last executing test programs: 3m39.711420881s ago: executing program 3 (id=3353): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x10, 0xb, 0x4, 0x71, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x8, 0x10, 0x5, 0x6}}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x2981) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x408, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f00000002c0)=0x10000, 0x4) dup(r0) 3m39.424458398s ago: executing program 3 (id=3357): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x353, @time={0x95}}) (async) syz_usb_connect(0x2, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b8db3008720541005470012207010902740001000040000904"], 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x7f, 0x44233, 0x9, 0x80, 0x941, 0x8001, 0x1005, 0x4, 0x4, 0x0, 0xfffffdfffffffffd], 0xb000, 0x84340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x20000000000001, 0x0, 0x1, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xfe, 0x7}}]}, 0x2c}}, 0x0) (async, rerun: 32) r7 = socket(0x10, 0x3, 0x0) (rerun: 32) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x10, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008090}, 0x4041080) 3m39.032859429s ago: executing program 3 (id=3359): syz_open_dev$video4linux(&(0x7f00000002c0), 0xf, 0x2900) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x5, 0x0, 'queue1\x00'}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="228292", 0xfff6}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8915, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_usb_connect$uac1(0x0, 0xb9, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d010140853b00010203010802a70003010070000904000000010100000a24010800000201020d2406000103080000000000000c24020601010608000010000c240208000003000000000009240605060101000009240300000000050011240606"], 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f00000000c0)={{@my=0x0, 0x600}, 0x1, 0x2}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 3m35.751295753s ago: executing program 3 (id=3369): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x298, 0xffffffff, 0xffffffff, 0x298, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0xffffffff], 'syzkaller0\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0x0, 0x3, 0x1}, 0x0, 0x148, 0x188, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_bond\x00', {}, 'macvlan1\x00', {}, 0xb, 0x6}}, @common=@unspec=@statistic={{0x38}, {0x8001, 0x0, 0x6, 0x9, 0xffff58d7, {0x2}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "acb1f84fe0cc4798499dd011ced9bb1f00000000000000008c00"}}, {{@ipv6={@mcast1, @mcast2, [0xff, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff], 'gretap0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x87, 0x7, 0x1, 0x4}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x11, 0xfff8, 0x1, 0x5, 'snmp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3c8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) r1 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x20, r4, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x30000040}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r3, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x48}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, 'f\"'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20004011) (async) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r7 = socket(0x840000000002, 0x3, 0x100) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) (async) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200000000000000000008000440000000000900010073797a30000000000800034000000001"], 0x90}}, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000a00)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x0, 0x0, 0xffffffff, 0x0, 0x2d8, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "4d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x91a, 0x0, 0xc}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x900, &(0x7f00000001c0)={0x100007, 0x79, 0x140000}, 0x20) (async) r9 = socket(0x10, 0x3, 0x0) (async) r10 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r10, &(0x7f00000006c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x800, 0x3a, 'G\\L\x00', 0x3a, '', 0x3a, './file0/file0'}, 0x31) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) set_mempolicy(0x6, &(0x7f0000000040)=0x1, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x28, r13, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x64}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r3, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xf}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x21}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m35.528290241s ago: executing program 3 (id=3370): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b02, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000006c00010025bd7000ffdbdf2500000000", @ANYRES32=r6, @ANYBLOB="8000010018000000180034801400350069703665727370616e"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x3c}, 0x1, 0x8100}, 0x280080cd) 3m33.595515524s ago: executing program 0 (id=3378): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7bfd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xff, 0x0, 0x9, {0x8, 0xb, 0x2, 0x1, 0x1, 0x6, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0xa, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3cf, 0xf9, 0x7, 0x6, {0x8, 0x25, 0x1, 0x0, 0x33, 0x7, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xad, 0x3, 0x5, {0x8, 0x25, 0x1, 0x82, 0x33, 0x7, 0x2}}}}}}}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405000596efc359090401000001020000090401010101020000090501090000000000072501000000000904020000010200000904020101010200000b240281000200018b7e8e07240100000000090582"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x20, 0x31, 0x12, "ee153459ca529beb5d240bd5156f13854a91"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001c707af20d6124404e0c6010203010902"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140004000a2000000000c505000000000000000000010000002900010073797a31000000002c000000030a01020000000000000000000900030073797a310000000048000000060a810400000000000000000100000008000b4000000000200004801c000180090001007866726d000000000c0002800500024000e9ff010900010073797a010000000000000000000000000a00"/162], 0xbc}}, 0x0) tkill(0x0, 0x16) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000000c0)=0x2, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}}], 0x1, 0x20000800) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000003c0)={r6, 0x3, 0x602}, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') openat(r7, &(0x7f0000000080)='./file1\x00', 0x42, 0x84) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x692, 0x7d, 0x80006, 0x4000000010000e51, 0x102, 0x547a, 0x103d, 0x200000000006, 0xfffffffffffffffd, 0x3aa, 0xfffffffffffff9de, 0x1, 0x5, 0x40000000009, 0x378, 0xfffffffffffff802], 0x6000, 0x194110}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m32.294270943s ago: executing program 3 (id=3385): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000200)=@multiplanar_mmap={0x5, 0x1, 0x4, 0x100, 0x8, {}, {0x2, 0xc, 0x9, 0x2, 0x89, 0x5, "5ffd40a3"}, 0x4, 0x1, {0x0}, 0x401}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) 3m31.348449655s ago: executing program 0 (id=3387): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) socket(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000380)='\x02\xc3\xf6\xddM\xd6\x8dwE)\x83\xe1\x1f\x9c\xf5q', &(0x7f0000000500)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\alr\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x17\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xff\xe8\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20000000000, 0xfffffffffffffffd, 0x10000000, 0x3}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="06e0ffff0300000006665bb6ff0f00000700000088000000b5c9245b0bd249375860b551d854fb31dac157e7c7c4d406f11700d0285e585f1391a387b1aab068320ff08a20b57ebcca24c0ada3d5f6d437407098f2801a1902468e73079e5d2c5362ebbc9367483cc657ab0f92333fd1187f1a6c66459575d698a05d4b8fd5e764d83e404123a72dec4c109eaffd1325b92c797d06df", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0xa3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(r2, 0x0, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r4, 0x0) landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) r5 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xabs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r5, 0x15b77000) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000200)=0x6) mmap(&(0x7f0000850000/0x4000)=nil, 0x4000, 0x2000007, 0x200000005c832, r0, 0x9dc10000) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000004c0)={@empty, @multicast1}, &(0x7f0000000240)=0xc) 3m30.778249336s ago: executing program 0 (id=3389): r0 = syz_usb_connect(0x6, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000700)={0x14, &(0x7f0000000500)={0x40, 0x7, 0x49, {0x49, 0xf, "1671dfdfe4644cfab7a5680f30847587ff33e2bd03681dbf2d322075616de42cb20d619051940e97938eee3625fadfb2715c8374727573c1e2a72c0e91653aad8064e3f3bc785d"}}, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x1c, &(0x7f0000000740)={0x40, 0x7, 0x12, "2d92cacc8899db6c5c263f77d7a203b352db"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xad}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x7}}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = fsopen(&(0x7f0000000200)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f00000005c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC=r3], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x20, 0xb, 0x4f, {0x4f, 0x2, "077051cf7767dd95e7b2779beed7718446e2e9c5b94839839bd119e6f41b512945986fc0a63f4427d07ae98353fd20b94b6fe849b898a8dfc3da000e3ee721b5b27ec90614aec1882b15dc69c2"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x444}}}, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x20, 0xc, 0x57, "323d22febe4ed5ea62ea88b34db1e2269088519f80d92911399a8d6ea5c753be0f83d8bb9d64c8cb6cf9f00c31ff2d5111aab8e82d1620c30de21217b9a4d529dccae0600da20d169fe0c83dc8db6dc0a0c6c14784059b"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000300)={0x20, 0x81, 0x2, '\v3'}, &(0x7f0000000340)={0x20, 0x82, 0x2, "9346"}, &(0x7f00000003c0)={0x20, 0x83, 0x1, "18"}, &(0x7f0000000400)={0x20, 0x84, 0x3, "399c92"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "450f5b"}}) fchdir(r1) r6 = syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0xaa0d9a51e63453c5, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) move_mount(r6, &(0x7f0000000840)='./file1\x00', r6, &(0x7f0000000880)='./file1/file0\x00', 0x0) r7 = openat$cgroup_freezer_state(r1, &(0x7f00000002c0), 0x2, 0x0) sendfile(r7, r7, 0x0, 0x8000002) 3m29.382499792s ago: executing program 0 (id=3393): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x3, 0x6, 0x9, 0x1, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) unshare(0x42060680) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) ioctl$PTP_EXTTS_REQUEST(r3, 0x40103d02, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x4000000a00}) fsopen(0x0, 0x0) socket(0x11, 0x6, 0xc) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e24, 0x0, @private0, 0x4}}}, &(0x7f0000000040)=0x84) setsockopt(r7, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000008c0)=0x5, 0x4) recvmsg(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x80, 0x2, 0x0, 0x0, 0xffffeffa) 3m26.065716158s ago: executing program 0 (id=3400): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000003, 0x0, 0x7}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000e70f8000"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="010a000004000000000020", @ANYRES32, @ANYRES32=r0, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRESHEX], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x2000000000000030, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x799f4f8729a3733e) fcntl$setlease(r5, 0x400, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r6, 0x25, &(0x7f00000002c0)) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r7, &(0x7f0000001600)=[{&(0x7f0000000080)=""/41, 0x29}], 0x1, 0x0, 0x0) r8 = semget(0x2, 0x4, 0x200) semop(r8, &(0x7f0000000400)=[{0x0, 0x0, 0x1800}, {0x0, 0x8, 0x1000}], 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x50901, 0x0) pidfd_send_signal(r10, 0x1c, &(0x7f0000000b00)={0x32, 0x52d, 0x9}, 0x0) recvmsg(r9, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x20) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2282, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x32, 0x0, 0x0) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x482, 0x0, 0xc}]}) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYRES64=r1], 0x7c}}, 0x2000c450) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) 3m24.806829143s ago: executing program 0 (id=3409): socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xffb) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e24, 0x5, @empty}, 0x1c) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="221004000000fb5b1ff5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xf401) r4 = socket(0x1e, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x300000}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x29c2}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000824}, 0x48884) r6 = socket$netlink(0x10, 0x3, 0x4) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x5, 0x4, 0xf, 0xe, 0x2b, 0xd, 0x2c, 0x2, 0xb6, 0x5, 0x5, 0x0, 0x5}, 0xe) sendmsg$nl_generic(r6, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1010, 0x38, 0x770, 0x1, 0xbac0}, 0x1c) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 3m17.140438779s ago: executing program 32 (id=3385): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000200)=@multiplanar_mmap={0x5, 0x1, 0x4, 0x100, 0x8, {}, {0x2, 0xc, 0x9, 0x2, 0x89, 0x5, "5ffd40a3"}, 0x4, 0x1, {0x0}, 0x401}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) 3m9.729702615s ago: executing program 33 (id=3409): socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xffb) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e24, 0x5, @empty}, 0x1c) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="221004000000fb5b1ff5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xf401) r4 = socket(0x1e, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x300000}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x29c2}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000824}, 0x48884) r6 = socket$netlink(0x10, 0x3, 0x4) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x5, 0x4, 0xf, 0xe, 0x2b, 0xd, 0x2c, 0x2, 0xb6, 0x5, 0x5, 0x0, 0x5}, 0xe) sendmsg$nl_generic(r6, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1010, 0x38, 0x770, 0x1, 0xbac0}, 0x1c) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 2m29.134877953s ago: executing program 4 (id=3617): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000000000), 0x0, 0x2000c350) unshare(0x4000400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x3}) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x17, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000280)=0x1f5, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2282, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x48b, 0x0, 0x2}]}) recvmmsg(r0, &(0x7f0000005440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=""/208, 0xd0}, 0x101}], 0x1, 0x45833af92e4b39ff, 0x0) 2m28.486690318s ago: executing program 4 (id=3622): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, 0x4000010}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x183200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b4a0d93481b232b11b819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000600", [0x0, 0x1000008]}}) 2m28.160264518s ago: executing program 4 (id=3624): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f000000d980)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x9, @empty, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x3a}}}], 0x30}}], 0x1, 0x4000000) 2m27.895839797s ago: executing program 4 (id=3626): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x315000, 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000040)={0x5, {{0xa, 0x4e24, 0x4e, @loopback, 0xfffff4f7}}, {{0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000000}}}, 0x108) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x2, 0x181002) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000001c0)=""/27) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000200)) r2 = creat(&(0x7f0000000240)='./file0/file0\x00', 0x40) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x4) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000300)='\\.,(\x00', 0x5) r3 = syz_open_dev$ublk_bdev(&(0x7f0000000340), 0x0, 0x4000) ioctl$XFS_IOC_EXCHANGE_RANGE(r1, 0x40285881, &(0x7f0000000380)={r3, 0x0, 0xf6d3, 0x8, 0x4, 0x1}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f00000003c0)={0x0, 0x2, 0x9, 0x80000001, 'syz0\x00', 0x7}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) readv(r4, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/73, 0x49}, {&(0x7f0000000480)=""/108, 0x6c}, {&(0x7f0000000500)=""/141, 0x8d}, {&(0x7f00000005c0)=""/118, 0x76}, {&(0x7f0000000640)=""/179, 0xb3}, {&(0x7f0000000700)=""/68, 0x44}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000880)=""/127, 0x7f}, {&(0x7f0000000900)=""/66, 0x42}, {&(0x7f0000000980)=""/163, 0xa3}], 0xa) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000bc0)={0x48, 0x8, r1, 0x0, 0x3, 0x54, &(0x7f0000000b40)="63c773e7a756a4de4476f9b26d016d466505594b9034c1ae288ccdda53e6e7d480c2a37560c6069a8cd3724f0dcb647a1300f0f1ba938a1db58d2242238fe4cc959240988759dd00d26b1708d9da59dd2d9a5ded", 0x1}) ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f0000000c40)={0x0, 0xffff, 0x0, 0x0, 0x0}) fcntl$lock(r3, 0x26, &(0x7f0000000cc0)={0x2, 0x3, 0x6, 0x1, r5}) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x30, r0, 0x8) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000d00)={0x0, "e78f07e4643096d45ec929ef0bfe06869e113c324d9dccdc6859039087c9554435057f01f080f47e74823eef920f2cc05621742ce601420127b340b3ffed9ae1", {0x2000000000}}) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000dc0)=0x2) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000e00)=""/201) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000fc0)={'ip6tnl0\x00', &(0x7f0000000f40)={'ip6tnl0\x00', 0x0, 0x29, 0x37, 0xb5, 0x7, 0x20, @dev={0xfe, 0x80, '\x00', 0x1c}, @rand_addr=' \x01\x00', 0x40, 0x8, 0x3, 0x2}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001080)={r2, 0x58, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001140)={'syztnl0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x20, 0x17fe0, 0x5, 0x1000, {{0xd, 0x4, 0x0, 0x2, 0x34, 0x64, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0x10, 0x0, 0x3, [0xb, 0x5, 0x1, 0x5, 0x8, 0xb1]}]}}}}}) getsockname$packet(r2, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000011c0)=0x14) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)=@RTM_DELMDB={0x78, 0x55, 0x400, 0x70bd2d, 0x25dfdbfd, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x9b02d10ad39cb19c, 0x1, 0x2, {@ip4=@broadcast, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x1, 0x4, {@in6_addr=@loopback, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x0, 0x0, {@ip4=@local, 0xcdb3}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x300000c0) openat$cgroup_procs(r0, &(0x7f0000001300)='tasks\x00', 0x2, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000003540)={&(0x7f00000034c0)=[{0x0, 0x8010, 0x6c, &(0x7f0000001340)="009271eb52cf005871a1bbd08ac129f8c209b85068d81a02213329986bdff66fb30f70863266a2d8ebf303cbbf2be7b7f6fc0b5a3248bb6a99989f28818719287a41991a4e756a936dc1d0921b420b977ac534af091a28a412c9744e8549640368bbdec21346073959c91a9f"}, {0x9, 0x0, 0x11, &(0x7f00000013c0)="856ce32742642e383f12bb93d7b407ef24"}, {0x5d, 0x200, 0x9d, &(0x7f0000001400)="151ca1712289bea548988f304986b0b7dde2a11d0a946d3ee315aa56b88295933f997888b5a5542577d75e4c5d977119e5d0f458297eb40c65fa3d165b07276333a999d0eea03ba8b1db8db3cfcbfbf54170f2b15bf57548a4ff21c71297303483f19a668fc15d8256131f7c6ef5dc80b44c0dbe59d069798a530ed1bc454b58faf0c65780088f8ab4590944538f2d6dfc3213af952cbd13986bb0fc7c"}, {0xc0, 0x0, 0x1000, &(0x7f00000014c0)="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"}, {0x6, 0x2200, 0x1000, &(0x7f00000024c0)="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"}], 0x5}) r10 = syz_open_dev$vbi(&(0x7f0000003580), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r10, 0xc0905664, &(0x7f00000035c0)={0x0, 0x0, '\x00', @bt={0xb, 0x6, 0x5, 0x10000, 0xcf55, 0x8, 0x6, 0x1}}) 2m26.804275293s ago: executing program 4 (id=3631): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) rt_sigsuspend(0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x4000000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000ffff25bd7000fbdbdf25000000000f11e1e089c57c6d8a5c1e893651278464adeba0d4c0f9b30893d8ca3d87965df2d44a9eb66c4c01ef82b6fea6fed35085080ba99a290e19de58b60ba9b0fa86bcc3fb1eef4fa18610bdf3f7a6b2ba51a72e267c8953f49aacdec3c1f7622e9493767af14c4200fd7e3a778a0ff9901df64a59bf86eade6c1bddbc", @ANYRES32=0x0, @ANYBLOB='B\x00\x00\x00! \x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000002) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x32600) mknod$loop(&(0x7f00000006c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) mount$fuseblk(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x10c091, 0x0) 2m26.519378329s ago: executing program 4 (id=3633): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000000080)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xd0010100}, 0x0) syz_io_uring_setup(0x64c, &(0x7f0000000100)={0x0, 0x11f8, 0x0, 0x2, 0x801e7}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r5, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/193, 0xc1}, 0x6}], 0x1, 0x12163, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) write$tun(r5, &(0x7f0000000240)={@void, @void, @ipv4=@icmp={{0x25, 0x4, 0x1, 0x8, 0x9c, 0x67, 0x0, 0xa, 0x1, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x34}, {[@timestamp={0x44, 0x14, 0x14, 0x0, 0x8, [0xffff, 0xfffffffa, 0x4, 0x5]}, @timestamp_addr={0x44, 0x24, 0x62, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4132}, {@private=0xa010102, 0x400}, {@broadcast, 0x4641881b}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @ssrr={0x89, 0x2b, 0xc6, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @remote, @local, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @ra={0x94, 0x4}, @end, @rr={0x7, 0x17, 0xa1, [@private=0xa010102, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @private=0xa010100]}]}}, @info_request={0xf, 0x0, 0x0, 0x2, 0x2}}}, 0x9c) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m11.091990044s ago: executing program 34 (id=3633): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000000080)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xd0010100}, 0x0) syz_io_uring_setup(0x64c, &(0x7f0000000100)={0x0, 0x11f8, 0x0, 0x2, 0x801e7}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r5, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/193, 0xc1}, 0x6}], 0x1, 0x12163, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) write$tun(r5, &(0x7f0000000240)={@void, @void, @ipv4=@icmp={{0x25, 0x4, 0x1, 0x8, 0x9c, 0x67, 0x0, 0xa, 0x1, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x34}, {[@timestamp={0x44, 0x14, 0x14, 0x0, 0x8, [0xffff, 0xfffffffa, 0x4, 0x5]}, @timestamp_addr={0x44, 0x24, 0x62, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4132}, {@private=0xa010102, 0x400}, {@broadcast, 0x4641881b}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @ssrr={0x89, 0x2b, 0xc6, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @remote, @local, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @ra={0x94, 0x4}, @end, @rr={0x7, 0x17, 0xa1, [@private=0xa010102, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @private=0xa010100]}]}}, @info_request={0xf, 0x0, 0x0, 0x2, 0x2}}}, 0x9c) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.408019922s ago: executing program 5 (id=4206): prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r1, &(0x7f00000012c0)="a5", 0x1) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000), 0xfffffffffffffd22) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) 9.798859374s ago: executing program 5 (id=4209): r0 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000280)=[{}, {}], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000040)={0x3, 0x3, 0x1, 0x1, 0x7fffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/26, 0x1a}, 0xfffffffe}], 0x1, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x52, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@rr={0x7, 0x1b, 0x98, [@rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x3d}, @remote, @empty, @multicast2]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x2, 0xf, 0x5, 0x2, 0x16}}}}}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000982001f000000fe0000000000000008000f00fd000000", 0x24) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r5) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000000c0)={0x3, 'pim6reg1\x00', {0xd7b}, 0xc41}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0x8100000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000100)={r6, 0x1, 0x0, 0x5}) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x184, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x29, 0x0, 0x2, 0x0, 0xbd9], 0xffff1001}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000480)={[0x3, 0x1000000000, 0xffffffffffffffff, 0x200000000000043, 0x2000004, 0x0, 0x2004c8, 0x0, 0xa7f, 0x6902, 0x7, 0xffffffffffffffe0, 0x803, 0x0, 0x9, 0x1], 0x6000, 0x102280}) 9.591974121s ago: executing program 5 (id=4210): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x80, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1, 0x1}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/111, 0x6f}], 0x3}}], 0x1, 0x40002002, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) fanotify_init(0x200, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x7}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x60, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) 9.514882436s ago: executing program 5 (id=4211): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x459, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x2b, 0xb1, 0xd8, 0x40, 0x2013, 0x461, 0x57ae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x447, 0x2, 0x3, 0xdd, 0xe0, 0x7f, "", [{{0x9, 0x4, 0xae, 0x6, 0x6, 0x92, 0x90, 0xc7, 0x6, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x0, 0x9, 0x2}]}, @hid_hid={0x9, 0x21, 0x9e, 0xff, 0x1, {0x22, 0xff4}}], [{{0x9, 0x5, 0xd, 0x10, 0x20, 0x2, 0x3, 0x1, [@generic={0xae, 0xf, "9c4d7676b7221e97440886ae93979896b5dba2bc03e5c9d5ccbc7f5fe178d3c6aaf710ca37b3c7690033a9344762a00b67b248f26e322932ed22b823c9e4071f8fe116aa7d710f1b6b30b3bd4f463b6af47ac7559b3d791ed1da75a8d78675a70d21c8f8effece7591d5777bb02da71d7c453e613847be3313bdb009dbac99336122d1aec3ed306aaf1fdb91155edc955a2d68d9f5ba8be81d4872ab9b7d04aaaabd48a1b324bed5efd25fcb"}, @generic={0xc9, 0x23, "cee883f91cf4d5560bb557b3a598fd04df37dad5095427dae5c13325eea4b5e80163bc9aad767e2830c3c88096a7f512c5653943b1a0ccfa72df8651986bd72d4e55b6f06482ea3fb63a22a0e60d2e0fbc6f7d6a33982857627a93ea54fc52a7a4110861d7cbed48e7f12b6ee97fa0672826f4211aaefd9ad4c0f5cae88e19bcc8542bfb2978cde560d3a6c5ec4decd686efc105e563eace7d3087a2f0eda2d8ab0611056ca3969316d0975c6a232958208310077095531afac3e0a90d4ebaa8c2848154e25a69"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x4, 0xf1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0xecb}]}}, {{0x9, 0x5, 0xb, 0x0, 0x1ff, 0xf5, 0xc0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xfa, 0x9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x0, 0x3, 0x6, 0x8, [@generic={0x3d, 0x8, "40d624198cb94bab5d00fc54b1fb842b90d4a51cec565007dab769603df810f3d7de33855a70067dd0b08b1b11f8e7cf7305b4434e6020e241846b"}, @generic={0xab, 0x21, "477c48b1d13cd286dbe3b6699a8fd0055d8324b6e7f6e85bf92b2d12f5fd6cc723f0666359faca9e560ef352292aae664d380cdf2c3ee959ddc4eff43592ce8a8ba01d18f15c89ee82878c8eb0e7306b61685005d460f459c36b16828c4686a346aef8b36eef4c3f4918499dda6b80018a75a75c46a2ece9457bf76b7faae0f45aaf7516803a93511921fe09bab52da6999481370af7be20443a2b0cfcc36ba3761efd516e8e8b0a38"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x7ef, 0x0, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xc, 0x200}]}}, {{0x9, 0x5, 0xa, 0x1, 0x400, 0x2, 0x7a, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x74, 0x5, 0x3, 0x3, 0x0, 0x0, 0xad, [@uac_control={{0xa, 0x24, 0x1, 0xc115, 0x47}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x1ff, 0x2, 0x1, 0x7f}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x201, 0x3, 0x81, 0xc7, 0xf, 0xe}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x306, 0x4, 0x3, 0x3}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0xe, "7a8e936b73"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x404, 0x3, 0x54, 0x5, 0x6, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x1, 0x2, 0x8}]}], [{{0x9, 0x5, 0x6, 0xc, 0x20, 0x56, 0x6, 0xff, [@generic={0xf1, 0xa, "e6e2f887f47ace5d42bbb80f2abfd59187a2475b53a216b18c26bfdeb8f61f3d6e09cbaf40d0996cb0edbbb68dbe7110499d2a4c3d83cf14bbcb8b16b3cc6268ce64f001bf89eb797c653b1c741f1b256b394be36c84f118f997aacc2a1257609f3fd80761105016788dca3e662490b949cf05a434cd162a1fc15b7a62f23d6fbf023b6aca860f4afeb2ce0ff68a907394268ad31123c1e67f347d6adbd2b58beab5797ddd7437f468dda56316197db9913b1a9ebd12a5c2ddc3989fe754ff924ada1f568528b10a4aef625f41260999a028666090a36c02b03fcf1741d900be89105536ff234e4452b300dd084edc"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x4}]}}, {{0x9, 0x5, 0xc, 0x1, 0x400, 0x0, 0x5c, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2a}]}}, {{0x9, 0x5, 0xa, 0xc, 0x40, 0x7f, 0xf7, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0xfff}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x300, 0x4, 0xf5, 0x3, 0x10, 0x9}, 0xd2, &(0x7f0000000840)={0x5, 0xf, 0xd2, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x7, 0x80, 0xf6, 0x690, 0x92}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x9, 0xa8, 0xf000}, @generic={0xb8, 0x10, 0xa, "d65d04faf1932c48a4ad972eb3e6dbc829ed112bce6283b47a185d9b6ec7e37ee4d0a313dd301546e7abc66d51b85c394ab3a4f31c88bf6fe8adc63a50e1b8aca9074072e41e58126f59f9985d71cf532fb2e3d054b9bf6d552a0414d6dad0f74ec1dcda516470a4ac307adf304ad4f12d54e42dfeaa9f36d600b5872a7ddef75487806804cdd650eb9ea32e4b783f828db712e4c0025266583551c04b005d8b752c371ae6570cef93f682288abac3f7eb110baaa3"}]}, 0x5, [{0xb, &(0x7f0000000980)=@string={0xb, 0x3, "b9a520d47efbe2fbfc"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x1445}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x80a}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r2 = syz_open_dev$evdev(&(0x7f0000000940), 0x1, 0x100) read(r2, &(0x7f0000000280)=""/195, 0xc3) r3 = creat(0x0, 0x80) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r4 = openat(r3, 0x0, 0x400080, 0x10) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e22, @multicast2}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x70bd2b, 0x0, {0xa, 0x0, 0x14, 0x0, 0xff, 0x0, 0xfd, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x4000000) r6 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r6, &(0x7f0000002bc0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) 9.179423829s ago: executing program 1 (id=4212): r0 = socket(0x8, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect$uac3(0x0, 0xa7, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x4, 0x40000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x3) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) r3 = syz_open_dev$video(0x0, 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0xd06, 0x32315659, 0x4, 0x4, 0x3, 0x3, 0xfeedcafe, 0x2, 0x2, 0x2}}) tee(r1, 0xffffffffffffffff, 0xffff, 0xb) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003e000000000000005504000011edfffe2500000017ffffff460400007fffffff7b0a00fe000000006e04007000000000e5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x40000) 8.169035836s ago: executing program 7 (id=4214): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 6.411414513s ago: executing program 5 (id=4218): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8, 0x0, 0x6, 0x1, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000300)={{0xf}, 0x1, 0x0, 0x2, {0x8}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0xf0ffffff}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r3, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000040)={0x18, r3}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCGETA(r8, 0x5405, 0xffffffffffffffff) recvmmsg(r7, &(0x7f0000001640), 0x0, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x8810) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x41, &(0x7f0000000380)=ANY=[@ANYRES64=0x0], 0x48) 4.907828228s ago: executing program 7 (id=4221): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x80, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1, 0x1}, {0x0}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/111, 0x6f}], 0x4}}], 0x1, 0x40002002, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) fanotify_init(0x200, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x7}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x60, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) 4.735260935s ago: executing program 7 (id=4223): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r1, 0x0, 0x0, 0x80800) socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x460100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x1) fchdir(r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1f00, 0x12) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x2000, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffffffff, 0x10000, 0xc, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x7, 0xff, 0x0, 0x10}, {0x40000, 0x8080000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x8, 0x3, 0x2, 0xfc}, {0x58000, 0x33331000, 0xe, 0x9, 0x1, 0x0, 0x9, 0x3f, 0x69, 0xfd, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x1, 0x0, 0x4, 0x10, 0x0, 0x0, 0x3c, 0x7}, {0x100000, 0x0, 0x0, 0x78, 0xa8, 0x1, 0x2, 0x0, 0xff, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0xc, 0xfc, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x6000, 0xc, 0x8, 0x0, 0x7, 0x8, 0x40, 0x26, 0xfc, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x41000, 0xfffc}, 0xddf8fffa, 0x0, 0x30000, 0x110, 0x2, 0xfc01, 0xeeee0000, [0x80000000, 0xa1, 0x1, 0x1]}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x305) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x7ff, @vifc_lcl_addr=@local, @broadcast}, 0x10) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1=0xe0000300}, 0x10) close(0xffffffffffffffff) socket(0x29, 0x2, 0xfe) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/3465], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x94) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 4.334068735s ago: executing program 7 (id=4224): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"/330], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x80a4) syz_emit_ethernet(0x1f, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0xfd42}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000840)={'bond0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000000)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=@can={{0x3, 0x1, 0x0, 0x1}, 0x80, 0x2, 0x0, 0x0, "1d97ee0710e02311"}, 0x10}, 0x2, 0x0, 0x0, 0x20000004}, 0x10044009) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r5, 0x21, &(0x7f0000000400)={0x0, 0x48fd, 0x4000, 0x3, 0x110}, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x80c00, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) r9 = gettid() r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r10, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r10, 0x4040534e, &(0x7f0000000180)={0x335, @tick=0xe, 0x42, {}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r10, 0xc04c5349, &(0x7f0000000000)={0x4c58, 0x8001, 0x200}) tkill(r9, 0x7) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 3.823745654s ago: executing program 6 (id=4227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x7d, &(0x7f0000001600)={r4, @in={{0x2, 0x1, @multicast1}}, 0x5, 0x400}, 0x90) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x401, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0xe, 0x2b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x4890) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) socket$packet(0x11, 0x3, 0x300) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000180)={0x7c, 0x3ff, 0x7, 0xb, 0xf, "03f30102000038f4"}) (async, rerun: 32) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000000)=0x2000000f) (async, rerun: 32) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x42080, 0x0) (async) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000004180)=@abs, 0x6e) (async) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r10 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r10, 0x80085665, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 3.781641223s ago: executing program 1 (id=4228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000030b98066efaa8030000003d62b16bb096bd315f3552ffff4200"/43], 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000340)={0x6, "1803c8098000000000000000000000000000000000000000f34100", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x131841, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000001c0)={0x2, "fa02791d2a69a2610f020000000000000011000100e15ac64200", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r4, 0xffffffffffffffff}) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f00000003c0)={0x7, "34e64988e80e0000b56a0011b0d10000800000008f2700", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r11, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r12, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r12, 0xc0303e03, &(0x7f0000000440)={"31ecffff1bdb69e2e1070000001e00", r13}) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r14, &(0x7f0000000140)={0x10, 0x30, 0x3, {0x0, 0x0, {0x2, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, 0x1}}}, 0x38) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f00000000c0)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {r15, 0xee01}}, './file0\x00'}) r17 = socket$inet6_sctp(0xa, 0x1, 0x84) r18 = dup(r17) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r18, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r18, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r18, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r18, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r18, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x42, @loopback, 0x8000}}, 0xabb6, 0x67, 0xa4f, 0xc4, 0xa, 0x0, 0xa9}, 0x9c) r19 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r16, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r19, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000480)=[@in6={0xa, 0x4e22, 0x8, @private1, 0xa}]}, &(0x7f0000000140)=0x10) 3.736754741s ago: executing program 6 (id=4229): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x1, 0x410000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd\x00') socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000005, 0x32, 0x0, 0x471ac000) faccessat2(r1, &(0x7f0000000140)='./file0\x00', 0x0, 0x1200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2}}, 0x2e) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @local}, 0x2, 0x4}}, 0x26) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000200)="96c1dbac4bfa", 0x6}, {&(0x7f0000000400)="76d1ce7fc19bd45ec0bae5db58440a351b06fcb460b1024f90a4b396977c3f3a564d2550cecd35396bc7607e6b8cf399e6ee86edd2925ad31a847e5959dbec7cb99ed72d9f5c9178a1b1a151333a058c67e5ffdfaa4d935a222320eca9a73c2de50379626139304cb1d299fb7cf3cbd43d88bbd5c450204250baa013690281b777059e2a2f323f9cae89cdae20f4fd87afd0b07e99595aae60ef92be4d81b83104c14242381a0bbc457ae8270795afea6fc481cd873ea67ae9781dc93c8ce07e6825", 0xc2}, {&(0x7f0000000500)="fe1b993fa4d5b32893628dc93a", 0xd}, {&(0x7f0000000540)="64f75db8d4f9b30e0b2a1f3e2839cf42e1214f623384d39eeb1821c991d2678a6eaee6ffcc087ca3ee7bf08805e9b4a7ff7ef07f00f01243a1", 0x39}], 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x48002, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x4010004) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) socket$pppl2tp(0x18, 0x1, 0x1) 3.538992428s ago: executing program 6 (id=4230): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0x0, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'ip6tnl0\x00', 'nr0\x00', {}, {}, 0x2f}, 0x74000002, 0xe8, 0x110, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x287, 0xb8, 0x118, 0x0, {}, [@common=@unspec=@limit={{0x48}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x6, 0x1, 0x7, 0x3, 0x3], 0x1, 0xb}, {0x4, [0x2, 0x4, 0x2, 0x4, 0x8, 0x4], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000180)="e59222dbb88a505a1dee9717bbdecb82c458e10d434b77508d5ec4fc9689c3131a2abb0872041eb5eb3343fd066448ed058ed1485b47d14efbfe809cfa9a4f82c6fad3a18a7d10f26fa2dbf4878cc8e2c6cd15461a22ef8a385f13957bf49ebf7924432a2cb8fd0a2e45601a7a1c94b72fefb5a10dd1b4ca69c3a3f40b576223585e2b7e1aeed662639c47ced397d1f8366b1c672832", 0x96, r2}, 0x68) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000240), 0x3) r5 = socket(0x10, 0x80003, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$inet6(r5, &(0x7f0000000900)={&(0x7f0000000280)={0xa, 0x4e24, 0x8, @loopback, 0x3}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000004c0)="e0cdd0c13cf53977b7b7604885dcc8d2485576f9c5a9e3fc9f216dc6db1b5d33d5c55633217d3393e65a7c0b37cfea71d14588c41a0b123e209ac24fd5f1c70b2396ae38833b983ffa634f73ccd84931bcd3fba553baae3aec6b754173194bb30451c21a3699493acd7846dee37b4ebbf8a4b632862b0a1c595848af4e76cb633f71c6de846d19915f56d04ae614115969b18d8ae1e4d9af1f2199ed5fd682042010460cbc900354a1e22e52f5694f78e4dd3ec4fcfa2aa8e7e1c200ac6e5593", 0xc0}, {&(0x7f00000005c0)="213917a1a5ba8d75ddd472342e73adde1b69b152d9cf9f66b1409b46c38431e1c8d55aa0a559bbdacfdbebdb3b301141ca92c3bd0f26dc7a66b92b2e70e09773b49efd9c0c919dafb67dec586ca35336807e49a41be148cb2843f0d7e2d8cfc358c46354520f2ffe405ed09132a39bfc58077e6fb08a7700b66e797f1d3dbf4b0f4d1cd2c8fe2041492c834dcb65d0e4c1cda9ae33c950551d87a646893a240178ea4f3fa7c1a4ff18fa4b51909dc5da8bee3820", 0xb4}], 0x2, &(0x7f00000006c0)=[@dstopts={{0x48, 0x29, 0x37, {0x88, 0x5, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @rthdrdstopts={{0xd8, 0x29, 0x37, {0x2e, 0x17, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x40, 0xf, [0x2, 0x0, 0x2, 0x3]}}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @private2}, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @generic={0x81, 0x42, "41a6c8270fa54bfef70fef7c8f30911bed6557df7afaaa3584f5be7bba1a5522da803347c32810872856abce50d7fb6052aa8943ba90fcb262ff98387b7e44e512f7"}, @hao={0xc9, 0x10, @mcast2}]}}}, @hopopts_2292={{0x68, 0x29, 0x36, {0x2c, 0x9, '\x00', [@calipso={0x7, 0x48, {0x2, 0x10, 0x6, 0x614, [0x2, 0x4183, 0x0, 0x40, 0x9, 0x8, 0x98, 0x8]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x80000000}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x67, 0x2, 0x1, 0x7, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}], 0x1e0}, 0x24040010) r6 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffe0}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.350773486s ago: executing program 6 (id=4231): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r1, 0xffffffffffffffff, 0x0) 2.960459505s ago: executing program 5 (id=4232): sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000040)=0x400) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) (async) r2 = gettid() r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) (async) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0xf5, 0x6, "0080ca6f"}, 0x6, 0x2, {0x0}}) (async, rerun: 32) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async, rerun: 32) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) 2.877079049s ago: executing program 1 (id=4233): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x80, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1, 0x1}, {0x0}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/111, 0x6f}], 0x4}}], 0x1, 0x40002002, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) fanotify_init(0x200, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x7}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x60, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) 2.862702435s ago: executing program 2 (id=4234): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd25, 0x25dfdbfb, 0xc}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x8004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000000)=0xfffffffa, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='status\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8811}, 0x80) 2.084481464s ago: executing program 2 (id=4235): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, 0x4000010}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x183200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b4a0d93481b232b11b819ef6167d3d458dd4992861ac00", "f4bd00000080190000000000ffefffff00", [0x0, 0x1000008]}}) 2.084075678s ago: executing program 1 (id=4236): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000180)={0x0, 0x2}) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 2.08341522s ago: executing program 2 (id=4237): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x22, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x1, 0x0, 0x3}) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='syz', 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xf, 0xc28c2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd0000009f19000000000000000000ffff0000000000000000000000004e00", [0x7, 0xffffffff9673e35d]}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af29708e2355d0e7ea0c543011a00", 0xfffffffc, 0x4, 0x81, 0x9}, 0x3c) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000909010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8801}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$rfkill(r2, &(0x7f0000000040), 0x8) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10) 2.083091028s ago: executing program 1 (id=4238): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000004c0)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000000)={0x20, 0x3e, 0x4, "d18a9adb"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.065711734s ago: executing program 2 (id=4239): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="840000000000000014000300697036746e6c3000c444000000000000300012800b000100697036746e6c0000200002801400030020"], 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$alg(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="2c23c2c7e93fefda54f29dc01c86ff7272d0f6145374315ee33e704c8540324f2b1eb3696f25c981fe93d5957a51931cab75c1d6d0bef9e350ff2c19cb5c8da5d47e7ceadf34b7088a562b5371f359bad90ba31268c7d741f5c9baebae90952d821d2a050823209a75a14ce98be39a088bf90b3f8f3e5f9b048e426da64fadc31787403f08d4e7ef63170d9e8cfd5c3ad6a001c63aed01835b99b177d1e6db034c7a9bacf97b1bb01fd424c886f8b312588ff6ec2dd3056ad427", 0xba}, {&(0x7f0000000480)="4105ccf756741b959766438a01d36a191ba8559457af569997f43b5d2a906a957414b086d493f6026a58e75878d7b95f644b1b4eb7d8a2c9acc555c09f9fc1dfaf42768c091ae9239028d2c93c904cd69240df6237b1f9112a6e1df83040c5ee2d3de76abd4fd67b6ddfef804d8c2a0505e56d", 0x73}, {&(0x7f0000000500)="dfff23f7ed4c2926d796c022b2de00d3525008e357db7c8208b381d1c0299aaa001686f73147bd58959764fe8bfaffa2a332d4c0305ca2c9ed32364a5dcf2f6e3c0261483dfd910ba1f7995b601d6b4d8d8a9243627977fc4b76a2cd25cace0a556399fd215f99273f21985446b31d15dfb624094ae03541e6021c09fcb601d815a515e751e8d58aa584d26fd5b64885f22acf1d274ecff519b3d0d77dfd2ff7795bdf2dc4f0e03ef4fc9ca2265a66171df126", 0xb3}, {&(0x7f00000005c0)="0df0dcf34b52e9d8becb43d56943b5e14fb6a85f50c3bc852874199fa997f375ea5733c7c0198efabe811df1ff5a8613bdf6f2fd5798b5499e7a2edf7fad82f145bd9b4bb2efbf74212416e99835dec04fd964f85362b37319231e9ca4372b", 0x5f}], 0x4, &(0x7f0000000680), 0x0, 0x4}, 0x44) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0), &(0x7f0000000440)=0x8) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0xfffffffb, 0x3, {{0xd, 0x4, 0x0, 0xc, 0x34, 0x66, 0x0, 0x7, 0x4, 0x0, @multicast2, @local, {[@timestamp={0x44, 0xc, 0x89, 0x0, 0xa, [0x2, 0xa]}, @generic={0x94, 0x2}, @end, @ra={0x94, 0x4, 0x1}, @generic={0x86, 0x6, "ab789e30"}, @ra={0x94, 0x4, 0x1}]}}}}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x17b93}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000700)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1d, &(0x7f00000007c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=@newtfilter={0x610, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x5e4, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x1}, @TCA_FW_ACT={0x5d8, 0x4, [@m_nat={0x1d0, 0x17, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6f, 0xffffffffffffffff, 0x3, 0x6}, @empty, @remote, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x1ff, 0x5, 0x3ff, 0x5}, @empty, @rand_addr=0x64010100, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x37, 0x1000, 0x4, 0xb, 0x2}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x635, 0x0, 0x7, 0x5}, @empty, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x7, 0x3, 0x40, 0xfff}, @dev={0xac, 0x14, 0x14, 0xd}, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7bc, 0x0, 0xb2e8, 0x4}, @multicast1, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x8, 0x6, 0x7fff, 0xc43b}, @empty, @rand_addr=0x64010101}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x39, 0x20000000, 0xe9, 0x200}, @multicast1, @rand_addr=0x64010100}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xe, 0x6, 0x5}, @private=0xa010100, @multicast1, 0xff, 0x1}}]}, {0x3f, 0x6, "10103c9b4c4a8a40dce835f7e21c33c4c6db24abb0cd07942417e63a08e01a199c5da39e624a3b345f4bed90c5f760dd0d4069898c00f5d9df655b"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0xb0, 0x1c, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x8, 0xfffffffffffffff7, 0xd}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3, 0x8, 0x5, 0x200}, 0x1, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xe, 0x3, 0x5, 0x9}, 0x4, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x5, 0xffffffffffffffff, 0x4, 0x80000000}, 0x3, r9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0x128, 0x19, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x3, 0x4, 0x8000, 0x9}}]}, {0xe3, 0x6, "6c4849e75c0377c0c38215c73628a0895d9a027cd628d3f202ec9a0f7598bb2dab08401902bd7a4ef9ac2910af3e94fef7164ec5329d1e4af3061d9a2e05847018a81bd8b259765633b91dd921d4f39328241e8f1ccceb0b0b7746fd6c0216609eb2aff2e3dfe23345e3c141cf439b919248740f9adf8bc69e0782db9e31670383d3c92a91974d6e28ca46b810288bd45525372fff0230705cdf9755e8f0e63945ade79ba1daa234cf3861c7ad5e172780da034921e5c7f369383ef57fbc385cce62470302688b8336a3c589cba9ae834d7a89dc071db8671a8eed9ced6101"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x168, 0x12, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x100}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffff9, 0x4, 0x2, 0x5, 0x7ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x80000001}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0xe, 0x10000000, 0x6, 0xc78951c}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7daf}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7fff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xc, 0x6, 0x4, 0xff, 0xffffffcd}}]}, {0xd1, 0x6, "4fcd83a496d5e6d38533527c63f548834b7ef7a060cc5e5630108c2650084f4130b088062adcb331f7dd6b7e02eeb948b4fbefcbfba331b8e37a2c8a7e4de92e9ce27c42907988fa151c71b408b546a5ea5c5b3bbc51fd1c2508c18a2e43d341e011e0c9092451c6e3b0258759134bcd61dd550938b3af08f7a36dbcf463be26d7ffea16a945d85643066c1c5d4aaf03c09a812b48fe98ffff7304db65e5f9bc0cf57400d2fd0ead8cd7f312647a0f28bed228381324c79bf1d735f2b4782426efae27a650c711652d64eb0894"}, {0xc}, {0xc, 0x8, {0x2, 0x6}}}}, @m_skbedit={0xc4, 0x14, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x881c}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xe6a6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x31f}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb4fa, 0x28c, 0x10000008, 0x10, 0xb8a}}]}, {0x5e, 0x6, "3eecc159fcbd5daa7b157c19efc7ac82a4ab5920fe4577d2e5703acba8652776efffa618413599ec792cc08d881f02ec7e34c80ef9088f37c60bcefd7e4a7689480066b28eec0ff13d67671029652546a850ecd1e77af663f77c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x610}}, 0x0) 2.064764414s ago: executing program 2 (id=4240): io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x89882) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x240, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000100)="87882b8ee4440cb40a78e669c44876a935fcc1eadb526f921fc0b1504bd64ba2386577ab6a2c5c84301dadd6b1077ee79593155f6907d6d6a37d792df86765a3403403348c59e6a9b631931eef2570b2bf851d5cb05c1acd62edde001518e27ef08612b9c149549effe67c", 0xffffffffffffff94, 0x0, 0x0, 0xffffffffffffffd8) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='scalable', 0x8) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380100002100010000000000feffffff00000000000000000000000000000000fe80000000000000000000000000001dfffc0000000100000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000000000000e8001100fe800000000000000000000000000011e0000002000000000000000000000000e0000001000000000000000000000000fe80000000000000000000000000009b3c000000000001a80a000a00fe8000000000000000000000000000aae0000002000000000000000000000000fe88000000000000000000000000010120010000000000000a0002000a010102000000000000000000000000fc000000000000000000000000000000fe8000000000000000000000000000bbffffffff000000000000000000000000330100000000000002000a00"], 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205649, &(0x7f0000000100)={0xf020000, 0x300, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90a, 0x8000, '\x00', @ptr=0x20002000}}) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x9, 0xd, 0x4, 0x800000, 0x1, {}, {0x1, 0x0, 0xe0, 0x1, 0x6, 0x7, "96aa0369"}, 0x8, 0x2, {&(0x7f0000000700)=[{0x4000006, 0x10001, {&(0x7f00000000c0)}, 0x7}, {0x3, 0xe49, {&(0x7f0000000440)}}]}, 0x3}) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) 1.187980061s ago: executing program 7 (id=4241): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0x0, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'ip6tnl0\x00', 'nr0\x00', {}, {}, 0x2f}, 0x74000002, 0xe8, 0x110, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x287, 0xb8, 0x118, 0x0, {}, [@common=@unspec=@limit={{0x48}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x6, 0x1, 0x7, 0x3, 0x3], 0x1, 0xb}, {0x4, [0x2, 0x4, 0x2, 0x4, 0x8, 0x4], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000180)="e59222dbb88a505a1dee9717bbdecb82c458e10d434b77508d5ec4fc9689c3131a2abb0872041eb5eb3343fd066448ed058ed1485b47d14efbfe809cfa9a4f82c6fad3a18a7d10f26fa2dbf4878cc8e2c6cd15461a22ef8a385f13957bf49ebf7924432a2cb8fd0a2e45601a7a1c94b72fefb5a10dd1b4ca69c3a3f40b576223585e2b7e1aeed662639c47ced397d1f8366b1c672832", 0x96, r2}, 0x68) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000240), 0x3) r5 = socket(0x10, 0x80003, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$inet6(r5, &(0x7f0000000900)={&(0x7f0000000280)={0xa, 0x4e24, 0x8, @loopback, 0x3}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000004c0)="e0cdd0c13cf53977b7b7604885dcc8d2485576f9c5a9e3fc9f216dc6db1b5d33d5c55633217d3393e65a7c0b37cfea71d14588c41a0b123e209ac24fd5f1c70b2396ae38833b983ffa634f73ccd84931bcd3fba553baae3aec6b754173194bb30451c21a3699493acd7846dee37b4ebbf8a4b632862b0a1c595848af4e76cb633f71c6de846d19915f56d04ae614115969b18d8ae1e4d9af1f2199ed5fd682042010460cbc900354a1e22e52f5694f78e4dd3ec4fcfa2aa8e7e1c200ac6e5593", 0xc0}, {&(0x7f00000005c0)="213917a1a5ba8d75ddd472342e73adde1b69b152d9cf9f66b1409b46c38431e1c8d55aa0a559bbdacfdbebdb3b301141ca92c3bd0f26dc7a66b92b2e70e09773b49efd9c0c919dafb67dec586ca35336807e49a41be148cb2843f0d7e2d8cfc358c46354520f2ffe405ed09132a39bfc58077e6fb08a7700b66e797f1d3dbf4b0f4d1cd2c8fe2041492c834dcb65d0e4c1cda9ae33c950551d87a646893a240178ea4f3fa7c1a4ff18fa4b51909dc5da8bee3820", 0xb4}], 0x2, &(0x7f00000006c0)=[@dstopts={{0x48, 0x29, 0x37, {0x88, 0x5, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @rthdrdstopts={{0xd8, 0x29, 0x37, {0x2e, 0x17, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x40, 0xf, [0x2, 0x0, 0x2, 0x3]}}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @private2}, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @generic={0x81, 0x42, "41a6c8270fa54bfef70fef7c8f30911bed6557df7afaaa3584f5be7bba1a5522da803347c32810872856abce50d7fb6052aa8943ba90fcb262ff98387b7e44e512f7"}, @hao={0xc9, 0x10, @mcast2}]}}}, @hopopts_2292={{0x68, 0x29, 0x36, {0x2c, 0x9, '\x00', [@calipso={0x7, 0x48, {0x2, 0x10, 0x6, 0x614, [0x2, 0x4183, 0x0, 0x40, 0x9, 0x8, 0x98, 0x8]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x80000000}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x67, 0x2, 0x1, 0x7, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}], 0x1e0}, 0x24040010) r6 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffe0}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.101319196s ago: executing program 2 (id=4242): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8, 0x0, 0x6, 0x1, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000300)={{0xf}, 0x1, 0x0, 0x2, {0x8}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0xffffffea}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r3, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000040)={0x18, r3}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCGETA(r8, 0x5405, 0xffffffffffffffff) recvmmsg(r7, &(0x7f0000001640), 0x0, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x8810) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x41, &(0x7f0000000380)=ANY=[@ANYRES64=0x0], 0x48) 1.014202579s ago: executing program 7 (id=4243): openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x20c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_NAN_FUNC={0xfc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0xe8, 0xb, "5422c28a832bdb76d30a13fe20669eb659e8f059ebe76c0b8d44764dbc423e60c32a9d9bb3cc29cf7fb066bf1d6e93f5cab44e81495706d026fb3e5b354571a3c25aa1e3ab590ddd08de414a021fa27cfda03ee4be276f7d0370cd85ea81cbfd81f37f3615bf32a090cd93416e64519240ad9db5ea7f09144f92e4674fa71ebd260b8ce9ad11d11f816a4178fa84bb75c4512e6a5441fbf2206864b615f9e2278b2a5c1706b8b62ba4600a36e9107ab240c8c0e37d3e34aafa66045bf0163538a990e3000a9a375a83eee069098e8d600540b7aceefda811420c49365ec2bfb82c4b1182"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xdc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0xd8, 0xe, 0x0, 0x1, [{0x42, 0x0, "37c0ae3e6515a4b615d5cff5e3ddc1a48a73cdb66acb1dcd12c6ef3d59dc11a1ab5c07f01d604c3f858f8f042c62d2efd97f0b4a04cc9c44e9f07b250539"}, {0x8f, 0x0, "81563ac38b13bb1d1f268c8a845a3ad2739c17fb091c30e1f26ddae29348a987a1060453d41bdcded54d7faa37a5ea477e987295b96c46b3debe60c023ca8d8075f44fac98bfbd6fc909a3b2af49a2138bae8b77e328e3ba08ba714c4ae2b9bed83fc6746cc62458249caff7cb62e47ae24e9e8ee598aea7f5e30eca50f7a7b853b5e252320e9a30f32a81"}]}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xf8}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0xc084}, 0x4004040) syz_usb_connect$uac2(0x3, 0xa0, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000010fd07040040000102030109028e000301004000080b000201ee2005090400000001012000092401ffff011500030c2403020404fc02830700ff0904010000010220000904010101010220000924020104f9eb040710240102f1010000d6d5a3060700000409050109000291"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) 695.905675ms ago: executing program 1 (id=4244): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x3f9, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x10000}}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xfffffffffffffeb8) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="47363d3a66dff1f4e90591a4259f27c0dc", 0x11}, {&(0x7f0000000080)="c4d15d195f2f5573969a617451ad98e4f2087fd2ac4a36d5ad172c760c4ac56444f943987c845b", 0x27}, {&(0x7f0000000140)="5bb7db1bd16d230432419bc76ba8d0edbf67f68d6a8f06bf0255ad205acf024ec03f6fe31d40b0", 0x27}, {&(0x7f00000001c0)="3c05dde7b17c2fdac88eca00f90ea77f0cbcba24a669a25602efaec6e995a607a113db46a2beaa9d118d5bd2ed34224c2fb199fd063a15d4776feb3976da1b5d6294011adf7397a22476d564d50a9681ee38ee3cf53392ffe0ae48375d57295fe79d03e6722f8e9cf00018a48a60e2d7e61c5ef59d2fedbc8d4da3084cfb0a97b33628350047d830a7ef5eb7d35451229da8d4912c9760ab25593d46b4c8bf1593cdaff9644f76e69b2621b4bdf162023a27263ee2e3d40fa3fd956a495a9ce30b4a0360dd70178d0f0b497174332f99acdcd431", 0xd4}], 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x158, 0x20004011}, 0x24004000) setsockopt$inet_int(r1, 0x0, 0xd, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000140)={0x2, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x0, 0x2, 0x0, 0x7}}, {0x3, 0x1, 0x0, 0x0, @msi={0x2, 0x3, 0xb, 0x5}}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x65dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000008c0)=0x0) sendmmsg(r1, &(0x7f0000003980)=[{{&(0x7f0000000380)=@ax25={{0x3, @bcast, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @default, @bcast, @default, @null, @null]}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)="8851a22a9ad95f5d96fc752970cf24af8467f4ded6b21a8ac3b82779235d246e61289bc7ee8ef39172018af267ea582e1dc43ad4c05d0b9e2baf2a8744fdeda033aa79e883352bbecf09274bb556c627bf19fedc5d8a9b0fa7df0a0bf6788b9807329de3e4caacb85647f60b7c0e01cc8144d9f157cd25a1037bb610d56214209d04b649441bbe5178b5b550f8f148dfea02bcf58ff005f329bda19d7d887c81b748aa521773cad812ddbb4f38e6cfa01881cd0647d820946e", 0xb9}], 0x1, &(0x7f0000000780)=[{0x108, 0x107, 0xf, "b42d03da131826cf03c813b441f213713f78d261c3c340941b67c20965c114a4462a4317c812642d9c721ce52e3703ab8bf43260bea4bfac20163b812ccc161f20c18c3ac9aff53db8a0a9935d5e35037639c80d1fa9b228ee6d872c74fb3ce98993be1bad18dd1235b95ff4ab0ba5dfd7efece534134ea2b90cea12f5f4db8b33f22213784e8cd9f3e75eb621bf176a429577bc483e9b4c38c9e10dfa52e30bdc841f5ce56179d6c2b7941dcb2ccb390e19153487d6fba3bddd7f58d01f5ad3062e15ecc48c4d446e94814670e5044bd8b0e757363446c28f851b4e49968c03c5b9796e51827aaf1304910c556c0fc4644e4a1482c223"}, {0x18, 0x118, 0x9, "d3f816d7533f16dc"}], 0x120}}, {{&(0x7f0000000900)=@nfc={0x27, r4, 0x1, 0x1}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000980)="37c5b5214cb8cee08da9690e9ec40902eaac3d212f3985a77b9f751e9552c7dc95f87bba1a1622c31ae209c9d0e44dbfb21d89a6b41505369f118c0e5b42849fca7682ae156c769bcdcdfa3e4be81b500be8039c9816a66b83f9179bf22c0f9fad7c534f49968afec03e4deafd8fc445f2bf0d3fb50911e8b4fb0273170a", 0x7e}, {&(0x7f0000000a00)="7b9a070f98a0187ecfaa22e3953da751f7f1bfc15e791d9127f0ac16f7bad207bb040e32b7dbb5d1c37f5394d93399730f44ebc75cf8f23aa5df8a3442ca05b32c8d50f193f2968239995af9a0da2fe47d5e9bcece4ea34fefd1a11532cdabe628c248ba7fa3b2dec2acb21f81366161f516df522a54df7d0a22badb1e9791bf1497bc22eb988025548cb0ca45f8d171ae7c126008216a368f8633fa672fb999986d5b4a4bc4e0960ca296b6f08f2485fd5f63058a6117e416c3546bc37f79ce7169b0a81dc7168b131d37f20746ae12cbc0b47907ea8ee7541832027b09bac18577cf385fcb6ceaef4f53af37f3f720f9f683f2d487950c50e424aeb8891bc392d239eef2419f9cac14b0cb0ec82fcceabc9b72edeeea9670f9a2b6e11adfcf0ea29a088218d7fa141ace0ce87647aa9aa0e0ba437bdcf7c44f780314d0334def6bb540a0677209404deb82da06600e27edaf67aca333f746a44fc5e1178150951d75e41f22942de563ace6e81e10b580ecf3cff88c1fa5e85ee4a5a48868dca9642c0889ca3cf4dd69566a5e2deaa1c01bc19693d2bd0bc5c71299d923d3b2852e62cfa788d93227439b9a63deb25c171d0b13a0d23ed7f43c633121a90a3871325d91760789e524ae2d305a1371b7cc988e1c353a3568b674a3506e857d74c7ec0c6d47e878385063b6f60c7ef366ffa7a608bd06470c5f0ee4a5761388ef9cb4109a1598a2781519b408fc773b394d39874ff428e0b129bb70f24fad92a54f99d107e889bbb790af448ad13126c8d3aa3ab1aeee9bd012af0dfb1c8723c3feeae97645423b1b44ae4d08c85ac2f25a2f21bf51891b6e0bb464f69d8275dca92efc4708c42202a26987e4038868784254ded35d3db4bc1d9279a3a1ba26cbb98f1eaaaaae5ee2243cf3bdd93dfb7820952c88017b05e2d3679d993563e1162e100c54892a55f6a520c1b3730908511021fd301e4ad7c803c858cd670fc5db1f60d88ab652b00183a75ce468820a004e508487e656849408df894bc8ecd2864f88ba79b4b55f8af5663fe84840f62bf0d94c158eb21e08be845d1d25c5188cd45af1f2cc9e9d53aef5c5d4359a99854effba9bfb2c7cb83b6a8477877546ada2fee1a5170bb4f4ce60ad7739fec05d650413d9f2777010cfc3b2bf938cf2ab3fa2e29a7c1bd88b20655f45ee13a81dba81ddbefedb4e8bff695d0591e41e55c5941d1300f125c782bc8073becc4f609845a1e936f25b92fc441f69ffe257761add5d61ec3537c8d6ec9e611ae865c06b994a622587a522329d3f078e0d8aeae3d6d6ccf07385462fbfe9789f95720803dd78b8f7bc229c9af5e6a2caf5599d6e85061c53b377bd2bb0af40eb78c445c7132fd117d5f8995f674d006dd05eb4647a590e52234b61fd5f49e879b28e92a1101f4d4c71c125510700190c1cf27c5a52a9f49e67e4454b591ec1fcd8222faadf6e92c40b75928f1127e67e40d20ab7ac9031a28512a167689bdf8bf92d1345311a17df4d736a6871b11cfcb672884972715ac16aafc17386b9be3e87f3f252e6aaa0a1c328389a050bd559760344d2ca1bf256a05364a5b471597dcd1d6c8e4ce4123ce1a24e82f2afd02151729ef96a4d8972f1a9ec4240cef19a25ab2a20558e0c4f87064977e4e8bae93eac63ab55108fa461a2ead080a6086250ffe519059527560be191fb94b587fb14721c37ff25807d19bfc40522dae92a326d9cf14d596359076f954fa55450fb11437ed5e5bdd97f76b81cd55225263d68497f4a90035a8a57051fc99bf87e4c5ac8bca3ad64a978a167674513bb7422146e039e5783c73e7630e80ea42786d1c1b3418f836a24e5750cf839ebf68f688940215b3c33778727191b80f0b463cc5d7f7c9cffaacecc3ed768d1a85af95df3e263619688ff0de0726e46d1a4de835614c74d44d8773e3e17d62e5fda4070f2fc52438c65171fd3588fcf2a2cf8cfc47ac06a70f1fb1ef0d570af306ae8cee2aed7a20c443f00e30279aff400627d8dd1eacc03ef0b27271326afd729d6ce915c66e588140e6af2eda2532e8538ec80a5c579371996197cd3634e7b0873534a740b62d8e85b73d9acbb08258bdacb82a988794fae459991cf4682ee076f3961d2af181f47e3612598eaba155ab333c7532d55205df3cd0f9e35deb3149814bf63cc9a1c665c669a3d025d2bb585697cb2dc89a474d77bb6335c98bde513fe96077a54bf5482f9dd0e6c6087ec6460c73ea59bb54a869ad389177ac9d92d165bf0208cbb4df7408e632970d1c166164f703db50b8a2666f226bdc76493a0b6a585bfa6bbd79c82b4d0a6e85645588043fdb4fed4bd089d3274bff86a0ab7f2fcd7c0f18487d048915b3ee2604c679f416af84a146705a9b0a4760068b33eea707f24d076a390ce4f60ad2bbaac824dd1d62e31007b6bafbe579256c48803050aec33115d4a5577bbca5656fd4b2ac5c5e96e75af625b4d1dc5effcd71626ff76accadd075bfdcd9fdb472a6aa9f0ade5c57d0429afeb45030f696a601ebc0333ac6d32eb48b4ffafa199ca943a0fac86dc9acbc09de375255f43253814e0b8d618a429e208cddeea4c8301ed0ee0254215dc601299d4f8b1fae4be86ae29cca94688369e0fd5dda0f252b373482588df1793cdf065c699a7f6a93c2b45e47b84530e9439d3c99c97da3461efeb656169e7154211dfbd128fad0a92dfe6ade1c16459f1324c452fb74df5b0acced714717873c09c53540f1ffa2de63d5aa95a82a4cc8fd21374e61c1eea48a4473695fe37cd68a8eee2cfe5268f0d05fa1d754a2319ba97189a3e074e26bd83bd57c780cb57a4035968464d2c7a86c1e51a0c749d8c7bb9ee633e509675e4fc3a94b3d16179cdcc128325e1c68a1e544078820a4caa0618381ade32a66397f0980a3da9f826a44c826130d212ef14d2078d5a21923e73b41c10bd22e16768b112e062615e92f3d827a15fad31ce72095c4742f7f12dfba8f6faf9919cb5fa1939e1f120d79ca89392dde47bd5d005c70b5de4ebabb2af344ccb60d6aa54d4f1b1af602d61dcb208104e7fd0f373f24602eafb69e43cd49694d99a20fb0e927e4347742066ff0e3cb8e618b8cec8bf89dae5320492052f0d9393e373486bffa8a470f9cabf5ad71af97a660cd9e64fdc44fddc1abdde8840457096a08c0fe5525e7b6072fe22ee789fb6ccb3c74691c73aaf549e41bcdc2bd4a1faa28b0fdbd328855c776de7a0e3bf9813e3c797dd973a240533f531f0715de1d3868ef144cbd78e4958387dab8183e7d836c4fc281ff39e1529dd0a84efa1fa1dfb2869ec60fdcd52449007edd50f6a2d8312dd3f7fd712570f2c3c9a4ed5f4413af55c381bf90a2d0775f556ab943bfe09fa071518d53d159e8d0987f148918c8515a0643fd7b8e4c08676734c18c2f0bf1ad08ce8d26a8579d18bbebad6ee39cb53f5610127272c1045444e6d6a8d8a9505ba9440a810f1bba89c9e1d1195870b0a823b07af62c44a9860f694d32c3bda1c8597448c1ff54cd85493abe3951141413bd53b42a667c43000f068fd57ff44ab1feeccff403dc4ccef543bbece6d1aa978f2609e4f21cd1101592f80e4c1f4cf724c367d83070143fcbab457a6b431ce103b25ced0233d005edade532dc7f9159bf73fe84cd86d71f315c31cc2ef275c8280e576bb1fe080810ddd57e8474a75af2ad27a0941f0d10cc1dc384ebac4f8f6d979148be3b888f909add1fbd507c413b079947b147ab27b0e8ec5726da46c91f7ae2312e60ec532550a5278649f7529726ccd32d976fff92b8f5dd5e5d22782819ec834cce40bc463e65b359c6b9ac6febd496a1f1d3e41ec4467641e274bffd3ce229a30c857513030faf5115cdc0f494665944e6ffd4894435f3403e62ef17648f4ed4d56298b5ca4f9636605b53482d8253e0f4b00049684419878fb523d9e32137460a4c4da2c0c22d7873ce36802cd45d054b3d2400fecc363580a5fce1bf0a7774dc75b1b17b32ebeb28e171dec8022aaebe01c889f1f4eeacd5409fbee55bb49bfd78f606bb479e976b76dee49ba95ca59609d5cade27f518ad35a51835357d680aed872ef81754b31825bd68d149d19bed9e9786b668fa58164f809df8707ddd34cf75dfd92769ea932a195b1eb4c383cc4194921f70470738d096189703a1f776a7eedcf3bf98a58f7af660259b01f43f820a61339da9d6f91c7d2e1f8c77672951295ec8180656d182e6018a90c3738bdd1df4278c2877b26fc414f21fe4955d5e67095ac0550f41eb6bad949b379671fe1e7453393332fb9fa1635aaff514f55904e720111cc2e7eb5e67d46420430084062f73da1a9e291be1f70b130091bec13c8d5e219fe3d758ff713a8109cc4261befc6fb493f00f4c9ec582e278a6e1be10cf19c774e2f7873f8c7ee95f80d8bc7e49b2983e7031f2f604ee80ab6986b61f68c2dc640465946a68701d65fd7c4ab92264627297dff9297fb5be5c056be37c356be94569f9600f049c7d4e04b453f0d21195465c505b4217b27a76b19bd45262678df4cbbe93d333404797b10487640c90889b44f50ed89df16e594d7cbf22a53e534b0a434a5784c7574dbf024112124b1f3ee0adaa9260f3bbbf346fdef27e995f12626f0506fae1c54d8bf54cf11fff282eb221ba03859a27d7f5e73e345cda1682f9ec97ff9d37e141f6e8d967d93d9652ff3797d88b59fe173cc875a7193f233b306bea10865d5457f791835a70b34171ce46b66063f07965df3edb27894c05eaf45b5284bc47e6c37d66f1f77913234ef4981b5122ada62f69cd165f3f0bd000a23e787312d93b95e6a6aac70e24f911e4ba62761972e78242633dfc2465405dab8941d7f171d06d0a17347d6e3a5a961aba891ee45041193b7dba6abc19b02ca1c33f4fedc10f201cbb61af309a6ca6920153bc0878bdafa29e8ba65c13f53bb36ab267b9e7c2fa36dc1445d91e28ab5159c3e840054534828e8810eb39a4f9c20ab6f5a125b74f8b75f47111fee0565b32f52dadfe83ccb433d419e4cf97ddae3d282a39209c1c1777f19f77ea83ed8c1669c61f29bf586b4812383fe133fd34822da9631c1d619309e669ce9557aafda0300f029641e9a545f88cb5411840c3a9a263f4ff281fd7cd5d4f7ab27f38d693fcc5df6c4cfbb8c66bd9179a3ff626eff6832596dde93fedd345d309266e39ce106f7e35d9dd44b7d338153fc4dcf93db9d3a0aa8ca3c4b4123a5bd909405ce818176ae3fa875eb828038735af4d8d91fa059dddbfd1e1f7ebf42d5448206ea4c9342e6e6c78a6c2daca621cfe710c267bcc2c25deab2bfd47be1ace969d0bac94221d6833d8661a4849a1c2539294c168d874cd4349f8e67f5a327070015a2d5ccea82b9c78db5fc866e89fe3bc14ef16386de59634c14b97d0ba6d6aecd2bd05c61b9779d998d6aa96cdcb259e30c67dee8d76677e5aac5a24734f20149aef148e9d1edb41c1720c55032da7ca0a02a73ae0c7d3dddef237188bed6fda727dbd37fe2cd72df70601aa29913579257e939a0db0ae33e4923e4516bdfd3f3dcec871dd13ae1ab1a594ec75064456da23de96ccc29dc16ec81253fb66a19323bf9e2dd42a006bd2afdb9b8651b40d9bbf6cd45f41b767ee40bfa116ba74a3d5a8f31cb3340d19af08572af00d64fa5ed717dc1d69f4531f5199d8ff5b2ee32b6eac853f13a8110e69e97c235b1c32165d8485a3fdc53defaa87b6840c586e4d2de05d28b5e68ec7a3413b7", 0x1000}, {&(0x7f0000001a00)="1c4897d3a8fb75ba9243d0f08f1454675bd68ab1ea12b9548d35cf1f3f4afa91e578514bfbdee91a0a5ad1c73a4f67686e7f4becde3d2baf9fce2cd355e1848f22f41d4c5b4445e66b7c5f31e43f383f30d0f20552964949811b30c2be823bb0e07aaa7f6589a38fe95f8a58994ad8ec18f8f34a2b3bd09198bf6ca6e264abb31b16b682b9dfa854114981f5381dca132070a22e13d1eac43176754c79513b7753cd613932d0c39d8393fff564df59a9aa198754c30ac4d603e5a29d74b56a0ab83cc2c28a3912d3d07824e2a34167b9eb87", 0xd2}, {&(0x7f0000001b00)="1e737390af289bf08b4382810e5425d2fcbb77cc520a445452cab792a3e64ef699e7513f617ae1eec2349e60047337e2ae897c876b3977e8fcc131bc68dbd9b98fc20027bfef76115efb642ac2924c7348fc6c1362b0b0cb28b3cb4caeba73227f", 0x61}], 0x4}}, {{&(0x7f0000001bc0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000001c40)="0dd239b371ca3d06c4cffb5de19932f7c108cf140cd29c6802cdbbe37af98e213379e3acfa955e3a983b69943109dcb1d70c39dc263d1c5309f7354ca4bbf980d7dc2292b2b63c5d61b3dbd566f4610d5e9f53a693c56b320fd22813996ab34be3513a910fc8b354e7fd0a504ee29e2fa0e11bff42a30ee4ada18e7836ec019352272fce", 0x84}, {&(0x7f0000001d00)="26c9f30853895ee7a4c4e093c51abded29c6ec320787d45c287060358bfb8960", 0x20}, {&(0x7f0000003080)="515ba476bd7bf03167730279a1ca0cc2a97093a37288702c43111066364a5b8c4c960c72f8ef353f6b2280236d0cdde977be4b671f2ee69caf58d4f4f6405d7e6cc34c2e1b158be63daeca0d53b2f972e67decd53024f714b3ffd3fa6a242b47aca9e66c64938adf", 0x68}, {&(0x7f0000001dc0)="5e44721a7c0e2530fee2c9ca6a0345cf9e156c5891e10f4bd6cf18", 0x1b}, {&(0x7f0000001e00)="9c0188ca2d59d786632616812efdd2eb22f73198ee1b44469cb4123b446cb6194e4151856831b795606489e97e5abae4998dff41cb64f4116053ca3ba55036e784da90e3e417a68046012e5d49af066abf8f2c02993c46ec67654fe5f4de7e63005f86c18dcdac58b406a5749d267dbf3c192c076f1fff09fd1aa744fe568332204f2c00d55e4eb98cd2f8", 0x8b}, {&(0x7f0000001ec0)="22022a11850ca0bf71a2031a3dbdf9dc343607e8134bd8e7cf41b7a1c5afbbb1c0797df5519b91ef812ade7837ee139748bb23cc65a31fdb4e09b045ce3c6f3a5ee2f925965f5df64ec5b0347e781673edae9b51125ce405190ae1484770d7ca6c8ee713a2c97ee90278d056ec67bda284f9c646f65e05e269f0dd74769961654766880915ea7bdd25003a2e72c53ba21f52079373e1775affa4ce2e69974816a5698b187f584a382d1477fa9680ab872acef06b29", 0xb5}, {&(0x7f0000001f80)="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", 0x1000}], 0x7}}, {{&(0x7f0000003000)=@ieee802154={0x24, @short={0x2, 0x2, 0xaaa1}}, 0x80, &(0x7f0000003600)=[{&(0x7f0000003a80)="e78b48813a4950415501f89a92b0d2e73b9f1599dd78d56650810d6c01c32d2956425118078bc0b59e46ea00a47177180b6901b3f8f39a9fa24e19e522cea3c1b50abee4fe50190072c655845570bb741b7ae70045a9674bb049e1215bb7e2a45b8650dd2a0d3900d4bc7889c3eb664d8b8d071db0aec51622d293b5fb669bf67441b86e1900a4ed", 0x88}, {&(0x7f0000003140)="051a133f4eefdc3d48e6ef80b574fa1412b3731fc65837a4ac2e010dbc9b2234e6481c9a5b5f3fd5343361cb926b94bdb1fee58bd84f9d1eb92514b7ff3d882e71f90594c30a949be2a51391a0148cff7d1d638aa55fecdd617091973deb0988a6ab0b616dbc8b80194cfcc1bc97624e6d62ac8f7a103249ad4b57c7c2cea1fdd50ab02c75e9b4d870c6e958ff6226c713e53979a6da7d556503e5562e3b328c60d0ea8229129e88d878c29a3a3aa5246a27", 0xb2}, {&(0x7f0000003200)="3bffe436e34b031a8cc41569b6cdc19ca45f8c661dfca7c1c457c5e8516b64a378cb72a99222f9628a4f8e124d50e2b1f3640d9abeb370d2bddfad0289425396c417fc20aba372ea073914e3b6035237675cfbb761646443a61d9e828afa63f71f28d2", 0x63}, {&(0x7f0000003280)="bcbde8e6afba8ace", 0x8}, {&(0x7f00000032c0)="50e5a0d271f21f6360e785ddcc59efc8512dd5941e70c85c11e5ad6b64ab31f52080ac66986a7cb04b1d15dde1dfc82dbc546fb35a6d84b315f959f963b100237fb0566619120dcceadc71ede72c7d14b8f96e9a5c7c606d92e7566ee54482db3363c8d410402b9ca61e84f4d4c98df7b0920b0839c7166dae5376c9c8267023c6d33bfc7cfaf265c4e4205cb4fe6762e668a52afcc12d43bd938c067b671740f2b322f13ef7933050275bc77355a927ece1c6af6d3efdc3bdf1579824529f438e654f21", 0xc4}, {&(0x7f00000033c0)="e398bb90d57b7a38f3457d15267e690f19a8e05174005b5fffc5cbf41446431539211e37b25ac407422541f9077b64d60afca1f4f2466f7e71072917cc5e546d07ca080b716c72a14915", 0x4a}, {&(0x7f0000003b40)="0c71c6dcdbe9aa70431ae47dcf6fde845935929af0c6e014075a2073ae8f99ac0a864087635138291d2fcfa56a043b5f3410e17fc727adcd19290938c72bde5774d5ad2f00d0248d87438cbdeaed2cd065efe8f52a43e53bfabd931ffaed88dc8b107db4cb1818898997d3229393381f9ad9dba36d2b70da536e855d012844cc93b9e5fbed6b902cbe21baf2e200b4a1ecb8598f912bf63996f6784a899ffe7ab900c6352d25320bf4e93f5eff5d", 0xae}, {&(0x7f0000003500)="6ca0238ad0d791", 0x7}, {&(0x7f0000003540)="1d98f368347795c47c6ff88b7a58a48cd67c1df5d7c0b9a4b43e1208f0d364965fe4fbae3f1760cfda4e8ad404", 0x2d}, {&(0x7f0000003580)="67ce8b5ef5af3d292dcfe4f35f56e9e74ae4b1bc3ac6c1dfbd95dc555c541d660657afecc41ede2fa68ade73ecc4d9defb79ef1b81f7443dccafd47de4663fc17c6e65f0fe114e2c5d25e5db338c144ff8778dfb441cf1f8c82e82b17c13dcee591d68fd4f4a94390e", 0x69}], 0xa, &(0x7f00000036c0)=[{0x88, 0x3a, 0x0, "478e9f2696493c55ba7eb373f235e8f1b7fbf36baebbcaeac86ecb684b3b1fbea078113e9f53f765850ec7333765acd5e4b508f63d972878306fbd90f67e6d9b36ccd8c9c7a71aebeeaac12e3cf8986c9be80b4feed358c7c3e4e0e264622e4cff1c29dfa70bc04dc4d873ec587506e0016a497b65a4f564"}, {0xc0, 0x29, 0x2, "ad52730fbae49d6d53b21907d582e1eff00a66e1771eda4f76019aa0b782eef4f1d4efe42e69fb896190553f79c007723f2148f199edfc6148ca198357eaa4881206edec37ab902001aa5248591d1d5649953bcb33ac00e61f277c17b2f62c75af33d323c310a4777826b2d1d68d11ab836cd56b2d2ef8d886db52744824d9a3c76d0461c50c7d5eebe686d8a96d82e6be686d6c62e75828ff1ad721a20b8656218f5a5a988af9c3d03af4"}, {0x100, 0x114, 0x1a851671, "0cccf4db4dc944da81d4c83cc0bbecb7a4089f614239545ea8868f231a0a0a132938f72f94b1617ba26e9e55174a943efd948c5930edae03338dd186a1fcece0bbe5f92060182100000541502f5d23949a1038cc98362fff1f389868856b3ba39fa9a47483282a00bb52c1477be7dbee0e3de0ef1d35a1839e1465e9f4f2bc136133b3e973f3c334a9f37d8d8c3f04af79cf342e271181a6edfee0be4533b64632987b1db3f1454337d4cf8bb7f7b98de1e013c56917684ab9878d147004a10a7662638dc978449624d1e236ea8ecb25d8de83bd9e75ad1bc195e6cce8c0ebface12d551721c5d1ca98c14280cf2792d"}, {0x61, 0x103, 0x4, "2e4cf9dad8af4ae72cb3b39fa753214607c0c9d2e0f6f96952c590760247928c1e8df09dc625d38b5491050e578f5ddfa185d0d85e5878593b3673ec519a111d4c"}], 0x2a0}}], 0x4, 0x0) recvmmsg(r0, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 240.414322ms ago: executing program 6 (id=4245): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000240)=@svm={0x10b, 0x1, 0x1080, {0x4000}, {"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"}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x4000}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0xfec00000, 0x1, 0x1, 0xfffffffe, 0x0, [{0x7, 0xc, 0x4, '\x00', 0x38}, {0x80, 0xfe, 0x7c, '\x00', 0x2f}, {0x6, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x1, '\x00', 0x6}, {0x5, 0x5, 0x6, '\x00', 0x7c}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0x1, '\x00', 0x45}, {0x52, 0xb, 0x1, '\x00', 0x7}, {0x6, 0x6, 0x73, '\x00', 0xff}, {0x1, 0xb6, 0x89, '\x00', 0x80}, {0x16, 0x24, 0xa9, '\x00', 0x1}, {0x7, 0x1, 0x17, '\x00', 0x4}, {0x6, 0xc, 0x5, '\x00', 0x3}, {0x19, 0x10, 0x8c, '\x00', 0x4}, {0x5, 0xc0, 0x3, '\x00', 0x3}, {0x8, 0x2, 0xcb, '\x00', 0x5}, {0x7, 0x6, 0xb, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x44, 0x3, 0x7}, {0xf4, 0x8, 0x7, '\x00', 0xf8}, {0x4, 0x4, 0x31, '\x00', 0xf7}, {0x7, 0x7, 0xfe, '\x00', 0xa}, {0xff, 0x0, 0x3, '\x00', 0x7}, {0x16, 0x85, 0x4, '\x00', 0xff}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000012c0)={0x0, 0x0, @pic={0xba, 0x41, 0x1, 0x9, 0xbb, 0x2, 0x78, 0x1, 0x0, 0xf2, 0x9, 0xe6, 0x8, 0xd3, 0x5, 0x5}}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000180)) 0s ago: executing program 6 (id=4246): r0 = memfd_secret(0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x10, 0x0, 0x1300) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x0, @loopback}, 0x80, 0x0}, 0x240448d5) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xa, 0x8010, r0, 0xecf1f000) kernel console output (not intermixed with test programs): sb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1196.161123][T14612] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1196.172622][T14612] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1196.187179][T14612] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1196.208183][T14612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.236519][T19773] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1196.260773][T14612] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1196.559130][T19781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3595'. [ 1196.638949][T19785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3600'. [ 1196.706724][T19788] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3598'. [ 1196.870246][T19788] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1196.997358][T14612] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1197.173580][T14612] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.223144][T14612] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1197.254365][T14612] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1197.279033][T14612] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1197.297193][ T1167] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1197.306164][T14612] usb 5-1: SerialNumber: syz [ 1197.467234][ T1167] usb 3-1: Using ep0 maxpacket: 32 [ 1197.483312][ T1167] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1197.514774][ T1167] usb 3-1: config 3 has an invalid interface number: 2 but max is 1 [ 1197.535500][ T1167] usb 3-1: config 3 has an invalid interface number: 19 but max is 1 [ 1197.573070][T14612] usb 5-1: 0:2 : does not exist [ 1197.585497][ T1167] usb 3-1: config 3 has no interface number 0 [ 1197.608321][ T1167] usb 3-1: config 3 has no interface number 1 [ 1197.628691][ T1167] usb 3-1: config 3 interface 19 has no altsetting 0 [ 1197.659792][ T1167] usb 3-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=20.c1 [ 1197.699516][ T1167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.732996][ T1167] usb 3-1: Product: syz [ 1197.751896][ T1167] usb 3-1: Manufacturer: syz [ 1197.771984][ T1167] usb 3-1: SerialNumber: syz [ 1197.792509][T14612] usb 5-1: USB disconnect, device number 86 [ 1197.946004][T11154] udevd[11154]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1198.027536][ T1167] rtsx_usb 3-1:3.2: probe with driver rtsx_usb failed with error -22 [ 1198.078425][ T1167] rtsx_usb 3-1:3.19: probe with driver rtsx_usb failed with error -22 [ 1198.134053][ T1167] usb 3-1: USB disconnect, device number 115 [ 1198.766566][T19809] vlan2: entered promiscuous mode [ 1198.789783][T19809] hsr0: entered promiscuous mode [ 1198.801366][T19809] vlan2: entered allmulticast mode [ 1198.822778][T19809] hsr0: entered allmulticast mode [ 1198.833964][T19809] hsr_slave_0: entered allmulticast mode [ 1198.844029][T19809] hsr_slave_1: entered allmulticast mode [ 1198.947293][T10404] usb 2-1: USB disconnect, device number 11 [ 1199.061413][T19809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3606'. [ 1199.080896][T19809] hsr_slave_0: left promiscuous mode [ 1199.110476][T19809] hsr_slave_1: left promiscuous mode [ 1199.215257][T19820] loop5: detected capacity change from 0 to 7 [ 1199.269005][T19824] netlink: 'syz.1.3608': attribute type 1 has an invalid length. [ 1199.281630][T19820] loop5: [ 1199.295960][T19820] loop5: partition table partially beyond EOD, truncated [ 1199.321963][T19826] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3610'. [ 1199.355179][T19818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3608'. [ 1200.541494][T19858] loop5: detected capacity change from 0 to 7 [ 1200.575351][T19858] loop5: [ 1200.589669][T19858] loop5: partition table partially beyond EOD, truncated [ 1201.908978][T19880] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3628'. [ 1202.320381][ T5733] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1202.480445][ T5733] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1202.498857][ T5733] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.516373][ T5733] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1202.538935][ T5733] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1202.554781][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.571673][ T5733] usb 3-1: Product: syz [ 1202.581233][ T5733] usb 3-1: Manufacturer: syz [ 1202.592594][ T5733] usb 3-1: SerialNumber: syz [ 1202.765095][ T1167] r8152-cfgselector 1-1: USB disconnect, device number 59 [ 1202.876885][ T5733] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1202.893724][ T5733] usb 3-1: USB disconnect, device number 116 [ 1202.931322][T11154] udevd[11154]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1203.171030][T19902] loop5: detected capacity change from 0 to 7 [ 1203.202942][T19902] loop5: [ 1203.214020][T19902] loop5: partition table partially beyond EOD, truncated [ 1203.264042][T13317] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.553355][T13317] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.637473][ T1167] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1203.866727][T13317] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.913596][ T1167] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1203.972712][ T1167] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1203.995452][ T1167] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1204.005994][ T1167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.026404][T19904] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1204.055950][ T1167] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1204.152344][T13317] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.322980][T19904] netlink: 'syz.1.3635': attribute type 61 has an invalid length. [ 1204.343715][T19904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1204.373649][T19904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1204.408427][ T5733] usb 2-1: USB disconnect, device number 12 [ 1204.914485][T13317] bridge_slave_1: left allmulticast mode [ 1204.938148][ T5733] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1204.977959][T13317] bridge_slave_1: left promiscuous mode [ 1204.999257][T13317] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.051097][T13317] bridge_slave_0: left allmulticast mode [ 1205.073893][T13317] bridge_slave_0: left promiscuous mode [ 1205.087372][T13317] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.128727][ T5733] usb 3-1: Using ep0 maxpacket: 8 [ 1205.174082][ T5733] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1205.201080][ T5733] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1205.236959][ T5733] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1205.270989][ T5733] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1205.307945][T19934] loop5: detected capacity change from 0 to 7 [ 1205.323657][ T5733] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1205.338424][T19934] loop5: [ 1205.349269][T19934] loop5: partition table partially beyond EOD, truncated [ 1205.400469][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.694138][ T5733] usb 3-1: GET_CAPABILITIES returned 0 [ 1205.729960][ T5733] usbtmc 3-1:16.0: can't read capabilities [ 1206.015660][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1206.024964][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1206.034237][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1206.043519][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1206.052773][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1206.062059][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1206.206545][T19953] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3647'. [ 1206.227939][T13317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1206.255572][T13317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1206.293841][T13317] bond0 (unregistering): Released all slaves [ 1206.507655][ T5733] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1206.677982][ T5733] usb 2-1: Using ep0 maxpacket: 16 [ 1206.694589][ T5733] usb 2-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 1206.742077][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.785017][ T5733] usb 2-1: Product: syz [ 1206.802705][ T5733] usb 2-1: Manufacturer: syz [ 1206.838021][ T5733] usb 2-1: SerialNumber: syz [ 1206.900346][ T5733] usb 2-1: config 0 descriptor?? [ 1207.137428][T19951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1207.175566][T19951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1207.500669][ T5733] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1207.570632][ T5733] usb-storage 2-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 1207.583768][ T5733] usb-storage 2-1:0.0: This device (054c,002e,0500 S 04 P 89) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1207.583768][ T5733] Please send a copy of this message to and [ 1207.674541][T19965] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[19113] was attempted by ""[19965] [ 1207.840686][ T5733] usb 2-1: USB disconnect, device number 13 [ 1207.873224][ T5300] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1208.045777][T13317] hsr_slave_0: left promiscuous mode [ 1208.062161][T13317] hsr_slave_1: left promiscuous mode [ 1208.085622][T13317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1208.095541][T13317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1208.113173][T13317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1208.125995][T13317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1208.173112][T13317] veth1_macvtap: left promiscuous mode [ 1208.180115][T13317] veth0_macvtap: left promiscuous mode [ 1208.190488][T13317] veth1_vlan: left promiscuous mode [ 1208.199049][T13317] veth0_vlan: left promiscuous mode [ 1208.414342][T19970] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1208.824990][T13317] team0 (unregistering): Port device team_slave_1 removed [ 1208.845404][T13317] team0 (unregistering): Port device team_slave_0 removed [ 1209.323549][ T29] audit: type=1326 audit(1781512917.661:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.5.3652" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34ccb9ce59 code=0x0 [ 1209.629194][T19969] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3650'. [ 1209.986073][ T5300] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1210.723474][ T5300] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1210.802180][T10404] usb 3-1: USB disconnect, device number 117 [ 1211.459036][T20018] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1211.551582][ T5300] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1211.767503][ T5724] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1211.777677][T20048] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1211.930361][T20048] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1211.950958][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.981569][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1212.023881][ T5724] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1212.039920][ T5724] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1212.061243][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.072421][ T5724] usb 3-1: config 0 descriptor?? [ 1212.489923][T20041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.508745][T20041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.523081][ T5724] hid_parser_main: 28 callbacks suppressed [ 1212.523106][ T5724] steelseries 0003:1038:1410.0046: unknown main item tag 0x1 [ 1212.545151][ T5724] steelseries 0003:1038:1410.0046: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 1213.275695][ T1167] usb 3-1: USB disconnect, device number 118 [ 1213.717334][ T1167] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 1213.869690][ T1167] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1213.880911][ T1167] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1213.890753][ T1167] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1213.897760][ T1167] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1213.912593][ T1167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.924589][ T1167] usb 3-1: config 0 descriptor?? [ 1214.443307][ T1167] hid-steam 0003:28DE:1102.0047: item fetching failed at offset 4/5 [ 1214.444065][ T1167] hid-steam 0003:28DE:1102.0047: steam_probe:parse of hid interface failed [ 1214.444152][ T1167] hid-steam 0003:28DE:1102.0047: probe with driver hid-steam failed with error -22 [ 1215.680842][T20101] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1215.680903][T20101] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1215.681176][T20101] vhci_hcd vhci_hcd.0: Device attached [ 1215.927198][ T808] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1215.997681][T10404] usb 36-1: SetAddress Request (2) to port 0 [ 1215.997793][T10404] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1216.081039][ T808] usb 2-1: config 3 has an invalid descriptor of length 142, skipping remainder of the config [ 1216.081215][ T808] usb 2-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 1216.087586][ T808] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=90.80 [ 1216.111210][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.120175][ T808] usb 2-1: Product: syz [ 1216.124408][ T808] usb 2-1: Manufacturer: syz [ 1216.129635][ T808] usb 2-1: SerialNumber: syz [ 1216.354267][T20102] vhci_hcd: connection reset by peer [ 1216.361122][ T808] usb 2-1: USB disconnect, device number 14 [ 1216.388775][T11917] vhci_hcd vhci_hcd.1: stop threads [ 1216.388824][T11917] vhci_hcd vhci_hcd.1: release socket [ 1216.388946][T11917] vhci_hcd vhci_hcd.1: disconnect device [ 1216.455979][T14461] usb 3-1: USB disconnect, device number 119 [ 1216.560127][T20117] xt_hashlimit: size too large, truncated to 1048576 [ 1216.893498][T20124] FAULT_INJECTION: forcing a failure. [ 1216.893498][T20124] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.906404][T20124] CPU: 0 UID: 0 PID: 20124 Comm: syz.2.3681 Tainted: G L syzkaller #0 PREEMPT(full) [ 1216.906436][T20124] Tainted: [L]=SOFTLOCKUP [ 1216.906444][T20124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1216.906458][T20124] Call Trace: [ 1216.906467][T20124] [ 1216.906476][T20124] dump_stack_lvl+0xe8/0x150 [ 1216.906507][T20124] should_fail_ex+0x40c/0x560 [ 1216.906536][T20124] should_failslab+0xa8/0x100 [ 1216.906574][T20124] __kmalloc_noprof+0xe8/0x750 [ 1216.906605][T20124] ? sock_kmalloc+0xd6/0x160 [ 1216.906636][T20124] sock_kmalloc+0xd6/0x160 [ 1216.906661][T20124] ____sys_sendmsg+0x1d7/0xa20 [ 1216.906705][T20124] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1216.906750][T20124] ? import_iovec+0x73/0xa0 [ 1216.906780][T20124] ___sys_sendmsg+0x2a5/0x360 [ 1216.906812][T20124] ? __lock_acquire+0x683/0x2cd0 [ 1216.906841][T20124] ? __pfx____sys_sendmsg+0x10/0x10 [ 1216.906880][T20124] ? kstrtouint+0x6e/0xe0 [ 1216.906942][T20124] ? __fget_files+0x2a/0x420 [ 1216.906968][T20124] ? __fget_files+0x3a2/0x420 [ 1216.907005][T20124] __sys_sendmmsg+0x27c/0x4e0 [ 1216.907044][T20124] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1216.907079][T20124] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1216.907129][T20124] ? ksys_write+0x242/0x270 [ 1216.907163][T20124] ? __pfx_ksys_write+0x10/0x10 [ 1216.907202][T20124] __x64_sys_sendmmsg+0xa0/0xc0 [ 1216.907236][T20124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.907260][T20124] do_syscall_64+0x174/0x580 [ 1216.907280][T20124] ? trace_irq_disable+0x3b/0x140 [ 1216.907313][T20124] ? clear_bhb_loop+0x40/0x90 [ 1216.907341][T20124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.907363][T20124] RIP: 0033:0x7f5493d9ce59 [ 1216.907502][T20124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1216.907522][T20124] RSP: 002b:00007f5494d1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1216.907545][T20124] RAX: ffffffffffffffda RBX: 00007f5494015fa0 RCX: 00007f5493d9ce59 [ 1216.907561][T20124] RDX: 0000000000000001 RSI: 000020000000d980 RDI: 0000000000000003 [ 1216.907587][T20124] RBP: 00007f5494d1b090 R08: 0000000000000000 R09: 0000000000000000 [ 1216.907601][T20124] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 1216.907614][T20124] R13: 00007f5494016038 R14: 00007f5494015fa0 R15: 00007f549413fa48 [ 1216.907647][T20124] [ 1217.796863][T20136] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3684'. [ 1217.823460][T20136] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1218.077056][T16395] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1218.114072][T16395] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1218.122884][T16395] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1218.132284][T16395] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1218.145683][T16395] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1218.762266][T20162] syzkaller0: entered promiscuous mode [ 1218.774800][T20162] syzkaller0: entered allmulticast mode [ 1218.946573][T20169] netlink: 344 bytes leftover after parsing attributes in process `syz.5.3691'. [ 1219.239096][T20166] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1219.618721][ T1167] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1219.791827][ T1167] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1219.807231][ T1167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.838920][ T1167] usb 3-1: Product: syz [ 1219.847239][ T1167] usb 3-1: Manufacturer: syz [ 1219.877244][ T1167] usb 3-1: SerialNumber: syz [ 1219.903598][ T1167] usb 3-1: config 0 descriptor?? [ 1219.915887][ T1167] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 120 [ 1220.053933][ T808] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1220.221798][ T5643] Bluetooth: hci1: command tx timeout [ 1220.237998][ T808] usb 2-1: Using ep0 maxpacket: 8 [ 1220.278828][ T808] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1220.326494][ T808] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 1220.334888][ T808] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.345485][ T808] usb 2-1: config 4 has no interface number 0 [ 1220.355663][ T808] usb 2-1: string descriptor 0 read error: -22 [ 1220.362296][ T808] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1220.375674][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.404849][ T808] uvcvideo 2-1:4.147: Found multiple Units with ID 6 [ 1220.411681][ T808] uvcvideo 2-1:4.147: Found UVC 0.02 device (04f2:b746) [ 1220.421159][ T808] uvcvideo 2-1:4.147: No valid video chain found. [ 1220.623160][ T808] usb 2-1: USB disconnect, device number 15 [ 1221.102288][T10404] usb 36-1: device descriptor read/8, error -110 [ 1221.217783][T20175] FAULT_INJECTION: forcing a failure. [ 1221.217783][T20175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1221.243637][T20175] CPU: 0 UID: 0 PID: 20175 Comm: syz.1.3693 Tainted: G L syzkaller #0 PREEMPT(full) [ 1221.243674][T20175] Tainted: [L]=SOFTLOCKUP [ 1221.243684][T20175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1221.243698][T20175] Call Trace: [ 1221.243707][T20175] [ 1221.243717][T20175] dump_stack_lvl+0xe8/0x150 [ 1221.243748][T20175] should_fail_ex+0x40c/0x560 [ 1221.243776][T20175] _copy_from_user+0x2d/0xb0 [ 1221.243807][T20175] ____sys_sendmsg+0x33d/0xa20 [ 1221.243867][T20175] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1221.243909][T20175] ? import_iovec+0x73/0xa0 [ 1221.243939][T20175] ___sys_sendmsg+0x2a5/0x360 [ 1221.243962][T20175] ? __lock_acquire+0x683/0x2cd0 [ 1221.244003][T20175] ? __pfx____sys_sendmsg+0x10/0x10 [ 1221.244043][T20175] ? kstrtouint+0x6e/0xe0 [ 1221.244098][T20175] ? __fget_files+0x2a/0x420 [ 1221.244117][T20175] ? __fget_files+0x3a2/0x420 [ 1221.244160][T20175] __sys_sendmmsg+0x27c/0x4e0 [ 1221.244201][T20175] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1221.244237][T20175] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1221.244273][T20175] ? ksys_write+0x242/0x270 [ 1221.244314][T20175] ? __pfx_ksys_write+0x10/0x10 [ 1221.244353][T20175] __x64_sys_sendmmsg+0xa0/0xc0 [ 1221.244388][T20175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.244410][T20175] do_syscall_64+0x174/0x580 [ 1221.244424][T20175] ? trace_irq_disable+0x3b/0x140 [ 1221.244468][T20175] ? clear_bhb_loop+0x40/0x90 [ 1221.244496][T20175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.244518][T20175] RIP: 0033:0x7fb7a979ce59 [ 1221.244538][T20175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.244559][T20175] RSP: 002b:00007fb7aa5cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1221.244579][T20175] RAX: ffffffffffffffda RBX: 00007fb7a9a15fa0 RCX: 00007fb7a979ce59 [ 1221.244607][T20175] RDX: 0000000000000001 RSI: 000020000000d980 RDI: 0000000000000003 [ 1221.244622][T20175] RBP: 00007fb7aa5cc090 R08: 0000000000000000 R09: 0000000000000000 [ 1221.244637][T20175] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 1221.244652][T20175] R13: 00007fb7a9a16038 R14: 00007fb7a9a15fa0 R15: 00007fb7a9b3fa48 [ 1221.244684][T20175] [ 1221.728531][T10404] usb usb36-port1: attempt power cycle [ 1221.987815][ T1167] (null): failure setting delay to 10us [ 1221.993631][ T1167] i2c-tiny-usb 3-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 1222.298325][ T5643] Bluetooth: hci1: command tx timeout [ 1222.315222][T10404] usb usb36-port1: unable to enumerate USB device [ 1223.464408][T20177] : renamed from vlan0 (while UP) [ 1223.472178][T20182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3695'. [ 1223.481477][T20182] netem: unknown loss type 0 [ 1223.489590][T20182] netem: change failed [ 1223.837268][ T1167] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1223.876648][T20152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.887312][T20152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.937735][T20152] bridge_slave_0: entered allmulticast mode [ 1223.950067][T20152] bridge_slave_0: entered promiscuous mode [ 1223.999983][ T1167] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.026484][T20152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.030959][ T1167] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1224.081534][ T1167] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 1224.107234][ T1167] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.128641][T20152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.128984][ T1167] usb 2-1: Product: syz [ 1224.167297][T20152] bridge_slave_1: entered allmulticast mode [ 1224.169580][ T1167] usb 2-1: Manufacturer: syz [ 1224.193474][T20152] bridge_slave_1: entered promiscuous mode [ 1224.206845][ T1167] usb 2-1: SerialNumber: syz [ 1224.285231][T20152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1224.309223][T20152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1224.376338][T20152] team0: Port device team_slave_0 added [ 1224.384030][ T5643] Bluetooth: hci1: command tx timeout [ 1224.395168][T20152] team0: Port device team_slave_1 added [ 1224.423074][ T808] usb 3-1: USB disconnect, device number 120 [ 1224.485088][T20152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1224.494222][T20152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.521948][T20152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1224.559585][T20152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1224.566688][T20152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.597239][T20152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1224.694556][T20186] bridge3: entered promiscuous mode [ 1224.975202][T20152] hsr_slave_0: entered promiscuous mode [ 1224.990046][T20152] hsr_slave_1: entered promiscuous mode [ 1225.105926][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059b24c00: rx timeout, send abort [ 1225.233934][ T1167] usb 2-1: USB disconnect, device number 16 [ 1225.350748][T11154] udevd[11154]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1225.606660][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059b24800: rx timeout, send abort [ 1225.845375][T20234] FAULT_INJECTION: forcing a failure. [ 1225.845375][T20234] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.888821][T20234] CPU: 0 UID: 0 PID: 20234 Comm: syz.5.3703 Tainted: G L syzkaller #0 PREEMPT(full) [ 1225.888856][T20234] Tainted: [L]=SOFTLOCKUP [ 1225.888864][T20234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1225.888878][T20234] Call Trace: [ 1225.888889][T20234] [ 1225.888899][T20234] dump_stack_lvl+0xe8/0x150 [ 1225.888935][T20234] should_fail_ex+0x40c/0x560 [ 1225.888964][T20234] should_failslab+0xa8/0x100 [ 1225.889000][T20234] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 1225.889030][T20234] ? __alloc_skb+0x189/0x7a0 [ 1225.889058][T20234] ? __alloc_skb+0x1d7/0x7a0 [ 1225.889084][T20234] ? __local_bh_enable_ip+0xd0/0x130 [ 1225.889111][T20234] __alloc_skb+0x1d7/0x7a0 [ 1225.889144][T20234] alloc_skb_with_frags+0xc6/0x760 [ 1225.889188][T20234] sock_alloc_send_pskb+0x878/0x990 [ 1225.889230][T20234] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1225.889251][T20234] ? ip6_pol_route+0x160/0x13d0 [ 1225.889378][T20234] ? ip6_pol_route+0x1038/0x13d0 [ 1225.889405][T20234] ? ip6_pol_route+0x160/0x13d0 [ 1225.889437][T20234] ? __pfx_ip6_pol_route+0x10/0x10 [ 1225.889469][T20234] __ip6_append_data+0x2dd0/0x4080 [ 1225.889549][T20234] ? __lock_acquire+0x683/0x2cd0 [ 1225.889585][T20234] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1225.889638][T20234] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1225.889668][T20234] ? ip6_mtu+0x7d/0x490 [ 1225.889707][T20234] ? ip6_mtu+0x7d/0x490 [ 1225.889739][T20234] ? __pfx___ip6_append_data+0x10/0x10 [ 1225.889772][T20234] ? __pfx_ip6_mtu+0x10/0x10 [ 1225.889810][T20234] ip6_make_skb+0x2af/0x320 [ 1225.889843][T20234] ? sk_dst_check+0x25/0x480 [ 1225.889869][T20234] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1225.889897][T20234] ? __pfx_ip6_make_skb+0x10/0x10 [ 1225.889933][T20234] ? ip6_dst_hoplimit+0x65/0x3e0 [ 1225.889976][T20234] ? ip6_dst_hoplimit+0x65/0x3e0 [ 1225.890003][T20234] ? ip6_dst_hoplimit+0x65/0x3e0 [ 1225.890036][T20234] udpv6_sendmsg+0x1dfb/0x2610 [ 1225.890105][T20234] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1225.890132][T20234] ? udp_lib_get_port+0x177b/0x1c60 [ 1225.890219][T20234] ? inet_send_prepare+0x1b4/0x260 [ 1225.890282][T20234] ? inet_send_prepare+0x1b4/0x260 [ 1225.890308][T20234] ? inet_send_prepare+0x1b4/0x260 [ 1225.890328][T20234] ? __local_bh_enable_ip+0xd0/0x130 [ 1225.890350][T20234] ? inet_send_prepare+0x1b4/0x260 [ 1225.890375][T20234] ? inet6_sendmsg+0xe4/0x120 [ 1225.890398][T20234] ? __pfx_inet6_sendmsg+0x10/0x10 [ 1225.890424][T20234] ____sys_sendmsg+0x61f/0xa20 [ 1225.890466][T20234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1225.890508][T20234] ? import_iovec+0x73/0xa0 [ 1225.890538][T20234] ___sys_sendmsg+0x2a5/0x360 [ 1225.890569][T20234] ? __lock_acquire+0x683/0x2cd0 [ 1225.890614][T20234] ? __pfx____sys_sendmsg+0x10/0x10 [ 1225.890654][T20234] ? kstrtouint+0x6e/0xe0 [ 1225.890715][T20234] ? __fget_files+0x2a/0x420 [ 1225.890741][T20234] ? __fget_files+0x3a2/0x420 [ 1225.890779][T20234] __sys_sendmmsg+0x27c/0x4e0 [ 1225.890819][T20234] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1225.890851][T20234] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1225.890902][T20234] ? ksys_write+0x242/0x270 [ 1225.890955][T20234] ? __pfx_ksys_write+0x10/0x10 [ 1225.890991][T20234] __x64_sys_sendmmsg+0xa0/0xc0 [ 1225.891025][T20234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.891047][T20234] do_syscall_64+0x174/0x580 [ 1225.891066][T20234] ? trace_irq_disable+0x3b/0x140 [ 1225.891097][T20234] ? clear_bhb_loop+0x40/0x90 [ 1225.891123][T20234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.891144][T20234] RIP: 0033:0x7f34ccb9ce59 [ 1225.891166][T20234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1225.891184][T20234] RSP: 002b:00007f34cdafb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1225.891207][T20234] RAX: ffffffffffffffda RBX: 00007f34cce15fa0 RCX: 00007f34ccb9ce59 [ 1225.891223][T20234] RDX: 0000000000000001 RSI: 000020000000d980 RDI: 0000000000000003 [ 1225.891236][T20234] RBP: 00007f34cdafb090 R08: 0000000000000000 R09: 0000000000000000 [ 1225.891250][T20234] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 1225.891263][T20234] R13: 00007f34cce16038 R14: 00007f34cce15fa0 R15: 00007f34ccf3fa48 [ 1225.891297][T20234] [ 1226.304286][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059b24800: abort rx timeout. Force session deactivation [ 1226.316157][T20152] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1226.404427][T20238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3702'. [ 1226.442219][T20152] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1226.450532][T20152] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1226.458072][ T5643] Bluetooth: hci1: command tx timeout [ 1226.522978][T20152] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1226.531257][T20152] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1226.564217][T20152] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1226.583963][T20152] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1226.616389][T20152] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1226.660369][T20245] netlink: 'syz.5.3704': attribute type 10 has an invalid length. [ 1226.692528][T20252] fuse: Bad value for 'fd' [ 1226.710409][T20245] macvlan1: entered promiscuous mode [ 1226.715810][T20245] macvlan1: entered allmulticast mode [ 1226.729595][T20245] veth1_vlan: entered allmulticast mode [ 1226.730746][T20255] netlink: 'syz.5.3704': attribute type 4 has an invalid length. [ 1226.743672][T20245] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 1226.753147][T20255] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3704'. [ 1227.032150][T20152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1227.083465][T20152] 8021q: adding VLAN 0 to HW filter on device team0 [ 1227.123814][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.131068][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1227.161153][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.168421][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1227.385107][T20152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1227.522278][T20152] veth0_vlan: entered promiscuous mode [ 1227.559086][T20152] veth1_vlan: entered promiscuous mode [ 1227.606633][T20152] veth0_macvtap: entered promiscuous mode [ 1227.625747][T20152] veth1_macvtap: entered promiscuous mode [ 1227.650895][T20152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1227.682457][T20152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1227.709780][T13326] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.721549][T13326] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.737033][T13326] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.771498][T13326] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.047977][T13324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.067027][T13324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1228.139241][T13317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.156393][T13317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1228.316144][T20297] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1228.836806][T20303] xt_socket: unknown flags 0xc [ 1229.091538][T14612] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1229.267524][T14612] usb 3-1: Using ep0 maxpacket: 16 [ 1229.279678][T14612] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1229.289076][T14612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.297898][T14612] usb 3-1: Product: syz [ 1229.302205][T14612] usb 3-1: Manufacturer: syz [ 1229.306856][T14612] usb 3-1: SerialNumber: syz [ 1229.316824][T14612] usb 3-1: config 0 descriptor?? [ 1229.332899][T14612] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1229.532381][T14612] gspca_spca508: reg_read err -32 [ 1229.540748][T14612] gspca_spca508: reg_read err -32 [ 1229.546481][T14612] gspca_spca508: reg_read err -32 [ 1229.754777][T14612] gspca_spca508: reg_read err -32 [ 1230.173115][T14612] gspca_spca508: reg write: error -71 [ 1230.191965][T14612] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 1230.235042][T14612] usb 3-1: USB disconnect, device number 121 [ 1230.385132][T20340] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1230.607544][ T1167] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1230.757877][ T1167] usb 2-1: Using ep0 maxpacket: 32 [ 1230.771816][ T1167] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1230.783332][ T1167] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.798556][ T1167] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1230.808028][ T1167] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.816151][ T1167] usb 2-1: Product: syz [ 1230.821150][ T1167] usb 2-1: Manufacturer: syz [ 1230.825869][ T1167] usb 2-1: SerialNumber: syz [ 1231.354274][ T1167] usb 2-1: Cannot retrieve CPort count: -110 [ 1231.382387][ T1167] usb 2-1: Cannot retrieve CPort count: -110 [ 1231.409802][ T1167] es2_ap_driver 2-1:7.0: probe with driver es2_ap_driver failed with error -110 [ 1231.533596][T20359] bridge_slave_0: left allmulticast mode [ 1231.557291][T20359] bridge_slave_0: left promiscuous mode [ 1231.608730][T20359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.692942][T20359] bridge_slave_1: left allmulticast mode [ 1231.724488][T20359] bridge_slave_1: left promiscuous mode [ 1231.748978][T20359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.804725][T20359] bond0: (slave bond_slave_0): Releasing backup interface [ 1231.841494][ T29] audit: type=1326 audit(1781512940.181:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20360 comm="syz.5.3727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34ccb9ce59 code=0x0 [ 1231.916829][T20359] bond0: (slave bond_slave_1): Releasing backup interface [ 1231.965357][T20359] team0: Port device team_slave_0 removed [ 1232.025006][T20359] team0: Port device team_slave_1 removed [ 1232.046744][T20359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1232.078110][T20359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1232.099406][T20359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1232.122682][T20359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1232.173941][T20359] bond1: (slave geneve2): Releasing active interface [ 1232.214074][T20366] : renamed from vlan0 (while UP) [ 1233.252586][T20393] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3733'. [ 1233.418428][T20393] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1233.587354][T14612] usb 2-1: USB disconnect, device number 17 [ 1233.804698][T20398] netlink: 'syz.1.3734': attribute type 16 has an invalid length. [ 1233.852906][T20398] netlink: 'syz.1.3734': attribute type 17 has an invalid length. [ 1234.433882][T20398] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1234.530838][T20398] ip6tnl1: left allmulticast mode [ 1234.579306][T20398] geneve2: left promiscuous mode [ 1234.640350][T20398] bridge3: left promiscuous mode [ 1234.676571][T20403] netlink: 'syz.7.3736': attribute type 11 has an invalid length. [ 1234.722307][T20403] netlink: 190972 bytes leftover after parsing attributes in process `syz.7.3736'. [ 1235.147336][T10404] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1235.342623][T10404] usb 2-1: Using ep0 maxpacket: 16 [ 1235.372963][T10404] usb 2-1: config 5 has an invalid interface number: 51 but max is 0 [ 1235.401148][T10404] usb 2-1: config 5 has no interface number 0 [ 1235.428654][T10404] usb 2-1: config 5 interface 51 altsetting 2 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1235.460827][T10404] usb 2-1: config 5 interface 51 has no altsetting 0 [ 1235.503691][T10404] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=66.f9 [ 1235.540771][T10404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.571505][T10404] usb 2-1: Product: syz [ 1235.593910][T10404] usb 2-1: Manufacturer: syz [ 1235.606183][T10404] usb 2-1: SerialNumber: syz [ 1236.369353][T20432] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3742'. [ 1236.442131][T20432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1236.676338][T20440] xt_hashlimit: max too large, truncated to 1048576 [ 1236.965372][T20448] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1237.055860][T20453] tipc: Started in network mode [ 1237.060988][T20453] tipc: Node identity 4, cluster identity 4711 [ 1237.068005][T20453] tipc: Node number set to 4 [ 1238.059459][T10404] powermate 2-1:5.51: probe with driver powermate failed with error -5 [ 1238.127839][T20474] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1238.152145][T20474] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1238.174757][T10404] usb 2-1: USB disconnect, device number 18 [ 1238.264169][T20474] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1238.451244][T20479] netlink: 8752 bytes leftover after parsing attributes in process `syz.1.3756'. [ 1238.779108][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.786112][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.921734][T20489] loop3: detected capacity change from 0 to 3335 [ 1238.944402][T20489] loop3: [CUMANA/ADFS] p1 [ADFS] p1 [ 1238.958712][T20489] loop3: partition table partially beyond EOD, truncated [ 1238.977407][T20489] loop3: p1 size 1450237411 extends beyond EOD, truncated [ 1239.481495][T20497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1239.799068][ T808] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1239.980194][ T808] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1240.004352][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.034878][ T808] usb 3-1: Product: syz [ 1240.054517][ T808] usb 3-1: Manufacturer: syz [ 1240.083113][ T808] usb 3-1: SerialNumber: syz [ 1240.090725][ T29] audit: type=1326 audit(1781512948.421:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20508 comm="syz.1.3767" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb7a979ce59 code=0x0 [ 1240.131399][ T808] usb 3-1: config 0 descriptor?? [ 1240.156570][ T808] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 122 [ 1241.360880][T20529] kAFS: unparsable volume name [ 1241.368850][T10404] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1241.413702][T20529] netlink: 284 bytes leftover after parsing attributes in process `syz.5.3770'. [ 1241.529654][T10404] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1241.539549][T10404] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.581932][T10404] usb 2-1: config 0 descriptor?? [ 1241.827373][T10404] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1242.041324][T20527] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3770'. [ 1242.052372][T20527] netlink: 29 bytes leftover after parsing attributes in process `syz.5.3770'. [ 1242.064758][T20527] tipc: Invalid UDP bearer configuration [ 1242.064817][T20527] tipc: Enabling of bearer rejected, failed to enable media [ 1242.103679][T10404] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1242.131802][T10404] [drm] Initialized udl on minor 2 [ 1242.221919][ T808] (null): failure setting delay to 10us [ 1242.248513][ T808] i2c-tiny-usb 3-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 1242.258031][T10404] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1242.276358][T10404] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1242.324347][T14612] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1242.337406][T10404] usb 2-1: USB disconnect, device number 19 [ 1242.358659][T14612] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1242.536053][ T5733] usb 3-1: USB disconnect, device number 122 [ 1243.522166][T20554] loop3: detected capacity change from 0 to 2895 [ 1243.545786][T20554] loop3: [CUMANA/ADFS] p1 [ADFS] p1 [ 1243.568137][T20554] loop3: partition table partially beyond EOD, truncated [ 1243.596533][T20554] loop3: p1 size 1450237411 extends beyond EOD, truncated [ 1245.317488][T10404] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1245.497885][T10404] usb 2-1: Using ep0 maxpacket: 16 [ 1245.514244][T10404] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1245.543209][T10404] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1245.569829][T10404] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1245.588810][T10404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.612296][T10404] usb 2-1: Product: syz [ 1245.626361][T10404] usb 2-1: Manufacturer: syz [ 1245.631545][T10404] usb 2-1: SerialNumber: syz [ 1245.647385][T10404] usb 2-1: config 0 descriptor?? [ 1245.659003][T10404] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1245.678779][T10404] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1246.013950][T20602] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1246.258781][T10404] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1246.265757][T10404] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1246.277542][ T808] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1246.407349][ T808] usb 3-1: device descriptor read/64, error -71 [ 1246.475218][T10404] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1246.483115][T10404] em28xx 2-1:0.0: No AC97 audio processor [ 1246.647265][ T808] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1246.777510][ T808] usb 3-1: device descriptor read/64, error -71 [ 1246.890418][ T808] usb usb3-port1: attempt power cycle [ 1247.135736][T20607] netlink: 'syz.5.3789': attribute type 23 has an invalid length. [ 1247.227273][ T808] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1247.271050][ T808] usb 3-1: device descriptor read/8, error -71 [ 1247.320973][T20610] bridge0: port 3(vlan0) entered blocking state [ 1247.330042][T20610] bridge0: port 3(vlan0) entered disabled state [ 1247.336595][T20610] vlan0: entered allmulticast mode [ 1247.343514][T20610] geneve0: entered allmulticast mode [ 1247.351925][T20610] vlan0: entered promiscuous mode [ 1247.357176][T20610] geneve0: entered promiscuous mode [ 1247.517585][ T808] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1247.564725][ T808] usb 3-1: device descriptor read/8, error -71 [ 1247.677462][ T808] usb usb3-port1: unable to enumerate USB device [ 1248.033301][T20623] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1249.015410][ T5733] usb 2-1: USB disconnect, device number 20 [ 1249.026337][ T5733] em28xx 2-1:0.0: Disconnecting em28xx [ 1249.071761][ T5733] em28xx 2-1:0.0: Freeing device [ 1249.139161][ T5643] Bluetooth: hci2: unexpected event for opcode 0x2005 [ 1249.407402][ T1167] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 1249.499003][ T5733] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1249.537430][ T1167] usb 3-1: device descriptor read/64, error -71 [ 1249.669640][ T5733] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1249.680827][ T5733] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1249.691053][ T5733] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1249.703438][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.715465][T20639] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1249.730169][ T5733] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1249.777583][ T1167] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1249.917252][ T1167] usb 3-1: device descriptor read/64, error -71 [ 1249.950520][ T5733] usb 2-1: USB disconnect, device number 21 [ 1250.027715][ T1167] usb usb3-port1: attempt power cycle [ 1250.368320][ T1167] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 1250.388035][ T1167] usb 3-1: device descriptor read/8, error -71 [ 1250.637323][ T1167] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1250.658584][ T1167] usb 3-1: device descriptor read/8, error -71 [ 1250.779564][ T1167] usb usb3-port1: unable to enumerate USB device [ 1253.837288][T10404] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1254.017181][T10404] usb 2-1: Using ep0 maxpacket: 32 [ 1254.066091][T10404] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 219, changing to 11 [ 1254.107283][T10404] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50507, setting to 1024 [ 1254.154611][T10404] usb 2-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 1254.182925][T10404] usb 2-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 1254.212860][T10404] usb 2-1: Product: syz [ 1254.227298][T10404] usb 2-1: Manufacturer: syz [ 1254.262576][T10404] usb 2-1: config 0 descriptor?? [ 1254.285097][T20703] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1254.846281][T10404] usbhid 2-1:0.0: can't add hid device: -71 [ 1254.884424][T10404] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1254.941847][T10404] usb 2-1: USB disconnect, device number 22 [ 1255.390080][T20721] syzkaller0: entered promiscuous mode [ 1255.408712][T20721] syzkaller0: entered allmulticast mode [ 1256.283739][T20753] syzkaller0: entered promiscuous mode [ 1256.289893][T20753] syzkaller0: entered allmulticast mode [ 1256.660304][T20761] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1256.943073][T20766] syzkaller0: entered promiscuous mode [ 1256.957765][T20766] syzkaller0: entered allmulticast mode [ 1257.367771][T10404] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1257.517276][T10404] usb 2-1: Using ep0 maxpacket: 16 [ 1257.532270][T10404] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1257.556337][T10404] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1257.575429][T10404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.597984][T10404] usb 2-1: Product: syz [ 1257.606625][T10404] usb 2-1: Manufacturer: syz [ 1257.616576][T10404] usb 2-1: SerialNumber: syz [ 1257.635836][T10404] usb 2-1: config 0 descriptor?? [ 1257.662861][T10404] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1257.682217][T10404] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1258.449598][T10404] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1258.879344][T10404] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1258.887595][T10404] em28xx 2-1:0.0: board has no eeprom [ 1258.997318][T10404] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1259.005479][T10404] em28xx 2-1:0.0: dvb set to bulk mode. [ 1259.011276][ T808] em28xx 2-1:0.0: Binding DVB extension [ 1259.024766][T10404] usb 2-1: USB disconnect, device number 23 [ 1259.036786][T10404] em28xx 2-1:0.0: Disconnecting em28xx [ 1259.049822][T14612] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1259.101507][ T808] em28xx 2-1:0.0: Registering input extension [ 1259.131107][T10404] em28xx 2-1:0.0: Closing input extension [ 1259.200484][T10404] em28xx 2-1:0.0: Freeing device [ 1259.227414][T14612] usb 3-1: Using ep0 maxpacket: 16 [ 1259.251403][T20785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1259.340075][T20785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1259.409795][T10015] dvb-usb: did not find the firmware file 'dvb-usb-bluebird-01.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1259.481985][T10015] dvb_usb_cxusb 6-1:6.252: probe with driver dvb_usb_cxusb failed with error -22 [ 1259.537030][T14612] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1259.581014][T10015] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in cold state, will try to load a firmware [ 1259.597401][T14612] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1259.638592][T10015] usb 6-1: Direct firmware load for dvb-usb-bluebird-01.fw failed with error -2 [ 1259.654001][T14612] usb 3-1: can't read configurations, error -71 [ 1259.697235][T10015] usb 6-1: Falling back to sysfs fallback for: dvb-usb-bluebird-01.fw [ 1259.763793][T20793] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3841'. [ 1259.810243][T20793] netlink: 112 bytes leftover after parsing attributes in process `syz.7.3841'. [ 1259.912038][T20793] netlink: 'syz.7.3841': attribute type 4 has an invalid length. [ 1260.279982][T20806] syzkaller0: entered promiscuous mode [ 1260.295801][T20806] syzkaller0: entered allmulticast mode [ 1260.580255][T20810] loop5: detected capacity change from 0 to 7 [ 1260.604974][T20810] loop5: [ 1260.608400][T20810] loop5: partition table partially beyond EOD, truncated [ 1260.829724][T20813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1260.967230][T14612] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1260.977894][T20821] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1261.004895][T10010] team_slave_0: entered promiscuous mode [ 1261.011739][T10010] team_slave_1: entered promiscuous mode [ 1261.077347][ T808] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1261.144055][T14612] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1261.155292][T14612] usb 3-1: string descriptor 0 read error: -22 [ 1261.162634][T14612] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.40 [ 1261.172865][T14612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.242741][ T808] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1261.255172][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.263432][ T808] usb 2-1: Product: syz [ 1261.269514][ T808] usb 2-1: Manufacturer: syz [ 1261.275027][ T808] usb 2-1: SerialNumber: syz [ 1261.283426][ T808] usb 2-1: config 0 descriptor?? [ 1261.295027][ T808] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 024 [ 1261.393626][T14612] usbhid 3-1:1.0: can't add hid device: -71 [ 1261.401995][T14612] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1261.413890][T14612] usb 3-1: USB disconnect, device number 7 [ 1261.562104][T20827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3850'. [ 1261.571725][T20827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1261.594951][T20827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1261.638263][T20828] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3850'. [ 1261.722191][T20830] netlink: 'syz.7.3851': attribute type 10 has an invalid length. [ 1261.749199][T20830] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1261.796185][T20832] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3852'. [ 1262.609131][T20849] syzkaller0: entered promiscuous mode [ 1262.614773][T20849] syzkaller0: entered allmulticast mode [ 1263.023767][T20857] fuse: Unknown parameter '0x0000000000000005' [ 1263.221979][ T808] (null): failure setting delay to 10us [ 1263.248717][ T808] i2c-tiny-usb 2-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 1263.310363][ T808] usb 2-1: USB disconnect, device number 24 [ 1263.370677][T20862] binder: 20861:20862 ioctl 4018620d 0 returned -22 [ 1263.664509][T20869] bond0: entered promiscuous mode [ 1263.671637][T20869] bond_slave_0: entered promiscuous mode [ 1263.677697][T20869] bond_slave_1: entered promiscuous mode [ 1263.696859][T20869] batadv0: entered promiscuous mode [ 1263.710247][T20869] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1263.723060][T20869] bond0: left promiscuous mode [ 1263.728407][T20869] bond_slave_0: left promiscuous mode [ 1263.735656][T20869] bond_slave_1: left promiscuous mode [ 1263.746578][T20869] batadv0: left promiscuous mode [ 1263.765217][T20867] netlink: 'syz.1.3861': attribute type 5 has an invalid length. [ 1263.773277][T20867] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3861'. [ 1264.117427][T14461] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1264.281339][T14461] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1264.291412][T14461] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.303433][T14461] usb 3-1: config 0 descriptor?? [ 1264.837372][ T5733] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1265.010808][ T5733] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1265.034152][ T5733] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1265.066203][ T5733] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1265.076786][ T5733] usb 2-1: config 220 has no interface number 2 [ 1265.112289][ T5733] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1265.128048][ T5733] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1265.135381][ T5733] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1265.148256][ T5733] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1265.194605][ T5733] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1265.205701][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.214701][ T5733] usb 2-1: Product: syz [ 1265.220370][ T5733] usb 2-1: Manufacturer: syz [ 1265.225719][ T5733] usb 2-1: SerialNumber: syz [ 1265.418454][T20885] syzkaller0: entered promiscuous mode [ 1265.424285][T20885] syzkaller0: entered allmulticast mode [ 1265.450169][T20886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.473621][T20886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.509563][ T5733] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1265.545649][ T5733] uvcvideo 2-1:220.0: No valid video chain found. [ 1265.558437][ T5733] usb 2-1: selecting invalid altsetting 0 [ 1265.606815][ T5733] usb 2-1: selecting invalid altsetting 0 [ 1265.618935][ T5733] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1265.636635][ T5733] usb 2-1: USB disconnect, device number 25 [ 1265.732638][T14461] usb 3-1: Cannot set autoneg [ 1265.740149][T14461] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1265.770795][T14461] usb 3-1: USB disconnect, device number 8 [ 1266.241520][T20905] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1266.385746][T20910] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1266.396378][T20910] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1266.476548][T20910] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1266.613716][ T29] audit: type=1326 audit(1781512974.951:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20911 comm="syz.2.3877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5493d9ce59 code=0x7ffc0000 [ 1266.666055][T20914] binder: 20911:20914 ioctl c0306201 200000000000 returned -14 [ 1266.753036][ T29] audit: type=1326 audit(1781512974.951:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20911 comm="syz.2.3877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5493d9ce59 code=0x7ffc0000 [ 1266.893223][ T29] audit: type=1326 audit(1781512974.991:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20911 comm="syz.2.3877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5493d9ce59 code=0x7ffc0000 [ 1267.028232][ T29] audit: type=1326 audit(1781512974.991:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20911 comm="syz.2.3877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5493d9ce59 code=0x7ffc0000 [ 1267.091608][ T29] audit: type=1326 audit(1781512974.991:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20911 comm="syz.2.3877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5493d9ce59 code=0x7ffc0000 [ 1267.144022][ T29] audit: type=1326 audit(1781512975.001:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20911 comm="syz.2.3877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5493d9ce59 code=0x7ffc0000 [ 1267.205833][ T29] audit: type=1326 audit(1781512975.001:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20911 comm="syz.2.3877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5493d9ce59 code=0x7ffc0000 [ 1267.251339][ T29] audit: type=1326 audit(1781512975.001:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20911 comm="syz.2.3877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5493d9ce59 code=0x7ffc0000 [ 1267.281905][ T29] audit: type=1326 audit(1781512975.001:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20911 comm="syz.2.3877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5493d9ce59 code=0x7ffc0000 [ 1267.365709][ T29] audit: type=1326 audit(1781512975.001:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20911 comm="syz.2.3877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5493d9ce59 code=0x7ffc0000 [ 1267.435399][T20923] syzkaller0: entered promiscuous mode [ 1267.441119][T20923] syzkaller0: entered allmulticast mode [ 1267.687357][T20285] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1267.867608][T20285] usb 3-1: Using ep0 maxpacket: 16 [ 1267.878469][T20285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1267.889813][T20285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1267.900477][T20285] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1267.915366][T20285] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1267.926054][T20285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.937763][T20930] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1267.996984][T20285] usb 3-1: config 0 descriptor?? [ 1268.008991][T20941] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3885'. [ 1268.050071][T20941] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1268.339728][T20285] usbhid 3-1:0.0: can't add hid device: -71 [ 1268.349120][T20285] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1268.371823][T20285] usb 3-1: USB disconnect, device number 9 [ 1268.444071][T20952] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3888'. [ 1268.469292][T20952] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1268.537584][T14461] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1268.677405][T14461] usb 2-1: device descriptor read/64, error -71 [ 1268.920782][T20965] fuse: Unknown parameter 'rooLYGtmode' [ 1268.927677][T14461] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1269.077512][T14461] usb 2-1: device descriptor read/64, error -71 [ 1269.144562][T20967] syzkaller0: entered promiscuous mode [ 1269.151494][T20967] syzkaller0: entered allmulticast mode [ 1269.221253][T14461] usb usb2-port1: attempt power cycle [ 1269.431791][T20973] tipc: Started in network mode [ 1269.441731][T20973] tipc: Node identity 96b656101ecb, cluster identity 4711 [ 1269.466859][T20973] tipc: Enabled bearer , priority 0 [ 1269.475036][T20973] syzkaller0: entered promiscuous mode [ 1269.481502][T20973] syzkaller0: entered allmulticast mode [ 1269.497033][T20973] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3896'. [ 1269.576082][T20972] tipc: Resetting bearer [ 1269.582488][T14461] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1269.609594][T20972] tipc: Disabling bearer [ 1269.628210][T14461] usb 2-1: device descriptor read/8, error -71 [ 1269.773522][T20989] tipc: Enabling of bearer rejected, failed to enable media [ 1269.833738][T20991] netlink: 'syz.7.3902': attribute type 1 has an invalid length. [ 1269.877306][T14461] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1269.930633][T14461] usb 2-1: device descriptor read/8, error -71 [ 1269.998541][ T1167] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1270.057539][T14461] usb usb2-port1: unable to enumerate USB device [ 1270.153427][T21002] syzkaller0: entered promiscuous mode [ 1270.159352][T21002] syzkaller0: entered allmulticast mode [ 1270.179011][ T1167] usb 3-1: Using ep0 maxpacket: 16 [ 1270.211258][ T1167] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.227313][ T1167] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1270.238566][ T1167] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1270.248684][ T1167] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1270.258893][ T1167] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1270.273709][ T1167] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1270.283858][ T1167] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1270.293273][ T1167] usb 3-1: Manufacturer: syz [ 1270.301244][ T1167] usb 3-1: config 0 descriptor?? [ 1270.780978][T21004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1270.967271][ T1167] rc_core: IR keymap rc-hauppauge not found [ 1270.983597][ T1167] Registered IR keymap rc-empty [ 1271.007309][ T1167] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1271.047392][ T1167] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1271.124179][ T1167] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1271.184067][ T1167] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input90 [ 1271.251824][ T1167] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1271.287747][ T1167] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1271.337688][ T1167] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1271.378700][ T1167] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1271.434740][ T1167] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1271.477294][ T1167] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1271.507222][ T1167] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1271.550234][ T1167] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1271.577372][ T1167] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1271.618013][ T1167] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1271.671336][ T1167] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1271.699321][ T1167] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1271.738209][T21030] syzkaller0: entered promiscuous mode [ 1271.759311][T21030] syzkaller0: entered allmulticast mode [ 1271.775014][ T1167] usb 3-1: USB disconnect, device number 10 [ 1271.837637][ T5733] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1272.017889][ T5733] usb 2-1: Using ep0 maxpacket: 16 [ 1272.032374][ T5733] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 1272.050211][ T5733] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1272.056901][ T5733] usb 2-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00 [ 1272.076630][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.100088][ T5733] usb 2-1: config 0 descriptor?? [ 1272.258767][ T1167] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1272.478214][T21043] syzkaller0: entered promiscuous mode [ 1272.484166][T21043] syzkaller0: entered allmulticast mode [ 1272.536890][ T5733] usb 2-1: string descriptor 0 read error: -71 [ 1272.572844][ T5733] usbhid 2-1:0.0: can't add hid device: -71 [ 1272.588111][ T5733] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1272.605727][ T5733] usb 2-1: USB disconnect, device number 30 [ 1276.205273][T21044] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1276.331121][T21054] tipc: Enabling of bearer rejected, failed to enable media [ 1276.917271][T10010] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1277.082102][T21091] vivid-000: disconnect [ 1277.107546][T10010] usb 2-1: Using ep0 maxpacket: 16 [ 1277.153187][T10010] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1277.225850][T10010] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1277.312023][T21090] vivid-000: reconnect [ 1277.342096][T10010] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.458367][T10010] usb 2-1: config 0 descriptor?? [ 1277.560086][T21101] syzkaller0: entered promiscuous mode [ 1277.580956][T21101] syzkaller0: entered allmulticast mode [ 1277.718248][T21100] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1277.915592][T10010] hid-led 0003:0FC5:B080.0048: reserved main item tag 0xd [ 1277.968413][T10010] hid-led 0003:0FC5:B080.0048: unknown main item tag 0x0 [ 1278.027396][T20285] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1278.112724][T10010] hid-led 0003:0FC5:B080.0048: unknown main item tag 0x0 [ 1278.151944][T10010] hid-led 0003:0FC5:B080.0048: unknown main item tag 0x0 [ 1278.175118][T10010] hid-led 0003:0FC5:B080.0048: unknown main item tag 0x0 [ 1278.202208][T10010] hid-led 0003:0FC5:B080.0048: unknown main item tag 0x0 [ 1278.237733][T10010] hid-led 0003:0FC5:B080.0048: unknown main item tag 0x0 [ 1278.299892][T20285] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1278.324920][T20285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.336375][T20285] usb 3-1: Product: syz [ 1278.345962][T20285] usb 3-1: Manufacturer: syz [ 1278.372045][T20285] usb 3-1: SerialNumber: syz [ 1278.431371][T20285] usb 3-1: config 0 descriptor?? [ 1278.486117][T21113] netlink: 'syz.1.3924': attribute type 4 has an invalid length. [ 1278.512723][T20285] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 012 [ 1278.930528][T21119] netlink: 'syz.7.3937': attribute type 1 has an invalid length. [ 1279.133871][T21119] bond1: entered promiscuous mode [ 1279.161225][T21119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1279.924714][T10010] hid-led 0003:0FC5:B080.0048: probe with driver hid-led failed with error -71 [ 1279.981990][T10010] usb 2-1: USB disconnect, device number 31 [ 1280.573718][T21141] loop5: detected capacity change from 0 to 7 [ 1280.602046][T21141] loop5: [ 1280.620105][T21141] loop5: partition table partially beyond EOD, truncated [ 1280.632762][T20285] (null): failure setting delay to 10us [ 1280.664538][T20285] i2c-tiny-usb 3-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 1280.773272][T10010] usb 3-1: USB disconnect, device number 12 [ 1280.983957][T21146] kvm: user requested TSC rate below hardware speed [ 1281.161722][T21148] syzkaller0: entered promiscuous mode [ 1281.198183][T21148] syzkaller0: entered allmulticast mode [ 1281.644961][T21160] Cannot find add_set index 2 as target [ 1281.670881][T21160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1281.907510][T21158] veth0_virt_wifi: entered promiscuous mode [ 1282.747447][T14612] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1282.943140][T14612] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1282.979991][T14612] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1283.012348][T14612] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 1283.031753][T14612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.046015][T14612] usb 2-1: Product: syz [ 1283.050646][T14612] usb 2-1: Manufacturer: syz [ 1283.055612][T14612] usb 2-1: SerialNumber: syz [ 1283.305381][T21166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1283.342692][T21166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1283.527318][T14612] usb 2-1: USB disconnect, device number 32 [ 1284.567287][ T5733] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1284.717563][ T5733] usb 2-1: Using ep0 maxpacket: 8 [ 1284.741364][ T5733] usb 2-1: config 0 has no interfaces? [ 1284.750073][ T5733] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1284.777208][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.785312][ T5733] usb 2-1: Product: syz [ 1284.790162][ T5733] usb 2-1: Manufacturer: syz [ 1284.795237][ T5733] usb 2-1: SerialNumber: syz [ 1284.803578][ T5733] usb 2-1: config 0 descriptor?? [ 1285.069614][T21183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1285.085306][T21183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1285.102540][ T5733] usb 2-1: USB disconnect, device number 33 [ 1285.119642][T21200] syzkaller0: entered promiscuous mode [ 1285.125391][T21200] syzkaller0: entered allmulticast mode [ 1285.253872][ T1167] IPVS: starting estimator thread 0... [ 1285.357992][T21203] IPVS: using max 33 ests per chain, 79200 per kthread [ 1286.388216][T21228] CUSE: info not properly terminated [ 1286.407545][ T1167] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1286.577157][ T1167] usb 2-1: Using ep0 maxpacket: 32 [ 1286.588708][ T1167] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1286.622143][ T1167] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1286.657023][ T1167] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1286.696061][ T1167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.734256][ T1167] usb 2-1: config 0 descriptor?? [ 1286.751875][ T1167] hub 2-1:0.0: USB hub found [ 1286.952217][ T1167] hub 2-1:0.0: 1 port detected [ 1287.000460][ T1167] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1287.022184][ T1167] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1287.082565][ T1167] usbhid 2-1:0.0: can't add hid device: -71 [ 1287.101321][ T1167] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1287.160635][ T1167] usb 2-1: USB disconnect, device number 34 [ 1287.587479][ T1167] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1287.731600][T21252] syzkaller0: entered promiscuous mode [ 1287.742691][T21252] syzkaller0: entered allmulticast mode [ 1287.781530][ T1167] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1287.826071][ T1167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.838191][ T1167] usb 2-1: config 0 descriptor?? [ 1287.852159][ T1167] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1287.877599][T21255] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3975'. [ 1288.280210][ T1167] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 1288.479649][ T1167] gspca_cpia1: usb_control_msg 01, error -32 [ 1288.613973][T21270] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3980'. [ 1288.690671][ T5733] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1288.791665][T21244] program syz.1.3971 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1288.878484][ T5733] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1288.893280][ T5733] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 1288.905410][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.932260][ T5733] usb 3-1: config 0 descriptor?? [ 1289.055694][ T1167] gspca_cpia1: usb_control_msg 01, error -71 [ 1289.068044][ T1167] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 1289.094146][ T1167] usb 2-1: USB disconnect, device number 35 [ 1289.353201][ T5733] usbhid 3-1:0.0: can't add hid device: -71 [ 1289.387273][ T5733] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1289.433811][ T5733] usb 3-1: USB disconnect, device number 13 [ 1289.474245][T21278] loop5: detected capacity change from 0 to 7 [ 1289.483049][T21278] loop5: [ 1289.486061][T21278] loop5: partition table partially beyond EOD, truncated [ 1290.302188][T21292] syzkaller0: entered promiscuous mode [ 1290.307804][T21292] syzkaller0: entered allmulticast mode [ 1291.110008][T21312] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3993'. [ 1291.137176][ T5724] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1291.317652][ T5724] usb 3-1: Using ep0 maxpacket: 32 [ 1291.351574][ T5724] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1291.384109][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.413496][ T5724] usb 3-1: Product: syz [ 1291.424862][ T5724] usb 3-1: Manufacturer: syz [ 1291.438329][ T5724] usb 3-1: SerialNumber: syz [ 1291.699887][ T5724] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 1291.725702][ T5724] usb 3-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 1291.756848][ T5724] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 1291.780039][ T5724] usb 3-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 1291.953022][ T5724] usb 3-1: USB disconnect, device number 14 [ 1292.024850][T11081] udevd[11081]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1292.210494][T21321] bridge2: entered promiscuous mode [ 1292.360291][T21324] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3997'. [ 1292.412828][T21324] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3997'. [ 1292.573603][T21326] syzkaller0: entered promiscuous mode [ 1292.582874][T21326] syzkaller0: entered allmulticast mode [ 1292.600574][T21328] fuse: Unknown parameter '0x0000000000000003' [ 1292.810270][T21333] loop3: detected capacity change from 0 to 4871 [ 1292.835057][T21333] loop3: [CUMANA/ADFS] p1 [ADFS] p1 [ 1292.866238][T21333] loop3: partition table partially beyond EOD, truncated [ 1292.885346][T21333] loop3: p1 size 1450237411 extends beyond EOD, truncated [ 1293.256581][T21345] tipc: Enabling of bearer rejected, failed to enable media [ 1293.336672][T21338] tipc: Enabling of bearer rejected, failed to enable media [ 1294.107833][ T808] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1294.267261][ T808] usb 2-1: Using ep0 maxpacket: 16 [ 1294.274397][ T808] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.285699][ T808] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1294.292504][ T808] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1294.302006][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.320400][ T808] usb 2-1: config 0 descriptor?? [ 1294.492301][T21370] netlink: set zone limit has 4 unknown bytes [ 1294.791474][ T808] mcp2221 0003:04D8:00DD.0049: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1295.171856][T21359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.182577][T21359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1295.193423][T21359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.206490][T21359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1295.766547][ T1167] usb 2-1: USB disconnect, device number 36 [ 1296.547635][T14612] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 1296.697234][T14612] usb 2-1: Invalid ep0 maxpacket: 64 [ 1296.827514][T14612] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 1296.977309][T14612] usb 2-1: Invalid ep0 maxpacket: 64 [ 1296.982964][T14612] usb usb2-port1: attempt power cycle [ 1297.266092][T21385] GUP no longer grows the stack in syz.2.4016 (21385): 200000005000-200000008000 (200000004000) [ 1297.280813][T21385] CPU: 0 UID: 0 PID: 21385 Comm: syz.2.4016 Tainted: G L syzkaller #0 PREEMPT(full) [ 1297.280848][T21385] Tainted: [L]=SOFTLOCKUP [ 1297.280858][T21385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1297.280872][T21385] Call Trace: [ 1297.280881][T21385] [ 1297.280891][T21385] dump_stack_lvl+0xe8/0x150 [ 1297.280933][T21385] fixup_user_fault+0x637/0x6f0 [ 1297.280968][T21385] fault_in_user_writeable+0x71/0xd0 [ 1297.280994][T21385] futex_lock_pi+0x809/0xb10 [ 1297.281035][T21385] ? __pfx_futex_lock_pi+0x10/0x10 [ 1297.281089][T21385] ? futex_private_hash_put+0x13b/0x170 [ 1297.281116][T21385] ? __pfx_futex_wake_mark+0x10/0x10 [ 1297.281166][T21385] ? userfaultfd_unmap_complete+0x292/0x310 [ 1297.281232][T21385] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 1297.281269][T21385] do_futex+0x292/0x420 [ 1297.281299][T21385] ? __pfx_do_futex+0x10/0x10 [ 1297.281325][T21385] ? __vm_munmap+0x2fe/0x3e0 [ 1297.281360][T21385] __se_sys_futex+0x3a8/0x450 [ 1297.281392][T21385] ? __pfx___se_sys_futex+0x10/0x10 [ 1297.281415][T21385] ? rcu_is_watching+0x15/0xb0 [ 1297.281446][T21385] ? __x64_sys_futex+0x21/0xf0 [ 1297.281471][T21385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.281496][T21385] do_syscall_64+0x174/0x580 [ 1297.281519][T21385] ? trace_irq_disable+0x3b/0x140 [ 1297.281552][T21385] ? clear_bhb_loop+0x40/0x90 [ 1297.281579][T21385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.281601][T21385] RIP: 0033:0x7f5493d9ce59 [ 1297.281621][T21385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1297.281640][T21385] RSP: 002b:00007f5494cfa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1297.281662][T21385] RAX: ffffffffffffffda RBX: 00007f5494016090 RCX: 00007f5493d9ce59 [ 1297.281678][T21385] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 1297.281693][T21385] RBP: 00007f5493e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1297.281707][T21385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1297.281720][T21385] R13: 00007f5494016128 R14: 00007f5494016090 R15: 00007f549413fa48 [ 1297.281755][T21385] [ 1297.528246][T14612] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 1297.547799][T14612] usb 2-1: Invalid ep0 maxpacket: 64 [ 1297.677269][T14612] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 1297.698015][T14612] usb 2-1: Invalid ep0 maxpacket: 64 [ 1297.703664][T14612] usb usb2-port1: unable to enumerate USB device [ 1298.087171][T14612] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1298.211229][T21400] fuse: Unknown parameter '0x0000000000000003' [ 1298.257164][T14612] usb 3-1: Using ep0 maxpacket: 16 [ 1298.264286][T14612] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1298.280250][T14612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1298.293506][T14612] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1298.302715][T14612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.312173][T14612] usb 3-1: Product: syz [ 1298.316399][T14612] usb 3-1: Manufacturer: syz [ 1298.321563][T14612] usb 3-1: SerialNumber: syz [ 1298.329340][T14612] usb 3-1: config 0 descriptor?? [ 1298.339480][T14612] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1298.349712][T14612] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1298.943134][T14612] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1298.952357][T14612] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1299.165559][T21406] loop3: detected capacity change from 0 to 6639 [ 1299.174456][T21406] loop3: [CUMANA/ADFS] p1 [ADFS] p1 [ 1299.180918][T21406] loop3: partition table partially beyond EOD, truncated [ 1299.191930][T21406] loop3: p1 size 1450237411 extends beyond EOD, truncated [ 1299.573925][T14612] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1299.600618][T14612] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1299.618160][T14612] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1299.627538][T14612] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1299.647900][T14612] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1299.655260][T14612] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1300.182161][T21414] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1300.223202][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.240614][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.577234][ T5724] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1300.779252][ T5724] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1300.807924][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.835981][ T5724] usb 2-1: Product: syz [ 1300.866146][ T5724] usb 2-1: Manufacturer: syz [ 1300.884577][T14612] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1300.906397][ T5724] usb 2-1: SerialNumber: syz [ 1300.932232][T14612] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1300.962572][T14612] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1300.969688][ T5724] usb 2-1: config 0 descriptor?? [ 1300.991982][T14612] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1301.023658][T14612] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1301.052369][ T5724] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 041 [ 1301.086198][T14612] usb 3-1: USB disconnect, device number 15 [ 1301.265197][T21426] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1302.550134][T21446] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1302.611915][T21448] fuse: Unknown parameter '0x0000000000000003' [ 1302.832944][ T5724] (null): failure setting delay to 10us [ 1302.849707][ T5724] i2c-tiny-usb 2-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 1302.905407][ T5724] usb 2-1: USB disconnect, device number 41 [ 1303.148641][T21453] fuse: Bad value for 'fd' [ 1303.366711][T21458] loop3: detected capacity change from 0 to 4407 [ 1303.392803][T21458] loop3: [CUMANA/ADFS] p1 [ADFS] p1 [ 1303.409103][T21458] loop3: partition table partially beyond EOD, truncated [ 1303.426643][T21458] loop3: p1 size 1450237411 extends beyond EOD, truncated [ 1303.491494][T21460] vlan2: entered allmulticast mode [ 1303.496685][T21460] bond0: entered allmulticast mode [ 1303.523180][T21460] bond_slave_0: entered allmulticast mode [ 1303.532702][T21460] bond_slave_1: entered allmulticast mode [ 1303.602275][T21460] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4036'. [ 1303.730753][T21460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1303.759914][T21460] bond_slave_0: left allmulticast mode [ 1303.783384][T21463] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1303.808666][T21460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1303.834356][T21460] bond_slave_1: left allmulticast mode [ 1303.863581][T21460] bond0 (unregistering): Released all slaves [ 1304.799400][T21477] openvswitch: netlink: Flow actions attr not present in new flow. [ 1305.423362][T21484] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1305.697160][ T5733] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1305.881047][ T5733] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1305.890453][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.899223][ T5733] usb 3-1: Product: syz [ 1305.903567][ T5733] usb 3-1: Manufacturer: syz [ 1305.908660][ T5733] usb 3-1: SerialNumber: syz [ 1305.915854][ T5733] usb 3-1: config 0 descriptor?? [ 1305.932543][ T5733] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 016 [ 1306.644260][T21495] fuse: Unknown parameter '0x0000000000000003' [ 1307.563494][T21504] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4051'. [ 1307.650669][T21508] loop3: detected capacity change from 0 to 2903 [ 1307.664013][T21508] loop3: [CUMANA/ADFS] p1 [ADFS] p1 [ 1307.670577][T21508] loop3: partition table partially beyond EOD, truncated [ 1307.679683][T21508] loop3: p1 size 1450237411 extends beyond EOD, truncated [ 1307.979282][ T5733] (null): failure setting delay to 10us [ 1307.993541][ T5733] i2c-tiny-usb 3-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 1308.297273][T14612] usb 3-1: USB disconnect, device number 16 [ 1308.875250][T21521] syzkaller0: entered promiscuous mode [ 1308.908919][T21521] syzkaller0: entered allmulticast mode [ 1309.057847][T21525] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1309.122361][T21525] syzkaller0: entered promiscuous mode [ 1309.141036][T21525] syzkaller0: entered allmulticast mode [ 1309.488531][T10010] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1309.667163][T10010] usb 3-1: Using ep0 maxpacket: 32 [ 1309.679277][T10010] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 1309.699278][T10010] usb 3-1: config 0 has no interface number 0 [ 1309.712195][T10010] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1309.737247][T10010] usb 3-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1309.767097][T10010] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1309.792428][T10010] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1309.829617][T10010] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1309.850726][T10010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.869233][T10010] usb 3-1: Product: syz [ 1309.881159][T10010] usb 3-1: Manufacturer: syz [ 1309.893053][T10010] usb 3-1: SerialNumber: syz [ 1309.923770][T10010] usb 3-1: config 0 descriptor?? [ 1309.975698][T10010] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input92 [ 1310.017014][ C1] bcm5974 3-1:0.119: trackpad urb failed: -1 [ 1310.055658][T21538] fuse: Unknown parameter 'fd0x0000000000000003' [ 1310.163485][T10010] usb 3-1: USB disconnect, device number 17 [ 1311.110511][T21562] loop3: detected capacity change from 0 to 3103 [ 1311.135068][T21562] loop3: [CUMANA/ADFS] p1 [ADFS] p1 [ 1311.148030][T21562] loop3: partition table partially beyond EOD, truncated [ 1311.164324][T21562] loop3: p1 size 1450237411 extends beyond EOD, truncated [ 1311.202293][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1311.202312][ T29] audit: type=1804 audit(1781513019.541:1818): pid=21564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4068" name="/newroot/203/file1" dev="tmpfs" ino=1068 res=1 errno=0 [ 1312.377832][T14612] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1312.537202][T14612] usb 2-1: Using ep0 maxpacket: 32 [ 1312.548287][T14612] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1312.560779][T14612] usb 2-1: config 0 has no interface number 0 [ 1312.589345][T14612] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1312.606780][T21580] netlink: 160 bytes leftover after parsing attributes in process `syz.2.4071'. [ 1312.617398][T14612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.642945][T14612] usb 2-1: Product: syz [ 1312.655025][T14612] usb 2-1: Manufacturer: syz [ 1312.689448][T14612] usb 2-1: SerialNumber: syz [ 1312.711701][T14612] usb 2-1: config 0 descriptor?? [ 1312.723671][T14612] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1312.757313][T14612] usb 2-1: selecting invalid altsetting 1 [ 1312.771410][T14612] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1312.808225][T14612] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1312.833296][T14612] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1312.854703][T14612] usb 2-1: media controller created [ 1312.934776][T14612] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1313.070864][T14612] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1313.080782][T14612] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1313.101458][T14612] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1313.200645][T14612] usb 2-1: USB disconnect, device number 42 [ 1313.311594][T21589] fuse: Unknown parameter 'fd0x0000000000000003' [ 1313.937308][ T5724] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1314.097353][ T5724] usb 2-1: Using ep0 maxpacket: 16 [ 1314.107542][ T5724] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1314.117469][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.125777][ T5724] usb 2-1: Product: 䈥霴ꋲ䊆块Ⱌളꨄ圼Ƽ쁬젽慄뮺窳캊㐓힩盫剹ᤃ㱻홭稯궼ꋴꥂ৖샂温횊㦕腟캭繤樬谑ɕ볽烐最࢈ᢹʷ꯭킊쯧菔鮎짞妍叐μ똘컱揧Ϟ닦솈譕㩢﫧 [ 1314.152135][ T5724] usb 2-1: Manufacturer: љ [ 1314.156733][ T5724] usb 2-1: SerialNumber: з [ 1314.386384][ T5724] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1314.445620][ T5724] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1314.466405][ T5724] usb 2-1: USB disconnect, device number 43 [ 1314.501259][T11154] udevd[11154]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1314.734754][T21607] netlink: 8544 bytes leftover after parsing attributes in process `syz.2.4080'. [ 1315.027537][T20285] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1315.116445][T21614] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4083'. [ 1315.207659][T20285] usb 3-1: Using ep0 maxpacket: 32 [ 1315.240034][T20285] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1315.261077][T20285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.280986][T20285] usb 3-1: Product: syz [ 1315.285293][T20285] usb 3-1: Manufacturer: syz [ 1315.294172][T20285] usb 3-1: SerialNumber: syz [ 1315.304407][T20285] usb 3-1: config 0 descriptor?? [ 1315.318400][T20285] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1315.516693][T21609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.526433][T21609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.537766][T20285] gspca_topro: reg_w err -71 [ 1315.567320][T20285] gspca_topro: Sensor soi763a [ 1315.588518][T20285] usb 3-1: USB disconnect, device number 18 [ 1316.686058][T21635] fuse: Unknown parameter 'fd0x0000000000000003' [ 1317.471380][T21646] loop5: detected capacity change from 0 to 7 [ 1317.479415][T21646] loop5: [ 1317.482632][T21646] loop5: partition table partially beyond EOD, truncated [ 1317.669150][T21652] netlink: 160 bytes leftover after parsing attributes in process `syz.6.4094'. [ 1317.947228][T10010] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1318.107217][T10010] usb 3-1: Using ep0 maxpacket: 16 [ 1318.121486][T10010] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1318.147372][T10010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.157139][T10010] usb 3-1: Product: syz [ 1318.167291][T10010] usb 3-1: Manufacturer: syz [ 1318.177361][T10010] usb 3-1: SerialNumber: syz [ 1318.194490][T10010] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1318.217242][T10010] r8152-cfgselector 3-1: config 0 descriptor?? [ 1318.643267][T10010] r8152-cfgselector 3-1: USB disconnect, device number 19 [ 1318.907188][ T808] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1319.006213][T21679] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1319.059890][ T808] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.087166][ T808] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1319.107254][ T808] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1319.124667][ T808] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1319.147185][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.218689][ T808] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1319.245736][ T808] usb 2-1: invalid MIDI out EP 0 [ 1319.533475][ T808] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1319.615094][T21687] loop5: detected capacity change from 0 to 7 [ 1319.623561][T21687] loop5: [ 1319.629197][ T5733] usb 2-1: USB disconnect, device number 44 [ 1319.644105][T21687] loop5: partition table partially beyond EOD, truncated [ 1319.672385][ T5005] loop5: [ 1319.677635][ T5005] loop5: partition table partially beyond EOD, truncated [ 1319.866373][T21692] netlink: 160 bytes leftover after parsing attributes in process `syz.2.4106'. [ 1319.897632][T21694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4105'. [ 1319.997683][T21700] program syz.2.4108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1320.089240][T21700] futex_wake_op: syz.2.4108 tries to shift op by 32; fix this program [ 1320.560927][T21710] netlink: 'syz.1.4110': attribute type 16 has an invalid length. [ 1320.569779][T21710] netlink: 64122 bytes leftover after parsing attributes in process `syz.1.4110'. [ 1320.714213][T10015] dvb-usb: did not find the firmware file 'dvb-usb-bluebird-01.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1320.730152][T10015] dvb_usb_cxusb 6-1:6.130: probe with driver dvb_usb_cxusb failed with error -22 [ 1320.747917][T10015] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in cold state, will try to load a firmware [ 1320.759994][T10015] usb 6-1: Direct firmware load for dvb-usb-bluebird-01.fw failed with error -2 [ 1320.770631][T10015] usb 6-1: Falling back to sysfs fallback for: dvb-usb-bluebird-01.fw [ 1320.899767][T21716] tipc: Enabling of bearer rejected, failed to enable media [ 1321.531517][T21731] fuse: Unknown parameter 'vd3[?[}c_i\~7ǯ/{EmZC}_+^31;*beҙDh_+$v`&4Agk [ 1321.531517][T21731] m@-R'^(֟Qx2%V31`' [ 1321.905704][T20285] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1321.927353][T21742] netlink: 160 bytes leftover after parsing attributes in process `syz.7.4118'. [ 1322.094751][T20285] usb 3-1: Using ep0 maxpacket: 8 [ 1322.106125][T20285] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1322.121032][T20285] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1023 [ 1322.139836][T20285] usb 3-1: language id specifier not provided by device, defaulting to English [ 1322.158135][T20285] usb 3-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1322.170301][T20285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.180039][T20285] usb 3-1: Product: 첒ﷲᬟ裦⯛팦쀂䩑 [ 1322.186414][T20285] usb 3-1: SerialNumber: syz [ 1322.194748][T21728] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1322.639758][T21755] ALSA: mixer_oss: invalid OSS volume '' [ 1322.989361][T20285] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1323.154221][T20285] usb 3-1: USB disconnect, device number 20 [ 1323.294680][T11382] udevd[11382]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1323.518867][T21764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4126'. [ 1323.697149][T20285] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 1323.867341][ T5733] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1323.877902][T20285] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1323.886052][T20285] usb 3-1: can't read configurations, error -61 [ 1324.008747][T21772] netlink: 160 bytes leftover after parsing attributes in process `syz.7.4129'. [ 1324.027200][T20285] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 1324.047117][ T5733] usb 2-1: Using ep0 maxpacket: 32 [ 1324.055718][ T5733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1324.079898][ T5733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1324.090270][ T5733] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1324.101508][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.113497][ T5733] usb 2-1: config 0 descriptor?? [ 1324.138709][ T5733] hub 2-1:0.0: USB hub found [ 1324.190324][T20285] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1324.198374][T20285] usb 3-1: can't read configurations, error -61 [ 1324.205309][T20285] usb usb3-port1: attempt power cycle [ 1324.337164][ T5733] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1324.383938][ T5733] usbhid 2-1:0.0: can't add hid device: -71 [ 1324.413555][ T5733] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1324.481166][ T5733] usb 2-1: USB disconnect, device number 45 [ 1324.559182][T20285] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1324.596523][T21778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1324.611798][T20285] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1324.654455][T20285] usb 3-1: can't read configurations, error -61 [ 1324.847311][T20285] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1324.891265][T20285] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1324.905931][T20285] usb 3-1: can't read configurations, error -61 [ 1324.954583][T20285] usb usb3-port1: unable to enumerate USB device [ 1325.596608][ T29] audit: type=1326 audit(1781513033.931:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21802 comm="syz.1.4137" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb7a979ce59 code=0x0 [ 1326.678932][T10010] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1326.845159][T21811] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4140'. [ 1326.859092][T10010] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1326.894252][T10010] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1326.918986][T10010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.950271][T10010] usb 3-1: Product: syz [ 1326.962654][T10010] usb 3-1: Manufacturer: ❘쿯平鑰蛚쌋仫Ⳝ鼟匛T쨬矋N⍲潤熦䋌ᐓさ⅋祇 [ 1327.007142][T10010] usb 3-1: SerialNumber: syz [ 1327.080837][T21816] syzkaller0: entered promiscuous mode [ 1327.086515][T21816] syzkaller0: entered allmulticast mode [ 1327.292093][T10010] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1327.299520][T10010] usb 3-1: MIDIStreaming interface descriptor not found [ 1327.527444][T10010] usb 3-1: USB disconnect, device number 25 [ 1327.573470][T21820] program syz.1.4143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1327.609123][T21820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4143'. [ 1327.880371][T21824] loop5: detected capacity change from 0 to 7 [ 1327.917301][T21824] loop5: [ 1327.927111][T21824] loop5: partition table partially beyond EOD, truncated [ 1328.307197][T10010] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1328.427695][T20285] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1328.467898][T10010] usb 3-1: Using ep0 maxpacket: 8 [ 1328.477952][T10010] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1328.486841][T10010] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1328.498946][T10010] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1328.505467][T21844] netlink: 160 bytes leftover after parsing attributes in process `syz.5.4152'. [ 1328.508870][T10010] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1328.508901][T10010] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1328.508925][T10010] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1328.508950][T10010] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1328.523065][T10010] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1328.570429][T10010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.580144][T10010] usb 3-1: Product: syz [ 1328.584390][T10010] usb 3-1: Manufacturer: syz [ 1328.593197][T10010] usb 3-1: SerialNumber: syz [ 1328.604805][T10010] usb 3-1: config 0 descriptor?? [ 1328.617867][T20285] usb 2-1: too many configurations: 104, using maximum allowed: 8 [ 1328.630847][T20285] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1328.638765][T20285] usb 2-1: can't read configurations, error -61 [ 1328.649471][T10010] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1328.797961][T20285] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1328.860452][T11382] udevd[11382]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1328.923621][T21831] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1328.954767][T21854] syzkaller1: entered promiscuous mode [ 1328.962741][T21854] syzkaller1: entered allmulticast mode [ 1328.969420][T20285] usb 2-1: too many configurations: 104, using maximum allowed: 8 [ 1328.986268][T20285] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1328.997081][T20285] usb 2-1: can't read configurations, error -61 [ 1329.023300][T20285] usb usb2-port1: attempt power cycle [ 1329.145075][ T1167] usb 3-1: USB disconnect, device number 26 [ 1329.388662][T20285] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1329.408502][T20285] usb 2-1: too many configurations: 104, using maximum allowed: 8 [ 1329.418468][T20285] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1329.426084][T20285] usb 2-1: can't read configurations, error -61 [ 1329.567489][T20285] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1329.609342][T20285] usb 2-1: too many configurations: 104, using maximum allowed: 8 [ 1329.619274][T20285] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1329.626881][T20285] usb 2-1: can't read configurations, error -61 [ 1329.633852][T20285] usb usb2-port1: unable to enumerate USB device [ 1329.703759][T21860] No such timeout policy "syz0" [ 1329.915594][T21871] loop5: detected capacity change from 0 to 7 [ 1329.925145][T21871] loop5: [ 1329.929262][T21871] loop5: partition table partially beyond EOD, truncated [ 1330.073160][ T29] audit: type=1326 audit(1781513038.411:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21877 comm="syz.5.4161" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34ccb9ce59 code=0xffff0000 [ 1330.931977][T21884] netlink: 160 bytes leftover after parsing attributes in process `syz.2.4163'. [ 1331.020581][T21887] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1331.292426][T21894] xt_hashlimit: size too large, truncated to 1048576 [ 1331.301610][ T29] audit: type=1800 audit(1781513039.641:1821): pid=21895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4168" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1331.324191][T21894] xt_hashlimit: max too large, truncated to 1048576 [ 1331.378282][T10010] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1331.432951][T21899] netlink: 'syz.1.4167': attribute type 4 has an invalid length. [ 1331.461634][T21899] netlink: 'syz.1.4167': attribute type 4 has an invalid length. [ 1331.566962][T10010] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1331.624525][T10010] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1331.667200][T10010] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1331.710091][T10010] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1331.757753][T10010] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1331.809770][T10010] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1331.842163][T10010] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1331.873625][T10010] usb 3-1: Product: syz [ 1331.889595][T10010] usb 3-1: Manufacturer: syz [ 1331.931915][T10010] cdc_wdm 3-1:1.0: skipping garbage [ 1331.946889][T10010] cdc_wdm 3-1:1.0: skipping garbage [ 1331.970143][T10010] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1331.985223][T10010] cdc_wdm 3-1:1.0: Unknown control protocol [ 1333.020271][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 1333.049875][ T5733] usb 3-1: USB disconnect, device number 27 [ 1333.121416][T13526] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1333.130773][T13526] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1333.139776][T13526] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1333.149360][T13526] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1333.237973][T14612] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1333.364595][T21927] netlink: 160 bytes leftover after parsing attributes in process `syz.5.4174'. [ 1333.407544][T14612] usb 2-1: Using ep0 maxpacket: 16 [ 1333.424810][T14612] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1333.460069][T14612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1333.482668][T14612] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1333.524035][T14612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.549117][T14612] usb 2-1: Product: syz [ 1333.562673][T14612] usb 2-1: Manufacturer: syz [ 1333.594068][T14612] usb 2-1: SerialNumber: syz [ 1333.652721][T14612] usb 2-1: config 0 descriptor?? [ 1333.681181][T14612] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1333.735019][T14612] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1334.057286][ T5733] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1334.147620][T14612] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1334.162020][T14612] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1334.184822][T14612] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1334.210835][T14612] em28xx 2-1:0.0: No AC97 audio processor [ 1334.237245][ T5733] usb 3-1: Using ep0 maxpacket: 16 [ 1334.240057][T14612] usb 2-1: USB disconnect, device number 50 [ 1334.256167][ T5733] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1334.292914][ T5733] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1334.302419][T14612] em28xx 2-1:0.0: Disconnecting em28xx [ 1334.330709][ T5733] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1334.357156][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.387654][T14612] em28xx 2-1:0.0: Freeing device [ 1334.401107][ T5733] usb 3-1: config 0 descriptor?? [ 1334.754729][T21949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4182'. [ 1335.064327][T21959] netlink: 160 bytes leftover after parsing attributes in process `syz.6.4186'. [ 1335.226583][ T5733] usbhid 3-1:0.0: can't add hid device: -71 [ 1335.233501][ T5733] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1335.245174][ T5733] usb 3-1: USB disconnect, device number 28 [ 1335.644767][T21970] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1335.927382][ T5733] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1336.122685][ T5733] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1336.142411][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.152796][ T5733] usb 2-1: Product: syz [ 1336.158981][ T5733] usb 2-1: Manufacturer: syz [ 1336.168814][ T5733] usb 2-1: SerialNumber: syz [ 1336.182843][ T5733] usb 2-1: config 0 descriptor?? [ 1336.211690][ T5733] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 051 [ 1336.747387][ T808] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1336.928319][ T808] usb 3-1: Using ep0 maxpacket: 32 [ 1336.942426][ T808] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1336.952588][ T808] usb 3-1: config 0 has no interface number 0 [ 1336.964255][ T808] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1336.979528][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.000915][ T808] usb 3-1: Product: syz [ 1337.008935][ T808] usb 3-1: Manufacturer: syz [ 1337.020910][ T808] usb 3-1: SerialNumber: syz [ 1337.033414][ T808] usb 3-1: config 0 descriptor?? [ 1337.042620][ T808] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1337.160972][T21994] netlink: 160 bytes leftover after parsing attributes in process `syz.5.4199'. [ 1337.250032][T21989] netlink: 'syz.2.4197': attribute type 10 has an invalid length. [ 1337.273576][T21989] 8021q: adding VLAN 0 to HW filter on device team0 [ 1337.284233][T21989] bond0: (slave team0): Enslaving as an active interface with an up link [ 1337.309452][ T808] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1337.325520][ T808] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1337.706463][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1337.715828][ T808] usb 3-1: USB disconnect, device number 29 [ 1337.738446][ T808] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1337.755873][ T808] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1337.781296][ T808] quatech2 3-1:0.51: device disconnected [ 1337.875298][T22006] IPVS: set_ctl: invalid protocol: 29 100.1.1.1:20001 [ 1338.226310][T22008] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4204'. [ 1338.297766][ T5733] (null): failure setting delay to 10us [ 1338.306281][ T5733] i2c-tiny-usb 2-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 1338.522703][T10010] usb 2-1: USB disconnect, device number 51 [ 1338.739001][ T5733] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 1338.909733][ T5733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1338.921058][ T5733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1338.932714][ T5733] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1338.945767][ T5733] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 1338.955286][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.966434][ T5733] usb 3-1: config 0 descriptor?? [ 1338.972572][T22014] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1339.104609][T22020] syz_tun: entered allmulticast mode [ 1339.115860][T22020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4209'. [ 1339.201542][T22019] syz_tun: left allmulticast mode [ 1339.319633][T22023] netlink: 160 bytes leftover after parsing attributes in process `syz.5.4210'. [ 1339.394605][ T5733] cypress 0003:04B4:07B1.004A: unknown main item tag 0x0 [ 1339.406432][ T5733] cypress 0003:04B4:07B1.004A: unknown main item tag 0x0 [ 1339.415596][ T5733] cypress 0003:04B4:07B1.004A: unknown main item tag 0x0 [ 1339.422961][ T5733] cypress 0003:04B4:07B1.004A: unknown main item tag 0x0 [ 1339.430495][ T5733] cypress 0003:04B4:07B1.004A: unknown main item tag 0x0 [ 1339.437739][ T5733] cypress 0003:04B4:07B1.004A: unknown main item tag 0x0 [ 1339.444851][ T5733] cypress 0003:04B4:07B1.004A: unknown main item tag 0x0 [ 1339.452020][ T5733] cypress 0003:04B4:07B1.004A: unknown main item tag 0x0 [ 1339.459151][ T5733] cypress 0003:04B4:07B1.004A: unknown main item tag 0x0 [ 1339.466300][ T5733] cypress 0003:04B4:07B1.004A: unknown main item tag 0x0 [ 1339.483469][ T5733] cypress 0003:04B4:07B1.004A: hidraw0: USB HID v0.08 Device [HID 04b4:07b1] on usb-dummy_hcd.2-1/input0 [ 1339.592453][T10010] usb 3-1: USB disconnect, device number 30 [ 1340.221472][ T29] audit: type=1326 audit(1781513048.561:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22034 comm="syz.2.4213" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5493d9ce59 code=0x7ffc0000 [ 1340.279752][T22035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4213'. [ 1340.280035][T22036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4213'. [ 1340.307146][ T29] audit: type=1326 audit(1781513048.561:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22034 comm="syz.2.4213" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5493d9ce59 code=0x7ffc0000 [ 1340.349917][ T29] audit: type=1326 audit(1781513048.591:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22034 comm="syz.2.4213" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5493d9ce59 code=0x7ffc0000 [ 1340.379023][ T29] audit: type=1326 audit(1781513048.601:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22034 comm="syz.2.4213" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5493d9ce59 code=0x7ffc0000 [ 1340.414128][ T29] audit: type=1326 audit(1781513048.611:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22034 comm="syz.2.4213" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5493d9ce59 code=0x7ffc0000 [ 1340.460802][ T29] audit: type=1326 audit(1781513048.611:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22034 comm="syz.2.4213" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5493d9ce59 code=0x7ffc0000 [ 1340.493956][ T29] audit: type=1326 audit(1781513048.611:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22034 comm="syz.2.4213" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5493d9ce59 code=0x7ffc0000 [ 1340.553642][ T29] audit: type=1326 audit(1781513048.621:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22034 comm="syz.2.4213" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5493d9ce59 code=0x7ffc0000 [ 1340.578340][T14461] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1340.615956][ T29] audit: type=1326 audit(1781513048.671:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22034 comm="syz.2.4213" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5493d5d68e code=0x7ffc0000 [ 1340.697188][ T29] audit: type=1326 audit(1781513048.681:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22034 comm="syz.2.4213" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5493d9caeb code=0x7ffc0000 [ 1340.764829][T14461] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1340.805784][T14461] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1340.839857][T14461] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.40 [ 1340.854191][T14461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.873635][T14461] usb 3-1: Product: syz [ 1340.880166][T14461] usb 3-1: Manufacturer: syz [ 1340.885053][T14461] usb 3-1: SerialNumber: syz [ 1341.291585][T14461] usbhid 3-1:1.0: can't add hid device: -71 [ 1341.298560][T14461] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1341.315563][T14461] usb 3-1: USB disconnect, device number 31 [ 1341.342804][T11154] udevd[11154]: setting mode of /dev/bus/usb/003/031 to 020664 failed: No such file or directory [ 1341.355008][T11154] udevd[11154]: setting owner of /dev/bus/usb/003/031 to uid=0, gid=0 failed: No such file or directory [ 1341.545216][T22041] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4215'. [ 1341.837571][T22047] netlink: 'syz.6.4216': attribute type 4 has an invalid length. [ 1341.892730][T22047] netlink: 'syz.6.4216': attribute type 4 has an invalid length. [ 1342.147138][T14612] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1342.318679][T14612] usb 3-1: Using ep0 maxpacket: 16 [ 1342.332264][T14612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1342.357245][T14612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1342.384744][T14612] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1342.410803][T14612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.456577][T14612] usb 3-1: config 0 descriptor?? [ 1342.774613][T22053] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode [ 1343.031983][T14612] apple 0003:05AC:024B.004B: fixing up MacBook JIS keyboard report descriptor [ 1343.041994][T14612] apple 0003:05AC:024B.004B: unknown global tag 0xe [ 1343.049370][T14612] apple 0003:05AC:024B.004B: item 0 1 1 14 parsing failed [ 1343.059180][T14612] apple 0003:05AC:024B.004B: parse failed [ 1343.065108][T14612] apple 0003:05AC:024B.004B: probe with driver apple failed with error -22 [ 1343.105412][T22056] syzkaller0: entered promiscuous mode [ 1343.123465][T22056] syzkaller0: entered allmulticast mode [ 1343.257240][ T5643] Bluetooth: hci1: command 0x0406 tx timeout [ 1343.331087][T22057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1343.400162][T14612] usb 3-1: USB disconnect, device number 32 [ 1344.024746][T22067] netlink: 160 bytes leftover after parsing attributes in process `syz.7.4221'. [ 1344.266066][T22073] syz_tun: entered allmulticast mode [ 1344.306776][T22073] dvmrp8: entered allmulticast mode [ 1344.343502][T22072] syz_tun: left allmulticast mode [ 1344.965250][T22082] netlink: 'syz.2.4226': attribute type 1 has an invalid length. [ 1344.985520][T22082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1345.376114][T22097] syzkaller0: entered promiscuous mode [ 1345.384105][T22097] syzkaller0: entered allmulticast mode [ 1346.088274][T22107] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4233'. [ 1346.119030][T22112] loop5: detected capacity change from 0 to 7 [ 1346.128880][T22112] loop5: [ 1346.132098][T22112] loop5: partition table partially beyond EOD, truncated [ 1346.261250][T22117] loop5: detected capacity change from 0 to 7 [ 1346.273221][T22117] Dev loop5: unable to read RDB block 7 [ 1346.280171][T22117] loop5: unable to read partition table [ 1346.286243][T22117] loop5: partition table beyond EOD, truncated [ 1346.296149][T22117] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1346.322769][T22117] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4237'. [ 1346.443156][T22122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4239'. [ 1346.468440][T22122] macsec1: entered promiscuous mode [ 1346.475170][T22122] dummy0: entered promiscuous mode [ 1346.480975][T22122] macsec1: entered allmulticast mode [ 1346.486380][T22122] dummy0: entered allmulticast mode [ 1346.494417][T22122] dummy0: left allmulticast mode [ 1346.505699][T14612] dummy0: left promiscuous mode [ 1346.647351][T10010] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1346.802330][T10010] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1346.822936][T10010] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1346.850279][T10010] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1346.874696][T10010] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1346.899473][T10010] usb 2-1: Manufacturer: syz [ 1346.919209][T10010] usb 2-1: config 0 descriptor?? [ 1347.037347][T10010] rc_core: IR keymap rc-hauppauge not found [ 1347.053993][T10010] Registered IR keymap rc-empty [ 1347.085874][T10010] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1347.124197][T10010] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input93 [ 1347.365211][ C0] igorplugusb 2-1:0.0: receive overflow invalid: 154 [ 1347.590667][ T5733] usb 2-1: USB disconnect, device number 52 [ 1347.745259][T22133] syzkaller0: entered promiscuous mode [ 1347.753703][T22133] syzkaller0: entered allmulticast mode [ 1348.198460][T22140] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1348.407131][T10010] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1348.447307][ T5733] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1348.558230][T10010] usb 2-1: Using ep0 maxpacket: 8 [ 1348.565812][T10010] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1348.577090][T10010] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1348.597239][T10010] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1348.610760][T10010] usb 2-1: Product: syz [ 1348.615694][T10010] usb 2-1: Manufacturer: syz [ 1348.621566][T10010] usb 2-1: SerialNumber: syz [ 1348.681219][ T5733] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1348.702820][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.712808][ T5733] usb 3-1: Product: syz [ 1348.717467][ T5733] usb 3-1: Manufacturer: syz [ 1348.723137][ T5733] usb 3-1: SerialNumber: syz [ 1348.734425][ T5733] usb 3-1: config 0 descriptor?? [ 1348.760121][ T5733] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 033 [ 1348.869348][ T30] INFO: task syz.4.3633:19896 blocked for more than 143 seconds. [ 1348.893169][ T30] Tainted: G L syzkaller #0 [ 1348.902588][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1348.913726][ T30] task:syz.4.3633 state:D stack:28200 pid:19896 tgid:19895 ppid:16765 task_flags:0x400040 flags:0x00080002 [ 1348.930722][ T30] Call Trace: [ 1348.934197][ T30] [ 1348.940161][ T30] __schedule+0x1840/0x57a0 [ 1348.945135][ T30] ? __pfx___schedule+0x10/0x10 [ 1348.950662][T10010] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 1348.960219][ T30] ? schedule+0x90/0x360 [ 1348.964762][ T30] schedule+0x164/0x360 [ 1348.969901][T10010] visor 2-1:1.0: probe with driver visor failed with error -110 [ 1348.979510][ T30] schedule_preempt_disabled+0x13/0x30 [ 1348.988852][ T30] __mutex_lock+0x7c5/0x1590 [ 1348.998358][ T30] ? __mutex_lock+0x5c5/0x1590 [ 1349.003299][ T30] ? usbdev_open+0x151/0x770 [ 1349.022643][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1349.036253][ T30] ? bus_find_device+0x27d/0x2d0 [ 1349.052253][ T30] ? __pfx_bus_find_device+0x10/0x10 [ 1349.064343][ T30] ? usbdev_open+0xa7/0x770 [ 1349.073173][ T30] ? __kmalloc_cache_noprof+0x157/0x660 [ 1349.079435][ T30] usbdev_open+0x151/0x770 [ 1349.084185][ T30] ? __pfx_usbdev_open+0x10/0x10 [ 1349.090768][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 1349.096211][ T30] chrdev_open+0x4d9/0x600 [ 1349.102444][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1349.108083][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1349.113250][ T30] do_dentry_open+0x816/0x1380 [ 1349.120924][ T30] vfs_open+0x3b/0x340 [ 1349.125233][ T30] ? path_openat+0x2e23/0x3890 [ 1349.133546][ T30] path_openat+0x2e3b/0x3890 [ 1349.138805][ T30] ? arch_stack_walk+0xfb/0x150 [ 1349.144000][ T30] ? do_getname+0x2e/0x250 [ 1349.150863][ T30] ? stack_depot_save_flags+0x33/0x800 [ 1349.156655][ T30] ? __pfx_path_openat+0x10/0x10 [ 1349.164626][ T30] ? __x64_sys_openat+0x138/0x170 [ 1349.170363][ T30] ? __lock_acquire+0x683/0x2cd0 [ 1349.175477][ T30] do_file_open+0x23e/0x4a0 [ 1349.181712][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1349.186897][ T30] ? alloc_fd+0x62e/0x6a0 [ 1349.191869][ T30] do_sys_openat2+0x113/0x200 [ 1349.196656][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1349.203159][ T30] ? exc_page_fault+0x6a/0xc0 [ 1349.209230][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 1349.214698][ T30] __x64_sys_openat+0x138/0x170 [ 1349.219717][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.226216][ T30] do_syscall_64+0x174/0x580 [ 1349.235465][ T30] ? trace_irq_disable+0x3b/0x140 [ 1349.240844][ T30] ? clear_bhb_loop+0x40/0x90 [ 1349.245720][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.251862][ T30] RIP: 0033:0x7ff662f5d68e [ 1349.256361][ T30] RSP: 002b:00007ff663eadb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1349.266400][ T30] RAX: ffffffffffffffda RBX: 00007ff663eae6c0 RCX: 00007ff662f5d68e [ 1349.274714][ T30] RDX: 0000000000000082 RSI: 00007ff663eadc00 RDI: ffffffffffffff9c [ 1349.283870][ T30] RBP: 00007ff663eadc00 R08: 0000000000000000 R09: 0000000000000000 [ 1349.292334][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1349.300540][ T30] R13: 00007ff663216038 R14: 00007ff663215fa0 R15: 00007ff66333fa48 [ 1349.309705][ T30] [ 1349.312852][ T30] [ 1349.312852][ T30] Showing all locks held in the system: [ 1349.322207][ T30] 1 lock held by khungtaskd/30: [ 1349.327285][ T30] #0: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1349.342726][ T30] 2 locks held by getty/5395: [ 1349.349858][ T30] #0: ffff888031eee0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1349.360014][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1380 [ 1349.370984][ T30] 5 locks held by kworker/1:6/5733: [ 1349.376247][ T30] #0: ffff888020686940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1349.387979][ T30] #1: ffffc90004d2fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1349.402276][ T30] #2: ffff88802a43b1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1349.411571][ T30] #3: ffff88807d1311d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1349.422074][ T30] #4: ffff8880300141a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1349.432753][ T30] 6 locks held by kworker/1:14/10015: [ 1349.439850][ T30] #0: ffff888020686940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1349.453434][ T30] #1: ffffc9000d787c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1349.466746][ T30] #2: ffff88802a53b1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1349.476097][ T30] #3: ffff8880313341d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1349.486895][ T30] #4: ffff88806d48b1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1349.496758][ T30] #5: ffffffff8e7f9648 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 1349.513492][ T30] 4 locks held by udevd/11154: [ 1349.519731][ T30] #0: ffff88803c1b2998 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 1349.529452][ T30] #1: ffff8880327aec80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 1349.543027][ T30] #2: ffff8880b42ea878 (kn->active#29){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1349.552721][ T30] #3: ffff88807d1311d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1349.564044][ T30] 4 locks held by udevd/12662: [ 1349.570190][ T30] #0: ffff8880795cf638 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 1349.579880][ T30] #1: ffff888078d7ac80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 1349.590638][ T30] #2: ffff888081420f08 (kn->active#29){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1349.600844][ T30] #3: ffff8880313341d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1349.610317][ T30] 2 locks held by kworker/u8:18/13317: [ 1349.616277][ T30] #0: ffff8880b863b0e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 1349.628777][ T30] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 1349.637844][ T30] 1 lock held by syz.4.3633/19896: [ 1349.644751][ T30] #0: ffff88802a53b1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 1349.655172][ T30] 1 lock held by syz.5.4232/22102: [ 1349.663640][ T30] #0: ffff8880578511b0 (&tty->legacy_mutex){+.+.}-{4:4}, at: tty_release+0x7b/0x1670 [ 1349.673889][ T30] 1 lock held by syz.1.4244/22141: [ 1349.680283][ T30] #0: ffffffff8e962978 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1349.690794][ T30] [ 1349.693192][ T30] ============================================= [ 1349.693192][ T30] [ 1349.704176][ T30] NMI backtrace for cpu 0 [ 1349.704197][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1349.704225][ T30] Tainted: [L]=SOFTLOCKUP [ 1349.704234][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1349.704247][ T30] Call Trace: [ 1349.704257][ T30] [ 1349.704267][ T30] dump_stack_lvl+0xe8/0x150 [ 1349.704295][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1349.704325][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1349.704359][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1349.704389][ T30] sys_info+0x135/0x170 [ 1349.704414][ T30] watchdog+0xfd7/0x1030 [ 1349.704452][ T30] ? watchdog+0x1c7/0x1030 [ 1349.704490][ T30] kthread+0x389/0x470 [ 1349.704519][ T30] ? __pfx_watchdog+0x10/0x10 [ 1349.704549][ T30] ? __pfx_kthread+0x10/0x10 [ 1349.704585][ T30] ret_from_fork+0x514/0xb70 [ 1349.704611][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1349.704634][ T30] ? __switch_to+0xc89/0x1420 [ 1349.704668][ T30] ? __pfx_kthread+0x10/0x10 [ 1349.704699][ T30] ret_from_fork_asm+0x1a/0x30 [ 1349.704741][ T30] [ 1349.704752][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1349.720470][T14461] usb 2-1: USB disconnect, device number 53 [ 1349.734562][ C1] NMI backtrace for cpu 1 [ 1349.734582][ C1] CPU: 1 UID: 0 PID: 14461 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1349.734607][ C1] Tainted: [L]=SOFTLOCKUP [ 1349.734614][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1349.734627][ C1] Workqueue: usb_hub_wq hub_event [ 1349.734659][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 1349.734687][ C1] Code: 89 fb e8 23 00 00 00 48 8b 3d e4 bf 60 0c 48 89 de 5b e9 b3 e8 5f 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0d c8 2f 71 11 65 8b 15 e9 2f 71 [ 1349.734702][ C1] RSP: 0018:ffffc90000a08d60 EFLAGS: 00000082 [ 1349.734716][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000010000 [ 1349.734728][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888026161268 [ 1349.734739][ C1] RBP: 0000000000000000 R08: ffffffff9a6df443 R09: 1ffffffff34dbe88 [ 1349.734752][ C1] R10: dffffc0000000000 R11: fffffbfff34dbe89 R12: 0000000000000001 [ 1349.734764][ C1] R13: dffffc0000000000 R14: ffff888026161268 R15: 0000000000000000 [ 1349.734777][ C1] FS: 0000000000000000(0000) GS:ffff8881253b9000(0000) knlGS:0000000000000000 [ 1349.734792][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1349.734804][ C1] CR2: 0000555582bfb4e8 CR3: 0000000055912000 CR4: 00000000003526f0 [ 1349.734820][ C1] Call Trace: [ 1349.734827][ C1] [ 1349.734834][ C1] trace_hrtimer_start+0x16/0x200 [ 1349.734863][ C1] enqueue_hrtimer+0xb7/0x2c0 [ 1349.734891][ C1] __hrtimer_run_queues+0x4ce/0xa10 [ 1349.734924][ C1] hrtimer_interrupt+0x448/0x910 [ 1349.734962][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1349.734987][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1349.735015][ C1] [ 1349.735022][ C1] [ 1349.735029][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1349.735049][ C1] RIP: 0010:vprintk_emit+0x45d/0x560 [ 1349.735073][ C1] Code: 0f 84 44 ff ff ff e8 72 17 21 00 fb eb 44 e8 6a 17 21 00 e8 45 1c fe 09 4d 85 f6 74 94 e8 5b 17 21 00 fb 48 c7 c7 00 ed 94 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 6b 19 [ 1349.735088][ C1] RSP: 0018:ffffc90005ad73a0 EFLAGS: 00000283 [ 1349.735102][ C1] RAX: ffffffff81a428d5 RBX: ffffffff81a4274f RCX: 0000000000100000 [ 1349.735116][ C1] RDX: ffffc9001a61b000 RSI: 000000000000af85 RDI: ffffffff8e94ed00 [ 1349.735129][ C1] RBP: ffffc90005ad7450 R08: ffffffff902f88f7 R09: 1ffffffff205f11e [ 1349.735143][ C1] R10: dffffc0000000000 R11: fffffbfff205f11f R12: 0000000000000000 [ 1349.735155][ C1] R13: 0000000000000029 R14: 0000000000000200 R15: 1ffff92000b5ae78 [ 1349.735170][ C1] ? vprintk_emit+0x2cf/0x560 [ 1349.735193][ C1] ? vprintk_emit+0x455/0x560 [ 1349.735221][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1349.735244][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1349.735270][ C1] dev_vprintk_emit+0x338/0x400 [ 1349.735294][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 1349.735324][ C1] dev_printk_emit+0xee/0x140 [ 1349.735349][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 1349.735375][ C1] ? __dev_printk+0x131/0x190 [ 1349.735404][ C1] _dev_info+0x11e/0x180 [ 1349.735424][ C1] ? trace_irq_disable+0x3b/0x140 [ 1349.735453][ C1] ? __pfx__dev_info+0x10/0x10 [ 1349.735480][ C1] ? _raw_spin_unlock_irqrestore+0x47/0x80 [ 1349.735508][ C1] usb_disconnect+0xe1/0x9a0 [ 1349.735536][ C1] hub_event+0x1bbb/0x4d30 [ 1349.735570][ C1] ? register_lock_class+0x31/0x2e0 [ 1349.735599][ C1] ? lock_acquire+0x106/0x350 [ 1349.735617][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1349.735644][ C1] ? __pfx_hub_event+0x10/0x10 [ 1349.735670][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1349.735691][ C1] ? rcu_is_watching+0x15/0xb0 [ 1349.735713][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1349.735729][ C1] process_scheduled_works+0xa8e/0x14e0 [ 1349.735762][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1349.735794][ C1] ? assign_work+0x3cf/0x5d0 [ 1349.735824][ C1] worker_thread+0xa47/0xfb0 [ 1349.735856][ C1] kthread+0x389/0x470 [ 1349.735879][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1349.735898][ C1] ? __pfx_kthread+0x10/0x10 [ 1349.735921][ C1] ret_from_fork+0x514/0xb70 [ 1349.735940][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1349.735958][ C1] ? __switch_to+0xc89/0x1420 [ 1349.735985][ C1] ? __pfx_kthread+0x10/0x10 [ 1349.736009][ C1] ret_from_fork_asm+0x1a/0x30 [ 1349.736038][ C1] [ 1350.190824][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1350.190907][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1350.191002][ T30] Tainted: [L]=SOFTLOCKUP [ 1350.191025][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1350.191067][ T30] Call Trace: [ 1350.191091][ T30] [ 1350.191123][ T30] vpanic+0x56c/0xa60 [ 1350.191217][ T30] ? __pfx___schedule+0x10/0x10 [ 1350.191334][ T30] ? __pfx_vpanic+0x10/0x10 [ 1350.191451][ T30] panic+0xc5/0xd0 [ 1350.191516][ T30] ? __pfx_panic+0x10/0x10 [ 1350.191582][ T30] ? preempt_schedule_common+0x82/0xd0 [ 1350.191677][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1350.191776][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1350.191870][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1350.191958][ T30] watchdog+0x1030/0x1030 [ 1350.192060][ T30] ? watchdog+0x1c7/0x1030 [ 1350.192165][ T30] kthread+0x389/0x470 [ 1350.192241][ T30] ? __pfx_watchdog+0x10/0x10 [ 1350.192328][ T30] ? __pfx_kthread+0x10/0x10 [ 1350.192406][ T30] ret_from_fork+0x514/0xb70 [ 1350.192480][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1350.192545][ T30] ? __switch_to+0xc89/0x1420 [ 1350.192697][ T30] ? __pfx_kthread+0x10/0x10 [ 1350.192791][ T30] ret_from_fork_asm+0x1a/0x30 [ 1350.192909][ T30] [ 1350.193785][ T30] Kernel Offset: disabled