last executing test programs: 6m59.789943563s ago: executing program 32 (id=192): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000000)={0x21, &(0x7f00000001c0)=[{0x2d, '\x00', @st={0x4, [{0x301658cfa32ba94, @uvalue=0x9}, {0x3, @uvalue=0xe25}, {0x0, @svalue=0x4}, {0x0, @uvalue=0x400}]}, 0xb4d}]}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x84, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x0, 0x7, 0x1, 0x2, 0x4, 0x4, 0x4}}, {0xc, 0x2, [0x9, 0x4, 0x7fff, 0x0]}}, {{0x1c, 0x1, {0x8, 0x18, 0x11, 0x80, 0x1, 0x7, 0x9, 0x7}}, {0x12, 0x2, [0x5, 0x401, 0xfffd, 0x8000, 0xd, 0x10, 0x0]}}]}, @TCA_STAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x100000d6}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000804}], 0x1, 0x2ede8ec33678cf20) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r10, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r6, 0x623, 0x4c1, 0x4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002100e30000000000000000000a00000000000000000000000500150003000000"], 0x24}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) 6m53.185105141s ago: executing program 33 (id=220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x18}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de01020381090212000100000000090400"], 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) write$cgroup_devices(r2, &(0x7f0000000480)={'a', ' *:* ', 'r\x00'}, 0x19fbe) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, r5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x1410, 0x10100, 0x3, 0x1, 0x0, r8}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x54, 0x0, @fd=r8, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r9, 0x2ded, 0x4000, 0x0, 0x0, 0x0) futex_waitv(&(0x7f00000001c0)=[{0x6, &(0x7f0000000180)=0x6, 0x2}], 0x1, 0x0, &(0x7f0000000240)={0x77359400}, 0x0) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r12, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000002c0)="7f", 0x1}], 0x1) 6m36.726940915s ago: executing program 34 (id=273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x7ff9}}}, 0xfffffffffffffec8}, 0x1, 0x0, 0x0, 0x40}, 0x841) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'netpci0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0xc000080) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00}) fsopen(0x0, 0x0) socket(0x2b, 0xa, 0x7) gettid() r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x600801) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x7, 0x7ffffffc, 0x104, 0x0, 0xe}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000380)={0x4, 0x3ff, 0x101, 0x0, 0xe}) 6m32.083341237s ago: executing program 35 (id=286): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x400c404) exit(0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 6m27.374409136s ago: executing program 36 (id=298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x28b, 0x0, 0x7fffffffffffffff}]}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)="8fab14410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac9824be38c9c2661a897fb45a74a588fdabe427ade9b1ed53f450ce6c2", 0x3c}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001580)=[{0x0, 0xe0}, {&(0x7f0000000580)="c7bace4ebe91b42a7bf8f86453e0ec420e051dc8", 0x14}], 0x2}}], 0x2, 0x488c4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x68, 0x2, [@TCA_FLOWER_ACT={0x64, 0x3, [@m_bpf={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x9, 0xffffffffffffffff, 0x9}}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0xe, 0x9, 0x6, 0x1}, {0x3fb, 0x9, 0x5, 0x80}]}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) 6m23.82906067s ago: executing program 37 (id=307): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf3, 0xc0, 0xd19a, 0x80, 0x1, 0x800, 0xe3d}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002180)=ANY=[@ANYBLOB="1001000000000000", @ANYRES64=r1, @ANYBLOB="0700000000000014"], 0x110) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 5m55.047490345s ago: executing program 38 (id=373): syz_open_dev$hidraw(&(0x7f0000000080), 0xfffffffffffffff8, 0x519002) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') openat(r2, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) r3 = gettid() timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4, @tid=r3}, &(0x7f0000044000)=0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r4, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x4ec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_usb_disconnect(r0) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x48, r12, 0x1, 0x3, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7f, 0x4, 0x8, 0x1, 0x800, 0x1, 0x9]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x3, 0x60, 0x5, 0x5a, 0x18, 0x48, 0x18, 0x18, 0x3, 0x5, 0x36, 0x30]}]}]}]}, 0x48}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 5m25.91775324s ago: executing program 39 (id=481): write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0x0, 0x2, 0x7}, 0x7}}, 0x18) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x402, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x4) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@dellinkprop={0x28, 0x6d, 0x8, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1080, 0x10000}, [@IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x850) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4ccd40, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000200)={0x1, 0x1, [@multicast]}) r4 = shmget(0x3, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = geteuid() r8 = getegid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) r10 = gettid() shmctl$IPC_SET(r4, 0x1, &(0x7f0000000380)={{0x3, r5, r6, r7, r8, 0x6, 0x5}, 0x8, 0x46e, 0x1, 0x9, r9, r10, 0xbdd9}) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r11, 0xc004510e, &(0x7f0000000440)=0x1) r12 = accept$unix(0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000500)=0x6e) connect$unix(r12, &(0x7f0000000540)=@abs={0x1, 0x0, 0x4e22}, 0x6e) openat$dsp(0xffffffffffffff9c, &(0x7f00000005c0), 0x210000, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000600)={0x80000000, 0x8001, 0x176, 0x5, 0x4, 0xd}) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000640), &(0x7f0000000680)={0x0, 0xfb, 0xbb, 0x4, 0x81, "c98fda498d1307e1a207ae773593b273", "810b6451d33588b82e2c941dad18fefbbdb2cd192827651eebf9dc1d799686aee68284f94151a49c53b45515d52a6f814538a0607d4407679b34ffebb65f6b6e90098fd0123c6ed7081dbc850096f43fd2ac8fcdc94c1a95d5f01f724ea76ff67533fa1c70df4bdfb032e4bf0ba6a2c0d6e67e93ab5819c31cf10780793d9d3fdd9d8b8f0ad534c57ebcb1fa0f2fc6551ba3563c9bfee8c6fe4c7194fdd1b1f39affe27fae06"}, 0xbb, 0x0) recvmmsg(r2, &(0x7f00000032c0)=[{{&(0x7f0000000740)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001c00)=[{&(0x7f00000007c0)=""/39, 0x27}, {&(0x7f0000000800)=""/148, 0x94}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/233, 0xe9}, {&(0x7f00000019c0)=""/7, 0x7}, {&(0x7f0000001a00)=""/8, 0x8}, {&(0x7f0000001a40)=""/69, 0x45}, {&(0x7f0000001ac0)=""/254, 0xfe}, {&(0x7f0000001bc0)=""/43, 0x2b}], 0x9, &(0x7f0000001cc0)=""/247, 0xf7}, 0x80}, {{&(0x7f0000001dc0)=@x25, 0x80, &(0x7f0000003140)=[{&(0x7f0000001e40)=""/120, 0x78}, {&(0x7f0000001ec0)=""/173, 0xad}, {&(0x7f0000001f80)=""/65, 0x41}, {&(0x7f0000002000)=""/24, 0x18}, {&(0x7f0000002040)=""/234, 0xea}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x6, &(0x7f00000031c0)=""/223, 0xdf}, 0x5}], 0x2, 0x20, &(0x7f0000003340)) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r13, 0x89f2, &(0x7f0000003440)={'syztnl0\x00', &(0x7f00000033c0)={'erspan0\x00', 0x0, 0x1, 0x700, 0x2d, 0x0, {{0x12, 0x4, 0x1, 0x0, 0x48, 0x66, 0x0, 0x4, 0x2d, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0x34, 0xe4, 0x1, 0x3, [{@loopback, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x5}, {@broadcast, 0x4}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x10}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x7}]}]}}}}}) sendmsg$nl_route_sched(r14, &(0x7f0000003540)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003500)={&(0x7f0000003480)=@newtclass={0x64, 0x28, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0xffff, 0xf}, {0xe, 0xf}, {0x4, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x1, 0x10}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x4001) sched_setattr(r10, &(0x7f0000003580)={0x38, 0x0, 0x8, 0x8, 0x6, 0x8000, 0x1, 0xb0, 0x7, 0x6}, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f00000035c0), 0x2, 0x0) 5m20.564273053s ago: executing program 40 (id=501): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5aa40bf85e0800"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x1, 0xffffffff, 0x6f94, 0x5, 0xa45a2b2e, 0x7fff}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) 2m39.823375684s ago: executing program 41 (id=1105): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001e40), 0x0, 0x100, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet(0x2b, 0x801, 0x0) r6 = open$dir(&(0x7f0000000200)='./file0\x00', 0x10101, 0x20) faccessat2(r6, &(0x7f0000000280)='./file0\x00', 0x9, 0x1200) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010328bd7000fedbdf251c000000ff05c8c52cf523f27b9e79c758767e4849d0028f9aa35efaca12fe9b0c10f7ef36ee156c92438cf665b66a4bfa3de3c7f9e91878b2c0ed78b49dc0ef2b89a7b21ebcfd017f4898bc0a58c9200df0c458b2d2859920c0a65b685d7533044d489f158f55f6f287d6cd2c7486cf6a2c902d3938abb550f695452359aec23c72b6483d575ac08e46c7ba9441727d6d496734c736a50972a7f08714be24faa5556b92bc37c04fd24b1fe29b90e93ccf819d5272"], 0x14}, 0x1, 0xffff000000000000}, 0x10) unshare(0x60010000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0e000000bd069566496c6ef24c622e1d610b87ec9da8fb0cc47b9bdf812b"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r9, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000009c}]}) sendfile(r10, r10, 0x0, 0x2000fb) preadv2(r8, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) readv(r7, &(0x7f0000000340)=[{&(0x7f0000000140)=""/144, 0x8c}], 0x1000000000000360) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000000)) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2a, 0xaf, 0xee, 0x8, 0xaf0, 0x6751, 0x758b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x7}}, {{0x9, 0x5, 0x1}}]}}]}}]}}, 0x0) 2m39.817208852s ago: executing program 5 (id=1108): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5c, 0x0, &(0x7f0000000180)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe42904bcee14db4241544716b9ea42231ed3373a3e29953e3bb017d9c1fd05dacf5bb80b4b7ee0fae7aea53492b38978defbb39a1ffa8a175e8257c3c5386795f7aaa2b", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) syz_usb_disconnect(r1) 2m36.594115524s ago: executing program 5 (id=1117): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x2, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) pipe2$watch_queue(&(0x7f0000000300), 0x80) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r5, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r6 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r6, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 2m35.182270097s ago: executing program 42 (id=1119): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402907800000000e00000021100900100000033a8d300"/57], 0x0) 2m35.165316357s ago: executing program 4 (id=1122): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, 0x0}) (async) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r7, r8, r7}, &(0x7f0000000240)=""/69, 0x45, 0x0) (async) r9 = socket(0x1, 0x803, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000005, 0x20000000ec071, 0xffffffffffffffff, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x884) 2m34.836317909s ago: executing program 4 (id=1123): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000440)=0x2000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x8000, 0x3, 0x4, 0xfffbffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r0, 0x10, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x12dc00, 0x0) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000540)=0x8, 0x4) ptrace$cont(0x1f, 0x0, 0x100, 0x4) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000340)="7210ec0e65eb18223831eba89a2803de2dcb34275c34ee5fb91b5a3d089fb591400abfb7115a689bcdbfd9d6ca0323d77b384c6c1ed4792543388ada5ef7b168ff79aee65d99acc3a670bda266a634067d0ef22cb36f1a7e25ad567e31a88e4fbdeedba2d3477436a6ecbae8e742ddd805ffc1deca47e4f6878ba808f64b12d149e94997d60a496d1468f1f57d801704ca621097fdd248bed678dfddfacbdfc8bb66e165560580d731b3e40a4ba0405eed96bf6a9788cc54998061f06c6cb2647c33c70168561dfcd3c8ec3bb0db", 0xce, 0x20040000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x8, r5, 0x0, 0x5, 0x83, &(0x7f0000000480)="8fbc45f49fc311de46207a5e5efb411dc6b08f0520b4675398e7a6f2eaae1f60d41b8c8382b5ab614c00b7eadc7f9416259ab7168d0ec5ff2478feaf3d343053c25edea2a24fe0724f17f2b01652f29a66ad470702e6dab4eb5385765a7a843dc2466c647131599e9292be188329e368d553d1117e7f712233d1b1f68673725d4e92bd", 0x1}) unshare(0x2a060c00) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 2m34.755015454s ago: executing program 5 (id=1124): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="06000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={0x0, &(0x7f0000003040)=""/4096, &(0x7f0000000600), &(0x7f0000000a40), 0x1, r2}, 0x38) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0xd, 0x83, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x8000]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m34.279779333s ago: executing program 5 (id=1125): socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x220) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x84f4, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r6 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r6, 0x847ba, 0x0, 0x4a, 0x0, 0x0) 2m33.229256572s ago: executing program 4 (id=1126): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000100)="0ffed70f33f6f02665ca03000fc79f03f20f01c166b91b0800000f320f01c40f01d1f2f8", 0x24}], 0x1, 0x44, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002380)=ANY=[@ANYBLOB="1205000000005701090212000100000000090481881ded6cdd3f8663d4cf94e4aa1996c9af9a7971bcac100e406b136ff05ca751392bfd10155cedd2cfa5917231701409813cdecb250742231d99ab3a49280981e2764a926e75febea348bdbbeaae5af634d565637b3696ed357f54b0d68b72b50c9d9e43d33c27d8401a6b2c14d330"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="200d0e000000084d917d4f14a809640f7bc729"], 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r3 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_BMAP(r1, &(0x7f00000022c0)={0x18, 0x0, r2, {0x7}}, 0x18) read$FUSE(r1, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0xffffffffffffff6b) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r5, r1, 0x0) unshare(0x20000400) poll(&(0x7f0000004200)=[{0xffffffffffffffff, 0x8013}, {r3, 0x20}], 0x2, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket(0x28, 0x1, 0x0) r9 = syz_io_uring_setup(0x4f3, &(0x7f0000000340)={0x0, 0x486e, 0x0, 0x2, 0x10000340, 0x0, r8}, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r9, 0x47b2, 0x8010f6, 0x82, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) r12 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_QBUF(r12, 0xc058560f, &(0x7f0000000600)=@multiplanar_fd={0x80, 0xb, 0x4, 0x70000, 0xfffffffd, {0x77359400}, {0x1, 0x8, 0x8, 0x7, 0xb, 0x2, "90307b4c"}, 0x1ff, 0x4, {0x0}, 0x8}) 2m32.842547371s ago: executing program 5 (id=1127): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_io_uring_setup(0x23c, &(0x7f0000000740)={0x0, 0x1c2c, 0x10100, 0x2, 0x80, 0x0, r1}, &(0x7f0000000500)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x609}, 0x1}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x14, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x5}, @exit, @generic={0xed, 0x3, 0x8, 0x7}, @generic={0x1, 0x3, 0x6, 0x400, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00'}, 0x94) 2m32.003206839s ago: executing program 5 (id=1128): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="00190c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000240)={0x34, &(0x7f0000000540)={0x0, 0x4, 0x28, "4e48b033420db7b8753590cb044d57763ac7fd55890d53b8c58f08594a52b3aaf8831aa01de0d34c"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x0, 0x38, 0x1b, {0x1b, 0xb, "58118561c8e47ec4c8ba1c008d029f3d9a05a43c55b38cf748"}}, &(0x7f00000000c0)={0x0, 0x3, 0x68, @string={0x68, 0x3, "110de406a8c75237824dd49321d5acb7773778e509207ce603249dd71ff4e0b7c6a799f3d950d253a2b214f56f25344c3b5183d30ea0003ec7804885256c5398461f702fd6a9b407e48d38be45380253d15df7c97d218f9fde568a79ce657c3e773a78229037"}}}, &(0x7f0000000500)={0x34, &(0x7f00000002c0)={0x0, 0x11, 0x8d, "259559bd9d0bf66e983eec079c8d4beeb58a006a3724c3f4c5801e705af27d8dcaa46f1137d7724a7e1523879bb3f401dff23bf25748c7c5286cc955e72a33d82b92421a9ca4ef13b0cf5e06fd5df49c3164665a52c622afffc852e619d2b88102ff9d9a301a8980f2eb27d2bcfdc60614443052cbab34f053fab9606be6705f7bb7d9d0997ff2243743587b7f"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xf}, &(0x7f00000003c0)={0x20, 0x0, 0x54, {0x52, "b9acedd0405cf3d2a0700ac264f325563a4bd42be3b41356cdd3d070b6697eb58df6218fe6866a7d48ddaccf8e2d7f0068c36b34e2da28a6651a510b257465f897099f87550a54fd1b8549fba951ebdbdea0"}}, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x8}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0xff}}) 2m31.368737442s ago: executing program 43 (id=1128): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="00190c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000240)={0x34, &(0x7f0000000540)={0x0, 0x4, 0x28, "4e48b033420db7b8753590cb044d57763ac7fd55890d53b8c58f08594a52b3aaf8831aa01de0d34c"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x0, 0x38, 0x1b, {0x1b, 0xb, "58118561c8e47ec4c8ba1c008d029f3d9a05a43c55b38cf748"}}, &(0x7f00000000c0)={0x0, 0x3, 0x68, @string={0x68, 0x3, "110de406a8c75237824dd49321d5acb7773778e509207ce603249dd71ff4e0b7c6a799f3d950d253a2b214f56f25344c3b5183d30ea0003ec7804885256c5398461f702fd6a9b407e48d38be45380253d15df7c97d218f9fde568a79ce657c3e773a78229037"}}}, &(0x7f0000000500)={0x34, &(0x7f00000002c0)={0x0, 0x11, 0x8d, "259559bd9d0bf66e983eec079c8d4beeb58a006a3724c3f4c5801e705af27d8dcaa46f1137d7724a7e1523879bb3f401dff23bf25748c7c5286cc955e72a33d82b92421a9ca4ef13b0cf5e06fd5df49c3164665a52c622afffc852e619d2b88102ff9d9a301a8980f2eb27d2bcfdc60614443052cbab34f053fab9606be6705f7bb7d9d0997ff2243743587b7f"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xf}, &(0x7f00000003c0)={0x20, 0x0, 0x54, {0x52, "b9acedd0405cf3d2a0700ac264f325563a4bd42be3b41356cdd3d070b6697eb58df6218fe6866a7d48ddaccf8e2d7f0068c36b34e2da28a6651a510b257465f897099f87550a54fd1b8549fba951ebdbdea0"}}, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x8}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0xff}}) 2m30.147215355s ago: executing program 4 (id=1135): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x220) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x84f4, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r6 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r6, 0x847ba, 0x0, 0x4a, 0x0, 0x0) 2m29.176473922s ago: executing program 4 (id=1138): socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x2, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x2, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x1401, 0x200, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c040) r4 = syz_open_dev$vcsu(&(0x7f0000000240), 0x6, 0x10c40) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000280)={@mcast1}, &(0x7f00000002c0)=0x14) ftruncate(r3, 0x2) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200000, 0x4) socket$nl_route(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x3c) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=0x0, @ANYRES64=r6], 0x0) 2m28.291579403s ago: executing program 4 (id=1140): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r3, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r3, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000040)={0x28, 0x7, r3, r3, 0xfeb, 0xfffffffffefffffc, 0x3fff}) recvmmsg(0xffffffffffffffff, &(0x7f0000004600), 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) unshare(0x400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xf, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r6, r7}, 0xc) mknod$loop(0x0, 0x2000, 0x0) ioctl$TCSETSW2(r4, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) 2m27.832558857s ago: executing program 44 (id=1140): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r3, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r3, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000040)={0x28, 0x7, r3, r3, 0xfeb, 0xfffffffffefffffc, 0x3fff}) recvmmsg(0xffffffffffffffff, &(0x7f0000004600), 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) unshare(0x400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xf, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r6, r7}, 0xc) mknod$loop(0x0, 0x2000, 0x0) ioctl$TCSETSW2(r4, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) 2m15.254837831s ago: executing program 0 (id=1157): syz_emit_ethernet(0x3a, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffffff280aaaaaaa000800460000230000000000019078ac1e0001ac1414bb000000000d00907800"/58], 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESOCT=r0, @ANYBLOB="0000000000000000400012"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x8000001) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) (async, rerun: 64) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000773604202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$printer(r4, 0x0, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (rerun: 64) write(0xffffffffffffffff, &(0x7f0000000200)='$', 0x1) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000080)=[0x7], &(0x7f0000000200), &(0x7f0000000080), 0x0, 0xf1}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) (async, rerun: 32) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000580)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x80, 0x0, @mcast1}}}, 0x108) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="4000220000002202d50d9ee89415d477886926cc8e0a9a889c2475ef1ce67141602762fe5c446b48"], &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x44, &(0x7f0000000140)={0x20, 0xf, 0x4c, "0f2e3b69d7d489aee00ce61eee85a76efed60641a26905248905b94092f4ee9ba4bdcbdbe51ae3be9b3f0586a1061e50eeda1b7404adfccfdd985a36044685d367f0008372853f977e7744de"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x3, 0x9, 0x2, 0x5, 0x100, 0x6, 0x80, 0x9, 0x0, 0x3ff, 0x8000, 0x40}}, &(0x7f0000000280)={0x20, 0x85, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xd}, &(0x7f0000000340)={0x20, 0x89, 0x2}}) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r8, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) 2m14.691374693s ago: executing program 0 (id=1160): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000440)=0x2000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x8000, 0x3, 0x4, 0xfffbffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r0, 0x10, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x12dc00, 0x0) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000540)=0x8, 0x4) ptrace$cont(0x1f, 0x0, 0x100, 0x4) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000340)="7210ec0e65eb18223831eba89a2803de2dcb34275c34ee5fb91b5a3d089fb591400abfb7115a689bcdbfd9d6ca0323d77b384c6c1ed4792543388ada5ef7b168ff79aee65d99acc3a670bda266a634067d0ef22cb36f1a7e25ad567e31a88e4fbdeedba2d3477436a6ecbae8e742ddd805ffc1deca47e4f6878ba808f64b12d149e94997d60a496d1468f1f57d801704ca621097fdd248bed678dfddfacbdfc8bb66e165560580d731b3e40a4ba0405eed96bf6a9788cc54998061f06c6cb2647c33c70168561dfcd3c8ec3bb0db", 0xce, 0x20040000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x8, r5, 0x0, 0x5, 0x83, &(0x7f0000000480)="8fbc45f49fc311de46207a5e5efb411dc6b08f0520b4675398e7a6f2eaae1f60d41b8c8382b5ab614c00b7eadc7f9416259ab7168d0ec5ff2478feaf3d343053c25edea2a24fe0724f17f2b01652f29a66ad470702e6dab4eb5385765a7a843dc2466c647131599e9292be188329e368d553d1117e7f712233d1b1f68673725d4e92bd", 0x1}) unshare(0x2a060c00) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 2m13.745095437s ago: executing program 0 (id=1163): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x4f}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x59d}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x1, 0x1000, 0xfff]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7be}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000011}, 0x800) pwritev(r0, &(0x7f00000014c0)=[{&(0x7f0000000080)="e3f63a08a5", 0x5}, {0x0}], 0x2, 0x100, 0x8) fcntl$getflags(r0, 0x3) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000245b8e405e048402ad2d00000001090224000100000000090431"], 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x464, 0x100, 0x70bd27, 0x25dfdbfb, "253e7cdeee95a0ab97e32cdd34769659cf520fe1808b2d5a64774b32dbdb4f690135a6b5d47282d7a65e89b91a2da97b9aa83e9ffb3b66d98e47c9bebfaa993bebe7b697c1fb56f55d41b3e0", [""]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4854) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x4f}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x59d}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x1, 0x1000, 0xfff]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7be}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000011}, 0x800) (async) pwritev(r0, &(0x7f00000014c0)=[{&(0x7f0000000080)="e3f63a08a5", 0x5}, {0x0}], 0x2, 0x100, 0x8) (async) fcntl$getflags(r0, 0x3) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000245b8e405e048402ad2d00000001090224000100000000090431"], 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x464, 0x100, 0x70bd27, 0x25dfdbfb, "253e7cdeee95a0ab97e32cdd34769659cf520fe1808b2d5a64774b32dbdb4f690135a6b5d47282d7a65e89b91a2da97b9aa83e9ffb3b66d98e47c9bebfaa993bebe7b697c1fb56f55d41b3e0", [""]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4854) (async) 2m12.881122203s ago: executing program 1 (id=1167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000040)=@tcp6}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}, [0xffffffffffffffff, 0x4, 0x2, 0x4, 0x1, 0x4, 0x10001, 0xff, 0x402, 0x8, 0x7ff, 0xffffffff, 0x7fff, 0x8001, 0x3]}, &(0x7f0000000300)=0x100) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000480)={0x1, 0x0, [{0x40000097, 0x0, 0x1c}]}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000540)={r5, @in6={{0xa, 0x4e22, 0x401, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7ff}}, 0x697, 0x34}, &(0x7f0000000340)=0x90) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40008d0}, 0x20008850) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="14000000100001000000000000000000001100010000000000000000000000000a204a06e68d8b1c4301000000ace5a3c9fa01148baf69ca8c09a6f799eff0262efc5ba0af60282d3d15a9b98e843400cc5ab231a76954f2afd17dfef46bfe0d06ae2bdb93bc5905561a63f8a2a1b8016b713bca05e4b2bc492c20eeb541f768ed59a1"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0xffffffffffffffb7, &(0x7f00000001c0)={&(0x7f0000000600)=@getchain={0x24, 0x66, 0x903, 0x70bd2e, 0x25dfdc03, {0x0, 0x0, 0x0, r9, {0xffe0, 0xb}, {0x0, 0xfff1}, {0x6, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x8000) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r13 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r13, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) write$P9_RLERROR(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="0b0000005be2c6c969e470b0dcdda2ae8197a4988a017ce59643b25e60427cc3ef8288fa7f086c"], 0xb) r14 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r14, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) ioctl$KVM_SET_IRQCHIP(r13, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @ioapic={0x60000, 0xd, 0x7, 0x2, 0x0, [{0x8, 0x7, 0x8, '\x00', 0x7}, {0xfe, 0xc, 0x6, '\x00', 0x2}, {0x2, 0x8, 0x0, '\x00', 0xbe}, {0x12, 0x81, 0x6, '\x00', 0xfb}, {0x9, 0x2, 0x6, '\x00', 0xf4}, {0xfd, 0x5b, 0xff, '\x00', 0xd}, {0x7, 0x80, 0x40, '\x00', 0x9}, {0x8, 0xa, 0x1, '\x00', 0x1}, {0x7f, 0x9, 0x9, '\x00', 0x4}, {0x7, 0x1, 0x80, '\x00', 0x8}, {0x4, 0x7, 0xfd, '\x00', 0xc5}, {0x0, 0x5, 0xb, '\x00', 0x9c}, {0x1, 0x7, 0x3, '\x00', 0x8}, {0x4, 0x7, 0x1, '\x00', 0xf7}, {0xf9, 0x78, 0x4, '\x00', 0xf}, {0x4, 0x2, 0x2, '\x00', 0x4}, {0x3, 0xb4, 0x80, '\x00', 0x4}, {0x3, 0x4, 0xf, '\x00', 0x6}, {0x43, 0x7, 0x0, '\x00', 0x1}, {0xff, 0x6, 0x2, '\x00', 0x3}, {0x92, 0xaf, 0xcf, '\x00', 0x1}, {0x4, 0x7f, 0x8, '\x00', 0x5}, {0x6, 0x9, 0xda, '\x00', 0x1}, {0xff, 0x6, 0xd7, '\x00', 0x6}]}}) setsockopt$sock_int(r14, 0x1, 0xb, &(0x7f0000000080)=0xfffbffbf, 0x4) ioctl$sock_inet_SIOCGIFNETMASK(r13, 0x891b, &(0x7f0000000040)={'batadv_slave_0\x00', {0x2, 0x0, @multicast2}}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) 2m12.482877041s ago: executing program 0 (id=1168): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x84f4, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0x4a, 0x0, 0x0) 2m10.71267082s ago: executing program 0 (id=1172): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x4) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x341800, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x9a}, 0x1c) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x18ba00, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x2f, [{{0x9, 0x2, 0x48}}]}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) socket(0x5, 0x800, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}}) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x1f, &(0x7f0000000380)=ANY=[@ANYBLOB="0c00004e1560254722cb66187f3b68d00c08004e15"]) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x13f, 0x1}}, 0x20) r6 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000080)="38635de68d26fa1b105fad3fe3a9f53ef95c185cb7c7499e6d98d7ec1e3c816b6c3b767d45567e01be2725fba221aabc0100c0569441befb55cce4494bb308ca0540f61b3f41edc2ca780b0ce9cbdbc51a6fc6c0d57929ee537ed3bbb93072e4", 0x60}, {&(0x7f0000000340)="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", 0x568}], 0x2}, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000300)={0x2, 0x0, [{0x4, 0xfffffff9, 0x1, 0xffffff4c, 0x1ff, 0x3, 0x25}, {0x80000008, 0x493a, 0x1, 0x5e9dd040, 0x4, 0x127, 0x100}]}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x300, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4, 0xfffffffb}}}}, 0x480) listen(r1, 0x200204) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) 2m9.927609133s ago: executing program 0 (id=1173): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000440)=0x2000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x8000, 0x3, 0x4, 0xfffbffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r0, 0x10, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x12dc00, 0x0) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000540)=0x8, 0x4) ptrace$cont(0x1f, 0x0, 0x100, 0x4) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000340)="7210ec0e65eb18223831eba89a2803de2dcb34275c34ee5fb91b5a3d089fb591400abfb7115a689bcdbfd9d6ca0323d77b384c6c1ed4792543388ada5ef7b168ff79aee65d99acc3a670bda266a634067d0ef22cb36f1a7e25ad567e31a88e4fbdeedba2d3477436a6ecbae8e742ddd805ffc1deca47e4f6878ba808f64b12d149e94997d60a496d1468f1f57d801704ca621097fdd248bed678dfddfacbdfc8bb66e165560580d731b3e40a4ba0405eed96bf6a9788cc54998061f06c6cb2647c33c70168561dfcd3c8ec3bb0db", 0xce, 0x20040000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x8, r5, 0x0, 0x5, 0x83, &(0x7f0000000480)="8fbc45f49fc311de46207a5e5efb411dc6b08f0520b4675398e7a6f2eaae1f60d41b8c8382b5ab614c00b7eadc7f9416259ab7168d0ec5ff2478feaf3d343053c25edea2a24fe0724f17f2b01652f29a66ad470702e6dab4eb5385765a7a843dc2466c647131599e9292be188329e368d553d1117e7f712233d1b1f68673725d4e92bd", 0x1}) unshare(0x2a060c00) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 2m9.392033304s ago: executing program 45 (id=1173): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000440)=0x2000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x8000, 0x3, 0x4, 0xfffbffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r0, 0x10, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x12dc00, 0x0) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000540)=0x8, 0x4) ptrace$cont(0x1f, 0x0, 0x100, 0x4) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000340)="7210ec0e65eb18223831eba89a2803de2dcb34275c34ee5fb91b5a3d089fb591400abfb7115a689bcdbfd9d6ca0323d77b384c6c1ed4792543388ada5ef7b168ff79aee65d99acc3a670bda266a634067d0ef22cb36f1a7e25ad567e31a88e4fbdeedba2d3477436a6ecbae8e742ddd805ffc1deca47e4f6878ba808f64b12d149e94997d60a496d1468f1f57d801704ca621097fdd248bed678dfddfacbdfc8bb66e165560580d731b3e40a4ba0405eed96bf6a9788cc54998061f06c6cb2647c33c70168561dfcd3c8ec3bb0db", 0xce, 0x20040000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x8, r5, 0x0, 0x5, 0x83, &(0x7f0000000480)="8fbc45f49fc311de46207a5e5efb411dc6b08f0520b4675398e7a6f2eaae1f60d41b8c8382b5ab614c00b7eadc7f9416259ab7168d0ec5ff2478feaf3d343053c25edea2a24fe0724f17f2b01652f29a66ad470702e6dab4eb5385765a7a843dc2466c647131599e9292be188329e368d553d1117e7f712233d1b1f68673725d4e92bd", 0x1}) unshare(0x2a060c00) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 2m9.351347725s ago: executing program 1 (id=1178): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async, rerun: 32) r1 = eventfd(0x0) (async, rerun: 32) r2 = syz_open_dev$audion(&(0x7f0000000340), 0x0, 0x20080) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x0, 0x7c}) (async, rerun: 64) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async, rerun: 64) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380)) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x51, 0x0, @void}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000300)=0x8) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000002c0)=0x200000000) 2m9.142832681s ago: executing program 1 (id=1180): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000080)={0x20, 0x31, 0x3, "c39242"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x1, 0x100, "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"}, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000201030000600bf2b208ce89d3000001240001"], 0x38}, 0x1, 0x0, 0x0, 0x44894}, 0x24004052) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="12000000480001002cbd7000000000000a008000", @ANYRES32=0x0, @ANYBLOB="1600193e480b3c445fc9572502000b0000000000000000000066b9268398736ec65654160523280d6f030765eb7bfcd2e011c53cf1ae1f1c9b16957c882272b071aa490b1b923af916576c33add714c019dcf2cc21a4ec68e7c3d3"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4040) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x7fffffff}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={r3, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x2, 0xe36a, 0xb, 0x4, 0x32, 0x9, 0xfb}, 0x9c) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000680)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m6.476560159s ago: executing program 1 (id=1182): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x84f4, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0x4a, 0x0, 0x0) 2m5.28283567s ago: executing program 1 (id=1187): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) read(r1, &(0x7f0000000140)=""/90, 0x5a) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0xfe}, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0) socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000007c00)=[{{&(0x7f0000000340)=@pppoe, 0x80, &(0x7f00000003c0)=[{&(0x7f0000007e00)=""/4109, 0x100d}, {&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000000280)=""/52, 0x34}], 0x3, &(0x7f0000000400)=""/146, 0x92}, 0x1}, {{&(0x7f00000004c0)=@un=@abs, 0x80, &(0x7f0000000580)=[{&(0x7f0000002740)=""/38, 0x26}, {&(0x7f0000004680)=""/154, 0x9a}], 0x2, &(0x7f0000004740)=""/150, 0x96}, 0x1}, {{0x0, 0x0, &(0x7f0000004e40)=[{&(0x7f0000004800)=""/186, 0xba}, {&(0x7f00000048c0)=""/188, 0xbc}, {&(0x7f0000004980)=""/112, 0x70}, {&(0x7f00000005c0)=""/10, 0xa}, {&(0x7f0000004a00)=""/219, 0xdb}, {&(0x7f0000004b00)=""/222, 0xde}, {&(0x7f0000004c00)=""/160, 0xa0}, {&(0x7f0000004cc0)=""/87, 0x57}, {&(0x7f0000004d40)=""/206, 0xce}], 0x9, &(0x7f0000004f00)=""/37, 0x25}, 0xfa}, {{&(0x7f0000004f40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000006140)=[{&(0x7f0000004fc0)=""/23, 0x17}, {&(0x7f0000005000)=""/4096, 0x1000}, {&(0x7f0000006000)=""/244, 0xf4}, {&(0x7f0000006100)=""/7, 0x7}], 0x4, &(0x7f0000006180)=""/139, 0x8b}}, {{0x0, 0x0, &(0x7f00000062c0)=[{&(0x7f0000006240)=""/87, 0x57}], 0x1, &(0x7f0000006300)=""/207, 0xcf}, 0x5}, {{&(0x7f0000006400)=@qipcrtr, 0x80, &(0x7f0000006600)=[{&(0x7f0000006480)=""/35, 0x23}, {&(0x7f00000064c0)=""/46, 0x2e}, {&(0x7f0000006500)=""/28, 0x1c}, {&(0x7f0000006540)=""/168, 0xa8}], 0x4, &(0x7f0000006640)=""/4096, 0x1000}, 0xbe}, {{&(0x7f0000007640)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000007780)=[{&(0x7f0000002680)=""/175, 0xaf}], 0x1, &(0x7f00000077c0)=""/48, 0x30}, 0xf}, {{&(0x7f0000007800)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000007b40), 0x0, &(0x7f0000007b80)=""/116, 0x74}}], 0x8, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x4ec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r8, 0x2285, &(0x7f00000008c0)={0x53, 0xfffffffffffffffe, 0x6, 0x40, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000800)="5cc1ca0ca500", 0x0, 0x5, 0x31, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r9, &(0x7f0000000640)={0x2020}, 0x2020) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x1, 'lo\x00'}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x8) unshare(0x2c020400) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) fsync(r0) 2m4.723140188s ago: executing program 1 (id=1192): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) (async) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) unshare(0x2c020400) 2m4.387855944s ago: executing program 46 (id=1192): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) (async) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) unshare(0x2c020400) 1m15.32038444s ago: executing program 3 (id=1381): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0x5000009) fallocate(r0, 0x0, 0xcfbd0c00, 0x3) 1m15.084622819s ago: executing program 3 (id=1383): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r1, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x4008800) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000740)={@multicast1, @loopback}, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @rand_addr, @remote}, &(0x7f0000000080)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0xe5, 0x5, {}, {0xee00}, 0xa, 0x8000000000000001}) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="c4010000140008002dbd7000fedbdf2564010102000000000000000000000000fe8000000000000000000000000000aa4e2300084e2400000a00a00011000000504a83cadb19284e510b33b2d880eeb61dd383d7edb6328f22614da636293781f6021687d12b6eb56a90d29ed62a7ebc05f728711b8183409eacb5d9b6047470c037eaa819c599cb6c4b2dfd7905d718c5503708474101c494239dd15f4629a7d80ec80e0d7fe4d4a831fcca7c961ad2415a28dc8d929cbb3e9cfe1db6f3171758f2c6862389ab9c4d7f44453a69089abb398a736e7058d0a921d5ea490237bdce448f7068e05e41ebcc3a904bf7ba9d81a5c8211b2fd17a5602aa4f2af0f97cd27bbddf51092bbf71cc612b9c6a860daa221c7f50d636b4fd544bafa5c0488e5077e0f7534d84177445eaa24542ca13135a7512d53acdbc5257e4af7dcea1d6a49651d153c7be129701c0d07d9acd3a46aa2d10360b54b01e3adb3cb429475acc2727a9b20cd0fe2317bb2fd7fa2d69974da4114bc2186f0857e06b17f468030b42fd17953e9200000000000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="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"], 0x1c4}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socket$netlink(0x10, 0x3, 0x0) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000400), 0x2083, 0x0) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000440)="4ab515e87ce1d2b5ee386b1793b94a41388afb1bb5d26466ce1c29c08e2c79647e3377c00e9263081547266a65860c7f08905fa48e818099ef25f4e1dbc636e0cce7698ec4f7f0a6912109ab455ce8db363cfa9712e240d5ef441a573f60a6f9c3100845c1", 0x65}], 0x1) 1m14.726672118s ago: executing program 3 (id=1386): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) fadvise64(r0, 0x9154, 0x5, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af0", 0x30, 0x840, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r2], 0x0) 1m13.124165532s ago: executing program 3 (id=1392): r0 = socket$nl_generic(0x10, 0x3, 0x10) semget$private(0x0, 0x0, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x60, r1, 0xd55319eec59dfa33, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x3d}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53d2e733d063b8798f36e9a19819607b65fa9c4c1b2bc125"}]]}, 0x60}, 0x1, 0x0, 0x0, 0xc804}, 0x82010) r3 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2179, 0x53, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0xfa, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xf4f6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x3, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = syz_io_uring_setup(0x1104, &(0x7f0000000240)={0x0, 0x0, 0x80, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x3, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r7, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r6, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0xffffffffffffff7f, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "83148f7f"}]}}, 0x0}, 0x0) r10 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd0, 0x60, 0x9, [{{0x9, 0x4, 0x0, 0x49, 0x1, 0x7, 0x1, 0x1, 0xc, "", {{{0x9, 0x5, 0x1, 0x2, 0x60, 0x1, 0x17, 0x10}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0x2, 0x4}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x40, 0xc1, 0x1, 0x40, 0xb9}, 0x4a, &(0x7f00000000c0)={0x5, 0xf, 0x4a, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x5, 0x3, 0x401}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "543df6c82b89facbf86f6263de6d43bc"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xaa, 0x0, 0xf, 0xfe0, 0x4a}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x6, 0x3, 0x9}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0x4, 0x7f, 0x81, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x53, 0x1, 0xa}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x40b}}]}) r11 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_DISCSIGNAL(r11, 0x8010550e, 0x0) syz_usb_control_io$printer(r10, &(0x7f0000000340)={0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="400b670000006723921b159b7b38bb64e94018e870abf56cc34d0df6f0ce423873ddbb0f983fba68449a8571ea44cc378f6ab8b43951dd8e0e497a71ca0bbd7b311dc14863dedb3b200f4ccd35c7527c4e5fbb21f661f320bd3d5342443ddfd8118f4d60b5c31346fa934ba2eb444152cf0bc4fa57723e21481d93883b"], &(0x7f00000002c0)={0x0, 0x3, 0x72, @string={0x72, 0x3, "c319bc905ae8ededb93f46ff11b8710b1ececb9d204d0575f17221d17da59fc9252bd6f2f76f7514448f69b2376021fb6ee183e26dd0fe34e47afcf42f76520d1185ac2c8d6c241dfcc5413f83599fd033bf92a8b472f33bd73c1150ffeab36994e5a3f54d5bbd7c666c57c153f00d93"}}}, &(0x7f00000005c0)={0x34, &(0x7f0000000380)={0x20, 0x15, 0xe6, "70ae09b3fbc445869d6dbc4e41070a1fdcf0ae21a89d0140adb3714fb440d4732bc81368c347f3394eb756b93d563a2e7a54bb19ea25580910dff1d07844648bf18bb13e9a2e12f770040a026fa480334ffdab52ae5a46063d4bcba0675faa305fd07726d35aef5881aa0a9713df00f9ab345b23ed15766997343ee27fb341676842368e4b30a8673a850ce87d8d33dca0a74b23fef6d86200996911140003fc8c4b62eadccea7e6eadf223eb9f4ff84c47f353efb46c18bff02f292919d47067457e927f7dc4edbdc33621251bdb8cdbefa74037d337b3be389c22d874e673b1ea8c1f4aef2"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000004c0)={0x0, 0x8, 0x1}, &(0x7f0000000500)={0x20, 0x0, 0x10, {0xe, "44631c0422392633ba04a1c09240"}}, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000580)={0x20, 0x0, 0x1}}) 1m10.520366449s ago: executing program 3 (id=1403): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f00000002c0)='\\ ', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmmsg(0xffffffffffffffff, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="4166deb08f5490e60cbd5dc80404c8a1d8b1dcefa938cbb0a2ca79523b6cc1574a6c7282edd54fa942633e7cf2fddaf1b19a9bd2aded624ffe3ed905bd5bc2ef28c3c689bdc609239748afb03e5201f0edcb4e0edfc9f07805d021a76bd013330c33937875ea24a4e7b7c9150afbfb67c43037a0f32d72c4b8b6a70cd359878738", 0x81}], 0x1}}], 0x1, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000280)={0x0, 0x80003734, 0x100, 0xfffffffe, 0x280}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x4000000000000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_usb_connect(0x4, 0xfffffffffffffd9b, 0x0, 0x0) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={'ip_vti0\x00', {0x2, 0x4e24, @multicast2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x94) 1m9.925410652s ago: executing program 3 (id=1407): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x1ff00001, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b784fceefd131b8e6238c25f5998e5bf421e48f4b0a501922de974a3300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486970284ed923431d400001f000000a9201be943f06f2f4000", r3, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000002c0)=0x7) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) (async) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_gettime(r5, &(0x7f0000000040)) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000240)={"8c5d2ddcdba01c2b0e062db91ec2209d789c4dcce0ab20c5fa0b8a204e3b856a", r4}) (async) ioctl$FIONCLEX(r0, 0x5450) 1m9.352831722s ago: executing program 47 (id=1407): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x1ff00001, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b784fceefd131b8e6238c25f5998e5bf421e48f4b0a501922de974a3300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486970284ed923431d400001f000000a9201be943f06f2f4000", r3, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000002c0)=0x7) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) (async) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_gettime(r5, &(0x7f0000000040)) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000240)={"8c5d2ddcdba01c2b0e062db91ec2209d789c4dcce0ab20c5fa0b8a204e3b856a", r4}) (async) ioctl$FIONCLEX(r0, 0x5450) 10.614270127s ago: executing program 6 (id=1626): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x2, 0x80000, 0xfffffffc) r2 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x0, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x64, 0xff, 0x70bd2f, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff2}, {}, {0xc, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x0) bind$alg(r3, 0x0, 0x0) r11 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x4040}, 0x4) recvmmsg$unix(r11, 0x0, 0x0, 0x12100, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000d3ccb510b1134200292b0102030109021b0001fc00000009040f0001e711e10009058317ff"], 0x0) syz_open_procfs(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 6.362192894s ago: executing program 6 (id=1639): r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000280)={0x0, 0x2710}, 0x10) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/57, 0x39}], 0x1}, 0x7}], 0x1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) read$hiddev(r3, &(0x7f0000000140)=""/234, 0xea) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)="10") r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1ff, 0x20}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x2, 0x4, 0x0, 0x4, 0xfffc, 0x2]}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x41a}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x4400) syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000280)={0x0, 0x2710}, 0x10) (async) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/57, 0x39}], 0x1}, 0x7}], 0x1, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async) read$hiddev(r3, &(0x7f0000000140)=""/234, 0xea) (async) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)="10") (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1ff, 0x20}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x2, 0x4, 0x0, 0x4, 0xfffc, 0x2]}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x41a}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x4400) (async) 6.095386073s ago: executing program 9 (id=1641): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0xa9525000) unlink(&(0x7f0000000140)='./cgroup\x00') r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f00000003c0)="11eb534bfc0baf745837da88245c7f7565ec14571e49bf33cc99dbe5f42bed0338fa00b277ae3d", 0x27, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r5, 0x1, 0x4, 0x6, @local}, 0x14) 5.287048209s ago: executing program 7 (id=1644): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000086666048800000000000109022400010000100809040090010300000009210000000122050009058103"], 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00220500000093"], 0x0}, 0x0) 4.615726577s ago: executing program 9 (id=1646): syz_emit_ethernet(0x7a, &(0x7f0000000200)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x9, 0x6c, 0x66, 0x0, 0x4, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0xe, 0x0, 0x0, 0x26, 0x0, {0x14, 0x4, 0x1, 0x14, 0x800, 0x64, 0x4, 0xfc, 0x84, 0x4, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3, 0x27}, @lsrr={0x83, 0xb, 0x5d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @lsrr={0x83, 0x7, 0x57, [@broadcast]}, @cipso={0x86, 0x19, 0xffffffffffffffff, [{0x0, 0xd, "bb50e9db2338c0039784e1"}, {0x7, 0x6, "2d449701"}]}, @ssrr={0x89, 0x7, 0xfe, [@loopback]}, @lsrr={0x83, 0x7, 0xab, [@rand_addr=0x64010101]}]}}}}}}}, 0x0) 4.457229894s ago: executing program 6 (id=1647): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0083, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000021c0)={0x0, 0x3, 0xffffffff, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000002d000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f00000022c0)="c4c27979560964660fc77562c4c39d5c80f20000007b0f79deb8001000000f23c00f21f835000009000f23f8c4c1d414a78b299ce7f0832730f30f6f704ef20f2acb66baf80cb846ff658bef66bafc0c66b800a066ef", 0x56}], 0x1, 0x10, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000023c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0}, 0x2024) lseek(r4, 0xfffffffffffffff5, 0x1) r6 = socket(0x2, 0x3, 0xf8) sendto$unix(r6, 0x0, 0x0, 0x48850, &(0x7f0000002240)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sched_setattr(0x0, &(0x7f0000002200)={0x38, 0x0, 0x8, 0x8001, 0x100002, 0x9, 0x0, 0xfffffdfffffffffa, 0x7, 0xffffffff}, 0x0) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x20000000, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffe}}}, 0x108) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000884}, 0x40d5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c0001"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) sendmsg$NFT_BATCH(r7, 0x0, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1e8, 0x12, 0x60a, 0x1e8, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x1b8, 0x1e8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@inet=@set3={{0x50}, {{0x0, 0x3, 0x4}, {0x1}, {0x81, 0x8000}, 0x2}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRES8=r3, @ANYBLOB="180000006a000105fefdffffffdbdf25010000ee", @ANYRES64=r5], 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x20008000) 4.399914859s ago: executing program 9 (id=1648): r0 = openat$vimc0(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000100)={0x1, 0x1, [0xc, 0x9, 0xffffffff, 0x9, 0x8001, 0x8001, 0xa720, 0xb2b]}) 4.177214855s ago: executing program 9 (id=1649): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000300)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f00000000c0)={0x10, 0x0, r2}, 0x10) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000300)={0x0, 0x17, 0x49, "fada9f037c5e111d9e702d4b5f8e0f21a5980a37acfa1a6c6b25c794b4164d9bbb2627ce275cc881c1108a912e31d0429efb45f800e00d4d94617aee7656ac12a4d1d3fad5f2d55789"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.347041269s ago: executing program 8 (id=1653): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x2c, 0x3, 0xf8) sendto$unix(r0, 0x0, 0x0, 0x200088c9, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4004}, 0x810) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffd, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x38d) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000600)={0x8, {{0xa, 0x4e21, 0x0, @mcast1={0xff, 0x7}, 0xfffffffc}}, {{0xa, 0xfffd, 0xe, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}}}, 0x108) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000140)={0x0, 0xfffffff9, 0xa4, 0xfffffffc}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000ba4a42430a000000"], 0x26}}, 0x0) unshare(0x8000280) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) ioctl$EXT4_IOC_MIGRATE(r8, 0xff07) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x800, 0x40000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101}, 0x10}, 0x94) r9 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r9, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0)}, {0x0}], 0x4) 3.335336741s ago: executing program 6 (id=1654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000406010100000000000000000000000005000100070000001c7d7ea68548faf18b31f6"], 0x1c}, 0x1, 0x1000000}, 0x0) 3.32722229s ago: executing program 7 (id=1655): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}}, 0x20004055) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="28008f97", @ANYRES16=r1, @ANYBLOB="000229bd7000fcdbdf250d0000001400098008000200080000000800010009000000"], 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x2000c001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0xfffd) readv(r3, &(0x7f0000001940)=[{&(0x7f0000000100)=""/121, 0x79}], 0x1) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f0000000040)={0x8, {0x6, 0x10001, 0x1, 0x2}, {0x7, 0xcf, 0x9, 0x101}, {0xcc, 0x80000000}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) (async) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0xd, &(0x7f0000000000), 0x8) 3.114569055s ago: executing program 6 (id=1656): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b0001000010000904550701034902000905820300"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\"'], 0x48) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000011140103400000000000000008004b"], 0x18}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}}, 0x4040000) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f00000001c0)={0x30000004}) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000280)={0x85, "d8c09b641f84202d98bc952faf63a2f18184e7c036a7b83675a5e8c2d7142def", 0x1, 0x1, 0x7ff, 0x1, 0x4, 0x0, 0x3, 0xbee}) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) r6 = syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000206b1d010140000102030109025f0003010000000904000000010100"], 0x0) syz_usb_control_io(r6, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1574e6bc38aa6405906bae01a31fc8979cbea7f66d705a818f03c1c1d57decf836d0eeb905962094fe73ac281c9da0fa8efe9c6bb9794a8fb5e64a4c0f6b88ecf7d146d578220baa19a5548c4da001500275383ebdbf8c6919a80a2659dc356dc0f51b32969ef5bab29fe96990de73310bec73"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r6, &(0x7f0000000400)={0x14, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00033800000038036cbd87551224e3c8275120611eb137edc1efaa44365e9ccf0428ac904e71039a29ebe9624df68af5025c0b2c4fbe50f529dc0699598ed5e61e08105107d3baf5630ec9ca174e6822764358bcf5216738e340a2c0bf45b94a55149a26d843c1ba1f19ff"]}, 0x0) r7 = creat(&(0x7f0000000100)='./file0\x00', 0x41) ioctl$CEC_ADAP_G_CAPS(r7, 0xc04c6100, &(0x7f0000000300)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x7, [0x8400, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x806, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x800, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0xc, 0x4, 0x0, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0xc57, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x1, 0x4, 0x10001, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff5, 0x129430e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6cb, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x200, 0x401, 0x6, 0x1, 0x1, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x9, 0x8000009, 0x1, 0x47, 0x8000, 0x1, 0xfe000000, 0x7e78, 0x5, 0x4, 0x9, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x80000005, 0x7fff, 0x0, 0x7, 0xb, 0x4, 0x4, 0x5, 0x0, 0x1ef, 0x5, 0xb, 0x86, 0x3, 0x303c, 0x1, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x2, 0x6, 0x38, 0x800003, 0x200, 0x3, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0xb, 0x803, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x8, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0xb, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x56, 0xfffffff2, 0x6bd8490e, 0x101, 0x10000, 0x80000001, 0x7fff, 0xffff, 0xa61e, 0x1, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60ab, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0x5, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x7, 0x30b1d693, 0xa1f, 0x40000f41, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x200fff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.732822507s ago: executing program 7 (id=1658): syz_emit_ethernet(0x7a, &(0x7f0000000200)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x9, 0x6c, 0x66, 0x0, 0x4, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0xe, 0x0, 0x0, 0x26, 0x0, {0x14, 0x4, 0x1, 0x14, 0x800, 0x64, 0x4, 0xfc, 0x84, 0x4, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3, 0x27}, @lsrr={0x83, 0xb, 0x5d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @lsrr={0x83, 0x7, 0x57, [@broadcast]}, @cipso={0x86, 0x19, 0xffffffffffffffff, [{0x0, 0xd, "bb50e9db2338c0039784e1"}, {0x7, 0x6, "2d449701"}]}, @ssrr={0x89, 0x7, 0xfe, [@loopback]}, @lsrr={0x83, 0x7, 0xab, [@rand_addr=0x64010101]}]}}}}}}}, 0x0) 2.595519389s ago: executing program 7 (id=1660): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40042, 0x21) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 2.359503176s ago: executing program 2 (id=1661): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0x1, 0x2}, {0x9, 0xb6}, 0x3d, 0x1, 0x8b}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc568}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x800, 0x7}}]}]}, @IFLA_MASTER={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c041}, 0x200088c4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0xaf8, @local, 0x2}, 0x1c) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000940)={0x53, 0xfffffffffffffffc, 0x6, 0x80, @scatter={0x0, 0x0, 0x0}, &(0x7f00000007c0)="3f3399a946aa", 0x0, 0x4, 0x12, 0x1, 0x0}) 2.178880312s ago: executing program 7 (id=1662): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1822, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xa}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) setsockopt$inet6_tcp_buf(r2, 0x6, 0x0, &(0x7f0000000940)="f81c8fb899b64486b75f2964c60c4e19f1ba76025ec182c2fe5e8ede911dcf", 0x1f) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r5, &(0x7f0000000300)=ANY=[], 0xfdef) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x245, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x20, 0xaa, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7f, {0x9, 0x21, 0x4, 0x3, 0x1, {0x22, 0x951}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x1, 0xd}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x7, 0x40, 0x5}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x1, 0x2, 0x85, 0x20, 0x9}, 0xd9, &(0x7f0000000240)={0x5, 0xf, 0xd9, 0x5, [@generic={0xa8, 0x10, 0x6, "2c0805bd26c2b40d19dfc761e765425ff86c8aa0a2ddeba007363769ad213cbab1b114257f34b7c2a2a6ba4747b15b741dd1c88f7a67766e94cb6a0eb475421549d2401c0472554282c68f754434fc7e3acc43664ec017ee44f6ace1fd8e07319d1d2dbbca367056bf2fc3355bad8d940c65f4272d1e8f6bd217d40b69e44ba79cea92f566d99ecdbcfaf73562d514aaf58072afdb2c7cecb7d71ffbeb95b059ed368bc344"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0xc, 0x8000}, @ss_container_id={0x14, 0x10, 0x4, 0x97, "1897228c3f9a4b45dec2554f587eda13"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0xe6, 0x9, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x4, 0x4, 0x279e}]}, 0x4, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44c}}, {0x56, &(0x7f0000000380)=@string={0x56, 0x3, "891bf4a0756fc23ff9ebf16a387952389c7a2a9100083e644a523ff9ea3c2e3480085f024cbe1f9ed3a41b08687ffdc674a2e418189dad83d1be6bb2a99e3c412fb657512ec1d2c627a1f9fd141fa523c744e0d7"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc0c}}, {0x9f, &(0x7f0000000440)=ANY=[@ANYBLOB="9f0320ded235b253973d2d46a9395ed321186e9f68c2efde7dd96850b72a843dcb12dd1d58fbc05702f4befff0d1eb39265ef222911363d391cbc60d998e5d780fec786c4f0ab8c7978de102a000000000c8993e7d1cc8fe62db8c790a05dab284a7fb258e2e302826871d26751b9edf666fc9b1f6bcc26585cef90008577ab2e827a329d09c03f64a3bb9022f724ad9b0ce387d3e45b83ad6c4fbe824f08d"]}]}) syz_usb_control_io$hid(r6, &(0x7f00000006c0)={0x24, &(0x7f0000000580)={0x20, 0xe, 0x3b, {0x3b, 0x3, "04a5b5d8ead770552dcf256da82a120db7ad4a24b4ecbc0d9aab58921c9e063009717e196fa996939fcd4ed1230d25a6c07b81bcc3df7a8512"}}, &(0x7f0000000600)={0x0, 0x3, 0x16, @string={0x16, 0x3, "4a401a2dd0be8e88986ff403e152aa123a9edada"}}, &(0x7f0000000640)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "f42cda0e"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x8, 0x1, {0x22, 0x4e9}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000700)={0x0, 0x18, 0xd9, "8c8c2acb614fa8a25591fcf09c0efea7035cce48e1c1d7992e3f595a1aff8285a52e7ce33e67dec4307bd9889f8b6dc6237d6766fb7814fe6037ef366e8b77898db123e7dc664e2c13bc387614aba662238e0b238e00903d25918cd6689da48b90bd28e1caaca40ce97bd64cdfdf0bf33dbb90af26b35fa90aee5b1e75638bd8311b7676c7cb35072776e159aa1002551be269730423c233bb13b983676ce4affba4beacf26ec321329172d2e8fa80ef29578f841adfb8fad6441803cd0e0aa2a437ff8d468d382c6fb678a07a032dd64aca36217033fd4bd8"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000880)={0x20, 0x1, 0x23, "b9d87ff923615b16b591c05cbe60dbb19b4bf7fb77424c3651c93acdffe7f570409934"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x3}}) 2.126739142s ago: executing program 9 (id=1663): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x4c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8008000}, 0x4021) 2.022201571s ago: executing program 9 (id=1664): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8c, 0xbc9faef6, 0xc2}]}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) r4 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011801000000405804155000000000000109022d00010000000909040004010300000009210400040122070009058103200003"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0xfee0, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x22, 0x7, {[@main=@item_012={0x2, 0x0, 0xa, '\t\t'}, @main=@item_012={0x2, 0x0, 0xc, "b608"}, @global=@item_012={0x0, 0x1, 0x2}]}}, 0x0}, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r3, &(0x7f0000006500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/187, 0xbb}, 0x1}], 0x1, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x4b, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x8}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x62203, 0x0) ioctl$KVM_DIRTY_TLB(r7, 0x4010aeaa, &(0x7f0000000140)={0x1, 0x8}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r9 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x5) fchdir(r10) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r11, &(0x7f00000000c0)=""/47, 0x2f) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x30002004}) sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.977559739s ago: executing program 2 (id=1665): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r2 = socket(0xa, 0x2, 0x1) (async) r3 = socket$packet(0x11, 0x2, 0x300) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x2000c804) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x4040) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x60842, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000380)="66b97c08000066b80900000066ba000000000f300f38cab83597b8f5008ec8b808010f00d8b823008ec00f32f2abdefb6766c7442400112200006766c74424021e8d1eeb6766c744240600000000670f011424660fd36ded", 0x58}], 0x1, 0x8, 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) close_range(r7, r8, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xffffffff92466c96}}, 0x50) (async) socket$netlink(0x10, 0x3, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, &(0x7f0000000140)=0xfffffffffffffddb) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100000000d000000daeb4669cdb6adff1363184135bd9b0000000000", @ANYRESDEC=r0], 0x3c}, 0x1, 0x0, 0x0, 0x10000010}, 0x4015) 1.517556708s ago: executing program 8 (id=1666): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000406010100000000000000000000000005000100070000001c7d7ea68548faf18b31f6"], 0x1c}, 0x1, 0x20000000}, 0x0) 1.295479327s ago: executing program 8 (id=1667): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x31) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r0], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg(r1, 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 1.043133009s ago: executing program 6 (id=1668): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x978}) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) (async) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYRES32=r0], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x57, [{0x0, &(0x7f0000000140)=@string={0x0, 0x3, "34d59a0bcc2b9b1407b2aee61b345e4d0936a65b0da452dff91b5a7d5c7b1707b4c323f1f68981d6d65456a2cc33a2f846296085482095ea4a4c3c3fc597e07c2f87bb33a2080c44170cbabb82319d747b4e1316c513fe362cd59126edbf8160e43a968cbb37f71549c00ac5f097d3d9098838f53f9a82721d2fc6342b9004b7eef84174d0a741114277a172623353d56073edafdbe3a8d340004532cbf365a6ed54a7b6a0d4dfdc72a51f9d71fcbb78ec1b0ecc93d2ff79d2d2e4276ce3a37888af632714f3266174f1bf1a477baeff7fe32a9af8a4adeb9f183fc30cdcb3d0fa626812804c5da1e724b08d"}}, {0x0, &(0x7f0000000080)=@lang_id={0x0, 0x3, 0x1409}}, {0x0, &(0x7f0000000280)=@string={0x0, 0x3, "07c3072747da2aaef1e84934341fff7d473badfe93ae9c3ddc2239bc4cb155fe1795c0dea4524f5478c238141ee4caff966362cb3433cf5bf79f1445a5477cea696aca03b5a437dc723ff2083e125762846dfc3956e280ce1459e7fa3c3b39f9c8a6e3eb6f1c65790f31f42c3d9ed8f5415898661610b7343a56750d1fd2c12dbccc3b0ba2058613ac266ec00f8d5982cb4e67a783a43a4bd8243c27a8ff73b4"}}, {0x0, &(0x7f0000000340)=@lang_id={0x0, 0x3, 0x80c}}, {0x0, &(0x7f0000000380)=@string={0x0, 0x3, "026bddcad0a1c6e43e23c90d2803e9f3f3c767d74d017b54ca06a37bb38245d85039e1f1b7ee5db315c29127bee8fe796603a95497041122ddd7d5a77e59d686f409302244cd188aa76d1a84b77b5fe070cab10cb8cb8a5b"}}, {0x0, &(0x7f0000000400)=@lang_id={0x0, 0x3, 0x40b}}]}) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000100)) 653.32076ms ago: executing program 2 (id=1669): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x3f0000, 0x40000000, 0x1, r1, 0x0, &(0x7f00000000c0)={0xa10901, 0xfffffe00, '\x00', @p_u32=&(0x7f0000000080)=0xf}}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x220880, 0x0) ioctl$RTC_PIE_ON(r2, 0x7005) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000180)={0x2, 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) ioctl$TUNSETGROUP(r3, 0x400454ce, r6) r7 = syz_open_procfs(r4, &(0x7f0000000280)='net/ip_tables_targets\x00') shutdown(r7, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setreuid(r5, r5) r8 = socket(0x2, 0x5, 0x2) sched_setattr(r4, &(0x7f00000002c0)={0x38, 0x0, 0x9, 0xe4, 0x4, 0x3, 0x6, 0x7, 0x5}, 0x0) sendmsg$nl_generic(r3, &(0x7f00000015c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001580)={&(0x7f0000000340)={0x1214, 0x35, 0x200, 0x70bd29, 0x25dfdbfb, {0x6}, [@typed={0x1004, 0xc2, 0x0, 0x0, @binary="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"}, @generic="906e9dc620f610b6e27d2972ee5cfbdd93494528d947f8594dd664eb68632f1823eafd8470ae788804ee0af06203d7b5e27906b508188c4761dbc949f69b4ba426fa47aa73a1cb05f6e5f4bdc58e271882959a87377c1f47634cfddef3b9b3b0c1226d1c99d4519be19303d9452ddb181d1e21053a0dcc4a04dad260af154cb01c27e0da417a11a03cbd54355f2a0f6fa80ac9a16a6129e3d0f8b476c0258226fc5c335f59dd495f54597aabd6bd54aec6bf89a6837128ac5f9862c9efc75b180a4699f84aeffb0e21", @nested={0x12e, 0x62, 0x0, 0x1, [@typed={0x7d, 0x4e, 0x0, 0x0, @binary="93baddff4744f96fb1e391fb87677eeb7b7da8d57dfc2f301481122a05193af8a74a4594381f938d1a93e61662193346a20f50d3cae1498866258eac2b87a243d6aaf42f7a8281bf0ce8a81643cb5014b31b304fbfb1a6aa38fe11791b63347380ba7a3c36e8d6a8f045432912199886b781944454aaa77b2c"}, @generic="b1508f2158d7f1475141a9be17fca6506db9c7dad293adb2a005f5a0428e6edda654ecbbbe30a5793f83b1a0e384987e78f84fc51acbcdceab7028bc7fb34a522f59e478a200fabf51c6877800baf09ec3c5d4c982ad6c229a122115eae40a7c5bcf7d8d8336dc2da668883bbbb228373b6630a4ff0f2b6bf62688616984e3b2dee19eb8e697484541f5d692837b72735d629aaf311e3fc7355e789120d36ff8f11d3bb3e56ca4931f37"]}]}, 0x1214}}, 0x80) ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f0000001600)={0xffffffffffffffff}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001680), 0x2200, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r9, 0x80049367, &(0x7f00000016c0)) sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x480c4}, 0x4044800) ioctl$XFS_IOC_FSGROWFSRT(r1, 0x40105870, &(0x7f0000001800)={0x66, 0x6}) ioctl$KVM_IRQ_LINE(r9, 0x4008ae61, &(0x7f0000001840)={0x5, 0xff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001880)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x200, '\x00', 0x0, r7, 0x4, 0x2, 0x5}, 0x50) getsockname$qrtr(r3, &(0x7f0000001900), &(0x7f0000001940)=0xc) inotify_add_watch(r3, &(0x7f0000001980)='./file0\x00', 0xa5181dbc82b9dd1e) r10 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000019c0)) syz_open_dev$dri(&(0x7f0000001a00), 0x3, 0x42c802) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) 319.265122ms ago: executing program 8 (id=1670): syz_emit_ethernet(0x7a, &(0x7f0000000200)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x9, 0x6c, 0x66, 0x0, 0x4, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0xe, 0x0, 0x0, 0x26, 0x0, {0x14, 0x4, 0x1, 0x14, 0x800, 0x64, 0x4, 0xfc, 0x84, 0x4, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3, 0x27}, @lsrr={0x83, 0xb, 0x5d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @lsrr={0x83, 0x7, 0x57, [@broadcast]}, @cipso={0x86, 0x19, 0xffffffffffffffff, [{0x0, 0xd, "bb50e9db2338c0039784e1"}, {0x7, 0x6, "2d449701"}]}, @ssrr={0x89, 0x7, 0xfe, [@loopback]}, @lsrr={0x83, 0x7, 0xab, [@rand_addr=0x64010101]}]}}}}}}}, 0x0) 319.051926ms ago: executing program 2 (id=1671): r0 = openat$vimc0(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000100)={0x1, 0x1, [0xc, 0x9, 0xffffffff, 0x9, 0x8001, 0x8001, 0xa720, 0xb2b]}) 240.158063ms ago: executing program 2 (id=1672): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'\x00', @random="692bd8b48bd4"}) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x80, 0x2) r3 = openat$incfs(r2, &(0x7f00000000c0)='.log\x00', 0x428800, 0x178) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x7, 0x5, 0x7f84}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) capset(&(0x7f00000001c0)={0x20080522, r4}, &(0x7f0000000200)={0x0, 0x9, 0x8, 0x1ff, 0x7, 0xf}) capget(&(0x7f0000000240)={0x20071026, r4}, &(0x7f0000000280)={0x1, 0xfffff001, 0x5, 0x8001, 0x1, 0x7}) capset(&(0x7f00000002c0)={0x20071026, r4}, &(0x7f0000000300)={0xffffffff, 0x80, 0x6f7e, 0xb, 0xffff, 0x7fff}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000340)=0x7fb, 0x4) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000480)={&(0x7f0000000380)=""/214, 0xd6}) r5 = syz_io_uring_complete(0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000004c0)={0x80000001, 0x0, 0x100, "f9f903c8f001ef825b99ce06bdbb24532ae5a2c9e40e3f7f37ad0f0de1ee8176", 0x34325258}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) timer_create(0x2, &(0x7f0000000540)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000580)=0x0) timer_settime(r6, 0x1, &(0x7f00000005c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000600)) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) timer_settime(r6, 0x1, &(0x7f00000006c0)={{r7, r8+60000000}, {r9, r10+10000000}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r5, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x92, &(0x7f00000007c0)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xf6, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f0000000a00)={'ip6gre0\x00', r11, 0x29, 0x2, 0x7f, 0x5, 0x20, @local, @private1, 0x8, 0x8, 0x8, 0x8}}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x13, 0x24, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @generic={0xf, 0x4, 0x1, 0x0, 0x9}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x2, 0x1, 0x0, r5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c00)='GPL\x00', 0x4, 0x5c, &(0x7f0000000c40)=""/92, 0x40f00, 0x1, '\x00', r12, @fallback=0x1a, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000cc0)={0x5, 0x4, 0x4, 0x3}, 0x10, 0xffffffffffffffff, r5, 0x1, 0x0, &(0x7f0000000d00)=[{0x1, 0x5, 0xd, 0x3}], 0x10, 0x2}, 0x94) ioctl$BTRFS_IOC_SCRUB_CANCEL(r13, 0x941c, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x810c5701, &(0x7f0000000e00)) getsockopt$sock_buf(r3, 0x1, 0x1f, &(0x7f0000000f40)=""/64, &(0x7f0000000f80)=0x40) r14 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r14, 0x1, 0x12, &(0x7f0000000fc0)=0xfffffff7, 0x4) timer_settime(r6, 0x1, &(0x7f0000001040)={{0x0, 0x989680}}, &(0x7f0000001080)) 227.658728ms ago: executing program 8 (id=1673): openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40042, 0x21) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x10000, 0x1, 0x401, 0x7fffffff, 0x0, [{0x7, 0x10, 0xff, '\x00', 0x38}, {0x4, 0xfe, 0x7c, '\x00', 0x31}, {0x5, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x10, '\x00', 0x6}, {0x5, 0x7f, 0x6, '\x00', 0x79}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x6, 0x8, 0x1, '\x00', 0x45}, {0x52, 0x9, 0x3, '\x00', 0x9}, {0x40, 0x2, 0x73, '\x00', 0xff}, {0x1, 0xb6, 0x89, '\x00', 0x80}, {0x6, 0x8, 0xa0, '\x00', 0x1}, {0x1, 0x1, 0x7, '\x00', 0x4}, {0x8, 0xc, 0x5, '\x00', 0x8}, {0xd, 0x10, 0x8c, '\x00', 0x4}, {0x0, 0xc0, 0x7, '\x00', 0x3}, {0x8, 0x2, 0xf6, '\x00', 0x2}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x40, 0xfa, '\x00', 0x5}, {0x1, 0x4, 0x6, '\x00', 0x6}, {0xf8, 0x8, 0xa, '\x00', 0xf8}, {0x8, 0x1, 0xcc, '\x00', 0xf7}, {0x6, 0x6, 0xfe, '\x00', 0xa}, {0xff, 0x0, 0x3, '\x00', 0x7}, {0x16, 0x89, 0x4, '\x00', 0xff}]}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 50.966254ms ago: executing program 2 (id=1674): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x4e, 0x40, 0x5, 0x80, 0x7c, 0x80, 0x9, 0x40, 0x7f, 0x7, 0x9, 0x40, 0x9e, 0x8}, 0xe) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = fanotify_init(0x200, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) fanotify_mark(r3, 0x41, 0x8000038, r4, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000000)) syz_emit_ethernet(0x6c, &(0x7f0000000100)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}}, @dest_unreach={0x3, 0x2, 0x0, 0x0, 0x6, 0x6298, {0xf, 0x4, 0x2, 0x3, 0x9, 0x66, 0x8001, 0x6, 0x5e, 0x8, @local, @remote, {[@rr={0x7, 0x7, 0x8a, [@empty]}, @noop, @timestamp_addr={0x44, 0x14, 0xe7, 0x1, 0x3, [{@remote, 0x40}, {@broadcast, 0x4}]}, @noop, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}, "9cf6fafa49b5"}}}}}, 0x0) vmsplice(r8, &(0x7f0000000240)=[{&(0x7f0000000180)="77694c5760398513267dac13857b8055a06e1497bf95b5df4d3d564952a547536827c7f35e4d28b6bc4290d3ed48796d8a2493a1ad75a4162af8e50b91532ce1efba0a72d7bc766d9f0f9ad331f76549100fe4ea98fe494eadbedf92dc0a7b78a099a3b8b2fe1dee117682f76de034d8d0", 0x71}, {&(0x7f0000000200)="f37a5fd962598f75104144a82ef99aa2d3d9da", 0x13}], 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x4e, 0x40, 0x5, 0x80, 0x7c, 0x80, 0x9, 0x40, 0x7f, 0x7, 0x9, 0x40, 0x9e, 0x8}, 0xe) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) fanotify_init(0x200, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) (async) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) (async) fanotify_mark(r3, 0x41, 0x8000038, r4, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) (async) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000000)) (async) syz_emit_ethernet(0x6c, &(0x7f0000000100)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}}, @dest_unreach={0x3, 0x2, 0x0, 0x0, 0x6, 0x6298, {0xf, 0x4, 0x2, 0x3, 0x9, 0x66, 0x8001, 0x6, 0x5e, 0x8, @local, @remote, {[@rr={0x7, 0x7, 0x8a, [@empty]}, @noop, @timestamp_addr={0x44, 0x14, 0xe7, 0x1, 0x3, [{@remote, 0x40}, {@broadcast, 0x4}]}, @noop, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}, "9cf6fafa49b5"}}}}}, 0x0) (async) vmsplice(r8, &(0x7f0000000240)=[{&(0x7f0000000180)="77694c5760398513267dac13857b8055a06e1497bf95b5df4d3d564952a547536827c7f35e4d28b6bc4290d3ed48796d8a2493a1ad75a4162af8e50b91532ce1efba0a72d7bc766d9f0f9ad331f76549100fe4ea98fe494eadbedf92dc0a7b78a099a3b8b2fe1dee117682f76de034d8d0", 0x71}, {&(0x7f0000000200)="f37a5fd962598f75104144a82ef99aa2d3d9da", 0x13}], 0x2, 0x0) (async) 890.372µs ago: executing program 8 (id=1675): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfe}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x306) (async) close(r3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) (async) r6 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r6, 0x802c550a, &(0x7f0000000380)=@urb_type_iso={0x0, {0x1}, 0x3ff, 0x2, 0x0, 0x0, 0x2c, 0xa8b, 0x0, 0x1, 0xfffffffb, 0x0}) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xfff3}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xffffff00}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @empty}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) 0s ago: executing program 7 (id=1676): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x2c, 0x3, 0xf8) sendto$unix(r0, 0x0, 0x0, 0x200088c9, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4004}, 0x810) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffd, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x38d) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000600)={0x8, {{0xa, 0x4e21, 0x0, @mcast1={0xff, 0x7}, 0xfffffffc}}, {{0xa, 0xfffd, 0xe, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}}}, 0x108) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000140)={0x0, 0xfffffff9, 0xa4, 0xfffffffc}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000ba4a42430a000000"], 0x26}}, 0x0) unshare(0x8000280) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) ioctl$EXT4_IOC_MIGRATE(r8, 0xff07) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x800, 0x40000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101}, 0x10}, 0x94) r9 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r9, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0)}, {0x0}], 0x4) kernel console output (not intermixed with test programs): SID 50:50:50:50:50:50 [ 421.360960][ T9046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.388126][ T9046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.421462][T12632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.538026][T12632] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.602196][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.609450][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.662553][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.669737][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.843790][T12780] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 421.880834][ T10] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 421.995302][T12632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.102303][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 422.131231][ T10] usb 10-1: not running at top speed; connect to a high speed hub [ 422.136415][ T5937] usb 4-1: USB disconnect, device number 14 [ 422.139103][ T10] usb 10-1: too many configurations: 170, using maximum allowed: 8 [ 422.249788][T12632] veth0_vlan: entered promiscuous mode [ 422.256985][ T5143] Bluetooth: hci4: command tx timeout [ 422.278341][T12786] tipc: Started in network mode [ 422.284554][ T10] usb 10-1: config index 0 descriptor too short (expected 16402, got 18) [ 422.297504][ T10] usb 10-1: config index 1 descriptor too short (expected 16402, got 18) [ 422.307220][ T10] usb 10-1: config index 2 descriptor too short (expected 16402, got 18) [ 422.319420][ T10] usb 10-1: config index 3 descriptor too short (expected 16402, got 18) [ 422.530557][T12786] tipc: Node identity 84e, cluster identity 4711 [ 422.538320][T12786] tipc: Node number set to 2126 [ 422.555331][T12632] veth1_vlan: entered promiscuous mode [ 422.695523][ T10] usb 10-1: config index 4 descriptor too short (expected 16402, got 18) [ 422.833078][ T10] usb 10-1: config index 5 descriptor too short (expected 16402, got 18) [ 423.073911][T12632] veth0_macvtap: entered promiscuous mode [ 423.104818][ T10] usb 10-1: config index 6 descriptor too short (expected 16402, got 18) [ 423.112237][T12632] veth1_macvtap: entered promiscuous mode [ 423.155586][T12632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.175520][ T10] usb 10-1: config index 7 descriptor too short (expected 16402, got 18) [ 423.213073][T12632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.242298][ T10] usb 10-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8 [ 423.253490][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=229 [ 423.277868][ T10] usb 10-1: Product: syz [ 423.282659][ T10] usb 10-1: Manufacturer: syz [ 423.287456][ T10] usb 10-1: SerialNumber: syz [ 423.461915][T11638] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.480197][T11638] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.553814][ T10] usb 10-1: cannot find UAC_HEADER [ 423.688353][ T10] snd-usb-audio 10-1:251.0: probe with driver snd-usb-audio failed with error -22 [ 423.764119][ T10] usb 10-1: USB disconnect, device number 12 [ 423.790658][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:251.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.809671][T11638] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.975921][T11638] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.987737][T12806] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1213'. [ 423.996985][T12806] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1213'. [ 424.548514][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.605558][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.685040][T12819] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1216'. [ 424.694585][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.714529][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.747939][ T5910] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 424.867867][T12826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 424.952607][ T5910] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 424.952662][ T5910] usb 8-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 424.952685][ T5910] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.958092][ T5910] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 425.196902][T12817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.209093][T12817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.962642][T12847] openvswitch: netlink: Key type 64 is out of range max 32 [ 426.015449][ T5910] stv0680 8-1:4.0: STV(e): camera ping failed!! [ 426.217137][ T5910] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 426.231375][ T5910] stv0680 8-1:4.0: last error: 0, command = 0x0 [ 426.245445][ T5910] usb 8-1: USB disconnect, device number 44 [ 427.137362][T12872] openvswitch: netlink: IPv4 tun info is not correct [ 427.430851][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 427.500750][ T9] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 427.604264][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 427.650886][ T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 427.680853][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 427.696514][ T10] usb 4-1: config 0 has no interface number 0 [ 427.708044][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 427.746498][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 427.756132][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.764298][ T5910] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 427.777739][ T9] usb 10-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 108 [ 427.796366][ T9] usb 10-1: config 12 interface 0 has no altsetting 0 [ 427.810918][ T10] usb 4-1: Product: syz [ 427.815367][ T10] usb 4-1: Manufacturer: syz [ 427.820057][ T10] usb 4-1: SerialNumber: syz [ 427.846713][ T9] usb 10-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 427.859128][ T10] usb 4-1: config 0 descriptor?? [ 427.866329][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.884864][ T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 427.900735][ T9] usb 10-1: Product: syz [ 427.905024][ T9] usb 10-1: Manufacturer: syz [ 427.909711][ T9] usb 10-1: SerialNumber: syz [ 427.923814][ T5910] usb 8-1: config 9 has an invalid interface number: 201 but max is 0 [ 427.938934][T12872] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 427.960464][ T5910] usb 8-1: config 9 has no interface number 0 [ 427.993651][ T5910] usb 8-1: config 9 interface 201 has no altsetting 0 [ 428.014913][ T5910] usb 8-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=d7.89 [ 428.024571][ T5910] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.042934][ T5910] usb 8-1: Product: syz [ 428.056760][ T5910] usb 8-1: Manufacturer: syz [ 428.061672][ T5937] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 428.073720][ T5910] usb 8-1: SerialNumber: syz [ 428.156503][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 428.266743][ T5937] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 428.277952][ T5937] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 428.293148][ T5937] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 428.303102][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.311606][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 428.311693][ T5937] usb 7-1: Product: syz [ 428.326005][ T5937] usb 7-1: Manufacturer: syz [ 428.334264][ T5937] usb 7-1: SerialNumber: syz [ 428.374605][ T5937] usb 7-1: config 0 descriptor?? [ 428.380175][ T5910] usb_ehset_test 8-1:9.201: probe with driver usb_ehset_test failed with error -32 [ 428.409138][ T5910] usb 8-1: USB disconnect, device number 45 [ 428.515121][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 428.515628][ T8837] usb 4-1: USB disconnect, device number 15 [ 428.553970][ T8837] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 428.589667][ T8837] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 428.643660][ T8837] quatech2 4-1:0.51: device disconnected [ 428.702899][ T5937] usb 7-1: USB disconnect, device number 48 [ 428.827514][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.283687][T12912] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 429.290246][T12912] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 429.313828][T12914] fuse: Bad value for 'fd' [ 429.371792][T12912] vhci_hcd vhci_hcd.0: Device attached [ 429.446056][T12915] vhci_hcd: connection closed [ 429.453816][ T9046] vhci_hcd vhci_hcd.3: stop threads [ 429.477378][ T9046] vhci_hcd vhci_hcd.3: release socket [ 429.495696][ T9046] vhci_hcd vhci_hcd.3: disconnect device [ 429.585051][ T8837] usb 7-1: new low-speed USB device number 49 using dummy_hcd [ 429.673352][ T1208] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 429.740775][ T8837] usb 7-1: Invalid ep0 maxpacket: 64 [ 429.847094][ T1208] usb 9-1: no configurations [ 429.866068][ T1208] usb 9-1: can't read configurations, error -22 [ 429.881217][ T8837] usb 7-1: new low-speed USB device number 50 using dummy_hcd [ 430.012280][ T1208] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 430.053306][ T8837] usb 7-1: Invalid ep0 maxpacket: 64 [ 430.073398][ T8837] usb usb7-port1: attempt power cycle [ 430.130040][ T9] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 430.141042][ T9] usb 10-1: selecting invalid altsetting 0 [ 430.193244][ T1208] usb 9-1: no configurations [ 430.210585][ T1208] usb 9-1: can't read configurations, error -22 [ 430.235877][ T1208] usb usb9-port1: attempt power cycle [ 430.320440][ T9] usb 10-1: USB disconnect, device number 13 [ 430.399443][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.451337][ T8837] usb 7-1: new low-speed USB device number 51 using dummy_hcd [ 430.514426][ T8837] usb 7-1: Invalid ep0 maxpacket: 64 [ 430.611663][T12957] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1239'. [ 430.620841][ T1208] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 430.650801][ T8837] usb 7-1: new low-speed USB device number 52 using dummy_hcd [ 430.659718][ T1208] usb 9-1: no configurations [ 430.671720][ T8837] usb 7-1: Invalid ep0 maxpacket: 64 [ 430.680540][ T1208] usb 9-1: can't read configurations, error -22 [ 430.689629][ T8837] usb usb7-port1: unable to enumerate USB device [ 430.836237][T12962] xt_hashlimit: overflow, try lower: 3/0 [ 430.842247][ T1208] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 430.880781][ T1208] usb 9-1: no configurations [ 430.885878][ T1208] usb 9-1: can't read configurations, error -22 [ 430.901051][ T1208] usb usb9-port1: unable to enumerate USB device [ 430.901442][ T8837] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 431.091498][ T8837] usb 10-1: device descriptor read/64, error -71 [ 431.100231][T12969] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 431.333929][ T8837] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 431.480814][ T8837] usb 10-1: device descriptor read/64, error -71 [ 431.530958][ T5910] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 431.622047][ T8837] usb usb10-port1: attempt power cycle [ 431.728148][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 431.737588][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 431.759299][T12983] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1243'. [ 431.824607][ T5910] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 431.874874][T12983] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1243'. [ 431.898322][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.906567][ T5910] usb 4-1: Product: syz [ 431.911000][ T5910] usb 4-1: Manufacturer: syz [ 431.915629][ T5910] usb 4-1: SerialNumber: syz [ 431.980839][ T8837] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 432.002538][ T5910] usb 4-1: config 0 descriptor?? [ 432.014081][ T8837] usb 10-1: device descriptor read/8, error -71 [ 432.030502][ T5910] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 432.049435][ T5910] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 432.250796][ T8837] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 432.271835][ T8837] usb 10-1: device descriptor read/8, error -71 [ 432.381486][ T8837] usb usb10-port1: unable to enumerate USB device [ 432.704579][ T5910] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 433.183772][T13012] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1247'. [ 433.209422][T13012] program syz.6.1247 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 433.220422][T13012] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1247'. [ 433.229444][T13012] netlink: 'syz.6.1247': attribute type 5 has an invalid length. [ 433.237344][T13012] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1247'. [ 433.265304][T13012] geneve2: entered promiscuous mode [ 433.271762][T13012] geneve2: entered allmulticast mode [ 433.395343][ T1147] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 433.423171][ T1147] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 433.442797][ T1147] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 433.460602][ T1147] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 434.793396][T13045] netlink: 179596 bytes leftover after parsing attributes in process `syz.6.1252'. [ 435.457787][ T5910] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 435.507562][ T5910] em28xx 4-1:0.0: board has no eeprom [ 435.700968][ T5910] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 435.859812][ T5910] em28xx 4-1:0.0: dvb set to bulk mode. [ 435.891059][ T8837] em28xx 4-1:0.0: Binding DVB extension [ 435.978296][ T5910] usb 4-1: USB disconnect, device number 16 [ 436.056488][ T5910] em28xx 4-1:0.0: Disconnecting em28xx [ 436.120792][ T9] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 436.136028][ T8837] em28xx 4-1:0.0: Registering input extension [ 436.160792][ T5910] em28xx 4-1:0.0: Closing input extension [ 436.207861][T13071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 436.217070][T13071] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1254'. [ 436.275823][ T5910] em28xx 4-1:0.0: Freeing device [ 436.311038][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 436.333364][ T9] usb 9-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice= 6.59 [ 436.358128][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.384340][ T9] usb 9-1: Product: syz [ 436.397895][ T9] usb 9-1: Manufacturer: syz [ 436.414042][ T9] usb 9-1: SerialNumber: syz [ 436.449614][ T9] usb 9-1: config 0 descriptor?? [ 436.505390][T13077] all (unregistering): Released all slaves [ 436.590466][T13083] veth1_to_bond: entered allmulticast mode [ 436.679634][T13064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.703830][T13064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.730320][ T9] pegasus 9-1:0.0: probe with driver pegasus failed with error -71 [ 436.775868][ T9] usb 9-1: USB disconnect, device number 18 [ 436.873952][T13090] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1257'. [ 437.019113][T13098] netdevsim netdevsim9: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 437.035395][T13098] netlink: 'syz.9.1258': attribute type 10 has an invalid length. [ 437.055520][T13098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.088555][T13100] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1258'. [ 437.114725][T13098] team0: Port device bond0 added [ 437.214591][T13098] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1258'. [ 437.231549][T13100] team0 (unregistering): Port device team_slave_0 removed [ 437.255050][T13100] team0 (unregistering): Port device team_slave_1 removed [ 437.315060][T13100] team0 (unregistering): Port device bond0 removed [ 437.491707][T13112] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1261'. [ 437.508574][T13112] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1261'. [ 437.611825][T13122] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1263'. [ 437.870830][ T1208] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 438.030756][ T1208] usb 4-1: Using ep0 maxpacket: 32 [ 438.050976][ T9] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 438.061102][ T1208] usb 4-1: New USB device found, idVendor=19d2, idProduct=f2ac, bcdDevice=84.4f [ 438.089515][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.190507][ T1208] usb 4-1: Product: syz [ 438.204895][ T1208] usb 4-1: Manufacturer: syz [ 438.218158][ T1208] usb 4-1: SerialNumber: syz [ 438.244747][ T1208] usb 4-1: config 0 descriptor?? [ 438.287402][ T1208] usb 4-1: bad CDC descriptors [ 438.322725][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 438.354685][ T9] usb 9-1: config 0 has an invalid interface number: 39 but max is 0 [ 438.364962][ T9] usb 9-1: config 0 has no interface number 0 [ 438.371570][ T9] usb 9-1: config 0 interface 39 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 438.408613][ T9] usb 9-1: config 0 interface 39 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 438.438785][ T9] usb 9-1: New USB device found, idVendor=0c52, idProduct=2212, bcdDevice= 1.ca [ 438.448827][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.473350][ T9] usb 9-1: Product: syz [ 438.478919][ T9] usb 9-1: Manufacturer: syz [ 438.487932][ T9] usb 9-1: SerialNumber: syz [ 438.574280][ T9] usb 9-1: config 0 descriptor?? [ 438.578601][T13140] tipc: Started in network mode [ 438.599668][T13140] tipc: Node identity f60a702ca81d, cluster identity 4711 [ 438.599698][T13131] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 438.614682][T13140] tipc: Enabled bearer , priority 0 [ 438.644674][T13144] syzkaller0: entered promiscuous mode [ 438.648132][ T9] ftdi_sio 9-1:0.39: FTDI USB Serial Device converter detected [ 438.679046][T13144] syzkaller0: entered allmulticast mode [ 438.686850][ T9] usb 9-1: Detected SIO [ 438.697492][ C1] sd 0:0:1:0: [sda] tag#2306 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 438.708045][ C1] sd 0:0:1:0: [sda] tag#2306 CDB: Read(6) 08 00 00 00 00 00 [ 438.709734][ T9] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 438.747824][T13140] tipc: Resetting bearer [ 438.793449][T13140] RDS: rds_bind could not find a transport for ::e0:0:0:0:1, load rds_tcp or rds_rdma? [ 438.889076][T13139] tipc: Resetting bearer [ 438.940486][T13139] tipc: Disabling bearer [ 439.241464][ T8837] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 439.531117][ T8837] usb 8-1: Using ep0 maxpacket: 8 [ 439.538869][ T8837] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 439.553184][ T8837] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 439.567900][ T8837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.582632][ T8837] usb 8-1: Product: syz [ 439.594009][ T8837] usb 8-1: Manufacturer: syz [ 439.599934][T13077] veth1_to_bond: left allmulticast mode [ 439.618258][ T8837] usb 8-1: SerialNumber: syz [ 439.773779][ T8837] usb 8-1: config 0 descriptor?? [ 439.807398][ T8837] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 439.830917][ T8837] usb 8-1: setting power ON [ 439.838091][ T8837] dvb-usb: bulk message failed: -22 (2/0) [ 439.884475][ T8837] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 439.933579][ T8837] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 440.036763][T13149] dvb-usb: bulk message failed: -22 (3/0) [ 440.081782][ T8837] usb 8-1: media controller created [ 440.089530][T13149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.108720][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.116672][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.164974][T13149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.187678][ T8837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 440.272564][ T8837] usb 8-1: selecting invalid altsetting 6 [ 440.286811][ T8837] usb 8-1: digital interface selection failed (-22) [ 440.313105][ T8837] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 440.334271][ T8837] usb 8-1: setting power OFF [ 440.347108][ T8837] dvb-usb: bulk message failed: -22 (2/0) [ 440.364070][ T8837] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 440.386423][ T8837] (NULL device *): no alternate interface [ 440.486286][ T8837] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 440.530350][ T5910] usb 9-1: USB disconnect, device number 19 [ 440.547774][ T5910] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 440.571603][ T8837] usb 8-1: USB disconnect, device number 46 [ 440.594564][ T5835] udevd[5835]: setting mode of /dev/bus/usb/008/046 to 020664 failed: No such file or directory [ 440.598385][ T5910] ftdi_sio 9-1:0.39: device disconnected [ 440.658411][ T5835] udevd[5835]: setting owner of /dev/bus/usb/008/046 to uid=0, gid=0 failed: No such file or directory [ 440.817504][ T8837] usb 4-1: USB disconnect, device number 17 [ 440.970642][T13190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1273'. [ 440.998359][T13190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1273'. [ 441.303476][T13203] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1276'. [ 441.461163][ T1208] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 441.670855][ T1208] usb 7-1: Using ep0 maxpacket: 32 [ 441.690374][ T1208] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 441.704272][ T1208] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.724391][ T1208] usb 7-1: config 0 descriptor?? [ 441.778377][ T1208] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 441.932842][T13214] netlink: 'syz.8.1279': attribute type 1 has an invalid length. [ 441.958625][ T1208] gspca_vc032x: reg_r err -71 [ 441.968544][ T1208] gspca_vc032x: I2c Bus Busy Wait 00 [ 441.977907][ T1208] gspca_vc032x: I2c Bus Busy Wait 00 [ 441.983413][ T1208] gspca_vc032x: I2c Bus Busy Wait 00 [ 441.996753][ T1208] gspca_vc032x: I2c Bus Busy Wait 00 [ 442.007009][ T1208] gspca_vc032x: I2c Bus Busy Wait 00 [ 442.017718][ T1208] gspca_vc032x: I2c Bus Busy Wait 00 [ 442.061870][T13215] veth3: entered promiscuous mode [ 442.075696][ T1208] gspca_vc032x: I2c Bus Busy Wait 00 [ 442.093766][T13216] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1279'. [ 442.220706][ T1208] gspca_vc032x: I2c Bus Busy Wait 00 [ 442.279033][T13218] loop5: detected capacity change from 0 to 7 [ 442.282199][ T1208] gspca_vc032x: I2c Bus Busy Wait 00 [ 442.305958][T13218] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 442.315086][ T1208] gspca_vc032x: I2c Bus Busy Wait 00 [ 442.320525][ T1208] gspca_vc032x: I2c Bus Busy Wait 00 [ 442.330749][T13218] loop5: partition table partially beyond EOD, truncated [ 442.348175][ T1208] gspca_vc032x: I2c Bus Busy Wait 00 [ 442.353594][ T1208] gspca_vc032x: I2c Bus Busy Wait 00 [ 442.381280][ T1208] gspca_vc032x: I2c Bus Busy Wait 00 [ 442.395201][ T1208] gspca_vc032x: I2c Bus Busy Wait 00 [ 442.423756][T13218] loop5: p1 size 4294377484 extends beyond EOD, truncated [ 442.431513][ T1208] gspca_vc032x: I2c Bus Busy Wait 00 [ 442.436866][ T1208] gspca_vc032x: I2c Bus Busy Wait 00 [ 442.458126][ T1208] gspca_vc032x: I2c Bus Busy Wait 00 [ 442.460942][ T8837] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 442.489558][ T1208] gspca_vc032x: Unknown sensor... [ 442.515173][ T1208] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 442.553504][ T1208] usb 7-1: USB disconnect, device number 53 [ 442.622614][ T8837] usb 9-1: config 0 has an invalid interface number: 20 but max is 0 [ 442.638439][ T8837] usb 9-1: config 0 has no interface number 0 [ 442.664802][ T8837] usb 9-1: config 0 interface 20 has no altsetting 0 [ 442.676036][ T5835] udevd[5835]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 442.686843][ T8837] usb 9-1: New USB device found, idVendor=2833, idProduct=0211, bcdDevice=f2.04 [ 442.741389][ T8837] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.809429][ T8837] usb 9-1: config 0 descriptor?? [ 443.024234][ T1208] IPVS: starting estimator thread 0... [ 443.040456][T13228] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1281'. [ 443.041619][ T8837] usb 9-1: string descriptor 0 read error: -71 [ 443.098916][ T8837] uvcvideo 9-1:0.20: Found Unit with invalid ID 0 [ 443.146946][T13236] IPVS: using max 35 ests per chain, 84000 per kthread [ 443.186571][ T8837] uvcvideo 9-1:0.20: probe with driver uvcvideo failed with error -22 [ 443.226933][ T8837] usb 9-1: USB disconnect, device number 20 [ 443.492448][T13247] fuse: Bad value for 'group_id' [ 443.514261][T13247] fuse: Bad value for 'group_id' [ 443.590052][T13253] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1285'. [ 443.606366][T13252] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 443.656579][T13249] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 443.785251][T13260] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1287'. [ 443.805636][T13260] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1287'. [ 444.010825][ T5878] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 444.228698][T13278] kvm: pic: single mode not supported [ 444.228971][T13278] kvm: pic: single mode not supported [ 444.235078][T13278] kvm: pic: level sensitive irq not supported [ 444.243541][T13278] kvm: pic: level sensitive irq not supported [ 444.271443][ T5878] usb 7-1: Using ep0 maxpacket: 8 [ 444.286191][ T5878] usb 7-1: config 0 has an invalid interface number: 53 but max is 0 [ 444.298345][ T5878] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 444.307535][ T5878] usb 7-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 444.319296][T13278] kvm: pic: single mode not supported [ 444.319322][T13278] kvm: pic: single mode not supported [ 444.320436][ T5878] usb 7-1: config 0 has no interface number 0 [ 444.354560][ T5878] usb 7-1: too many endpoints for config 0 interface 53 altsetting 130: 193, using maximum allowed: 30 [ 444.367366][T13278] kvm: pic: level sensitive irq not supported [ 444.367979][T13278] kvm: pic: level sensitive irq not supported [ 444.374500][T13278] kvm: pic: single mode not supported [ 444.381011][ T5878] usb 7-1: config 0 interface 53 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 193 [ 444.401398][ T5878] usb 7-1: config 0 interface 53 has no altsetting 0 [ 444.412929][T13278] kvm: pic: single mode not supported [ 444.412949][T13278] kvm: pic: level sensitive irq not supported [ 444.418519][T13278] kvm: pic: level sensitive irq not supported [ 444.424738][T13278] kvm: pic: level sensitive irq not supported [ 444.430961][T13278] kvm: pic: single mode not supported [ 444.437817][T13278] kvm: pic: level sensitive irq not supported [ 444.444114][T13278] kvm: pic: level sensitive irq not supported [ 444.450398][T13278] kvm: pic: level sensitive irq not supported [ 444.456762][T13278] kvm: pic: single mode not supported [ 444.463038][T13278] kvm: pic: single mode not supported [ 444.468815][T13278] kvm: pic: single mode not supported [ 444.653939][ T5878] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 444.685558][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.704009][ T5878] usb 7-1: Product: syz [ 444.728041][ T5878] usb 7-1: Manufacturer: syz [ 444.746901][ T5878] usb 7-1: SerialNumber: syz [ 444.756982][ T5878] usb 7-1: config 0 descriptor?? [ 445.024603][ T5878] streamzap 7-1:0.53: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 445.067780][ T5878] usb 7-1: USB disconnect, device number 54 [ 445.458950][T13297] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1291'. [ 445.482667][T13296] tipc: Started in network mode [ 445.487542][T13296] tipc: Node identity 4e2ad36f10ed, cluster identity 4711 [ 445.534204][T13296] tipc: Enabled bearer , priority 0 [ 445.598468][T13296] syzkaller0: entered promiscuous mode [ 445.616336][T13296] syzkaller0: entered allmulticast mode [ 445.901001][ T5906] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 446.100914][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 446.109473][ T5906] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 446.119098][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.128416][ T5906] usb 4-1: Product: syz [ 446.135763][ T5906] usb 4-1: Manufacturer: syz [ 446.141395][ T5906] usb 4-1: SerialNumber: syz [ 446.160729][ T8837] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 446.165342][ T5906] usb 4-1: config 0 descriptor?? [ 446.310802][ T1208] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 446.312608][ T8837] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.336943][ T8837] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 446.356835][ T8837] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 446.370199][ T8837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 446.384215][ T8837] usb 7-1: SerialNumber: syz [ 446.386091][ T5906] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 446.412743][ T8837] cdc_ether 7-1:1.0: skipping garbage [ 446.417724][ T5906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 446.421276][ T8837] usb 7-1: bad CDC descriptors [ 446.455263][ T5906] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 446.464012][ T1208] usb 9-1: Using ep0 maxpacket: 8 [ 446.483143][ T1208] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 446.499848][ T5906] usb 4-1: media controller created [ 446.512165][ T1208] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 446.540404][ T1208] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.553792][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 446.567024][ T1208] usb 9-1: Product: syz [ 446.574901][ T1208] usb 9-1: Manufacturer: syz [ 446.579532][ T1208] usb 9-1: SerialNumber: syz [ 446.627205][ T1208] usb 9-1: config 0 descriptor?? [ 446.644227][ T5906] zl10353_read_register: readreg error (reg=127, ret==0) [ 446.654823][ T1208] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 446.661075][ T5910] tipc: Node number set to 1590154095 [ 446.663589][T13296] dtv5100: wlen = f4, aborting. [ 446.677449][ T5906] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 446.688572][ T1208] usb 9-1: setting power ON [ 446.703577][ T1208] dvb-usb: bulk message failed: -22 (2/0) [ 446.719722][ T5906] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 446.755060][ T1208] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 446.811705][ T1208] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 446.848173][ T1208] usb 9-1: media controller created [ 446.875572][ T1208] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 446.915132][ T1208] usb 9-1: selecting invalid altsetting 6 [ 446.921774][ T1208] usb 9-1: digital interface selection failed (-22) [ 446.928782][ T1208] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 446.965447][ T1208] usb 9-1: setting power OFF [ 447.010910][ T1208] dvb-usb: bulk message failed: -22 (2/0) [ 447.039950][T13331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.049728][ T1208] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 447.105902][ T1208] (NULL device *): no alternate interface [ 447.132917][T13331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.217397][ T1208] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 447.308525][ T9] usb 7-1: USB disconnect, device number 55 [ 447.361961][ T8837] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 447.562037][ T8837] usb 8-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 447.571508][ T8837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.594726][ T8837] usb 8-1: config 0 descriptor?? [ 448.041140][ T8837] uclogic 0003:28BD:0055.0020: interface is invalid, ignoring [ 448.228674][ T8837] usb 8-1: USB disconnect, device number 47 [ 448.398128][ T9] usb 4-1: USB disconnect, device number 18 [ 448.417278][T13300] tipc: Resetting bearer [ 448.532384][T13300] tipc: Disabling bearer [ 449.097388][T13392] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1307'. [ 449.785993][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 449.811120][ T1208] usb 9-1: USB disconnect, device number 21 [ 451.120888][ T1208] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 451.265949][T13449] input: syz1 as /devices/virtual/input/input30 [ 451.374796][ T1208] usb 8-1: unable to get BOS descriptor or descriptor too short [ 451.389820][ T1208] usb 8-1: config 1 interface 0 altsetting 102 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 451.429942][ T1208] usb 8-1: config 1 interface 0 has no altsetting 0 [ 451.470284][ T1208] usb 8-1: New USB device found, idVendor=1781, idProduct=0001, bcdDevice= 0.40 [ 451.503704][ T1208] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.760824][ T1208] usb 8-1: Product: syz [ 451.787699][ T1208] usb 8-1: Manufacturer: syz [ 451.800744][ T1208] usb 8-1: SerialNumber: syz [ 452.055199][ T1208] usbhid 8-1:1.0: can't add hid device: -71 [ 452.098696][ T1208] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 452.170865][ T1208] usb 8-1: USB disconnect, device number 48 [ 452.751013][ T1208] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 452.900758][ T1208] usb 7-1: Using ep0 maxpacket: 32 [ 452.915377][ T1208] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 452.931576][ T1208] usb 7-1: config 0 has no interface number 0 [ 452.953666][ T1208] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 452.975709][ T1208] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.009927][ T1208] usb 7-1: Product: syz [ 453.024601][ T1208] usb 7-1: Manufacturer: syz [ 453.050020][ T1208] usb 7-1: SerialNumber: syz [ 453.086482][ T1208] usb 7-1: config 0 descriptor?? [ 453.624699][ T1208] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 453.643157][ T1208] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 454.269426][T13509] loop4: detected capacity change from 0 to 7 [ 454.297674][T13509] Dev loop4: unable to read RDB block 7 [ 454.327749][T13509] loop4: AHDI p1 p3 [ 454.340811][ T9] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 454.340923][T13509] loop4: partition table partially beyond EOD, truncated [ 454.524832][ T1208] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 454.540062][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 454.546382][ T1208] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 454.565832][ T9] usb 9-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 454.586250][ T1208] usb 7-1: USB disconnect, device number 56 [ 454.594549][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.616336][ T9] usb 9-1: Product: syz [ 454.635199][ T9] usb 9-1: Manufacturer: syz [ 454.646715][ T9] usb 9-1: SerialNumber: syz [ 454.674362][ T5878] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 454.685194][ T9] usb 9-1: config 0 descriptor?? [ 454.853818][ T5878] usb 4-1: config 43 has an invalid interface number: 140 but max is 3 [ 454.867759][ T5878] usb 4-1: config 43 has an invalid interface number: 183 but max is 3 [ 454.902186][ T5878] usb 4-1: config 43 contains an unexpected descriptor of type 0x2, skipping [ 454.912994][ T8837] usb 9-1: USB disconnect, device number 22 [ 454.922306][ T5878] usb 4-1: config 43 has an invalid interface number: 164 but max is 3 [ 454.933049][ T5878] usb 4-1: config 43 has no interface number 1 [ 454.945827][ T5878] usb 4-1: config 43 has no interface number 2 [ 454.973905][ T5878] usb 4-1: config 43 has no interface number 3 [ 454.994075][T13526] kvm: emulating exchange as write [ 455.001173][ T5878] usb 4-1: config 43 interface 140 altsetting 127 endpoint 0x7 has invalid wMaxPacketSize 0 [ 455.030935][ T5878] usb 4-1: config 43 interface 140 altsetting 127 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 455.047464][ T5878] usb 4-1: config 43 interface 140 altsetting 127 has a duplicate endpoint with address 0x7, skipping [ 455.066834][ T5878] usb 4-1: config 43 interface 140 altsetting 127 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 455.078751][ T5878] usb 4-1: config 43 interface 140 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 455.093148][ T5878] usb 4-1: config 43 interface 183 altsetting 186 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 455.168955][T13534] hsr_slave_0: left promiscuous mode [ 455.174335][ T5878] usb 4-1: config 43 interface 183 altsetting 186 has a duplicate endpoint with address 0xC, skipping [ 455.174365][ T5878] usb 4-1: config 43 interface 183 altsetting 186 has a duplicate endpoint with address 0xB, skipping [ 455.174395][ T5878] usb 4-1: config 43 interface 183 altsetting 186 has a duplicate endpoint with address 0x7, skipping [ 455.174417][ T5878] usb 4-1: config 43 interface 183 altsetting 186 has a duplicate endpoint with address 0x2, skipping [ 455.174438][ T5878] usb 4-1: config 43 interface 183 altsetting 186 has a duplicate endpoint with address 0x6, skipping [ 455.174460][ T5878] usb 4-1: config 43 interface 183 altsetting 186 has 8 endpoint descriptors, different from the interface descriptor's value: 15 [ 455.174508][ T5878] usb 4-1: config 43 interface 0 altsetting 64 has a duplicate endpoint with address 0xF, skipping [ 455.174531][ T5878] usb 4-1: config 43 interface 0 altsetting 64 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 455.174557][ T5878] usb 4-1: config 43 interface 140 has no altsetting 0 [ 455.174576][ T5878] usb 4-1: config 43 interface 183 has no altsetting 0 [ 455.174593][ T5878] usb 4-1: config 43 interface 0 has no altsetting 0 [ 455.174609][ T5878] usb 4-1: config 43 interface 164 has no altsetting 0 [ 455.197380][ T5878] usb 4-1: New USB device found, idVendor=1485, idProduct=0002, bcdDevice=6f.84 [ 455.374551][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.399031][ T5878] usb 4-1: Product: î¾áœ„á’Უ캚â¸ê¤†æ·»êŽ´ì‡ªâ£€ï€šéŸ®ã’믿ì€ç›íž§ä¹‚Ú»ìµéŠ›î–’å•·íœäˆ©ä¡®á®ˆë“´éœ‰îœ‡ï¾ê§‘æ‰è Ÿíž¶ëŸŸä âµƒé›½æ¼‰é¶¨èª‹â©—ì±¥ê蒶ﱆ﵇ꭵã¿ã•˜ëŸ•á´¸äš¿ã¿„é«ê°ºç„µîŽŒæ£–ç¯ä“¼êŠŽì¿¥ë›«î¦¦ášƒãƒ©î‰›ç£´ï¼ [ 455.464039][T13534] hsr_slave_1: left promiscuous mode [ 455.553703][ T5878] usb 4-1: Manufacturer: 嵧â†ë”šä‡¾äž¥å›¡ã¾¢ã˜ëŸ—ⰻˋ㱵ረ膌ਔá“蒑⻴Ųåšä²œè†‡çº¶ïœŠé—·çœšá¢Žî¿‰â¶³à»“êªé–힖횟ì–ꅇȭâ‡æ²”뤭匱䗇ꤱ貴왱⤩㻸Ⴖ歡羄竞盧拠㖥쌼裭ä½ë¡ä¯¾àªåŒ‡â’ƒì¤ªá¸½æŸã‹°î¸Žç´žî® Ì°ã‘šè¥ƒé¤Í£à¶Ó­á´¾ì´³íšä‹®î§±è¿æ—¨á«¤æµ¿î¤‚ឿ斾굶ﰗ䄀êƒâ©©ä€¾î¶’è”쀻⣧ᣬ㎲줈軪玆邨铵䆡㵮æ‘礽ïˆé¡¥ê¸é“€ç±Šì¥ƒã£Œ [ 455.640026][T13553] loop6: detected capacity change from 0 to 7 [ 455.656196][T13553] Dev loop6: unable to read RDB block 7 [ 455.671005][T13553] loop6: unable to read partition table [ 455.688411][T13553] loop6: partition table beyond EOD, truncated [ 455.694770][ T5878] usb 4-1: SerialNumber: syz [ 455.720952][T13553] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 455.749033][T13512] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 455.932791][T13560] loop2: detected capacity change from 0 to 7 [ 455.982520][T13560] Dev loop2: unable to read RDB block 7 [ 456.017718][T13560] loop2: AHDI p2 p3 [ 456.120822][T13560] loop2: partition table partially beyond EOD, truncated [ 456.158651][ T5878] kaweth 4-1:43.140: Firmware present in device. [ 456.202468][ T5878] kaweth 4-1:43.140: Error reading configuration (-71), no net device created [ 456.243414][ T5878] kaweth 4-1:43.140: probe with driver kaweth failed with error -5 [ 456.386621][ T5878] kaweth 4-1:43.183: Firmware present in device. [ 456.421105][ T5878] kaweth 4-1:43.183: Error reading configuration (-71), no net device created [ 456.463590][ T5878] kaweth 4-1:43.183: probe with driver kaweth failed with error -5 [ 456.554120][ T5878] kaweth 4-1:43.0: Firmware present in device. [ 456.569253][ T5878] kaweth 4-1:43.0: Error reading configuration (-71), no net device created [ 456.588074][ T5878] kaweth 4-1:43.0: probe with driver kaweth failed with error -5 [ 456.649880][ T5878] kaweth 4-1:43.164: Firmware present in device. [ 456.679888][ T5878] kaweth 4-1:43.164: Error reading configuration (-71), no net device created [ 456.694440][ T5878] kaweth 4-1:43.164: probe with driver kaweth failed with error -5 [ 456.943784][ T5878] usb 4-1: USB disconnect, device number 19 [ 458.041161][T13582] syz.3.1349 (13582): drop_caches: 2 [ 458.082880][T13606] tipc: Enabled bearer , priority 10 [ 458.132093][T13605] tipc: Resetting bearer [ 458.354047][T13604] tipc: Disabling bearer [ 458.425783][T13620] tipc: Enabling of bearer rejected, failed to enable media [ 458.484128][T13624] loop6: detected capacity change from 0 to 7 [ 458.523178][T13624] Dev loop6: unable to read RDB block 7 [ 458.550811][T13624] loop6: unable to read partition table [ 458.578171][T13624] loop6: partition table beyond EOD, truncated [ 458.586723][T13624] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 459.073767][ T5906] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 459.251393][ T5906] usb 7-1: Using ep0 maxpacket: 32 [ 459.262711][ T5906] usb 7-1: config 0 has no interfaces? [ 459.270583][ T5906] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 459.315193][ T5906] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 459.353988][ T5906] usb 7-1: Product: syz [ 459.363750][ T5906] usb 7-1: Manufacturer: syz [ 459.368471][ T5906] usb 7-1: SerialNumber: syz [ 459.402023][ T5906] usb 7-1: config 0 descriptor?? [ 459.560808][ T5878] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 459.740735][ T5878] usb 10-1: Using ep0 maxpacket: 8 [ 459.790865][T13681] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 459.860966][ T5878] usb 10-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 459.890146][ T5878] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.964464][ T5878] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 65 [ 460.047370][ T5878] usb 10-1: config 0 has no interface number 0 [ 460.072800][ T5878] usb 10-1: too many endpoints for config 0 interface 1 altsetting 61: 142, using maximum allowed: 30 [ 460.118821][ T5878] usb 10-1: config 0 interface 1 altsetting 61 has 0 endpoint descriptors, different from the interface descriptor's value: 142 [ 460.150906][ T5878] usb 10-1: config 0 interface 1 has no altsetting 0 [ 460.182867][ T1208] usb 7-1: USB disconnect, device number 57 [ 460.216456][ T5878] usb 10-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 460.246185][ T5878] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.267230][ T5878] usb 10-1: config 0 descriptor?? [ 460.287218][ T5878] usb 10-1: selecting invalid altsetting 0 [ 460.500880][ T5878] usb 10-1: USB disconnect, device number 18 [ 462.417646][T13739] bond2: entered promiscuous mode [ 463.539447][T13780] loop6: detected capacity change from 0 to 7 [ 463.555364][T13780] Dev loop6: unable to read RDB block 7 [ 463.583413][T13780] loop6: unable to read partition table [ 463.613446][T13780] loop6: partition table beyond EOD, truncated [ 463.643685][T13780] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 463.730811][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 463.963001][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 463.996275][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.006747][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 464.035544][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 464.044779][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.081288][ T9] usb 4-1: Product: syz [ 464.120953][ T9] usb 4-1: Manufacturer: syz [ 464.130737][ T9] usb 4-1: SerialNumber: syz [ 464.373518][ T9] usb 4-1: 0:2 : does not exist [ 464.418696][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 464.510809][ T1208] usb 8-1: new full-speed USB device number 49 using dummy_hcd [ 464.624462][ T9] usb 4-1: USB disconnect, device number 20 [ 464.670749][ T1208] usb 8-1: device descriptor read/64, error -71 [ 464.723550][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 464.890836][ T5906] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 464.962387][ T1208] usb 8-1: new full-speed USB device number 50 using dummy_hcd [ 465.084626][T13795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.103959][T13795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.141804][ T1208] usb 8-1: device descriptor read/64, error -71 [ 465.176611][ T5906] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 465.191316][ T5906] usb 9-1: can't read configurations, error -71 [ 465.200835][ T5878] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 465.265056][ T1208] usb usb8-port1: attempt power cycle [ 465.364138][ T5878] usb 4-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 465.384784][ T5878] usb 4-1: config 0 interface 0 has no altsetting 0 [ 465.392495][ T5878] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 465.401939][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.417839][ T5878] usb 4-1: config 0 descriptor?? [ 465.647515][ T1208] usb 8-1: new full-speed USB device number 51 using dummy_hcd [ 465.676227][ T1208] usb 8-1: device descriptor read/8, error -71 [ 465.901455][T13847] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1397'. [ 465.942071][ T1208] usb 8-1: new full-speed USB device number 52 using dummy_hcd [ 465.953907][ T5906] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 465.981476][ T1208] usb 8-1: device descriptor read/8, error -71 [ 466.025746][ T5878] uclogic 0003:2179:0053.0021: interface is invalid, ignoring [ 466.102405][ T1208] usb usb8-port1: unable to enumerate USB device [ 466.201055][ T5906] usb 9-1: Using ep0 maxpacket: 32 [ 466.223282][ T5906] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 466.232098][ T5906] usb 9-1: config 0 has no interface number 0 [ 466.238312][ T5906] usb 9-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 466.251260][T13852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.251610][T13852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.271080][ T5906] usb 9-1: config 0 interface 184 has no altsetting 0 [ 466.280503][ T5906] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 466.300893][ T5906] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.370961][ T5906] usb 9-1: Product: syz [ 466.375364][ T5906] usb 9-1: Manufacturer: syz [ 466.379994][ T5906] usb 9-1: SerialNumber: syz [ 466.387912][ T5906] usb 9-1: config 0 descriptor?? [ 466.398905][ T5906] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 466.410128][ T5906] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -22 [ 467.021295][ T5878] usb 4-1: USB disconnect, device number 21 [ 467.600753][ T796] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 467.698447][T13882] loop5: detected capacity change from 0 to 7 [ 467.722105][T13882] Dev loop5: unable to read RDB block 7 [ 467.738982][T13882] loop5: AHDI p3 p4 [ 467.748138][T13882] loop5: partition table partially beyond EOD, truncated [ 467.770488][T13882] loop5: p3 start 1459814400 is beyond EOD, truncated [ 467.781890][ T796] usb 8-1: Using ep0 maxpacket: 32 [ 467.818210][ T796] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 467.827457][ T796] usb 8-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 467.860712][ T796] usb 8-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 467.909984][ T796] usb 8-1: config 0 interface 0 has no altsetting 1 [ 467.980885][ T796] usb 8-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 468.035843][ T796] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 468.061950][ T796] usb 8-1: SerialNumber: syz [ 468.110596][ T796] usb 8-1: config 0 descriptor?? [ 468.191767][ T796] usb-storage 8-1:0.0: USB Mass Storage device detected [ 468.226724][ T796] usb-storage 8-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 468.518951][T13869] netlink: 'syz.7.1401': attribute type 9 has an invalid length. [ 468.540816][T13869] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1401'. [ 468.561329][ T5937] usb 8-1: USB disconnect, device number 53 [ 468.893385][T13911] random: crng reseeded on system resumption [ 468.972744][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 468.983799][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 468.997717][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 469.011615][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 469.019593][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 469.391917][ T5878] usb 9-1: USB disconnect, device number 24 [ 469.606363][T13926] can: request_module (can-proto-0) failed. [ 469.668042][T13915] chnl_net:caif_netlink_parms(): no params data found [ 469.861072][ T5878] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 469.918163][T13950] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1416'. [ 469.950020][T13915] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.982296][T13915] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.989613][T13915] bridge_slave_0: entered allmulticast mode [ 470.016303][T13915] bridge_slave_0: entered promiscuous mode [ 470.031016][ T5878] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.037146][T13915] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.068756][ T5878] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 470.083235][T13915] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.102697][T13915] bridge_slave_1: entered allmulticast mode [ 470.103048][ T5878] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 470.119391][T13915] bridge_slave_1: entered promiscuous mode [ 470.140730][T13957] loop5: detected capacity change from 0 to 7 [ 470.143172][ T5878] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.163629][ T5878] usb 9-1: Product: syz [ 470.175947][ T5878] usb 9-1: Manufacturer: syz [ 470.180915][ T5835] Dev loop5: unable to read RDB block 7 [ 470.189894][ T5878] usb 9-1: SerialNumber: syz [ 470.198570][ T5835] loop5: AHDI p3 p4 [ 470.211748][ T5835] loop5: partition table partially beyond EOD, truncated [ 470.236166][ T5835] loop5: p3 start 1459814400 is beyond EOD, truncated [ 470.267509][T13915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.293670][T13957] Dev loop5: unable to read RDB block 7 [ 470.315167][T13915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.331185][T13957] loop5: AHDI p3 p4 [ 470.337619][T13957] loop5: partition table partially beyond EOD, truncated [ 470.367643][T13957] loop5: p3 start 1459814400 is beyond EOD, truncated [ 470.429576][ T5878] usb 9-1: 0:2 : does not exist [ 470.440526][T13915] team0: Port device team_slave_0 added [ 470.464796][ T5878] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 470.484286][T13915] team0: Port device team_slave_1 added [ 470.612770][ T5878] usb 9-1: USB disconnect, device number 25 [ 470.808592][T13915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.823420][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.843616][T13915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.884961][T13915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.898761][T13915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.906129][T13915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.020341][T13915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.051823][ T5824] Bluetooth: hci3: command tx timeout [ 471.149038][T13915] hsr_slave_0: entered promiscuous mode [ 471.175274][T13915] hsr_slave_1: entered promiscuous mode [ 471.188558][T13915] debugfs: 'hsr0' already exists in 'hsr' [ 471.210235][T13915] Cannot create hsr debugfs directory [ 471.390759][ T5878] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 471.550876][ T5878] usb 10-1: Using ep0 maxpacket: 32 [ 471.558426][ T5878] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 471.578779][ T5878] usb 10-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 471.628896][ T5878] usb 10-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 471.686983][ T5878] usb 10-1: config 0 interface 0 has no altsetting 1 [ 471.716476][ T5878] usb 10-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 471.733843][ T5878] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 471.756875][ T5878] usb 10-1: SerialNumber: syz [ 471.821302][ T5878] usb 10-1: config 0 descriptor?? [ 471.863281][ T5878] usb-storage 10-1:0.0: USB Mass Storage device detected [ 471.906155][ T5878] usb-storage 10-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 471.949236][T13985] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1423'. [ 471.962164][T13985] input: syz1 as /devices/virtual/input/input32 [ 472.320361][ T29] audit: type=1326 audit(1772003779.710:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14002 comm="syz.8.1425" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa18c39c629 code=0x0 [ 472.430404][T13995] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1424'. [ 472.443967][T13973] netlink: 'syz.9.1421': attribute type 9 has an invalid length. [ 472.474017][T13973] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1421'. [ 472.528664][ T5906] usb 10-1: USB disconnect, device number 19 [ 472.806157][T14020] netlink: 194768 bytes leftover after parsing attributes in process `syz.7.1430'. [ 473.002545][T14021] netlink: 232 bytes leftover after parsing attributes in process `syz.6.1429'. [ 473.141483][ T5824] Bluetooth: hci3: command tx timeout [ 473.745921][T13915] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 473.778010][T13915] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 473.795891][T13915] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 473.811674][T13915] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 474.237383][T13915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.324083][T13915] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.428215][ T9044] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.435428][ T9044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.773850][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.781008][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.165460][T13915] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 475.260907][T13915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 475.260987][ T5824] Bluetooth: hci3: command tx timeout [ 475.567968][T13915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.823854][T13915] veth0_vlan: entered promiscuous mode [ 475.917297][T13915] veth1_vlan: entered promiscuous mode [ 476.021120][ T796] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 476.104714][T13915] veth0_macvtap: entered promiscuous mode [ 476.183863][T13915] veth1_macvtap: entered promiscuous mode [ 476.224267][ T796] usb 8-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.254563][ T796] usb 8-1: config 0 interface 0 has no altsetting 0 [ 476.269747][T13915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.291818][ T796] usb 8-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 476.305853][T13915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.334175][ T796] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.377154][ T796] usb 8-1: config 0 descriptor?? [ 476.413604][ T9045] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.453951][ T9045] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.542976][ T78] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.563149][ T78] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.631462][T14074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.644537][T14074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.692702][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1437'. [ 476.919319][T11637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.938285][T11637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.037308][T14096] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 477.087105][T11637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.095818][T11637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.120723][ T5906] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 477.142632][ T796] dragonrise 0003:0079:0006.0022: nested delimiters [ 477.169536][ T796] dragonrise 0003:0079:0006.0022: item 0 4 2 10 parsing failed [ 477.187350][ T796] dragonrise 0003:0079:0006.0022: parse failed [ 477.194633][ T5910] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 477.244320][ T796] dragonrise 0003:0079:0006.0022: probe with driver dragonrise failed with error -22 [ 477.283361][ T5906] usb 10-1: device descriptor read/64, error -71 [ 477.291034][ T5824] Bluetooth: hci3: command tx timeout [ 477.353168][ T5878] usb 8-1: USB disconnect, device number 54 [ 477.380832][ T5910] usb 9-1: Using ep0 maxpacket: 32 [ 477.404229][ T5910] usb 9-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=56.a5 [ 477.422362][ T5910] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.442098][ T5910] usb 9-1: Product: syz [ 477.450382][ T5910] usb 9-1: Manufacturer: syz [ 477.457624][ T5910] usb 9-1: SerialNumber: syz [ 477.485874][ T5910] usb 9-1: config 0 descriptor?? [ 477.518930][ T5910] gspca_main: mars-2.14.0 probing 093a:050f [ 477.560788][ T5906] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 478.027808][ T5910] usb 9-1: USB disconnect, device number 26 [ 478.100797][ T5906] usb 10-1: device descriptor read/64, error -71 [ 478.221545][ T5906] usb usb10-port1: attempt power cycle [ 478.600968][ T5906] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 478.673014][ T5879] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 478.744300][ T5906] usb 10-1: device descriptor read/8, error -71 [ 479.011604][ T5906] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 479.054565][ T5906] usb 10-1: device descriptor read/8, error -71 [ 479.229884][ T5906] usb usb10-port1: unable to enumerate USB device [ 479.336909][ T5878] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 479.563433][ T5878] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 479.571607][ T5878] usb 7-1: config 0 has no interface number 0 [ 479.658799][ T5878] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 479.673610][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.689927][ T5878] usb 7-1: Product: syz [ 479.694719][ T5878] usb 7-1: Manufacturer: syz [ 479.699517][ T5878] usb 7-1: SerialNumber: syz [ 479.736410][ T5878] usb 7-1: config 0 descriptor?? [ 479.962649][ T5878] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 480.003236][T14162] netlink: 'syz.9.1453': attribute type 1 has an invalid length. [ 480.042415][ T5878] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 480.084648][ T5878] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 480.110760][ T5878] usb 7-1: media controller created [ 480.151366][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 480.182798][T14162] 8021q: adding VLAN 0 to HW filter on device bond1 [ 480.230533][T14166] erspan0: entered allmulticast mode [ 480.283209][T14166] bond1: (slave erspan0): making interface the new active one [ 480.314525][T14166] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 480.380777][ T5879] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 480.465662][ T5878] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 480.548272][ T5879] usb 8-1: Using ep0 maxpacket: 32 [ 480.565744][ T5878] usb 7-1: USB disconnect, device number 58 [ 480.599953][ T5879] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 480.620289][ T5879] usb 8-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 480.649435][ T5879] usb 8-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 480.708570][ T5879] usb 8-1: config 0 interface 0 has no altsetting 1 [ 480.726607][ T5879] usb 8-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 480.739115][ T5879] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 480.753342][ T5879] usb 8-1: SerialNumber: syz [ 480.778549][ T5879] usb 8-1: config 0 descriptor?? [ 480.838652][ T5879] usb-storage 8-1:0.0: USB Mass Storage device detected [ 480.875828][ T5879] usb-storage 8-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 481.110794][ T5879] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 481.200563][T14165] netlink: 'syz.7.1452': attribute type 8 has an invalid length. [ 481.226963][T14165] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1452'. [ 481.280209][ T8837] usb 8-1: USB disconnect, device number 56 [ 481.297316][ T5879] usb 10-1: Using ep0 maxpacket: 32 [ 481.315926][ T5879] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.340598][ T5879] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 481.371652][ T5879] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.401833][ T5937] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 481.417183][ T5879] usb 10-1: config 0 descriptor?? [ 481.461757][ T5879] hub 10-1:0.0: bad descriptor, ignoring hub [ 481.471037][ T5879] hub 10-1:0.0: probe with driver hub failed with error -5 [ 481.485233][ T5879] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 481.570747][ T5937] usb 7-1: Using ep0 maxpacket: 16 [ 481.582839][ T5937] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.606486][ T5937] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 481.633473][ T5937] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 481.665809][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.694350][ T5937] usb 7-1: Product: syz [ 481.698606][ T5937] usb 7-1: Manufacturer: syz [ 481.708259][ T5937] usb 7-1: SerialNumber: syz [ 481.759055][T14209] bridge1: entered promiscuous mode [ 481.777673][T14209] bridge1: entered allmulticast mode [ 481.924056][ T5879] usb 10-1: reset high-speed USB device number 24 using dummy_hcd [ 481.941870][ T5879] usb 10-1: device reset changed ep0 maxpacket size! [ 481.967987][ T5879] usb 10-1: USB disconnect, device number 24 [ 482.060742][ T5878] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 482.316435][T14224] xt_TPROXY: Can be used only with -p tcp or -p udp [ 482.533182][ T5879] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 482.591627][ T5878] usb 9-1: Using ep0 maxpacket: 16 [ 482.605118][ T5878] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 482.617430][ T5878] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.643581][ T5878] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 482.686062][ T5878] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 482.695283][ T5879] usb 10-1: Using ep0 maxpacket: 8 [ 482.727509][ T5879] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 482.740702][ T5878] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.757122][ T5879] usb 10-1: config 0 has no interface number 0 [ 482.770958][ T5878] usb 9-1: Product: syz [ 482.775160][ T5878] usb 9-1: Manufacturer: syz [ 482.779761][ T5878] usb 9-1: SerialNumber: syz [ 483.001693][ T5879] usb 10-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 483.015256][ T5879] usb 10-1: config 0 interface 1 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 256 [ 483.030756][ T5879] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.044784][ T5879] usb 10-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 483.054270][ T5879] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 483.069116][ T5879] usb 10-1: SerialNumber: syz [ 483.078724][ T5879] usb 10-1: config 0 descriptor?? [ 483.113385][ T5879] hso 10-1:0.1: Failed to find BULK OUT ep [ 483.291850][T14184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.303575][T14184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.349806][ T5937] usb 10-1: USB disconnect, device number 25 [ 483.487992][ C0] raw-gadget.1 gadget.8: ignoring, device is not running [ 483.511333][ T5878] usb 9-1: 0:2 : does not exist [ 483.526069][ T5878] usb 9-1: 1:0: failed to get current value for ch 0 (-22) [ 483.635925][ T5878] usb 9-1: USB disconnect, device number 27 [ 484.406727][ T5937] usb 7-1: USB disconnect, device number 59 [ 485.590854][ T5937] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 485.770810][ T5937] usb 3-1: Using ep0 maxpacket: 32 [ 485.830069][ T5937] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 485.852059][ T5937] usb 3-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 485.865759][ T5937] usb 3-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 485.899563][ T5937] usb 3-1: config 0 interface 0 has no altsetting 1 [ 485.938672][ T5937] usb 3-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 485.966941][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 486.022590][ T5937] usb 3-1: SerialNumber: syz [ 486.045592][ T5937] usb 3-1: config 0 descriptor?? [ 486.104947][ T5937] usb-storage 3-1:0.0: USB Mass Storage device detected [ 486.173630][ T5879] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 486.226783][ T5937] usb-storage 3-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 486.250847][ T5910] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 486.360745][ T5879] usb 8-1: Using ep0 maxpacket: 16 [ 486.367576][ T5879] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 35, changing to 9 [ 486.383518][ T5879] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26074, setting to 1024 [ 486.412777][ T5879] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 486.436751][ T5910] usb 9-1: Using ep0 maxpacket: 8 [ 486.448183][ T5879] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 486.472039][T14275] netlink: 'syz.2.1472': attribute type 8 has an invalid length. [ 486.481173][ T5937] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 486.531131][T14275] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1472'. [ 486.533912][ T5879] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.563052][ T5910] usb 9-1: unable to get BOS descriptor or descriptor too short [ 486.599009][ T5910] usb 9-1: config 1 interface 0 altsetting 12 endpoint 0x82 has invalid maxpacket 19767, setting to 1024 [ 486.615863][ T5910] usb 9-1: config 1 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 1024 [ 486.622365][ T5879] usb 8-1: config 0 descriptor?? [ 486.633609][ T796] usb 3-1: USB disconnect, device number 66 [ 486.660873][T14293] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 486.690945][ T5937] usb 7-1: Using ep0 maxpacket: 16 [ 486.720192][ T5937] usb 7-1: unable to get BOS descriptor or descriptor too short [ 486.754824][ T5910] usb 9-1: config 1 interface 0 altsetting 12 bulk endpoint 0x3 has invalid maxpacket 1023 [ 486.772509][ T5937] usb 7-1: config 1 has an invalid interface number: 244 but max is 1 [ 486.816312][ T5910] usb 9-1: config 1 interface 0 has no altsetting 0 [ 486.828328][ T5937] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.888169][T14306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.911807][T14306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.934493][ T5937] usb 7-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 486.944450][T14306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.967117][T14306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.983348][ T5910] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 486.986715][T14306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.002319][ T5937] usb 7-1: config 1 has no interface number 2 [ 487.013443][T14306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.020079][ T5910] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.037229][ T5937] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.058010][T14306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.060684][ T5910] usb 9-1: Product: syz [ 487.075405][ T5910] usb 9-1: Manufacturer: syz [ 487.080035][ T5910] usb 9-1: SerialNumber: syz [ 487.088445][T14310] bridge1: entered promiscuous mode [ 487.093942][ T5937] usb 7-1: config 1 interface 244 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 487.096750][T14306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.117568][T14310] bridge1: entered allmulticast mode [ 487.130928][ T5937] usb 7-1: config 1 interface 244 has no altsetting 0 [ 487.144651][T14294] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 487.160399][ T5937] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 487.191326][T14294] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 487.198706][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.201947][ T5879] usbhid 8-1:0.0: can't add hid device: -32 [ 487.211055][ T5937] usb 7-1: Product: syz [ 487.227200][ T5879] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 487.258292][ T5937] usb 7-1: Manufacturer: syz [ 487.284863][ T5937] usb 7-1: SerialNumber: syz [ 487.370809][ T10] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 487.519037][T14294] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1475'. [ 487.530934][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 487.532853][T14299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.550922][ T5879] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 487.558697][ T10] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 487.586933][T14299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.590333][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.606446][ T5937] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 487.618060][ T5937] cdc_ncm 7-1:1.0: bind() failure [ 487.678459][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 487.710173][ T10] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 487.724073][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.765525][ T5879] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 487.782997][ T10] usb 10-1: Product: syz [ 487.787366][ T5879] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 487.809207][ T10] usb 10-1: Manufacturer: syz [ 487.814037][ T10] usb 10-1: SerialNumber: syz [ 487.820289][ T5879] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 487.834959][ T5879] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 487.845261][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.894655][ T5937] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 487.926750][ T5937] cdc_ncm 7-1:1.1: bind() failure [ 487.960409][ T5937] cdc_mbim 7-1:1.244: probe with driver cdc_mbim failed with error -71 [ 487.994954][ T5937] usb 7-1: USB disconnect, device number 60 [ 488.068279][ T5879] usb 3-1: usb_control_msg returned -32 [ 488.085569][ T5879] usbtmc 3-1:16.0: can't read capabilities [ 488.288944][T14333] syzkaller0: entered promiscuous mode [ 488.300419][ T10] usb 10-1: 0:2 : does not exist [ 488.314427][T14333] syzkaller0: entered allmulticast mode [ 488.325083][ T10] usb 10-1: 1:0: failed to get current value for ch 0 (-22) [ 488.937645][ T10] usb 10-1: USB disconnect, device number 26 [ 489.000039][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 489.045015][ T5878] usb 8-1: USB disconnect, device number 57 [ 489.344085][T14348] loop6: detected capacity change from 0 to 7 [ 489.397690][ T5818] Dev loop6: unable to read RDB block 7 [ 489.413477][ T5818] loop6: unable to read partition table [ 489.442717][ T5818] loop6: partition table beyond EOD, truncated [ 489.471997][T14348] Dev loop6: unable to read RDB block 7 [ 489.492397][T14348] loop6: unable to read partition table [ 489.516027][T14348] loop6: partition table beyond EOD, truncated [ 489.544850][T14348] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 489.944328][ T5910] usb 9-1: bad CDC descriptors [ 490.061133][ T5910] usb 9-1: USB disconnect, device number 28 [ 490.239305][ T5906] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 490.412791][ T5906] usb 8-1: Using ep0 maxpacket: 32 [ 490.420535][ T5906] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 490.441478][ T5906] usb 8-1: config 0 has no interface number 0 [ 490.467247][ T5906] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 490.520102][ T5906] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 490.531745][ T5878] usb 3-1: USB disconnect, device number 67 [ 490.547103][ T5906] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.566445][ T5906] usb 8-1: Product: syz [ 490.618252][ T5906] usb 8-1: Manufacturer: syz [ 490.628831][ T5906] usb 8-1: SerialNumber: syz [ 490.822664][ T5906] usb 8-1: config 0 descriptor?? [ 490.844269][ T5906] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 490.860463][T14376] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 490.919945][ T5906] em28xx 8-1:0.132: Video interface 132 found: [ 491.308398][T14395] snd_dummy snd_dummy.0: control 0:3:0:syz0:0 is already present [ 491.345386][T14395] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1493'. [ 491.385587][T14395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1493'. [ 491.658864][T14403] bridge2: entered promiscuous mode [ 491.667056][T14403] bridge2: entered allmulticast mode [ 491.928364][ T5910] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 492.120730][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 492.128271][ T5910] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 492.597288][ T5910] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.610942][ T5906] em28xx 8-1:0.132: unknown em28xx chip ID (0) [ 492.611220][T14418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.647360][ T5910] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 492.670035][T14418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.703252][ T5910] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 492.709029][ T5906] em28xx 8-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 492.723413][ T5906] em28xx 8-1:0.132: board has no eeprom [ 492.731124][ T5878] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 492.811754][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.814790][ T5906] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 492.836996][ T5910] usb 3-1: Product: syz [ 492.850422][ T5906] em28xx 8-1:0.132: analog set to bulk mode. [ 492.860492][ T5910] usb 3-1: Manufacturer: syz [ 492.877031][ T5879] em28xx 8-1:0.132: Registering V4L2 extension [ 492.878126][ T5910] usb 3-1: SerialNumber: syz [ 492.890884][ T5878] usb 9-1: Using ep0 maxpacket: 32 [ 493.035330][ T5906] usb 8-1: USB disconnect, device number 58 [ 493.065715][ T5906] em28xx 8-1:0.132: Disconnecting em28xx [ 493.288897][ T5878] usb 9-1: unable to read config index 0 descriptor/all [ 493.296140][ T5878] usb 9-1: can't read configurations, error -71 [ 493.434977][ T5879] em28xx 8-1:0.132: Config register raw data: 0xffffffed [ 493.450977][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 493.452869][ T5879] em28xx 8-1:0.132: AC97 chip type couldn't be determined [ 493.473054][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 493.494408][ T5910] usb 3-1: 0:2 : does not exist [ 493.509537][ T5879] em28xx 8-1:0.132: No AC97 audio processor [ 493.524124][ T5910] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 493.578579][ T5879] usb 8-1: Decoder not found [ 493.601784][ T5879] em28xx 8-1:0.132: failed to create media graph [ 493.638745][ T5879] em28xx 8-1:0.132: V4L2 device video103 deregistered [ 493.699602][ T5910] usb 3-1: USB disconnect, device number 68 [ 493.745677][ T5879] em28xx 8-1:0.132: Remote control support is not available for this card. [ 493.765222][ T5906] em28xx 8-1:0.132: Closing input extension [ 493.872914][ T5906] em28xx 8-1:0.132: Freeing device [ 493.985622][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 495.860797][ T5878] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 496.030808][ T5878] usb 8-1: Using ep0 maxpacket: 32 [ 496.072685][ T5878] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.101030][ T5878] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 496.137575][ T5878] usb 8-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 496.223718][ T5878] usb 8-1: config 0 interface 0 has no altsetting 1 [ 496.255965][ T5878] usb 8-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 496.285732][ T5878] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.312942][ T29] audit: type=1326 audit(1772003803.710:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14492 comm="syz.6.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02319c629 code=0x7ffc0000 [ 496.513109][ T5878] usb 8-1: Product: syz [ 496.517883][ T5878] usb 8-1: Manufacturer: syz [ 496.557682][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1511'. [ 496.613361][ T5878] usb 8-1: SerialNumber: syz [ 496.639874][ T29] audit: type=1326 audit(1772003803.710:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14492 comm="syz.6.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02319c629 code=0x7ffc0000 [ 496.677224][ T5878] usb 8-1: config 0 descriptor?? [ 496.743700][ T5878] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 496.757459][ T29] audit: type=1326 audit(1772003803.710:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14492 comm="syz.6.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02319c629 code=0x7ffc0000 [ 496.796833][ T29] audit: type=1326 audit(1772003803.710:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14492 comm="syz.6.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02319c629 code=0x7ffc0000 [ 496.823320][ T5878] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 496.930566][ T5878] usb 8-1: USB disconnect, device number 59 [ 496.970435][T14505] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1511'. [ 497.026626][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 497.032110][ T29] audit: type=1326 audit(1772003803.710:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14492 comm="syz.6.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02319c629 code=0x7ffc0000 [ 497.178148][ T29] audit: type=1326 audit(1772003803.710:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14492 comm="syz.6.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02319c629 code=0x7ffc0000 [ 497.289556][ T29] audit: type=1326 audit(1772003803.710:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14492 comm="syz.6.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02319c629 code=0x7ffc0000 [ 497.388975][ T29] audit: type=1326 audit(1772003803.710:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14492 comm="syz.6.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02319c629 code=0x7ffc0000 [ 497.470720][ T29] audit: type=1326 audit(1772003803.710:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14492 comm="syz.6.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7ff02319c629 code=0x7ffc0000 [ 497.551035][ T29] audit: type=1326 audit(1772003803.770:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14492 comm="syz.6.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02319c629 code=0x7ffc0000 [ 497.760768][ T5937] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 497.778441][T14518] bridge2: entered promiscuous mode [ 497.871463][T14518] bridge2: entered allmulticast mode [ 497.964977][ T5937] usb 3-1: Using ep0 maxpacket: 16 [ 498.033381][ T5937] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 498.046984][ T5937] usb 3-1: config 254 has no interface number 0 [ 498.053829][ T5937] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 498.066749][ T5937] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 498.162598][ T5937] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 498.180936][ T5878] usb 10-1: new low-speed USB device number 27 using dummy_hcd [ 498.188602][ T10] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 498.207564][ T5937] usb 3-1: config 254 interface 235 has no altsetting 0 [ 498.228508][ T5937] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 498.258428][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 498.283321][ T5937] usb 3-1: Product: syz [ 498.296600][ T5937] usb 3-1: Manufacturer: syz [ 498.313332][ T5937] usb 3-1: SerialNumber: syz [ 498.343623][T14511] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 498.351130][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 498.363617][ T5878] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 498.372147][ T5878] usb 10-1: config 0 has no interface number 0 [ 498.378463][ T10] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 498.389927][ T5878] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 498.403039][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.413926][ T5878] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 498.429457][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 498.445587][ T5878] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 498.455686][ T5878] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.468836][ T10] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 498.479657][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.490167][ T10] usb 9-1: Product: syz [ 498.494962][ T10] usb 9-1: Manufacturer: syz [ 498.502753][ T10] usb 9-1: SerialNumber: syz [ 498.508545][ T5878] usb 10-1: config 0 descriptor?? [ 498.515686][T14520] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 498.534875][ T5878] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 498.594332][T14511] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 498.607481][ T5937] usbtest 3-1:254.235: Linux gadget zero [ 498.617120][ T5937] usbtest 3-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 498.747625][T14520] ip6gretap0: entered promiscuous mode [ 498.757033][T14520] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1515'. [ 498.809434][ T5878] usb 3-1: USB disconnect, device number 69 [ 498.949015][ T10] usb 9-1: 0:2 : does not exist [ 498.983279][ C0] iowarrior 10-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 498.997652][ T5937] usb 10-1: USB disconnect, device number 27 [ 499.578645][ T10] usb 9-1: USB disconnect, device number 31 [ 499.653393][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 500.103174][T14561] fuse: Unknown parameter 'æe@Úd' [ 500.995317][ T5937] usb 10-1: new low-speed USB device number 28 using dummy_hcd [ 501.165697][ T5937] usb 10-1: Invalid ep0 maxpacket: 64 [ 501.320724][ T5937] usb 10-1: new low-speed USB device number 29 using dummy_hcd [ 501.481604][ T5937] usb 10-1: Invalid ep0 maxpacket: 64 [ 501.498795][ T5937] usb usb10-port1: attempt power cycle [ 501.538072][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.549626][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.861391][ T5937] usb 10-1: new low-speed USB device number 30 using dummy_hcd [ 501.892417][T14592] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1525'. [ 501.911593][ T5937] usb 10-1: Invalid ep0 maxpacket: 64 [ 501.919448][T14592] veth0_vlan: entered allmulticast mode [ 502.040787][ T5937] usb 10-1: new low-speed USB device number 31 using dummy_hcd [ 502.131178][ T5937] usb 10-1: Invalid ep0 maxpacket: 64 [ 502.247125][ T5937] usb usb10-port1: unable to enumerate USB device [ 502.332511][T14596] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 502.375741][T14606] futex_wake_op: syz.7.1528 tries to shift op by -1; fix this program [ 502.425538][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 502.425553][ T29] audit: type=1326 audit(1772003809.800:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14605 comm="syz.7.1528" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f035459c629 code=0x0 [ 502.466152][T14608] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 502.758547][ T10] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 503.102366][ T10] usb 8-1: config 0 has an invalid interface number: 120 but max is 0 [ 503.126438][ T10] usb 8-1: config 0 has no interface number 0 [ 503.133398][ T10] usb 8-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 503.155994][ T10] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 503.171027][ T10] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 503.184563][ T10] usb 8-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 503.198339][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.236176][ T10] usb 8-1: config 0 descriptor?? [ 503.275457][ T10] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.120/input/input35 [ 503.632009][T14625] bridge3: entered promiscuous mode [ 503.637823][T14625] bridge3: entered allmulticast mode [ 503.910705][ T5937] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 503.966944][T14641] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1533'. [ 504.078969][ T5937] usb 3-1: Using ep0 maxpacket: 16 [ 504.088008][ T5937] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 504.109180][ T5937] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.133925][ T5937] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 504.143217][ T796] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 504.165909][ T5937] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 504.176350][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.190524][ T5937] usb 3-1: Product: syz [ 504.199341][ T5937] usb 3-1: Manufacturer: syz [ 504.210542][ T5937] usb 3-1: SerialNumber: syz [ 504.301377][ T796] usb 10-1: Using ep0 maxpacket: 32 [ 504.312649][ T796] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.325105][ T796] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.341203][ T796] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 504.361640][ T796] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.380173][ T796] usb 10-1: config 0 descriptor?? [ 504.873588][ T5937] usb 3-1: 0:2 : does not exist [ 504.880031][ T796] savu 0003:1E7D:2D5A.0023: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 505.130348][ T796] usb 10-1: USB disconnect, device number 32 [ 505.367233][ T5937] usb 3-1: USB disconnect, device number 70 [ 505.399704][ T10] usb 8-1: USB disconnect, device number 60 [ 505.860819][ T10] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 505.900831][ T5879] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 506.000728][ T5937] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 506.024645][ T10] usb 8-1: config index 0 descriptor too short (expected 58148, got 36) [ 506.039435][ T10] usb 8-1: config 0 has too many interfaces: 49, using maximum allowed: 32 [ 506.056252][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.079532][ T5879] usb 9-1: too many configurations: 53, using maximum allowed: 8 [ 506.093499][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 49 [ 506.204261][ T5937] usb 10-1: Using ep0 maxpacket: 16 [ 506.232227][ T5937] usb 10-1: config 0 has an invalid interface number: 119 but max is 0 [ 506.260991][ T5937] usb 10-1: config 0 has no interface number 0 [ 506.320397][ T5937] usb 10-1: config 0 interface 119 has no altsetting 0 [ 506.340920][ T5879] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 506.363289][ T5879] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.373391][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 506.398297][ T5879] usb 9-1: Product: syz [ 506.407559][ T5879] usb 9-1: Manufacturer: syz [ 506.414249][ T5879] usb 9-1: SerialNumber: syz [ 506.419178][ T10] usb 8-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 506.440572][ T5937] usb 10-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=26.35 [ 506.470880][ T5937] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.491706][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.505400][ T5937] usb 10-1: Product: syz [ 506.528031][ T5937] usb 10-1: Manufacturer: syz [ 506.538062][ T5937] usb 10-1: SerialNumber: syz [ 506.565472][ T10] usb 8-1: config 0 descriptor?? [ 506.585102][ T5937] usb 10-1: config 0 descriptor?? [ 506.668942][ T10] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 506.928691][ T10] usb 8-1: USB disconnect, device number 61 [ 507.035228][ T5937] usb 10-1: USB disconnect, device number 33 [ 508.571809][ T5879] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 508.631245][ T5879] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 508.642779][ T5879] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 508.677091][T14735] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.1549'. [ 508.728789][ T5879] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 508.772260][ T5879] usb 9-1: USB disconnect, device number 32 [ 509.128194][T14749] bridge2: entered promiscuous mode [ 509.175622][T14749] bridge2: entered allmulticast mode [ 509.465246][T14758] loop3: detected capacity change from 0 to 7 [ 509.471739][ T10] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 509.484733][T14758] Dev loop3: unable to read RDB block 7 [ 509.490531][T14758] loop3: AHDI p1 p2 [ 509.494709][T14758] loop3: partition table partially beyond EOD, truncated [ 509.502803][T14758] loop3: p1 start 1702000233 is beyond EOD, truncated [ 509.620712][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 509.640828][ T10] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 509.649843][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.673810][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 509.702359][ T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 509.711775][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.721446][ T10] usb 8-1: Product: syz [ 509.731009][ T10] usb 8-1: Manufacturer: syz [ 509.750957][ T796] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 509.762101][ T10] usb 8-1: SerialNumber: syz [ 509.914737][ T796] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 509.925743][ T796] usb 3-1: config 0 has no interface number 0 [ 509.943068][ T796] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 509.980732][ T5937] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 509.991980][ T796] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 510.033526][ T796] usb 3-1: config 0 interface 255 has no altsetting 0 [ 510.072454][ T796] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 510.108425][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.506392][ T796] usb 3-1: config 0 descriptor?? [ 510.534221][ T5937] usb 10-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 510.543736][ T796] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 510.553983][ T10] usb 8-1: 0:2 : does not exist [ 510.558797][ T5937] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.593642][ T5937] usb 10-1: config 0 descriptor?? [ 510.616197][ T5937] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 511.328439][ T10] usb 8-1: USB disconnect, device number 62 [ 511.427738][ T5878] usb 3-1: USB disconnect, device number 71 [ 511.523166][ T5835] udevd[5835]: setting mode of /dev/bus/usb/008/062 to 020664 failed: No such file or directory [ 511.620962][ T5835] udevd[5835]: setting owner of /dev/bus/usb/008/062 to uid=0, gid=0 failed: No such file or directory [ 511.661268][ T5937] gspca_cpia1: usb_control_msg 03, error -71 [ 511.785741][ T5937] gspca_cpia1: usb_control_msg 01, error -71 [ 511.971477][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 511.987512][ T5937] cpia1 10-1:0.0: only firmware version 1 is supported (got: 0) [ 512.384604][ T5937] usb 10-1: USB disconnect, device number 34 [ 513.411238][T14814] netlink: 'syz.7.1561': attribute type 25 has an invalid length. [ 513.850857][ T5143] Bluetooth: hci1: command 0x0406 tx timeout [ 513.891615][T14839] syz.9.1570 (14839) used obsolete PPPIOCDETACH ioctl [ 513.960787][ T10] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 513.994817][T14843] bridge3: entered promiscuous mode [ 514.060652][T14843] bridge3: entered allmulticast mode [ 514.143351][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 514.178560][ T10] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.209284][ T10] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 514.290787][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 514.300772][ T5910] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 514.320379][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 514.383570][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.441114][ T10] usb 3-1: config 0 descriptor?? [ 514.478712][ T10] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count [ 514.490984][ T5910] usb 9-1: Using ep0 maxpacket: 16 [ 514.506654][ T10] usbhid 3-1:0.0: can't add hid device: -22 [ 514.536032][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 514.546302][ T5910] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 514.567017][ T5910] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.602482][T14858] tipc: Started in network mode [ 514.630786][ T5910] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 514.639770][T14858] tipc: Node identity ac14140f, cluster identity 4711 [ 514.670529][ T5910] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 514.695998][T14858] tipc: Enabled bearer , priority 10 [ 514.711855][ T5910] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.732981][ T5910] usb 9-1: Product: syz [ 514.741897][ T5910] usb 9-1: Manufacturer: syz [ 514.751320][ T5910] usb 9-1: SerialNumber: syz [ 515.175812][ T5910] usb 9-1: 0:2 : does not exist [ 515.389397][T14888] syzkaller0: entered promiscuous mode [ 515.397925][T14888] syzkaller0: entered allmulticast mode [ 515.410457][T14888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1569'. [ 515.527790][T14892] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1580'. [ 515.693014][ T5937] tipc: Node number set to 2886997007 [ 515.750206][ T5910] usb 9-1: USB disconnect, device number 33 [ 516.408136][T14916] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 516.574895][ T5937] usb 3-1: USB disconnect, device number 72 [ 518.173815][T14950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1590'. [ 519.038881][T14964] gre1: entered promiscuous mode [ 519.087604][T14964] gre1: entered allmulticast mode [ 519.087608][ T5937] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 519.273935][ T5937] usb 10-1: Using ep0 maxpacket: 32 [ 519.282923][ T5937] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 519.300216][ T5937] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.355988][ T5937] usb 10-1: Product: syz [ 519.376999][ T5937] usb 10-1: Manufacturer: syz [ 519.405255][ T5937] usb 10-1: SerialNumber: syz [ 519.449969][ T5937] usb 10-1: config 0 descriptor?? [ 519.744150][ T5937] airspy 10-1:0.0: usb_control_msg() failed -71 request 0a [ 519.753775][ T5937] airspy 10-1:0.0: Could not detect board [ 519.830796][ T5937] airspy 10-1:0.0: probe with driver airspy failed with error -71 [ 519.887302][ T5937] usb 10-1: USB disconnect, device number 35 [ 519.967937][T14979] netlink: 'syz.7.1595': attribute type 9 has an invalid length. [ 519.984792][T14979] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1595'. [ 520.501371][ T8837] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 520.670778][ T8837] usb 10-1: Using ep0 maxpacket: 16 [ 520.688159][ T8837] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.711750][ T8837] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 520.749010][ T8837] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 520.932447][ T8837] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.956925][ T8837] usb 10-1: Product: syz [ 520.968313][ T8837] usb 10-1: Manufacturer: syz [ 520.973240][ T5937] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 520.986402][ T8837] usb 10-1: SerialNumber: syz [ 521.754580][T15030] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 521.773199][T15030] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 522.178981][T15033] fuse: Bad value for 'group_id' [ 522.184166][T15033] fuse: Bad value for 'group_id' [ 522.195876][T15033] xt_TPROXY: Can be used only with -p tcp or -p udp [ 522.326452][ T5910] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 522.783099][ T5910] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 522.794092][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 522.854800][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.912117][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 522.957285][ T5910] usb 3-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 523.004368][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.066657][ T5910] usb 3-1: config 0 descriptor?? [ 523.559030][ T5910] wacom 0003:056A:0023.0024: Unknown device_type for 'HID 056a:0023'. Assuming pen. [ 523.603901][ T5910] wacom 0003:056A:0023.0024: hidraw0: USB HID v0.00 Device [HID 056a:0023] on usb-dummy_hcd.2-1/input0 [ 523.716375][ T5910] input: Wacom Intuos 12x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0023.0024/input/input36 [ 523.905737][ T5910] usb 3-1: USB disconnect, device number 73 [ 524.243463][ T8835] usb 10-1: USB disconnect, device number 36 [ 524.534447][T15067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1611'. [ 524.581317][T15067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.610296][T15067] batadv_slave_0: entered promiscuous mode [ 524.731336][ T5906] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 524.890837][ T5906] usb 7-1: device descriptor read/64, error -71 [ 524.960701][T15083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.975101][ T5879] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 525.232587][ T5879] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 525.245384][ T5879] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 525.320788][ T5906] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 525.348807][ T5879] usb 10-1: config 220 has an invalid descriptor of length 99, skipping remainder of the config [ 525.359423][ T5879] usb 10-1: config 220 has no interface number 2 [ 525.368506][ T5879] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 525.400569][ T5879] usb 10-1: config 220 interface 0 has no altsetting 0 [ 525.407818][ T5879] usb 10-1: config 220 interface 76 has no altsetting 0 [ 525.434006][ T5879] usb 10-1: config 220 interface 1 has no altsetting 0 [ 525.470751][ T5906] usb 7-1: device descriptor read/64, error -71 [ 525.479225][ T5879] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 525.489993][ T5879] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.499012][ T5879] usb 10-1: Product: syz [ 525.507865][ T5879] usb 10-1: Manufacturer: syz [ 525.513825][ T5879] usb 10-1: SerialNumber: syz [ 525.581237][ T5906] usb usb7-port1: attempt power cycle [ 525.821319][ T5879] usb 10-1: selecting invalid altsetting 0 [ 525.866047][ T5879] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 525.882515][ T5879] uvcvideo 10-1:220.0: No valid video chain found. [ 525.898051][ T5879] usb 10-1: selecting invalid altsetting 0 [ 525.905165][ T5879] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 525.920736][ T5906] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 525.947551][ T5906] usb 7-1: device descriptor read/8, error -71 [ 525.956607][ T5879] usb 10-1: USB disconnect, device number 37 [ 526.028827][T15101] syzkaller0: entered promiscuous mode [ 526.034416][T15101] syzkaller0: entered allmulticast mode [ 526.210962][ T5906] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 526.241230][ T5906] usb 7-1: device descriptor read/8, error -71 [ 526.332352][T15114] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1620'. [ 526.368543][ T5906] usb usb7-port1: unable to enumerate USB device [ 526.479400][T15118] loop6: detected capacity change from 0 to 7 [ 526.515178][T15122] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.1620'. [ 526.525323][ T5835] Dev loop6: unable to read RDB block 7 [ 526.531039][ T5835] loop6: unable to read partition table [ 526.537083][ T5835] loop6: partition table beyond EOD, truncated [ 526.590895][T15118] Dev loop6: unable to read RDB block 7 [ 526.597072][T15118] loop6: unable to read partition table [ 526.611999][T15118] loop6: partition table beyond EOD, truncated [ 526.618340][T15118] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 526.930991][ T5937] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 527.115085][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.126076][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.140842][ T5906] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 527.167430][ T5937] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 527.179665][ T5937] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 527.187763][ T5937] usb 3-1: Manufacturer: syz [ 527.200849][ T5937] usb 3-1: config 0 descriptor?? [ 527.310851][ T5906] usb 10-1: Using ep0 maxpacket: 8 [ 527.329371][ T5906] usb 10-1: unable to get BOS descriptor or descriptor too short [ 527.349237][ T5906] usb 10-1: config 4 interface 0 has no altsetting 0 [ 527.369132][ T5906] usb 10-1: string descriptor 0 read error: -22 [ 527.379777][ T5906] usb 10-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 527.389397][ T5906] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.417502][ T5906] usb 10-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 527.429798][ T5906] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 527.443857][ T5906] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 527.455698][ T5906] usb 10-1: media controller created [ 527.477038][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 527.624996][ T5937] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 527.652744][ T5937] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 527.654402][ T5906] zl10353_read_register: readreg error (reg=127, ret==0) [ 527.662582][ T5937] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 527.709422][ T5937] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 527.716961][ T5937] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 527.746475][ T5937] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 527.754804][ T5937] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 527.803210][ T5937] pyra 0003:1E7D:2CF6.0025: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 527.807222][ T5906] usb 10-1: USB disconnect, device number 38 [ 528.180741][ T5906] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 528.333847][ T5906] usb 7-1: Using ep0 maxpacket: 16 [ 528.354284][ T5906] usb 7-1: config 252 has an invalid interface number: 15 but max is 0 [ 528.386818][ T5906] usb 7-1: config 252 has no interface number 0 [ 528.396948][ T5906] usb 7-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 528.436586][ T5906] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 528.486199][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.519496][ T5906] usb 7-1: Product: syz [ 528.526781][ T5906] usb 7-1: Manufacturer: syz [ 528.535725][ T5906] usb 7-1: SerialNumber: syz [ 528.621223][ T5906] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 528.667773][ T5937] pyra 0003:1E7D:2CF6.0025: couldn't init struct pyra_device [ 528.676485][ T5937] pyra 0003:1E7D:2CF6.0025: couldn't install mouse [ 528.687987][ T5937] pyra 0003:1E7D:2CF6.0025: probe with driver pyra failed with error -32 [ 528.840728][ T5879] usb 10-1: new full-speed USB device number 39 using dummy_hcd [ 529.013190][ T5879] usb 10-1: config 0 has an invalid interface number: 20 but max is 0 [ 529.030761][ T5879] usb 10-1: config 0 has no interface number 0 [ 529.050093][ T5879] usb 10-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 529.095595][ T5879] usb 10-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 529.105035][ T5879] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.115172][ T5879] usb 10-1: Product: syz [ 529.130332][ T5879] usb 10-1: Manufacturer: syz [ 529.140539][ T5879] usb 10-1: SerialNumber: syz [ 529.157860][ T5879] usb 10-1: config 0 descriptor?? [ 529.178631][T15145] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 529.191703][ T5879] usb-storage 10-1:0.20: USB Mass Storage device detected [ 529.227506][ T5879] usb-storage 10-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 529.428353][ T5879] scsi host1: usb-storage 10-1:0.20 [ 529.465925][ T5879] usb 10-1: USB disconnect, device number 39 [ 529.696141][T11637] usb 7-1: Failed to submit usb control message: -110 [ 529.703403][T11637] usb 7-1: unable to send the bmi data to the device: -110 [ 529.710791][T11637] usb 7-1: unable to get target info from device [ 529.727401][T11637] usb 7-1: could not get target info (-110) [ 529.743934][T11637] usb 7-1: could not probe fw (-110) [ 530.416515][ T8835] usb 3-1: USB disconnect, device number 74 [ 530.603146][ T5906] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 530.735101][T15185] loop6: detected capacity change from 0 to 7 [ 530.838490][T15185] Dev loop6: unable to read RDB block 7 [ 530.851482][ T5906] usb 8-1: Using ep0 maxpacket: 16 [ 530.854297][T15185] loop6: unable to read partition table [ 530.869910][ T5906] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 530.879212][T15185] loop6: partition table beyond EOD, truncated [ 530.901194][ T5906] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 530.906177][T15185] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 530.951226][ T5906] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 531.000765][ T5906] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.055629][ T5906] usb 8-1: Product: syz [ 531.068182][ T5906] usb 8-1: Manufacturer: syz [ 531.099631][ T5906] usb 8-1: SerialNumber: syz [ 531.136096][ T5906] usb 8-1: config 0 descriptor?? [ 531.159595][ T5906] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 531.190537][ T5906] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 531.322884][ T5878] usb 7-1: USB disconnect, device number 65 [ 531.585739][T15208] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 531.733240][T15208] bond3 (unregistering): Released all slaves [ 531.954729][ T5906] em28xx 8-1:0.0: chip ID is em2870 [ 532.000942][ T5910] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 532.122063][T15224] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1642'. [ 532.161274][ T5937] usb 8-1: USB disconnect, device number 63 [ 532.170022][ T5937] em28xx 8-1:0.0: Disconnecting em28xx [ 532.189926][ T5910] usb 7-1: Using ep0 maxpacket: 16 [ 532.211242][ T5910] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.224101][ T5937] em28xx 8-1:0.0: Freeing device [ 532.232708][ T5910] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 532.278644][ T5910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.308002][ T5910] usb 7-1: config 0 descriptor?? [ 532.746494][ T5910] kye 0003:0458:5016.0026: control desc unexpectedly large [ 532.800558][ T5910] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0026/input/input39 [ 532.971547][ T5910] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0026/input/input40 [ 533.081453][ T5878] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 533.086264][ T5910] kye 0003:0458:5016.0026: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.6-1/input0 [ 533.119852][T15249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 533.301047][ T5878] usb 8-1: Using ep0 maxpacket: 8 [ 533.318687][ T5878] usb 8-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.350086][ T5878] usb 8-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.387886][ T5878] usb 8-1: config 0 interface 0 has no altsetting 0 [ 533.404810][ T5878] usb 8-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 533.434270][ T5878] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.485588][ T5878] usb 8-1: config 0 descriptor?? [ 533.608650][ T5879] usb 7-1: USB disconnect, device number 66 [ 533.954833][T15269] raw_sendmsg: syz.6.1647 forgot to set AF_INET. Fix it! [ 533.975018][ T5878] smartjoyplus 0003:6666:8804.0027: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.7-1/input0 [ 534.026795][T15269] Cannot find set identified by id 0 to match [ 534.036988][ T5878] smartjoyplus 0003:6666:8804.0027: Force feedback for SmartJoy PLUS PS2/USB adapter [ 534.143286][ T5878] usb 8-1: USB disconnect, device number 64 [ 534.235183][T15274] fido_id[15274]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 534.250766][ T5879] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 534.331383][ T5143] Bluetooth: hci0: command 0x0406 tx timeout [ 534.405026][ T5879] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 534.434544][ T5879] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.468435][ T5879] usb 10-1: config 0 descriptor?? [ 534.489487][ T5879] cp210x 10-1:0.0: cp210x converter detected [ 534.872787][T15296] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1655'. [ 534.893427][ T5879] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 534.904151][ T9044] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.913747][T15296] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1655'. [ 534.932046][T15299] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1655'. [ 534.941250][T15302] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1655'. [ 534.950348][ T9046] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.030097][T15299] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1655'. [ 535.129354][T15302] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1655'. [ 535.141702][ T9046] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.151057][ T5879] usb 10-1: cp210x converter now attached to ttyUSB0 [ 535.206007][ T9046] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.322897][ T5879] usb 10-1: USB disconnect, device number 40 [ 535.354174][ T5879] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 535.373051][ T5937] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 535.375599][ T5879] cp210x 10-1:0.0: device disconnected [ 535.531153][ T5937] usb 7-1: Using ep0 maxpacket: 32 [ 535.546328][ T5937] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 535.558111][ T5937] usb 7-1: config 0 has no interface number 0 [ 535.564527][ T5937] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 535.591676][ T5937] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 535.614131][ T5937] usb 7-1: config 0 interface 85 has no altsetting 0 [ 535.649158][ T5937] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 535.667274][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.695820][ T5937] usb 7-1: Product: syz [ 535.700037][ T5937] usb 7-1: Manufacturer: syz [ 535.720687][ T5937] usb 7-1: SerialNumber: syz [ 535.736386][ T5937] usb 7-1: config 0 descriptor?? [ 535.823402][T15324] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 535.853457][T15324] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 535.905913][T15324] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 536.226384][T15308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.244355][T15308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.271581][ T5879] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 536.443179][ T5937] appletouch 7-1:0.85: Failed to request geyser raw mode [ 536.452537][ T5937] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 536.482529][ T5879] usb 8-1: Using ep0 maxpacket: 32 [ 536.493697][ T5937] usb 7-1: USB disconnect, device number 67 [ 536.520709][ T8835] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 536.529124][ T5879] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.565506][ T5879] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.606192][ T5879] usb 8-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 536.625930][ T5879] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.653903][ T5879] usb 8-1: config 0 descriptor?? [ 536.702749][ T8835] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 536.738408][ T8835] usb 10-1: config 0 interface 0 has no altsetting 0 [ 536.749007][ T8835] usb 10-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 536.759263][ T8835] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.823688][ T8835] usb 10-1: config 0 descriptor?? [ 537.108030][ T5879] asus 0003:0B05:1822.0028: item fetching failed at offset 5/7 [ 537.144034][ T5879] asus 0003:0B05:1822.0028: Asus hid parse failed: -22 [ 537.171386][ T5879] asus 0003:0B05:1822.0028: probe with driver asus failed with error -22 [ 537.257570][ T8835] kye 0003:0458:5015.0029: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 537.298765][ T8835] kye 0003:0458:5015.0029: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.9-1/input0 [ 537.337273][T15332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.351700][ T8835] kye 0003:0458:5015.0029: tablet-enabling feature report not found [ 537.386841][ T8835] kye 0003:0458:5015.0029: tablet enabling failed [ 537.397978][T15332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.481518][ T5879] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 537.526471][ T5937] usb 8-1: USB disconnect, device number 65 [ 537.630783][ T5879] usb 7-1: device descriptor read/64, error -71 [ 537.881057][ T5879] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 538.034251][ T5879] usb 7-1: device descriptor read/64, error -71 [ 538.140695][T11641] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 538.161423][T11641] ref_tracker: netdev@ffff888055b68620 has 1/1 users at [ 538.161423][T11641] dst_init+0xd9/0x480 [ 538.161423][T11641] dst_alloc+0x12a/0x170 [ 538.161423][T11641] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 538.161423][T11641] ip_route_output_key_hash+0x18d/0x2a0 [ 538.161423][T11641] ip_route_output_flow+0x2a/0x150 [ 538.161423][T11641] sit_tunnel_xmit+0x874/0x1b80 [ 538.161423][T11641] dev_hard_start_xmit+0x2d8/0x870 [ 538.161423][T11641] __dev_queue_xmit+0x168f/0x38a0 [ 538.161423][T11641] ip6_output+0x340/0x550 [ 538.161423][T11641] ip6tunnel_xmit+0x1c5/0x3e0 [ 538.161423][T11641] ip6_tnl_xmit+0x216a/0x2930 [ 538.161423][T11641] __gre6_xmit+0xa4d/0xd50 [ 538.161423][T11641] ip6gre_tunnel_xmit+0xc3b/0xf70 [ 538.161423][T11641] dev_hard_start_xmit+0x2d8/0x870 [ 538.161423][T11641] __dev_queue_xmit+0x168f/0x38a0 [ 538.161423][T11641] ip6_output+0x340/0x550 [ 538.161423][T11641] [ 538.262243][ T5879] usb usb7-port1: attempt power cycle [ 538.361300][ T5937] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 538.577678][ T5937] usb 3-1: Using ep0 maxpacket: 8 [ 538.587025][ T5937] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 538.597809][ T5937] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 538.613619][ T5937] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 538.630754][ T5879] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 538.635747][ T5937] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 538.656941][ T5937] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 538.667331][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.667971][ T5879] usb 7-1: device descriptor read/8, error -71 [ 538.896964][ T5937] usb 3-1: GET_CAPABILITIES returned 0 [ 538.908063][ T5937] usbtmc 3-1:16.0: can't read capabilities [ 538.950768][ T5879] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 539.011474][ T5879] usb 7-1: device descriptor read/8, error -71 [ 539.098597][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 539.109547][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 539.118643][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 539.127732][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 539.139876][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 539.141521][ T5879] usb usb7-port1: unable to enumerate USB device [ 539.148975][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 539.164794][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 539.173888][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 539.183038][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 539.192094][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 539.201145][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 539.217080][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 539.226220][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 539.235283][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 539.244599][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 539.256664][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 539.309423][ T5878] usb 3-1: USB disconnect, device number 75 [ 539.357777][ T5937] usb 10-1: USB disconnect, device number 41 [ 539.465673][ T5143] Bluetooth: hci4: command 0x0406 tx timeout