d46f9fa8c3a1918aef43910a8c7db394d9e845ef9b4f88cdaf6bbc5147ba6598c7167f9ed6d7dcd0ebb3c651dead46caea2db2a1e05813c2e4ad1473ad8311fa4601f2a872f462e7949c13ae52dc5c4918a186f1481c686c18ed4e66e730e7abfaf2fb0c19c3c7ee75397d2399052bfe3ebba459dbed0cdf224687a66e32d4e6c1a9708eeb259f7d4b2980c5", 0xc9}, {&(0x7f0000001480)="dd74b6b32cc52acd", 0x8}, {&(0x7f00000014c0)="0422309894ee7712c467296e0fe6ed761da08bd6bd26746e813ac1859a1bfa541c5cd22aed828da3fbc33737e0f9df98d9c14e369bd938", 0x37}, {&(0x7f0000001500)="dce4d798316c9eb89e8c6f97a0320e3730da72429126cb7a5334b1ce0d6b42f8a1e787645f1e55480f210317aa2a1c1a7f2ac489e5ea42f1909a15e2a9142343dc0eaea767a545fe4b3f17de760a1d53557664675b6cef5e9f31670d07fa9a5578ebecfc6fa160646a31dfbd", 0x6c}, {&(0x7f0000001580)="ca", 0x1}], 0x6, &(0x7f0000001800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x90, 0xc000}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000018c0)="4fb5841afc0e9a", 0x7}, {&(0x7f0000001900)="92119572dfebf7cfb713b280c97549c56a21ed996cc3e7ee7029138fc50c1c8f657139d6102c2ed453a9fda9ba35b95072bf3331e4e342b494e4a503e7043243007085bfe879d97b7edfcdc60a068f865a79ad3a0e7b9778bfe73cc5f9f406dc18fd8a63ace99101823fac4d6bec4fdd3d513d5e85ebefa4cf48ccf441f3", 0x7e}, {&(0x7f0000001980)="4854f526cf908f55d279501bd7ebaa3eedecd0f064a2b52b27e8598282db2f75e1285eced0e8d7c74ce5e2396cf8a5defe4bd6542bd6", 0x36}], 0x3, &(0x7f0000001a40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98, 0x80}}, {{&(0x7f0000001b00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001b80)="39bf93f5f85e970d231e0c87efb1ca5812928bc4d04d0b61c334c2c9042239ae65262409b5f05929ba738c2b39a3702dcbeb6fa66ecebcbaecae542bb6518a72f4e3dd248bf9bc9acf2116d33bd87a22dd1e213739d77351", 0x58}, {&(0x7f0000001c00)="a0692d39f9668de9e0b8c7afb9743d025f989ccfaf41a2a43984c43e0e6cdc7103d986f0af14e777f94c60ed949b825e496633c677246936e7d5690b77a1dac5c92b5184ff20a3937222ddb42c5f01fcf11d76d5d7b09ba77ad5a29c37208931f7", 0x61}, {&(0x7f0000001c80)="5b0327bae8c4d5a87fd6d09c8739672cafeeea183bc90e46d622fee7dd5b4796763ff2bc6050cc7f7cb57ad31a0f397e9be601370cc780abfa7a5c5e14ece14f321684b77e727d7afa", 0x49}, {&(0x7f0000001d00)="1b3d924c95cff41814ef0f5484969609ead607c4747ce7f2c001d4e5fe3ab190f9bef7f89d813ee3d8330c24f7145b8eaab5b2ec5801349eb2d14bdfca31dd1e0fb9ce992b381ce0e658adcd22bf5e971fe2fba622b74a8c7abf7dae1c925d0914cf45f99cae495d0b462f7953d56583a61b044b4b69448144da1e06e41042ae872ac3137d6cb143460cc86c267b1c84b6a520bed5c2f0128d60cfc13fb87d3a18b25c22abb09d8de81a1fcb0ee186f95932a46bb0acdf6b57d81e5e05400842e7c0c1a6", 0xc4}, {&(0x7f0000001e00)="aa0839835e5c9984c9e17d3634c346f1763ca3c2878779832230437101122466024258213664dda55d86ca4f7461d2a69dc4e6f7ef6a5f695796574dfc1c08147d5369ffb774af56c5b0c7b08537cff7f7851479afb5c411649965a8f0f91d57fc2e970f1c6e", 0x66}, {&(0x7f0000001e80)="fe7838e4d2a8d5f05f86a7d7f3d4a9af743af35803001adecded891f60a7122a27397726d3eacb11d844efbaf141cbe587d0ac53b8b4420f5dc8cadf725054270e3608f45ec2d35312fc9f5833c76190bc4a8c321737d8ebef1397d8f293646d65d9b436076049d5ce40c863", 0x6c}, {&(0x7f0000001f00)="efc08f1f429cf3e4284c65d42035f81a1da445eb5688399a7e46b0c9d83f4ce4e691f60153ad535119ef1c172ccbe2b20b1c6eb171bb0b825ff6692717fadff8cd2f1543ad582c7cd94ba5ae3a29623e4d4d82c77121b6b7d825200d4e9665d9967bfc9f2625fd7a207367822e10f49060e953a0a9ff44c3fd4228127e8e444cdefe17f45f7421e832c0935b50d2b3acee", 0x91}, {&(0x7f000000a100)="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", 0xfb}], 0x8, &(0x7f000000a280)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8, 0x8885}}, {{&(0x7f000000c280)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f000000d400)=[{&(0x7f000000c300)}, {&(0x7f000000d300)="9f0682376170deea497d2ac5d4a72a11c2a04775c01a539cb6cec94f1983b97756a90a5f82eff3ebe743072fe56ee4ce19dd4ad55a819a206537c99f3ebfaf449c89bcbd74670060218c5c55f6a0498833b3ddae8e95386c13ba93164b840a05cf0160babf9bc62362309a847c28bb81", 0x70}, {&(0x7f000000d380)="73db7352d3474c582a076da54eb7b54656ec1edc9b8cacb97e1d089742435b5e98d9c3308a7856e8b2f5233e79da433471d71524dc13bbc13f5763b56f67ac44908b1db567db58795f66a37cdf5967a9ceec85ba909b2c1c09ed680fca4679f7c3f891", 0x63}], 0x3, &(0x7f000000d6c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8, 0x6008010}}, {{&(0x7f000000d780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000fc80)=[{&(0x7f000000d800)="2dfc0af498b81ca126e4f6a06eaafb0b03416f9fc980cc06cf61ef6d46134bc2701c33c2e328ad83977f9cad6398f7d6e9629e1adfed5f25bba9514e6be3ac56306249a6116612ffa7696d32985e2d1866963bf3aee9887d0e1214be974ea6e465e93194a08f4417ced27e6f198b52e10c450cedf20a5e515c63f14bf329e1e449c2cb2aa17e28307e7efe5b5ed76da63da00560d0f8455893ddc7c8ee66e2ade1cc3999007db3c7ffe0fe770ad151b3ffdcd6df9541db743fe44e6b6d4b8f2afbfe3eaf83d9cd76f581b765c49bf390a15f7742", 0xd4}, {&(0x7f000000d900)}, {&(0x7f000000d940)="c52bbabb0b0c70c362394aa05862d0a52a472a2baac72f000f732b91429dbcb8f21cec5b981c16ac60e6d8f6f2ad092866454bf52ba659f2787d5605b3873059cb2dd5853c13c40ff8939eda498afd7ffd1951330e713e8d1d8953cc11f31f6c33ff87dbeaf2c97a98ebb8154227e238eeeadc4215f6981c088906452df55f198980dfbe2d2f5bbabb4f3d492b7d39490e0d92d648be1f1325c16619387d31cdbe8c46ace821bfe3d49fdedff62677f8d4ade8730d62b16be8a27065c897057e73d4bad8ac0dc9b5d29fd29cdb2c4c424b60118b6d3d", 0xd6}, {&(0x7f000000da40)="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", 0x1000}, {&(0x7f000000ea40)="d6be02b0c3845b979071cfd1ec1cbd4178bad11c1ae218d596c90ebca18559817b7caa3c6eb883da92c80264eb48dbb5ae670b01025ee14b8c25b8e9faddb18235c79a0d3893011b9d40f0ea427039e213fefc77831961745b3b9488e4e49324d72768f46f7da31f026242f76ca691858eca0687f8afa2cc2874ac4d0cefb5a3fc86b13a12d42656463041c3cba4d9205043c2b19f66649d00cf5855374b8340cc737f2976a2a40235", 0xa9}, {&(0x7f000000eb00)="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", 0x1000}, {&(0x7f000000fb00)="7a57c6e6af48d7ed5bfdf12318c4c86b12dce9701f4685c68b829dfe0002626e25ea415c2f5cdb07f5a65068664997b87566a08a99ee57db5e7aa74ecb5a2a6cb8bc075f1e55e39b9e5f84034e2d582a6ca64dd60349282ecf556bb6e460b8df11344c34f1ac998f4221d35dbc7a07d1c422e55cf80a4c022e9d0b222813b99c5db04301fc7678d37117e6bcd7b6e567888abfaf11bcfac0dfca557d1a772b9cb7303fdc192a1071339b4fb8d6c5b3998dc335a448ef4811e40a3bea36bd0f8cc808b463ed88dcdfface8a38875996aaa229d42e4b90", 0xd6}, {&(0x7f000000fc00)="2070b5d3ba8e4b32d3a28e7bf43595e9f91d46011ee3d2ccdf114ff05b69ee9a3b26319f25fe63aa34e885456441628c0eaae6449a1e", 0x36}, {&(0x7f000000fc40)="bdd4d2d85c26d07acc6c32cd529e705b19309d94e3c212eac9", 0x19}], 0x9, 0x0, 0x0, 0x44800}}, {{&(0x7f000000fd40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000ff40)=[{&(0x7f000000fdc0)}, {&(0x7f000000fe00)="ec3380d1f1befba10525e0b0cc4cf3c0b2476762c026a0edd5da82aa465c0e6072eadfe88cfba7ac8661058d2e2ac520d86ed82299a38dfd48fa3aa8aed80ac915207d1349edc52aca17b6ea4aca1716452886d43f84fe536eb2ab80f7f50738894b41a95a437f37b76bfe6bd4f2a885817cadb66ca8783acf9f8ab9d50b1029d9890ef3231fa0e0468dfd7afb8c2285d0c1e770fa0c01e2997135f0d3a3844814a72e30a4ec3153975600ef88090d1d727f0dcdcd7a6557da4300c1", 0xbc}, {&(0x7f000000fec0)="3ec9c3e530b97d4e889e475cfdf131347fda", 0x12}, {&(0x7f000000ff00)="2457d346d0dff1bf8ee3e471ef2b1f6ac866c4fd7a6d7f5fa437f86c", 0x1c}], 0x4, &(0x7f00000102c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}}], 0x7, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x10000) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r2, @ANYBLOB, @ANYRESOCT, @ANYRESOCT=r0, @ANYRES8=r3, @ANYRESDEC=r0], 0x48) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES32=r4], 0x0) 22m0.81158326s ago: executing program 4 (id=1703): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32, @ANYBLOB="000000002f95abbe480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000000140007"], 0x70}}, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000200)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x9b, 0x1000, 0x8000, 0x787, 0x1, 0x3, "6b0f596c94e80a4d282df7380a423856f687b16918457cdd15071b044a7a78dce084ac125b491528e7a5c95a50d7c072ea140884c9a7c665983120522fe203f0a4086cad4aab81bd114cea53b957032772006c16c47cf5a76144011cf503d4dbeab92b935ce0f061036435944b82cf68995a9c7722c0a83044e59f087c8158a7887c3b98917651d6b79254a9155b09edb0d86c5f3c87fa22227e12"}}, 0x1b3) 22m0.491806663s ago: executing program 4 (id=1705): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x41) msgrcv(r0, &(0x7f0000000240)={0x0, ""/147}, 0x9b, 0x3, 0x3800) socket$rds(0x15, 0x5, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8ea9, 0xfffd, {0x0, 0x5}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0xb}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) (async) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$inet(r3, &(0x7f0000000580)={0x2, 0x0, @loopback}, 0x0, 0x80000) (async) r4 = socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r6 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r6, &(0x7f0000000200)="a38d", 0x2) pselect6(0x40, &(0x7f0000000600)={0x0, 0x10000000000000}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f00000003c0)=0x2) (async) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) ioctl$EVIOCGBITSND(r2, 0x40044591, 0x0) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r7, @ANYBLOB="4b328b08ce06c7ffb6bd2fffefba4a61bae36b01ab1a13645ebbed591771655c2f1a259072c0ff445e65c816536a7fc957b8a32930358a0dd9e1d8d5d920c270baa0e5cc2b97c4d75178830c7dbcc62aefeca9113ecaed059db423dbc786a985a7e1f4835d92cf4de3a14d735a808aaf2a5785378638dfd5cb02cb28decfa262422c95d26d2f07d44a0d24828b78357a3075c02c94793693728facfcc11af24e900fb647b0dcc2ce7fe40b56ad2122baa57b7b78dee88a870ecfa566d8fb9a5313d55671023e36b8195f42cea6b40e03", @ANYRES32, @ANYRESHEX=r7], 0x124}}, 0x0) 20m49.713558302s ago: executing program 35 (id=1698): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80000) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x2, r3, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x3, 0xd000, 0x2, r3, 0xb}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000001fc0)=ANY=[@ANYBLOB="45000000060000000000000000000000050000000000000003000000000000006b000000000000002f7379732f6b65726e656c2f66656275672f732f96"], 0x45) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)) r5 = fcntl$getown(r4, 0x9) sched_setattr(r5, &(0x7f0000000100)={0xffffffffffffff07, 0x5, 0x0, 0x1, 0x0, 0xb49, 0x9, 0x8, 0x7fffffff, 0x1}, 0x0) r6 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x1c) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f00000004c0)=""/224, 0x0, 0x800, 0xffff23ae, 0x60a217eb1d69cd32}, 0x20) setsockopt$inet6_buf(r6, 0x29, 0x3d, &(0x7f0000000380)="e2300bcd6240dc2c11f710a4cabbdea71f2c9d795fb7d24af5c685103a99b63f3fe7bead2c81f78a7ba06b2a21991d30626826abd958da44e5e223af18568126038e6127297ce677ab25048b42e86053ab34d2c1fc0812458ed0879de884e8f84d8a2ec1c48b7d64e445f723ad9f3231d8e5fc548332acc135b753610cc89f32118935471a48cbe4b7f863e4c90e647b896630da61cf4182c919ca9398a9a2fe3808f5e2c61ad25017abfe935ea303ca45e3", 0xb2) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) 20m49.442597552s ago: executing program 36 (id=1704): socket$inet(0x2, 0x4000000000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 20m49.135521691s ago: executing program 37 (id=1706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x28, 0x7, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xe}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008095) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x7028338620798b90, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0xa9207000) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r4 = gettid() syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x7, 0x3, "f4"}, @timestamp_addr={0x44, 0xc, 0xa, 0x1, 0x0, [{@empty}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) sendto$inet6(r6, &(0x7f00000000c0)="04", 0x1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) timer_getoverrun(r5) recvmsg(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}], 0x1}, 0x40000110) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8000, 0x0, 0x0, 0x0, 0x33, 0x40, 0x0, 0xe4}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', r7}, 0x18) 20m48.929904636s ago: executing program 38 (id=1692): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x22, 0x3, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffff7f, 0x0, 0x0, 0x100004, 0x2, 0x1, 0xe602}}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0xc3a01, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x0, 0x6, {0xffffffffffffffff}, {}, 0x8, 0xffff}) sched_setattr(r5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xffffffff}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7f}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xf2) mmap(&(0x7f0000c7f000/0x2000)=nil, 0x2000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB='\x00'/14], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r7, 0x0) write$UHID_CREATE2(r4, 0x0, 0x119) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x10, 0x1411, 0x105, 0x70bd25}, 0x10}}, 0xc4) 20m48.750803225s ago: executing program 39 (id=1705): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x41) msgrcv(r0, &(0x7f0000000240)={0x0, ""/147}, 0x9b, 0x3, 0x3800) socket$rds(0x15, 0x5, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8ea9, 0xfffd, {0x0, 0x5}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0xb}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) (async) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$inet(r3, &(0x7f0000000580)={0x2, 0x0, @loopback}, 0x0, 0x80000) (async) r4 = socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r6 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r6, &(0x7f0000000200)="a38d", 0x2) pselect6(0x40, &(0x7f0000000600)={0x0, 0x10000000000000}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f00000003c0)=0x2) (async) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) ioctl$EVIOCGBITSND(r2, 0x40044591, 0x0) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r7, @ANYBLOB="4b328b08ce06c7ffb6bd2fffefba4a61bae36b01ab1a13645ebbed591771655c2f1a259072c0ff445e65c816536a7fc957b8a32930358a0dd9e1d8d5d920c270baa0e5cc2b97c4d75178830c7dbcc62aefeca9113ecaed059db423dbc786a985a7e1f4835d92cf4de3a14d735a808aaf2a5785378638dfd5cb02cb28decfa262422c95d26d2f07d44a0d24828b78357a3075c02c94793693728facfcc11af24e900fb647b0dcc2ce7fe40b56ad2122baa57b7b78dee88a870ecfa566d8fb9a5313d55671023e36b8195f42cea6b40e03", @ANYRES32, @ANYRESHEX=r7], 0x124}}, 0x0) 10m50.525786903s ago: executing program 0 (id=3823): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x0, [{{0x9, 0x4, 0x0, 0xb9, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x2, 0x80}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10m50.393413008s ago: executing program 9 (id=3825): unshare(0x62040200) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'raw\x00', 0x7003, [0x0, 0x0, 0x3]}, &(0x7f0000000080)=0x54) 10m49.887775785s ago: executing program 9 (id=3828): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, 0x0) (async, rerun: 64) syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') (rerun: 64) 10m49.260393204s ago: executing program 9 (id=3830): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) openat$audio(0xffffff9c, 0x0, 0x80, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x40) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xe8) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xee24, 0xffffffffffffffff, 0x0, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setpipe(r4, 0x407, 0x18e00000) r5 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000380)={0x8, 0x0, 0x3, 0x0, 0x6}) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = io_uring_setup(0x46a8, &(0x7f0000000200)={0x0, 0x5d50, 0x0, 0x0, 0x3c1}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x6, 0x0, 0x3, 0x0, 0x5}) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="2b6e6574202b70696473202b6e65745f7072696f205128acfbddbbd5c8defdec96199153bbb5fd6ecd02476637b8907993b3b665da6618e063322adf7e3ef33f60b9f68677bb1aaeb8824ef1"], 0x15) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f0000002180)=r10) close_range(r7, 0xffffffffffffffff, 0x0) 10m48.58457968s ago: executing program 0 (id=3833): semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/129) 10m48.038324197s ago: executing program 0 (id=3834): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x2e, 0x1, @thr={0x0, &(0x7f0000000140)="a3e50e778ede12f92a3622754a72ac4c1e6a1209095b88139e5f995be5fcbe9387c018dd7684a9f8f8ffffff35553524cea85bff65c56eff223cd563c97b34e6b688eb054f28394fabff"}}, 0x0) (async) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4140aecd, &(0x7f0000000080)) (async) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 10m46.840596614s ago: executing program 0 (id=3835): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) (async) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x343, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x25, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0xffe2) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000100)=@t={0x81, 0x8, 0x1, 0x3, @generic=0x600}) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0xc8, 0x5f, 0x62, 0x8, 0x423, 0xc, 0x2ebf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x6, 0x0, 0x22, [{{0x9, 0x4, 0xff, 0x1, 0x0, 0x71, 0xc0, 0xd9, 0x8}}]}}]}}, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0}) (async) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) write$binfmt_misc(r0, 0x0, 0x0) 10m46.380865485s ago: executing program 0 (id=3836): syz_clone(0x8000100, 0x0, 0x0, &(0x7f00000010c0), 0x0, &(0x7f0000001140)="8c7d6ce015a250438cbc1d52041b77f25ad358917121e78fd98d") bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x29, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100006e383a10d00701415cec0102030109022400010000000009042300020070400009058a0308"], 0x0) 10m45.287935364s ago: executing program 9 (id=3838): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = socket$isdn(0x22, 0x2, 0x11) close(r5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x9, 0x1002, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 10m45.020990047s ago: executing program 9 (id=3841): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYBLOB="0000000000000000b702000014000000b70200000000000085"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000000000000000000000600", [0x0, 0x2000000000001]}}) 10m44.444775842s ago: executing program 9 (id=3844): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) poll(&(0x7f0000000040)=[{r0, 0x2124}, {r0, 0xb0c4}], 0x2, 0x11ff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8), 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) fstat(0xffffffffffffffff, &(0x7f0000000600)) getgid() syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x208010, 0x0, 0x1, 0x0, &(0x7f00000004c0)="7b0fa79880f32b3e7eacb7bf34c293bf634e985e1370ab6c1de37c3db56784b88c797b9501d65ae7f32866e2b7c40751e9b383") r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000000)) unshare(0x2000400) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x20a040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000680)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r9, 0xffffffffffffffff, 0x0) shutdown(r0, 0x0) 10m44.360930721s ago: executing program 0 (id=3845): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x3, 0x6, "67fdd5", 0x8, 0x11, 0xff, @private0={0xfc, 0x0, '\x00', 0xff}, @ipv4={'\x00', '\xff\xff', @remote}, {[], {0x4e21, 0x4e24, 0x8}}}}}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) fallocate(0xffffffffffffffff, 0x3, 0x100000000, 0x80000000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x168, 0x11, 0x148, 0x168, 0x10, 0x370, 0x2a8, 0x2a8, 0x370, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x100, 0x168, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x1000000, 0xffffffff, 0x8, 0x18}}}, @common=@unspec=@devgroup={{0x38}, {0xb, 0x3d, 0x5063e24c, 0x6, 0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@private=0x292d, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00', {}, {}, 0xa8}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x40, 0x0, 0x0, 0x200003, 0x2, 0x80, 0x78}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x8, "602c4e1da4b651d69f61fd40e9985933ad459f3d59ccf16f0d0ef758ba42"}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x468) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='bbr\x00', 0x4) futex(&(0x7f0000000480)=0x1, 0x18b, 0x2, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500)=0x1, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @empty, 0x46b8}, 0x1c) 10m27.95236618s ago: executing program 40 (id=3844): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) poll(&(0x7f0000000040)=[{r0, 0x2124}, {r0, 0xb0c4}], 0x2, 0x11ff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8), 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) fstat(0xffffffffffffffff, &(0x7f0000000600)) getgid() syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x208010, 0x0, 0x1, 0x0, &(0x7f00000004c0)="7b0fa79880f32b3e7eacb7bf34c293bf634e985e1370ab6c1de37c3db56784b88c797b9501d65ae7f32866e2b7c40751e9b383") r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000000)) unshare(0x2000400) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x20a040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000680)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r9, 0xffffffffffffffff, 0x0) shutdown(r0, 0x0) 10m27.246796232s ago: executing program 41 (id=3845): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x3, 0x6, "67fdd5", 0x8, 0x11, 0xff, @private0={0xfc, 0x0, '\x00', 0xff}, @ipv4={'\x00', '\xff\xff', @remote}, {[], {0x4e21, 0x4e24, 0x8}}}}}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) fallocate(0xffffffffffffffff, 0x3, 0x100000000, 0x80000000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x168, 0x11, 0x148, 0x168, 0x10, 0x370, 0x2a8, 0x2a8, 0x370, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x100, 0x168, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x1000000, 0xffffffff, 0x8, 0x18}}}, @common=@unspec=@devgroup={{0x38}, {0xb, 0x3d, 0x5063e24c, 0x6, 0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@private=0x292d, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00', {}, {}, 0xa8}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x40, 0x0, 0x0, 0x200003, 0x2, 0x80, 0x78}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x8, "602c4e1da4b651d69f61fd40e9985933ad459f3d59ccf16f0d0ef758ba42"}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x468) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='bbr\x00', 0x4) futex(&(0x7f0000000480)=0x1, 0x18b, 0x2, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500)=0x1, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @empty, 0x46b8}, 0x1c) 10m25.453768218s ago: executing program 8 (id=3859): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) keyctl$read(0xb, 0x0, &(0x7f00000000c0)=""/90, 0x5a) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f000000c280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4040010}}], 0x1, 0x4040081) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000180)={0x40, 0x3, 0x2, "3283"}, 0x0, 0x0}) r3 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x8000) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000080)=0x3) 10m21.952695312s ago: executing program 2 (id=3862): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xc}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xb276}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4808) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000000010104000000000000567eb952cb821516874d8ef60000020000001c00188008000140000000000800024000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x1, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}]}}]}}]}}, 0x0) setrlimit(0x7, &(0x7f0000000400)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) close(0x4) 10m21.614923028s ago: executing program 8 (id=3863): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) write$tcp_mem(r2, &(0x7f0000000240)={0xfffffffffffffffc, 0x20, 0x4}, 0x48) (async) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), &(0x7f0000000200)={0x0, 0xfb, 0x36, 0x9, 0x7f, "207666b7a12165eaea0fbf19bb40466c", "dfb5a9ac6ebd2b3f37ef434d8847f25c04a8b32c5e792b73a36cee7231b66c6ab9"}, 0x36, 0x1) (async, rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async, rerun: 32) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000018400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=@newtfilter={0x3c, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xdd96}]}}]}, 0x3c}}, 0x0) (rerun: 32) 10m20.633607766s ago: executing program 8 (id=3865): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x0, 0x1, 0x0, 0xf, 0x4, [{}]}, @struct={0x0, 0x0, 0x0, 0x4, 0x0, 0xd}]}, {0x0, [0x0, 0x30, 0x61]}}, 0x0, 0x3d}, 0x28) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x118, 0x0, 0x330, 0x298, 0x330, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000480), 0xd, 0x123002) r6 = fcntl$dupfd(r1, 0x0, r5) ioctl$RTC_UIE_OFF(r6, 0x7004) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x401, 0xfffffffc, 0x300f, 0x0, 0x1, 0x0, 0x2, 0x6}}) r7 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) unshare(0xa000000) shmget$private(0x0, 0xfffffffffeffffff, 0x0, &(0x7f0000ffc000/0x3000)=nil) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r9}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x48}}, 0x0) getsockname$packet(r7, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000370400000000f8541549b670c46a", @ANYRES32=r10, @ANYBLOB="83040500000000001c0012800e00010069703665727370616e00000008000280040012"], 0x3c}}, 0x0) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @private=0xa010100}}}], 0x20}}], 0x1, 0x0) 10m20.113839709s ago: executing program 8 (id=3867): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x800, {0x4, 0x1, 0x3, 0x69, 0x200, 0x0, 0x0, 0x5, 0x4cab, 0xe156, 0x0, 0x0, 0x60ff, 0x0, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) 10m20.104226902s ago: executing program 2 (id=3868): prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x5e9c00) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x4, 0x200, 0x2, 0x7fff}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/143) r1 = fcntl$getown(r0, 0x9) timer_create(0x5, &(0x7f0000000140)={0x0, 0x8, 0x0, @tid=r1}, &(0x7f0000000180)) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000200)=@attr_other={0x0, 0x1, 0x1, &(0x7f00000001c0)=0x4}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) clock_gettime(0x0, &(0x7f0000003540)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003440)=[{{&(0x7f0000000240)=@x25={0x9, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)}, {&(0x7f0000000300)=""/47, 0x2f}, {&(0x7f0000000340)=""/166, 0xa6}, {&(0x7f0000000400)=""/176, 0xb0}, {&(0x7f00000004c0)=""/11, 0xb}, {&(0x7f0000000500)=""/109, 0x6d}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f00000005c0)=""/119, 0x77}, {&(0x7f0000000640)=""/3, 0x3}], 0x9, &(0x7f0000000740)=""/189, 0xbd}}, {{&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000880)=""/245, 0xf5}], 0x1, &(0x7f00000009c0)=""/4096, 0x1000}, 0x40}, {{&(0x7f00000019c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000002180)=[{&(0x7f0000001a40)=""/198, 0xc6}, {&(0x7f0000001b40)=""/35, 0x23}, {&(0x7f0000001b80)=""/163, 0xa3}, {&(0x7f0000001c40)=""/225, 0xe1}, {&(0x7f0000001d40)=""/146, 0x92}, {&(0x7f0000001e00)=""/155, 0x9b}, {&(0x7f0000001ec0)=""/233, 0xe9}, {&(0x7f0000001fc0)=""/27, 0x1b}, {&(0x7f0000002000)=""/105, 0x69}, {&(0x7f0000002080)=""/209, 0xd1}], 0xa, &(0x7f0000002240)=""/92, 0x5c}, 0xd}, {{&(0x7f00000022c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002400)=[{&(0x7f0000002340)=""/105, 0x69}, {&(0x7f00000023c0)}], 0x2, &(0x7f0000002440)=""/4096, 0x1000}, 0xea}], 0x4, 0x0, &(0x7f0000003580)={r2, r3+60000000}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 10m19.722184084s ago: executing program 2 (id=3870): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) pread64(r0, &(0x7f0000000180)=""/79, 0xfffffe69, 0x1) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x2, 0x0, 0x7}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 10m19.451381808s ago: executing program 2 (id=3871): signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x1ffffffffd]}, 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x3126, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x4, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x154c, 0xef91, 0x48, 0x0, 0x0) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r7 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r7, 0x1, 0x7, &(0x7f0000000340), 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x6, &(0x7f00000000c0)={0x14, {{0x29, 0x0, 0x3e000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa237}}}, 0x88) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r10 = dup(r9) ioctl$sock_inet6_udp_SIOCINQ(r10, 0x541b, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000880)={0x0, 0x3cfe, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3a, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x9046}, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r13 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000000), 0x4) sendmsg$kcm(r13, &(0x7f0000000240)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)='a', 0x1}], 0x1}, 0x0) sendmsg$inet(r13, &(0x7f0000000380)={&(0x7f0000000340)={0x2, 0x4e23, @private=0xa010106}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000500)="85", 0x1}, {&(0x7f0000000400)="55b7432b68bac2130bc5612e37cc6d62fcc74b85334f5e8addb1f2294d4b20af40fcdfead59b10927f727d1397123322a3938317ffeec0fa00c136dd2091b3aab16bf629eea1707d01084c8291afad556878333048c5f4332c8b040f65da74a0763139ee0f29f1b008b35a83cf2ed9bdad557158de320388c0ab5a6dd545b6878b49eecb2b8bf3ba2a286442babfcc878b4583d748b63e1fbde0e0404fd5f88d3e3889c17a4f1afc88bc3493b3a92337a8e4983188b393a5332945514c0c57184c22d0492434e0def394e994e2978286ed", 0xd1}], 0x2}, 0x24004860) 10m15.422798009s ago: executing program 8 (id=3874): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, &(0x7f0000000000)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/82, 0x52}], 0x1, 0xd651, 0x72b) (async, rerun: 32) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x2, 0x1000, 0x2, 0x2}, 0x10) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) 10m15.120292792s ago: executing program 2 (id=3876): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xc}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xb276}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4808) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000000010104000000000000567eb952cb821516874d8ef60000020000001c00188008000140000000000800024000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x1, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}]}}]}}]}}, 0x0) setrlimit(0x7, &(0x7f0000000400)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) close(0x4) 10m13.00158059s ago: executing program 2 (id=3877): syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000280)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f57a14", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a}]}}}}}}}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0xd108}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xc}}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}}, 0x0) r3 = creat(0x0, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') r5 = socket(0x2, 0x80805, 0x0) write$binfmt_misc(r3, &(0x7f00000000c0)="e3895b2b20301f57f57104709283983ca2816fdff20ee41f542d0a", 0x1b) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mkdir(0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080), 0x0) 10m11.541437647s ago: executing program 8 (id=3880): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x18, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r8, &(0x7f0000000700)={0x0, 0x900, &(0x7f0000000200)={&(0x7f0000000040)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40) r9 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r9, 0x2, &(0x7f00000000c0)={0x3}, 0x0) syz_usb_connect(0x4, 0x13f, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x84, 0x89, 0x46, 0xff, 0x1d4d, 0xc, 0x1197, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12d, 0x3, 0x21, 0x0, 0x10, 0x1, [{{0x9, 0x4, 0x14, 0xf, 0x0, 0xb8, 0xf, 0xb7, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x2fb, 0x4, 0x3, 0x2}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x2, 0x5, [0x3, 0x6, 0x4, 0x6, 0x2], 0x5}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0xfc, "489f"}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0x60}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x81}]}]}}, {{0x9, 0x4, 0x7e, 0x8, 0x6, 0xc4, 0xe4, 0x13, 0x1, [], [{{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x19, 0xe, 0x1d}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x6, 0x0, 0x9, [@generic={0x5f, 0x23, "fb447ad422c6fb89b413bb7479684ba153f15f8f6f1c4781d0f238e000b0b244da55bd794ce1f85172e00e97050b67fda0e47fb00fe703e1bdc39f1bdae7c61f86eb160ac623d813a7ad1f4202ab454843b2e7ed2caf80fc8652d2bf75"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x7, 0xd, 0x5}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x2, 0xe, 0xd, [@generic={0x32, 0xc, "26f5046af0276a40f990be2b5c39e1a4b6abecbcd88363fc0f8b96224e6ac781fd22ae23eb6bdcf023c58f550c5a0dd2"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8f, 0x6}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0xd, 0x2, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x5}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x6, 0x4, 0x8}}]}}, {{0x9, 0x4, 0x6, 0x81, 0x0, 0xfc, 0x5b, 0x82, 0xd7}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x10, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000340)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x21, 0xf0}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x5, 0x3, 0xd}]}}) r10 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000001340)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r10) 9m57.157462441s ago: executing program 42 (id=3877): syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000280)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f57a14", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a}]}}}}}}}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0xd108}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xc}}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}}, 0x0) r3 = creat(0x0, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') r5 = socket(0x2, 0x80805, 0x0) write$binfmt_misc(r3, &(0x7f00000000c0)="e3895b2b20301f57f57104709283983ca2816fdff20ee41f542d0a", 0x1b) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mkdir(0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080), 0x0) 9m55.79544898s ago: executing program 43 (id=3880): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x18, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r8, &(0x7f0000000700)={0x0, 0x900, &(0x7f0000000200)={&(0x7f0000000040)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40) r9 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r9, 0x2, &(0x7f00000000c0)={0x3}, 0x0) syz_usb_connect(0x4, 0x13f, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x84, 0x89, 0x46, 0xff, 0x1d4d, 0xc, 0x1197, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12d, 0x3, 0x21, 0x0, 0x10, 0x1, [{{0x9, 0x4, 0x14, 0xf, 0x0, 0xb8, 0xf, 0xb7, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x2fb, 0x4, 0x3, 0x2}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x2, 0x5, [0x3, 0x6, 0x4, 0x6, 0x2], 0x5}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0xfc, "489f"}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0x60}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x81}]}]}}, {{0x9, 0x4, 0x7e, 0x8, 0x6, 0xc4, 0xe4, 0x13, 0x1, [], [{{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x19, 0xe, 0x1d}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x6, 0x0, 0x9, [@generic={0x5f, 0x23, "fb447ad422c6fb89b413bb7479684ba153f15f8f6f1c4781d0f238e000b0b244da55bd794ce1f85172e00e97050b67fda0e47fb00fe703e1bdc39f1bdae7c61f86eb160ac623d813a7ad1f4202ab454843b2e7ed2caf80fc8652d2bf75"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x7, 0xd, 0x5}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x2, 0xe, 0xd, [@generic={0x32, 0xc, "26f5046af0276a40f990be2b5c39e1a4b6abecbcd88363fc0f8b96224e6ac781fd22ae23eb6bdcf023c58f550c5a0dd2"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8f, 0x6}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0xd, 0x2, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x5}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x6, 0x4, 0x8}}]}}, {{0x9, 0x4, 0x6, 0x81, 0x0, 0xfc, 0x5b, 0x82, 0xd7}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x10, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000340)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x21, 0xf0}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x5, 0x3, 0xd}]}}) r10 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000001340)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r10) 1m0.496570258s ago: executing program 3 (id=5541): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e010203010902"], 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcf, 0xc5, 0x30, 0x10, 0xeb1a, 0xe303, 0x2ab3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xed, 0x2, 0x1, 0x14, 0x30, 0x90, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x40}}]}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000640)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208001e0000050401a8000900027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4edef3985000092954b43370e970392", 0xd8}], 0x1}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000140)={&(0x7f0000003000)={[{0x0, 0x0, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r4, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) io_uring_enter(r5, 0x3517, 0x173d, 0x42, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000000000000, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xe, @private0, 0x4}, r9}}, 0x26) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r9}}, 0x18) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a"], 0x20}, 0x1, 0x0, 0x0, 0x20044041}, 0x0) 57.380711699s ago: executing program 3 (id=5554): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) (async) remap_file_pages(&(0x7f0000ede000/0x2000)=nil, 0x2000, 0x0, 0x85, 0x4000) (async) socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) syz_io_uring_complete(0x0) sendfile(r3, r3, 0x0, 0x7) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) (async) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000007329c5ad5fdcaa41844dd311efe5696c1af48007f19196a2455c2214c4425908c2e485061828a480", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110a4d", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b6090800000000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000002100050100000000000000000200000000000000020000000c000c4000000000"], 0x30}}, 0x0) (async) r5 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x3, 0x800) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r5, 0xc1004111, &(0x7f00000004c0)={0x2, [0x0, 0x5, 0x10], [{0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x40, 0x100, 0x0, 0x1}, {0x5, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x80000000, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x10000, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x5, 0x1, 0x0, 0x1}, {0x6, 0x9, 0x1, 0x0, 0x1}, {0x7ff, 0x62, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x1000, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x7, 0x1, 0x1, 0x1}], 0x4}) 55.774970932s ago: executing program 3 (id=5557): mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000002010000b7080000000010007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) 55.640701272s ago: executing program 3 (id=5558): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$vsock_stream(0x28, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) getsockopt(r2, 0x28, 0x0, 0x0, &(0x7f0000000080)=0xfffffffffffffe34) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f8, 0x210, 0x0, 0x0, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@arp={@dev, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e22a239a6bb651a9837df08bc7f880efe7126f5d56b33dd54f5db150ee26"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'bond_slave_0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x108, 0x940c, 0x3002, 0x0, 0x2c0, 0x330, 0x3d8, 0x3d8, 0x330, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0xffffff00, 0xffffff00, 0xff000000, 0xff000000], 0x4e23, 0x4e21, 0x4e23, 0x4e20, 0x8, 0x3, 0x6, 0x6}}}, {{@uncond, 0x0, 0x1f8, 0x228, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'dvmrp1\x00', {0x3ff, 0x1, 0x2, 0x8, 0x3b7c, 0x1001ff, 0x1, 0x8, 0x40}, {0xffffffffffffffff}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4}, {0xffffffffffffffff, 0xb, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 54.736599502s ago: executing program 3 (id=5561): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000002010000b7080000000010007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) 54.708000065s ago: executing program 3 (id=5562): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close(r3) syz_usb_connect(0x5, 0x35, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f680102030109022300010000c0050904970001ff70790008340201210126ff0905850308"], 0x0) r4 = socket$inet(0x2, 0x5, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, 0x0, 0x0, r5) r6 = socket(0x2, 0x5, 0xff) getsockopt(r6, 0x200000000114, 0x271c, 0x0, &(0x7f0000000040)) gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280), 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 39.611475476s ago: executing program 44 (id=5562): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close(r3) syz_usb_connect(0x5, 0x35, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f680102030109022300010000c0050904970001ff70790008340201210126ff0905850308"], 0x0) r4 = socket$inet(0x2, 0x5, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, 0x0, 0x0, r5) r6 = socket(0x2, 0x5, 0xff) getsockopt(r6, 0x200000000114, 0x271c, 0x0, &(0x7f0000000040)) gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280), 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 29.5706206s ago: executing program 5 (id=5639): mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0x1, 0x7, 0x0, '\x00', {0x7ff, 0xa2a, 0xd32, 0x8000, r2, r3, 0x1000, '\x00', 0x801, 0x2, 0xb4e7, 0x2, {0x8003, 0x8}, {0x6, 0x10001}, {0x100000000, 0x9}, {0x4, 0xa00}, 0x3, 0xb, 0x4, 0x3}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x2, 0x0, 0x1000}}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000002010000b7080000000010007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) 29.482122917s ago: executing program 5 (id=5640): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(&(0x7f00000003c0), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @loopback, 0xfffffffd}, 0x1c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000001c0)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x1, 0x1, '\x00', 0x9, 0x3fb}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) ioctl$KVM_RUN(r7, 0xae80, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) syz_usb_connect(0x6, 0x826, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000ec0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x10, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, 0x0, 0x6, [{0x0, 0x0}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x820}}, {0x4e, &(0x7f0000000d00)=ANY=[@ANYBLOB="4e033dcdd1d4d7de20d78094213de179180cfe3c8399188dff0700003d9f885bc7cd660cc96b4c21777e61f06c987c3ff94e9cd26a701a6ffb09fb80bf43f93d16e839d675f30000000000000000"]}, {0x6, &(0x7f0000000240)=ANY=[]}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x412}}, {0x5f, &(0x7f0000000f40)=ANY=[@ANYBLOB="5f03b971cadfef7dbe833c39dbbf67d2431949769134310a2107a6eb3c9c9f3fba3499564632d2a6bec0cfc419d2b4f70843b035899a61b132b067aa251b826fad329c1ea412b471a2777709e1e59efc7b5d760e845e7aa5387fb2c1f8a14861a31c903ae990a4"]}]}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) r9 = epoll_create1(0x0) r10 = gettid() kcmp$KCMP_EPOLL_TFD(r10, r10, 0x7, r9, &(0x7f0000000280)={r9, 0xffffffffffffffff, 0xfffe}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @empty}], 0x10) 26.328271313s ago: executing program 5 (id=5649): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x24, 0x4, 0x41046100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x1, {0x0, 0x1, 0x20000000, 0x3, 0xfffffffd, 0x26, {0xffffffffffffffff, 0x0, 0x7, 0x0, 0x8, 0x0, 0xc, 0x0, 0x0, 0x6000, 0x0, r4, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004280)="0d632b94af6e2367ab45f9c36a177fba7fcb758139ecb921e5abb703c64c1f3b57701d2955da2b49b044897df8f09d785b6fc48a1a1ddcdc38c4ebbf6572762f2184143eac3aac3853671a87cd3bfe65dc903d801932951d8caf7f16d7da6b2bdfaf4c765366a99a9c9345ff39907ff691aceecda8170173bdf273636a54b57ef5a1b0c40f1d03b0434592ca6d91992478c4aee614eee50531545b658f4e3c625c1be00e9fd5ec1b78b5057d16fdc97eee22938e253e82f35894cec738598a522dce10cc16dcb2b33fd80303450051c7ad3328229115bb61cd42aa488a3462e2cd60da00ef2ce4b615638e870de749a30feb30d8c0c035ac9116522097761a049be412e24938897bae0b8370fc928164bea974590ec3a98d9095cb2fa3b464ac8a1af24a96859188b182c6b97b87d43f1671a1d9e1e4899fa4540df78234ffcb6b34cc0fc03d1e314797b217cb740ff66c92353bec039bfc2b241774c766edd747e7d9ee8751012975762cae606d82af984885bf1c2789e16cc86bcd4f24f0b5d2050cda927c881636ecf3eeaf7ced096c84a5145c66405257cadf1c2d932efc7335d2584436ed027e1ad2802a4113bfd309825e7992cb0676e3ef7c282a581095e4bc18195e125f6a0d56018ee504a48998289032a5138f2fea1ab5abb176f94d749666e35ce793673c6c49aee499eb0dfc29ed94a59296d9a0f49bc0442feb064d9b845e6217caf78406a66f1f3979ecdfd573edfdb6d933b0c14ba3f12956f2b5ea2810249da35dfe96ed29f273edd426aee6f049504bc7ff27c858203b4fb919a6de22eb3105a72ddbf04546b65f1579d97a3a82f4f6f5da21b4aa799e1c5a9726e4aa0f6b464224e7818c47216da2bc6812da4173e6d52d7af3fa80a9d91fb571db9948703a26f54563bded9c4c25969027f76e58c0da21ab586125ac0e8d80c2524f099f94b97252ac582bf80a8db1b5ec8bd9537ab2fd31a95b966cf26e2080d5c5222c6899bbe3290da821eabd83b265301bd1d051de71c1554464f9463a5d37ad365657d5c1b4874744d6efbefc5aab54c86219e8c2a1fb97eb46f507ed0ac8c280c00b4bdf1e0b9989c31d0e9adbc1c3e0566f5ec64b3f00fa726647fcabec4fa0b0f6b136b4074cf4b9d78a1ad87b3ecb866ae5074720228bd5414daf269d13d5ff65ae568635afa2c34b3be9f1669e5897c21cf94e73675f4a5144285c23b2c3fea301794b1d472bde5dc6cff134a7539cfbdc0e548b36f0f3ab879506ff976cca24699be6f57acfbfc04bc18f53c022e7158e34edc897bdb80880f1a6506416a0a0588d3977cd701c18a1c3bcaf55ea05cab8d0e61913450340f2669f3d3d8d02c9f0dfac9117dd46053bf4df9dfd4f0498300489334dfe5df3efca5d44e1b83108bc45cc203e434dd17dec4fba9eee89ae22b4dee21a75414a2490559ee142cbe033ba43cc3daaaa1aff8a4c845a8d8737ef3a5c4635f29a5802cbb2f51fd63fc17db5c8da24049ffcff6f8dde926330dfe0cbeb5fb9c2ee064b2080bbd8255feda75250f505bc77e23d769cba43a66bd906a2f24679df8dca98d66e4fc9b6238f4622a0bd93a0d93730199b4a20699d3154c3c4ee0f7181d012b0f7015945f6f9fa72fc7d7eaadec7d1357cf748e8b7912491633f15b51f78daf19fb23ff1288f426a24320e4d1dce825a6ce0d3590c957b7941e4f16b8d76b0c8a766bec13148efa052736035b2a6fc5b797a7fb173d7f66ad2a611c1b765bbadcf79e56e892a8e76684620ea4a838a80f155b33a790c2a689e2d45ea51db52403e9ec33d8242207561360d1380cefbda7de17735bc7dde64649f62aa9d183b805f12a686f621f2d2646aee56dc58dbb530e210f1a6919fee761e1e89fde5365ca63a15e9bb05a1955233a48fb2ac02a5ccd5843a3e47b0494ee8e04cb17fd0483e5e3b03b1b7b924ad8bd03cfc9c6474973230202682569262a0b706072034dc06ebead1604e6708ca10e3c8480bebeb2c36ccdfb0dc0141931e0953eb2b77f8d390cc484e66e8aac613e1d9005a62cb583e0bd6b3448990de8b92599f61f6de7e1fa3d2fc0e0ec697880fcfc85345a1fd4fb95bbd0e56432b886354e03a3c035a11e649d5dd73dd604d76d18203264a018f9ccd83185e7b3e0003d9f2cb7530d1566b53dad29963df6b9e6102f39e0eef9489c8083b13068e757c115372359a18bb6e7afead5c8af67c7da8afd90d1b1e5d61ab1f26267b05b1684c4acc2239fa129b42f962d66c0eb4616c5a7bd1861645289e97ddba7f776da8e5d9d63d5843ad184f1a7202f4168b938b67b1091dcc98ecc33ba1f1166be37e6a94ff671769b6086fe1a3371e6d87a45702078fc1bb994e1ab1411a536783d3d1cf932c6ca6045b2ccd582e523799da803528a213b3163638215408daf13ff26fa39930d11b22f42e66fa67294e722c6b90cf7b92289e88410350d2d2b5a6fa919fdb043da25695af55b78053c0a932421cb26fb9faa2f99ddbf96ed71c760296495cf4c6fc4080c45cc68383ad4d4e20a77525e211a4b078e8564cdb48d0d72bd8b2bb4674ae55ba11f7db6679efab2eb84fcdae15976ce251f5182f30083d350e6b86dc9403cbebd5ad9c8ec2269bb3d0d44c148ead4c154e23cb749a549eb347acbb0f24da82abe1b7521cb6858029b4d5b1ba39bbe2d5cdf9d76694783531a4a232692f721fe2e42d735580593a5bc270b497f97aa8ae008192ad3d8b10a23c396336fcd082092053d66d860b13857dd239f8412b3f9a737ea17c3a18e58c000670e071ef1ae8efda79b666c17bef0b080dc8034b421bb0bc8cc9ca0678338bc5ac817d1370e88f6b599de3986f429d8ac630736f36458c56f91472cafd1e6d93ab4349c7eb4704c3a435eafe4f03f0ac274d0407163308e557610e3fa7ed819e53a301b576ad86f71ce36457a09f7f1d54b8952e0a12c8683b07eedd438b68f45227bffce142bfc5d2787ca7d9bf3835b5876b30d14e043428db8ec6ff8e7f45041d6afa0027e7e887abdf39b6a1a6e6baaba3aea38ae6f5bee1923297d49be96fc975a735e1822a83cde21121e50ab1bd50c6911e3e090aa97907e9a68427e5aaaea995bca111d7eea1629ef76a1d0dbf7a7b246f1ae7dad24eda2ff1ed5cba2a7ca65a7b5a0d7672b708cda34c3e09243d795eb25589e1f0e59ae42c10ee731f777e0cbb24bfe8dbf9506f5d7b3a1a86671bcc2d2229aabec121b66a3ed5c9f76d35cf9b039dbaa831ae4d4b32470fa65e5a80000c9c0d9d9575dd6ef39d217d4370f9367d2d700fa5d43baa38bcfd307c4289f67afe59cad18a5ee9407b835bf70f2add5fca49bbfcb121205f3ed8ad4dcab89abd3c2e9cefee7f3d221b2dfbb2c7ecf42d1587b7d529dde6a703a42715c21b72e97d33c3cf7cb6648e54622c2f5af968b482c25b38d03d614f2469978561e28987d69b5ab4d620463050908d5153917df3eba5996c9fa29d765874f9395bf6aa0bc5dd4b88f601523f16d91de454fed051d139f688d45b58a5c20d756338892f4853e4dd06303eff48ef707254af99409683fc37713ed43fee81a30a19f127babca551961885611199b49e5182389dd54d75001745cc343be8100ec23898746a0f813f37e34994d94b39b8f0184d7568f0e716c30457f0cd7afcabe9818fb214e739ba39d9ac4c6e35fd697eae8fb37285e557f6ad6af9a086cb42b4cf67457069b6c35e2dc6ae408df3e91cf714b5009e80e06387ee3e832ecf437b00bade20fd136ce9c614d0ca6846574829ca39c8f9e09a1627271c56e4aca81ac15d640b311dbdca4a1614c8ca43769157814324494da913d65bafe07f660617f98224e08128138128329f301cbc5c9264335c1e91f34d882bc2aca2f825d185c192f888b746901b89bb6c30f38f32d7eb0a6e6ab273d6b2c018522309f9acc039e5ced749a12d763f5be55867d42b51b4afadc8cc9394f2f8b77dcb2fa77419cda7a7b7bd28484ff274be2197a23a8b689313ce7785f4f73fb1ede018555df56a7600cbf1d2d8fb5ee88301bced1b22688d4ad7d3cf15b48a4809c8a95084d0997abdd59c30a3181763d4387650c2afe99e02490e245ff40c7a11e1879d9948767714c29dab1e76d8655c3120504c87ebfaf05b4e6d2212bd01bf08876577d38bb3c1b3c652aa6ca186105cd26707a029ec3bc4d57bd8b97b6b367407a3f1c45b101b006177e998025699d2fcad61b8dfe67752f509dfe8aa05194634c1e4725480a6459cc5b71c04e2263bf75b5100e0bafbac0a7aa1c8ecc61cbb545d27b739cd94f5404dcd8b88e05f83749987fe14ca63c2c3ef3a9915e2f85cb1dcce64adaa59b98ea9df1de8fa09bce208c5586ecb78f889f71fd0244ecc64e3a5189ec4f1c25c215c62fb287db035d088c8b2a503b7964eee094a3a322872825ff835148f48077d25662d39eb5aa37d48a2070837500b4b9d47e9e54c9fbc498512fb485d0912cb4d5b423ea0545c1b3f8eb296ecdf04aab46f22cec932d62ecc3ace169d0ed79408a7fcbe0a70f505f0e425633e2646991e4957d79b269727141cd6076e5ca57a99da067f2aabc467f0bfe9d81110b98142db708641d9c8a13f286272bd06746661f3a5fd7acf828d8b090d3d8e48a02636dbdf4421390be8a075135d44c52cc9c844ecdf018fe6ffcaee7e397cf2dd43ea61a4e737c1dee97ab1818039aae5ead67162ccb41214180e6e339809c9ebacdb320bdf959c02e2b38e86ea6653303f1912a88b907ec0f3157c03a8325b74d0f80e23137ba1b92f7c49019773db01387c6449a51f8b9046adb0ace4c158149b11185fe5b6b6894bf1626faeb0ef0d3393ed3a5da46e375f83117a8e5c2b8198bf459bf42b816db17934f82996b7d1d682afcd0b51cbeec44aeea35b6175e2a7aabc3145c8d31a4589c07ea02014c2773d3761bbabd39de7e9c405750ab86ac9d98de681910b336201383660edd4ae64a0b8b4d5e372fa18eec6135c631854e28973b0a6bc8356e8045e95c1fe420ff2d0a37d65557d0b73f0409f0098089ba8a281c05815759689f18e498e547d54542c8264fa800abd8b4b339067f78ca0eec9bf1b67e5fb47d6fd80c3b33e4f65b063f837ee06d1945d34b36e41e6135eaae1e2fe6ea84cd21d1acdb6d13c289cc29d83970372fe1553b67b5ecbfb359ef072167a2b9d7b3c6c15125d573e7be6be7a2e0159ef7398921149d13a27a87804526311882a0852dc7721d56b50b94dddfbba6e18a46151f5792bdafce02d05c0e0ccea0034c34d4dbc7f0233a368f2080ed8f61d9f6c5062e790c9b6f02b5f60be261cae5b681c22f9e40c627f1c83b8251ccb87d6ee2772f0b4ce2240f27e62d3c2867e08baa1c652bcddb16b3bad5c898532bb16b18846cd2ac2d4e745db2d3c287a188ceca5208fc6470e5c3e833482a901ea04d9dd8648da675b9f0efe96309d09a5d348abfcb3ada64d6d6cf201e26fbd96376888d2df0bbe51fcde759c8c423c582711b934d34811b30612dd26eecdc1fffd8e4b9d0b980632c41a6b8623426acfc451e7900437fb9776e01f7461d4e22e3eb2944adb48aa67202927c2f1860d97f6f1554c209734388e57e79217faefa207ebfb68597bca07c6c58945ec1ecee9b95e90ce3f7bc34dd7e16582242972098bc40afbfe6864c48bb80303206dbdacd429b741c5563f79a5fe5ff34df983c01c92c8a0337372698e00b442fec010f70943a0a0a7e9dd65d911c90012a1ced849f67eebb5f6173e264de35719bbcbfa8e30f712074bcae2e9a9bc18659ee426eb29d48ee4943c52c6c7075cc2692b92f6373bdfbf7e3a552f4e739e4fe473ec18ce6199c3c70a0966c14e7b75931579198e508d3175ccbd940bd1463f09a792d53384a9757248aabba2bb80a8af25d67594173c2c55275aaf186e9709883cebd981dd32c4959ef32416cfe9347d3cc82a858891cb9efbe8b686da8bba287414688a4e8aff8fd81a4bec01c975166997eeda0915350f4d072f638827c9832240e8ceb147499d47be8375d2d7989f540f85c8301f0d5cc0a23f72777e3222c6ac206dbbc88b969167221e03b1575f82aec86e6f40c208dfc322dcddaffd6cd8b4595b391acb82e5bd92dfd2aacdfca1029c97443a6ab829bba61856f12f0fd96a66df93dfa3d001ba0e490a7b3e814c3f8e084bcd73f1f7bc6e49802d798df101811eaa2c938ea17a47adb04661d6627ba7b994b456a0787544141ed801a84e2c2ba2d51db7f349b3026f390d6eb921347e7a531370bd80a4e83fd63d29aa9a29b0531b601794b1c769aeae9e35122d1033847e90e06ae20c5f1618b158f1147430b257689c8af0f8c72b2266cdf6809c2521bf21d21042df2d2913f096361667263a7715ae3b4211219be9ac693352e691cf5fb57f4535bd9fa3ea33ac7bcd93c219130b68b7c3e1cc673468043fb9bc9d75b9dc60c0cf1fbe0ab01aac46028999c4d7c8bc8d10a589ab22c9cecb569212e92a79958ecfbd9ef861f7d43f052dc6a69242a3cf7db473aa1b765eedbcad931e205936e34aa6b86d3c5874c24269d257a87f41e65a86bc238c7eed8985fa4521be521571f37a8c11aec2e72faeac7225a44aaa6ddf9ec3286b3894cca3dd5c23b5dc6981d5325dbf889eac53df0d5d530937a8ad0f476cef9c98a6553d9160ec33dadf51e9e015dc4cfd83a8ff45de951e4258ea7449ceae928e446e6b2e02813f88dd684784039871616f758956d0aacb34941abafe81e8a9bca0bb0d8bfb3d77a46ad696f2299032f334a51e2c686e02234a1d3859d46e8c1eb1e944f7184babdfaa64a07967a6f2ee9079542147ec00b96b39da1a0cc0d3263015def063a3d90cd809943f0911d2eb4df00c3e61c3317316dc4c533271cffa96294f8bf5f7c6a09f6471bd27eb284d992599dc1b4fe7acf0c74a6cc4bb1f93b7f7710bd841976b8820a97c629ad28aeac63dde567e3b89d4fb2e86595fbb7cbe89324a43b6600f02d32985b719199b486e3709bcf00259ad6a3ce47b673ac720f8926e15a9207c299f697d90ec1d15269756beaf0a18c76980cc318ec522aed3e523a6fe734974e3d05fb95dec869337939a96d1d79ff77c271b49f43da6e01a91a907d023bd3bf114bfa33d5826d3663ae4bedf169d8e381c9dffa0d82f670561b652b0e7ffe38d2d2a9870ed20e50fc65d75aa6fb348699a5c67a5890cc0e510167943060ed2caad19084420b1695c467d042bdbb888481a1ab6daf3be3b1fa0d69e0ec079b0b94c99ecf61ca47c7563bc12a509032e5862453e245b532d8d52e13752d42b486cbfe6097675d6cbdaba800bcfaf0a53f898c633288464a056405950c880f7d018a4b8cd7ebb568fbcc4b6f9f1d6f904de7f889c30d2907789041bcb28dd49393cf711f452b7bfaf8a636164c5bd286162832526a01d6a0b9eab929bdf6d5d2e385dfb59423d880ade829196cca2bef3e2c26f23e1c9251b60da71f7ba86b30878515a79097cdc5233fa9e075bda5b65e8005c2b92d9f0cc28a3cb45aa13f17ddf22fdb2dcedd6b21005a695e7cf2a58cd0276f846027c65537af45ff6eaf891b0b11f5fff17ea7c366e66e6230e3ba2ec85ab9bf1eddc51246ad27842a280235ede0d44460de6f2e13ecc3f0d10e4c4cef1a66e5a823b5666b95bd45d50e9ae92f8dcace4174ae4a7e1742924528e968247daf3c9499b06e1b8abe4aea9bbe25c8dd8cf45fb70b190627fba14f9f40eac65f7eb3e4eb5ecb80b50acf1b7769868503daf875820299c23e1371a108939008763d6b0714b77a6fb6f39a65d29b1820c0088c073a855d1dc8ae81a1af7312967e354b8fdb9479410ccd54d2cb2c0c70b48263cfa656d8997e42ee8bddf6172b436d6e04443fc4bc668b3b07b568405527ded17b0ee16647e617b50c3da5bfdac538c78fe9baa9833aca50931440d282dbbd4e5cd96b3f8ee11c53795e174b9ccfb139da6f7050de0763709e14a2cb7ab28e8f317c0438b0929b28fe030b93ffbdead1c7675ec5498917d270df472f1f889165c7b684a1cc32e064411985248ee608135f0d82ff5bd5bb730332458439c4f1e137bb3f84d5fbdd6c0663203fd7743b3c20337905267008d7b8ea9ad5b4651ed08e3ca2a50741ef5b6f4e6cefbae8e620adb86ae7b7e5b330c4558f5f8e790da4c873d253127063ee9b0b12149483f290d2414fe962b2d526912eb0fd5e234620f0e8c760c4a0abeab473190404fa878f9cc71ee72a5620c0b32f61c5884a9888da0f3ce60ad2b2e71d9ddb9082a781e0a82bb8dc2f61a41e8adf112b8f80695c900097a2c2aca7848c72527d098509c9d0ae8f68d6ae6cb4ceb9d59c61345049079f82bffabe7d1116547332c14d6bbc2e4e4e9e6574fd3c5815d10db3caeba9af22885f1fb2d794d5165c17468f0d019d8e0bcc5112325f03ca24903684e5f99206d0f9d5ca37fc66bd611ddef37410bf0ccd76320d7ff78408990e20abb8ac1a9f618ce1ea70d9e5f52779f01b5ac70433a31e4ab487b469fa279c7d75a727954bf2d90efa87f869adcdb3cd3da5a23e88e1fdddd0cb5e8a4920eae211784247dd6a56015e5414c5d219775cccd73b0c4fa45825cf7fb7522df9ae07dfe30d11af50e1153dc7c1d956bf6a3bc5a5af9d8189ac9cfe6d18c9a8a5fc608b33991b2d78d6a4dde355be0de1b7a9c4dbe9383479d8bf9ff17a5fa87ec3318bf8c960278728d7198cf882c4c100efce92648d47644f1685f984d68e94c85aa01ee6bb1fb486748d29f979fdc5abd2fc926b9369cc0b99da037aa915f8eef2f3dd69daf8cd9abd6d75bbbd1b15b16fe7ceb0690257aef1493ad6111978ebc05d72b59cc3358e18cd267e0a9f9c98cc1b7d80036954ab15f9cce1b92d2447029171127d88d57f412b18c8cdef2eb67275990635284b4eaeca7d8b3abf21f778cf1edd5d6e0db7e9bb3cc1b1ba88f85f2d5da885b0d280c61a361d0f50b7cdec6bad5577bef4bb9a051adf05cf1db486edf090c57c9718d6c87e8c2768b64dd3496a7e137fe4ac2d00ed0813dbbd4a70531c05ea5b06eb8979f484846f0b4fdafff5dcd1ff954e895b7aa5ed68ac83cdb91b85908f1eb18f07ea4017e49a495b78577c63ba2d6f11c96d0712a22f177fec90b70263ebe3e8289bb4c88b29553c3c59226c3b0c9ea8316e8fecfb82f2640ccdbe186a5194391a22446582b776f5c030c65febb2426d7e5a512a944c4a293c099103eb51aaf306097e83db9d5053a7c52ca28bc8645dfd9e920805446ad60f931ea089552681838a2c92f28f554b687f2b0d06122118e6c6e4489bccf0eaecefcdda2ae44fb569b2b0da5ac8b9a417c96837e74dc47b46f41c1226dab7d93722a1891acd3f6021c984c93d5b8b2a2e1595ecc84596035ec0e829e51c837b88fb98f6f56dc27ce85f674134c6af6bf8a563e344b11839ed9eca569de6580ca22b022c8647bb0df902dcd3e716b463a0c63d34e17023ef46d9c396c75ec60f0117e50dfd66ba6d8ed226afc8ae8fa2b375bbe48b4a90b1db8e59c2ba32c31a08158166e613cc2ea9abbe386bceb48e5cd63de59f9338bdb602a509269397458824be0db42ac8d856f320efcf6ca6fa3812c4a0b871d6382d0f737c5987604cf60358967e97524e616837a7f0e4376ea3797e076e140294073f3737b8b3ef4d0a28d82d64b5136a43bcd7fdc1779d5e6da28c911fa90d0cdbd7bd5076e384c52197ccc19c8253ce3838ad39367ddd495a49a03a6e8a1e6a88fa9763e7f3de00b3344ace2816f45080e9fb975bec85528a66590704bd477da9ba1111da3d25ccb9a12b14c5d587227ffa9e1b1e6bc2b3aa07a2b11131e1c028d8089be19b9da264418ba9cbfa46fc6dd2f12c5d15321f697f3b54e29983cb4a86e6026d032ee2beb95016fb66c40ab65002b8cdfa1db31fd4f7810c24ad17994f9926e4ef8c7da9e266ccf4411230a7f62a99936fff0f9d0498783b233c82356e15d31ed6dc839aff25289c9c6a0ec3e1c80ea5aeb39c96187f93a31d4f93acf145332ae348442c6181d869024d2cb64b94c9ef3fb9bf7dd078c3efb72281c4a4e76c3a0ba0c9680ea667f2baac13065a6b98edc7473c9a4e4a589a00e0415cca30a28d9143ecec68fa298f951ba1e4a58d89f34d3f468fee4150d0592fdb17652297545cd77232584083fb4462a1306a846bda83e13d8611e912528a40ce268c1cc4f5c64509e65b80bd8e50a20389ad9135f77cb5cbb7fa3e43ff520da5bd460ce638d080bb1b026620c2a5067c2ab1c82ac90c6f1798229ca4c803a0b1a970b6a0af1606bfee11f17dd8c722962a6623703d99433d33d717483d2830691a6b9ce1f8697ef027820285def580cb646c0dee71ae79900946d3a0632d5e358d2da4824168c8cbb2178f65a76f3be94f6b29a0f1ef71a51a5a47216b91b0033f6b54cb5d867531e43bee3cfeb88f7984f594a6c8d105d8ec2cbf6ed9c8e2d91279d6b5105e143d4fe2e4c8fffc4f41b994622196b50ff7566a70584d822912d11bed364de29a396f581ba605f3b36387ff62e41ef1ab4514cef9502cf8414e88fdbafb5f6f5902d552e37594b65888f6c3c54332c31f9f439685ff47acbb2afe11118929d57d78fff2c8665ae3b29e8fb8dd58d2ce231b2174197ade1a22a0263bc3a267fed928c8c337528a4f3610ac479bd50c61d9b0b780c312afba875b6e3302050bdb3ba77ecf70d34284149e3c1b97ea072a88e86f52e6e51f62b0cb424a7e7ae190913849595dcf17373804959fe6628c5f2bd8a0a9a88b8a4486d538d8920e907e5d1b8771274b728dd2680959f4e82b5c8612367ca419603b4ac4d7aac8a37da56490c801455bfb33c7b6baea787c63d3faaa55cf8687d63f8ffc32fec79d14ef092c58e842d95a8aaedf6e75d5dc65f7921819e82bfb5d287588187f5bacefbfcb0343cb36ec1ad91b47a8f486a8c296abe3511fbb7d767507a543377642e486a00c084dc01584634eafd08bab04c6691c0d67315398bf8abeda03a24031b5ba30657361f804bf40cb530abaa7ae36592c6f3aa1d599eccb0d6cacc91c81ab416bb00c484e516351ce00f90f790971c196f3a1bd1370255029d1e44901d0ca87e593fad583b99a25dedb7d0a75378750b8295ad60e15d2b7e8e1855c308588830f09eaa2277142bceaa13b5c48dfa7e3ab90e2aec95463a2e6ecd3964bfd51aa4cbda44902830ee0f6af20e5994a41f7356dd7abb1b879597954d46f6cb9e52c9fbcc1d5252df70218df675cafc98c86841386a009be7b1a9dee3ab3313352eb397643f8151ab3eca20a7dad16247df588a720032a00a50da22dc17fa99706d6d3fbd635e8ab69c5b6b139b5690d07e48e066688960da7bd762fbbbdb1e8e760a28b5572d7599c72ee46d966865f33510f55346cc2150cf09f4440c5b6071d8f5c01c22e277a5035540420620c5f44bae0bf56924785fe2e8cbc220a9892deff4a86f66a137e53e7eea98ac1a1e49efda30708044061c3bcc6051740bced36507970f", 0x2000, &(0x7f00000008c0)={&(0x7f0000000100)={0x50, 0x0, 0x81, {0x7, 0x2b, 0x3, 0x40020, 0x4, 0xf976, 0xa41, 0x8, 0x0, 0x0, 0x20, 0x9}}, &(0x7f0000000000)={0x18, 0x0, 0x8, {0x3}}, 0x0, &(0x7f0000000180)={0x18, 0x0, 0x9, {0x9}}, &(0x7f0000000200)={0x18, 0x0, 0x1, {0x8}}, &(0x7f0000000240)={0x28, 0xffffffffffffffda, 0x2, {{0x4d, 0xfffffffffffffffd, 0x0, r6}}}, &(0x7f00000002c0)={0x60, 0x0, 0x5, {{0x1000, 0x8, 0xa13, 0x8, 0x87, 0x8000, 0x0, 0xcbb}}}, &(0x7f0000000340)={0x18, 0x0, 0x8, {0xa}}, &(0x7f00000003c0)={0x1e, 0x0, 0x8, {'+-,{*!\'+!**$.\x00'}}, &(0x7f0000000400)={0x20, 0x0, 0x6, {0x0, 0x9}}, &(0x7f0000000440)={0x78, 0x0, 0x66fd, {0x46d, 0x80000001, 0x0, {0x0, 0x5, 0xd5c9, 0x2, 0x20000000000000, 0x9, 0x7fffffff, 0x8, 0x57e, 0x8000, 0x4, r4, r5, 0x7fffffff, 0x5}}}, &(0x7f00000004c0)={0x90, 0x0, 0x9, {0x2, 0x3, 0x2, 0x1, 0xaa1, 0x80000001, {0x4, 0x4, 0x7, 0x22, 0xad, 0x8, 0x0, 0x8, 0x5, 0x4000, 0x3993, r4, r5, 0x2055, 0xfffffff8}}}, &(0x7f0000000580)={0x30, 0xffffffffffffffda, 0x6, [{0x4, 0x0, 0x4, 0x0, '^\x8c\'\''}]}, &(0x7f00000005c0)={0xb0, 0x0, 0x5, [{{0x2, 0x2, 0x1, 0x8, 0x9, 0x4ec63c37, {0x0, 0xfdfd, 0x0, 0x80, 0x200, 0xde6, 0x2, 0x7, 0xfffffffb, 0xa000, 0x7, r4, 0xffffffffffffffff, 0x8001, 0x9}}, {0x4, 0x9, 0x5, 0x200ffff, 'fuse\x00'}}]}, &(0x7f0000000680)={0xa0, 0x0, 0x3, {{0x1, 0x1, 0x3, 0xfffffffffffffffe, 0x3, 0x8, {0x2000000000, 0x1, 0xe05, 0x7ff, 0x382, 0x3, 0x12, 0x1, 0xd8f, 0x6000, 0x71d, 0xee00, r5, 0x9, 0x9}}}}, &(0x7f0000000740)={0x20, 0xffffffffffffffda, 0x7fff, {0x5, 0x4, 0xc0, 0x9}}, &(0x7f0000000780)={0x130, 0xffffffffffffffda, 0x401, {0xffffffffffffffff, 0x303e, 0x0, '\x00', {0x80, 0xe, 0xfffffffffffffff8, 0x4f0, r4, r5, 0x8000, '\x00', 0x0, 0x6, 0x7, 0x70, {0x401, 0x3fe000}, {0x8, 0x8}, {0x1000, 0x7fffffff}, {0x62}, 0x8, 0xe, 0x2, 0x3}}}}) statx(0xffffffffffffffff, &(0x7f0000000b80)='./file0\x00', 0x800, 0x10, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000500)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {0x1, 0x4}, [{0x2, 0x4}, {0x2, 0x6}, {}, {0x2, 0x1}, {0x2, 0x2}, {}], {0x4, 0x3}, [{0x8, 0x1}, {}, {0x8, 0x3, r5}, {0x8, 0x2, r7}, {0x8, 0x4, r8}], {0x10, 0x4}, {0x20, 0x3}}, 0x7c, 0x6) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r9, &(0x7f0000001300)={0x2020}, 0x2020) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000180)}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0028000002010a00380012800900010069706970000000002800028005000400eb000000060011004e2400000400130008000100", @ANYRES32=0x0, @ANYBLOB="0000000000000000fd21677476a6bad19a42f908cc493a3d73ec8c4eaea042b38e1013389ea965dc6f3813942f2a30801ed4b3db373cba873cf3113063423ac9b8985666de160025a8da437150a130c3716600f2f731af489740d76860a5ce5f59822c2bee1a47fcb5fea8c2a5cb6c473fd92cba7b39653b529ceb7a1ede03df31e23c767c86caca541ade575ee6d60751931caa01c4d7f314e741c96070bc7aada801d515ade2446f4aa3f0903296bd"], 0x58}}, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r11 = socket(0x40000000015, 0x5, 0x0) connect$inet(r11, &(0x7f0000000040)={0x2, 0x1, @loopback}, 0xb) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r12, 0x0, 0xfffffffffffffffb}, 0x18) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f00000002c0)={r12, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 25.821168176s ago: executing program 7 (id=5650): mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d000c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) write$vga_arbiter(r8, &(0x7f00000001c0)=@unlock_all, 0xb) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x3f, 0x0, 0x1000000f, 0x0, 0x0, 0xb49, 0x7, 0x8, 0xfffffeff, 0x3}, 0x0) ftruncate(r0, 0x100000001) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f00000000c0)={0xffffffffffffffff, 0x80000000, 0x0, 0x4000}) syz_io_uring_submit(0x0, 0x0, 0x0) r9 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r3, &(0x7f0000000280)={0x40000004}) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000002c0)={0xf0f046, 0xff80}) r10 = openat$binfmt_format(0xffffff9c, &(0x7f0000000380)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) writev(r10, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000540)="13", 0x1}], 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000002010000b7080000000010007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b103bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x10000001, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) 24.728655703s ago: executing program 7 (id=5651): unshare(0x2c020400) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000015000103000000000070000001"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/186, 0xba) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000000506010300000000000012000a000009050001"], 0x1c}}, 0x404c894) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x1, {0x2, 0x1, 0x3}, 0xfe}, 0x18) 24.596575689s ago: executing program 7 (id=5652): syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000280)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000280)}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(0xffffffffffffffff, &(0x7f0000000700)=""/115, 0x73, 0x5) (async) pread64(0xffffffffffffffff, &(0x7f0000000700)=""/115, 0x73, 0x5) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$kcm(0x29, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0xfffffffffffffffb) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006110040000000000a4050000ffe0f5059500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00') (async) syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000400000027bf0000e2"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000400000027bf0000e2"], 0x48) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) 24.424453767s ago: executing program 6 (id=5653): openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000900)={0x18, r2, 0x1000, 0x1003ffd}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'rose0\x00', 0x300}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'rose0\x00', 0x300}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000440)={'veth1\x00', 0x600}) 23.62061233s ago: executing program 6 (id=5654): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x0, 0x3, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0xf00, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 23.5092911s ago: executing program 5 (id=5655): r0 = socket$netlink(0x10, 0x3, 0xb) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES8=r2], 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) r5 = socket$netlink(0x10, 0x3, 0x10) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180), 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) (async, rerun: 32) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffbfffffff, 0x0, 0xfffffffffffffffd, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000000, 0x10, 0x80000000000000, 0x800, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x3, 0x2, 0x0, 0x0, 0xc0c0, 0x0, 0x0, 0x0, 0xed7f66f, 0x1, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x2, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) (async, rerun: 32) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) (async) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x2) fchdir(r7) rename(0x0, 0x0) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async) r8 = gettid() process_vm_readv(r8, &(0x7f0000001140)=[{0x0}], 0x1, &(0x7f00000011c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 23.304519985s ago: executing program 6 (id=5657): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x51) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffb) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x1000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES64=r1]) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r3, 0x0, &(0x7f00000000c0)) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f000001a4c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x4, 0x15244425, 0x9, 0x2, 0x0, 0x26, 0x0, 0x0, 0x80, 0x4}}, 0x50) close(r2) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002) bpf$PROG_LOAD(0x5, 0x0, 0xfe3a) syz_usb_disconnect(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) r6 = memfd_secret(0x0) sendmsg$NFT_MSG_GETRULE(r6, 0x0, 0x2008001) mlock2(&(0x7f0000337000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) 23.266609744s ago: executing program 5 (id=5658): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x10000, 0x40) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 23.223691082s ago: executing program 1 (id=5659): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000002c0)={0x0, 0x8}, 0x8) syz_open_dev$usbfs(&(0x7f0000000040), 0xba, 0x200) openat$cuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x100, 0x8000, 0x1, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x200, 0x800, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {0x0, 0x6}, {0x5, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="f3727711ac80b1c4", @ANYRES16=0x0, @ANYBLOB="02002bbd7000fedbdf254b0000000c00a6000600000000000000"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/netfilter\x00') fchdir(r4) (async) creat(&(0x7f0000001880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) connect$inet(r2, &(0x7f0000000340)={0x2, 0x6e22, @loopback}, 0x10) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000440)={'\x00', 0x3, 0xab6, 0x2, 0xb6, 0xffffffff9ae61f24, 0xffffffffffffffff}) syz_open_procfs(r8, &(0x7f00000004c0)='mounts\x00') connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffeffffffffe, 0x1f0413ec}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb, 0x0, 0xffffffffffffffff, 0xffb9}, 0x48) syz_kvm_setup_cpu$x86(r5, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000100)="0f01de420f01c566baf80cb8e6967e84ef66bafc0c66b80c0066ef48b800000000000000000f23c80f21f835080030000f23f8c4037149bc2723000000540f00d3d811b9800000c00f3235000400000f30490fc71ff20f08", 0x58}], 0x1, 0x4, &(0x7f00000002c0), 0x0) 23.056871467s ago: executing program 7 (id=5660): mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000a0000180000000002010000b7080000000010007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5a}, 0x94) 22.956745405s ago: executing program 1 (id=5661): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x1, {0x2, 0x1, 0x3}, 0xfe}, 0x18) 22.907403424s ago: executing program 7 (id=5662): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad10102030109022400010000000009042902abda66830009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="4015070000200000000000c179"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$inet6(0xa, 0x2, 0x0) (async) openat$kvm(0xffffff9c, 0x0, 0x10141, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) clock_getres(0x3, &(0x7f00000001c0)) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc200000000000109022400"], 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) unshare(0x6020400) (async) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x19) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xffffffffffffffff) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 22.865107987s ago: executing program 1 (id=5663): syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x98240) socket$l2tp(0x2, 0x2, 0x73) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000005c0), 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x7, 0x0, 0x3}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) fsopen(&(0x7f00000003c0)='befs\x00', 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="aa", 0x1, 0xc800, &(0x7f00000002c0)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40000}, 0x1c) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000500)={0x2, 0x0, 0x6, 0x6, 0x2, 0x7, 0x2}) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002540)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x4}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[], 0x4c}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRESHEX=r9, @ANYBLOB="00012cbd7000fddbdf255e00000008000300", @ANYRES16=r2, @ANYBLOB="080026000200000800a100e43e9d4b050019010f00000008002700000000000500180112000000050019010900"/56], 0x54}, 0x1, 0x0, 0x0, 0x18880}, 0x40) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000000408000000000000020600024000050000050003008400000009000100736a7a31000000000900010073797a3000"/60], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 22.257357877s ago: executing program 6 (id=5664): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x36}, 0x20) r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000003c0)={0x9, {{0xa, 0x0, 0x3, @mcast1}}, {{0xa, 0x2, 0x6, @private1, 0xfffffff8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)={0x9, {{0xa, 0x40, 0x3, @mcast2, 0xf3}}}, 0x90) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b3300"/27, 0x1b}], 0x1}, 0x20000000) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00'}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x8028c003, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x2e}], 0x1}, 0x80) 22.182417699s ago: executing program 5 (id=5665): openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {0x9, 0x6, 0x9}, 0x5, [0x1, 0x404, 0x6, 0xfffffffb, 0x7, 0x7, 0x5, 0x5, 0x800, 0x4, 0x8ca6, 0x2, 0x10, 0x200, 0xb, 0x3, 0x2, 0x4, 0x6, 0x7, 0x4, 0x6, 0x7, 0x5, 0x101, 0x6, 0x401, 0x4, 0x15, 0x10000, 0x1ff, 0x0, 0x0, 0x6af, 0xc6, 0x1, 0x2800, 0x7, 0x9, 0x0, 0x80000001, 0x81, 0x5d89, 0x5, 0x2, 0x3, 0x699, 0x180, 0x7ffffffe, 0x6, 0xb5b5, 0x9, 0x2, 0xfff, 0x3, 0x5b, 0x7ff, 0x46aa, 0x3, 0x1, 0x3, 0x6, 0x100481b, 0x10001], [0x9, 0xffffffff, 0x5f8, 0x1, 0x2, 0x4ec, 0x400, 0xfffffff7, 0x1, 0x387, 0x3, 0xfffffffe, 0x8, 0x2, 0xffffffff, 0x0, 0x4, 0x6, 0x4, 0x7, 0x7, 0xe, 0x4, 0x9, 0x72ed, 0x4, 0xfff, 0x7865484d, 0x0, 0xe5, 0x0, 0x4, 0x8, 0x8, 0x0, 0x6, 0x6, 0x9, 0xffffffbb, 0x15b4, 0xffffffff, 0xa08, 0xcf, 0x0, 0x8001, 0x7fff, 0x1, 0xb7, 0x40, 0xc, 0x7f7f, 0x8, 0xfffffffd, 0x80000001, 0x1, 0x1, 0x5, 0x7, 0x0, 0x1ff, 0x1, 0x0, 0x1, 0x8], [0x10, 0x0, 0x4, 0x2, 0x8, 0x2, 0xfffff001, 0x3, 0x0, 0x7386, 0x2, 0x5, 0x80000001, 0x5fef, 0x2000d, 0xe, 0x3, 0x104, 0x100, 0x42c1, 0x3, 0x7ffe, 0x3, 0x7, 0x1, 0xa4, 0x1, 0xffffff00, 0xfffffff9, 0xd91, 0x46de873e, 0x3ff, 0x3, 0x1, 0xd1, 0x5, 0x3, 0x400, 0x10000, 0x7ff, 0x8, 0x3, 0x6, 0x6, 0x2, 0x8, 0x8, 0x4, 0x96d, 0x1, 0x7f, 0x5, 0x9, 0x200, 0x26d, 0x6, 0x400, 0x1ff, 0x3, 0x3, 0x2, 0x101, 0x1, 0x401], [0x19f3, 0x2, 0x147c, 0x9, 0x4, 0x2, 0x4429, 0xf, 0x2, 0x7, 0x100, 0x0, 0x41fd, 0x100, 0x10001, 0x4, 0x6, 0x7, 0x1000, 0x8, 0x6, 0x7f, 0x100, 0x5, 0xff, 0x8, 0x40, 0x5, 0x3, 0x7, 0xf00000, 0x3, 0x7, 0xfffffffd, 0x5, 0x7, 0x8, 0x3, 0x9f4d, 0x9, 0x5, 0x7fff, 0x3, 0x401, 0x11e9, 0x7fd, 0xc5, 0x4, 0x5, 0xb, 0xfffffff9, 0x0, 0x0, 0x7, 0x6, 0x8, 0x4, 0x3af, 0xdc, 0x8, 0x7ff, 0x4, 0x7, 0x9]}, 0x45c) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000640)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file7\x00', 0x0) linkat(0xffffffffffffffff, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/64, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='westwood\x00', 0x38) shutdown(r1, 0x1) r5 = gettid() r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x5, @private1, 0x594}], 0x1c) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000000)) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r7, 0xc0485630, &(0x7f0000000100)={0x1, "bb59e5a4a94522d3d3f206fed1bf7761d839ac1f26c31347f597973e01faad5d", 0x3, 0x7, 0x8, 0xc000c, 0x2}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 21.338231896s ago: executing program 1 (id=5666): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000ff3000/0xa000)=nil, 0xa000, 0x2000007, 0x11, r0, 0x0) futex(0xfffffffffffffffc, 0x5, 0x2, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) (async) bind$tipc(r1, 0x0, 0x0) (async) sigaltstack(0x0, 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000100)={0x1f}) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) 21.128451376s ago: executing program 1 (id=5667): syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x1, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x5, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xd, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x5, 0x2, 0x1, "f7b817716daef7e53fa4f998da1907309f97630a33ea3b6bd13c74c37001fd36", 0x35315241}) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.system.Security\x00', &(0x7f0000000200)=""/55, 0x37) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef00000000000000000800380001000400"], 0x78) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000ec0914000000020a0102000000000000000000000000140000001100010000000000000000000000000a"], 0x3c}, 0x1, 0x1200}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', r7, 0x7800, 0x7800, 0x0, 0xfffffffb, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x0, 0x0, 0x9, 0x4, 0x0, @remote, @multicast2}}}}) 19.826843858s ago: executing program 7 (id=5668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x80000001, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x1ff, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0xb, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x0, 0x0, 0x8, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x80000000, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0xfffffffc, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0x0, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x8}, {0x3, 0x8, 0x0, 0x6, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x0, 0x401}, {0x4, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x8001}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x5, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x6}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8004, 0x81, 0x5}, {0x4, 0x9, 0x5, 0x6, 0x5, 0x2}, {0x100, 0x4, 0x1000007, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0xb, 0x6, 0x1}, {0x7b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0x521, 0x7f, 0xd, 0x6, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fde, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8a, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0x6}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x1, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x5, 0x1ae2, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x4, 0x3}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x6, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0001, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7d, 0x5, 0x80000000, 0xfffffff9}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x10, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x3a, 0x2}, {0x74863fbb, 0x45, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x8}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0x0, 0xfffffff8, 0x5}, {0x80000000, 0xb07, 0x1, 0x18, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0x7, 0x0, 0x4, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb4a}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x8, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x40008}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x80000001, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2b, 0x1, 0x5, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x2, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1002, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xfffffffe}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x7, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x2, 0x80, 0x7, 0x5}, {0x9a, 0x5, 0x3, 0x0, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x1, 0x1}, {}, {0x4}, {}, {0x3}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x2}, {0x5}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x1, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {0x0, 0xfff2}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 19.744843111s ago: executing program 1 (id=5669): setitimer(0x2, &(0x7f0000000580)={{0x0, 0x2710}}, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101041, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000c00), 0x0}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000640)={0x30}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x2400c080) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000700)=ANY=[@ANYBLOB="12011003000000002526526656ab02820b563763e96f990bc0000102030109021b000101016000090400fa01070102080905010208005dff874af9837828b90470ec63d1085dd4532de9c22b6d6611b38d9f4f8af197604749a7d4b2af62efc7b7f0a54021f73e619cabac434d641b1a30a957a397922de0a5fdf55979310b6d3600fcb9aab1bce9c68489e2e28ee2344a11fccc541dada632d858fd2bc8023c2865434ef51d77e575474a3f5e29"], &(0x7f00000007c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x6, 0xfb, 0xc, 0x8, 0x8}, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000004"], 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x0, 0x0}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x480a}}, {0x85, &(0x7f0000000480)=@string={0x85, 0x3, "7d2c3cebe2ca769dcba40778bb9ac034472dee56cdc7f56998f02b5cfd6164898ac0d0c5067903c3515779705a8ad52317e0186d15c2d2539f6f30ddcecb5636566d5091e60867dc20f9a57bb11dd44ed53c106eb0a8f8ae00b751c9752670cd96e15c392a49736405bc56a5775144a9a65f7c940a1a7730ee74d58bae7c22fc31542b"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1801}}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) listen(0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0xb0, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x2, 0x1b, {0x9, 0x21, 0x101, 0x2e, 0x1, {0x22, 0x9cb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x4, 0x3}}}}}]}}]}}, 0x0) write$rfkill(r0, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 19.051700175s ago: executing program 6 (id=5670): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x70bd28, 0x0, {0x2, 0x18, 0x80, 0x0, 0x0, 0x3, 0xff, 0x0, 0x1000}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x38}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040), 0xff7a}], 0x1}}], 0x8000000000000df, 0x40080c1) shutdown(r4, 0x1) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x40000008) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r5) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000100)={0x30, r9, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) syz_io_uring_setup(0x71a4, &(0x7f0000000200)={0x0, 0x7e10, 0x100, 0x10000000, 0x3b6, 0x0, r3}, &(0x7f0000002000), &(0x7f0000000000)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r10, 0x401, 0x0) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 15.872517319s ago: executing program 6 (id=5671): mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbe0, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x24}) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x100, 0x6, 0xf, 0xa}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f0000000180)=ANY=[]}]}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r7, 0xc018480b, &(0x7f0000000040)={0x1, 0x200, 0x9, 0x8, 0x400, 0x5}) syz_usb_connect(0x0, 0x5a, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="32d33cd83c2d"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000002010000b7080000000010007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) 7.013896068s ago: executing program 45 (id=5665): openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {0x9, 0x6, 0x9}, 0x5, [0x1, 0x404, 0x6, 0xfffffffb, 0x7, 0x7, 0x5, 0x5, 0x800, 0x4, 0x8ca6, 0x2, 0x10, 0x200, 0xb, 0x3, 0x2, 0x4, 0x6, 0x7, 0x4, 0x6, 0x7, 0x5, 0x101, 0x6, 0x401, 0x4, 0x15, 0x10000, 0x1ff, 0x0, 0x0, 0x6af, 0xc6, 0x1, 0x2800, 0x7, 0x9, 0x0, 0x80000001, 0x81, 0x5d89, 0x5, 0x2, 0x3, 0x699, 0x180, 0x7ffffffe, 0x6, 0xb5b5, 0x9, 0x2, 0xfff, 0x3, 0x5b, 0x7ff, 0x46aa, 0x3, 0x1, 0x3, 0x6, 0x100481b, 0x10001], [0x9, 0xffffffff, 0x5f8, 0x1, 0x2, 0x4ec, 0x400, 0xfffffff7, 0x1, 0x387, 0x3, 0xfffffffe, 0x8, 0x2, 0xffffffff, 0x0, 0x4, 0x6, 0x4, 0x7, 0x7, 0xe, 0x4, 0x9, 0x72ed, 0x4, 0xfff, 0x7865484d, 0x0, 0xe5, 0x0, 0x4, 0x8, 0x8, 0x0, 0x6, 0x6, 0x9, 0xffffffbb, 0x15b4, 0xffffffff, 0xa08, 0xcf, 0x0, 0x8001, 0x7fff, 0x1, 0xb7, 0x40, 0xc, 0x7f7f, 0x8, 0xfffffffd, 0x80000001, 0x1, 0x1, 0x5, 0x7, 0x0, 0x1ff, 0x1, 0x0, 0x1, 0x8], [0x10, 0x0, 0x4, 0x2, 0x8, 0x2, 0xfffff001, 0x3, 0x0, 0x7386, 0x2, 0x5, 0x80000001, 0x5fef, 0x2000d, 0xe, 0x3, 0x104, 0x100, 0x42c1, 0x3, 0x7ffe, 0x3, 0x7, 0x1, 0xa4, 0x1, 0xffffff00, 0xfffffff9, 0xd91, 0x46de873e, 0x3ff, 0x3, 0x1, 0xd1, 0x5, 0x3, 0x400, 0x10000, 0x7ff, 0x8, 0x3, 0x6, 0x6, 0x2, 0x8, 0x8, 0x4, 0x96d, 0x1, 0x7f, 0x5, 0x9, 0x200, 0x26d, 0x6, 0x400, 0x1ff, 0x3, 0x3, 0x2, 0x101, 0x1, 0x401], [0x19f3, 0x2, 0x147c, 0x9, 0x4, 0x2, 0x4429, 0xf, 0x2, 0x7, 0x100, 0x0, 0x41fd, 0x100, 0x10001, 0x4, 0x6, 0x7, 0x1000, 0x8, 0x6, 0x7f, 0x100, 0x5, 0xff, 0x8, 0x40, 0x5, 0x3, 0x7, 0xf00000, 0x3, 0x7, 0xfffffffd, 0x5, 0x7, 0x8, 0x3, 0x9f4d, 0x9, 0x5, 0x7fff, 0x3, 0x401, 0x11e9, 0x7fd, 0xc5, 0x4, 0x5, 0xb, 0xfffffff9, 0x0, 0x0, 0x7, 0x6, 0x8, 0x4, 0x3af, 0xdc, 0x8, 0x7ff, 0x4, 0x7, 0x9]}, 0x45c) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000640)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file7\x00', 0x0) linkat(0xffffffffffffffff, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/64, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='westwood\x00', 0x38) shutdown(r1, 0x1) r5 = gettid() r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x5, @private1, 0x594}], 0x1c) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000000)) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r7, 0xc0485630, &(0x7f0000000100)={0x1, "bb59e5a4a94522d3d3f206fed1bf7761d839ac1f26c31347f597973e01faad5d", 0x3, 0x7, 0x8, 0xc000c, 0x2}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4.517502372s ago: executing program 46 (id=5668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x80000001, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x1ff, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0xb, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x0, 0x0, 0x8, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x80000000, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0xfffffffc, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0x0, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x8}, {0x3, 0x8, 0x0, 0x6, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x0, 0x401}, {0x4, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x8001}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x5, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x6}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8004, 0x81, 0x5}, {0x4, 0x9, 0x5, 0x6, 0x5, 0x2}, {0x100, 0x4, 0x1000007, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0xb, 0x6, 0x1}, {0x7b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0x521, 0x7f, 0xd, 0x6, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fde, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8a, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0x6}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x1, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x5, 0x1ae2, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x4, 0x3}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x6, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0001, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7d, 0x5, 0x80000000, 0xfffffff9}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x10, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x3a, 0x2}, {0x74863fbb, 0x45, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x8}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0x0, 0xfffffff8, 0x5}, {0x80000000, 0xb07, 0x1, 0x18, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0x7, 0x0, 0x4, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb4a}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x8, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x40008}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x80000001, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2b, 0x1, 0x5, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x2, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1002, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xfffffffe}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x7, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x2, 0x80, 0x7, 0x5}, {0x9a, 0x5, 0x3, 0x0, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x1, 0x1}, {}, {0x4}, {}, {0x3}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x2}, {0x5}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x1, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {0x0, 0xfff2}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 4.46792314s ago: executing program 47 (id=5669): setitimer(0x2, &(0x7f0000000580)={{0x0, 0x2710}}, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101041, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000c00), 0x0}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000640)={0x30}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x2400c080) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000700)=ANY=[@ANYBLOB="12011003000000002526526656ab02820b563763e96f990bc0000102030109021b000101016000090400fa01070102080905010208005dff874af9837828b90470ec63d1085dd4532de9c22b6d6611b38d9f4f8af197604749a7d4b2af62efc7b7f0a54021f73e619cabac434d641b1a30a957a397922de0a5fdf55979310b6d3600fcb9aab1bce9c68489e2e28ee2344a11fccc541dada632d858fd2bc8023c2865434ef51d77e575474a3f5e29"], &(0x7f00000007c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x6, 0xfb, 0xc, 0x8, 0x8}, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000004"], 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x0, 0x0}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x480a}}, {0x85, &(0x7f0000000480)=@string={0x85, 0x3, "7d2c3cebe2ca769dcba40778bb9ac034472dee56cdc7f56998f02b5cfd6164898ac0d0c5067903c3515779705a8ad52317e0186d15c2d2539f6f30ddcecb5636566d5091e60867dc20f9a57bb11dd44ed53c106eb0a8f8ae00b751c9752670cd96e15c392a49736405bc56a5775144a9a65f7c940a1a7730ee74d58bae7c22fc31542b"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1801}}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) listen(0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0xb0, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x2, 0x1b, {0x9, 0x21, 0x101, 0x2e, 0x1, {0x22, 0x9cb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x4, 0x3}}}}}]}}]}}, 0x0) write$rfkill(r0, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 0s ago: executing program 48 (id=5671): mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbe0, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x24}) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x100, 0x6, 0xf, 0xa}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f0000000180)=ANY=[]}]}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r7, 0xc018480b, &(0x7f0000000040)={0x1, 0x200, 0x9, 0x8, 0x400, 0x5}) syz_usb_connect(0x0, 0x5a, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="32d33cd83c2d"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000002010000b7080000000010007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) kernel console output (not intermixed with test programs): op2: partition table beyond EOD, truncated [ 1719.003893][T30818] bridge0: port 3(macsec1) entered blocking state [ 1719.014791][T30821] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1719.033732][T30818] bridge0: port 3(macsec1) entered disabled state [ 1719.108692][T30818] bridge0: left allmulticast mode [ 1719.127703][T30818] bridge0: left promiscuous mode [ 1719.811987][T30797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5127'. [ 1720.306090][T24339] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 1720.474564][T24339] usb 7-1: Using ep0 maxpacket: 32 [ 1720.506549][T24339] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1720.518412][T24339] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1720.563045][T24339] usb 7-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 1720.607155][T24339] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.633995][T24339] usb 7-1: config 0 descriptor?? [ 1721.179427][T24339] input: HID 054c:03d5 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:054C:03D5.0052/input/input119 [ 1721.234588][ T5829] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1721.268128][T29656] cdc_ncm 4-1:1.0: bind() failure [ 1721.281063][T29656] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1721.341643][T29656] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1721.363747][T29656] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 1721.394642][ T5829] usb 6-1: Using ep0 maxpacket: 16 [ 1721.403870][ T5829] usb 6-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 1721.457386][ T5829] usb 6-1: config 166 has 0 interfaces, different from the descriptor's value: 2 [ 1721.457397][T29656] usb 4-1: USB disconnect, device number 113 [ 1721.485761][ T5829] usb 6-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1721.547620][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.579501][T24339] sony 0003:054C:03D5.0052: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.6-1/input0 [ 1721.600135][ T5829] usb 6-1: Product: syz [ 1721.621428][ T5829] usb 6-1: Manufacturer: syz [ 1721.653100][ T5829] usb 6-1: SerialNumber: syz [ 1721.680791][T24339] usb 7-1: USB disconnect, device number 118 [ 1721.838926][T30856] fido_id[30856]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1721.878733][T30860] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1722.035029][T29656] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1722.126312][T30865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1722.174874][ T5829] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1722.203815][T30865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1722.224983][T29656] usb 4-1: device descriptor read/64, error -71 [ 1722.366489][ T5829] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.384964][ T5829] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1722.422068][ T5829] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1722.449905][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1722.510894][ T5829] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1722.524813][T29656] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1722.584770][ T5941] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 1722.664958][T29656] usb 4-1: device descriptor read/64, error -71 [ 1722.717575][T24422] udevd[24422]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1722.735939][ T5829] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1722.776178][ T5941] usb 7-1: config 0 has no interfaces? [ 1722.776564][T29656] usb usb4-port1: attempt power cycle [ 1722.790868][ T5941] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1722.802544][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.816456][ T5941] usb 7-1: Product: syz [ 1722.828463][ T5941] usb 7-1: Manufacturer: syz [ 1722.840211][ T5941] usb 7-1: SerialNumber: syz [ 1722.871027][ T5941] usb 7-1: config 0 descriptor?? [ 1723.257303][T29656] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1723.289736][T29656] usb 4-1: device descriptor read/8, error -71 [ 1723.544802][T29656] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1723.598156][T29656] usb 4-1: device descriptor read/8, error -71 [ 1723.715656][T29656] usb usb4-port1: unable to enumerate USB device [ 1723.962945][ T5829] usb 6-1: USB disconnect, device number 96 [ 1724.407164][T30894] usb usb9: usbfs: interface 0 claimed by hub while 'syz.7.5145' sets config #0 [ 1724.785385][ T5829] usb 2-1: USB disconnect, device number 57 [ 1725.054636][T24339] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1725.084706][T30910] usb usb8: usbfs: process 30910 (syz.1.5148) did not claim interface 0 before use [ 1725.291221][T24339] usb 4-1: Using ep0 maxpacket: 32 [ 1725.300724][T24339] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1725.312682][T24339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1725.329459][T24339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1725.343448][T24339] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1725.364395][T24339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.382407][T24339] usb 4-1: config 0 descriptor?? [ 1725.388935][T30903] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1725.402091][T24339] hub 4-1:0.0: USB hub found [ 1725.669490][T24339] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1725.685837][T24339] usbhid 4-1:0.0: can't add hid device: -71 [ 1725.692162][T24339] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1725.755684][T24339] usb 4-1: USB disconnect, device number 118 [ 1726.967090][ T5829] usb 7-1: USB disconnect, device number 119 [ 1727.407853][T30946] netlink: 'syz.6.5153': attribute type 13 has an invalid length. [ 1728.565054][T29663] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1728.747879][T29663] usb 4-1: Using ep0 maxpacket: 32 [ 1728.774315][T29663] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1728.816497][T29663] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1728.871495][T29663] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1728.931171][T29663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.968906][T29663] usb 4-1: config 0 descriptor?? [ 1729.134736][ T5941] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 1729.290322][ T5941] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1729.311863][ T5941] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1729.314596][ T30] audit: type=1800 audit(1751517223.258:2692): pid=30982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5164" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1729.331328][ T5941] usb 7-1: config 1 has no interface number 0 [ 1729.408864][ T5941] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1729.416373][T29663] magicmouse 0003:05AC:0265.0053: unknown main item tag 0x0 [ 1729.454969][ T5941] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1729.467582][T29663] magicmouse 0003:05AC:0265.0053: unknown main item tag 0x0 [ 1729.488641][T29663] magicmouse 0003:05AC:0265.0053: unknown main item tag 0x0 [ 1729.500599][ T5941] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1729.513483][T29663] magicmouse 0003:05AC:0265.0053: unknown main item tag 0x0 [ 1729.521757][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.521787][ T5941] usb 7-1: Product: syz [ 1729.521804][ T5941] usb 7-1: Manufacturer: syz [ 1729.521822][ T5941] usb 7-1: SerialNumber: syz [ 1729.630140][T29663] magicmouse 0003:05AC:0265.0053: unknown main item tag 0x0 [ 1729.637898][T29663] magicmouse 0003:05AC:0265.0053: unknown main item tag 0x0 [ 1729.649490][T29663] magicmouse 0003:05AC:0265.0053: unknown main item tag 0x0 [ 1729.684895][T29663] magicmouse 0003:05AC:0265.0053: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 1729.740964][T29663] magicmouse 0003:05AC:0265.0053: magicmouse input not registered [ 1729.769220][T29663] magicmouse 0003:05AC:0265.0053: probe with driver magicmouse failed with error -12 [ 1729.785154][ T5829] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 1729.821701][T29663] usb 4-1: USB disconnect, device number 119 [ 1729.875573][T30993] fido_id[30993]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1729.945214][ T5829] usb 2-1: device descriptor read/64, error -71 [ 1730.412864][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.419413][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.448013][ T5829] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 1730.584987][ T5829] usb 2-1: device descriptor read/64, error -71 [ 1730.706718][ T5829] usb usb2-port1: attempt power cycle [ 1730.742622][T31012] usb usb8: usbfs: process 31012 (syz.5.5170) did not claim interface 0 before use [ 1731.164821][T29663] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1731.174852][ T5829] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 1731.195487][ T5829] usb 2-1: device descriptor read/8, error -71 [ 1731.304688][T29663] usb 4-1: device descriptor read/64, error -71 [ 1731.468233][ T5829] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 1731.505588][ T5829] usb 2-1: device descriptor read/8, error -71 [ 1731.558504][T29663] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1731.615270][ T5829] usb usb2-port1: unable to enumerate USB device [ 1731.725293][T29663] usb 4-1: device descriptor read/64, error -71 [ 1731.845605][T29663] usb usb4-port1: attempt power cycle [ 1731.938999][ T5941] cdc_ncm 7-1:1.1: SET_NTB_FORMAT failed [ 1731.990616][ T5941] cdc_ncm 7-1:1.1: bind() failure [ 1732.049249][ T5941] usb 7-1: USB disconnect, device number 120 [ 1732.214609][T29663] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1732.256675][T29663] usb 4-1: device descriptor read/8, error -71 [ 1732.565113][T29663] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1732.595431][T29663] usb 4-1: device descriptor read/8, error -71 [ 1732.720813][T29663] usb usb4-port1: unable to enumerate USB device [ 1733.001233][ T30] audit: type=1326 audit(1751517226.948:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31047 comm="syz.1.5176" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f456c98e929 code=0x0 [ 1733.405019][T29663] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 1733.568010][T29663] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1733.597592][T29663] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.620810][T29663] usb 7-1: Product: syz [ 1733.625894][T29663] usb 7-1: Manufacturer: syz [ 1733.631803][T29663] usb 7-1: SerialNumber: syz [ 1733.643745][T29663] usb 7-1: config 0 descriptor?? [ 1733.655622][T29663] ch341 7-1:0.0: ch341-uart converter detected [ 1734.273158][T29663] usb 7-1: failed to send control message: -71 [ 1734.294709][T29663] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1734.321037][T31071] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5180'. [ 1734.330902][ T5829] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1734.354210][T29663] usb 7-1: USB disconnect, device number 121 [ 1734.386707][T29663] ch341 7-1:0.0: device disconnected [ 1734.533426][ T5829] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1734.552407][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.579153][ T5829] usb 4-1: Product: syz [ 1734.609474][ T5829] usb 4-1: Manufacturer: syz [ 1734.614198][ T5829] usb 4-1: SerialNumber: syz [ 1734.666227][ T5829] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1734.742087][ T5941] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1735.191642][T13238] usb 4-1: USB disconnect, device number 124 [ 1735.239767][T31101] ksmbd: Unknown IPC event: 3, ignore. [ 1735.280471][T31101] usb usb8: usbfs: process 31101 (syz.6.5186) did not claim interface 0 before use [ 1735.348539][ T5829] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1735.533082][ T5829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1735.544101][ T5829] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1735.560944][ T5829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1735.571402][ T5829] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1735.588857][ T5829] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1735.601850][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.611944][ T5829] usb 6-1: Product: syz [ 1735.620824][ T5829] usb 6-1: Manufacturer: syz [ 1735.627688][ T5829] usb 6-1: SerialNumber: syz [ 1735.646092][ T5829] usb 6-1: config 0 descriptor?? [ 1735.691305][ T5829] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 1735.845141][ T5941] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1735.852468][ T5941] ath9k_htc: Failed to initialize the device [ 1735.860616][T13238] usb 4-1: ath9k_htc: USB layer deinitialized [ 1735.889572][ T5829] scsi host1: usb-storage 6-1:0.0 [ 1735.949991][ T5829] usb 6-1: USB disconnect, device number 97 [ 1737.184599][T29656] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1737.301242][T31150] syzkaller1: entered promiscuous mode [ 1737.307063][T31150] syzkaller1: entered allmulticast mode [ 1737.365755][T29656] usb 6-1: Using ep0 maxpacket: 8 [ 1737.380365][T29656] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1737.560869][T29656] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 1737.657478][T29656] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.769174][T29656] usb 6-1: config 0 descriptor?? [ 1737.854543][ T5941] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1738.126084][ T5941] usb 4-1: Using ep0 maxpacket: 8 [ 1738.159882][ T5941] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1738.183797][ T5941] usb 4-1: config 0 has no interfaces? [ 1738.275256][T29656] corsair 0003:1B1C:1B09.0054: item fetching failed at offset 10/11 [ 1738.302432][T29656] corsair 0003:1B1C:1B09.0054: parse failed [ 1738.312099][T29656] corsair 0003:1B1C:1B09.0054: probe with driver corsair failed with error -22 [ 1738.325300][ T5941] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=37.a3 [ 1738.334765][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.342809][ T5941] usb 4-1: Product: syz [ 1738.353603][ T5941] usb 4-1: Manufacturer: syz [ 1738.359668][ T5941] usb 4-1: SerialNumber: syz [ 1738.385803][ T5941] usb 4-1: config 0 descriptor?? [ 1738.475544][T31143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1738.485840][T31143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1739.578184][T31182] input: syz0 as /devices/virtual/input/input120 [ 1739.873941][T29663] usb 6-1: USB disconnect, device number 98 [ 1740.354668][T29663] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1740.612477][T29663] usb 6-1: Using ep0 maxpacket: 32 [ 1740.621074][T29663] usb 6-1: config 2 has an invalid interface number: 157 but max is 0 [ 1740.634968][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1740.662781][T29663] usb 6-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 1740.695227][T29663] usb 6-1: config 2 has no interface number 1 [ 1740.701422][T29663] usb 6-1: too many endpoints for config 2 interface 0 altsetting 5: 142, using maximum allowed: 30 [ 1740.744569][T29663] usb 6-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 142 [ 1740.771003][T29663] usb 6-1: config 2 interface 0 has no altsetting 0 [ 1740.805254][T29663] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 1740.814383][T29663] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.850662][T29663] usb 6-1: Product: syz [ 1740.861982][T29663] usb 6-1: Manufacturer: syz [ 1740.871448][T29663] usb 6-1: SerialNumber: syz [ 1740.928737][T29663] imon 6-1:2.157: inconsistent driver matching [ 1740.944862][T29663] imon 6-1:2.157: unable to register, err -22 [ 1740.951042][T29663] imon 6-1:2.157: probe with driver imon failed with error -22 [ 1741.041415][T13238] usb 4-1: USB disconnect, device number 125 [ 1741.110684][T31188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1741.174890][T31188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1741.282326][T29663] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1741.321812][T29663] imon 6-1:2.0: unable to initialize intf0, err -19 [ 1741.343715][T29663] imon:imon_probe: failed to initialize context! [ 1741.372404][T29663] imon 6-1:2.0: unable to register, err -19 [ 1741.413333][T29663] usb 6-1: USB disconnect, device number 99 [ 1741.864216][T31231] input: syz0 as /devices/virtual/input/input121 [ 1741.885646][T29663] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1742.084581][T29663] usb 6-1: device descriptor read/64, error -71 [ 1742.354820][T29663] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1742.535446][T29663] usb 6-1: device descriptor read/64, error -71 [ 1742.571296][T31249] ksmbd: Unknown IPC event: 3, ignore. [ 1742.596307][T31249] usb usb8: usbfs: process 31249 (syz.6.5212) did not claim interface 0 before use [ 1742.647197][T29663] usb usb6-port1: attempt power cycle [ 1742.709702][T31250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1742.718314][T31250] batadv_slave_0: entered promiscuous mode [ 1743.024605][T29663] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1743.079099][T29663] usb 6-1: device descriptor read/8, error -71 [ 1743.205158][T10254] usb 4-1: new full-speed USB device number 126 using dummy_hcd [ 1743.324629][T29663] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1743.355985][T29663] usb 6-1: device descriptor read/8, error -71 [ 1743.394552][T10254] usb 4-1: device descriptor read/64, error -71 [ 1743.527853][T29663] usb usb6-port1: unable to enumerate USB device [ 1743.664590][T10254] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 1743.804680][T10254] usb 4-1: device descriptor read/64, error -71 [ 1743.986659][T10254] usb usb4-port1: attempt power cycle [ 1744.335536][T10254] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 1744.355056][T10254] usb 4-1: device descriptor read/8, error -71 [ 1744.615894][T10254] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1744.650203][T10254] usb 4-1: device descriptor read/8, error -71 [ 1744.768178][T10254] usb usb4-port1: unable to enumerate USB device [ 1745.316218][T31280] QAT: Device 127 not found [ 1746.490386][ T30] audit: type=1326 audit(1751517240.438:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31290 comm="syz.1.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456c98e929 code=0x7ff00000 [ 1746.582865][ T30] audit: type=1326 audit(1751517240.438:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31290 comm="syz.1.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456c98e929 code=0x7ff00000 [ 1746.623733][T31296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5223'. [ 1746.653606][ T30] audit: type=1326 audit(1751517240.438:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31290 comm="syz.1.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456c98e929 code=0x7ff00000 [ 1746.715763][ T30] audit: type=1326 audit(1751517240.438:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31290 comm="syz.1.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456c98e929 code=0x7ff00000 [ 1746.771635][ T30] audit: type=1326 audit(1751517240.438:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31290 comm="syz.1.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456c98e929 code=0x7ff00000 [ 1746.832248][ T30] audit: type=1326 audit(1751517240.438:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31290 comm="syz.1.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456c98e929 code=0x7ff00000 [ 1746.889846][ T30] audit: type=1326 audit(1751517240.438:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31290 comm="syz.1.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456c98e929 code=0x7ff00000 [ 1746.950896][ T30] audit: type=1326 audit(1751517240.438:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31290 comm="syz.1.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456c98e929 code=0x7ff00000 [ 1747.004889][ T30] audit: type=1326 audit(1751517240.438:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31290 comm="syz.1.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456c98e929 code=0x7ff00000 [ 1747.095214][ T30] audit: type=1326 audit(1751517240.438:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31290 comm="syz.1.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456c98e929 code=0x7ff00000 [ 1747.352872][T31322] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5231'. [ 1747.394844][T31321] x_tables: duplicate underflow at hook 2 [ 1747.514804][T31322] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1747.528475][T31322] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1747.537785][T31322] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1747.546681][T31322] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1747.556940][T31322] geneve2: entered promiscuous mode [ 1747.562270][T31322] geneve2: entered allmulticast mode [ 1747.814970][T31322] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1747.830971][T31337] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5236'. [ 1747.841643][T31322] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1747.854810][T31322] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1747.864077][T31322] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1748.024615][T13238] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 1748.151132][T31339] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1748.169052][T31339] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1748.179424][T31339] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1748.188657][T31339] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1748.197203][T13238] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1748.211157][T31339] geneve2: entered promiscuous mode [ 1748.212994][T13238] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1748.234666][T13238] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1748.244034][T13238] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.252513][T13238] usb 7-1: Product: syz [ 1748.268292][T13238] usb 7-1: Manufacturer: syz [ 1748.277072][T13238] usb 7-1: SerialNumber: syz [ 1748.337827][T31339] geneve2: entered allmulticast mode [ 1748.542671][T31339] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1748.572018][T31339] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1748.586631][T31339] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1748.600369][T31339] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1748.884625][T31336] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5237'. [ 1748.916473][T13238] cdc_ncm 7-1:1.0: bind() failure [ 1748.946291][T13238] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1748.955637][T13238] cdc_ncm 7-1:1.1: bind() failure [ 1748.972189][T13238] usb 7-1: USB disconnect, device number 122 [ 1750.076110][ T5829] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1750.191364][T10254] usb 6-1: new full-speed USB device number 104 using dummy_hcd [ 1750.254682][T13238] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1750.314332][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1750.344064][ T5829] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 1750.380976][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.389972][T10254] usb 6-1: not running at top speed; connect to a high speed hub [ 1750.407684][ T5829] usb 4-1: config 0 descriptor?? [ 1750.480500][T10254] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1750.495512][T10254] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1750.630002][T31385] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1750.636566][T31385] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1750.655006][T31385] vhci_hcd vhci_hcd.0: Device attached [ 1750.672107][T10254] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1750.763185][T10254] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1750.794825][T31409] vhci_hcd: connection closed [ 1750.802280][ T5829] usbhid 4-1:0.0: can't add hid device: -71 [ 1750.802723][ T12] vhci_hcd: stop threads [ 1750.824520][T10254] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.825932][ T5829] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1750.845056][T29656] vhci_hcd: vhci_device speed not set [ 1750.925358][T10254] usb 6-1: Product: syz [ 1750.937119][ T5829] usb 4-1: USB disconnect, device number 4 [ 1750.948860][T29656] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 1750.999871][T10254] usb 6-1: Manufacturer: syz [ 1751.012516][ T12] vhci_hcd: release socket [ 1751.025850][T10254] usb 6-1: SerialNumber: syz [ 1751.032201][ T12] vhci_hcd: disconnect device [ 1751.311732][T31376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1751.664875][T13238] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1751.827836][T13238] usb 2-1: Using ep0 maxpacket: 16 [ 1751.923877][T13238] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1751.940759][T13238] usb 2-1: New USB device found, idVendor=05ac, idProduct=abdf, bcdDevice=3d.49 [ 1751.951864][T13238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.960145][T13238] usb 2-1: Product: syz [ 1751.964734][T13238] usb 2-1: Manufacturer: syz [ 1751.969686][T13238] usb 2-1: SerialNumber: syz [ 1751.983470][T13238] usb 2-1: config 0 descriptor?? [ 1752.001519][T13238] ipheth 2-1:0.0: Unable to find endpoints [ 1753.064702][T13238] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 1753.234837][T13238] usb 7-1: Using ep0 maxpacket: 32 [ 1753.244963][T13238] usb 7-1: config 8 has an invalid interface number: 134 but max is 0 [ 1753.255500][T13238] usb 7-1: config 8 has no interface number 0 [ 1753.275203][T13238] usb 7-1: config 8 interface 134 has no altsetting 0 [ 1753.300577][T13238] usb 7-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice= 4.15 [ 1753.324332][T13238] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.346849][T13238] usb 7-1: Product: syz [ 1753.384120][T13238] usb 7-1: Manufacturer: syz [ 1753.396743][T13238] usb 7-1: SerialNumber: syz [ 1753.537148][T10254] usb 6-1: 0:2 : does not exist [ 1753.626088][T10254] usb 6-1: USB disconnect, device number 104 [ 1753.760622][T24422] udevd[24422]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1753.953663][T31444] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5261'. [ 1753.973980][T31444] loop6: detected capacity change from 0 to 7 [ 1753.981958][T31444] Dev loop6: unable to read RDB block 7 [ 1753.988085][T31444] loop6: unable to read partition table [ 1753.994060][T31444] loop6: partition table beyond EOD, truncated [ 1754.000694][T31444] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1754.247299][T31453] loop2: detected capacity change from 0 to 7 [ 1754.256478][T31453] Dev loop2: unable to read RDB block 7 [ 1754.262328][T31453] loop2: unable to read partition table [ 1754.269514][T31453] loop2: partition table beyond EOD, truncated [ 1754.284735][T31453] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1755.092853][T10254] usb 2-1: USB disconnect, device number 63 [ 1755.727836][T29663] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1755.872699][T31492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5275'. [ 1755.885242][T29663] usb 4-1: Using ep0 maxpacket: 16 [ 1755.888648][T13238] gspca_main: benq-2.14.0 probing 04a5:3035 [ 1755.892559][T29663] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1755.927924][T29663] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1755.943031][T13238] usb 7-1: USB disconnect, device number 123 [ 1755.961540][T29663] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1756.015536][T29663] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1756.055514][T29663] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.102540][T29663] usb 4-1: Product: syz [ 1756.115030][T29663] usb 4-1: Manufacturer: syz [ 1756.124624][T29663] usb 4-1: SerialNumber: syz [ 1756.144613][T29656] vhci_hcd: vhci_device speed not set [ 1756.948497][T31502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1756.959461][T31502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1758.264380][T29663] usb 4-1: 0:2 : does not exist [ 1758.284207][T29663] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 1758.423471][T29663] usb 4-1: USB disconnect, device number 5 [ 1758.477418][T24422] udevd[24422]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1758.513333][T31517] FAULT_INJECTION: forcing a failure. [ 1758.513333][T31517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1758.590970][T31517] CPU: 0 UID: 0 PID: 31517 Comm: syz.3.5281 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1758.591001][T31517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1758.591014][T31517] Call Trace: [ 1758.591024][T31517] [ 1758.591034][T31517] dump_stack_lvl+0x189/0x250 [ 1758.591071][T31517] ? __pfx____ratelimit+0x10/0x10 [ 1758.591102][T31517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1758.591133][T31517] ? __pfx__printk+0x10/0x10 [ 1758.591156][T31517] ? __might_fault+0xb0/0x130 [ 1758.591187][T31517] should_fail_ex+0x414/0x560 [ 1758.591218][T31517] _copy_from_user+0x2d/0xb0 [ 1758.591239][T31517] video_usercopy+0x354/0x14f0 [ 1758.591272][T31517] ? __pfx___video_do_ioctl+0x10/0x10 [ 1758.591293][T31517] ? __pfx_video_usercopy+0x10/0x10 [ 1758.591325][T31517] ? __fget_files+0x2a/0x420 [ 1758.591352][T31517] ? __fget_files+0x2a/0x420 [ 1758.591374][T31517] ? __fget_files+0x3a0/0x420 [ 1758.591400][T31517] v4l2_ioctl+0x18a/0x1e0 [ 1758.591420][T31517] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1758.591452][T31517] __se_sys_ioctl+0xf9/0x170 [ 1758.591491][T31517] do_syscall_64+0xfa/0x3b0 [ 1758.591520][T31517] ? lockdep_hardirqs_on+0x9c/0x150 [ 1758.591549][T31517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.591570][T31517] ? clear_bhb_loop+0x60/0xb0 [ 1758.591595][T31517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.591614][T31517] RIP: 0033:0x7f5cc638e929 [ 1758.591633][T31517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1758.591651][T31517] RSP: 002b:00007f5cc41f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1758.591673][T31517] RAX: ffffffffffffffda RBX: 00007f5cc65b5fa0 RCX: 00007f5cc638e929 [ 1758.591696][T31517] RDX: 0000200000001dc0 RSI: 00000000c02c563a RDI: 0000000000000003 [ 1758.591710][T31517] RBP: 00007f5cc41f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1758.591723][T31517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1758.591736][T31517] R13: 0000000000000000 R14: 00007f5cc65b5fa0 R15: 00007f5cc66dfa28 [ 1758.591766][T31517] [ 1758.801443][ C0] vkms_vblank_simulate: vblank timer overrun [ 1759.574563][T13238] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1759.611658][T31528] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5285'. [ 1759.629055][T31530] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5286'. [ 1759.714546][T13238] usb 4-1: device descriptor read/64, error -71 [ 1760.004727][T29663] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1760.014514][T13238] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1760.164795][T13238] usb 4-1: device descriptor read/64, error -71 [ 1760.167636][T29663] usb 6-1: Using ep0 maxpacket: 8 [ 1760.180658][T29663] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 1760.194231][T29663] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1760.208570][T29663] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1760.222160][T29663] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1760.235739][T29663] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.244168][T29663] usb 6-1: Product: syz [ 1760.252044][T29663] usb 6-1: Manufacturer: syz [ 1760.273805][T29663] usb 6-1: SerialNumber: syz [ 1760.287034][T13238] usb usb4-port1: attempt power cycle [ 1760.289373][T29663] usb 6-1: config 0 descriptor?? [ 1760.311863][T29663] streamzap 6-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 1760.510739][T29663] usb 6-1: USB disconnect, device number 105 [ 1760.664583][T13238] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1760.735217][T13238] usb 4-1: device descriptor read/8, error -71 [ 1760.963974][T31541] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5288'. [ 1761.014584][T13238] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1761.145027][T13238] usb 4-1: device descriptor read/8, error -71 [ 1761.264957][T13238] usb usb4-port1: unable to enumerate USB device [ 1761.613438][T31552] FAULT_INJECTION: forcing a failure. [ 1761.613438][T31552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1761.647368][T31552] CPU: 0 UID: 0 PID: 31552 Comm: syz.1.5293 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1761.647392][T31552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1761.647401][T31552] Call Trace: [ 1761.647408][T31552] [ 1761.647415][T31552] dump_stack_lvl+0x189/0x250 [ 1761.647443][T31552] ? __pfx____ratelimit+0x10/0x10 [ 1761.647465][T31552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1761.647488][T31552] ? __pfx__printk+0x10/0x10 [ 1761.647513][T31552] should_fail_ex+0x414/0x560 [ 1761.647535][T31552] _copy_to_user+0x31/0xb0 [ 1761.647551][T31552] simple_read_from_buffer+0xe1/0x170 [ 1761.647570][T31552] proc_fail_nth_read+0x1df/0x250 [ 1761.647590][T31552] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1761.647611][T31552] ? rw_verify_area+0x258/0x650 [ 1761.647632][T31552] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1761.647651][T31552] vfs_read+0x200/0x980 [ 1761.647677][T31552] ? __pfx___mutex_lock+0x10/0x10 [ 1761.647699][T31552] ? __pfx_vfs_read+0x10/0x10 [ 1761.647722][T31552] ? __fget_files+0x2a/0x420 [ 1761.647742][T31552] ? __fget_files+0x3a0/0x420 [ 1761.647757][T31552] ? __fget_files+0x2a/0x420 [ 1761.647779][T31552] ksys_read+0x145/0x250 [ 1761.647800][T31552] ? __fget_files+0x3a0/0x420 [ 1761.647817][T31552] ? __pfx_ksys_read+0x10/0x10 [ 1761.647843][T31552] ? do_syscall_64+0xbe/0x3b0 [ 1761.647868][T31552] do_syscall_64+0xfa/0x3b0 [ 1761.647888][T31552] ? lockdep_hardirqs_on+0x9c/0x150 [ 1761.647909][T31552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.647923][T31552] ? clear_bhb_loop+0x60/0xb0 [ 1761.647941][T31552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.647956][T31552] RIP: 0033:0x7f456c98d33c [ 1761.647969][T31552] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1761.647982][T31552] RSP: 002b:00007f456d8bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1761.647998][T31552] RAX: ffffffffffffffda RBX: 00007f456cbb5fa0 RCX: 00007f456c98d33c [ 1761.648009][T31552] RDX: 000000000000000f RSI: 00007f456d8bf0a0 RDI: 0000000000000004 [ 1761.648018][T31552] RBP: 00007f456d8bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1761.648028][T31552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1761.648037][T31552] R13: 0000000000000000 R14: 00007f456cbb5fa0 R15: 00007f456ccdfa28 [ 1761.648059][T31552] [ 1761.885893][ C0] vkms_vblank_simulate: vblank timer overrun [ 1762.205072][T31563] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1762.224943][T13238] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 1762.587896][T13238] usb 7-1: config 0 has no interfaces? [ 1762.607531][T31569] netlink: 252 bytes leftover after parsing attributes in process `syz.3.5297'. [ 1762.637213][T31570] ksmbd: Unknown IPC event: 3, ignore. [ 1762.658102][T31570] usb usb8: usbfs: process 31570 (syz.1.5295) did not claim interface 0 before use [ 1762.904648][T13238] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1762.913947][T13238] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.934526][T13238] usb 7-1: Product: syz [ 1762.941382][T13238] usb 7-1: Manufacturer: syz [ 1762.954530][T13238] usb 7-1: SerialNumber: syz [ 1763.048171][T31574] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5298'. [ 1763.199418][T13238] usb 7-1: config 0 descriptor?? [ 1766.224355][T29656] usb 7-1: USB disconnect, device number 124 [ 1766.260240][T31592] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5302'. [ 1766.326093][T31592] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1766.338832][T31592] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1766.348040][T31592] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1766.357724][T31592] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1766.367455][T31592] geneve2: entered promiscuous mode [ 1766.372879][T31592] geneve2: entered allmulticast mode [ 1766.434538][ T5829] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1766.454803][T31592] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1766.454865][T31592] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1766.454898][T31592] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1766.454949][T31592] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1766.603191][T31598] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5305'. [ 1766.834293][ T5829] usb 2-1: Using ep0 maxpacket: 8 [ 1766.837027][ T5829] usb 2-1: config 1 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1766.837063][ T5829] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1766.839452][ T5829] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 1766.839483][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.839507][ T5829] usb 2-1: Product: syz [ 1766.839524][ T5829] usb 2-1: Manufacturer: syz [ 1766.839541][ T5829] usb 2-1: SerialNumber: syz [ 1767.050726][ T5829] usbhid 2-1:1.0: can't add hid device: -71 [ 1767.050813][ T5829] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1767.052704][ T5829] usb 2-1: USB disconnect, device number 64 [ 1767.174302][T31600] x_tables: duplicate underflow at hook 4 [ 1767.714639][T29656] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1767.969256][T29656] usb 4-1: config 112 has an invalid interface number: 144 but max is 3 [ 1767.969291][T29656] usb 4-1: config 112 has an invalid descriptor of length 1, skipping remainder of the config [ 1767.969338][T29656] usb 4-1: config 112 has 1 interface, different from the descriptor's value: 4 [ 1767.969359][T29656] usb 4-1: config 112 has no interface number 0 [ 1767.969389][T29656] usb 4-1: config 112 interface 144 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1767.969409][T29656] usb 4-1: config 112 interface 144 has no altsetting 0 [ 1767.972716][T29656] usb 4-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=af.03 [ 1767.972740][T29656] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.972755][T29656] usb 4-1: Product: ìŽî¥‰à¦§ç ”뇣髴貃ⷃ㋰֒᫋⌉踱ê®é°»æ¢œæ«ˆä‘±é¡ï›“潯ꠌ䒋鄶å¶ï›˜ê›§á”ˆî“‰ïŠë¾ç¯‰á˜ï£±è–£é£€ï¬¬ß˜çˆáª›î­€é±›ÔŠë ¸à«¿ï¢—ꇥ┋å¤ê”•â€§å‡¥îˆ¢ç¤›Ì•é­ç…›ì¼½ä¿ìŒ¸ã½Œä²‘ꡫ㸵䜈狉뭕ᥢ醇ᛌ⦸텦췑뇡냖 [ 1767.972777][T29656] usb 4-1: Manufacturer: Ð [ 1767.972789][T29656] usb 4-1: SerialNumber: à°Š [ 1768.181498][T31604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1768.182081][T31604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1768.184560][T31604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1768.185025][T31604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1768.186694][T31604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1768.187122][T31604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1768.207388][T31604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1768.207823][T31604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1768.230255][T29656] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:112.144/input/input123 [ 1768.242236][ T5187] bcm5974 4-1:112.144: could not read from device [ 1768.250444][ T5187] bcm5974 4-1:112.144: could not read from device [ 1768.262307][T29656] usb 4-1: USB disconnect, device number 10 [ 1768.293662][ C0] vkms_vblank_simulate: vblank timer overrun [ 1769.440290][T31633] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5317'. [ 1769.723635][T31638] loop2: detected capacity change from 0 to 7 [ 1769.788123][T31638] loop2: [ 1769.826398][T31638] loop2: partition table partially beyond EOD, truncated [ 1770.792748][T31665] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1771.005685][T29663] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 1771.166312][T31674] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5328'. [ 1771.176835][T29663] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1771.188174][T29663] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1771.262836][T31676] loop2: detected capacity change from 0 to 7 [ 1771.269796][T29663] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1771.289191][T31676] loop2: [ 1771.292310][T31676] loop2: partition table partially beyond EOD, truncated [ 1771.301320][T29663] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1771.401598][T29663] usb 2-1: New USB device found, idVendor=0125, idProduct=a4a1, bcdDevice= 0.40 [ 1771.414670][T29663] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.448743][T29663] usb 2-1: Product: syz [ 1771.452978][T29663] usb 2-1: Manufacturer: syz [ 1771.504508][T29663] usb 2-1: SerialNumber: syz [ 1771.582474][T29663] cdc_ncm 2-1:1.0: skipping garbage [ 1772.112855][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 1772.112876][ T30] audit: type=1326 audit(1751517266.058:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31688 comm="syz.6.5334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6538e929 code=0x7ffc0000 [ 1772.159411][ T30] audit: type=1326 audit(1751517266.058:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31688 comm="syz.6.5334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f4e6538e929 code=0x7ffc0000 [ 1772.197414][ T30] audit: type=1326 audit(1751517266.058:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31688 comm="syz.6.5334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6538e929 code=0x7ffc0000 [ 1772.229582][ T30] audit: type=1326 audit(1751517266.058:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31688 comm="syz.6.5334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6538e929 code=0x7ffc0000 [ 1772.638294][T31670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5325'. [ 1773.140843][T31710] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1773.155866][T31710] team0: Port device batadv1 added [ 1773.162678][ T5829] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1773.306021][T31711] hub 9-0:1.0: USB hub found [ 1773.312908][T31711] hub 9-0:1.0: 1 port detected [ 1773.354549][ T5829] usb 4-1: Using ep0 maxpacket: 8 [ 1773.364311][ T5829] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1773.400059][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.415289][ T5829] usb 4-1: Product: syz [ 1773.423116][ T5829] usb 4-1: Manufacturer: syz [ 1773.432827][ T5829] usb 4-1: SerialNumber: syz [ 1773.464322][ T5829] usb 4-1: config 0 descriptor?? [ 1773.829202][ T5829] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1773.874339][ T5829] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1773.912851][ T5829] usb 4-1: USB disconnect, device number 11 [ 1774.442212][T29663] cdc_ncm 2-1:1.0: bind() failure [ 1774.450691][T29663] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1774.484678][T29663] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1774.588886][T29663] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 1774.701064][T29663] usb 2-1: USB disconnect, device number 65 [ 1776.410580][ T5829] usb 6-1: new low-speed USB device number 106 using dummy_hcd [ 1776.484716][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1776.575282][ T5829] usb 6-1: device descriptor read/64, error -71 [ 1776.824520][ T5829] usb 6-1: new low-speed USB device number 107 using dummy_hcd [ 1776.974940][ T5829] usb 6-1: device descriptor read/64, error -71 [ 1777.049134][T31758] syz_tun: entered allmulticast mode [ 1777.107074][ T5829] usb usb6-port1: attempt power cycle [ 1777.298790][T31764] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1777.383037][T31769] netlink: 'syz.1.5352': attribute type 4 has an invalid length. [ 1777.455319][ T5829] usb 6-1: new low-speed USB device number 108 using dummy_hcd [ 1777.487849][T31772] netlink: 'syz.1.5352': attribute type 4 has an invalid length. [ 1777.499154][ T5829] usb 6-1: device descriptor read/8, error -71 [ 1777.755050][ T5829] usb 6-1: new low-speed USB device number 109 using dummy_hcd [ 1777.776609][ T5829] usb 6-1: device descriptor read/8, error -71 [ 1777.885872][ T5829] usb usb6-port1: unable to enumerate USB device [ 1779.854540][ T5941] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1780.014550][ T5941] usb 6-1: Using ep0 maxpacket: 8 [ 1780.030795][ T5941] usb 6-1: config 0 has an invalid interface number: 155 but max is 1 [ 1780.040907][ T5941] usb 6-1: config 0 has an invalid interface number: 245 but max is 1 [ 1780.090733][ T5941] usb 6-1: config 0 has no interface number 0 [ 1780.186860][ T5941] usb 6-1: config 0 has no interface number 1 [ 1780.262326][ T5941] usb 6-1: config 0 interface 155 has no altsetting 0 [ 1780.294471][ T5941] usb 6-1: config 0 interface 245 has no altsetting 0 [ 1780.330223][ T5941] usb 6-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=b8.b6 [ 1780.393472][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1780.480823][ T5941] usb 6-1: config 0 descriptor?? [ 1780.709314][ T5941] usb 6-1: string descriptor 0 read error: -71 [ 1780.819893][ T5941] usb 6-1: USB disconnect, device number 110 [ 1781.474661][T29663] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1781.573546][T31820] ksmbd: Unknown IPC event: 3, ignore. [ 1781.610394][T31820] usb usb8: usbfs: process 31820 (syz.5.5370) did not claim interface 0 before use [ 1781.721753][T31822] ksmbd: Unknown IPC event: 3, ignore. [ 1781.739963][T31822] usb usb8: usbfs: process 31822 (syz.6.5369) did not claim interface 0 before use [ 1781.951261][T29663] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1781.963857][T29663] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.978127][T29663] usb 4-1: Product: syz [ 1781.989531][T29663] usb 4-1: Manufacturer: syz [ 1782.002285][T29663] usb 4-1: SerialNumber: syz [ 1782.057399][T29663] usb 4-1: config 0 descriptor?? [ 1782.362882][T29663] usb 4-1: f81604_write: reg: 105 data: 8a failed: -EPROTO [ 1782.376223][T29663] f81604 4-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 1782.529572][T29663] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 1782.546565][T29663] usb 4-1: USB disconnect, device number 12 [ 1783.734653][T13238] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1784.041527][T13238] usb 4-1: Using ep0 maxpacket: 16 [ 1784.084511][T13238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1784.115819][T13238] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1784.133198][T13238] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1784.159956][T13238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.200656][T13238] usb 4-1: config 0 descriptor?? [ 1784.724650][T13238] HID 045e:07da: Invalid code 65791 type 1 [ 1784.753916][T13238] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0055/input/input124 [ 1784.805062][T13238] microsoft 0003:045E:07DA.0055: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1784.975326][T31840] loop6: detected capacity change from 0 to 524287999 [ 1785.003588][T31835] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5374'. [ 1785.049350][T31835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1785.056854][T31835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1785.139808][T29656] usb 4-1: USB disconnect, device number 13 [ 1785.625186][T13238] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1785.805287][T13238] usb 6-1: Using ep0 maxpacket: 16 [ 1785.826858][T13238] usb 6-1: config 0 has an invalid interface number: 161 but max is 0 [ 1785.850894][T13238] usb 6-1: config 0 has no interface number 0 [ 1785.878563][T13238] usb 6-1: config 0 interface 161 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 1785.903731][T13238] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0102, bcdDevice=9a.fd [ 1785.918955][T13238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.957613][T13238] usb 6-1: Product: syz [ 1785.982445][T13238] usb 6-1: Manufacturer: syz [ 1785.991859][T13238] usb 6-1: SerialNumber: syz [ 1786.146336][T31858] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5379'. [ 1786.341676][T13238] usb 6-1: config 0 descriptor?? [ 1786.393263][T31845] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1786.407012][T13238] kvaser_usb 6-1:0.161: error -ENODEV: Cannot get usb endpoint(s) [ 1786.418984][T31862] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5381'. [ 1786.440673][T31862] netdevsim netdevsim7 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 1786.461934][T31862] netdevsim netdevsim7 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 1786.594879][T31862] netdevsim netdevsim7 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 1786.613639][T31862] netdevsim netdevsim7 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 1786.617292][T29656] usb 6-1: USB disconnect, device number 111 [ 1786.633822][T31862] geneve3: entered promiscuous mode [ 1786.668510][T31862] geneve3: entered allmulticast mode [ 1786.815239][T31862] netdevsim netdevsim7 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1786.834617][T31862] netdevsim netdevsim7 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1786.843841][T31862] netdevsim netdevsim7 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1786.853679][T31862] netdevsim netdevsim7 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1787.412775][T29656] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1787.507175][T31877] ksmbd: Unknown IPC event: 3, ignore. [ 1787.534596][T31877] usb usb8: usbfs: process 31877 (syz.7.5385) did not claim interface 0 before use [ 1787.585320][T31878] syz_tun: tun_net_xmit 42 [ 1788.504503][T29656] usb 4-1: Using ep0 maxpacket: 32 [ 1788.652272][T29656] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1788.674309][T31878] syz_tun: tun_net_xmit 42 [ 1788.679720][T31878] syz_tun: tun_net_xmit 42 [ 1788.684314][T29656] usb 4-1: config 0 has no interfaces? [ 1788.691398][T31878] syz_tun: tun_net_xmit 42 [ 1788.713675][T29656] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1788.741254][T31878] syz_tun: tun_net_xmit 42 [ 1788.764512][T29656] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.788563][T31876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5386'. [ 1788.803956][T29656] usb 4-1: config 0 descriptor?? [ 1788.824531][T31878] syz_tun: tun_net_xmit 42 [ 1789.039148][T31870] team0: Device gtp0 is of different type [ 1789.108535][T31889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1789.128263][T31889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1789.143491][T31889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1789.157216][T31889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1789.180821][T31889] loop2: detected capacity change from 0 to 7 [ 1789.197782][T31889] Dev loop2: unable to read RDB block 7 [ 1789.205913][T31889] loop2: AHDI p2 p3 [ 1789.214174][T31889] loop2: partition table partially beyond EOD, truncated [ 1789.243367][T31889] loop2: p3 start 335544320 is beyond EOD, truncated [ 1790.054726][ T5941] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1790.326113][ T5941] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 1790.346612][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1790.361739][T31911] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5392'. [ 1790.400904][ T5941] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1790.418022][T31911] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1790.430997][T31911] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1790.452372][T31911] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1790.463587][T31911] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1790.504618][ T5941] usb 2-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 1790.516547][T31911] geneve3: entered promiscuous mode [ 1790.524126][T31911] geneve3: entered allmulticast mode [ 1790.564169][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.593721][ T5941] usb 2-1: config 0 descriptor?? [ 1790.598946][T31911] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1790.598986][T31911] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1790.599030][T31911] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1790.632548][T31911] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1791.196286][T31918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1791.606388][T31922] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 1791.647270][ T30] audit: type=1326 audit(1751517285.568:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31921 comm="syz.6.5395" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e6538e929 code=0x0 [ 1791.864986][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.871948][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.883579][ T5941] usbhid 2-1:0.0: can't add hid device: -71 [ 1791.894567][ T5202] Dev loop2: unable to read RDB block 7 [ 1791.894598][ T5202] loop2: AHDI p2 p3 [ 1791.894626][ T5202] loop2: partition table partially beyond EOD, [ 1792.019367][ T5941] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1792.035522][ T5202] truncated [ 1792.038862][ T5202] loop2: p3 start 335544320 is beyond EOD, truncated [ 1792.110427][ T5829] usb 4-1: USB disconnect, device number 14 [ 1792.148740][ T5941] usb 2-1: USB disconnect, device number 66 [ 1792.256690][ T30] audit: type=1326 audit(1751517286.208:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31926 comm="syz.3.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc638e929 code=0x7ffc0000 [ 1792.279152][ C0] vkms_vblank_simulate: vblank timer overrun [ 1792.420662][ T30] audit: type=1326 audit(1751517286.208:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31926 comm="syz.3.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc638e929 code=0x7ffc0000 [ 1792.443253][ C0] vkms_vblank_simulate: vblank timer overrun [ 1792.456286][ T30] audit: type=1326 audit(1751517286.258:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31926 comm="syz.3.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f5cc638e929 code=0x7ffc0000 [ 1792.478748][ C0] vkms_vblank_simulate: vblank timer overrun [ 1792.580035][T31931] macvlan2: entered promiscuous mode [ 1792.591866][ T30] audit: type=1326 audit(1751517286.258:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31926 comm="syz.3.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc638e929 code=0x7ffc0000 [ 1792.614976][T31931] bridge0: entered promiscuous mode [ 1792.667285][T29656] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1792.848435][T29656] usb 6-1: config 0 has no interfaces? [ 1792.858133][T31936] loop6: detected capacity change from 0 to 524287999 [ 1792.936132][T29656] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1792.951767][T24422] buffer_io_error: 490 callbacks suppressed [ 1792.951784][T24422] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 1793.024709][ T5829] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1793.056626][T29656] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.157998][T29656] usb 6-1: Product: syz [ 1793.173079][T29656] usb 6-1: Manufacturer: syz [ 1793.184738][ T5829] usb 4-1: Using ep0 maxpacket: 16 [ 1793.193419][T29656] usb 6-1: SerialNumber: syz [ 1793.202441][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1793.220224][ T5829] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1793.230844][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.256148][T29656] usb 6-1: config 0 descriptor?? [ 1793.355674][ T5941] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1793.382418][ T5829] usb 4-1: Product: syz [ 1793.398707][ T5829] usb 4-1: Manufacturer: syz [ 1793.408797][ T5829] usb 4-1: SerialNumber: syz [ 1793.418026][ T5829] usb 4-1: config 0 descriptor?? [ 1793.485110][T31945] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5402'. [ 1793.496565][ T5829] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1793.529121][T31945] netdevsim netdevsim7 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 1793.538602][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 1793.543835][T31945] netdevsim netdevsim7 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 1793.553077][T31945] netdevsim netdevsim7 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 1793.562146][T31945] netdevsim netdevsim7 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 1793.571831][T31945] geneve3: entered promiscuous mode [ 1793.577506][T31945] geneve3: entered allmulticast mode [ 1793.587826][T31945] netdevsim netdevsim7 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1793.597127][T31945] netdevsim netdevsim7 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1793.606425][T31945] netdevsim netdevsim7 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1793.616231][T31945] netdevsim netdevsim7 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1793.685437][ T5941] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1793.699095][ T5829] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1793.706966][ T5941] usb 2-1: config 0 has no interface number 0 [ 1793.716122][ T5941] usb 2-1: too many endpoints for config 0 interface 41 altsetting 2: 171, using maximum allowed: 30 [ 1793.740308][ T5941] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1793.750872][ T5941] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1793.842223][ T5941] usb 2-1: config 0 interface 41 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 171 [ 1793.868156][ T5941] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1793.880266][ T5941] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1793.892313][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.991453][ T5941] usb 2-1: Product: syz [ 1793.996459][ T5941] usb 2-1: Manufacturer: syz [ 1794.001429][ T5941] usb 2-1: SerialNumber: syz [ 1794.034749][ T5941] usb 2-1: config 0 descriptor?? [ 1794.050297][T31941] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1794.058188][T31941] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1794.117982][ T5829] em28xx 4-1:0.0: chip ID is em2874 [ 1794.288612][T31941] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1794.374696][T31941] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1794.606967][T31941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1794.635197][T31941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1794.651711][T31941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1794.673416][T31941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1794.913407][ T5941] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22 [ 1794.968520][ T5829] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 1794.984650][ T5829] em28xx 4-1:0.0: board has no eeprom [ 1795.174750][ T5829] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1795.214367][ T5829] em28xx 4-1:0.0: dvb set to bulk mode. [ 1795.242278][T31959] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5408'. [ 1795.271119][ T5941] em28xx 4-1:0.0: Binding DVB extension [ 1795.290534][ T5829] usb 4-1: USB disconnect, device number 15 [ 1795.351755][ T5829] em28xx 4-1:0.0: Disconnecting em28xx [ 1795.451029][T31959] netdevsim netdevsim7 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 1795.462424][T31959] netdevsim netdevsim7 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 1795.472471][T31959] netdevsim netdevsim7 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 1795.482447][T31959] netdevsim netdevsim7 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 1795.493028][T31959] geneve3: entered promiscuous mode [ 1795.501297][T31959] geneve3: entered allmulticast mode [ 1795.542484][T31959] netdevsim netdevsim7 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1795.551762][T31959] netdevsim netdevsim7 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1795.561453][T31959] netdevsim netdevsim7 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1795.572238][T31959] netdevsim netdevsim7 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1795.619858][T10254] usb 6-1: USB disconnect, device number 112 [ 1795.623492][ T5941] em28xx 4-1:0.0: Registering input extension [ 1795.734571][ T5941] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 1795.741290][ T5941] Registered IR keymap rc-empty [ 1795.761486][ T5941] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1795.807247][ T5941] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input125 [ 1795.858772][ T5941] em28xx 4-1:0.0: Input extension successfully initialized [ 1795.878261][ T5829] em28xx 4-1:0.0: Closing input extension [ 1796.042900][ T5829] em28xx 4-1:0.0: Freeing device [ 1796.054798][T31972] batadv_slave_0: entered promiscuous mode [ 1796.101030][T31974] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5411'. [ 1796.126810][T31974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1796.223609][ T5941] usb 2-1: USB disconnect, device number 67 [ 1796.315704][T31974] batadv_slave_0 (unregistering): left promiscuous mode [ 1796.332518][T31974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1796.494591][ T5829] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1796.578747][ T7350] RDS/tcp: send to fe80::c on cp [0]returned -104, disconnecting and reconnecting [ 1796.765030][ T5829] usb 4-1: Using ep0 maxpacket: 16 [ 1796.801756][ T5829] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1796.830592][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.849933][ T5829] usb 4-1: Product: syz [ 1796.858388][ T5829] usb 4-1: Manufacturer: syz [ 1796.869465][ T5829] usb 4-1: SerialNumber: syz [ 1796.888051][ T5829] usb 4-1: config 0 descriptor?? [ 1796.914390][ T5829] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1797.235068][ T5829] gp8psk: usb in 128 operation failed. [ 1797.244717][ T5829] gp8psk: usb in 137 operation failed. [ 1797.250414][ T5829] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1797.283190][ T5829] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1797.307760][ T5829] usb 4-1: media controller created [ 1797.418983][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1797.593938][ T5829] gp8psk_fe: Frontend revision 1 attached [ 1797.624321][ T5829] usb 4-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 1797.650849][ T5829] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1797.852925][ T5829] gp8psk: usb in 138 operation failed. [ 1797.858682][ T5829] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1797.874006][ T5829] gp8psk: found Genpix USB device pID = 201 (hex) [ 1797.978974][ T5829] usb 4-1: USB disconnect, device number 16 [ 1798.262518][ T5829] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1798.304588][T10254] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 1798.461571][T10254] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1798.513308][T10254] usb 2-1: config 0 has no interfaces? [ 1798.544228][T10254] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1798.553853][T10254] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.566365][T10254] usb 2-1: config 0 descriptor?? [ 1798.636696][T32021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5425'. [ 1798.778769][T10254] usb 2-1: USB disconnect, device number 68 [ 1799.004522][ T5829] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1799.159395][ T5829] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1799.171168][ T5829] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1799.183450][ T5829] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1799.192859][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1799.207342][ T5829] usb 4-1: Product: syz [ 1799.212014][ T5829] usb 4-1: Manufacturer: syz [ 1799.220923][ T5829] usb 4-1: SerialNumber: syz [ 1799.235937][ T5829] usb 4-1: config 0 descriptor?? [ 1799.247123][ T5829] usb 4-1: selecting invalid altsetting 0 [ 1799.744732][T29656] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1799.915179][T29656] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1799.934972][T29656] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1799.944987][T29656] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.957229][T32041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1799.969767][T29656] usb 2-1: config 0 descriptor?? [ 1799.992936][T32041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1800.009847][T32041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1800.023058][T32041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1800.398648][T29656] lg-g15 0003:046D:C222.0056: unbalanced delimiter at end of report description [ 1800.420131][T29656] lg-g15 0003:046D:C222.0056: probe with driver lg-g15 failed with error -22 [ 1800.492471][T32046] loop2: detected capacity change from 0 to 7 [ 1800.506544][T32046] Dev loop2: unable to read RDB block 7 [ 1800.516610][T32046] loop2: unable to read partition table [ 1800.526144][T32046] loop2: partition table beyond EOD, truncated [ 1800.532468][T32046] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1800.598335][T32034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1800.637368][T32034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1800.730157][T29656] usb 2-1: USB disconnect, device number 69 [ 1801.539809][T32067] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5439'. [ 1801.692037][T32071] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5441'. [ 1802.270674][ T5829] usb 4-1: USB disconnect, device number 17 [ 1802.751866][T32090] bridge1: entered promiscuous mode [ 1802.882389][ T5829] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1803.206539][ T5829] usb 4-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 1803.216004][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1803.252869][ T5829] usb 4-1: config 0 descriptor?? [ 1803.261331][ T5829] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 1803.289872][ T5829] dvb-usb: bulk message failed: -22 (3/0) [ 1803.320307][ T5829] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1803.329913][ T5829] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 1803.338808][ T5829] usb 4-1: media controller created [ 1803.348343][ T5829] dvb-usb: bulk message failed: -22 (5/0) [ 1803.403086][ T5829] dvb-usb: MAC address reading failed. [ 1803.419072][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1803.475262][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 1803.498732][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 1803.515940][ T5829] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 1803.578497][ T5829] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input126 [ 1803.614748][ T5829] dvb-usb: schedule remote query interval to 100 msecs. [ 1803.626939][ T5829] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 1803.712935][ T5829] usb 4-1: USB disconnect, device number 18 [ 1803.734754][ T5941] dvb-usb: bulk message failed: -22 (2/0) [ 1803.740799][ T5941] dvb-usb: error while querying for an remote control event. [ 1803.904656][ T5829] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 1804.244036][T32106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1804.265931][T32106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1804.474981][ T5829] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1806.344769][ T5829] usb 2-1: device descriptor read/64, error -71 [ 1806.643734][ T5829] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1806.836788][T32137] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1806.860234][ T5941] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 1806.884890][ T5829] usb 2-1: Using ep0 maxpacket: 16 [ 1806.891969][ T5829] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1806.900436][ T5829] usb 2-1: config 1 has no interface number 0 [ 1806.911921][ T5829] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1806.943415][ T5829] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1806.970676][ T5829] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1807.009546][ T5829] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1807.022469][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.032623][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1807.052976][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1807.072078][ T5829] usb 2-1: Product: syz [ 1807.080983][ T5829] usb 2-1: Manufacturer: syz [ 1807.089649][ T5941] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1807.108797][ T5829] usb 2-1: SerialNumber: syz [ 1807.117710][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.131417][T32125] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1807.139299][T32125] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1807.196755][ T5941] usb 4-1: config 0 descriptor?? [ 1807.597329][T32125] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1807.653399][T32125] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1807.957054][ T5941] kone 0003:1E7D:2CED.0057: collection stack underflow [ 1807.990686][ T5941] kone 0003:1E7D:2CED.0057: item 0 4 0 12 parsing failed [ 1808.059445][ T5941] kone 0003:1E7D:2CED.0057: parse failed [ 1808.082970][ T5829] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1808.108773][ T5941] kone 0003:1E7D:2CED.0057: probe with driver kone failed with error -22 [ 1808.127895][ T5829] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1808.262888][ T5829] aqc111 2-1:1.105 eth13: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 1808.423365][ T5941] usb 2-1: USB disconnect, device number 71 [ 1808.455290][ T5941] aqc111 2-1:1.105 eth13: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1808.482519][ T30] audit: type=1326 audit(1751517302.428:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32148 comm="syz.7.5462" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c0f38e929 code=0x0 [ 1808.556054][ T5941] aqc111 2-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1808.565912][ T5941] aqc111 2-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1808.576158][ T5941] aqc111 2-1:1.105 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1808.789051][ T30] audit: type=1326 audit(1751517302.738:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32153 comm="syz.5.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6058e929 code=0x7fc00000 [ 1808.811623][ C0] vkms_vblank_simulate: vblank timer overrun [ 1809.107749][T29663] usb 6-1: new full-speed USB device number 113 using dummy_hcd [ 1809.152069][ T5941] usb 4-1: USB disconnect, device number 19 [ 1809.302817][T32166] ksmbd: Unknown IPC event: 3, ignore. [ 1809.561206][T29663] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1809.575075][T29663] usb 6-1: can't read configurations, error -71 [ 1809.913101][T32176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5471'. [ 1809.955775][T32176] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1809.964907][T32176] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1809.973763][T32176] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1809.982777][T32176] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1809.993981][T32176] geneve2: entered promiscuous mode [ 1809.999858][T32176] geneve2: entered allmulticast mode [ 1810.021898][T32176] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1810.035359][T32176] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1810.044712][T32176] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1810.054100][T32176] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1810.374732][T29656] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1810.537695][T29656] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1810.550680][T29656] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1810.559020][T32184] tipc: Enabled bearer , priority 0 [ 1810.568025][T32185] tipc: Enabling of bearer rejected, already enabled [ 1810.572126][T29656] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1810.577421][T32184] syzkaller0: entered promiscuous mode [ 1810.587814][T29656] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.591945][T32184] syzkaller0: entered allmulticast mode [ 1810.610894][T29656] usb 2-1: config 0 descriptor?? [ 1810.613385][T32185] tipc: Resetting bearer [ 1810.654703][T29663] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1810.804649][T29663] usb 6-1: Using ep0 maxpacket: 16 [ 1810.811862][T29663] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1810.820086][T29663] usb 6-1: config 0 has no interface number 0 [ 1810.826314][T29663] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1810.837624][T29663] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1810.849774][T29663] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1810.859268][T29663] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1810.864781][T13238] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1810.867498][T29663] usb 6-1: Product: syz [ 1810.879523][T29663] usb 6-1: SerialNumber: syz [ 1810.889827][T29663] usb 6-1: config 0 descriptor?? [ 1810.903504][T29656] usbhid 2-1:0.0: can't add hid device: -71 [ 1810.917204][T29663] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 1810.931331][T29656] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1810.942366][T29663] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input127 [ 1810.957090][T29656] usb 2-1: USB disconnect, device number 72 [ 1811.058540][T13238] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1811.086524][T13238] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1811.116807][T13238] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1811.141823][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1811.144506][T13238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1811.166461][T13238] usb 4-1: Product: syz [ 1811.170797][T13238] usb 4-1: Manufacturer: syz [ 1811.184769][T13238] usb 4-1: SerialNumber: syz [ 1811.205151][T13238] usb 4-1: config 0 descriptor?? [ 1811.235693][T13238] usb 4-1: selecting invalid altsetting 0 [ 1811.393691][ C1] cm109_urb_ctl_callback: 12 callbacks suppressed [ 1811.393719][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1811.411796][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1811.421344][T32185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1811.429931][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1811.438779][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1811.446075][T29656] usb 6-1: USB disconnect, device number 114 [ 1811.452306][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1811.452337][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1811.473697][T32185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1811.517749][T13238] usb 4-1: USB disconnect, device number 20 [ 1811.570261][T32183] tipc: Resetting bearer [ 1811.586152][T29656] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1811.862349][T32204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1811.897776][T32204] trusted_key: encrypted_key: insufficient parameters specified [ 1811.919665][T32204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1811.940929][T32183] tipc: Disabling bearer [ 1812.396133][T32215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5483'. [ 1812.824663][ T5941] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1812.826991][T32239] netlink: 'syz.5.5488': attribute type 4 has an invalid length. [ 1812.914908][T32241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5491'. [ 1813.028309][ T5941] usb 2-1: device descriptor read/64, error -71 [ 1813.204547][T29656] usb 6-1: new full-speed USB device number 115 using dummy_hcd [ 1813.421630][T29656] usb 6-1: config 150 has an invalid interface number: 204 but max is 1 [ 1813.430944][T29656] usb 6-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1813.441626][T29656] usb 6-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 1813.450936][T29656] usb 6-1: config 150 has no interface number 0 [ 1813.458111][T29656] usb 6-1: config 150 interface 204 has no altsetting 0 [ 1813.467965][T29656] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1813.474623][ T5941] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1813.478261][T29656] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.493488][T29656] usb 6-1: Product: syz [ 1813.501768][T29656] usb 6-1: Manufacturer: syz [ 1813.507085][T29656] usb 6-1: SerialNumber: syz [ 1813.715587][ T5941] usb 2-1: device descriptor read/64, error -71 [ 1813.845867][ T5941] usb usb2-port1: attempt power cycle [ 1814.195037][ T5941] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1814.265340][ T5941] usb 2-1: device descriptor read/8, error -71 [ 1814.679548][ T5941] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1814.690393][T32258] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1814.843592][ T5941] usb 2-1: device descriptor read/8, error -71 [ 1814.975128][ T5941] usb usb2-port1: unable to enumerate USB device [ 1815.217145][ T30] audit: type=1326 audit(1751517309.168:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32261 comm="syz.7.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0f38e929 code=0x7ffc0000 [ 1815.239726][ C0] vkms_vblank_simulate: vblank timer overrun [ 1815.253876][ T30] audit: type=1326 audit(1751517309.198:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32261 comm="syz.7.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0f38e929 code=0x7ffc0000 [ 1815.276491][ C0] vkms_vblank_simulate: vblank timer overrun [ 1815.292593][ T30] audit: type=1326 audit(1751517309.198:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32261 comm="syz.7.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9c0f38e929 code=0x7ffc0000 [ 1815.436168][T32268] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5495'. [ 1815.446360][T32268] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5495'. [ 1815.535732][ T30] audit: type=1326 audit(1751517309.198:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32261 comm="syz.7.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0f38e929 code=0x7ffc0000 [ 1815.558244][ C0] vkms_vblank_simulate: vblank timer overrun [ 1815.716849][ T30] audit: type=1326 audit(1751517309.198:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32261 comm="syz.7.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0f38e929 code=0x7ffc0000 [ 1815.739375][ C0] vkms_vblank_simulate: vblank timer overrun [ 1815.824692][ T30] audit: type=1326 audit(1751517309.198:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32261 comm="syz.7.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9c0f38e929 code=0x7ffc0000 [ 1815.987083][T29656] usb 6-1: USB disconnect, device number 115 [ 1816.004931][T32277] input: syz1 as /devices/virtual/input/input128 [ 1816.914542][T29656] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1817.126533][T29656] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1817.171241][T29656] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1817.239033][T29656] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1817.256564][T29656] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.275992][T29656] usb 4-1: config 0 descriptor?? [ 1817.464617][T10254] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1817.514957][T32270] Bluetooth: hci0: command 0x0406 tx timeout [ 1817.619525][T32305] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1817.665189][T10254] usb 2-1: Using ep0 maxpacket: 16 [ 1817.681630][T10254] usb 2-1: config 2 has an invalid interface number: 4 but max is 0 [ 1817.698866][T10254] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1817.731160][T29656] playstation 0003:054C:0DF2.0058: unknown main item tag 0x0 [ 1817.749206][T10254] usb 2-1: config 2 has no interface number 0 [ 1817.755529][T29656] playstation 0003:054C:0DF2.0058: unknown main item tag 0x0 [ 1817.773464][T10254] usb 2-1: config 2 interface 4 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1817.793452][T29656] playstation 0003:054C:0DF2.0058: unknown main item tag 0x0 [ 1817.801100][T29656] playstation 0003:054C:0DF2.0058: unknown main item tag 0x0 [ 1817.810007][T10254] usb 2-1: config 2 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1817.827409][T29656] playstation 0003:054C:0DF2.0058: unknown main item tag 0x0 [ 1817.841993][T10254] usb 2-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice=b2.da [ 1817.875013][T29656] playstation 0003:054C:0DF2.0058: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 1817.899301][T10254] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.917861][T10254] usb 2-1: Product: syz [ 1817.922120][T10254] usb 2-1: Manufacturer: syz [ 1817.959155][T10254] usb 2-1: SerialNumber: syz [ 1817.990938][T10254] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1818.053127][T10254] snd-usb-audio 2-1:2.4: probe with driver snd-usb-audio failed with error -2 [ 1818.099361][T24699] udevd[24699]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1818.407698][T29656] playstation 0003:054C:0DF2.0058: Failed to retrieve feature with reportID 5: -71 [ 1818.438800][T29656] playstation 0003:054C:0DF2.0058: Failed to retrieve DualSense calibration info: -71 [ 1818.464531][T32316] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5507'. [ 1818.476084][T29656] playstation 0003:054C:0DF2.0058: Failed to get calibration data from DualSense [ 1818.505540][T29656] playstation 0003:054C:0DF2.0058: Failed to create dualsense. [ 1818.526837][T29656] playstation 0003:054C:0DF2.0058: probe with driver playstation failed with error -71 [ 1818.548735][T29656] usb 4-1: USB disconnect, device number 21 [ 1818.641463][T32316] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1818.713289][T32316] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1818.726945][T32316] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1818.752285][T32316] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1818.776723][T32316] geneve2: entered promiscuous mode [ 1818.782574][T32316] geneve2: entered allmulticast mode [ 1819.049757][T32316] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1819.061251][T32316] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1819.122883][T32316] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1819.148964][T32316] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1819.527113][T29656] usb 2-1: USB disconnect, device number 77 [ 1819.956580][T32329] usb usb8: usbfs: process 32329 (syz.5.5511) did not claim interface 0 before use [ 1820.704716][T32334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5513'. [ 1821.871332][T32348] block device autoloading is deprecated and will be removed. [ 1821.920838][T32348] syz.1.5517: attempt to access beyond end of device [ 1821.920838][T32348] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1822.214497][ T5941] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1822.387930][ T5941] usb 2-1: Using ep0 maxpacket: 32 [ 1822.400491][ T5941] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1822.413132][ T5941] usb 2-1: config 0 has no interface number 0 [ 1822.433244][ T5941] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1822.481661][ T5941] usb 2-1: config 0 interface 2 has no altsetting 0 [ 1822.501789][ T5941] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1822.522680][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.566311][T13238] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1822.583287][ T5941] usb 2-1: Product: syz [ 1822.593740][ T5941] usb 2-1: Manufacturer: syz [ 1822.603873][ T5941] usb 2-1: SerialNumber: syz [ 1822.641918][ T5941] usb 2-1: config 0 descriptor?? [ 1822.744475][T13238] usb 4-1: Using ep0 maxpacket: 32 [ 1822.751604][T13238] usb 4-1: config 0 has no interfaces? [ 1822.760442][T13238] usb 4-1: New USB device found, idVendor=10c4, idProduct=85a7, bcdDevice=6e.e0 [ 1822.772799][T13238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.794514][T13238] usb 4-1: Product: syz [ 1822.803433][T13238] usb 4-1: Manufacturer: syz [ 1822.813571][T13238] usb 4-1: SerialNumber: syz [ 1822.836361][T13238] usb 4-1: config 0 descriptor?? [ 1823.471583][T10254] usb 4-1: USB disconnect, device number 22 [ 1823.622329][T32372] unknown channel width for channel at 909000KHz? [ 1823.644737][T13238] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1823.814523][T13238] usb 6-1: Using ep0 maxpacket: 8 [ 1823.822381][T13238] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1823.833118][T13238] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1823.843813][T13238] usb 6-1: config 1 has no interface number 1 [ 1823.850163][T13238] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1823.859797][T13238] usb 6-1: too many endpoints for config 1 interface 2 altsetting 255: 255, using maximum allowed: 30 [ 1823.871146][T13238] usb 6-1: config 1 interface 2 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1823.888638][T13238] usb 6-1: config 1 interface 2 has no altsetting 0 [ 1823.908442][T13238] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1823.920814][T13238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.929044][T13238] usb 6-1: Product: syz [ 1823.933362][T13238] usb 6-1: Manufacturer: syz [ 1823.939453][T13238] usb 6-1: SerialNumber: syz [ 1824.163343][T32367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1824.172712][T32367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1824.829547][T32398] usb usb8: usbfs: process 32398 (syz.3.5531) did not claim interface 0 before use [ 1824.899786][ T5941] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1824.952815][T13238] usb 6-1: 0:8 : does not exist [ 1824.963306][ T5941] usb 2-1: USB disconnect, device number 78 [ 1825.059999][T13238] usb 6-1: USB disconnect, device number 116 [ 1825.149427][T25197] udevd[25197]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1825.216353][T24699] udevd[24699]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1825.404547][ T5941] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1825.523976][T32270] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1825.557406][ T5941] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1825.589142][ T5941] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1825.618536][ T5941] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1825.629820][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.647252][ T5941] usb 2-1: Product: syz [ 1825.665563][ T5941] usb 2-1: Manufacturer: syz [ 1825.677061][ T5941] usb 2-1: SerialNumber: syz [ 1825.698952][ T5941] usb 2-1: config 0 descriptor?? [ 1825.723410][ T5941] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1825.753610][ T5941] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1825.766746][T13238] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1825.781457][ T5941] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1825.794286][ T5941] usb 2-1: media controller created [ 1825.820681][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1825.924601][T13238] usb 6-1: Using ep0 maxpacket: 16 [ 1825.932781][T13238] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 1825.944879][T13238] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1825.973652][ T5941] DVB: Unable to find symbol tda10046_attach() [ 1825.989685][ T5941] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1826.002516][T13238] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1826.016140][T13238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.024327][T13238] usb 6-1: Product: syz [ 1826.032322][T13238] usb 6-1: Manufacturer: syz [ 1826.038358][T13238] usb 6-1: SerialNumber: syz [ 1826.043161][ T5941] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1826.086104][T13238] usb 6-1: config 0 descriptor?? [ 1826.099047][T32411] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1826.113096][T13238] hub 6-1:0.0: bad descriptor, ignoring hub [ 1826.119787][T13238] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1826.135125][T13238] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input129 [ 1826.393218][T32418] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5534'. [ 1826.697004][ T5941] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1826.710076][ T5941] usb 2-1: USB disconnect, device number 79 [ 1827.363070][T32422] netlink: 'syz.1.5539': attribute type 8 has an invalid length. [ 1827.614648][T10254] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 1827.776594][T10254] usb 2-1: config 0 has an invalid interface number: 150 but max is 0 [ 1827.785114][T10254] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1827.795523][T10254] usb 2-1: config 0 has no interface number 0 [ 1827.803981][T10254] usb 2-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice= 8.b6 [ 1827.813507][T10254] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.821671][T10254] usb 2-1: Product: syz [ 1827.826215][T10254] usb 2-1: Manufacturer: syz [ 1827.830903][T10254] usb 2-1: SerialNumber: syz [ 1827.840121][T10254] usb 2-1: config 0 descriptor?? [ 1827.849329][T10254] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f [ 1827.974651][ T5941] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1828.134702][ T5941] usb 4-1: Using ep0 maxpacket: 16 [ 1828.146397][ T5941] usb 4-1: config 0 has no interfaces? [ 1828.159393][ T5941] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1828.168695][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.177474][ T5941] usb 4-1: Product: syz [ 1828.181720][ T5941] usb 4-1: Manufacturer: syz [ 1828.187629][ T5941] usb 4-1: SerialNumber: syz [ 1828.204623][ T5941] usb 4-1: config 0 descriptor?? [ 1828.364757][T10254] gspca_sn9c20x: Write register 1000 failed -110 [ 1828.371370][T10254] gspca_sn9c20x: Device initialization failed [ 1828.377669][T10254] gspca_sn9c20x 2-1:0.150: probe with driver gspca_sn9c20x failed with error -110 [ 1828.417582][T32430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1828.426889][T32430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1828.437794][ T5941] usb 4-1: USB disconnect, device number 23 [ 1828.598743][T10254] usb 2-1: USB disconnect, device number 80 [ 1828.754878][ T5941] usb 6-1: USB disconnect, device number 117 [ 1828.820709][T32437] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5543'. [ 1828.853228][T32437] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5543'. [ 1828.904542][T32437] netlink: 'syz.5.5543': attribute type 5 has an invalid length. [ 1828.912362][T32437] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5543'. [ 1828.945286][T13238] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1829.139631][T13238] usb 4-1: Using ep0 maxpacket: 16 [ 1829.170568][ T5941] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1829.202710][T13238] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 1829.217910][T13238] usb 4-1: config 0 has no interface number 0 [ 1829.224177][T13238] usb 4-1: config 0 interface 237 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1829.241409][T13238] usb 4-1: config 0 interface 237 has no altsetting 0 [ 1829.250810][T13238] usb 4-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice=2a.b3 [ 1829.265084][T13238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.273306][T13238] usb 4-1: Product: syz [ 1829.277896][T13238] usb 4-1: Manufacturer: syz [ 1829.282538][T13238] usb 4-1: SerialNumber: syz [ 1829.298218][T13238] usb 4-1: config 0 descriptor?? [ 1829.316418][T13238] em28xx 4-1:0.237: New device syz syz @ 480 Mbps (eb1a:e303, interface 237, class 237) [ 1829.329539][T13238] em28xx 4-1:0.237: Video interface 237 found: [ 1829.404511][ T5941] usb 6-1: Using ep0 maxpacket: 16 [ 1829.412159][ T5941] usb 6-1: config index 0 descriptor too short (expected 521, got 56) [ 1829.420819][ T5941] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1829.437585][ T5941] usb 6-1: config 0 has no interfaces? [ 1829.445678][ T5941] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1829.455675][ T5941] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1829.463787][ T5941] usb 6-1: Manufacturer: syz [ 1829.486059][ T5941] usb 6-1: config 0 descriptor?? [ 1829.696466][ T5941] usb 6-1: USB disconnect, device number 118 [ 1829.908458][T13238] em28xx 4-1:0.237: chip ID is em2710/2820 [ 1830.167346][T32460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5541'. [ 1830.282806][T13238] em28xx 4-1:0.237: reading from i2c device at 0xa0 failed (error=-5) [ 1830.293356][T13238] em28xx 4-1:0.237: board has no eeprom [ 1830.369789][T13238] em28xx 4-1:0.237: Identified as Kaiomy TVnPC U2 (card=63) [ 1830.378075][T13238] em28xx 4-1:0.237: analog set to bulk mode. [ 1830.392003][T28555] em28xx 4-1:0.237: Registering V4L2 extension [ 1830.422769][T13238] usb 4-1: USB disconnect, device number 24 [ 1830.449114][T32466] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20004 [ 1830.451261][T13238] em28xx 4-1:0.237: Disconnecting em28xx [ 1830.798543][T10254] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1830.945653][T28555] i2c i2c-3: Invalid 7-bit I2C address 0x00 [ 1831.080742][ T5941] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1831.101826][T10254] usb 6-1: config 0 has no interfaces? [ 1831.173552][T10254] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1831.210890][T10254] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.211830][T28555] tuner: 3-0061: Tuner -1 found with type(s) Radio TV. [ 1831.254730][ T5941] usb 2-1: device descriptor read/64, error -71 [ 1831.271288][T10254] usb 6-1: Product: syz [ 1831.287006][T10254] usb 6-1: Manufacturer: syz [ 1831.302426][T28555] DVB: Unable to find symbol xc2028_attach() [ 1831.309339][T10254] usb 6-1: SerialNumber: syz [ 1831.310015][T28555] tuner: 3-0061: Tuner has no way to set tv freq [ 1831.320445][T28555] em28xx 4-1:0.237: Config register raw data: 0xffffffed [ 1831.330345][T28555] em28xx 4-1:0.237: AC97 chip type couldn't be determined [ 1831.338030][T28555] em28xx 4-1:0.237: No AC97 audio processor [ 1831.344117][T28555] tuner: 3-0061: Tuner has no way to set tv freq [ 1831.345735][T10254] usb 6-1: config 0 descriptor?? [ 1831.418871][T28555] videodev: could not get a free minor [ 1831.431333][T28555] em28xx 4-1:0.237: can't register radio device [ 1831.445509][T28555] em28xx 4-1:0.237: V4L2 device video103 deregistered [ 1831.470703][T28555] em28xx 4-1:0.237: Registering input extension [ 1831.479926][T13238] em28xx 4-1:0.237: Closing input extension [ 1831.509180][T13238] em28xx 4-1:0.237: Freeing device [ 1831.525215][ T5941] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1831.684930][ T5941] usb 2-1: device descriptor read/64, error -71 [ 1831.804914][ T5941] usb usb2-port1: attempt power cycle [ 1831.854513][T13238] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1832.006436][T13238] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1832.016664][T13238] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1832.025619][T13238] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1832.037216][T13238] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1832.050128][T13238] usb 4-1: Product: syz [ 1832.054710][T13238] usb 4-1: Manufacturer: syz [ 1832.059455][T13238] usb 4-1: SerialNumber: syz [ 1832.067394][T13238] usb 4-1: config 0 descriptor?? [ 1832.078895][T13238] usb 4-1: selecting invalid altsetting 0 [ 1832.165764][ T5941] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1832.211089][ T5941] usb 2-1: device descriptor read/8, error -71 [ 1832.254438][ T30] audit: type=1326 audit(1751517326.198:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32484 comm="syz.6.5556" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e6538e929 code=0x0 [ 1832.276537][ C0] vkms_vblank_simulate: vblank timer overrun [ 1832.451678][T29656] usb 4-1: USB disconnect, device number 25 [ 1832.477045][ T5941] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1832.527832][ T5941] usb 2-1: device descriptor read/8, error -71 [ 1832.645277][ T5941] usb usb2-port1: unable to enumerate USB device [ 1832.656901][T32494] SET target dimension over the limit! [ 1833.319938][ T5941] usb 6-1: USB disconnect, device number 119 [ 1833.822397][T32515] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5563'. [ 1834.024719][T29656] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1834.148361][T32522] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5565'. [ 1834.985691][T32540] input: syz0 as /devices/virtual/input/input131 [ 1836.932562][T32563] loop2: detected capacity change from 0 to 7 [ 1836.969553][T24422] Dev loop2: unable to read RDB block 7 [ 1836.980934][T24422] loop2: unable to read partition table [ 1836.990066][T24422] loop2: partition table beyond EOD, truncated [ 1836.999672][T32563] Dev loop2: unable to read RDB block 7 [ 1837.005778][T32563] loop2: unable to read partition table [ 1837.013073][T32563] loop2: partition table beyond EOD, truncated [ 1837.019657][T32563] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1837.035867][T32270] Bluetooth: hci2: command 0x0406 tx timeout [ 1837.053202][T28555] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1837.078178][T28555] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1837.923570][T32576] ksmbd: Unknown IPC event: 3, ignore. [ 1837.990799][T32576] usb usb8: usbfs: process 32576 (syz.5.5574) did not claim interface 0 before use [ 1839.194596][T32270] Bluetooth: hci5: command 0x0406 tx timeout [ 1839.201376][T28555] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1839.242952][T28555] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 1839.248849][T29656] usb 4-1: device descriptor read/64, error -110 [ 1839.484704][T13238] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1839.564657][T29656] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1839.641411][T13238] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 1839.652062][T13238] usb 2-1: config 0 has no interface number 0 [ 1839.661367][T13238] usb 2-1: config 0 interface 47 altsetting 252 bulk endpoint 0xD has invalid maxpacket 8 [ 1839.674023][T13238] usb 2-1: config 0 interface 47 altsetting 252 bulk endpoint 0x1 has invalid maxpacket 8 [ 1839.684848][T13238] usb 2-1: config 0 interface 47 altsetting 252 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1839.694568][T29656] usb 4-1: device descriptor read/64, error -32 [ 1839.695993][T13238] usb 2-1: config 0 interface 47 has no altsetting 0 [ 1839.709045][T13238] usb 2-1: New USB device found, idVendor=7d15, idProduct=31b2, bcdDevice=57.4b [ 1839.718168][T13238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.734539][T13238] usb 2-1: config 0 descriptor?? [ 1839.741851][T32582] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1839.751154][T32582] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1839.765361][T13238] usb-storage 2-1:0.47: USB Mass Storage device detected [ 1839.805204][T29656] usb usb4-port1: attempt power cycle [ 1840.164508][T29656] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1840.207441][T29656] usb 4-1: device descriptor read/8, error -32 [ 1840.334694][T29656] raw-gadget.0 gadget.3: failed to queue suspend event [ 1840.349504][T29656] raw-gadget.0 gadget.3: failed to queue reset event [ 1840.444714][T29656] raw-gadget.0 gadget.3: failed to queue resume event [ 1840.514627][T29656] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1840.544731][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1840.551977][T29656] usb 4-1: device descriptor read/8, error -32 [ 1840.664592][T29656] raw-gadget.0 gadget.3: failed to queue suspend event [ 1840.680164][T29656] usb usb4-port1: unable to enumerate USB device [ 1840.951657][T32601] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5582'. [ 1841.204652][T29656] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1841.354476][T28555] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1841.354697][T32270] Bluetooth: hci3: command 0x0406 tx timeout [ 1841.360610][T28555] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1841.380624][T29656] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1841.393960][T29656] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1841.408061][T29656] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1841.565063][T29663] usb 2-1: USB disconnect, device number 86 [ 1841.595449][T29656] usb 6-1: Manufacturer: syz [ 1841.600132][T29656] usb 6-1: SerialNumber: syz [ 1841.931258][T29656] usbhid 6-1:36.0: couldn't find an input interrupt endpoint [ 1841.972713][T29656] usb 6-1: USB disconnect, device number 120 [ 1842.214570][T13238] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1842.364778][T13238] usb 2-1: Using ep0 maxpacket: 32 [ 1842.374099][T13238] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1842.383476][T13238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.391561][T13238] usb 2-1: Product: syz [ 1842.396699][T13238] usb 2-1: Manufacturer: syz [ 1842.401343][T13238] usb 2-1: SerialNumber: syz [ 1842.409691][T13238] usb 2-1: config 0 descriptor?? [ 1842.417712][T13238] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1843.514829][T32270] Bluetooth: hci4: command 0x0406 tx timeout [ 1843.514859][T28555] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1843.538562][T28555] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1843.878645][T32605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1843.893543][T32605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1844.017730][T32631] ksmbd: Unknown IPC event: 3, ignore. [ 1844.162613][T32632] usb usb8: usbfs: process 32632 (syz.5.5593) did not claim interface 0 before use [ 1844.188258][T13238] gspca_stk1135: reg_w 0xf err -110 [ 1844.194611][T13238] gspca_stk1135: serial bus timeout: status=0x00 [ 1844.211205][T13238] gspca_stk1135: Sensor write failed [ 1844.229717][T13238] gspca_stk1135: serial bus timeout: status=0x00 [ 1844.236867][T13238] gspca_stk1135: Sensor write failed [ 1844.243091][T13238] gspca_stk1135: serial bus timeout: status=0x00 [ 1844.250635][T13238] gspca_stk1135: Sensor read failed [ 1844.324295][T13238] gspca_stk1135: serial bus timeout: status=0x00 [ 1844.340185][T13238] gspca_stk1135: Sensor read failed [ 1844.349089][T13238] gspca_stk1135: Detected sensor type unknown (0x0) [ 1844.361018][T13238] gspca_stk1135: serial bus timeout: status=0x00 [ 1844.370216][T13238] gspca_stk1135: Sensor read failed [ 1844.378135][T13238] gspca_stk1135: serial bus timeout: status=0x00 [ 1844.391231][T13238] gspca_stk1135: Sensor read failed [ 1844.400671][T13238] gspca_stk1135: serial bus timeout: status=0x00 [ 1844.409863][T13238] gspca_stk1135: Sensor write failed [ 1844.434891][T13238] gspca_stk1135: serial bus timeout: status=0x00 [ 1844.446197][T13238] gspca_stk1135: Sensor write failed [ 1844.452185][T13238] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 1844.471051][T32638] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5596'. [ 1844.935513][T13238] usb 2-1: USB disconnect, device number 87 [ 1845.594673][T32270] Bluetooth: hci0: command 0x0406 tx timeout [ 1845.601555][T28555] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1845.623377][T28555] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1846.493138][T32655] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5602'. [ 1847.271567][T32669] snd_dummy snd_dummy.0: control 2:0:-129:syz0:1 is already present [ 1847.615139][ T5946] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1847.754851][ T5946] usb 2-1: device descriptor read/64, error -71 [ 1848.044997][ T5946] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1848.234712][ T5946] usb 2-1: device descriptor read/64, error -71 [ 1848.374900][ T5946] usb usb2-port1: attempt power cycle [ 1848.691909][ T30] audit: type=1800 audit(1751517342.638:2791): pid=32686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5615" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1848.734538][T29656] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1848.759401][ T5946] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1848.809293][ T5946] usb 2-1: device descriptor read/8, error -71 [ 1848.894547][T29656] usb 6-1: Using ep0 maxpacket: 8 [ 1848.917037][T29656] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1848.940064][T29656] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.964522][T29656] usb 6-1: Product: syz [ 1848.968771][T29656] usb 6-1: Manufacturer: syz [ 1848.973408][T29656] usb 6-1: SerialNumber: syz [ 1849.007768][T29656] usb 6-1: config 0 descriptor?? [ 1849.065936][ T5946] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1849.095287][ T5946] usb 2-1: device descriptor read/8, error -71 [ 1849.205949][ T5946] usb usb2-port1: unable to enumerate USB device [ 1849.220438][T29656] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1849.627267][T32683] fuse: Bad value for 'fd' [ 1849.634183][T32683] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 1850.625461][T32695] netlink: 'syz.7.5618': attribute type 1 has an invalid length. [ 1850.633300][T32695] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.5618'. [ 1850.664855][ T5946] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1850.826334][ T5946] usb 2-1: config 1 has an invalid descriptor of length 74, skipping remainder of the config [ 1850.836902][ T5946] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1850.848758][ T5946] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1850.864717][ T5946] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1850.872301][T29656] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1850.881963][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.889692][T29656] usb 6-1: USB disconnect, device number 121 [ 1850.971770][ T5946] usb 2-1: Product: syz [ 1850.983380][ T5946] usb 2-1: Manufacturer: syz [ 1850.993814][ T5946] usb 2-1: SerialNumber: syz [ 1851.013209][ T5946] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1851.023665][ T5946] cdc_ncm 2-1:1.0: bind() failure [ 1851.031791][T32700] ksmbd: Unknown IPC event: 3, ignore. [ 1851.073766][T32700] usb usb8: usbfs: process 32700 (syz.7.5619) did not claim interface 0 before use [ 1851.650145][T32705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1851.714851][T32705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1851.821184][T32707] loop6: detected capacity change from 0 to 524287999 [ 1851.846642][T24422] Buffer I/O error on dev loop6, logical block 0, async page read [ 1851.887541][T24422] Buffer I/O error on dev loop6, logical block 0, async page read [ 1851.897667][T24422] Buffer I/O error on dev loop6, logical block 0, async page read [ 1851.911428][T24422] Buffer I/O error on dev loop6, logical block 0, async page read [ 1851.922736][T24422] Buffer I/O error on dev loop6, logical block 0, async page read [ 1851.931429][T24422] Buffer I/O error on dev loop6, logical block 0, async page read [ 1851.948176][T24422] Buffer I/O error on dev loop6, logical block 0, async page read [ 1851.978004][T24422] Buffer I/O error on dev loop6, logical block 0, async page read [ 1851.994048][T24422] ldm_validate_partition_table(): Disk read failed. [ 1852.003915][T24422] Buffer I/O error on dev loop6, logical block 0, async page read [ 1852.012482][T24422] Buffer I/O error on dev loop6, logical block 0, async page read [ 1852.021456][T24422] Dev loop6: unable to read RDB block 0 [ 1852.122063][T24422] loop6: unable to read partition table [ 1852.142838][T32707] ldm_validate_partition_table(): Disk read failed. [ 1852.150617][T32707] Dev loop6: unable to read RDB block 0 [ 1852.160645][T32707] loop6: unable to read partition table [ 1852.168627][T32707] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1852.489642][T29656] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1852.713431][T29656] usb 6-1: config 0 has no interfaces? [ 1852.731739][T29656] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1852.741118][T29656] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.749396][T29656] usb 6-1: Product: syz [ 1852.754131][T29656] usb 6-1: Manufacturer: syz [ 1852.760900][T29656] usb 6-1: SerialNumber: syz [ 1852.771434][T29656] usb 6-1: config 0 descriptor?? [ 1853.009617][T32716] input: syz1 as /devices/virtual/input/input132 [ 1853.145781][T32720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1853.170344][T32720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1853.291507][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.298083][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.337194][T29656] usb 2-1: USB disconnect, device number 92 [ 1853.541027][T32726] snd_dummy snd_dummy.0: control 2:0:-129:syz0:1 is already present [ 1853.864596][T29656] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1853.996088][T29656] usb 2-1: device descriptor read/64, error -71 [ 1854.250887][T29656] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1854.404642][T29656] usb 2-1: device descriptor read/64, error -71 [ 1854.515335][T29656] usb usb2-port1: attempt power cycle [ 1854.857337][T29656] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1854.897406][T29656] usb 2-1: device descriptor read/8, error -71 [ 1854.948098][T32741] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5626'. [ 1855.000715][T32741] netdevsim netdevsim7 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 1855.019792][T32741] netdevsim netdevsim7 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 1855.029189][T32741] netdevsim netdevsim7 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 1855.039894][T32741] netdevsim netdevsim7 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 1855.059976][T32741] geneve3: entered promiscuous mode [ 1855.066651][T32741] geneve3: entered allmulticast mode [ 1855.076354][T32745] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5627'. [ 1855.133734][T32741] netdevsim netdevsim7 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1855.149585][T32741] netdevsim netdevsim7 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1855.161270][T32741] netdevsim netdevsim7 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1855.171080][T32741] netdevsim netdevsim7 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1855.194887][T29656] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1855.225333][T29656] usb 2-1: device descriptor read/8, error -71 [ 1855.278713][T32746] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1855.292852][T32746] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1855.302116][T32746] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1855.311486][T32746] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1855.322837][T32746] geneve3: entered promiscuous mode [ 1855.329149][T32746] geneve3: entered allmulticast mode [ 1855.340642][T32746] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1855.350891][T32746] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1855.361437][T29656] usb usb2-port1: unable to enumerate USB device [ 1855.373584][T32746] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1855.398371][T32746] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1855.517276][ T5946] usb 6-1: USB disconnect, device number 122 [ 1855.860042][T32754] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5629'. [ 1855.968868][T32758] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5630'. [ 1856.065055][ T5946] usb 6-1: new full-speed USB device number 123 using dummy_hcd [ 1856.206219][ T5946] usb 6-1: device descriptor read/64, error -71 [ 1856.468937][ T5946] usb 6-1: new full-speed USB device number 124 using dummy_hcd [ 1856.542325][ T307] hsr0: entered promiscuous mode [ 1856.552188][ T307] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5636'. [ 1856.604547][ T307] hsr_slave_0: left promiscuous mode [ 1856.613458][ T307] hsr_slave_1: left promiscuous mode [ 1856.624498][ T5946] usb 6-1: device descriptor read/64, error -71 [ 1856.735038][ T5946] usb usb6-port1: attempt power cycle [ 1856.743781][ T307] hsr0 (unregistering): left promiscuous mode [ 1857.164557][ T5946] usb 6-1: new full-speed USB device number 125 using dummy_hcd [ 1857.185772][ T5946] usb 6-1: device descriptor read/8, error -71 [ 1857.465054][ T5946] usb 6-1: new full-speed USB device number 126 using dummy_hcd [ 1857.485420][ T5946] usb 6-1: device descriptor read/8, error -71 [ 1857.608652][ T5946] usb usb6-port1: unable to enumerate USB device [ 1858.394966][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1858.903110][ T322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5641'. [ 1859.274935][ T5946] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1859.457187][ T5946] usb 2-1: Using ep0 maxpacket: 16 [ 1859.512117][ T5946] usb 2-1: config 4 has an invalid interface number: 15 but max is 0 [ 1859.529580][ T5946] usb 2-1: config 4 has no interface number 0 [ 1859.537936][ T5946] usb 2-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1859.577614][ T5946] usb 2-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1859.610390][ T5946] usb 2-1: config 4 interface 15 has no altsetting 0 [ 1859.637725][ T5946] usb 2-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 1859.694509][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1859.738471][ T5946] usb 2-1: Product: syz [ 1859.769853][ T5946] usb 2-1: Manufacturer: syz [ 1859.804448][ T5946] usb 2-1: SerialNumber: syz [ 1859.859889][ T326] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1859.872126][ T326] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1859.918657][ T335] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5645'. [ 1860.167124][ T5946] ax88179_178a 2-1:4.15: probe with driver ax88179_178a failed with error -71 [ 1860.200321][ T5946] usb 2-1: USB disconnect, device number 97 [ 1861.842362][T13238] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1862.352707][T13238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1862.386089][T13238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1862.412655][T13238] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1862.475279][T13238] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1862.543724][T13238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1862.639218][T13238] usb 2-1: config 0 descriptor?? [ 1863.132809][T13238] plantronics 0003:047F:FFFF.0059: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1863.592757][ T362] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5651'. [ 1864.565191][ T5946] usb 2-1: reset high-speed USB device number 98 using dummy_hcd [ 1864.731329][ T5946] usb 2-1: device descriptor read/64, error -32 [ 1865.763505][T13238] usb 2-1: USB disconnect, device number 98 [ 1914.721246][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.727809][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.159659][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.167207][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1990.234827][ T31] INFO: task kworker/0:6:5941 blocked for more than 143 seconds. [ 1990.242628][ T31] Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 [ 1990.256524][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1990.265387][ T31] task:kworker/0:6 state:D stack:20248 pid:5941 tgid:5941 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1990.277612][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 1990.284424][ T31] Call Trace: [ 1990.287755][ T31] [ 1990.290729][ T31] __schedule+0x16f5/0x4d00 [ 1990.295364][ T31] ? schedule+0x165/0x360 [ 1990.299753][ T31] ? __pfx___schedule+0x10/0x10 [ 1990.304753][ T31] ? schedule+0x91/0x360 [ 1990.309057][ T31] schedule+0x165/0x360 [ 1990.313270][ T31] schedule_preempt_disabled+0x13/0x30 [ 1990.319023][ T31] __mutex_lock+0x724/0xe80 [ 1990.323571][ T31] ? look_up_lock_class+0x74/0x170 [ 1990.328845][ T31] ? __mutex_lock+0x51b/0xe80 [ 1990.333610][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 1990.339996][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1990.345137][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1990.350925][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1990.356844][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 1990.362973][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1990.368823][ T31] process_scheduled_works+0xade/0x17b0 [ 1990.374506][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1990.380596][ T31] worker_thread+0x8a0/0xda0 [ 1990.385365][ T31] ? __kthread_parkme+0x7b/0x200 [ 1990.390340][ T31] kthread+0x70e/0x8a0 [ 1990.394576][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1990.399734][ T31] ? __pfx_kthread+0x10/0x10 [ 1990.404429][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1990.409675][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1990.414984][ T31] ? __pfx_kthread+0x10/0x10 [ 1990.419592][ T31] ret_from_fork+0x3fc/0x770 [ 1990.424228][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1990.429470][ T31] ? __switch_to_asm+0x39/0x70 [ 1990.434268][ T31] ? __switch_to_asm+0x33/0x70 [ 1990.439196][ T31] ? __pfx_kthread+0x10/0x10 [ 1990.443825][ T31] ret_from_fork_asm+0x1a/0x30 [ 1990.448714][ T31] [ 1990.451804][ T31] INFO: task kworker/0:5:28555 blocked for more than 143 seconds. [ 1990.459702][ T31] Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 [ 1990.467409][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1990.476247][ T31] task:kworker/0:5 state:D stack:24184 pid:28555 tgid:28555 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1990.488387][ T31] Workqueue: events rfkill_op_handler [ 1990.493813][ T31] Call Trace: [ 1990.497376][ T31] [ 1990.500348][ T31] __schedule+0x16f5/0x4d00 [ 1990.504994][ T31] ? schedule+0x165/0x360 [ 1990.509362][ T31] ? __pfx___schedule+0x10/0x10 [ 1990.514243][ T31] ? schedule+0x91/0x360 [ 1990.518689][ T31] schedule+0x165/0x360 [ 1990.522900][ T31] schedule_preempt_disabled+0x13/0x30 [ 1990.528482][ T31] __mutex_lock+0x724/0xe80 [ 1990.533037][ T31] ? __lock_acquire+0xab9/0xd20 [ 1990.537992][ T31] ? __mutex_lock+0x51b/0xe80 [ 1990.542719][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 1990.548143][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1990.553218][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1990.558572][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1990.564604][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1990.570982][ T31] ? kobject_uevent_env+0x36b/0x8c0 [ 1990.576265][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1990.582034][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 1990.587246][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1990.593001][ T31] rfkill_set_block+0x1cf/0x440 [ 1990.598016][ T31] rfkill_epo+0x7e/0x180 [ 1990.602300][ T31] rfkill_op_handler+0x84/0x240 [ 1990.607246][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1990.613005][ T31] process_scheduled_works+0xade/0x17b0 [ 1990.618691][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1990.624815][ T31] worker_thread+0x8a0/0xda0 [ 1990.629469][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1990.635993][ T31] ? __kthread_parkme+0x7b/0x200 [ 1990.640969][ T31] kthread+0x70e/0x8a0 [ 1990.645150][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1990.650316][ T31] ? __pfx_kthread+0x10/0x10 [ 1990.655068][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1990.660312][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1990.665649][ T31] ? __pfx_kthread+0x10/0x10 [ 1990.670374][ T31] ret_from_fork+0x3fc/0x770 [ 1990.675117][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1990.680377][ T31] ? __switch_to_asm+0x39/0x70 [ 1990.685274][ T31] ? __switch_to_asm+0x33/0x70 [ 1990.690075][ T31] ? __pfx_kthread+0x10/0x10 [ 1990.694943][ T31] ret_from_fork_asm+0x1a/0x30 [ 1990.699852][ T31] [ 1990.702900][ T31] INFO: task syz.3.5562:32503 blocked for more than 143 seconds. [ 1990.710725][ T31] Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 [ 1990.718559][ T31] Blocked by coredump. [ 1990.723184][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1990.731943][ T31] task:syz.3.5562 state:D stack:25416 pid:32503 tgid:32502 ppid:24420 task_flags:0x40044c flags:0x00004006 [ 1990.743947][ T31] Call Trace: [ 1990.747334][ T31] [ 1990.750297][ T31] __schedule+0x16f5/0x4d00 [ 1990.754914][ T31] ? schedule+0x165/0x360 [ 1990.759298][ T31] ? __pfx___schedule+0x10/0x10 [ 1990.764210][ T31] ? schedule+0x91/0x360 [ 1990.768581][ T31] schedule+0x165/0x360 [ 1990.772785][ T31] schedule_preempt_disabled+0x13/0x30 [ 1990.778363][ T31] __mutex_lock+0x724/0xe80 [ 1990.782936][ T31] ? kobject_put+0x43f/0x480 [ 1990.787681][ T31] ? __mutex_lock+0x51b/0xe80 [ 1990.792408][ T31] ? rfkill_unregister+0xc8/0x220 [ 1990.797530][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1990.802608][ T31] ? __pfx_device_del+0x10/0x10 [ 1990.807636][ T31] rfkill_unregister+0xc8/0x220 [ 1990.812551][ T31] nfc_unregister_device+0x96/0x2a0 [ 1990.817876][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1990.823665][ T31] virtual_ncidev_close+0x56/0x90 [ 1990.828808][ T31] __fput+0x449/0xa70 [ 1990.832841][ T31] task_work_run+0x1d1/0x260 [ 1990.837551][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1990.842737][ T31] do_exit+0x6b5/0x22e0 [ 1990.847182][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1990.852246][ T31] ? __pfx_do_exit+0x10/0x10 [ 1990.856951][ T31] do_group_exit+0x21c/0x2d0 [ 1990.861589][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1990.866903][ T31] get_signal+0x1286/0x1340 [ 1990.871467][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 1990.877240][ T31] ? __pfx___schedule+0x10/0x10 [ 1990.882147][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1990.888420][ T31] ? schedule+0x16f/0x360 [ 1990.892771][ T31] exit_to_user_mode_loop+0x75/0x110 [ 1990.898153][ T31] do_syscall_64+0x2bd/0x3b0 [ 1990.902796][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1990.908125][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1990.914238][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1990.919014][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1990.925019][ T31] RIP: 0033:0x7f5cc638e929 [ 1990.929465][ T31] RSP: 002b:00007f5cc41f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1990.937991][ T31] RAX: fffffffffffffe00 RBX: 00007f5cc65b5fa0 RCX: 00007f5cc638e929 [ 1990.946039][ T31] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1990.954018][ T31] RBP: 00007f5cc6410b39 R08: 0000000000000000 R09: 0000000000000000 [ 1990.962174][ T31] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1990.970249][ T31] R13: 0000000000000000 R14: 00007f5cc65b5fa0 R15: 00007f5cc66dfa28 [ 1990.978305][ T31] [ 1990.981364][ T31] [ 1990.981364][ T31] Showing all locks held in the system: [ 1990.989234][ T31] 1 lock held by khungtaskd/31: [ 1990.994116][ T31] #0: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1991.004112][ T31] 2 locks held by getty/5594: [ 1991.008883][ T31] #0: ffff8880342820a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1991.018771][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1991.029035][ T31] 3 locks held by kworker/0:6/5941: [ 1991.034261][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1991.045417][ T31] #1: ffffc9000487fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1991.059146][ T31] #2: ffffffff8f7ea988 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1991.070632][ T31] 5 locks held by kworker/u8:1/23793: [ 1991.076121][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1991.086236][ T31] #1: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 1991.097772][ T31] #2: ffffffff99ceede0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 1991.108213][ T31] #3: ffffffff99d22950 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 1991.118625][ T31] #4: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390 [ 1991.128468][ T31] 1 lock held by syz-executor/24420: [ 1991.133784][ T31] #0: ffffffff8f7ea988 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1991.144009][ T31] 4 locks held by kworker/0:5/28555: [ 1991.149375][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1991.160490][ T31] #1: ffffc9000bd77bc0 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1991.171712][ T31] #2: ffffffff8f7ea988 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x4c/0x180 [ 1991.181321][ T31] #3: ffff88807ea50100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 1991.191145][ T31] 2 locks held by syz.3.5562/32503: [ 1991.196473][ T31] #0: ffff88807ea50100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 1991.206386][ T31] #1: ffffffff8f7ea988 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1991.216666][ T31] 2 locks held by syz-executor/32684: [ 1991.222068][ T31] #0: ffff888021391918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 1991.232178][ T31] #1: ffffffff8f7ea988 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1991.242249][ T31] 3 locks held by syz.5.5665/404: [ 1991.247387][ T31] #0: ffffffff8e9c2108 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1991.255942][ T31] #1: ffff8880591bc100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 1991.265663][ T31] #2: ffffffff8f7ea988 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1991.278379][ T31] 1 lock held by syz.7.5668/422: [ 1991.283355][ T31] #0: ffffffff8e9c2108 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1991.292377][ T31] 1 lock held by syz.1.5669/424: [ 1991.297576][ T31] #0: ffffffff8e9c2108 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1991.306345][ T31] 1 lock held by syz.1.5669/428: [ 1991.311322][ T31] #0: ffffffff8e9c2108 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1991.320167][ T31] 1 lock held by syz.6.5671/439: [ 1991.325364][ T31] #0: ffffffff8e9c2108 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1991.333890][ T31] 1 lock held by syz.6.5671/441: [ 1991.338911][ T31] #0: ffffffff8e9c2108 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1991.347549][ T31] 1 lock held by syz-executor/452: [ 1991.352694][ T31] #0: ffffffff8e9c2108 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1991.361431][ T31] 1 lock held by syz-executor/453: [ 1991.366623][ T31] #0: ffffffff8e9c2108 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1991.375190][ T31] 1 lock held by syz-executor/454: [ 1991.380333][ T31] #0: ffffffff8e9c2108 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1991.389004][ T31] 1 lock held by syz-executor/456: [ 1991.394142][ T31] #0: ffffffff8e9c2108 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1991.402737][ T31] [ 1991.405159][ T31] ============================================= [ 1991.405159][ T31] [ 1991.413609][ T31] NMI backtrace for cpu 1 [ 1991.413622][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1991.413640][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1991.413649][ T31] Call Trace: [ 1991.413656][ T31] [ 1991.413663][ T31] dump_stack_lvl+0x189/0x250 [ 1991.413689][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1991.413708][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1991.413732][ T31] ? __pfx__printk+0x10/0x10 [ 1991.413757][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1991.413777][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1991.413793][ T31] ? _printk+0xcf/0x120 [ 1991.413812][ T31] ? __pfx__printk+0x10/0x10 [ 1991.413829][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1991.413850][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1991.413870][ T31] watchdog+0xfee/0x1030 [ 1991.413891][ T31] ? watchdog+0x1de/0x1030 [ 1991.413916][ T31] kthread+0x70e/0x8a0 [ 1991.413935][ T31] ? __pfx_watchdog+0x10/0x10 [ 1991.413954][ T31] ? __pfx_kthread+0x10/0x10 [ 1991.413971][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1991.413990][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1991.414010][ T31] ? __pfx_kthread+0x10/0x10 [ 1991.414027][ T31] ret_from_fork+0x3fc/0x770 [ 1991.414049][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1991.414074][ T31] ? __switch_to_asm+0x39/0x70 [ 1991.414088][ T31] ? __switch_to_asm+0x33/0x70 [ 1991.414102][ T31] ? __pfx_kthread+0x10/0x10 [ 1991.414119][ T31] ret_from_fork_asm+0x1a/0x30 [ 1991.414145][ T31] [ 1991.414151][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1991.572071][ C0] NMI backtrace for cpu 0 [ 1991.572090][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1991.572111][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1991.572123][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1991.572152][ C0] Code: 03 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 35 21 00 f3 0f 1e fa fb f4 d8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1991.572169][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 1991.572186][ C0] RAX: f4fd7c998916b400 RBX: ffffffff81974d88 RCX: f4fd7c998916b400 [ 1991.572200][ C0] RDX: 0000000000000001 RSI: ffffffff8d982100 RDI: ffffffff8be28cc0 [ 1991.572213][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 1991.572226][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa106f0 [ 1991.572240][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 1991.572252][ C0] FS: 0000000000000000(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 1991.572267][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1991.572279][ C0] CR2: 000055566af56168 CR3: 0000000032ae0000 CR4: 00000000003526f0 [ 1991.572295][ C0] Call Trace: [ 1991.572303][ C0] [ 1991.572310][ C0] default_idle+0x13/0x20 [ 1991.572327][ C0] default_idle_call+0x74/0xb0 [ 1991.572344][ C0] do_idle+0x1e8/0x510 [ 1991.572363][ C0] ? __pfx_do_idle+0x10/0x10 [ 1991.572387][ C0] cpu_startup_entry+0x44/0x60 [ 1991.572402][ C0] rest_init+0x2de/0x300 [ 1991.572420][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1991.572547][ C0] start_kernel+0x47d/0x500 [ 1991.572589][ C0] x86_64_start_reservations+0x24/0x30 [ 1991.572611][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1991.572632][ C0] common_startup_64+0x13e/0x147 [ 1991.572661][ C0] [ 1991.756992][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1991.763889][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1991.775721][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1991.785795][ T31] Call Trace: [ 1991.789090][ T31] [ 1991.792038][ T31] dump_stack_lvl+0x99/0x250 [ 1991.796666][ T31] ? __asan_memcpy+0x40/0x70 [ 1991.801290][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1991.806527][ T31] ? __pfx__printk+0x10/0x10 [ 1991.811323][ T31] panic+0x2db/0x790 [ 1991.815250][ T31] ? __pfx_panic+0x10/0x10 [ 1991.819713][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1991.825561][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1991.830963][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1991.837148][ T31] watchdog+0x102d/0x1030 [ 1991.841509][ T31] ? watchdog+0x1de/0x1030 [ 1991.845962][ T31] kthread+0x70e/0x8a0 [ 1991.850052][ T31] ? __pfx_watchdog+0x10/0x10 [ 1991.854746][ T31] ? __pfx_kthread+0x10/0x10 [ 1991.859355][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1991.864580][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1991.869814][ T31] ? __pfx_kthread+0x10/0x10 [ 1991.874427][ T31] ret_from_fork+0x3fc/0x770 [ 1991.879051][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1991.884195][ T31] ? __switch_to_asm+0x39/0x70 [ 1991.888975][ T31] ? __switch_to_asm+0x33/0x70 [ 1991.893758][ T31] ? __pfx_kthread+0x10/0x10 [ 1991.898366][ T31] ret_from_fork_asm+0x1a/0x30 [ 1991.903163][ T31] [ 1991.906593][ T31] Kernel Offset: disabled [ 1991.910976][ T31] Rebooting in 86400 seconds..