last executing test programs: 26m51.298087797s ago: executing program 0 (id=151): r0 = socket$inet_sctp(0x2, 0x1, 0x84) dup(r0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) (async) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080)) (async) read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0xfffffef0) (async) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 64) syz_mount_image$fuse(0x0, 0x0, 0x8010, &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=','], 0x0, 0x0, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) (async, rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x438, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x504) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x9, 0x100008, 0x0, 0xb, 0xf, 0x3, 0x3, 0xf8, 0x0, 0x1, 0x0, 0x4020000, 0x0, 0xff, 0x0, 0xfffffeff, [0x0, 0xd257]}}) fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) (async, rerun: 64) pselect6(0x40, &(0x7f00000001c0)={0x9, 0x200000, 0x20000000000, 0xfffffffffffffffd, 0xfffc, 0x0, 0x1004001000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xfffffffffffffffc, 0x6, 0x8002, 0xf, 0x80000006, 0xddf}, 0x0, 0x0) (rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x14, 0x5a, 0x1, 0x70bd2c, 0x2, {0x2}}, 0x14}}, 0x10040000) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) (async) ptrace(0x10, r5) (async) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$getregset(0x4205, r5, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) (async) ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000740)={0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r6, @ANYRES32=0x0, @ANYBLOB="0000000040000000380012800b0001006272696467650000280002800c002300076b0000000000000600060037070000080005000000000005002a"], 0x58}}, 0x8010) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) 26m51.180657357s ago: executing program 0 (id=153): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x400c004) r3 = syz_clone(0x10027800, &(0x7f0000000100)="d109995b275615f7de48f67c16923074ef91e78b9f638a2194cf6efa2764d8", 0x1f, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)="35d9c751acdf1ea044ae4016238b95c328322bfb5a3162070991e1b73a359a09ae6f080c30e8eee0f3b4c2403bb02ea7f698149dcf6aa49a") sched_getattr(r3, &(0x7f0000000280)={0x38}, 0x38, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="010700000000fedbdf256700000008000300", @ANYRES32=0x0, @ANYBLOB="0800c300b00a0000"], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket(0x10, 0x803, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000016c0)=@newchain={0x367c, 0x64, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x2, 0xfff2}, {0xf, 0x2}, {0xffff, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x854, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x838, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xfffffffe, 0xd7, 0x80, 0x2, 0x3, 0x4, 0x91, 0xffff, 0x4, 0x10000, 0x4, 0x5, 0x401, 0x1, 0x7f, 0x0, 0x5800000, 0x101, 0x2, 0xfc, 0x6, 0x1, 0x5, 0x3, 0x1, 0xf, 0x10, 0x6, 0x2, 0x6, 0xa, 0x6, 0x7, 0x9, 0x401, 0x3ff, 0x0, 0x401, 0x5, 0x9, 0xfffffffa, 0x0, 0x6, 0x9, 0xa, 0xc, 0x7fff, 0x61e2, 0x3, 0x7fc, 0x1, 0x4, 0x0, 0x7, 0x7, 0x1000, 0x2, 0x9927, 0xbf6, 0x80000000, 0x10, 0xd, 0x9, 0x1, 0x0, 0x4, 0x8, 0x3, 0x3, 0x10, 0xe78, 0x52, 0xffffff80, 0x0, 0x0, 0x40, 0x8, 0x9, 0x5, 0x8, 0x100, 0x1, 0x1ff, 0x6, 0x3, 0x4, 0x4, 0x7, 0xa, 0x0, 0xbc, 0x37d, 0x2, 0xfffffffa, 0x6, 0x7, 0xffff, 0x3, 0x5, 0x0, 0xfffffff9, 0x2, 0x4, 0x6, 0x8, 0x4, 0x2, 0x843a7484, 0x3, 0x8, 0x79, 0x2, 0x1ff, 0x9e, 0x8, 0x9, 0x5, 0xfffffffa, 0x35a, 0x8, 0x6, 0x3, 0x5, 0x7, 0x9, 0xffffffff, 0x0, 0x97e8, 0x5, 0x6b, 0x6, 0x80, 0x80000001, 0x5, 0xac8f, 0x4, 0x10000, 0xd1d, 0x9, 0x9, 0x9, 0xce4, 0x8000, 0x5, 0x80000000, 0x9, 0xd, 0x0, 0x6, 0x3, 0x8001, 0x9, 0x76, 0x8, 0xd7, 0x10, 0x0, 0x8, 0xfd, 0xe0d, 0x200, 0x1, 0x5, 0x5fbb, 0x0, 0x1557, 0x81, 0xf0, 0x8, 0x24976ff5, 0x1, 0x1, 0x653, 0xb, 0x7f, 0x1, 0x78ce, 0x2, 0x25116be2, 0x2, 0x80000001, 0x100, 0x1, 0x1ff, 0x3, 0x6, 0x8001, 0x5, 0x6, 0x5, 0x8, 0x4, 0x3, 0x3, 0x7, 0x7, 0x6, 0x8, 0x7, 0x1000, 0x0, 0x5, 0x1, 0x1, 0x0, 0xf, 0xd, 0x3, 0x55, 0x9, 0x7fff, 0x1, 0xf, 0x9, 0xcde, 0x7, 0x7fff, 0x2, 0x6e, 0x38000000, 0x1000, 0xeec, 0x6, 0x3, 0xc29f, 0x6, 0x5, 0xffffd2ec, 0x2, 0xf, 0x7e, 0x5, 0x3, 0xf9d8, 0x5, 0x71, 0x5, 0x5, 0x0, 0x791e, 0xa774, 0xd8f3, 0x1000, 0x7, 0x3f, 0x1, 0x9, 0x8, 0xc, 0xfffffff8, 0x4, 0x28f, 0x4, 0x4951, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8001, 0x6, 0x200, 0xb, 0x200, 0x4, 0x80, 0x9, 0x3, 0x5, 0x6, 0x3, 0x7ad, 0x4, 0x7, 0x6, 0x2, 0x8, 0x3, 0x4bce8b10, 0x3, 0xffffff9a, 0xfffffff8, 0x7, 0xff, 0x3, 0x4, 0x6289, 0x81, 0x1, 0xffffffff, 0x644a, 0x2, 0x9, 0x100, 0xe, 0x5, 0xe9a, 0x8, 0x9, 0xfffffffc, 0x3, 0xd4, 0x7, 0x3, 0x67e, 0x89, 0x8, 0xfffffffe, 0x1, 0x400, 0xc0bd, 0x8, 0x2, 0x0, 0x3, 0x8, 0x6317, 0x80000000, 0x5, 0x0, 0x1, 0x16, 0xd, 0x4, 0x80000000, 0x4, 0xfffffff9, 0xa9, 0x9, 0x3, 0x5, 0x0, 0x5, 0x4, 0x7, 0x78, 0x1, 0x800, 0x81, 0xa4e, 0x7, 0x983, 0x1, 0x8, 0x3, 0x7, 0x8, 0x6, 0x81, 0x6, 0x3, 0x3, 0x9e6, 0x2, 0x0, 0x5, 0xffffff8e, 0xfffffff9, 0x2, 0x1, 0x0, 0x2000120, 0x3, 0x4, 0x5, 0x8000, 0xef, 0x6, 0x0, 0x401, 0x7, 0x80, 0x1, 0x8, 0x5, 0x6, 0x800, 0x746, 0x1, 0x62b, 0x3, 0x8, 0x1, 0x1, 0x10, 0x3ff, 0x4, 0x4, 0x2, 0x0, 0x3, 0x16f, 0xc2c, 0x0, 0x0, 0x5, 0x10000, 0xa000, 0xe116, 0x6, 0x40, 0x7, 0x167, 0x5, 0x8, 0x1, 0x100, 0x8, 0x0, 0x2, 0xdd, 0x81, 0xffff, 0x9, 0x6, 0xb, 0x4, 0x10001, 0x80000000, 0x2, 0xffcf, 0x7, 0x5, 0x6, 0x1, 0x1, 0x80000001, 0x5, 0xffff, 0x2, 0x8, 0x7, 0x9, 0x7f, 0xb, 0x4, 0x7168, 0xb, 0xffff19ce, 0x10000, 0x7f, 0xfffffe00, 0x8, 0x6, 0xdd2, 0x0, 0x0, 0x200, 0xffffffff, 0x9bb0, 0xfffffff8, 0x6, 0x3, 0x7, 0x0, 0x4, 0x4, 0x40, 0x6, 0x1, 0xe, 0xffffe87e, 0xb, 0xac9, 0x3cd9, 0x5d, 0x8, 0x3, 0xe, 0x4, 0x8, 0x1, 0x9d, 0x0, 0x80, 0x1, 0x8, 0x5, 0x8, 0x0, 0x5, 0x4, 0x2130, 0x9, 0x8f95, 0x1, 0x80000000, 0x5, 0x9133, 0xffffffff, 0x0, 0x4, 0x1, 0x4, 0xa5, 0x4, 0xffffffff, 0x1, 0xc24a, 0x9, 0xa05, 0x17, 0x7f91, 0x1, 0x8, 0x3, 0x1ff, 0x1, 0x430, 0x0, 0xffffff2e, 0x5, 0x1, 0x0, 0x4836]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xca9}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}]}}, @filter_kind_options=@f_fw={{0x7}, {0x1554, 0x2, [@TCA_FW_ACT={0x10b8, 0x4, [@m_skbmod={0x10b4, 0x12, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd, 0x9, 0x10000000, 0xf3, 0x3}, 0xf}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x5b12, 0x10000000, 0xc1}, 0xa}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x5, 0x4, 0x175f, 0x7}, 0x2}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FW_POLICE={0x428, 0x2, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x80000000, 0x6, 0xb, 0x438e, 0x8, 0x3, 0x3, 0x1, 0x0, 0x9, 0x2, 0x80, 0x8001, 0x1, 0x7, 0x9, 0xffffff7f, 0x7, 0x0, 0x3ff, 0x6, 0x6, 0x300, 0x3, 0x3, 0x0, 0xd4d, 0xd, 0xc, 0x6, 0x6, 0x7, 0x400, 0x7, 0x81, 0xff, 0x809b, 0x7469, 0xfffff801, 0x5, 0xe1d, 0x2b5, 0x0, 0x38ee, 0x7fffffff, 0x6, 0x8, 0x10000, 0x1, 0x7fffffff, 0xfffffffc, 0x1, 0x6172, 0x6, 0xf7, 0x5, 0x0, 0x9, 0x12, 0x9, 0x3, 0x8, 0x5, 0x6, 0x5, 0x9a32, 0x5, 0x5, 0x5, 0xd5, 0x7, 0x3, 0x2, 0x9d6000, 0x6, 0x97ec, 0x8, 0x40, 0x40, 0x6, 0x100, 0x3, 0x2, 0x822, 0x83, 0x800, 0x8, 0x800, 0x0, 0x9, 0x8, 0x9, 0x2d3, 0x3, 0xff, 0x4d1af7be, 0xf7e, 0x40, 0xa, 0x100, 0xb, 0x0, 0x4f, 0x13a, 0x1, 0x40, 0x1, 0x0, 0x6, 0x5, 0x8, 0x38, 0x5, 0x8, 0x7f, 0x2b, 0xffff, 0x8, 0x2, 0x5, 0x3, 0x9, 0x6, 0x4, 0xa37b, 0xff, 0x2, 0x3, 0x1, 0xfffffffc, 0xfffffff8, 0x401, 0x4f7, 0x4, 0x3, 0xfffffff9, 0xfffffff8, 0x80000001, 0x4, 0x4, 0x9, 0x4, 0x7, 0x0, 0x5, 0x9, 0x9, 0xd728, 0x4, 0x5, 0xc4d, 0x38000000, 0x6, 0x8, 0x4, 0x9a6, 0x484b6662, 0x5, 0x80000001, 0x97, 0xb, 0x4, 0x7, 0x3, 0x0, 0x610, 0x5, 0x3, 0x61, 0x3, 0xffffffff, 0xffffffff, 0x5, 0x2, 0x8, 0x80, 0x4, 0x9, 0x8, 0x0, 0x0, 0x4, 0x8dc8, 0xffff2365, 0x9, 0x6, 0x3, 0x2a8e0000, 0x46, 0x5, 0x7fff, 0xc, 0x7fff, 0xfff, 0x7, 0x1, 0xfff, 0x9, 0x4, 0x1, 0x3, 0x8, 0x5, 0x2, 0xff, 0x5, 0x7, 0x3, 0x2, 0x5, 0x6, 0x7db1, 0x34, 0x7fffffff, 0x5, 0x3, 0x3ff, 0x3ff, 0x4, 0x3, 0x4, 0xc, 0x9, 0x4, 0x589, 0xfffff801, 0xf, 0x95, 0x0, 0x1, 0x2f, 0x514f, 0x7fffffff, 0xb, 0x9, 0x0, 0x5, 0x4, 0x3, 0x7, 0x7, 0xffffff10, 0x2, 0x97ad, 0x7fffffff, 0x9, 0x9, 0x5, 0x53, 0x7, 0x8001, 0x250, 0x2, 0x5, 0x5]}]}, @TCA_FW_MASK={0x8, 0x5, 0x8332}, @TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xffe7}}, @TCA_FW_CLASSID={0x8, 0x1, {0x2}}, @TCA_FW_MASK={0x8, 0x5, 0xffff832e}, @TCA_FW_MASK={0x8, 0x5, 0xbd3}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x0, 0x7, 0x5, 0x10, {0x0, 0x0, 0x9, 0x8, 0x8, 0x9}, {0x72, 0x1, 0x8001, 0x2, 0xb, 0xfffffffd}, 0x3, 0x7ff, 0x2}}]}, @TCA_FW_MASK={0x8, 0x5, 0x101}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x1894, 0x2, [@TCA_CGROUP_POLICE={0xc6c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x10000000, 0x8, 0x7, 0x2d92, {0x3, 0x0, 0x44a9, 0x1, 0x7, 0xfffff87c}, {0x8, 0x1, 0x2, 0x6, 0x68, 0x8}, 0x8001, 0x44b1, 0x80}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0x3, 0x1, 0x40, 0xb122, 0x8, 0x9, 0x6, 0x6, 0x7, 0xffffffff, 0x5a46, 0x80000000, 0x0, 0x390, 0x0, 0x2, 0xb89, 0x40, 0x3, 0x2, 0xd5c, 0x9, 0x162, 0x1, 0x5, 0x7, 0x9, 0x0, 0xfffffff9, 0x4, 0x6, 0x3a7, 0x8000, 0x4, 0x1ff, 0x6, 0x4, 0x1, 0xfffffffa, 0xe, 0x1, 0x3, 0x0, 0x9, 0x2, 0x401, 0x80000000, 0x4, 0x40, 0x8, 0x0, 0xffffff0f, 0x100, 0xffffffff, 0x8, 0x1, 0x8, 0x9, 0x5, 0xfffff001, 0x324a6e54, 0xfffff923, 0x4, 0x237, 0xffffffff, 0x6, 0x2a1e, 0x4, 0x2, 0x6, 0x7, 0x8, 0x65, 0x400, 0x1, 0x6c4, 0x40, 0x2, 0x4, 0x544, 0x1, 0x4, 0x1, 0x5701, 0x1, 0x7, 0x3, 0x5, 0x8, 0xdbb9037e, 0x7, 0xfff, 0x7, 0x9, 0x0, 0xff, 0x7d, 0x7fffffff, 0x59, 0x8, 0x1000, 0x10001, 0x100, 0x0, 0x5, 0x3, 0x4d9, 0xe23, 0xa4, 0x5, 0x6, 0x8, 0x8001, 0x6, 0x4, 0x1, 0x0, 0x1, 0x1ff, 0x7, 0xfffffffb, 0x3, 0xfc, 0x8, 0xdd7d, 0x6, 0x4, 0x400, 0x9, 0x1, 0x4, 0x3, 0xfe52, 0xc, 0x9, 0x3, 0x7, 0x6, 0x2, 0xe1a, 0xd045, 0x7f, 0x0, 0x1, 0x3, 0x3, 0xa2, 0x81, 0x8, 0x7, 0x8, 0xff, 0x57, 0xbc17, 0x3, 0x3ff, 0x8, 0x6, 0x5, 0x0, 0x19e8, 0x8001, 0x5, 0x10, 0x4, 0x7c, 0x3f80, 0x4, 0x3, 0x9, 0x6, 0x53, 0x8, 0x7, 0x88c9, 0xffffffff, 0x10000, 0x8, 0x2, 0x9, 0x7, 0x4, 0x40, 0x9, 0x34f, 0x5, 0xae6, 0x400, 0x41, 0x8, 0xe9b, 0x200, 0x0, 0x100, 0xa4b, 0x2, 0x4000, 0x5, 0x3a, 0x8, 0x6, 0xd2c, 0xffffff01, 0x8, 0x9, 0xffffffc0, 0x5, 0x4, 0x3, 0x3, 0x0, 0x200, 0xfffffff5, 0x2, 0x4, 0xfffffffe, 0x9, 0x0, 0x415, 0x8, 0x4, 0x494, 0x8, 0x13d97bd2, 0x8, 0x1, 0x9, 0xb681, 0x10001, 0x7, 0x10000, 0x6, 0xffff8000, 0x1, 0x100, 0x1, 0xf7, 0x3, 0xf, 0x7, 0x3, 0x3, 0x7, 0x5, 0x800, 0xd35b, 0x5, 0x10, 0xfffffffc, 0x100, 0xf7, 0x9, 0x3, 0x0, 0x80000001]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0x1, 0x2, 0x1, 0x9, 0x3, 0x6, 0x2, 0xfffffffa, 0x40, 0x3, 0x800, 0x9, 0x80000000, 0x1, 0x8, 0x0, 0x7, 0xbd, 0x10000, 0x9, 0x5, 0x8, 0x100, 0x0, 0x8, 0x7fffffff, 0xffffffff, 0x1, 0xfa9f, 0x8, 0x400, 0xbe, 0x5, 0xe2b, 0x8, 0x1, 0xf91, 0x4, 0x800, 0x6, 0x9, 0x6, 0x93, 0x8, 0xb2c, 0x0, 0xfffffff7, 0x3, 0x5, 0x4, 0xf96f, 0x10001, 0x8000, 0x9, 0xfffffff6, 0x0, 0xb9e1, 0x101, 0x400, 0xe, 0x7, 0x5, 0x5, 0x7f, 0x3, 0x1, 0xffffff00, 0x80, 0x8, 0x1, 0x1, 0x7, 0x200, 0x9, 0x8, 0x9222, 0x6, 0x8, 0xfff, 0x9, 0x0, 0x10001, 0x0, 0x3a01, 0x7, 0x6, 0x5, 0x7fffffff, 0x3, 0x7, 0x2c, 0xffff, 0x0, 0xfffffff7, 0xe, 0x4, 0x24, 0x9, 0x7a9e, 0x4, 0x7fff, 0x25, 0x0, 0x7fff, 0xc90, 0xff, 0x15, 0x2, 0x9, 0x1, 0x8, 0x6, 0x2, 0x2, 0x100, 0x8, 0x400, 0xf71, 0x8, 0x2, 0x816, 0x3, 0x0, 0x4, 0xb6b, 0x3, 0x5, 0x5, 0x3, 0xa1ec, 0x1, 0x6, 0x0, 0x3, 0x3, 0x9, 0x7, 0x0, 0x9, 0x8, 0xd5, 0x0, 0x8000, 0x4, 0x2, 0x6, 0xfe, 0x1ffe00, 0x9, 0xbdb, 0x7, 0x6, 0x1, 0x4, 0xfffffff7, 0x7fff, 0x7, 0x5, 0xfffffffb, 0x6c, 0xc1, 0x8, 0x8, 0x6, 0xffffffff, 0x6, 0xffffff5f, 0xffffffff, 0x80000000, 0x5, 0x1ff, 0xfb, 0x10000, 0xcd8, 0x6, 0x8, 0x6, 0x0, 0xffffffff, 0x9, 0xe62, 0x2, 0x1, 0xffffffff, 0xfffffff4, 0x6, 0x6, 0x8, 0x10, 0x8, 0x7, 0x96b, 0xfffffffb, 0xffffffff, 0x7fff, 0x4, 0x7, 0x1000, 0xfffffff8, 0x3, 0x40, 0x2, 0xf, 0x7, 0x9, 0x3, 0x10, 0x8, 0x4, 0x81, 0x8, 0x6, 0x0, 0x7, 0x4, 0x401, 0xbb, 0xa8, 0x100, 0x5, 0x5, 0xab, 0x200, 0x3, 0x6, 0x3, 0x80000000, 0xffffff7f, 0x1, 0x30, 0x3, 0xb53, 0x7, 0xf3, 0x8, 0x0, 0x10, 0xef8, 0x37, 0xa0, 0x6, 0x9, 0x3, 0xfffffffc, 0xfff, 0x1ff, 0x2, 0x6, 0x4, 0x4, 0x39f, 0x10c88, 0x7, 0x8, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0xb, 0x2, 0x1, 0x400, 0xfffff9c5, 0x0, 0x1, 0x7ff, 0x8, 0x2, 0x9, 0x6, 0x80000001, 0x7, 0x1, 0x3, 0x125b, 0x4, 0x3, 0x8001, 0x6, 0x7ff, 0x7, 0x0, 0x0, 0xffffffff, 0x7dad854a, 0x11, 0x7, 0xffff, 0xfffffe00, 0x5, 0x5, 0x7, 0xffff, 0x1000, 0x5, 0x8a91, 0x6, 0x33b2, 0xfffffffe, 0x10, 0x100, 0x3, 0x6, 0x8, 0x401, 0xffff, 0x0, 0x72, 0x9, 0x80000000, 0x6, 0x9, 0x4, 0x3, 0x5, 0x1, 0x440204a, 0x4, 0x7fff, 0x97, 0x4, 0x3, 0x0, 0x7, 0x4, 0x1, 0x6, 0x200, 0x101, 0x8, 0xc, 0x0, 0x6aadf7b8, 0x0, 0x2, 0x8, 0xddb, 0xfffffffc, 0x80, 0x1000000, 0x3, 0xc3, 0x1, 0x2, 0xc6, 0xee0b, 0xffff, 0x10, 0x7, 0xc789, 0x9, 0x1, 0x1, 0x9, 0x100, 0xc04d, 0x4, 0x1, 0x856, 0xfffffff6, 0x7, 0x6, 0x0, 0xd, 0xfffffbff, 0xfff, 0x0, 0x2, 0xea, 0x8, 0x3, 0x0, 0xa3f8, 0x5, 0xffffffff, 0x0, 0x4, 0x94a, 0x0, 0x7ff, 0x5, 0x168a, 0x4, 0x3, 0x7ff, 0x9, 0xb3c6, 0xff, 0xffffffff, 0x0, 0x356, 0x8, 0x4, 0xd8f, 0x1600000, 0xc, 0xb, 0x5, 0x0, 0x7, 0x8, 0x9, 0xe, 0xffff, 0x1, 0xfff, 0xfffff800, 0x5, 0x3, 0x8, 0x2, 0x88c, 0x1, 0x0, 0x9, 0xd, 0x100, 0x21, 0x4, 0xf, 0x7f, 0x800, 0xffff, 0xffff, 0x100, 0x4, 0x2, 0xf96d, 0x2, 0x1, 0x10000, 0x6, 0x6, 0xfff, 0xce5e, 0x3, 0xfffffffc, 0x2, 0x1, 0x0, 0x3, 0x7, 0x1, 0x0, 0x3, 0x1513, 0x1, 0x24f, 0x2, 0x5, 0x4, 0x7, 0x9, 0x6, 0x8, 0x36de2b2, 0xfff, 0x800, 0x0, 0x1000, 0x0, 0x880a, 0xb2, 0x7, 0x10000, 0x4, 0x7, 0x1000, 0x3d7, 0x7, 0x75538f7a, 0x9, 0x0, 0x4, 0x4, 0x4, 0xf, 0xfffffffd, 0x2, 0xffba, 0x30cd, 0x5, 0x8, 0x9, 0x1, 0x4, 0x5, 0x8a4d, 0x8, 0x7fff, 0x0, 0x8, 0x200, 0x3, 0xe, 0x2, 0x4, 0x7, 0x4, 0x2, 0x3, 0x9, 0x366, 0x879e, 0x9, 0x9, 0x7, 0x0, 0x8, 0x9, 0xfffff801, 0x6e79, 0x5]}]}, @TCA_CGROUP_POLICE={0xc24, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0xde, 0x0, 0xe, 0x3e, 0x9, 0x4, 0x9, 0x6, 0x3, 0x8, 0x9, 0x6, 0x1067, 0x8, 0x6, 0xfffffffc, 0x3, 0x1800, 0x1, 0x0, 0x5, 0x59, 0x7fffffff, 0x27, 0x80000000, 0xb, 0x45491fc, 0x10, 0x5, 0x39, 0x1, 0xffffff42, 0x4, 0x80000000, 0xfffffff9, 0x0, 0x7, 0x6e, 0xab, 0x2, 0x5000, 0x100, 0x40, 0x579, 0x8, 0xfffffff3, 0x294e, 0x5, 0x90000000, 0x2, 0x6, 0x9, 0x8, 0x401, 0x200, 0x6, 0x2, 0x3, 0xaf, 0xffffffff, 0x5, 0x200, 0x1, 0x9, 0xbc25, 0x7, 0x6, 0x3180, 0x400, 0xf, 0x8, 0x9, 0x7, 0x7, 0x3, 0xe2a, 0x8000, 0x4, 0x6, 0x8, 0x1a4000, 0x8000, 0xcee, 0xb, 0x58, 0x6, 0x3337a5fa, 0x1000, 0x3, 0x6, 0x0, 0xf6, 0x26a0, 0x8000, 0x1, 0xffff, 0x8, 0x0, 0x8, 0xfffffffb, 0x0, 0x67e, 0x0, 0x400, 0x1, 0x3, 0x5, 0x7, 0xffffffff, 0x1, 0x80000001, 0x4, 0x2, 0x4, 0x24, 0x36fa1647, 0x5342, 0x1, 0x2, 0x7, 0x2, 0x40a00000, 0xfffffff2, 0x3, 0x2, 0x5, 0xffffffff, 0x0, 0x8, 0xa, 0x7ff, 0x1000000, 0x3a, 0xc8, 0x5, 0x1, 0x1, 0x9, 0x6, 0x6, 0x400, 0xffff, 0x1, 0x2dd, 0x3, 0x9, 0x3d7af9ff, 0xfffffffb, 0x9, 0x0, 0x9, 0x4, 0xc, 0x1000, 0xe6d, 0x4, 0xe7, 0x0, 0x0, 0x5, 0x101, 0x1f2470e7, 0xa1eb00, 0xc, 0x8, 0xadf7, 0x400, 0x10000, 0x80, 0x8001, 0x1, 0x3, 0x2, 0x6, 0xffffff9b, 0x9, 0x0, 0x7, 0x8, 0x7, 0x3, 0x8, 0x3, 0x8c, 0x5, 0x9, 0x0, 0x2, 0x3, 0x8, 0x4, 0x2, 0x6090, 0xb5, 0x8, 0x0, 0x401, 0x10, 0xd, 0x2f1, 0x40000, 0x4, 0x1, 0x1, 0x10, 0x4, 0x1, 0x10, 0x1, 0x6, 0x5, 0x80000000, 0x177ef864, 0xa3b, 0x0, 0x8, 0x3ff, 0xffffffff, 0x400, 0xa, 0x2, 0x8, 0xf, 0x5, 0x7, 0x3, 0x18000, 0xf, 0x80, 0x5, 0x7, 0x4, 0x9, 0x9, 0x2, 0x9, 0xa7f, 0x1, 0x7, 0x3, 0x10001, 0x4, 0x156, 0x10000, 0x4, 0x4, 0x200, 0xff, 0xffff, 0x3, 0xfffff7a0, 0xffff, 0x1, 0x5, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf7cc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x2, 0xa8, 0x7, 0x7, 0x70, 0x1, 0x2, 0xbdf4, 0xc64, 0x6, 0x0, 0x2, 0xf, 0x9, 0x0, 0xf60, 0x52, 0x0, 0x2, 0x6, 0x80000001, 0x7, 0x9, 0x1, 0x9, 0x1, 0x100, 0x6, 0xb724, 0x7, 0x7, 0xe, 0x20000000, 0x2, 0x5, 0x101, 0x5, 0x6f47, 0x101, 0x6, 0x401, 0x3, 0x2, 0x7, 0xfffffe00, 0x8, 0x0, 0x5bb, 0x401, 0x1, 0x3, 0x7, 0x2, 0x80000000, 0xb, 0x4, 0x7, 0x3, 0xd4cb, 0x81, 0x7, 0x4, 0x6a7, 0x1, 0x1, 0x33a, 0x3, 0x0, 0x9, 0x2, 0x2, 0xffffffff, 0x6, 0x8, 0x6, 0x7, 0x3, 0xc, 0x8, 0x1ef, 0xce6, 0x9, 0xd, 0x1, 0xfff, 0x0, 0x0, 0x5, 0x40, 0x5, 0x3, 0x6, 0x3a5be923, 0x3a0a, 0x7, 0x8, 0x7000, 0x7, 0xd, 0xc2, 0xcd5, 0x1000, 0xa689, 0x8, 0xe, 0x400, 0x7, 0x3, 0xf, 0x10040000, 0x3, 0x4, 0x7fff, 0x6, 0x1, 0xd, 0x7, 0x80000001, 0x8001, 0x8, 0xb, 0xfffffffd, 0xd70, 0x9, 0x1, 0x8, 0x3ff, 0x9, 0x1, 0x10, 0x0, 0x3, 0x7ff, 0xf9, 0x8, 0xa3, 0x5, 0xc, 0x8, 0x400, 0x2e9f, 0x7, 0x1, 0x0, 0x6, 0x1, 0x4, 0x6, 0x2, 0x1, 0x1, 0xafd, 0x6, 0x6, 0x10001, 0x3, 0x50, 0x80000001, 0x400, 0x8, 0x5, 0x3f0000, 0x6ef7, 0x0, 0xbe8, 0x3, 0x5, 0x5, 0x8001, 0x5, 0x4, 0x200, 0x4, 0x9, 0x9, 0x5, 0x8, 0x3, 0xa4, 0x502, 0xa, 0xb, 0x3ff, 0xfffffff7, 0x200, 0x71, 0x7, 0x4, 0x3, 0x1, 0x3, 0xc, 0x0, 0x8, 0x5, 0x9, 0x8, 0xbaf7, 0x10001, 0x7, 0x2, 0x7, 0x1a, 0xb9ac, 0x2, 0x2, 0x8, 0x24, 0x7, 0x0, 0x7, 0x8, 0x0, 0x4, 0xffff, 0x2867, 0xd3800000, 0xffff8000, 0x5, 0x7, 0xe14f, 0x2, 0x4, 0x5, 0x2, 0x9, 0x9, 0x7fffffff, 0x6588ae29, 0x1, 0x9, 0x4, 0x8, 0x1, 0x31, 0xcae, 0xc, 0x2, 0x7, 0x6, 0x9, 0x8, 0x7, 0x4a, 0x0, 0x1800, 0x2, 0xd85, 0x554, 0x3, 0x1, 0x10, 0x5, 0x8, 0x5c]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x6, 0x3, 0x3, 0x40, 0x74, 0x93, 0x4, 0x5, 0xc8, 0x4, 0x2bc34835, 0x7, 0x2, 0x8001, 0x1, 0x6, 0x8, 0x200, 0x400, 0x2, 0xfffeffff, 0x1349, 0x1, 0x0, 0x302, 0x9, 0x3, 0x80000000, 0x8, 0x5822, 0x2, 0xcb, 0x200, 0x840a, 0x5, 0x3, 0x4ec, 0xd, 0x80, 0x8, 0x42, 0x0, 0x2, 0x5, 0x4, 0xe, 0x200, 0x5, 0x7fffffff, 0x5, 0x26, 0x3, 0xa8b, 0x0, 0x10000, 0x40, 0x8, 0x401, 0x9, 0x6, 0x71, 0x5, 0x0, 0x9, 0x0, 0x4, 0x8e, 0x1ff, 0x9, 0x8001, 0xb, 0x10001, 0xac, 0x46, 0x10, 0xfffffff1, 0x1000, 0xffffff81, 0x1, 0x5, 0x32, 0xcd11, 0xff, 0x9, 0x7ff, 0x6a4, 0x8001, 0x9, 0xf, 0x6, 0x7, 0x6, 0x3, 0xf, 0xe174, 0x6, 0x1, 0x5, 0x4, 0x8001, 0x1, 0x6, 0x0, 0x9, 0x1, 0x40, 0x3b5, 0x400, 0x6, 0x0, 0x8, 0xf6e, 0xfffffffe, 0xfffffffd, 0x0, 0x400, 0x4, 0x400, 0x0, 0x9bbb, 0x6, 0x8000, 0x7fff, 0x7, 0x1, 0xd, 0x80, 0xfffffffc, 0x2, 0x6, 0x0, 0x3, 0x8, 0x4aac2ab2, 0x0, 0x7, 0x2, 0x80000001, 0x1, 0x81, 0x401, 0x5, 0x800, 0x71e9, 0xc, 0x9, 0x10000, 0x9, 0x5, 0x1, 0xffffffff, 0xff, 0x9d, 0x3ff, 0xffffffff, 0x5, 0x9, 0x4, 0x2, 0x5, 0x8, 0x10001, 0xffffffff, 0x2, 0x9, 0x9, 0x4, 0x7, 0x9, 0x2, 0x1ff, 0x1fc, 0x1ff, 0x3, 0x3ff, 0x9, 0x5, 0x3ff, 0x1, 0x3, 0x9, 0x97a, 0x4, 0x1, 0x6, 0x7, 0x7fffffff, 0x2, 0x6, 0x81, 0x2, 0x7, 0x7, 0x8000, 0x5, 0x850, 0x3, 0x5, 0x3, 0x3, 0x2, 0x0, 0x5c56, 0x9, 0xffffff7f, 0x4d4, 0x2ccd, 0x9833, 0x9, 0x6, 0x8000, 0x8000, 0x8, 0x9, 0x0, 0x26, 0x9, 0x8, 0x6ed, 0x80000000, 0x8, 0xfff, 0x6, 0x400, 0x7, 0x1, 0x3ff, 0x0, 0x68fd5903, 0x9, 0x3, 0xbe, 0x4, 0xfffffffb, 0x10000, 0x2, 0x800, 0xa, 0x1, 0x101, 0xeb3a, 0x8, 0xa, 0x9, 0x3, 0xa, 0xff, 0x80000001, 0x2, 0x63d, 0x9, 0xf, 0x5, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]}]}}]}, 0x367c}, 0x1, 0x0, 0x0, 0x80}, 0xc040) r12 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) sendfile(r12, r12, 0x0, 0x200000) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) 26m49.908233717s ago: executing program 0 (id=158): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x1, 0x40) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x1c4, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc}, {0xc, 0x90, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8000}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0xfffffffffffffff9}, {0xc, 0x90, 0x7ff}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x63}, {0xc, 0x90, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x340d}, {0xc, 0x90, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0xf0}, {0xc, 0x90, 0x80000000}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4008010}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00300000000000005400128009000100766c616e000000004400028006000100000000000600050081000000280003803900010006000000090000000c00010000040000000000008dff010040000000060000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="080005"], 0x84}, 0x1, 0xba01}, 0x0) 26m49.361534118s ago: executing program 0 (id=160): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x5, &(0x7f0000000040)=0x24, 0x5) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) syz_clone(0xc0086300, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000080)='./file2\x00', 0x0, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 26m46.612361097s ago: executing program 0 (id=174): r0 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26, 0x0, 0x3, 0x3, 0x10000}, 0x28) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000080)=[{&(0x7f0000000500)='|', 0x1}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000180)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000130000000018c65800", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x6, 0xa1, &(0x7f0000000400)=""/161, 0x40f00, 0x19, '\x00', r5, 0x1b, r3, 0x8, &(0x7f0000000380)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x8, 0xb, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000006c0)=[0x1, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x3, 0xffffffbf, 0xa}, {0x2, 0x2, 0xe, 0x8}, {0x2, 0x5, 0xe, 0xc}, {0x3, 0x1, 0xa, 0x4}, {0x5, 0x2, 0x5, 0x2}, {0x4, 0x4, 0xd, 0x4}, {0x0, 0x1, 0xd, 0x6}, {0x1, 0x4, 0x1, 0x3}, {0x2, 0x2, 0x8000d, 0x9}], 0x10, 0x731}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001500)="130000004e007f049e3ab018a75ab611b87647", 0x13}], 0x1}, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) socket$kcm(0x2, 0x922000000005, 0x106) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r10, 0x5407, &(0x7f0000000040)={0x4, 0x5, 0x7, 0xdedb, 0xe, "00000000c89cefe0"}) listen(0xffffffffffffffff, 0x100) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) shutdown(0xffffffffffffffff, 0x0) ioctl$TIOCMSET(r10, 0x5418, &(0x7f0000000000)=0x8001) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000099447740970401c07a55010203010902120001440000000904dc01000ec41d01efca6fae8cf7d8fe3a76516bba5b9d556cf756be6a9094dfd65841a179aa228d349451c3712112a246e7c9c1999a35151f564173e99b3956e74e923ec59b3f192e8eaec6dc8b2c98bddfebca13918cebf397b9e1ed37d73cb1ff1f66569e63dc3be5664a766c2668e13c54a2fe9a5d19"], 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 26m45.68545501s ago: executing program 0 (id=176): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0xf) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f000000a880)={&(0x7f000000a7c0)={0x20, r7, 0x201, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048091}, 0x80) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 26m45.10310448s ago: executing program 32 (id=176): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0xf) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f000000a880)={&(0x7f000000a7c0)={0x20, r7, 0x201, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048091}, 0x80) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 22m29.897437623s ago: executing program 1 (id=1247): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') mq_notify(r0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x2a, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) 22m29.877181338s ago: executing program 1 (id=1248): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)={0x24, 0x26, 0x1, 0x70bd25, 0x25dfdbff, "", [@nested={0x11, 0x78, 0x0, 0x1, [@typed={0x6, 0x72, 0x0, 0x0, @str=':\x00'}, @nested={0x4, 0xbc}, @generic='[']}]}, 0x24}], 0x1}, 0x4008800) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x840, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x814, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x100}, @TCA_TBF_PTAB={0x404, 0x3, [0x16cc89b4, 0x200, 0x80, 0x10, 0x80000000, 0x4, 0x2, 0xffff6576, 0xd6a6, 0x9, 0x6, 0x9, 0x8, 0x1d, 0x3, 0x81, 0x7, 0x8, 0x8, 0x3f, 0x7, 0xfffffff7, 0x7fffffff, 0x1, 0x10001, 0xfffffff6, 0x5, 0x0, 0x80000001, 0x2, 0x1, 0x7, 0xb, 0x7, 0x0, 0x9bc100, 0x7, 0x999, 0x6, 0x4, 0xfe, 0x3, 0x8c1, 0xffff, 0x1, 0x9fc, 0x7fffffff, 0x2, 0x8, 0x4, 0x10000, 0x200, 0xe, 0x1, 0x0, 0x40, 0x7, 0xa5d8, 0x4, 0x6, 0x7000000, 0x3, 0x9, 0x4, 0x9, 0x0, 0x6, 0x9, 0x4, 0x80, 0x8, 0x10001, 0x6, 0x8, 0x200, 0x0, 0x7, 0x9, 0xffffffff, 0x100, 0x5, 0xff6, 0x35, 0x53, 0x7fffffff, 0x80000000, 0x200, 0x480000, 0x4, 0xfff, 0x6fd, 0x4, 0x3d4a3d97, 0xd4, 0x56, 0x7, 0x392a, 0x2, 0x2, 0x7, 0xe6, 0x7, 0x6, 0x8, 0xffff1362, 0x7, 0xe47a, 0x6, 0x6, 0x5, 0x9000000, 0x3, 0xc7, 0x708, 0x3, 0x0, 0x10, 0x9, 0x2, 0xd0, 0x1000, 0xf4, 0x432, 0x1ff, 0x401, 0x5, 0x97b2, 0x0, 0x1, 0x7, 0x6fa0, 0x1, 0xdc, 0x10001, 0x9, 0x6, 0x1cd7, 0x6, 0xfffffffd, 0x1, 0x1, 0x9, 0xc, 0x1, 0x10, 0x747, 0x2, 0xffffff25, 0x7, 0x2, 0x97, 0x3, 0x7de8, 0x2, 0x6, 0x5, 0x3, 0x10000, 0x0, 0xf, 0x101, 0x2, 0x200, 0x4, 0x1, 0x3, 0x4, 0x4, 0x1c000000, 0x9, 0x200, 0x3, 0xc, 0xb, 0x9, 0x8000, 0x101, 0x8, 0x0, 0x2, 0x7, 0x6ac, 0x5, 0x1, 0x8, 0x101, 0x1, 0x65, 0xfffffff6, 0x0, 0x9, 0x401, 0x0, 0x3, 0x3744, 0x28, 0x2, 0x7, 0xfff, 0x0, 0x563d, 0x7, 0x8, 0x6, 0xb6, 0x8, 0x6, 0x4d, 0x7fff, 0xff, 0x2, 0x4, 0x3, 0x7, 0x3, 0x8, 0x2, 0xff, 0x0, 0x1, 0x2, 0x3, 0x4, 0x5, 0x4, 0x0, 0x8, 0xd, 0xe, 0x2, 0x4, 0x6, 0x4, 0x1, 0x401, 0x2, 0x5, 0xfff, 0x96b4, 0x2, 0x92ed36b9, 0x8000, 0x40, 0x4, 0x9, 0x9, 0x0, 0x0, 0xf4, 0x5, 0x0, 0x7, 0x7, 0x2, 0x9f14, 0x2]}, @TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x0, 0x5, 0x401, 0x0, 0x9, 0x18, 0x1, 0x80, 0x7000000, 0x5, 0x8, 0x9, 0x8, 0xd8c, 0x10f8000, 0x1, 0x4, 0x6, 0xf, 0x7ff, 0x1, 0x88d, 0x8, 0xfffffff9, 0x7, 0x6, 0x7f, 0x4, 0xc824, 0x4, 0xe3, 0x6, 0x0, 0xe, 0x7, 0xe, 0x101, 0xf, 0x0, 0x7, 0x8, 0x6, 0x4, 0x3, 0x7ff, 0xe55, 0x5, 0x4b19, 0x8, 0x8, 0xc5c, 0x9, 0x3, 0x5, 0x8001, 0xfffffff8, 0x9, 0x5, 0x9, 0x2, 0x8, 0xfffffffa, 0xfffffff7, 0x1, 0x6a41, 0xffffffff, 0xf, 0x4, 0x3ff, 0x7f, 0x3, 0x81, 0x10, 0x3, 0x400, 0x9, 0x7ff, 0x5, 0x40, 0x2, 0x2e, 0x0, 0x1, 0x5, 0xcf9, 0x2, 0x0, 0x4, 0x4, 0x4, 0x4, 0x3, 0x7ff, 0x5, 0xfffffffc, 0x3, 0x2, 0x6, 0xa5, 0xfffff000, 0x2, 0x6, 0x1, 0x8, 0x80000000, 0x800, 0x9, 0x6, 0x2, 0x0, 0x80, 0x3, 0xfffffffd, 0xfff, 0x7f, 0x7, 0x2, 0x7, 0x1, 0x89c, 0x9fae562, 0x6, 0x5, 0xff, 0x7, 0x401, 0x1, 0x6, 0x9, 0x7, 0x3ff, 0x800, 0x2, 0x3, 0x6, 0xc71, 0x81, 0x80000000, 0x3ff, 0x8, 0x7, 0x2, 0x7, 0x200, 0x2, 0x7, 0x8000, 0xe265, 0x7fffffff, 0x0, 0x0, 0x2e, 0xc, 0x7, 0x0, 0xc88f, 0x2, 0xffffffff, 0x6, 0x5, 0x8000, 0xe, 0xfffffff9, 0x6, 0x8, 0x990, 0x800, 0x5, 0x7, 0x1, 0xfffffffa, 0xb, 0x9, 0x2, 0x7ff, 0x8000, 0x5, 0x1, 0x10000, 0xd41b, 0x128b5072, 0xf, 0x4, 0xf918, 0x7f, 0x3, 0x8, 0x2, 0x0, 0x0, 0xff, 0xb, 0x4, 0x96a3, 0x1, 0x8001, 0x7, 0x4, 0x1, 0x9, 0x6, 0x1, 0x3, 0x5, 0x631, 0x8001, 0x3, 0x10001, 0x44c, 0x5827, 0xa99, 0x3, 0x400, 0x0, 0x8, 0x7, 0x10000000, 0x3, 0x3, 0x0, 0x1d99, 0x3, 0x4, 0x0, 0xb78b, 0x1, 0x3, 0x10000000, 0x7, 0x8, 0x4, 0x9, 0x7, 0x4, 0x5, 0x7, 0x0, 0xfffffff9, 0xffff, 0x81, 0x9, 0x6, 0x3, 0x19f2, 0x3, 0xe, 0x4259, 0x7, 0x3, 0x81, 0x58783dd6, 0xed2, 0x5, 0x5, 0x9]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x108, &(0x7f00000003c0)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x20}}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) r8 = syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r9, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r9, 0x3b89, &(0x7f00000002c0)={0x28, 0x3, r10, r11, 0x0, 0x0, 0xdead, 0x40, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r11, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f00000000c0)={0x18, r11}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r12, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x37b8c5443189e459) syz_usb_control_io(r8, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r14 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r14, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1b, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25ff02000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r14, 0x84, 0x3, &(0x7f0000000480)=0x2, 0x4) socket$kcm(0x2, 0xa, 0x2) 22m28.749570016s ago: executing program 1 (id=1253): syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000440)={0x14, &(0x7f0000000340)={0x40, 0x3, 0xa4, {0xa4, 0xa, "3ab4ee20cc964bfbb89033e37e5be1af845fb174e314bb5ada442521fdb3459c3b1d9663e8d697c0e9aaf0964a71babd7b38068ee83c738c1fda2e326b0dd0e95e9c2db5af5f6661e6d38ff42d4df00592b09e8592b25895b87fa6399b6818dbb0428b4a1df43ffc981695f34b51c9b05929a642db7f0209c3ae5e4b67e062581bc2b99c8a3e4c76ecaf1771fc822733a03d23161821ce12d75992d1e1550e8c3b08"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}}, &(0x7f0000000700)={0x44, &(0x7f0000000480)={0x0, 0x17, 0x89, "6113e1587591c44c97098ebe44a2b5d0edc55c02e824c33a2fe21443c2d9854636115a031780088a4f0eaca6ee61fab0b8c678760646c310ef28b34d25fbbe5a53e3f491b0ac3c2e07e0f438d2516a6c355fe2fda460987087b227f9433f720f092402d5b9414c863ce4d4adc860ba2703a505ecd61979e690ad6bfb7a295fd1898126d1e689b186be"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000005c0)={0x20, 0x81, 0x3, "7eb965"}, &(0x7f0000000600)={0x20, 0x82, 0x2, "e1e9"}, &(0x7f0000000640)={0x20, 0x83, 0x1, "98"}, &(0x7f0000000680)={0x20, 0x84, 0x3, "eaef08"}, &(0x7f00000006c0)={0x20, 0x85, 0x3, "4b8225"}}) syz_usb_connect(0x0, 0x48, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000183b9220b11342002b58010203010902360002000000000904ca57b67a8bb50009050200ff"], 0x0) 22m27.113510925s ago: executing program 1 (id=1265): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) getgroups(0x1, &(0x7f0000000100)=[0x0]) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r1}}, 0x4, 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x401, 0xc0002) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) 22m26.953575628s ago: executing program 1 (id=1267): io_setup(0xb0, &(0x7f0000000200)=0x0) (async) r1 = syz_open_dev$video4linux(&(0x7f0000000280), 0xffffffffffffffff, 0x181800) io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x2, 0x2}}, 0x20) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="28400103"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22m25.459023244s ago: executing program 1 (id=1274): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000380)=0xe) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x80015b1a, 0x0) 22m25.205308405s ago: executing program 33 (id=1274): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000380)=0xe) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x80015b1a, 0x0) 11m44.475043877s ago: executing program 2 (id=4554): r0 = socket(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003}) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x1, 0x80140) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x42, 0x9, 0x80000, 0xfffffff, {0x3}}, 0x14}}, 0x0) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) (async) mq_open(&(0x7f00000000c0)='&\x00', 0x40, 0x104, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000000101040008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) 11m44.381832033s ago: executing program 2 (id=4555): r0 = syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000040)={0x40, 0xa, 0xdf, {0xdf, 0xb, "51aa3cf8ecdef7e363f3d1d838ec6d833601f63903c4d88d322e091191ee9ddbb4f77fa6577c60f19f88006d2256befa378e664930874f93e54cd3bae7f65e6367aa227026cb3a66af5a0232c07b37c56e0b5cd5f9eb3f5454be2bc65f0f4afe24967a7f28ef6f548af6416f87482e1ff119681a41fdabe8efd7b01583a24a24ae8b00d3d218caf10f63ae3b0a6e581b231e71b5a537b671ea3bfacadef08e71330553f5ac8d4425529805c5b37fa30a902ec2bc0d2bb0c7a021a4fd2f60abd5348724961a2ade07086de7ef951f7ead8d2979cfea465bc311d6f806ad"}}, &(0x7f0000000140)={0x0, 0x3, 0xbf, @string={0xbf, 0x3, "bd1580bcfc844b4db69669ead33299f0452df6e5cec2541490e502ed63f4902a949fa99967b949bfb1350f3445879f3a70982d5a4fce9bf98526cb2a631a12295230a437146fbb83e560f8c63f754257933c7b4326c183dbb1214436c508f97a45ba42edf02f2d2b09160b1175fc6ffc33ce279f725a8c8868abcbb8dd9a27264f2c7899524cde54ef0b8e871833a2b747cb587f79ddc72148493df29f35603761ca950f4b46fd33a830a3172ef294c41678e91938c70baa275617a59d"}}, &(0x7f0000000240)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x18, 0x81, 0x35, "161c1663", "fe0242d8"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x4, 0x8, 0xf, 0x8, 0x585, 0x8}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x40, 0x6, 0xae, "7756ebaaa087c05e3a0147981ec2a0cb59959803d59d229a15fa208465a5413f56fc86391fc9db9d8021de529c43146e88b28d5f5c43284f4b7b16a72e279935b64629a44b9900e1cdcd281a6505e63594eccab243ecc7d63f8afe052124a1affda793c7a6abf420ad1e82d64e5d61a098393c139c1d5f53f05027857ae76580f92b63cc2b215d9f48b8701965c78e6a9ffbedd7c4c7819252e5a23093d1ed9026027b959cb7353c44237fe8210d"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x90}, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x120, 0x2, [0x880]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xfff9}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0xea}, &(0x7f0000000580)={0x40, 0xb, 0x2, "73e5"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "1eac"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x68}}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000980)={0x14, &(0x7f0000000880)={0x0, 0x5, 0xa4, {0xa4, 0xf, "dbe4f028944ac20e8f72fc8c1958a80b48ff62f5e5be021f8979c29491c6f7c69b907c2ff5ebe923f8e15bddd78c716fa64348c5d35ab1e4422f32011744227afded1ecfd4832ccbfc534e3dee4e048a05bfe20860475e4739a1a524bf5dd9e26e79f3f517e8d3a06403e7510982c37f4215d05c9de8f9a19cfeeb92cf855cdcb77e0c7089b8a8a0b0e99231de4d30abb3a34a887c834a9b3ae84c14b2d180557b9f"}}, &(0x7f0000000940)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x40, 0x14, 0xb0, "f2d1cfad22658644ccf602734eef1e5aeb3bd8eeb81f81dc348afe0cda7f5716862c2ff5c086a4fc4b7bea09765551260c29bc6b62229ed76586a6ec54db00ed9fa77c3ea7be06a11cf03029c3e8111a307016da79f8d1a28dee875a015de7cd60a94cd7d9582ffe38c57ac5fcf0aae86d36580b34194954f001f90e34ae3fcfc0447fbbfbb6f80072a26b902ba9ed0612b0ae6a7b4efcdcb4c443594f8962e4420bde585bb092663d9a7fa1adee0aa1"}, &(0x7f0000000a80)={0x0, 0xa, 0x1}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000b00)={0xc0, 0x5, 0x6, "f9dc4d7dbf6a"}, &(0x7f0000000b40)={0x40, 0x5, 0x2, "e0c1"}}) syz_emit_ethernet(0x9b, &(0x7f0000000bc0)={@broadcast, @multicast, @void, {@generic={0x6, "cc69d22a50e1dcc485af90313e81d2381e32eefd7d76fe07136d72511938c69505af976e88ed42d5445e0d5546b9f27cc890737918d34a42be1cbc811019825b70fcfb41bd8a43f9464039ee95e16a4166f81229a9e1d9522a8cccd24d3d0cf131f506876b73f2bfc34bdd166574683f959d2ea41dd74c00d511148a5777149ef67d354d81a572793db84588b9"}}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000cc0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000c80)="49781eaca6519b5155e7caea0f48e27f03a2d3c9a3b5871d32717f051c67c63787b7d4e5c57076a1", 0x28}, 0x68) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000d40)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x6) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) r1 = syz_usb_connect$uac1(0x6, 0x10a, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf8, 0x3, 0x1, 0x1, 0x50, 0xe, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfffb, 0xa0}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x206, 0x1, 0x0, 0x40, 0x3, 0x3}, @mixer_unit={0x8, 0x24, 0x4, 0x5, 0x7, "bc5069"}, @mixer_unit={0xa, 0x24, 0x4, 0x6, 0x9, "7a58d68112"}, @mixer_unit={0x7, 0x24, 0x4, 0x3, 0x7, "4be0"}, @selector_unit={0x7, 0x24, 0x5, 0x1, 0x0, "f2a9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3, 0x4, 0x2, 0x6, "02af890ede6fad"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xff, 0x1, 0xd, 0x5, "9102f6e094"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8, 0x1, 0x7, "f2df41"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x6}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x101, 0x7, 0x80, "1629790439fd3f2ea1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x6, 0x1, 0x8, {0x7, 0x25, 0x1, 0x2, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3ff, 0x0, 0x53, "2636ffb8"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x1, 0x40, 0x6, "1014"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7, 0x3, 0xc, 0x1, "82ff4ed4"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x1, 0x0, 0x3e, "", "fb"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x4, 0x1, {0x7, 0x25, 0x1, 0x183, 0x1, 0x800}}}}}}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x250, 0x40, 0x8, 0x7f, 0x8, 0x4}, 0x19, &(0x7f0000000f40)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "deb67c35a604e706fd3ab306e69f1b52"}]}, 0xa, [{0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x1007}}, {0xb4, &(0x7f00000010c0)=@string={0xb4, 0x3, "b252d8466586c82ab010391a05d730a5145ea6f4e247715dfab7bc9ff330b45c73946f3d93c95f9ea1cb35a6d01faf8369e58180cc5eb9901df3ed09da539a23d3c848c7ebfe67b361f731596a54cc26f4f9791bb2e299ac3fee5a85bb9f3d72aa17f6f7bf57f76490f35520c37fafb119af440a74c118af0ad511c204984945649706916cad961eb44e327664c5686e44aa66da4120d308a029f1bb66e95928e5d884066b057b7e0efedf9a3d3e90e2da5f"}}, {0x49, &(0x7f0000001180)=@string={0x49, 0x3, "b358020858020e1c4389838abc4663ccf3f08352b7118d51f9c27206ff22feeeea60c05e9eeecef32c06e4812cfd1abea845f1aa86f01af4ebdf7d6afaa2a89c201b6470ff5be2"}}, {0x4d, &(0x7f0000001200)=@string={0x4d, 0x3, "da43ef4c6a24541aa011c75b506854252b561244a5b46a4a04e13fd1dc8a8eb363761ec13dc547f2b80d21989256bae132c669c24f202a880e4cd98e8800a8562dd15e13a58b30150b51cf"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x1801}}, {0x17, &(0x7f00000012c0)=@string={0x17, 0x3, "44d9ee1eb924a311a24d75fab30732eaf77f88d14f"}}]}) syz_usb_control_io$uac1(r1, &(0x7f0000001500)={0x14, &(0x7f00000013c0)={0x0, 0x24, 0x75, {0x75, 0x31, "54e923b1697414c565b9b743c01eb52f7f2e8fa79aa2377eb86ea9dea7e6f307b28a4697edadd52e95e4d2f79d2228408f676f01c14b9cc110000fa9fef4aee4f219d62ccf145ca61404779b7dfde981587435f9db39d086fb6eb6dce35cbfa06955787a37a3b9f72ae921b3f924f9502104e4"}}, &(0x7f0000001440)={0x0, 0x3, 0xb6, @string={0xb6, 0x3, "0414a2b38306b77e01a7dc2174ad0f8a5250141b95f7d1925d6b2b00db05c1497436d900114566da2cf47d43e1f06a506ba26f3274fc1ec04fd8636f16911af3536742ac4df0f2c0277e31710c9d1dfad8459f3339b4300efbf08c25574196ea0f71cced304cb23aceec67a952e2386d06776e8aff57d42a7a414861d3a1a8e9795c54793f8dee08c239cfa4f9de501464289101454b27cab0036d8c96eaf5e0241e4ad436ad278f831952636fe269237c20220a"}}}, &(0x7f0000001800)={0x44, &(0x7f0000001540)={0x20, 0x18, 0xeb, "2f9112e6f8a7e4dfcdda1918b7435b1807649f9d54157164a1cbefdc141fd1672cb481708fc0ed19a1b99a91e1ca3d34928c6a2b15d22365d2c3bc249d7dfb18fdf2c1ddeae0603a7a2cca910fa008b57f93b1b163a1f5bc918ab6807d8637ff06a81624eefae0afa1f5af8a974c251568275d52c857f42b26b7f049e012693e56022f9113ebecb37bde47f1438e34b2fbad3357d3e00db5125eaedc073fc596f96003a4380f12b332cb82ff9b31e35433c6e68d41130e8a37408cd5a9f47c12bae1b98ee097a60704cffbc54abf69263ea347314caf869a18f4b1d7bf47136384531a0f9124b553b1abc4"}, &(0x7f0000001640)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000001680)={0x0, 0x8, 0x1, 0x67}, &(0x7f00000016c0)={0x20, 0x81, 0x3, "68550e"}, &(0x7f0000001700)={0x20, 0x82, 0x2, 'Q\x00'}, &(0x7f0000001740)={0x20, 0x83, 0x3, "9799b3"}, &(0x7f0000001780)={0x20, 0x84, 0x3, "61fb89"}, &(0x7f00000017c0)={0x20, 0x85, 0x3, "482d99"}}) syz_usb_ep_write(r0, 0x9, 0xff, &(0x7f0000001880)="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") syz_usb_control_io$uac1(r1, &(0x7f0000001b00)={0x14, &(0x7f0000001980)={0x20, 0x21, 0xf1, {0xf1, 0x9, "a622c7b542596e0db937a6eddca2cee8470d917d78035fe7fa183383dc4271fddb878be90a3ca2c394a55989e9b86d64c7e6bad2ac35d9829b6eeaae8bc7f0f812b5d5fb89f50e7f2cb1b29852da203770208b35cf940d61c48c10fff13a4521e6e634ea9e861d62c7798297a912db056095db030e743f48b54fe2239099bec23ae4f5567a0e738ebc3ed4e6fa0d428b85a184e84866baf8c40390a938b621b17d68a19954625db364291b13f00f7e9c42c41832c2e9637a67088fb9511ab8055cc5df5153527063d69e3634a78c41392ac1bfa14d8402eef9153209f62471906eee303f2dfb6243d0110d00a751b3"}}, &(0x7f0000001a80)={0x0, 0x3, 0x4f, @string={0x4f, 0x3, "9e645bd98cea6e91103a89fa8858eafcb647178dcd51696258aef234d32ea09cb0bc72ca61309abf5532b10eac4289e27d22f60cd591b1e7036cf9d45ed711b8411a6debf02ef767d8613ae884"}}}, &(0x7f0000001e00)={0x44, &(0x7f0000001b40)={0x0, 0xb, 0xf8, "39a937659838741517323e63bcf51135432f4a54888f3d10e37bfdbecbbf5823dfdc30d405ec11a4b247020b78f54a339f6e3c6eabc0dd6f12a032991392737d5f073ae4d6475348ab5fa94377175c1b79c6524d44970a4531ec06a88bc8dbcdfc98bf1d0608ccad89ec98c695f31dae5c44beb0d65116fae7541e35d7539921cffc2fae00d2904cd0338417eb9783db4fd5bf19651fdd00a455ff246c3a0e92277811c6461b8f16be986f48d0b04f21d1103ca452605176dc6aee5b2880a48fe912f216cac8f80aa2961d1b921ea3c2deab4b72e066f0ec5e12e1de08ee14044f2d12bfa745688174c52dbe5a6c13c4f6d776f0c4afda5d"}, &(0x7f0000001c40)={0x0, 0xa, 0x1, 0x9d}, &(0x7f0000001c80)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000001cc0)={0x20, 0x81, 0x2, '.@'}, &(0x7f0000001d00)={0x20, 0x82, 0x3, "9ddd87"}, &(0x7f0000001d40)={0x20, 0x83, 0x3, "863ff8"}, &(0x7f0000001d80)={0x20, 0x84, 0x2, "d811"}, &(0x7f0000001dc0)={0x20, 0x85, 0x3, "0cb513"}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000001e80)={0x0, @in={{0x2, 0x4e24, @empty}}}, 0x84) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x6) syz_usb_connect$cdc_ecm(0x6, 0xb1, &(0x7f0000001f40)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x1, 0x1, 0x2, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x9, 0x24, 0x6, 0x0, 0x0, "92f6290a"}, {0x5, 0x24, 0x0, 0x1f67}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x8001, 0x5, 0x1}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x0, 0x5b, 0xb5, 0x9, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0xf, 0xa4, 0xd2}, @mdlm_detail={0x44, 0x24, 0x13, 0x9, "cf686dbb15aaf3b234648679c27a425c828000ebe927b3635998c879a9a88515c398a3b6f40542700c27fc9e73e150a1283523391f8920c4d4ebfb8ad8094f38"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3cf, 0xde, 0x6, 0xd}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x6, 0x5, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x5, 0x0, 0x7}}}}}]}}]}}, &(0x7f0000002180)={0xa, &(0x7f0000002000)={0xa, 0x6, 0x300, 0xe, 0xb0, 0x1, 0x10, 0xc}, 0x7f, &(0x7f0000002040)={0x5, 0xf, 0x7f, 0x3, [@generic={0x65, 0x10, 0x1, "dea4dcc52f39126c07d98d03c9dfe008663197fc953ecf11e2e1c78f9b2184ef0084d07e667a697e75bca9fed909f2d85119216bf6ea7fe12ae58b3ca5a2200e394a9510a0ab9470846d1502cc1f843a87059d3dee432eec1fdaaf1f893ecb524e45"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0xed, 0x3ff}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x9, 0x7f, 0x2, 0x1}]}, 0x2, [{0x4, &(0x7f00000020c0)=@lang_id={0x4, 0x3, 0x430}}, {0x44, &(0x7f0000002100)=@string={0x44, 0x3, "821ab8069f294ab895808846593df973c52fe14f74b8feaff43705f6d250a05e60f2f3b8cfd518cec325f9824472506a30c0fbbdce6398d3bf38380802fb5a73adc6"}}]}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x80, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xb}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x200}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x80}}, 0x48041) syz_usb_control_io$rtl8150(r0, &(0x7f0000002440)={0x14, &(0x7f0000002300)={0x20, 0x22, 0xc3, {0xc3, 0x31, "6269d26b8c40ffc3d4813ceba12cc33d1c62c1ee6f8a85cbb76565f611381132f19ced22e814c125bba63b9be939fc42f1595fff1565851eba28e09982660f3bb8930cd22a555e2e5f671be4346cf44ef1ca171c21a1f7ddccc81b0150d3f7ace3a783c2fb3f117fc850f75359f5e1767ac3ca35fd7909365a427e4b30190197e4c4ae447c8b5b00c2ee69588c687761b6b8f5acf65b8a0a46f3c94e1fdf57b47a7a317efffec9112430b964d6497311bbc1af33d82b1dcfe062b38391f079415b"}}, &(0x7f0000002400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, &(0x7f00000025c0)={0x2c, &(0x7f0000002480)={0x40, 0xc, 0x31, "210e91de304c851d301de1a7ef46ba8629d1b7db924bbb648acff5402045b760a7cd9ebb2a51358fd200d56634b3b79b51"}, &(0x7f00000024c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002500)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002540)={0xc0, 0x5, 0x4, "e1558b1c"}, &(0x7f0000002580)}) recvfrom(r2, &(0x7f0000002600)=""/202, 0xca, 0x60, &(0x7f0000002700)=@generic={0x22, "e3a80c393ec4ed97f6acdc337fd508a1e7ac02046cf68d233363a93ac686d2828f9effec7393773c82ad9ca9e8501ac53be13131226b64e25778fa0036e4d068af58464caeb14b93928d5af7fc4ea8aaadae0b2bd6cffb7c976e7db5935efb1d61171fdf51e628655eee281d8ecd1787e88dc9ae273231dd82914f9140c8"}, 0x80) r3 = syz_usb_connect(0x3, 0x1324, &(0x7f0000002780)={{0x12, 0x1, 0x201, 0xec, 0x2, 0x3e, 0x8f, 0x8ca, 0x2020, 0x2a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1312, 0x3, 0x6, 0x6, 0x20, 0xb2, [{{0x9, 0x4, 0x18, 0x7, 0xb, 0xd5, 0xb9, 0x5b, 0x81, [@generic={0x15, 0xa, "57ad9ae2a24757684671dfd3bdaf0436d87bc5"}], [{{0x9, 0x5, 0x5, 0x0, 0x200, 0x1, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x67c3}, @generic={0xbe, 0xa, "070f6d30cac32a90f6392af13721759fb67fbb4d194264130852043f8dbc26f18a0b049891428f9f0baa92a7f3e015b677894430141a678e62074fc2c4dce3f2c517029583132d43b1408180901ffa5a9533883960c15b0bdab5a07dd16011091856ec334e50c42470176714f90e30200fb6981e334e0ef3ae1398570219ee74a53f8c53426322c0c40aa7c6bd1bc306c78b8eb5dac613d97e58124f73de6e763b892bbf3bdea66deb9cbd172d93df5dca259a34487073d51f185cbc"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3cf, 0x3, 0x7, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0xa}, @generic={0xaa, 0x3, "bfe63f9adbefc3e3bf4a80e1bf569ac3011e642e19f80d10a714ef94e1799a8ed4c714b66eb411d2d0077c3602576eda72b51e585e3547348110f4b2966bf8fc8a62b67454b50282f7a7a57f33ed1e2a78701520d014b96b822dc0ed312d9b7d0744e171c7ae327ffd0210b802a4c20cf65dd9cbbc64a34a091d09704681160c9577ea920656ab32934a4b2523f8cfe44be8db8db018586402f844b700ea62e0b4a6cd0f15e2990e"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x5, 0x11, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x8001}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xc4, 0x3}]}}, {{0x9, 0x5, 0xc, 0x8, 0x400, 0x5, 0x7, 0x1, [@generic={0x51, 0x23, "85649a0f9e04036303cfcaa30a2346646514647ce05168d21fbc1075687d702dfe50715440560ea1fa256ac6e28580c5ad879ddea92525409f182794db1d2efccf963512f271bb57a4f8cfed766040"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x20, 0x81, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xb, 0x101}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x0, 0xe, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0xfffa}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x5}]}}, {{0x9, 0x5, 0x8, 0x1b, 0x20, 0x5, 0x8, 0x3, [@generic={0x72, 0xf, "9b1b2e57dc90124d650d73bb889897884d282c9426e9691a67d88f4ff42ce8a11b03c130d8ae1f2d0b7918dbc3300bbbe677f548b7ebcdf75e619624a2ce883ac045b5a568400f2d685c3544e8275e0346408de82dd610bf2b178b8dff901fb8af3da18732117d8bd31013b9850a5740"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x100}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x4, 0x53, 0x4, [@generic={0xdf, 0x5, "ebe3c2fdafc8230c2f1bde2c33e6207c53c3ba506ed85e27ac84b362da067870bcd39a14a3da7499e5d00f7826fb43b5b42d7f44e6b6765a569a25d828378275ea272c0af59f6b5fe9b974145c38cf2fe0a42d185b3985d2a690786d22d1b76c3082e983537c0fd50809d6c5f3242ccb56b58eac404519271f53fb027dae214606a439a918851161bddf570b93d68707add1ef2aa409b7d380d05f9484da9cd5ae6343c40073eb91d6c6e2a092843c08af5ee4229750efc5a92419e1f98303b23aaacec91c8ff00360ea5cb960e8ec9825e108b4617b8ba4c768b66eb0"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x3, 0x80, 0xa4, [@generic={0x5f, 0x21, "4aa0bcd7c1a5e712a3d7cbf99f0da7476a45b9047eed18ada4d115d4d57959b4ca4eafe98648feb4c5d847b85e41b82cc9534063df26619f1603c38727d7c2a279681814bd20205921557fe53132220c71ad725988b7ebcf6e8979e990"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x9, 0xe3, 0x1, [@generic={0x39, 0x7, "9999760c0e55d30e7d1603840eb22c1afba82f6c5b530bcc9d0e06cbfa027efb5724e63cde7d5c6927dfa25a7b725371e111f86f154e55"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x6, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xa6, 0x5f}, @generic={0x37, 0x11, "847f796df9c16119433dc664705fc7158b9928dde3be951e7b757369596c15632d1a2320639f09b2c62c52c186bf3717443aa87277"}]}}]}}, {{0x9, 0x4, 0x9, 0x2, 0xd, 0xdb, 0x12, 0x37, 0x22, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x1001}]}], [{{0x9, 0x5, 0x80, 0x4, 0x20, 0x5, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x2}, @generic={0x40, 0x21, "6ca12f58e0ff9b3bf739e4f8478b9da093f7697af69ea90f0045ec7b5bb22f847b2936d436243b6b03e4c1ac9df64809da49f9caf497657311074c9be22a"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x3, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0xff}]}}, {{0x9, 0x5, 0x80, 0x20, 0x8, 0x8, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x558}, @generic={0x62, 0x6, "2edc15ad0232145f2359fded83a1f1c05406d94e8b29648bd2a4483e9e6a41dd619621ad93b39317c50429f063a49e05b8b771bceefe98da7bc1b48da9dd8bec201c69eba13a1220595f3d84db1bf24f01deae313b7f271d5751f5581a284e88"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x0, 0x80, 0xc0, [@generic={0xf1, 0xc, "86eb74e370d702ec39818e1e5020f1dd9e94b3a4b7ed4fc44c117ac362cb244a7727bee428a164d19b0ddc3a10fc7f0ef4a2892e4f07bc0edd3e3736c01953ba5067d6d1b6e006fa19050a10a1c269451d5042d20eafe325777a5d8ce490d9e931c709e7e4511619719c54039b69376d9932e4841011f1ace4a091dbe0793e7164a578e534b67ea0beed71332878a67eb88f6f601b9dc51224f3108b15b87c261192dc5f83d812b455c18173dff238b30c728068d0812acbe3559e4ac3742cc1228272b7846079ea6fdfa9b8b560a1945ca1fbcdd3c5a3ff8942c28f2c8198c8e7a8d6b2f5267511d4485f87f217fb"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x7, 0x11, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4e, 0x9}]}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x2, 0x4, 0x8, [@generic={0x94, 0x22, "c1ffe4d3b7615c959a60a1c64d46790b2052a5f3cb34e3fd19d8c3c680ef29022dd65db62c890550f1096d6e3890bacfcc0af607370a6816b6897c2bd0991978c2848a45147baefaeee6397ec202e128717523e195f17ad36db4e5ab344f0e1490487bb9678995504ec0c5804b320567c8adda506a50b4926efe13df0f6b0afba5f2dac1d0687272f12b8f0c483ba8c6858c"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x4, 0x3, 0x0, [@generic={0xad, 0x30, "b2f8c8e6cf868671db2e3c9a6f8250a7b95ada166ad580fcdd5c3a3f97dd34d33e9db044af4459c198fa678539adb313a5d4a4001af9746a7ab3581cc1b5da7bad132ec68802776493e747097dd178c93a80fb993ea2c6e4a8d277b1bd8fb115453c3a7cf03828db76002d0ed5310ed3092bc7ac061af28745ff0b9fe5d884e8df7758b0f845a398cecc15d1c09c1a84bd1ce7338116e54bda0eca1540c3958f5ac788711c2c0b9350bb5c"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0x6, 0x40, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x7f}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x0, 0x3, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7}]}}, {{0x9, 0x5, 0x2, 0x8, 0x200, 0x42, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x7}, @generic={0xa5, 0x1, "9e4b96da0a002181cc9d07a3f5edda7ab3262af71311e7bd4c41f0d2ee3e323bd2c4a2b9959b1361cacef2123bbd42453aa001c231f0fb2691a0536fbd47b0f85947db0bc1049cdd1e8bcf1de4fe4a4cc711f1385794cbfc04f46466767386ea61fec83d39d975e11a2ed827a2d9064385b85cf45eced3599498a0ac66c7a4dda6513470abb2d3804ef1eea070f21fdfbeeb34122f16c6e6cfae3cbcfe255522496c11"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x6, 0x2, 0x7, [@generic={0xda, 0x24, "3f3527caaa3168bf09567109d8ea686f56329ed47680f6054ae2d055a7641d8a4fa7ecf4915eb6d707cdecada42feb6027648432f3ed840dc507808c0adb0206268a16675c5dd75a2145423af99c5e00c1e39f9148203b9b7e2cabee10c79a9759997b7d8b41708fd9f42c9fb9246b1c103e270831a919f11584d85046717549bdbe8c07d9a86bfac49e2eebdb26bb780757d2e4ecdf99d8c5fada40b7c15a0c308fec3b6de447eb4f24e1f9627cdb9f598aeda689e5328a1c88c1f3d9e596f6aecf95c6af8297d677e7d118e077c6a55bc64dfc8e854876"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0xfff8}]}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0x5, 0x8, 0x1, [@generic={0xe1, 0x22, "bc6f97ffb6bf4de03d9032dc658d6019411c991f41514a08d20bdf77d8c491d5f195de82827c8158d13cb06019b574b0e77a5fc549bd3b57c2c22f783ac8a722282c2367f4f84123e3c30d4e8360af4c81bf60d14bb5f384b7838137ca3d60bbc235d5032d1922371c9bfa97be601212d19e50a4c075f68661990f3408f5dc483c45a45f76d9d9b9148bec25d154c9a918587180bf2aac1683bd14c79a8efd8f3d6a277cffe1462777c5bc8a8324c9e1bc874e230483f6329030bec2dddae414a3c4e6966be18dd0953e18b06e9a7ad770be52190239810285a0d8a8a38c1e"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x6, 0xff, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x7f}]}}]}}, {{0x9, 0x4, 0x48, 0xd, 0xd, 0xff, 0xff, 0x30, 0xfb, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "0e50700382"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x100, 0x1, 0xff}, {0x6, 0x24, 0x1a, 0x3, 0x22}, [@dmm={0x7, 0x24, 0x14, 0x7fff, 0xff}]}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "9e30fc24"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x4, 0x4, 0x1}, {0x6, 0x24, 0x1a, 0x4, 0x2f}, [@mdlm={0x15, 0x24, 0x12, 0x935}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x1, 0x6, 0x0, 0x2, 0x6}, @mdlm_detail={0x4, 0x24, 0x13, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x5, 0x6}, @obex={0x5, 0x24, 0x15, 0x1}]}], [{{0x9, 0x5, 0x9, 0x1, 0x40, 0x81, 0x9, 0x4, [@generic={0xe8, 0x30, "e1e23750247de3ec508834912ae1897a00e72b176ca420731927086ef37243cb894693a4b134297345136fedff74083db06b0dbbb48b26c051cfaae3ed86105981b82a562cd7a0a2faf15601bf563548eda5acb23ed66afc49f26dcf1956c1a93c8478726f6cad85353c164b4a939921fe753d741013d7201613d6c87c092d87d92ee8baf8394690bb3be4e5702063821fa4008452bf71afb5f1e079bc4f747fbf49d0e117d437935c6ce3076cb1ef1fd4ccf334508a0663669f7a4bd3a2c05a0da45c048ff181b6eaad31d90ddf7a816ab833fd052a66701c6008afa527e309489cce59245b"}, @generic={0xc0, 0xe, "27adcb1ca5acb72f7dec7ce9151eea2c026b4d1322155de9dc8ff1595a9d3025d074291b633ad5c5568b8fdda6969486f687c67af25828c952b69c43523228254543c2186fdae67e2a7906c5d530fc94aa0ffd2f9fcada0106217a9d7bca887aa4e414369dcd59b2d4e4ea6ada5265167feb4d38395c9a7d2535ad5649a6b49ab7a6997d100881bfddb10794f5463b6736c391799b38d52a4810713c44ed41d6d426654e1d2f27bdcda986a3b91f8299ccb7e4c910cb10d72fa08bae19a0"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x400, 0x5, 0x8, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x4}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x0, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x3, 0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x4, 0x4, 0x65, [@generic={0x77, 0x23, "e8f326aa04740ab3ecdef23b3e6f99101c39aa100c3d4cd176dca543f74a8eb984c501405de248e2a186c74c86c24b3d9f256c1efc0434ef9080d27950a501baf13f5cb6c43c19f76540ed2c22c23caa3322c47782f5ba44a5e62e9f3450c3fbea99df1c1f3273512f55de8fa44a07c760c79adca4"}, @generic={0xd3, 0x22, "4fa27bd37893f87e33f61d8c4501ed4c576d8bc126fb4b421990daea641c5e652b58b3187c6468d46f60837b6025eb5eb10b8360e598d0690cb43f41d20e8defa62e5f2dcb0bd1551770c3a0795d87d2afdbceb3567fd89ecdfe7d18924a9dac5c22a949f5c504cb5315fa40d0714a9d1d7a2da4ede329fb5cc01fb23b172f0da2fbf2ef64899e5deb8b362a174edd504ae2a8e68ab9609a811e3160b7fb98e7f59f16fc9823bf2ff6694f3cc4f0c75954346b48751f5cdd8e071956cba12a865c87a2c82e0313b5908a2a7756fbc4d178"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x40, 0x4, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x3}]}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0x8, 0x6, 0x0, [@generic={0xfa, 0x23, "f0927e81c69e7cddb8963a55a0c48ab8a955154634a9e0ae431b856fd82de68851efeba580f7259b1e58007d5e00b87a2572b1fa794016524587b0ebcc8ce94d4fd5e09564243a8364e2895488fadb01b95b21479cf142742a1cdaeea48a90707ebdd71a74893fa66a9efb20110ce040e4c0ac0c454ae109e6e4e66adcbbdb211aad297adbaf0b30072f8adb2d3d8618a3326adc2d1c2a5d7e50054236a140976d3d82bfd87851db3ffa12dacfca5edd497708b159db864e214c743b574797378723f3a04d3e2d6297cda0195da1ce4af5d7f44f0041f9e60d18f7c8d58f1ea5943d308a4e9ffd90133da93b9c0118692e7963f91f7676a8"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x200, 0x0, 0x8, 0xc4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x34, 0x4}, @generic={0xa0, 0x8, "65a3873b53b7176dfa7b51d793b1f85869cf87bf41039f9cf53badf28835906965bb80c84198e88f3b3c6d055f43d629bba5c2fd162ed3dc275e4e892260da8a71175c4697cd9611cd5b4edc17b295fb3070adbfa869dc95c0b51e323bb4bfe7aba7936df9a9dd6352332422038ae4f648651dfe8d74fb9cca32e723846a92cafea271138f81e9e2f504ca3453fd3b34033edc712a649e6c2f1d22e101f7"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x40, 0x0, 0x8, [@generic={0x45, 0xe, "4027166fc54b03cb052b1ebe048d7176713b7abbaa42414b8abc21827a17655a47105aee159a9c83569ae7bb6fb116cac39a85215a2353a571ff8e8089e29dba1604cd"}, @generic={0xe6, 0x2b, "a670502b261794ae8253f96cb4407876ad78c70eea2b59fca6f92e23e4dc00f7be0898eb6fef4fa2ab5a49594bff8b35117450c530f20e82e2b626968e2c5b06563d2446f6aab1c311eef08c818c4207808a89a07d10cccdf15d8b66b8da2dff24bce5063ee5566072b890d58a6fbd779403286ae4722bb1b9fa1fe4020711ab7437bde8414889bd7a104985d70cd8fe021ba4fb831dd40d3641f5d4689af49b0f68c0e3c86e5fb622b01145a4830452e21cb806e11dc132f68022294a951562a84ea2276f5e69f8c49387eef6018ad88311e01423c85592bddfddfa07733b6bcd4c71dc"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0x5, 0x6, 0xff, [@generic={0xbe, 0x7, "d1bc5f6f2593fef9ca380b3b8908555906460067282ce4feae79b6eb5f14d011d92618b70288592416a49e96e56253e57ad712fee76ba61b9e53f93f3fb669b82d6239fa242111e003efb84e958d157e6af2c7b08be6c82f7eca3c10f3ee5bfdd90d65daedc7a325e08c42fae5a1ab00e26d8e4694b834d9f8e0d86e8d998141b9c37f4f0bed3f51e3295d0933ee59ef08322656a6093af63e14b2c2024fa2168bcdb613a547078cbdf725f45f0848e56ced2a1d4cdc788ca688bd75"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x20, 0xf, 0x7, 0xf9, [@generic={0xc5, 0x9, "ce8f57076c4ab21c6900f94738b21f973424d1f133ffdffb7c61edce288208ebf2c2c3629907c28ff2053ca1bdbae4a2f042f8d92acfd63f4554f52cbd031fbab34e575b553ec6818205139ea7cec5e7dc9dc09dd95cabadca88a32c176f44f1a090dbe04f726a9f346f8fec769911af6f5a4cdd285fe43db3aa5f087abba4a92cec46c01d3f2740a52c43041ede1ab5fa7f0694fdd2a3a31d9f95dbe65491faa28ec7d79fe0b7bf0f0a542934be8b90c39c79a6e59a199b58396681502a990ab21920"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x400, 0x21, 0x4, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x8}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0xb, 0x10, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xff, 0xe000}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xca, 0xf}]}}, {{0x9, 0x5, 0x2, 0x8, 0x200, 0x7f, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x27, 0x36be}]}}]}}]}}]}}, &(0x7f0000003f00)={0xa, &(0x7f0000003ac0)={0xa, 0x6, 0x310, 0x3, 0x7, 0x2, 0x10, 0x2}, 0x23, &(0x7f0000003b00)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xa, "a803fd79caabfeac5714463ace9229be"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x40, 0x7, 0x8}]}, 0x7, [{0xb0, &(0x7f0000003b40)=@string={0xb0, 0x3, "26b3f62130a04aaf23cd02f9c9a8a9c3f3b5cbdce8187594e360a39fdd6dc8c274e68d6c787421bfaf64296c0bd4645c7c5dd01bd1c8a5feb9f86641527fd7832e79e8e1f819d537d43bb4ece61e81f67a059a04a478997f08791b03e6988938994a73dcc87ea274fabf09c00ce3b563f20c3a87504e5425196b8b71ec582c00274b032564a8f54148659e036beba3ec3089c8f94788a9adb383c0dacdfabf70ddd6cc919cb01066c804c042ebe8"}}, {0x4d, &(0x7f0000003c00)=@string={0x4d, 0x3, "db9cae95dc21ade430c6a2f5bf2df04de5143edabffcab342ec8ea1802b7b40fd5ef443ae8eb25edfc41893eed71447477b882de55ebacc1a1a257a9c3ee3da1405ed5abc41b2be6c14e6a"}}, {0xab, &(0x7f0000003c80)=@string={0xab, 0x3, "f0d07f102b1ff1db9f0e3cce9f97fea43066104148847345a0cac198040b2823629948072a92d3b619ec8553e86865b0142c6c133367f90be56863f7f1b330865163ba67a58d0a1ef9b8a3e26f4c9c711d8332869e02acfbb9529992596f203689379ed4f1546d65af30946ca0c38a591997cab1abb57af6dd0e683eb2b8bf03bc2a23ca36da37c1f15d27c5ca215a1975e6b9fae4711712a97c676a402d84b9a5d639277cde065eb6"}}, {0x4, &(0x7f0000003d40)=@lang_id={0x4, 0x3, 0x280a}}, {0xd5, &(0x7f0000003d80)=@string={0xd5, 0x3, "590011cad3f32724d6d0ccd36e3247b7c756cbecb7ba1994e735e8386741d3bab4deb04be5555aaaedaed329d1cc5f000243b326ea29faa758592b56dc6138508aef8cfbace266095dd8d2e7fd294874f6eb84ee0a1782f9ca97ffe47b4ec4e3cc16aef2166cf9291ec5caaefda6a72ee0daed4630ca59e705902b2ec9a65cdee49f2133af56b9dbbb62ed940f03802100914ea78eab4ffa440c1070143c69e8e8f4be6691c12161d6ebb77a734f683eb3d3d14e2679fdb21c413c1d63d501651fb64a8638ce084e0d0234623871e6860f3ed3"}}, {0x4, &(0x7f0000003e80)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000003ec0)=@lang_id={0x4}}]}) syz_usb_control_io$sierra_net(r3, &(0x7f0000004180)={0x14, &(0x7f0000003f80)={0x40, 0x7, 0xc6, {0xc6, 0x9, "d30256ded2d01c4552c6956385eb37a78a53a97bb2c0fce77f79b956a9b68c0ebb227295d7a285c493fce731b98630c57b6ccf0815abf00523468a814062e95fb245f81f5dd4f1944af45d16d952c05a5b9559488bed60da6ee9d57552189c34b22ec9ed3afff2c4b1a3a9f54525bd692804e4228bc8a69cef47489cbf572dd5c934d822a6d5aa9e4b9ac11337c882630d7b97721ac2d86b1ec79b71437d9c723e1d1461c2f40ce070f75b326425dcd2b044dff7ab5669d2756c9d6549eae87b050ce9f9"}}, &(0x7f0000004080)={0x0, 0x3, 0xf5, @string={0xf5, 0x3, "cf5e307582b51ea3b67880fc574493c644bf4a204d6540c66f496d4a491d3d51bb8da2f56a9a134c9d539942a5cc75494784410bf0d29686818f3fa07979548de8cb151ff339c06d5635dc7dd47c17ffa46027bdf50b6e31c1f27e6d072e6196af0e26f66c41e52753ec23418c1d7ca2a16525e471463382a590993eefe2b2f6806d504b61bc03d599fef304cfeb043dc75bc75706d6790032cf80c46af3bf90defa01c8c78a4bca8087c9fe05d3e5ebd67979c21894efb1e0cb3bed778061b5842f7e84f8bf6ea983e8b7d2f2bb00f9f68870e6619a4ec30d7edb2541ad0166c520f49d9a59feab8ea703edbea1ee467a5434"}}}, &(0x7f0000004740)={0x1c, &(0x7f00000041c0)={0x0, 0x31, 0xc3, "6e3634652e66363fe9d9ffa705291d3a59ee24fa24805cc6d196536e42880fedad4a4f754f170b9ca453e98e7df873f72c76ef8f8a7a9d946e9de4e7ea3477c5448b91517c050fff6e6983fe060a3a76eebfb7cc9a668928ac0a08adcbfaf615b1c0a264da58e16f96e1a9c8f33ffd69e5bd105b59a5b2ccae622bf7abf1fc9cecbba2c8f4a663085aa07c09748313da293114ed9ab190062c78d0c320143dcad22ae0b38eae61cdaaad8241c15172384a34a3b854d5466e3c165f6c83ca66e2d30733"}, &(0x7f00000042c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000004700)={0x21, 0x0, 0x1, 'q'}}) r4 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000004780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r4, &(0x7f0000004840)={0x14, &(0x7f00000047c0)={0x0, 0x5, 0x29, {0x29, 0x7, "5d570b96976d06ce1608f514dce0eede5f63a263936de891a153c86a07f71939c7d04d043c8cee"}}, &(0x7f0000004800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}}, &(0x7f0000004a80)={0x34, &(0x7f0000004880)={0x40, 0x17, 0xaa, "99ba76d68dfeddb898780adafefd2f5778ad076225d8ddc90fcb2f6a3a15bac9e9cd4be83fc3da89fe535bc8e6cd23c40768799ae4e99aeeb3b107a38401b4036f636405cad64dcd41092b6568a79fcde72cc50cd5dfd999b13197f9cab1442c560419ca7c80e2e2fbb918661c50ebe71293d46f197985ac5d5da338df3f304bd1419f80d692e5cfd2418be0e4a811b67289077382aa34c5ee0ee94905d9ae1f07c29733187274a79794"}, &(0x7f0000004940)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000004980)={0x0, 0x8, 0x1, 0xbf}, &(0x7f00000049c0)={0xc0, 0xa1, 0x4, 0x1fb}, &(0x7f0000004a00)={0x40, 0xa0, 0x4, 0x800}, &(0x7f0000004a40)={0xc0, 0xa2, 0x2f, "e3346263ef6cebc966ce206aa4800b7655bf3b9ac009b9cf6817a791356f9c2bb682830376351a42eb61009bc25a27"}}) syz_usb_ep_read(r4, 0x80, 0xe2, &(0x7f0000004ac0)=""/226) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000004cc0)={&(0x7f0000004bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004c80)={&(0x7f0000004c00)={0x50, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x631236da}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xe46}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x5]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) syz_usb_connect(0x0, 0x185, &(0x7f0000004d00)={{0x12, 0x1, 0x0, 0x7c, 0x12, 0x1b, 0x40, 0xbb4, 0xa2a, 0xaaf6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x173, 0x1, 0x9, 0x10, 0x40, 0x5, [{{0x9, 0x4, 0x20, 0x0, 0x9, 0x2a, 0x5b, 0x78, 0x65, [], [{{0x9, 0x5, 0x9, 0x10, 0x40, 0x4, 0x9, 0xf3}}, {{0x9, 0x5, 0x3, 0x12, 0x8, 0x4, 0x6, 0xd1}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x7f, 0xc, 0xc0}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x4, 0x64, 0x40, [@generic={0x92, 0x21, "964c418d0f2d7cf495275ee4b66ce41e0b4346776e6a3e874454db728b93d3a45c28d6eb300c8540a529d954dbeaf4a15cb4c195ab725505117cc9dec662f18c19704f91072a2271c82c5069336cb5f45ea8b78d806a832bd212b36c00e26c1c7aa54d8ca0d167fc025ff5ff4821f360c29e79734343e84ea33178489bfaa6bd8a76e675991c4b0047ef2bc116c1cf61"}, @generic={0x47, 0xb, "6f0ae7edbcf93bd18fc9f33ee9c0dc9b69abe01840cdb288f5eb095be55125677e46ef0b5443ebb0202d0a0d7006932c0f5a80892d9ed82b06a71329cea05575cd9677834c"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x3ff, 0x9, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x49, 0x5, 0xce, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xa, 0x8}]}}, {{0x9, 0x5, 0x0, 0x2, 0x18, 0x2, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}, @generic={0x1b, 0x22, "1d4637610151aa8f68c85840af4cf2ac2b215fdd41c1a2f33b"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x200, 0x2, 0x8, 0x81}}, {{0x9, 0x5, 0x6, 0x0, 0x78, 0x4, 0x9, 0x7}}]}}]}}]}}, &(0x7f0000004f80)={0xa, &(0x7f0000004ec0)={0xa, 0x6, 0x110, 0x0, 0x9, 0x2, 0x8}, 0x21, &(0x7f0000004f00)={0x5, 0xf, 0x21, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x1, 0xff, 0x7, 0x1, 0x10}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x7, 0x9a, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x0, 0x9800}]}, 0x1, [{0x4, &(0x7f0000004f40)=@lang_id={0x4, 0x3, 0x455}}]}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000004fc0)={0x0, 0x74}, &(0x7f0000005000)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000005040)={r6, 0x400, 0x1, 0x7a6, 0x80, 0x9, 0x9, 0x7, {0x0, @in6={{0xa, 0x4e24, 0x400, @empty, 0x33}}, 0xfffffffb, 0x9, 0x8, 0x4c, 0x5}}, &(0x7f0000005100)=0xb0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000005140), 0x2, 0x0) 11m43.012676844s ago: executing program 2 (id=4562): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$zero(0xffffff9c, &(0x7f0000000080), 0x101000, 0x0) fcntl$setpipe(r2, 0x407, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x704, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_matchall={{0xd}, {0x6d0, 0x2, [@TCA_MATCHALL_ACT={0x188, 0x2, [@m_xt={0x184, 0x1b, 0x0, 0x0, {{0x7}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0xe9, 0x6, "51ef5b0a73905b4d8eb267df1e7c2e75cb9bdd6f49e445e4ed1ba5d0fb763ad26238b8f8de61756318cb1f6647a68b8b03e10de08f9528ded3798fe881186c08160f5c4ea69fd958c74e95ac9f7950a13e1d77d0f257f475616d72909a6c60a9ab1618b12da360c0521d952ef440df24a1d2186a336ce34805a5156370756b299985dcc67a0f006e4af791855ef13523f440d30aa8b49728000f17500c414f861a0112cce7bac4eff873c383ebd13d94ea6cb05bcf1e94020a0bd5a9f8faec61504edac4c385f95dcbd2f4a3da59eb8a3056162230ae3ae4e4a6c505b20565e5e9d8ad9acc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_ACT={0x3d0, 0x2, [@m_connmark={0xcc, 0xa, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x3, 0x0, 0x4d}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x101, 0x0, 0x7, 0x5}, 0x100}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x598, 0xc, 0x1, 0x1000, 0x6}, 0xb32}}]}, {0x46, 0x6, "3d9a01a576fbd0b7f05f03ad18078038d1383b1ac1a6961c4bd2be8720a709655d9af121c2e32d92eb5e8fd268dbec7d67e9bd6a35fe6a0e4cb1822d65aa17098b2c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x6c, 0xd, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x807, 0x9ac8, 0x1, 0x6, 0x369}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x19f4, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x813, 0x5}}]}, {0xf, 0x6, "12affc61723092927a8a2e"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0x1a0, 0x5, 0x0, 0x0, {{0xf}, {0x98, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6c04d53c}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0xffffffff, 0x4, 0x6c71, 0x800}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1}]}, {0xda, 0x6, "5f61c6a7d83dc21d28f99a36a6265cf8a90c4cdc96b95c5ba6aa41fc63aea275533b6864d4faccb6cbc287a84bd9090679869f48a22e06fc259e274c92315403dabbc80ac837092ec4119d8c1a64b0b1368f7b5883903fa217794dfd1dca5ad319aa1a5e7c8b8f95b7afa3b5c7f97141814f8375e92f2d2d7f2bb78a4af8916c9e64fb4316950161dbd5ef1f3d5b195f9f40ca5012892e1b2863055147ef1a5780dd5020b080a3a17d97c2d2b54f6630b6328b24eb40c3d7fed8b7be192945d20e0a4bd016f88ff183b0b425e8e7b4d26b9047c40879"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_gact={0xf4, 0x6, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x8, 0x4, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x969, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2193, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x7, 0xc, 0x5, 0xf}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a1, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x7c1, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x2, 0x4, 0x7ff, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1edc}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1f3c, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2695, 0x3}}]}, {0x29, 0x6, "58d90e00901ac978fd87eae8e6ae0c57d4ecfa70bd1beca1a03169ad660e00414494df5f70"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0xffe0}}, @TCA_MATCHALL_ACT={0x164, 0x2, [@m_skbmod={0x64, 0x5, 0x0, 0x0, {{0xb}, {0x20, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x200}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x1a, 0x6, "ae0505ab016e7ecef90279caff302278c49265e30b66"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0xfc, 0x1d, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2e00}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7b}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x101}]}, {0xb8, 0x6, "b2756744255a898d95dc71c16e069e9befe065e369a7aa614773e49e888e7bbc97cd282f11613113a6eb8fe00800b6c210327b3953e090c69addb44a1c0b0b5e23947193d40693dbda119751242929f9ffc686fcdfc30a1f847e99a14673846cb6276c5af21522425a3a747d4a517407e752d14a672556a5a2c3bf4a5a5c741e22f6ff106f0c2fcb768609669c2d1588920ad62662ed54ea30f6534004c49473875e2d5e20b0e44d5624d8f51fc8a6f5b73c374e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x704}, 0x1, 0x0, 0x0, 0x4020000}, 0x44010) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x0, 0x1, 0x7a, {0x7a, 0x11, "3d537e34b3f4496398a222ab0acbc26f4fb2ad2aa79b69defedcfd9b88192c7736cf0d036c9b5e99b40157e12aa27b9f0c83c283fcb88a91bc3d256dbc5927b1a2777dc19664cf31dd38870242987efd65f6788fd460cf51ac3cad0cf4a568c40fb0c1eee5ed97c72bae8f7be714654688ad1e4afdbde3c4"}}, &(0x7f0000000440)={0x0, 0x3, 0x76, @string={0x76, 0x3, "13b315a343144f1fc500ad782bbecb01cd970b4fee718967e141333a775b2954696b4317dd5ad1a38f08429616885ad8f0408f21a1af033ce377f9ee91e71b0ba80987d5171e682be2c9a3e0419f60f9e07dc6714d85ee55f94c3abb58e5a91162bde7c4f219dfafa64b56e08287c689c23bf88a"}}, &(0x7f00000004c0)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0xa, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x7, 0x4, 0xffff, 0x7}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x7ffffff, 0x1e880, 0x2, [0xc0c0]}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x2, 0x20, 0x5, "3b826e48", "44b21aae"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x60, 0x81, 0x7, 0x4c, 0x6, 0xe}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000600)={0x20, 0x17, 0x98, "432af302baff8fc27b321c796a334a8eab3595b9f15d18ef26b85e53f73a09d90b46a92ed5798d510ad25b787a04fa66911405956ad823f2e32bb0dc276fb235423a52cb08f6c863a81f0434311e621eea5b16c7a3d09c9fb4ac52b7be4a3a2e7816bd9512da424a452e2763ecb43ec6a522f35217db910327bce560bc0a7743cf56d542756d61fc9a5ab6b15e2e9c097d410d989940db8b"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x1900, 0x2, [0xf00f]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x1}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0xc}, &(0x7f0000000900)={0x40, 0xb, 0x2, "eab6"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x623}, &(0x7f0000000980)={0x40, 0x13, 0x6}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000a00)={0x40, 0x19, 0x2, 'm&'}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0xf576}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x1a}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x3}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0x0, 0x2}, 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r6, 0x40bc5311, &(0x7f0000000300)={0xffff1451, 0x0, 'client0\x00', 0x80000000, "0637bbd0bc72aee1", "0b106b46372a9c24d1f1e095b5e6089b349aee758b34eaa0cb562048c42b2405", 0x1000, 0x5}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'geneve1\x00', &(0x7f00000001c0)=@ethtool_ts_info}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="0016000000006113a58f665e6ac96aba1bb6e2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11m42.568920021s ago: executing program 2 (id=4567): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x30, 0x18, 0x0, 0x0, @binary="0dac0f000aac0f005608936caaf06bec869c1eba340c8e5349c00de3bf542907da861ef4bbab00d0043522c1"}]}, 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) chroot(&(0x7f0000002940)='./file0\x00') unshare(0x22020600) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000056d000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0}}, 0x40859) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001300010029bd70000500000000000000", @ANYRES32=r11, @ANYBLOB="201000000904000008000a00", @ANYRES32=r10, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804) unshare(0x4000300) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r12, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r13, r12}}, 0x18) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x10000, 0x6000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9fae702d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b9f802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963cd14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb193213f4bccab1c34c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f0d9ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d579531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a785d820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37dfd149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f2729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab21842da1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336343f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11m41.516571098s ago: executing program 2 (id=4574): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000001040)={0x8000, 0x40, 0x3, 0x1000, 0x10, "c727588f16c1d785"}) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, &(0x7f00000014c0)=0xff1) ioctl$KDFONTOP_COPY(r2, 0x4b72, &(0x7f0000001480)={0x3, 0x0, 0x4, 0x12, 0x3d, &(0x7f0000001080)}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) syz_usb_connect(0x0, 0x4f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023d0c020000000009049c00030103510009050a00000000000009050313000000000003270103"], 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000200)) (async) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) flistxattr(r4, &(0x7f00000005c0)=""/202, 0xca) (async) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000001500)=0x0) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000000), &(0x7f0000000140)=r7}, 0x20) (async) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) (async) syz_usb_control_io$hid(r9, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0x9, "8b8e"}, @main=@item_4={0x3, 0x0, 0x7, "df66e697"}]}}, 0x0}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x2, r5, 0x0, &(0x7f0000001540)) write$UHID_INPUT(r1, &(0x7f0000000000)={0x7, {"a2e3ad21ed0d52f91b5d520987f70e06d038e7fd7fc6e5539b0d47078b089b3907376d090890e0878f0e1ac6e7049b334a959b669a240d5d67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07670936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70fe98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf1a34af674f3f39fe23491235c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e470dea05918b41243513f000800000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3e3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14d9fdb8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a19000000000000006f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69b15c9f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d44400009a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc01008cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c16c02ed4b5d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaab1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106d26658b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6b14effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c110000a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b51028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6815d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3f3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51090840517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4e004a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6ce1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c817e9177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d543902113c4c859465c3c115c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc248850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafcc009fc074bb6b68a1f0c4649820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948998cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2fd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5dc4ff8f0104000000000000df72279fdb0d2b9e936e5a983c12fded79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d3700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc642df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa6e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9f07b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e3ebb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3fec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4cddd5d0fc5a752f9000", 0x1000}}, 0x1006) 11m40.776319179s ago: executing program 2 (id=4576): fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000001040)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x372, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x100000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r6 = add_key$user(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000480)="2f77abd63ebfe7dbf2f6bfd198b30957f888d4114bbe8a57a5fdc09f903c1d7b5fa8f24db0fdafe48b0405a97cdb0826dc0000000000a1cc5ec9c66a9914a800bdaf69416b535f3c35d8950367b47dec292546c56079060001ee9c74cdc83c4ce9b1e4ef329334b3efedd1e50100000041173086073cae790d486b0881febbce71d1a2331f3a6bf67b9317d0d37ab63d65c6b2d66e6b46ab901d4189a4fc154b6a", 0xa1, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 11m40.113217544s ago: executing program 34 (id=4576): fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000001040)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x372, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x100000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r6 = add_key$user(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000480)="2f77abd63ebfe7dbf2f6bfd198b30957f888d4114bbe8a57a5fdc09f903c1d7b5fa8f24db0fdafe48b0405a97cdb0826dc0000000000a1cc5ec9c66a9914a800bdaf69416b535f3c35d8950367b47dec292546c56079060001ee9c74cdc83c4ce9b1e4ef329334b3efedd1e50100000041173086073cae790d486b0881febbce71d1a2331f3a6bf67b9317d0d37ab63d65c6b2d66e6b46ab901d4189a4fc154b6a", 0xa1, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 8m39.404154663s ago: executing program 5 (id=5302): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406c256e0000000000000109022400010000000009042000010300220009210000000122030009058103"], 0x0) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) exit(0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) (async) socket$nl_audit(0x10, 0x3, 0x9) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = openat(0xffffffffffffff9c, 0x0, 0x202400, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681000000ba8b0ad775b31b", 0xe, 0xfffffffffffffffc) (async) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) (async) r6 = syz_open_pts(r5, 0x141601) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e000000000000800600000001000000a1000000f01fa03ecb06ce03d31e8dd654ebe8010ee7a3ce4dd002558e7e48d0c1868ae14a49f6abba1d", @ANYRES32=r3, @ANYBLOB="ff0300"/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="0400000000000000000000000b00"/28], 0x50) (async) fcntl$setstatus(r6, 0x4, 0x102800) write(r6, &(0x7f0000000000), 0x0) (async) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x582}) (async) keyctl$update(0x2, r4, &(0x7f0000000240)="ea6e367c0d981f911e4fba225f3a984c43b626e52024b33a9a9e2843a3b1885f96aaee8e3ffcc7f550a31cfa7e997f2596fd1b946cb4e5c4d880644779a9bc4a8a791028c2da5defafbe873237daf7fe6848115f06cd15f8e86a6487eb0be4b0c6705decbefcb3f3cc32fb7edc85e8d9dd", 0x71) 8m39.217419049s ago: executing program 5 (id=5303): syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b"], 0x0) (async) syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) fcntl$getown(r2, 0x9) (async) sendmsg(r1, 0x0, 0x400000d4) sched_setattr(0x0, 0x0, 0x0) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f00000000c0)={0x2f01, 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r6 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) getpeername$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) close(r0) accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000200)={0x6, {0x21, 0x0, 0x4, 0x44a4, 0xb53}}) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 8m39.167083103s ago: executing program 5 (id=5304): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000001c0)={'Wc9\t', 0x0, 0x6, 0x3, 0x0, 0x0, "09000000e3ff00", "000200", "00ff0200", "798a202d", ["c2fffedbff00ffdfffffffff", "ffff08000000000000042371", "070500110800c1024b00", "38a70ed483c99b9f1600d333"]}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0000008019000000000000000000000000000018000000000041a9e50b00", [0x0, 0x2000000000001]}}) 8m39.025339485s ago: executing program 5 (id=5306): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) r2 = socket$inet6(0xa, 0x80002, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x2) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80101) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) chroot(&(0x7f0000000780)='./file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0/../file0/../file0/file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x7c61d607c6d94c11, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000010000000e6cb00000200000000000000", @ANYRES32, @ANYBLOB="be00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000100000002000000000000000000000800000000"], 0x50) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r7 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) ioctl$VIDIOC_G_FMT(r7, 0xc0d05605, &(0x7f0000000380)={0xd, @sdr={0x34324142, 0x8}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="1800001b32955f18b63f8362c12219004200e900feffffff00000000037c8f35b46ea8a6"], 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) fcntl$setpipe(r0, 0x407, 0xfb6) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x9d, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) 8m37.619492601s ago: executing program 5 (id=5310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x54}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]}) (async) close(0x4) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async, rerun: 64) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) (async) landlock_create_ruleset(&(0x7f0000000080)={0x800, 0x2}, 0x18, 0x1) (async) socket$kcm(0xa, 0x2, 0x3a) (async, rerun: 32) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040)="00000000f5ff", 0x6, 0xfffffffffffffffd) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, 0x0}], 0x1, 0xc, &(0x7f0000000300)=[@cr0={0x0, 0x281ef4afd50196de}], 0x1) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (rerun: 64) fsetxattr$security_capability(r7, &(0x7f00000000c0), 0x0, 0x0, 0x1) (async) write$cgroup_freezer_state(r7, &(0x7f00000000c0)='THAWED\x00', 0x7) sendmsg$nl_generic(r6, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000252a0003002abd7000f70a2a80e6abe5ff"], 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x200001c4) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 8m37.18532212s ago: executing program 5 (id=5312): r0 = socket$inet6(0xa, 0x4, 0x2) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@empty, 0x4e20, 0x0, 0x0, 0xbfcc, 0xa, 0x10, 0x20, 0x67}, {0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x87a, 0xffffffdfffffffff, 0x0, 0x7, 0x9}, {0x2, 0x3, 0x400, 0x3}, 0x3, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in=@multicast2, 0x0, 0x3c}, 0x2, @in=@local, 0x0, 0x4, 0x2, 0x0, 0x0, 0x20000000}}, 0xe8) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469"], 0x94}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa4180c20000000800460000280000000000119078000000000000000007"], 0x0) (async) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x1, 0xf5, &(0x7f0000002280)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="4712c029b8b02cd8e55274538d7adc556bb19cbb360e08f795a6326e0d2aa4900be94ce863fd8979f4c0e2c4f72b2ee4ebd1f9021203aa190fe76f0733a7a6cb48a2fa81a14a108ace755e7610b39ac4516ee8d6374b04adbde137f4603bac1d269eb1e0a46a148f477576d1b1e31ff97f7932fa0f173699e7a83463e3874df25cf5bf20e82f93efd8aef8c946", @ANYRES32=r0], 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) (async) r3 = socket$kcm(0x29, 0x2, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000000), 0x4) (async) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) sendto$inet6(r2, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) recvmmsg(r2, &(0x7f0000005500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/6, 0x6}, 0x4}], 0x1, 0x22, 0x0) (async) r6 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:10 1', 0x19) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) (async) syz_clone(0x2a809000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtaction={0x14, 0x1d, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x890}, 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201931b21d3dc70bd665bc7c6bd781ee456010203010902120001000010000904a040000897010000000000"], 0x0) (async) r8 = socket$kcm(0x2, 0xa, 0x2) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000140)) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') 8m36.9492531s ago: executing program 35 (id=5312): r0 = socket$inet6(0xa, 0x4, 0x2) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@empty, 0x4e20, 0x0, 0x0, 0xbfcc, 0xa, 0x10, 0x20, 0x67}, {0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x87a, 0xffffffdfffffffff, 0x0, 0x7, 0x9}, {0x2, 0x3, 0x400, 0x3}, 0x3, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in=@multicast2, 0x0, 0x3c}, 0x2, @in=@local, 0x0, 0x4, 0x2, 0x0, 0x0, 0x20000000}}, 0xe8) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469"], 0x94}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa4180c20000000800460000280000000000119078000000000000000007"], 0x0) (async) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x1, 0xf5, &(0x7f0000002280)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="4712c029b8b02cd8e55274538d7adc556bb19cbb360e08f795a6326e0d2aa4900be94ce863fd8979f4c0e2c4f72b2ee4ebd1f9021203aa190fe76f0733a7a6cb48a2fa81a14a108ace755e7610b39ac4516ee8d6374b04adbde137f4603bac1d269eb1e0a46a148f477576d1b1e31ff97f7932fa0f173699e7a83463e3874df25cf5bf20e82f93efd8aef8c946", @ANYRES32=r0], 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) (async) r3 = socket$kcm(0x29, 0x2, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000000), 0x4) (async) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) sendto$inet6(r2, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) recvmmsg(r2, &(0x7f0000005500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/6, 0x6}, 0x4}], 0x1, 0x22, 0x0) (async) r6 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:10 1', 0x19) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) (async) syz_clone(0x2a809000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtaction={0x14, 0x1d, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x890}, 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201931b21d3dc70bd665bc7c6bd781ee456010203010902120001000010000904a040000897010000000000"], 0x0) (async) r8 = socket$kcm(0x2, 0xa, 0x2) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000140)) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') 5.47949596s ago: executing program 6 (id=7471): r0 = socket(0x2, 0x80805, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x0, 0x701, 0x10, 0xfffffffe, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0xc008}, 0x400c000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x85, &(0x7f0000000200)={r2, @in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x80}}, 0x2, 0x0, 0x4, 0x833, 0x4, 0x8, 0x2}, &(0x7f00000001c0)=0x9c) 5.367784714s ago: executing program 6 (id=7474): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) chdir(&(0x7f0000000080)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto(r2, &(0x7f0000000680), 0x0, 0x24008804, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket(0xa, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r6 = dup(r4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 5.198378017s ago: executing program 4 (id=7476): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x82}, {{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x1}], 0x2, 0x10103, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) capset(0x0, &(0x7f0000000200)={0xffff8001, 0x19, 0x6c7, 0x3, 0x7, 0xff}) 4.962902645s ago: executing program 4 (id=7477): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) recvmsg$can_raw(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1}, 0xf0) 4.914063359s ago: executing program 4 (id=7478): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a300000009b5400030062930f94ec5004c16d7649cc1c7f56"], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) 4.70291276s ago: executing program 4 (id=7481): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.500416021s ago: executing program 4 (id=7483): syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b01000000090400"], 0x0) 4.049426112s ago: executing program 6 (id=7487): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x3f, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x3, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000000)=""/224) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000009c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x8b, 0x100000500) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3.912206907s ago: executing program 6 (id=7491): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r0, 0x0, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000080)="9f2857ba", 0x4}], 0x1) 3.809671463s ago: executing program 6 (id=7492): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) write$char_usb(r1, &(0x7f0000006800)="10", 0x20) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.83468755s ago: executing program 8 (id=7500): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x13, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.794436734s ago: executing program 8 (id=7501): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000001300)=""/244, 0xf4}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) pselect6(0x40, &(0x7f0000000140)={0x1, 0x4, 0x3, 0xff, 0x4, 0xea2b, 0x7, 0x2300000000000}, 0x0, &(0x7f00000001c0)={0x9, 0xbb18, 0x2, 0xc, 0x0, 0x4f, 0x0, 0x4}, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) write$UHID_INPUT(r2, 0x0, 0x0) 2.324626916s ago: executing program 7 (id=7507): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.26652104s ago: executing program 7 (id=7508): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80, 0xce, 0x0, 0x1000}}}}}}, 0x0) 2.172810767s ago: executing program 7 (id=7509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf253000000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4008080) 2.14624411s ago: executing program 7 (id=7510): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000200)={0x28, r1, 0x11, 0x70ad2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffffb, 0x2d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x10) 2.08845584s ago: executing program 7 (id=7511): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r0, 0x107, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000380)={0x0, 0x3, 0x10, 0x1, 0x10001}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x2, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 1.849273413s ago: executing program 8 (id=7515): syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mlock2(&(0x7f00002c0000/0x1000)=nil, 0x1000, 0x1) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 1.534952375s ago: executing program 3 (id=7517): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x3f, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x3, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000000)=""/224) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000009c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x8b, 0x100000500) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.417701562s ago: executing program 3 (id=7518): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x9, 0x0, 0xc00, 0x5, 0x3, 0x101}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x3ff}]}}}]}, 0x58}}, 0x0) 1.417184681s ago: executing program 4 (id=7519): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) r1 = socket$l2tp(0x2, 0x2, 0x73) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x5, 0x9, 0x2]}, &(0x7f0000000300)=0x44) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)) timer_create(0x3, 0x0, &(0x7f0000002900)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) 1.192920939s ago: executing program 3 (id=7520): r0 = semget$private(0x0, 0x4000000009, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000300)=""/84) 1.068631395s ago: executing program 8 (id=7521): r0 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r1 = fanotify_init(0xf00, 0x1) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) unlink(0x0) rmdir(&(0x7f0000000000)='./file0\x00') 941.591166ms ago: executing program 3 (id=7522): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mq_notify(0xffffffffffffffff, 0x0) 833.786352ms ago: executing program 8 (id=7523): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001900010000000000140000001c140001"], 0x24}}, 0x0) 831.252796ms ago: executing program 3 (id=7524): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x3f, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x3, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000000)=""/224) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000009c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 676.840532ms ago: executing program 3 (id=7525): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x3f, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x3, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000000)=""/224) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000009c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 533.308966ms ago: executing program 7 (id=7526): r0 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x6000) remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000000, 0x25d, 0xdd7fcced10e30d14) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) r9 = socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x203}]}}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48041}, 0x40040) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2, 0xffffffffffffffff}, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x1d, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb6}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r12, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 532.83676ms ago: executing program 8 (id=7527): mmap(&(0x7f000024e000/0x4000)=nil, 0x4000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x8, 0x5, 0x3) mq_open(&(0x7f00000000c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r3 = syz_io_uring_setup(0x10d4, &(0x7f0000000300)={0x0, 0x9cb, 0x80, 0x1, 0x20000fa}, &(0x7f0000000240)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=7528): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x3f, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x3, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000000)=""/224) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000009c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x8b, 0x100000500) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): 0x81 has an invalid bInterval 0, changing to 7 [ 1549.448863][T29741] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1549.454217][T29755] ti_usb_3410_5052 4-1:0.94: required endpoints missing [ 1549.459561][T29741] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1549.478471][T29741] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.483897][T29755] usb 4-1: bad CDC descriptors [ 1549.562936][T29755] ti_usb_3410_5052 4-1:0.193: required endpoints missing [ 1549.565269][T29741] usb 9-1: config 0 descriptor?? [ 1549.574198][T29755] ti_usb_3410_5052 4-1:0.246: required endpoints missing [ 1549.596624][T29755] ti_usb_3410_5052 4-1:0.21: required endpoints missing [ 1549.614020][T29755] usb 4-1: USB disconnect, device number 78 [ 1549.678047][T29741] hub 9-1:0.0: USB hub found [ 1549.849612][T29741] hub 9-1:0.0: 1 port detected [ 1549.959892][T30162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1549.971658][T30162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1550.480413][T29741] hub 9-1:0.0: activate --> -90 [ 1550.531834][T30176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6807'. [ 1550.697628][T29787] cdc_ncm 7-1:1.0: invalid descriptor buffer length [ 1550.712806][T29787] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 1550.727029][T29787] cdc_ncm 7-1:1.0: bind() failure [ 1550.751914][T29787] usb 7-1: USB disconnect, device number 108 [ 1550.886201][T29785] usb 9-1: USB disconnect, device number 89 [ 1551.217077][T22279] usb 7-1: new full-speed USB device number 109 using dummy_hcd [ 1551.395325][T22279] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1551.418512][T22279] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1551.533490][T30192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6811'. [ 1551.549429][T22279] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1551.565930][T22279] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1551.575766][T22279] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.584445][T22279] usb 7-1: Product: syz [ 1551.589717][T22279] usb 7-1: Manufacturer: syz [ 1551.594420][T22279] usb 7-1: SerialNumber: syz [ 1551.624238][T22279] usb 7-1: config 0 descriptor?? [ 1551.637044][T30182] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1551.644645][T30182] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1551.661917][T22279] usb 7-1: ucan: probing device on interface #0 [ 1552.000027][T30199] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1552.052102][T29785] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 1552.262063][T22279] usb 7-1: ucan: device reported invalid device info [ 1552.269232][T22279] usb 7-1: ucan: probe failed; try to update the device firmware [ 1552.279713][T29785] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1552.292222][T29785] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1552.314554][T29785] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1552.330273][T29785] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.408075][T29785] usb 9-1: config 0 descriptor?? [ 1552.507081][T22279] usb 7-1: USB disconnect, device number 109 [ 1552.591764][T30208] : renamed from bridge_slave_0 [ 1552.872677][T29785] hid-led 0003:27B8:01ED.0043: item fetching failed at offset 4/5 [ 1552.883597][T29785] hid-led 0003:27B8:01ED.0043: probe with driver hid-led failed with error -22 [ 1553.947447][T29755] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1554.097090][T29755] usb 4-1: Using ep0 maxpacket: 8 [ 1554.103900][T29755] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1554.113836][T29755] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1554.124040][T29755] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1554.134375][T29755] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1554.147684][T29755] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1554.156754][T29755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.187097][T22279] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 1554.337133][T22279] usb 7-1: Using ep0 maxpacket: 8 [ 1554.343732][T22279] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1554.355426][T22279] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1554.365414][T22279] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 1554.378967][T29755] usb 4-1: GET_CAPABILITIES returned 0 [ 1554.384701][T29755] usbtmc 4-1:16.0: can't read capabilities [ 1554.390895][T22279] usb 7-1: string descriptor 0 read error: -71 [ 1554.398690][T22279] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1554.408804][T22279] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.421993][T22279] usb 7-1: rejected 1 configuration due to insufficient available bus power [ 1554.432126][T22279] usb 7-1: no configuration chosen from 1 choice [ 1554.440265][T22279] usb 7-1: USB disconnect, device number 110 [ 1554.591257][T30219] tap0: tun_chr_ioctl cmd 1074025675 [ 1554.596779][T30219] tap0: persist enabled [ 1554.606458][T30219] tap0: tun_chr_ioctl cmd 1074025675 [ 1554.618263][T30219] tap0: persist disabled [ 1554.681160][T22279] usb 9-1: USB disconnect, device number 90 [ 1554.696535][T29785] usb 4-1: USB disconnect, device number 79 [ 1554.864559][T30237] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6824'. [ 1555.118263][T30242] netlink: 88 bytes leftover after parsing attributes in process `syz.8.6827'. [ 1555.206203][T30242] block device autoloading is deprecated and will be removed. [ 1557.356993][T29741] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 1557.549275][T29741] usb 9-1: config index 0 descriptor too short (expected 28277, got 36) [ 1557.557935][T29741] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1557.628966][T29741] usb 9-1: config 0 has no interfaces? [ 1557.925126][T29741] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1557.949513][T29741] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.992855][T29741] usb 9-1: config 0 descriptor?? [ 1560.575418][T22279] usb 9-1: USB disconnect, device number 91 [ 1560.745513][T30323] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 1561.318883][T30333] RDS: rds_bind could not find a transport for ::e0:0:0:0:1, load rds_tcp or rds_rdma? [ 1561.573318][T30342] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6853'. [ 1561.752403][T29741] usb 7-1: new full-speed USB device number 111 using dummy_hcd [ 1561.960677][T29741] usb 7-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=63.01 [ 1561.971926][T29741] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.067203][T29741] usb 7-1: Product: syz [ 1562.071421][T29741] usb 7-1: Manufacturer: syz [ 1562.093041][T29741] usb 7-1: SerialNumber: syz [ 1562.104373][T29741] usb 7-1: config 0 descriptor?? [ 1562.141783][T30364] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6856'. [ 1562.320557][T30338] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6851'. [ 1563.808157][T22279] usb 9-1: new full-speed USB device number 92 using dummy_hcd [ 1563.863040][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1563.863057][ T30] audit: type=1800 audit(1760326311.679:2172): pid=30401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6867" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1563.985597][T22279] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1563.994703][T22279] usb 9-1: not running at top speed; connect to a high speed hub [ 1564.018090][T22279] usb 9-1: config 17 has an invalid interface number: 8 but max is 1 [ 1564.026416][T22279] usb 9-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 1564.042400][T22279] usb 9-1: config 17 has no interface number 0 [ 1564.058799][T22279] usb 9-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 1564.076852][T22279] usb 9-1: config 17 interface 8 has no altsetting 0 [ 1564.089397][T22279] usb 9-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 1564.242616][T30406] overlayfs: missing 'lowerdir' [ 1564.269936][T22279] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.286093][T22279] usb 9-1: Product: syz [ 1564.297097][T22279] usb 9-1: Manufacturer: syz [ 1564.321606][T22279] usb 9-1: SerialNumber: syz [ 1564.809635][T29741] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1564.834465][T29741] usb 7-1: USB disconnect, device number 111 [ 1565.113615][T16671] udevd[16671]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1566.037093][T29741] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1566.245674][T29741] usb 4-1: Using ep0 maxpacket: 32 [ 1566.251686][T29741] usb 4-1: too many configurations: 196, using maximum allowed: 8 [ 1566.262710][T29741] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1566.271166][T29741] usb 4-1: can't read configurations, error -61 [ 1566.390711][T30431] ip6gre2: entered promiscuous mode [ 1566.407121][T29741] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1566.426499][T22279] usb 9-1: selecting invalid altsetting 0 [ 1566.445626][T22279] usb 9-1: 8:6 : no UAC_FORMAT_TYPE desc [ 1566.476058][T22279] usb 9-1: selecting invalid altsetting 0 [ 1566.536219][T22279] usb 9-1: USB disconnect, device number 92 [ 1566.557028][T29741] usb 4-1: Using ep0 maxpacket: 32 [ 1566.563606][T29741] usb 4-1: too many configurations: 196, using maximum allowed: 8 [ 1566.607367][T29741] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1566.658369][T29741] usb 4-1: can't read configurations, error -61 [ 1566.695401][T29741] usb usb4-port1: attempt power cycle [ 1566.961313][T30444] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6878'. [ 1567.067168][T29741] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1567.137697][T29741] usb 4-1: Using ep0 maxpacket: 32 [ 1567.143560][T29741] usb 4-1: too many configurations: 196, using maximum allowed: 8 [ 1567.154199][T29741] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1567.165442][T29741] usb 4-1: can't read configurations, error -61 [ 1567.307085][T29741] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1567.327942][T29741] usb 4-1: Using ep0 maxpacket: 32 [ 1567.334100][T29741] usb 4-1: too many configurations: 196, using maximum allowed: 8 [ 1567.349473][T29741] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1567.360921][T29741] usb 4-1: can't read configurations, error -61 [ 1567.370931][T29741] usb usb4-port1: unable to enumerate USB device [ 1567.479537][T30434] delete_channel: no stack [ 1567.557488][T22279] usb 9-1: new high-speed USB device number 93 using dummy_hcd [ 1567.746580][T22279] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1567.846997][T22279] usb 9-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1567.868973][T22279] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.905231][T22279] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1567.928363][T30457] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1568.026630][T30453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1568.036025][T30453] 8021q: adding VLAN 0 to HW filter on device team0 [ 1568.067673][T30453] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1568.128791][T30448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1568.176040][T30448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1568.288775][T30448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1568.307534][T30448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1568.731218][T30462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1568.740260][T30462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1568.947576][T22279] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 1568.957240][T22279] stv0680 9-1:4.0: STV(e): camera ping failed!! [ 1568.964271][T22279] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1568.973396][T22279] stv0680 9-1:4.0: last error: 0, command = 0x0 [ 1569.177556][T22279] usb 9-1: USB disconnect, device number 93 [ 1569.187300][T29785] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1569.210179][T30473] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1569.224813][T30473] bond3: entered promiscuous mode [ 1569.231636][T30473] team0: Port device bond3 added [ 1569.336957][T29785] usb 4-1: Using ep0 maxpacket: 32 [ 1569.344558][T29785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1569.365999][T29785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1569.376859][T29785] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1569.386215][T29785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.402150][T29785] usb 4-1: config 0 descriptor?? [ 1569.486993][T22279] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 1569.615704][T29785] ft260 0003:0403:6030.0044: unknown main item tag 0x7 [ 1569.619041][T22279] usb 9-1: device descriptor read/64, error -71 [ 1569.813871][T29785] ft260 0003:0403:6030.0044: chip code: 6424 8183 [ 1569.867225][T22279] usb 9-1: new high-speed USB device number 95 using dummy_hcd [ 1569.968698][T30479] netlink: 'syz.4.6886': attribute type 5 has an invalid length. [ 1569.976567][T30479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6886'. [ 1569.997011][T22279] usb 9-1: device descriptor read/64, error -71 [ 1570.014578][T29785] ft260 0003:0403:6030.0044: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 1570.042746][T29785] ft260 0003:0403:6030.0044: failed to retrieve status: -71, no wakeup [ 1570.057482][T29785] ft260 0003:0403:6030.0044: failed to retrieve status: -71 [ 1570.065378][T29785] ft260 0003:0403:6030.0044: failed to reset I2C controller: -71 [ 1570.092661][T29785] usb 4-1: USB disconnect, device number 84 [ 1570.108704][T22279] usb usb9-port1: attempt power cycle [ 1570.437073][T29785] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 1570.458042][T22279] usb 9-1: new high-speed USB device number 96 using dummy_hcd [ 1570.479209][T22279] usb 9-1: device descriptor read/8, error -71 [ 1570.624794][T29785] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1570.634728][T29785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.642991][T29785] usb 4-1: Product: syz [ 1570.647383][T29785] usb 4-1: Manufacturer: syz [ 1570.651985][T29785] usb 4-1: SerialNumber: syz [ 1570.658894][T29785] usb 4-1: config 0 descriptor?? [ 1570.716830][T30488] 8ÿ: entered promiscuous mode [ 1570.717047][T22279] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 1570.737764][T30488] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6889'. [ 1570.747752][T22279] usb 9-1: device descriptor read/8, error -71 [ 1570.858735][T22279] usb usb9-port1: unable to enumerate USB device [ 1570.868432][T29785] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1570.893663][T29785] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1570.916687][T29785] usb 4-1: USB disconnect, device number 85 [ 1571.267808][T29785] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1571.327094][T29741] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 1571.416994][T29785] usb 4-1: Using ep0 maxpacket: 8 [ 1571.424059][T29785] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1571.432954][T29785] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 1571.441229][T29785] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 1571.450013][T29785] usb 4-1: config 4 has no interface number 0 [ 1571.458058][T29785] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1571.468302][T29785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.476303][T29785] usb 4-1: Product: syz [ 1571.480899][T29785] usb 4-1: Manufacturer: ÑŒ [ 1571.485415][T29785] usb 4-1: SerialNumber: syz [ 1571.509361][T29741] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1571.518225][T29741] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1571.528653][T29741] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1571.537814][T29741] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1571.549081][T29741] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1571.562144][T29741] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1571.571325][T29741] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1571.579412][T29741] usb 7-1: Product: syz [ 1571.583726][T29741] usb 7-1: Manufacturer: syz [ 1571.595854][T29741] cdc_wdm 7-1:1.0: skipping garbage [ 1571.601225][T29741] cdc_wdm 7-1:1.0: skipping garbage [ 1571.608276][T29741] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1571.614211][T29741] cdc_wdm 7-1:1.0: Unknown control protocol [ 1571.705432][T29785] uvcvideo 4-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 1571.713025][T29785] uvcvideo 4-1:4.147: No valid video chain found. [ 1571.721895][T29785] usb 4-1: USB disconnect, device number 86 [ 1571.794776][T30497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1571.803746][T30497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1571.813361][T30497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1571.822121][T30497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1571.832409][T30497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1571.842352][T30497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1571.851205][T30497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1571.859968][T30497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1571.869371][T30497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1571.886716][T30497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1571.953439][T29785] usb 7-1: USB disconnect, device number 112 [ 1572.615962][T30561] netlink: 'syz.3.6895': attribute type 10 has an invalid length. [ 1572.640060][T29785] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 1572.689026][T30562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6895'. [ 1572.761526][T30563] netlink: 'syz.3.6895': attribute type 1 has an invalid length. [ 1572.837294][T29785] usb 7-1: Using ep0 maxpacket: 32 [ 1572.954336][T30561] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1572.968022][T30562] bridge0: port 3(team0) entered disabled state [ 1572.981865][T29785] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 1572.990312][T29785] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1573.075194][T29785] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1573.088969][T30562] bridge_slave_1: left allmulticast mode [ 1573.107085][T29785] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1573.127113][T30562] bridge_slave_1: left promiscuous mode [ 1573.132829][T29785] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1573.147674][T30562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.178808][T29785] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1573.201261][T29785] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1573.457495][T29785] usb 7-1: Product: syz [ 1573.461706][T29785] usb 7-1: Manufacturer: syz [ 1573.488861][T29785] usb 7-1: SerialNumber: syz [ 1573.506805][T29785] usb 7-1: config 0 descriptor?? [ 1573.538602][T29785] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1573.617454][T29785] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1573.674018][T30562] : left allmulticast mode [ 1573.686330][T30562] : left promiscuous mode [ 1573.708483][T30562] bridge0: port 1() entered disabled state [ 1573.836410][T30566] netlink: 256 bytes leftover after parsing attributes in process `syz.8.6897'. [ 1573.928426][T30571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1573.942709][T30571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1574.078786][T30562] bond0: (slave bridge0): Releasing backup interface [ 1574.133675][T21778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1574.145304][T21778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1574.155204][T21778] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1574.164550][T21778] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1574.189025][T21778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1574.428159][T30555] tipc: Enabling of bearer rejected, failed to enable media [ 1574.458552][T29755] usb 7-1: USB disconnect, device number 113 [ 1574.472922][T29755] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 1574.907060][T29785] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1575.082362][T29785] usb 4-1: Using ep0 maxpacket: 16 [ 1575.092755][T29785] usb 4-1: no configurations [ 1575.102127][T29785] usb 4-1: can't read configurations, error -22 [ 1575.247120][T29785] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1575.416970][T29785] usb 4-1: Using ep0 maxpacket: 16 [ 1575.525175][T29785] usb 4-1: no configurations [ 1575.535726][T29785] usb 4-1: can't read configurations, error -22 [ 1575.552548][T29785] usb usb4-port1: attempt power cycle [ 1575.684360][T30576] chnl_net:caif_netlink_parms(): no params data found [ 1575.843540][ T30] audit: type=1326 audit(1760326323.659:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30606 comm="syz.6.6906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1698eec9 code=0x7ffc0000 [ 1575.868554][ T30] audit: type=1326 audit(1760326323.659:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30606 comm="syz.6.6906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1698eec9 code=0x7ffc0000 [ 1575.902367][T29785] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1575.912853][ T30] audit: type=1326 audit(1760326323.689:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30606 comm="syz.6.6906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f1c1698eec9 code=0x7ffc0000 [ 1575.940493][T29785] usb 4-1: Using ep0 maxpacket: 16 [ 1575.950821][ T30] audit: type=1326 audit(1760326323.689:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30606 comm="syz.6.6906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1698eec9 code=0x7ffc0000 [ 1575.973586][T29785] usb 4-1: no configurations [ 1575.978520][T29785] usb 4-1: can't read configurations, error -22 [ 1575.988849][ T30] audit: type=1326 audit(1760326323.689:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30606 comm="syz.6.6906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1698eec9 code=0x7ffc0000 [ 1576.128281][T29785] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1576.160345][T29785] usb 4-1: Using ep0 maxpacket: 16 [ 1576.167121][T29785] usb 4-1: no configurations [ 1576.171738][T29785] usb 4-1: can't read configurations, error -22 [ 1576.178370][T29785] usb usb4-port1: unable to enumerate USB device [ 1576.227173][T21778] Bluetooth: hci4: command tx timeout [ 1576.259925][T30576] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.269998][T30576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.278141][T30576] bridge_slave_0: entered allmulticast mode [ 1576.285708][T30576] bridge_slave_0: entered promiscuous mode [ 1576.308352][T30576] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.316075][T30576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.325983][T30576] bridge_slave_1: entered allmulticast mode [ 1576.334903][T30576] bridge_slave_1: entered promiscuous mode [ 1576.582338][T30576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1576.601677][T30627] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6910'. [ 1576.606434][T30576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1576.615181][T30627] openvswitch: netlink: IP tunnel TTL not specified. [ 1576.629883][T30520] tipc: Resetting bearer [ 1576.736222][T30632] IPv6: Can't replace route, no match found [ 1576.777180][T29741] usb 7-1: new full-speed USB device number 114 using dummy_hcd [ 1576.940077][T29741] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1576.951492][T29741] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1576.962906][T29741] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1576.975936][T29741] usb 7-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1576.985179][T29741] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.001484][T29741] usb 7-1: config 0 descriptor?? [ 1577.413597][T29741] usbhid 7-1:0.0: can't add hid device: -71 [ 1577.422243][T29741] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1577.433994][T29741] usb 7-1: USB disconnect, device number 114 [ 1577.468865][T30520] tipc: Disabling bearer [ 1577.813166][T30643] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6914'. [ 1577.822864][T30643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6914'. [ 1577.874751][T30643] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1578.307128][T21778] Bluetooth: hci4: command tx timeout [ 1578.478000][T30520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1578.537634][T30520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1578.557874][T30520] bond0 (unregistering): Released all slaves [ 1579.358202][T30520] bond1 (unregistering): Released all slaves [ 1579.371454][T30520] bond2 (unregistering): Released all slaves [ 1580.119667][T30520] bond3 (unregistering): Released all slaves [ 1580.388177][T21778] Bluetooth: hci4: command tx timeout [ 1580.397045][T30520] .: left promiscuous mode [ 1580.786020][T30576] team0: Port device team_slave_0 added [ 1580.804690][T30520] tipc: Left network mode [ 1580.820709][T30576] team0: Port device team_slave_1 added [ 1580.893586][T30520] IPVS: stopping backup sync thread 29495 ... [ 1581.114025][T29785] usb 7-1: new full-speed USB device number 115 using dummy_hcd [ 1581.133898][T30576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1581.152785][T30576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1581.201115][T30576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1581.245237][T30576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1581.269473][T30709] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6928'. [ 1581.277050][T30576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1581.318774][T29785] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1581.345899][T29785] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1581.379871][T30576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1581.407074][T29785] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1581.440655][T29785] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1581.494966][T29785] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1581.569495][T29785] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1581.580838][T29785] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1581.596266][T29785] usb 7-1: Product: syz [ 1581.603270][T29785] usb 7-1: Manufacturer: syz [ 1581.611280][T29785] usb 7-1: SerialNumber: syz [ 1581.644908][T29785] usb 7-1: config 0 descriptor?? [ 1581.879635][T30720] netlink: 'syz.3.6930': attribute type 4 has an invalid length. [ 1581.918529][T29785] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1581.933321][T29785] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1581.947403][T30721] netlink: 'syz.3.6930': attribute type 4 has an invalid length. [ 1582.123711][T29785] radio-si470x 7-1:0.0: software version 0, hardware version 0 [ 1582.131898][T29785] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1582.148703][T29785] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1582.299464][T30576] hsr_slave_0: entered promiscuous mode [ 1582.324521][T29785] radio-si470x 7-1:0.0: submitting int urb failed (-90) [ 1582.334640][T30576] hsr_slave_1: entered promiscuous mode [ 1582.360969][T30576] debugfs: 'hsr0' already exists in 'hsr' [ 1582.370910][T30576] Cannot create hsr debugfs directory [ 1582.409076][T22279] usb 9-1: new high-speed USB device number 98 using dummy_hcd [ 1582.467521][T21778] Bluetooth: hci4: command tx timeout [ 1582.606991][T22279] usb 9-1: Using ep0 maxpacket: 32 [ 1582.647021][T22279] usb 9-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1582.656488][T22279] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.728294][T29785] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1582.733248][T22279] usb 9-1: config 0 descriptor?? [ 1582.739516][T29785] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -22 [ 1582.771072][T22279] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1582.789055][T29785] usb 7-1: USB disconnect, device number 115 [ 1583.419928][T30520] hsr_slave_0: left promiscuous mode [ 1583.501435][T22279] gspca_sunplus: reg_w_riv err -71 [ 1583.506612][T22279] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 1583.564888][T22279] usb 9-1: USB disconnect, device number 98 [ 1583.638734][T30520] pim6reg (unregistering): left allmulticast mode [ 1584.562688][T30770] input: syz0 as /devices/virtual/input/input131 [ 1585.137767][T30786] input: syz0 as /devices/virtual/input/input132 [ 1589.718997][T30520] IPVS: stop unused estimator thread 0... [ 1590.224604][T30576] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1590.261709][T30576] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1590.532703][T30576] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1590.644655][T30576] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1590.991589][T30576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1591.105462][ T30] audit: type=1326 audit(1760326338.899:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30864 comm="syz.7.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c998eec9 code=0x7ffc0000 [ 1591.145957][T30576] 8021q: adding VLAN 0 to HW filter on device team0 [ 1591.189069][T30518] bridge0: port 1(bridge_slave_0) entered blocking state [ 1591.196330][T30518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1591.208676][ T30] audit: type=1326 audit(1760326338.909:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30864 comm="syz.7.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd6c998eec9 code=0x7ffc0000 [ 1591.264410][T30506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1591.271559][T30506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1591.284822][ T30] audit: type=1326 audit(1760326338.909:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30864 comm="syz.7.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c998eec9 code=0x7ffc0000 [ 1591.297212][T29755] usb 9-1: new high-speed USB device number 99 using dummy_hcd [ 1591.375807][ T30] audit: type=1326 audit(1760326338.909:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30864 comm="syz.7.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd6c998eec9 code=0x7ffc0000 [ 1591.404225][T30882] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6957'. [ 1591.472724][T30576] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1591.486995][T29755] usb 9-1: Using ep0 maxpacket: 16 [ 1591.519928][T29755] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1591.533386][T30576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1591.548524][T29755] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.574471][T29755] usb 9-1: config 0 descriptor?? [ 1591.601774][T29755] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1591.658035][T30576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1591.820703][ T30] audit: type=1326 audit(1760326338.909:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30864 comm="syz.7.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c998eec9 code=0x7ffc0000 [ 1591.894025][T30576] veth0_vlan: entered promiscuous mode [ 1591.948145][T30886] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1592.028926][ T30] audit: type=1326 audit(1760326338.909:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30864 comm="syz.7.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd6c998eec9 code=0x7ffc0000 [ 1592.163552][ T30] audit: type=1326 audit(1760326338.909:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30864 comm="syz.7.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c998eec9 code=0x7ffc0000 [ 1592.179245][T30576] veth1_vlan: entered promiscuous mode [ 1592.338708][ T30] audit: type=1326 audit(1760326338.909:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30864 comm="syz.7.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6c998d710 code=0x7ffc0000 [ 1592.361141][ C0] vkms_vblank_simulate: vblank timer overrun [ 1592.447054][ T30] audit: type=1326 audit(1760326338.909:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30864 comm="syz.7.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c998eec9 code=0x7ffc0000 [ 1592.492878][T30576] veth0_macvtap: entered promiscuous mode [ 1592.557001][ T30] audit: type=1326 audit(1760326338.909:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30864 comm="syz.7.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd6c998eec9 code=0x7ffc0000 [ 1592.579453][ C0] vkms_vblank_simulate: vblank timer overrun [ 1592.647103][T30901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6959'. [ 1592.731292][T30885] netlink: 'syz.3.6958': attribute type 2 has an invalid length. [ 1592.866264][T30576] veth1_macvtap: entered promiscuous mode [ 1593.042108][T30576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1593.187244][T30576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1593.247776][T30894] delete_channel: no stack [ 1593.396182][T30506] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1593.409660][T30506] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1593.424190][T30506] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1593.466606][T30506] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1593.953558][T29755] gspca_sonixj: reg_r err -71 [ 1593.958992][T29755] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 1593.976805][T29755] usb 9-1: USB disconnect, device number 99 [ 1594.036968][T30920] geneve2: entered allmulticast mode [ 1594.128429][T29758] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 1594.175894][T30508] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1594.209713][T30508] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1594.306329][T29758] usb 7-1: Using ep0 maxpacket: 8 [ 1594.317534][T29758] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.343209][T29758] usb 7-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 1594.361501][T29758] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.370229][T29758] usb 7-1: Product: syz [ 1594.372478][T30508] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1594.379438][T29758] usb 7-1: Manufacturer: syz [ 1594.426309][T30508] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1594.431619][T29758] usb 7-1: SerialNumber: syz [ 1594.443369][T30507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1594.657143][T30507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1594.689485][T29758] usb 7-1: config 0 descriptor?? [ 1594.730444][T29758] cdc_phonet 7-1:0.0: probe with driver cdc_phonet failed with error -22 [ 1594.747083][T30506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1594.754938][T30506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1595.151408][T29755] usb 7-1: USB disconnect, device number 116 [ 1595.561743][T30936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1596.542375][T30986] fuse: Unknown parameter 'bÇ' [ 1596.927840][T29787] usb 9-1: new high-speed USB device number 100 using dummy_hcd [ 1597.087077][T29787] usb 9-1: device descriptor read/64, error -71 [ 1597.646969][T29787] usb 9-1: new high-speed USB device number 101 using dummy_hcd [ 1598.017086][T29787] usb 9-1: device descriptor read/64, error -71 [ 1598.127517][T29787] usb usb9-port1: attempt power cycle [ 1598.467180][T29787] usb 9-1: new high-speed USB device number 102 using dummy_hcd [ 1598.487648][T29787] usb 9-1: device descriptor read/8, error -71 [ 1598.747427][T29787] usb 9-1: new high-speed USB device number 103 using dummy_hcd [ 1598.788322][T29787] usb 9-1: device descriptor read/8, error -71 [ 1598.907807][T29787] usb usb9-port1: unable to enumerate USB device [ 1600.037006][T29787] usb 9-1: new high-speed USB device number 104 using dummy_hcd [ 1600.207291][T29787] usb 9-1: Using ep0 maxpacket: 32 [ 1600.224893][T29787] usb 9-1: config 211 has an invalid interface number: 98 but max is 0 [ 1600.253632][T29787] usb 9-1: config 211 has no interface number 0 [ 1600.267081][T29787] usb 9-1: config 211 interface 98 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 1600.284011][T29787] usb 9-1: config 211 interface 98 has no altsetting 0 [ 1600.329423][T29787] usb 9-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 1600.339583][T29787] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.347797][T29787] usb 9-1: Product: syz [ 1600.352056][T29787] usb 9-1: Manufacturer: syz [ 1600.356660][T29787] usb 9-1: SerialNumber: syz [ 1600.410338][T31022] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1600.627019][T29758] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 1600.788735][T29758] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1600.807136][T29758] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.819139][T29758] usb 7-1: config 0 descriptor?? [ 1600.828809][T29758] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1600.842334][T31021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1600.852737][T31021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1601.272448][T31032] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6978'. [ 1601.335253][T31033] tipc: Failed to remove unknown binding: 66,1,1/3746514327:3822839052/3822839054 [ 1601.347998][T31033] tipc: Failed to remove unknown binding: 66,1,1/3746514327:3822839052/3822839054 [ 1601.666136][T31042] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6981'. [ 1604.916341][T31046] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 1605.023625][T29787] mct_u232 9-1:211.98: MCT U232 converter detected [ 1605.029326][T31049] openvswitch: netlink: Missing valid actions attribute. [ 1605.037395][T31049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1605.079287][T29787] mct_u232 ttyUSB0: expected endpoint missing [ 1605.187909][T29787] usb 9-1: USB disconnect, device number 104 [ 1605.274433][T29758] gspca_stv06xx: I2C: Read error writing address: -71 [ 1605.292388][T29758] usb 7-1: USB disconnect, device number 117 [ 1605.293664][T29787] mct_u232 9-1:211.98: device disconnected [ 1605.954910][T31070] netlink: 'syz.6.6988': attribute type 10 has an invalid length. [ 1606.041635][T31070] bridge0: entered promiscuous mode [ 1606.056458][T31070] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1606.065244][T29787] usb 9-1: new high-speed USB device number 105 using dummy_hcd [ 1606.517041][T29787] usb 9-1: Using ep0 maxpacket: 16 [ 1606.523745][T29787] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1606.584742][T29787] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1606.662762][T31080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6990'. [ 1606.682405][T29787] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1606.691527][T29787] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.699899][T29787] usb 9-1: Product: syz [ 1606.704053][T29787] usb 9-1: Manufacturer: syz [ 1606.770419][T29787] usb 9-1: SerialNumber: syz [ 1606.803310][T29787] usb 9-1: config 0 descriptor?? [ 1606.991802][T31080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6990'. [ 1607.270995][T29787] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1607.287047][T29787] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1607.336824][T29755] IPVS: starting estimator thread 0... [ 1607.442743][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.449346][T31085] IPVS: using max 31 ests per chain, 74400 per kthread [ 1607.456364][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.620242][T31090] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6992'. [ 1607.630272][T31090] netlink: 43 bytes leftover after parsing attributes in process `syz.6.6992'. [ 1607.687524][T31090] netlink: 'syz.6.6992': attribute type 5 has an invalid length. [ 1607.705591][T31090] netlink: 43 bytes leftover after parsing attributes in process `syz.6.6992'. [ 1607.808976][T31092] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1607.944645][T29787] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1608.145832][T29787] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1608.153534][T29787] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 1608.166954][T29787] em28xx 9-1:0.0: No AC97 audio processor [ 1608.214224][T29787] usb 9-1: USB disconnect, device number 105 [ 1608.228615][T29787] em28xx 9-1:0.0: Disconnecting em28xx [ 1608.239678][T29787] em28xx 9-1:0.0: Freeing device [ 1608.497220][T31101] syzkaller1: entered promiscuous mode [ 1608.502712][T31101] syzkaller1: entered allmulticast mode [ 1608.588335][T31103] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1608.606981][T29785] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 1608.769781][T29785] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1608.792764][T29785] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1608.802491][T29785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.811392][T29785] usb 4-1: Product: syz [ 1608.816054][T29785] usb 4-1: Manufacturer: syz [ 1608.820838][T29785] usb 4-1: SerialNumber: syz [ 1608.843492][T29785] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1608.877029][T29755] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 1609.024323][T31116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1609.097622][T29755] usb 7-1: Using ep0 maxpacket: 16 [ 1609.122734][T29755] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1609.134869][T29755] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1609.152417][T29755] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1609.161906][T29755] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.175378][T29755] usb 7-1: Product: syz [ 1609.219633][T29755] usb 7-1: Manufacturer: syz [ 1609.244721][T31099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1609.253584][T29755] usb 7-1: SerialNumber: syz [ 1609.258493][T29755] usb 7-1: config 0 descriptor?? [ 1609.297979][T31099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1609.321313][T29785] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1609.321427][T29755] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1609.381780][T29755] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1609.402409][T29785] usb 4-1: USB disconnect, device number 91 [ 1609.753512][T29755] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1609.785035][T29755] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1609.807093][T29755] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1609.847152][T29755] em28xx 7-1:0.0: No AC97 audio processor [ 1609.924888][T31126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1610.067643][T31127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1610.107188][T31127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1610.507688][T29788] usb 7-1: USB disconnect, device number 118 [ 1610.517222][T29788] em28xx 7-1:0.0: Disconnecting em28xx [ 1610.534676][T29788] em28xx 7-1:0.0: Freeing device [ 1610.630625][T31138] fuse: Bad value for 'fd' [ 1611.066040][T31146] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7007'. [ 1611.137160][T22279] usb 9-1: new high-speed USB device number 106 using dummy_hcd [ 1611.309686][T22279] usb 9-1: Using ep0 maxpacket: 32 [ 1611.318441][T22279] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1611.330241][T22279] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1611.341874][T22279] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1611.356111][T22279] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1611.369380][T22279] usb 9-1: config 1 interface 1 has no altsetting 0 [ 1611.381671][T22279] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1611.391200][T22279] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.399713][T22279] usb 9-1: Product: syz [ 1611.404156][T22279] usb 9-1: Manufacturer: syz [ 1611.408937][T22279] usb 9-1: SerialNumber: syz [ 1611.589379][T29755] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 1611.621161][T22279] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor [ 1611.629965][T22279] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor [ 1611.663152][T22279] usb 9-1: USB disconnect, device number 106 [ 1611.749978][T29755] usb 4-1: config index 0 descriptor too short (expected 69, got 36) [ 1611.761243][T29755] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 1611.775723][T29755] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1611.788278][T29755] usb 4-1: config 0 has no interface number 0 [ 1611.794391][T29755] usb 4-1: too many endpoints for config 0 interface 101 altsetting 61: 48, using maximum allowed: 30 [ 1611.806649][T29755] usb 4-1: config 0 interface 101 altsetting 61 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1611.821850][T29755] usb 4-1: config 0 interface 101 has no altsetting 0 [ 1611.832112][T29755] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 1611.841479][T29755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.849561][T29755] usb 4-1: Product: syz [ 1611.853722][T29755] usb 4-1: Manufacturer: syz [ 1611.858466][T29755] usb 4-1: SerialNumber: syz [ 1611.865416][T29755] usb 4-1: config 0 descriptor?? [ 1612.141053][T29755] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1612.164791][T29755] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1612.177274][T29755] gspca_pac7302 4-1:0.101: probe with driver gspca_pac7302 failed with error -71 [ 1612.191292][T29755] usb 4-1: USB disconnect, device number 92 [ 1612.217051][T29788] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 1612.380522][T29788] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1612.392448][T29788] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1612.419090][T29788] usb 7-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 1612.428489][T29788] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.443109][T29788] usb 7-1: config 0 descriptor?? [ 1612.663260][T29788] usbhid 7-1:0.0: can't add hid device: -71 [ 1612.673418][T29788] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1612.713047][T29788] usb 7-1: USB disconnect, device number 119 [ 1614.279418][T31192] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7020'. [ 1614.289115][T31192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7020'. [ 1614.323821][T31192] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7020'. [ 1615.477621][T31199] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7021'. [ 1616.464055][T31216] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7027'. [ 1616.473729][T31216] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7027'. [ 1616.797569][T31223] netlink: 'syz.6.7029': attribute type 33 has an invalid length. [ 1616.828679][T31223] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7029'. [ 1617.307028][T29758] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 1617.659735][T29758] usb 7-1: Using ep0 maxpacket: 8 [ 1617.687384][T29758] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1617.707137][T29758] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1617.766447][T29758] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1617.898032][T29758] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1617.931678][T29758] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1618.009882][T29758] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.264396][T29758] usb 7-1: GET_CAPABILITIES returned 0 [ 1618.270459][T29758] usbtmc 7-1:16.0: can't read capabilities [ 1618.513649][T31244] x_tables: duplicate underflow at hook 1 [ 1619.518253][T31256] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1619.527153][T31256] team0: Port device batadv2 added [ 1619.660121][T31253] FAULT_INJECTION: forcing a failure. [ 1619.660121][T31253] name failslab, interval 1, probability 0, space 0, times 0 [ 1619.697174][T29758] usb 7-1: USB disconnect, device number 120 [ 1619.797181][T31253] CPU: 0 UID: 0 PID: 31253 Comm: syz.3.7037 Not tainted syzkaller #0 PREEMPT(full) [ 1619.797208][T31253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1619.797220][T31253] Call Trace: [ 1619.797228][T31253] [ 1619.797238][T31253] dump_stack_lvl+0x189/0x250 [ 1619.797268][T31253] ? __pfx____ratelimit+0x10/0x10 [ 1619.797294][T31253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1619.797313][T31253] ? __pfx__printk+0x10/0x10 [ 1619.797334][T31253] ? __pfx___might_resched+0x10/0x10 [ 1619.797357][T31253] ? fs_reclaim_acquire+0x7d/0x100 [ 1619.797387][T31253] should_fail_ex+0x414/0x560 [ 1619.797417][T31253] should_failslab+0xa8/0x100 [ 1619.797441][T31253] __kmalloc_noprof+0xcb/0x7f0 [ 1619.797458][T31253] ? rcu_is_watching+0x15/0xb0 [ 1619.797480][T31253] ? security_sk_alloc+0x52/0x390 [ 1619.797502][T31253] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1619.797523][T31253] security_sk_alloc+0x52/0x390 [ 1619.797547][T31253] sk_prot_alloc+0x101/0x220 [ 1619.797577][T31253] sk_alloc+0x3a/0x370 [ 1619.797606][T31253] unix_create1+0xb0/0x7d0 [ 1619.797636][T31253] ? __might_fault+0xb0/0x130 [ 1619.797659][T31253] unix_stream_connect+0x234/0x1010 [ 1619.797674][T31253] ? tomoyo_socket_connect_permission+0x1b2/0x290 [ 1619.797704][T31253] ? bpf_lsm_socket_connect+0x9/0x20 [ 1619.797728][T31253] __sys_connect+0x316/0x440 [ 1619.797751][T31253] ? __fget_files+0x3a0/0x420 [ 1619.797772][T31253] ? __pfx___sys_connect+0x10/0x10 [ 1619.797813][T31253] ? __pfx_ksys_write+0x10/0x10 [ 1619.797838][T31253] __x64_sys_connect+0x7a/0x90 [ 1619.797863][T31253] do_syscall_64+0xfa/0xfa0 [ 1619.797879][T31253] ? lockdep_hardirqs_on+0x9c/0x150 [ 1619.797897][T31253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.797915][T31253] ? clear_bhb_loop+0x60/0xb0 [ 1619.797936][T31253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.797954][T31253] RIP: 0033:0x7f2391d8eec9 [ 1619.797972][T31253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1619.797987][T31253] RSP: 002b:00007f2392c83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1619.798008][T31253] RAX: ffffffffffffffda RBX: 00007f2391fe5fa0 RCX: 00007f2391d8eec9 [ 1619.798022][T31253] RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000003 [ 1619.798032][T31253] RBP: 00007f2392c83090 R08: 0000000000000000 R09: 0000000000000000 [ 1619.798043][T31253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1619.798054][T31253] R13: 00007f2391fe6038 R14: 00007f2391fe5fa0 R15: 00007f239210fa28 [ 1619.798084][T31253] [ 1619.873630][T31255] hub 9-0:1.0: USB hub found [ 1620.071357][T31255] hub 9-0:1.0: 1 port detected [ 1620.736238][T31267] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7041'. [ 1621.057147][T29758] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 1621.210760][T29758] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1621.210781][T29758] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.210792][T29758] usb 7-1: Product: syz [ 1621.210800][T29758] usb 7-1: Manufacturer: syz [ 1621.210808][T29758] usb 7-1: SerialNumber: syz [ 1621.327131][T29787] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1621.429064][T31287] FAULT_INJECTION: forcing a failure. [ 1621.429064][T31287] name failslab, interval 1, probability 0, space 0, times 0 [ 1621.442972][T31287] CPU: 0 UID: 0 PID: 31287 Comm: syz.8.7048 Not tainted syzkaller #0 PREEMPT(full) [ 1621.442997][T31287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1621.443009][T31287] Call Trace: [ 1621.443018][T31287] [ 1621.443026][T31287] dump_stack_lvl+0x189/0x250 [ 1621.443043][T31287] ? __pfx____ratelimit+0x10/0x10 [ 1621.443059][T31287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1621.443073][T31287] ? __pfx__printk+0x10/0x10 [ 1621.443087][T31287] ? __pfx___might_resched+0x10/0x10 [ 1621.443108][T31287] ? fs_reclaim_acquire+0x7d/0x100 [ 1621.443133][T31287] should_fail_ex+0x414/0x560 [ 1621.443162][T31287] should_failslab+0xa8/0x100 [ 1621.443184][T31287] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1621.443203][T31287] ? __alloc_skb+0x112/0x2d0 [ 1621.443233][T31287] __alloc_skb+0x112/0x2d0 [ 1621.443257][T31287] sock_wmalloc+0xb2/0x130 [ 1621.443277][T31287] unix_stream_connect+0x3e2/0x1010 [ 1621.443306][T31287] ? bpf_lsm_socket_connect+0x9/0x20 [ 1621.443333][T31287] __sys_connect+0x316/0x440 [ 1621.443351][T31287] ? __fget_files+0x3a0/0x420 [ 1621.443365][T31287] ? __pfx___sys_connect+0x10/0x10 [ 1621.443384][T31287] ? __pfx_ksys_write+0x10/0x10 [ 1621.443398][T31287] __x64_sys_connect+0x7a/0x90 [ 1621.443418][T31287] do_syscall_64+0xfa/0xfa0 [ 1621.443435][T31287] ? lockdep_hardirqs_on+0x9c/0x150 [ 1621.443453][T31287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.443495][T31287] ? clear_bhb_loop+0x60/0xb0 [ 1621.443508][T31287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.443517][T31287] RIP: 0033:0x7f425b78eec9 [ 1621.443528][T31287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1621.443538][T31287] RSP: 002b:00007f425c57a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1621.443549][T31287] RAX: ffffffffffffffda RBX: 00007f425b9e5fa0 RCX: 00007f425b78eec9 [ 1621.443560][T31287] RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000003 [ 1621.443572][T31287] RBP: 00007f425c57a090 R08: 0000000000000000 R09: 0000000000000000 [ 1621.443584][T31287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1621.443596][T31287] R13: 00007f425b9e6038 R14: 00007f425b9e5fa0 R15: 00007f425bb0fa28 [ 1621.443627][T31287] [ 1621.697252][T29787] usb 4-1: Using ep0 maxpacket: 16 [ 1621.705213][T29787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1621.716820][T29787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1621.729362][T29787] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1621.739088][T29787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.750571][T29787] usb 4-1: config 0 descriptor?? [ 1621.896203][T31294] loop6: detected capacity change from 0 to 7 [ 1621.914589][T17342] Dev loop6: unable to read RDB block 7 [ 1621.920362][T17342] loop6: unable to read partition table [ 1621.926488][T17342] loop6: partition table beyond EOD, truncated [ 1621.935029][T31294] Dev loop6: unable to read RDB block 7 [ 1621.940929][T31294] loop6: unable to read partition table [ 1621.947096][T31294] loop6: partition table beyond EOD, truncated [ 1621.953566][T31294] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1622.101880][T31300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1622.113535][T31300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1622.176246][T29787] usbhid 4-1:0.0: can't add hid device: -71 [ 1622.183939][T29787] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1622.215230][T29787] usb 4-1: USB disconnect, device number 93 [ 1622.337051][T29755] usb 9-1: new high-speed USB device number 107 using dummy_hcd [ 1622.477065][T29755] usb 9-1: device descriptor read/64, error -71 [ 1622.717024][T29755] usb 9-1: new high-speed USB device number 108 using dummy_hcd [ 1622.757051][T31307] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1622.780405][T31306] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1622.847200][T29755] usb 9-1: device descriptor read/64, error -71 [ 1622.957628][T29755] usb usb9-port1: attempt power cycle [ 1623.088803][T29758] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 1623.102048][T29758] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1623.114554][T29758] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1623.126651][T29758] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1623.137228][T29758] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1623.159300][T29758] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1623.179105][T29758] usb 7-1: USB disconnect, device number 121 [ 1623.202965][T31319] ip6tnl2: entered promiscuous mode [ 1623.211385][T31319] ip6tnl2: entered allmulticast mode [ 1623.307451][T29755] usb 9-1: new high-speed USB device number 109 using dummy_hcd [ 1623.338078][T29755] usb 9-1: device descriptor read/8, error -71 [ 1623.417086][T29787] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 1623.577652][T29755] usb 9-1: new high-speed USB device number 110 using dummy_hcd [ 1623.589319][T29787] usb 4-1: not running at top speed; connect to a high speed hub [ 1623.598619][T29755] usb 9-1: device descriptor read/8, error -71 [ 1623.606397][T29787] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1623.625662][T29787] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1623.635985][T29787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.645106][T29787] usb 4-1: Product: syz [ 1623.649456][T29787] usb 4-1: Manufacturer: syz [ 1623.654082][T29787] usb 4-1: SerialNumber: syz [ 1623.664334][T31321] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1623.707584][T29755] usb usb9-port1: unable to enumerate USB device [ 1623.925353][T29787] cdc_ncm 4-1:1.0: bind() failure [ 1623.955118][T29787] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1623.967459][T29787] cdc_ncm 4-1:1.1: bind() failure [ 1623.982920][T31345] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7063'. [ 1623.985635][T29787] usb 4-1: USB disconnect, device number 94 [ 1624.267256][T29755] usb 7-1: new full-speed USB device number 122 using dummy_hcd [ 1624.418902][T29755] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1624.434873][T29755] usb 7-1: not running at top speed; connect to a high speed hub [ 1624.469231][T29755] usb 7-1: config 1 interface 0 altsetting 110 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1624.497372][T29755] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1624.536134][T29755] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1624.552804][T29755] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.561016][T29755] usb 7-1: Product: syz [ 1624.565185][T29755] usb 7-1: Manufacturer: syz [ 1624.570276][T29755] usb 7-1: SerialNumber: syz [ 1624.800371][T29755] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 1624.813896][T29755] usb 7-1: USB disconnect, device number 122 [ 1627.442265][T31383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1628.472474][T29755] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1628.543632][T31402] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1628.617490][T29755] usb 4-1: device descriptor read/64, error -71 [ 1628.857074][T29755] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1629.022631][T29755] usb 4-1: device descriptor read/64, error -71 [ 1629.175258][T29755] usb usb4-port1: attempt power cycle [ 1629.464761][T29758] usb 9-1: new high-speed USB device number 111 using dummy_hcd [ 1629.529902][T29755] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1629.558656][T29755] usb 4-1: device descriptor read/8, error -71 [ 1629.644365][T29758] usb 9-1: config 0 has an invalid interface number: 255 but max is 0 [ 1629.655150][T29758] usb 9-1: config 0 has no interface number 0 [ 1629.661755][T29758] usb 9-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1629.673307][T29758] usb 9-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1629.688991][T29758] usb 9-1: config 0 interface 255 has no altsetting 0 [ 1629.695856][T29758] usb 9-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1629.705934][T29758] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.718327][T29758] usb 9-1: config 0 descriptor?? [ 1629.731264][T29758] ums-realtek 9-1:0.255: USB Mass Storage device detected [ 1629.825166][T29755] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1629.850222][T29755] usb 4-1: device descriptor read/8, error -71 [ 1629.887235][T22279] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 1629.927588][T29758] usb 9-1: USB disconnect, device number 111 [ 1629.958778][T29755] usb usb4-port1: unable to enumerate USB device [ 1630.038995][T22279] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1630.048959][T22279] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1630.062491][T22279] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1630.072191][T22279] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.083798][T22279] usb 7-1: config 0 descriptor?? [ 1630.286720][T31423] xt_hashlimit: max too large, truncated to 1048576 [ 1630.379906][T31427] netlink: 'syz.7.7086': attribute type 1 has an invalid length. [ 1630.387946][T31427] netlink: 'syz.7.7086': attribute type 1 has an invalid length. [ 1630.395723][T31427] netlink: 'syz.7.7086': attribute type 2 has an invalid length. [ 1630.404272][T31427] netlink: 172 bytes leftover after parsing attributes in process `syz.7.7086'. [ 1630.514090][T22279] kovaplus 0003:1E7D:2D50.0045: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.6-1/input0 [ 1631.047015][ T24] usb 9-1: new high-speed USB device number 112 using dummy_hcd [ 1631.207138][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 1631.222795][ T24] usb 9-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1631.234015][ T24] usb 9-1: config 9 has no interfaces? [ 1631.241356][ T24] usb 9-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 1631.251101][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.323014][T22279] kovaplus 0003:1E7D:2D50.0045: couldn't init struct kovaplus_device [ 1631.337162][T22279] kovaplus 0003:1E7D:2D50.0045: couldn't install mouse [ 1631.398280][T22279] kovaplus 0003:1E7D:2D50.0045: probe with driver kovaplus failed with error -5 [ 1631.529701][T22279] usb 7-1: USB disconnect, device number 123 [ 1632.876887][T31482] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1633.136957][T29785] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1633.265712][T31494] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1633.323967][T29785] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1633.333654][T29785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.345452][T29785] usb 4-1: Product: syz [ 1633.355564][T29785] usb 4-1: Manufacturer: syz [ 1633.367808][T29785] usb 4-1: SerialNumber: syz [ 1633.521751][T31497] binder_alloc: 31495: binder_alloc_buf, no vma [ 1633.614385][T29785] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1633.649388][T29785] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1633.661475][T29785] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1633.734615][T29785] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1633.800817][T29785] usb 4-1: USB disconnect, device number 99 [ 1633.842496][ T24] usb 9-1: string descriptor 0 read error: -71 [ 1633.885167][ T24] usb 9-1: USB disconnect, device number 112 [ 1633.954536][T31509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1633.985862][T31509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1634.882005][T31530] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1634.937014][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1634.937034][ T30] audit: type=1326 audit(1760326382.719:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31518 comm="syz.3.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2391d8eec9 code=0x7ffc0000 [ 1635.023373][ T30] audit: type=1326 audit(1760326382.719:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31518 comm="syz.3.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f2391d8eec9 code=0x7ffc0000 [ 1635.067067][ T30] audit: type=1326 audit(1760326382.729:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31518 comm="syz.3.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2391d8eec9 code=0x7ffc0000 [ 1635.090133][ T30] audit: type=1326 audit(1760326382.729:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31518 comm="syz.3.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f2391d8eec9 code=0x7ffc0000 [ 1635.113123][ T30] audit: type=1326 audit(1760326382.729:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31518 comm="syz.3.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2391d8eec9 code=0x7ffc0000 [ 1635.145960][ T30] audit: type=1326 audit(1760326382.729:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31518 comm="syz.3.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2391d8eec9 code=0x7ffc0000 [ 1635.209586][ T30] audit: type=1326 audit(1760326382.729:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31518 comm="syz.3.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2391d8eec9 code=0x7ffc0000 [ 1635.357760][ T30] audit: type=1326 audit(1760326382.729:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31518 comm="syz.3.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2391d8eec9 code=0x7ffc0000 [ 1635.411262][ T30] audit: type=1326 audit(1760326382.729:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31518 comm="syz.3.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2391d8eec9 code=0x7ffc0000 [ 1635.500996][ T30] audit: type=1326 audit(1760326382.729:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31518 comm="syz.3.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2391d8eec9 code=0x7ffc0000 [ 1636.242096][T31544] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1637.269683][T31562] netlink: 277 bytes leftover after parsing attributes in process `syz.3.7119'. [ 1637.608976][T31565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7120'. [ 1637.708444][T31565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7120'. [ 1637.847031][T31565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7120'. [ 1637.856435][T31565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7120'. [ 1637.865726][T31565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7120'. [ 1637.897526][T31565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7120'. [ 1637.993679][T31565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7120'. [ 1638.013431][T31565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7120'. [ 1638.056021][T31565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7120'. [ 1638.280795][T31576] netlink: 'syz.7.7123': attribute type 23 has an invalid length. [ 1638.614337][T31582] hub 9-0:1.0: USB hub found [ 1638.624194][T31582] hub 9-0:1.0: 1 port detected [ 1639.789527][T31610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1640.282387][T31627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1640.747097][T29755] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 1640.867311][ T24] usb 9-1: new high-speed USB device number 113 using dummy_hcd [ 1640.909145][T29755] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1640.919924][T29755] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1640.930196][T29755] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1640.940939][T29755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1640.949117][T29755] usb 4-1: SerialNumber: syz [ 1640.962052][T29755] usb 4-1: skipping empty audio interface (v1) [ 1640.981099][T29755] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1641.006087][T16671] udevd[16671]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1641.025733][ T24] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1641.034727][ T24] usb 9-1: config 0 has no interface number 0 [ 1641.044221][ T24] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1641.057001][ T24] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1641.066740][ T24] usb 9-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1641.080032][ T24] usb 9-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1641.089553][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.106568][ T24] usb 9-1: config 0 descriptor?? [ 1641.165648][T29755] usb 4-1: USB disconnect, device number 100 [ 1641.743100][T31644] 0·: renamed from hsr_slave_1 [ 1641.769625][T31644] 0·: entered allmulticast mode [ 1641.775350][T31644] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1641.792444][ T24] usbhid 9-1:0.1: can't add hid device: -71 [ 1641.803906][ T24] usbhid 9-1:0.1: probe with driver usbhid failed with error -71 [ 1641.830102][ T24] usb 9-1: USB disconnect, device number 113 [ 1641.830818][T31644] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 1642.073446][T31650] netlink: 'syz.4.7144': attribute type 1 has an invalid length. [ 1642.462325][T31669] __nla_validate_parse: 47 callbacks suppressed [ 1642.462337][T31669] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7150'. [ 1643.377144][T29787] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1643.542034][T29787] usb 4-1: Using ep0 maxpacket: 16 [ 1643.603016][T29787] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1643.622093][T29787] usb 4-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 1643.657749][T29787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1643.693300][T29787] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1643.761264][T29787] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1643.816795][T29787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.856782][T29787] usb 4-1: Product: syz [ 1643.867613][T29787] usb 4-1: Manufacturer: syz [ 1643.880063][T29787] usb 4-1: SerialNumber: syz [ 1644.092491][T31698] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1644.108683][T29787] cdc_ncm 4-1:1.0: invalid descriptor buffer length [ 1644.119710][T29787] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1644.127613][T31698] netlink: 'syz.6.7157': attribute type 21 has an invalid length. [ 1644.135563][T31698] netlink: 164 bytes leftover after parsing attributes in process `syz.6.7157'. [ 1644.145853][T29787] cdc_ncm 4-1:1.0: bind() failure [ 1644.204839][T29787] usb 4-1: USB disconnect, device number 101 [ 1644.294000][T31691] input: syz0 as /devices/virtual/input/input133 [ 1645.013228][T29787] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1645.109989][T31730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1646.537281][T31756] input: syz0 as /devices/virtual/input/input134 [ 1646.789763][T22279] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 1646.927006][T22279] usb 7-1: device descriptor read/64, error -71 [ 1647.167093][T22279] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 1647.307552][T22279] usb 7-1: device descriptor read/64, error -71 [ 1647.318907][T31777] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1647.331341][T31781] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 1647.378589][T31777] bond1 (unregistering): Released all slaves [ 1647.386696][T31781] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7177'. [ 1647.470481][T22279] usb usb7-port1: attempt power cycle [ 1647.836772][T22279] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 1647.887609][T22279] usb 7-1: device descriptor read/8, error -71 [ 1648.157671][T22279] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 1648.296127][T22279] usb 7-1: device descriptor read/8, error -71 [ 1648.407210][T22279] usb usb7-port1: unable to enumerate USB device [ 1648.505415][T31806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1650.892930][T31829] netlink: 112 bytes leftover after parsing attributes in process `syz.3.7190'. [ 1651.577006][T22279] usb 9-1: new high-speed USB device number 114 using dummy_hcd [ 1652.000288][T31859] fuse: Bad value for 'fd' [ 1652.536182][T31870] syzkaller0: entered promiscuous mode [ 1652.541883][T31870] syzkaller0: entered allmulticast mode [ 1652.716060][T31874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1653.157034][T22279] usb 9-1: new full-speed USB device number 115 using dummy_hcd [ 1653.309614][T22279] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1653.322700][T22279] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1653.332723][T22279] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.487090][T22279] usb 9-1: Product: syz [ 1653.511928][T22279] usb 9-1: Manufacturer: syz [ 1653.517271][T22279] usb 9-1: SerialNumber: syz [ 1653.653477][T22279] usb 9-1: config 0 descriptor?? [ 1653.679730][T22279] usb 9-1: ucan: probing device on interface #0 [ 1653.686098][T22279] usb 9-1: ucan: invalid EP count (0) [ 1653.692390][T22279] usb 9-1: ucan: probe failed; try to update the device firmware [ 1653.888529][T22279] usb 9-1: USB disconnect, device number 115 [ 1654.121239][T31899] binder: BINDER_SET_CONTEXT_MGR already set [ 1654.133469][T31899] binder: 31893:31899 ioctl 4018620d 200000004a80 returned -16 [ 1656.479710][T31937] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1656.587064][T29785] usb 9-1: new high-speed USB device number 116 using dummy_hcd [ 1657.247751][T31947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7216'. [ 1657.258616][T31947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7216'. [ 1657.482947][T31959] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7219'. [ 1657.584396][T31964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7219'. [ 1657.593782][T31963] netlink: 'syz.6.7220': attribute type 1 has an invalid length. [ 1657.593805][T31963] netlink: 144 bytes leftover after parsing attributes in process `syz.6.7220'. [ 1657.831115][T31962] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7222'. [ 1658.217060][T22279] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1658.369524][T22279] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1658.536915][T22279] usb 7-1: config 0 has no interface number 0 [ 1658.560314][T22279] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1658.569940][T22279] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.598993][T22279] usb 7-1: config 0 descriptor?? [ 1658.612164][T22279] cp210x 7-1:0.1: cp210x converter detected [ 1658.732055][T31988] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7228'. [ 1658.862320][T31991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7228'. [ 1659.016257][T22279] cp210x 7-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 1659.668195][T29755] usb 9-1: new high-speed USB device number 117 using dummy_hcd [ 1659.839167][T29755] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1659.850635][T29755] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1659.861860][T29755] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1659.874951][T29755] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1659.884113][T29755] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.896352][T29755] usb 9-1: config 0 descriptor?? [ 1660.323477][T29755] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1660.756975][T29788] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 1660.909524][T29788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1660.920584][T29788] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1660.929788][T29788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.940334][T29788] usb 4-1: config 0 descriptor?? [ 1660.947111][T32026] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1661.006715][T22279] cp210x 7-1:0.1: failed to get vendor val 0x3711 size 2: -71 [ 1661.020435][T22279] cp210x 7-1:0.1: GPIO initialisation failed: -71 [ 1661.031302][T22279] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1661.052912][T22279] usb 7-1: USB disconnect, device number 2 [ 1661.073382][T22279] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1661.083443][T22279] cp210x 7-1:0.1: device disconnected [ 1661.375188][T29788] elan 0003:04F3:0755.0047: unknown main item tag 0x0 [ 1661.391025][T29788] elan 0003:04F3:0755.0047: item fetching failed at offset 3/5 [ 1661.408323][T29788] elan 0003:04F3:0755.0047: Hid Parse failed [ 1661.414683][T29788] elan 0003:04F3:0755.0047: probe with driver elan failed with error -22 [ 1661.580371][T32026] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1661.587006][T32026] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1661.613848][T32026] vhci_hcd vhci_hcd.0: Device attached [ 1661.642512][T32026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1661.676795][T32026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1661.711431][T32036] vhci_hcd: connection closed [ 1661.711707][T30508] vhci_hcd: stop threads [ 1661.712584][ T24] usb 4-1: USB disconnect, device number 103 [ 1661.716459][T30508] vhci_hcd: release socket [ 1661.732557][T30508] vhci_hcd: disconnect device [ 1662.407212][T32050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7246'. [ 1662.428458][T29788] usb 9-1: USB disconnect, device number 117 [ 1662.630743][T29741] IPVS: starting estimator thread 0... [ 1662.737029][T32059] IPVS: using max 49 ests per chain, 117600 per kthread [ 1662.784107][T32061] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1662.798732][T32061] fuse: Unknown parameter 'grou00000000000000000000' [ 1663.125171][T23089] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1663.139440][T23089] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1663.150854][T23089] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1663.158902][T23089] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1663.166649][T23089] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1663.417101][T32072] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1663.638330][T29156] syz_tun (unregistering): left allmulticast mode [ 1663.920038][T32070] chnl_net:caif_netlink_parms(): no params data found [ 1664.321022][T32081] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7252'. [ 1664.332097][T32070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1664.339422][T32081] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7252'. [ 1664.357837][T32070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.365277][T32070] bridge_slave_0: entered allmulticast mode [ 1664.373337][T32070] bridge_slave_0: entered promiscuous mode [ 1664.427446][T32070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1664.435207][T32070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1664.448271][T32070] bridge_slave_1: entered allmulticast mode [ 1664.458500][T32070] bridge_slave_1: entered promiscuous mode [ 1664.640672][T32070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1664.656094][T32070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1665.129731][T32070] team0: Port device team_slave_0 added [ 1665.138349][T32070] team0: Port device team_slave_1 added [ 1665.187026][T23089] Bluetooth: hci2: command tx timeout [ 1665.278758][T32070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1665.286051][T32070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1665.312657][T32070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1665.325290][T32070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1665.332502][T32070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1665.361494][T32070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1665.503590][T32070] hsr_slave_0: entered promiscuous mode [ 1665.512098][T32070] hsr_slave_1: entered promiscuous mode [ 1665.518757][T32070] debugfs: 'hsr0' already exists in 'hsr' [ 1665.524489][T32070] Cannot create hsr debugfs directory [ 1665.609060][T32106] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7257'. [ 1665.627278][T29788] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1665.877906][T29788] usb 4-1: Using ep0 maxpacket: 8 [ 1665.884703][T29788] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1665.894654][T29788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.932643][T29788] usb 4-1: config 0 descriptor?? [ 1666.212672][T32070] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.224984][T32070] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1666.380657][T32070] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.399987][T32070] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1666.549691][T32070] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.561491][T32070] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1666.769172][T32070] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.779818][T32070] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1667.212984][T32123] netlink: 220 bytes leftover after parsing attributes in process `syz.7.7264'. [ 1667.223134][T32123] netlink: 220 bytes leftover after parsing attributes in process `syz.7.7264'. [ 1667.234250][T32070] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1667.277102][T23089] Bluetooth: hci2: command tx timeout [ 1667.394021][T32128] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1667.672022][T32070] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1667.731037][T32070] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1667.850629][T32070] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1668.141205][T32146] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7265'. [ 1668.187203][T32146] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1668.364374][T32070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1668.396213][T32070] 8021q: adding VLAN 0 to HW filter on device team0 [ 1668.411948][T30531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1668.419148][T30531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1668.464271][T30531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1668.471473][T30531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1668.504356][T29788] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1668.533109][T29788] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1668.649142][T29788] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1668.651677][T32070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1668.697127][T29788] usb 4-1: USB disconnect, device number 104 [ 1668.873070][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.884265][T32070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1668.886974][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.100440][T32070] veth0_vlan: entered promiscuous mode [ 1669.133854][T32070] veth1_vlan: entered promiscuous mode [ 1669.289213][T32070] veth0_macvtap: entered promiscuous mode [ 1669.328943][T32070] veth1_macvtap: entered promiscuous mode [ 1669.347492][T23089] Bluetooth: hci2: command tx timeout [ 1669.362897][T32070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1669.389946][T32070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1669.451463][T30508] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.464923][T30508] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.539465][T30508] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.550495][T30508] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.557042][T29788] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1669.690860][T30508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1669.712179][T30508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1669.748831][T29788] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 1669.773574][T29788] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1669.783387][T29788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1669.794042][T29788] usb 4-1: Product: syz [ 1669.798730][T29788] usb 4-1: Manufacturer: syz [ 1669.803507][T29788] usb 4-1: SerialNumber: syz [ 1669.816022][T30508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1669.820120][T29788] usb 4-1: config 0 descriptor?? [ 1669.835924][T30508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1669.859051][T29788] ims_pcu 4-1:0.0: Zero length descriptor [ 1669.872588][T29788] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 1670.012548][T32174] netlink: 11562 bytes leftover after parsing attributes in process `syz.6.7245'. [ 1671.195061][T32184] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7275'. [ 1671.428771][T23089] Bluetooth: hci2: command tx timeout [ 1671.495028][T32190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1671.569768][T29755] usb 9-1: new full-speed USB device number 119 using dummy_hcd [ 1671.769947][T29755] usb 9-1: unable to get BOS descriptor set [ 1671.778559][T29755] usb 9-1: not running at top speed; connect to a high speed hub [ 1671.790042][T29755] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1671.805362][T29755] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1671.819999][T29755] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.836336][T29755] usb 9-1: Product: syz [ 1671.847151][T29755] usb 9-1: Manufacturer: syz [ 1671.855408][T29755] usb 9-1: SerialNumber: syz [ 1672.467910][T32184] ip6gretap0: entered promiscuous mode [ 1672.567571][T32184] ip6gretap0: left promiscuous mode [ 1672.657517][T32196] fuse: Bad value for 'fd' [ 1672.972640][T32199] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7277'. [ 1673.066107][T22279] usb 4-1: USB disconnect, device number 105 [ 1673.197179][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1673.347595][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1673.379032][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1673.392627][ T24] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1673.417364][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.495658][T22279] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1673.507663][ T24] usb 7-1: Product: syz [ 1673.515649][ T24] usb 7-1: Manufacturer: syz [ 1673.525098][ T24] usb 7-1: SerialNumber: syz [ 1673.547855][ T24] usb 7-1: config 0 descriptor?? [ 1673.557198][ T24] smsc95xx v2.0.0 [ 1673.571784][ T24] smsc95xx 7-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1673.601422][T29755] usb 9-1: USB disconnect, device number 119 [ 1673.614858][ T24] smsc95xx 7-1:0.0: probe with driver smsc95xx failed with error -22 [ 1673.679456][T22279] usb 4-1: Using ep0 maxpacket: 16 [ 1673.688912][T22279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1673.704089][T22279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1673.720210][T22279] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1673.734481][T22279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.757574][ T24] usb 7-1: USB disconnect, device number 3 [ 1673.777644][T22279] usb 4-1: config 0 descriptor?? [ 1673.790934][T32209] netdevsim netdevsim8: Direct firmware load for . [ 1673.790934][T32209] failed with error -2 [ 1673.807398][T32209] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 1673.807398][T32209] [ 1674.256694][T22279] hid-multitouch 0003:1FD2:6007.0048: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 1674.454364][T22279] usb 4-1: USB disconnect, device number 106 [ 1674.664374][T32224] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 1674.670914][T32224] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1674.678843][T32224] vhci_hcd vhci_hcd.0: Device attached [ 1674.867785][T29785] vhci_hcd: vhci_device speed not set [ 1674.927021][T22279] usb 9-1: new high-speed USB device number 120 using dummy_hcd [ 1674.937045][T29785] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 1675.077093][T22279] usb 9-1: Using ep0 maxpacket: 8 [ 1675.083873][T22279] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1675.094956][T22279] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1675.106750][T22279] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1675.127278][T22279] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1675.166994][T22279] usb 9-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1675.176097][T22279] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.212616][T22279] usb 9-1: Product: syz [ 1675.227262][T22279] usb 9-1: Manufacturer: syz [ 1675.231883][T22279] usb 9-1: SerialNumber: syz [ 1675.258179][T22279] usb 9-1: config 0 descriptor?? [ 1675.326269][ C1] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1675.338120][T22279] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input135 [ 1675.470562][T32224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1675.479556][T32224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1675.488567][T32224] program syz.8.7286 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1676.003213][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1676.083965][T32248] hub 1-0:1.0: USB hub found [ 1676.103556][T32248] hub 1-0:1.0: 1 port detected [ 1676.206942][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 1676.216296][T32225] vhci_hcd: connection reset by peer [ 1676.240279][T22279] imon:send_packet: packet tx failed (-71) [ 1676.253987][T30508] vhci_hcd: stop threads [ 1676.270582][T22279] imon 9-1:0.0: panel buttons/knobs setup failed [ 1676.273441][ T24] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1676.292903][T30508] vhci_hcd: release socket [ 1676.307662][T30508] vhci_hcd: disconnect device [ 1676.315797][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 25852, setting to 1024 [ 1676.370904][ T24] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1676.383381][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1676.406578][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1676.417261][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.426048][ T24] usb 7-1: Product: syz [ 1676.430523][T22279] rc_core: IR keymap rc-imon-pad not found [ 1676.436350][T22279] Registered IR keymap rc-empty [ 1676.448373][T22279] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1676.516964][T22279] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1676.533173][ T24] usb 7-1: Manufacturer: syz [ 1676.541504][ T24] usb 7-1: SerialNumber: syz [ 1676.616749][T22279] imon:send_packet: packet tx failed (-71) [ 1676.636910][T32244] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1676.644822][T32244] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1676.653952][T22279] imon 9-1:0.0: remote input dev register failed [ 1676.660687][T22279] imon 9-1:0.0: imon_init_intf0: rc device setup failed [ 1676.878916][T22279] imon 9-1:0.0: unable to initialize intf0, err 0 [ 1676.928920][T22279] imon:imon_probe: failed to initialize context! [ 1676.942879][T22279] imon 9-1:0.0: unable to register, err -19 [ 1676.971281][T22279] usb 9-1: USB disconnect, device number 120 [ 1678.105154][T32276] binder: 32275:32276 ioctl 400c620e 200000000280 returned -22 [ 1678.215925][T32281] tipc: Enabled bearer , priority 0 [ 1678.235365][T32281] syzkaller0: entered promiscuous mode [ 1678.243055][T32281] syzkaller0: entered allmulticast mode [ 1678.767268][T32280] tipc: Resetting bearer [ 1678.909598][T32280] tipc: Disabling bearer [ 1678.922802][ T24] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 1678.932098][ T24] usbtest 7-1:1.0: Linux user mode ISO test driver [ 1678.939688][ T24] usbtest 7-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1678.962881][ T24] usb 7-1: USB disconnect, device number 4 [ 1679.388151][T32291] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1679.482546][T32292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7303'. [ 1679.497116][T32292] netlink: 'syz.3.7303': attribute type 13 has an invalid length. [ 1679.558137][T32292] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1680.419702][T29785] vhci_hcd: vhci_device speed not set [ 1681.093201][T32305] kvm: kvm [32302]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 1681.125877][T32305] kvm: kvm [32302]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 1681.175371][T32305] kvm: kvm [32302]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 1681.187523][T29741] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1681.225600][T32305] kvm: kvm [32302]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 1681.258325][T32305] kvm: kvm [32302]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 1681.360627][T29741] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 1681.382517][T29741] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1681.432668][T29741] usb 7-1: config 0 has no interface number 0 [ 1681.451941][T29741] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1681.512653][T29741] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1681.547742][T29741] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1681.576654][T29741] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.608827][T29741] usb 7-1: Product: syz [ 1681.613039][T29741] usb 7-1: Manufacturer: syz [ 1681.618163][T29741] usb 7-1: SerialNumber: syz [ 1681.626612][T29741] usb 7-1: config 0 descriptor?? [ 1683.943543][T29785] usb 7-1: USB disconnect, device number 5 [ 1684.320091][T29741] usb 9-1: new high-speed USB device number 121 using dummy_hcd [ 1684.477111][T29741] usb 9-1: device descriptor read/64, error -71 [ 1684.749849][T29741] usb 9-1: new high-speed USB device number 122 using dummy_hcd [ 1684.909075][T29741] usb 9-1: device descriptor read/64, error -71 [ 1685.037157][T29741] usb usb9-port1: attempt power cycle [ 1685.430313][T29741] usb 9-1: new high-speed USB device number 123 using dummy_hcd [ 1685.467456][T29741] usb 9-1: device descriptor read/8, error -71 [ 1685.764372][T29741] usb 9-1: new high-speed USB device number 124 using dummy_hcd [ 1685.797708][T29741] usb 9-1: device descriptor read/8, error -71 [ 1685.959072][T29741] usb usb9-port1: unable to enumerate USB device [ 1686.397140][T22279] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1686.507129][T29741] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1686.547255][T22279] usb 4-1: Using ep0 maxpacket: 16 [ 1686.554821][T22279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1686.566117][T22279] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1686.575446][T22279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.588750][T22279] usb 4-1: config 0 descriptor?? [ 1686.660559][T29741] usb 7-1: Using ep0 maxpacket: 16 [ 1686.666960][T29741] usb 7-1: too many configurations: 56, using maximum allowed: 8 [ 1686.678681][T29741] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1686.704180][T29741] usb 7-1: can't read configurations, error -61 [ 1686.847002][T29741] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1687.006910][T29741] usb 7-1: Using ep0 maxpacket: 16 [ 1687.014461][T29741] usb 7-1: too many configurations: 56, using maximum allowed: 8 [ 1687.026400][T29741] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1687.036592][T29741] usb 7-1: can't read configurations, error -61 [ 1687.047830][T29741] usb usb7-port1: attempt power cycle [ 1687.208283][T32391] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1687.237781][T22279] usbhid 4-1:0.0: can't add hid device: -71 [ 1687.293956][T22279] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1687.319936][T22279] usb 4-1: USB disconnect, device number 107 [ 1687.397779][T29741] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1687.418190][T29741] usb 7-1: Using ep0 maxpacket: 16 [ 1687.424371][T29741] usb 7-1: too many configurations: 56, using maximum allowed: 8 [ 1687.435657][T29741] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1687.445501][T29741] usb 7-1: can't read configurations, error -61 [ 1687.607128][T29741] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1687.637748][T29741] usb 7-1: Using ep0 maxpacket: 16 [ 1687.643986][T29741] usb 7-1: too many configurations: 56, using maximum allowed: 8 [ 1687.655522][T29741] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1687.669750][T29741] usb 7-1: can't read configurations, error -61 [ 1687.685828][T29741] usb usb7-port1: unable to enumerate USB device [ 1688.337494][T29788] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1688.497254][T29788] usb 4-1: Using ep0 maxpacket: 32 [ 1688.505292][T29788] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1688.514975][T29788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.532585][T29788] usb 4-1: config 0 descriptor?? [ 1688.637149][T29750] usb 9-1: new high-speed USB device number 125 using dummy_hcd [ 1688.743994][T29788] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1688.754742][T29788] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1688.764826][T29788] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1688.772052][T29788] usb 4-1: media controller created [ 1688.787256][T29750] usb 9-1: Using ep0 maxpacket: 32 [ 1688.789561][T29788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1688.799099][T29750] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1688.815503][T29750] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1688.829594][T29750] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1688.841988][T29750] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1688.858087][T29750] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1688.867802][T29750] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.875808][T29750] usb 9-1: Product: syz [ 1688.880255][T29750] usb 9-1: Manufacturer: syz [ 1688.885113][T29750] usb 9-1: SerialNumber: syz [ 1688.898861][ C1] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1688.908219][T29750] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input138 [ 1688.956260][T32394] [U]  [ 1688.960089][T29788] az6027: usb out operation failed. (-71) [ 1688.967222][T29788] az6027: usb out operation failed. (-71) [ 1688.973128][T29788] stb0899_attach: Driver disabled by Kconfig [ 1688.979372][T29788] az6027: no front-end attached [ 1688.979372][T29788] [ 1688.987060][T29788] az6027: usb out operation failed. (-71) [ 1688.992813][T29788] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1689.002992][T29788] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input140 [ 1689.019004][T29788] dvb-usb: schedule remote query interval to 400 msecs. [ 1689.026079][T29788] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1689.044928][T29788] usb 4-1: USB disconnect, device number 108 [ 1689.107433][T29750] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1689.122086][T29750] (id 0x00) [ 1689.145109][T29788] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1689.191932][T29750] rc_core: IR keymap rc-imon-pad not found [ 1689.197987][T29750] Registered IR keymap rc-empty [ 1689.202869][T29750] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1689.213503][T29750] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1689.319986][T29750] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 1689.335306][T29750] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input139 [ 1689.359133][T29750] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:125> initialized [ 1689.543586][T32407] openvswitch: netlink: Key type 29 is not supported [ 1690.156633][T32418] bridge0: port 3(syz_tun) entered blocking state [ 1690.165463][T32418] bridge0: port 3(syz_tun) entered disabled state [ 1690.177129][T32418] syz_tun: entered allmulticast mode [ 1690.185642][T32418] syz_tun: entered promiscuous mode [ 1690.192076][T32418] bridge0: port 3(syz_tun) entered blocking state [ 1690.199472][T32418] bridge0: port 3(syz_tun) entered forwarding state [ 1690.429769][T32427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1690.502648][T32429] binder: 32428:32429 unknown command 0 [ 1690.514421][T32429] binder: 32428:32429 ioctl c0306201 200000000080 returned -22 [ 1690.515034][T32423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1690.537112][T32411] imon:send_packet: packet tx failed (-71) [ 1690.540420][T29755] usb 9-1: USB disconnect, device number 125 [ 1690.572962][T32411] imon:vfd_write: send packet #4 failed [ 1690.863386][T32436] netlink: 'syz.6.7350': attribute type 1 has an invalid length. [ 1690.964830][T32440] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 1691.027194][T32440] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1691.059071][T32440] bond1: (slave vcan1): making interface the new active one [ 1691.085490][T32440] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 1691.115039][T32436] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1692.030250][T32465] netlink: 'syz.6.7362': attribute type 6 has an invalid length. [ 1692.454016][T32477] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1695.518409][T32512] netlink: 'syz.8.7378': attribute type 1 has an invalid length. [ 1695.689927][T32515] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7378'. [ 1696.031656][T29755] IPVS: starting estimator thread 0... [ 1696.130594][T32520] IPVS: using max 33 ests per chain, 79200 per kthread [ 1696.557879][T23089] Bluetooth: hci4: command 0x0406 tx timeout [ 1699.760655][T21778] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1699.769871][T21778] Bluetooth: hci2: Injecting HCI hardware error event [ 1699.779745][T21778] Bluetooth: hci2: hardware error 0x00 [ 1701.987061][T21778] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1704.997833][T32512] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1705.091087][T32514] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1706.771100][T32571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7389'. [ 1706.978263][T32573] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7391'. [ 1707.247127][T29788] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1707.426919][T29788] usb 7-1: Using ep0 maxpacket: 32 [ 1707.448592][T29788] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.467085][T29788] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1707.491284][T29788] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1707.526885][T29788] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1707.549948][T29788] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1707.587007][T29788] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.595045][T29788] usb 7-1: Product: syz [ 1707.618524][T29788] usb 7-1: Manufacturer: syz [ 1707.631710][T29788] usb 7-1: SerialNumber: syz [ 1707.672878][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1707.693149][T29788] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input141 [ 1707.897056][T29788] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1707.905367][T29788] (id 0x00) [ 1708.006898][T29788] rc_core: IR keymap rc-imon-pad not found [ 1708.029800][T29788] Registered IR keymap rc-empty [ 1708.034759][T29788] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1708.186888][T29788] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1708.266923][T29741] usb 9-1: new high-speed USB device number 126 using dummy_hcd [ 1708.278789][T29788] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 1708.319788][T29788] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input142 [ 1708.367864][T29788] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:10> initialized [ 1708.446924][T29741] usb 9-1: Using ep0 maxpacket: 32 [ 1708.454183][T29741] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1708.482999][T29741] usb 9-1: config 0 has no interface number 0 [ 1708.543763][T29741] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1708.599317][T29741] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.617978][T29741] usb 9-1: Product: syz [ 1708.630206][T29741] usb 9-1: Manufacturer: syz [ 1708.640541][T29741] usb 9-1: SerialNumber: syz [ 1708.666481][T29741] usb 9-1: config 0 descriptor?? [ 1708.690224][T29741] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1708.702631][T29741] usb 9-1: selecting invalid altsetting 1 [ 1708.712822][T29741] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1708.724685][T29741] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1708.736575][T29741] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1708.745237][T29741] usb 9-1: media controller created [ 1708.772226][T29741] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1708.892074][T29741] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1708.923546][T29741] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1708.933506][T29741] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1709.153632][T29741] usb 9-1: USB disconnect, device number 126 [ 1710.787654][T29785] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1710.927488][T29755] usb 7-1: USB disconnect, device number 10 [ 1710.947277][T29785] usb 4-1: Using ep0 maxpacket: 8 [ 1710.954525][T29785] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 1710.967465][T29785] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 1711.001017][T29785] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1711.011299][T29785] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1711.024664][T29785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1711.036524][T29785] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1711.053404][T29785] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1711.063257][T29785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.073642][T29785] usb 4-1: Product: syz [ 1711.078718][T29785] usb 4-1: Manufacturer: syz [ 1711.083460][T29785] usb 4-1: SerialNumber: syz [ 1711.098740][T29785] usb 4-1: config 0 descriptor?? [ 1711.109748][T29785] hub 4-1:0.0: bad descriptor, ignoring hub [ 1711.124416][T29785] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1711.427452][T29785] usb 4-1: USB disconnect, device number 109 [ 1712.700753][T32647] team0 (unregistering): Port device team_slave_0 removed [ 1712.740019][T32647] team0 (unregistering): Port device team_slave_1 removed [ 1712.973761][T32664] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7421'. [ 1714.899737][ T24] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1715.131189][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1715.141648][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1715.151223][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.173721][ T24] usb 4-1: config 0 descriptor?? [ 1715.941471][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805458a400: rx timeout, send abort [ 1715.949988][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054d6a800: rx timeout, send abort [ 1715.958540][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805458a400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1715.973241][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888054d6a800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1716.212441][ T24] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 1716.365045][T32733] random: crng reseeded on system resumption [ 1716.423368][T29787] usb 4-1: USB disconnect, device number 110 [ 1716.816094][T32739] Unrecognized hibernate image header format! [ 1716.857081][T32739] PM: hibernation: Image mismatch: architecture specific data [ 1717.705597][T21778] Bluetooth: hci5: unexpected cc 0x203e length: 2 > 1 [ 1717.714181][T21778] Bluetooth: hci5: unexpected event for opcode 0x203e [ 1718.697004][T29750] usb 9-1: new high-speed USB device number 127 using dummy_hcd [ 1719.278744][T29750] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1719.296981][T29750] usb 9-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1719.306060][T29750] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.334673][T29750] usb 9-1: config 0 descriptor?? [ 1719.349162][T29750] smsusb:smsusb_probe: board id=8, interface number 0 [ 1719.356261][T29750] smsusb:smsusb_probe: Device initialized with return code -19 [ 1719.546640][T29750] usb 9-1: USB disconnect, device number 127 [ 1719.753260][ T319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7472'. [ 1720.224847][ T335] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7478'. [ 1720.757034][T29785] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1720.928703][T29785] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1720.944824][T29785] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1720.953307][T29785] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1720.962777][T29785] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.974093][T29785] usb 9-1: config 0 descriptor?? [ 1721.205672][T29785] usb 9-1: string descriptor 0 read error: -32 [ 1721.214399][T29785] pwc: Askey VC010 type 2 USB webcam detected. [ 1721.337566][T29787] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1721.434122][T29785] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1721.446567][T29785] pwc: recv_control_msg error -32 req 02 val 2700 [ 1721.487233][T29741] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1721.517556][T29787] usb 4-1: Using ep0 maxpacket: 8 [ 1721.526504][T29787] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 1721.539798][T29787] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1721.551705][T29787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.562605][T29787] usb 4-1: Product: syz [ 1721.567329][T29787] usb 4-1: Manufacturer: syz [ 1721.572300][T29787] usb 4-1: SerialNumber: syz [ 1721.581950][T29787] usb 4-1: config 0 descriptor?? [ 1721.592918][T29787] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1721.601765][T29787] usb 4-1: setting power ON [ 1721.606973][T29787] dvb-usb: bulk message failed: -22 (2/0) [ 1721.617782][T29787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1721.634461][T29787] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1721.643272][T29741] usb 7-1: Using ep0 maxpacket: 32 [ 1721.649183][T29787] usb 4-1: media controller created [ 1721.656032][T29785] pwc: recv_control_msg error -71 req 04 val 1000 [ 1721.667450][T29741] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1721.687066][T29741] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1721.699038][T29785] pwc: recv_control_msg error -71 req 04 val 1300 [ 1721.709605][T29787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1721.718090][T29785] pwc: recv_control_msg error -71 req 04 val 1400 [ 1721.724644][T29741] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1721.736745][T29785] pwc: recv_control_msg error -71 req 02 val 2000 [ 1721.743519][T29741] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1721.756721][T21778] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1721.768439][T29785] pwc: recv_control_msg error -71 req 02 val 2100 [ 1721.773051][T21778] Bluetooth: hci5: Injecting HCI hardware error event [ 1721.778668][T29787] usb 4-1: selecting invalid altsetting 6 [ 1721.785075][T21778] Bluetooth: hci5: hardware error 0x00 [ 1721.798605][T29785] pwc: recv_control_msg error -71 req 04 val 1500 [ 1721.815116][T29787] usb 4-1: digital interface selection failed (-22) [ 1721.815469][T29741] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1721.833421][T29787] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1721.842724][T29785] pwc: recv_control_msg error -71 req 02 val 2500 [ 1721.851285][T29741] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.859554][T29785] pwc: recv_control_msg error -71 req 02 val 2400 [ 1721.866327][T29741] usb 7-1: Product: syz [ 1721.871023][T29787] usb 4-1: setting power OFF [ 1721.876401][T29787] dvb-usb: bulk message failed: -22 (2/0) [ 1721.884179][T29741] usb 7-1: Manufacturer: syz [ 1721.889046][T29785] pwc: recv_control_msg error -71 req 02 val 2600 [ 1721.895707][T29741] usb 7-1: SerialNumber: syz [ 1721.900489][T29787] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1721.910237][T29785] pwc: recv_control_msg error -71 req 02 val 2900 [ 1721.925700][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1721.935259][T29741] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input143 [ 1721.947468][T29785] pwc: recv_control_msg error -71 req 02 val 2800 [ 1721.954287][T29787] (NULL device *): no alternate interface [ 1721.964599][T29785] pwc: recv_control_msg error -71 req 04 val 1100 [ 1721.989613][T29785] pwc: recv_control_msg error -71 req 04 val 1200 [ 1722.006248][T29785] pwc: Registered as video103. [ 1722.022246][T29785] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input145 [ 1722.033379][T29787] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1722.095939][T29787] usb 4-1: USB disconnect, device number 111 [ 1722.105351][T29785] usb 9-1: USB disconnect, device number 2 [ 1722.178313][T29741] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1722.187728][T29741] (id 0x00) [ 1722.277206][T29741] rc_core: IR keymap rc-imon-pad not found [ 1722.283594][T29741] Registered IR keymap rc-empty [ 1722.290038][T29741] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1722.300993][T29741] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1722.368057][T29741] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 1722.381732][T29741] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input144 [ 1722.408274][T29741] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:11> initialized [ 1722.895620][ T407] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7509'. [ 1723.910354][T21778] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1724.396476][ T445] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7523'. [ 1724.617398][ T408] imon:send_packet: task interrupted [ 1724.622969][ T408] imon:send_packet: packet tx failed (-512) [ 1724.645905][ T408] imon:vfd_write: send packet #4 failed [ 1724.989667][T29741] usb 7-1: USB disconnect, device number 11 [ 1725.192719][ T458] ================================================================== [ 1725.200842][ T458] BUG: KASAN: slab-out-of-bounds in change_page_attr_set_clr+0x625/0xfc0 [ 1725.209276][ T458] Read of size 8 at addr ffff88807dd8c408 by task syz.7.7526/458 [ 1725.216989][ T458] [ 1725.219307][ T458] CPU: 0 UID: 0 PID: 458 Comm: syz.7.7526 Not tainted syzkaller #0 PREEMPT(full) [ 1725.219326][ T458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1725.219336][ T458] Call Trace: [ 1725.219345][ T458] [ 1725.219353][ T458] dump_stack_lvl+0x189/0x250 [ 1725.219373][ T458] ? __kasan_check_byte+0x12/0x40 [ 1725.219393][ T458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1725.219408][ T458] ? lock_release+0x4b/0x3e0 [ 1725.219429][ T458] ? __virt_addr_valid+0x4a5/0x5c0 [ 1725.219446][ T458] print_report+0xca/0x240 [ 1725.219462][ T458] ? change_page_attr_set_clr+0x625/0xfc0 [ 1725.219480][ T458] kasan_report+0x118/0x150 [ 1725.219498][ T458] ? change_page_attr_set_clr+0x625/0xfc0 [ 1725.219518][ T458] change_page_attr_set_clr+0x625/0xfc0 [ 1725.219538][ T458] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 1725.219556][ T458] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 1725.219571][ T458] ? memtype_reserve+0x874/0xb30 [ 1725.219592][ T458] _set_pages_array+0x145/0x270 [ 1725.219612][ T458] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 1725.219635][ T458] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 1725.219659][ T458] drm_gem_shmem_pin_locked+0x22c/0x460 [ 1725.219680][ T458] ? __pfx_drm_gem_shmem_pin_locked+0x10/0x10 [ 1725.219703][ T458] ? ww_mutex_lock+0x3f/0x1c0 [ 1725.219719][ T458] drm_gem_map_attach+0x19c/0x1f0 [ 1725.219734][ T458] dma_buf_dynamic_attach+0x1ea/0x3d0 [ 1725.219752][ T458] ? __fget_files+0x3a0/0x420 [ 1725.219769][ T458] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 1725.219784][ T458] drm_gem_shmem_prime_import_no_map+0xc1/0x2f0 [ 1725.219798][ T458] ? drm_gem_prime_fd_to_handle+0x185/0x4d0 [ 1725.219819][ T458] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 1725.219833][ T458] drm_gem_prime_fd_to_handle+0x196/0x4d0 [ 1725.219858][ T458] drm_ioctl_kernel+0x2cf/0x390 [ 1725.219876][ T458] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1725.219898][ T458] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1725.219918][ T458] drm_ioctl+0x67f/0xb10 [ 1725.219936][ T458] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1725.219959][ T458] ? __pfx_drm_ioctl+0x10/0x10 [ 1725.219981][ T458] ? __fget_files+0x3a0/0x420 [ 1725.219997][ T458] ? __fget_files+0x2a/0x420 [ 1725.220014][ T458] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1725.220033][ T458] ? __pfx_drm_ioctl+0x10/0x10 [ 1725.220050][ T458] __se_sys_ioctl+0xfc/0x170 [ 1725.220064][ T458] do_syscall_64+0xfa/0xfa0 [ 1725.220078][ T458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.220093][ T458] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1725.220106][ T458] ? clear_bhb_loop+0x60/0xb0 [ 1725.220121][ T458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.220136][ T458] RIP: 0033:0x7fd6c998eec9 [ 1725.220151][ T458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1725.220163][ T458] RSP: 002b:00007fd6ca872038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1725.220180][ T458] RAX: ffffffffffffffda RBX: 00007fd6c9be6090 RCX: 00007fd6c998eec9 [ 1725.220191][ T458] RDX: 0000200000000300 RSI: 00000000c00c642e RDI: 0000000000000006 [ 1725.220201][ T458] RBP: 00007fd6c9a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1725.220210][ T458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1725.220226][ T458] R13: 00007fd6c9be6128 R14: 00007fd6c9be6090 R15: 00007fd6c9d0fa28 [ 1725.220242][ T458] [ 1725.220248][ T458] [ 1725.552421][ T458] Allocated by task 458: [ 1725.556655][ T458] kasan_save_track+0x3e/0x80 [ 1725.561324][ T458] __kasan_kmalloc+0x93/0xb0 [ 1725.565901][ T458] __kvmalloc_node_noprof+0x5cd/0x910 [ 1725.571263][ T458] drm_gem_get_pages+0x166/0xa20 [ 1725.576203][ T458] drm_gem_shmem_get_pages_locked+0x201/0x440 [ 1725.582277][ T458] drm_gem_shmem_pin_locked+0x22c/0x460 [ 1725.587826][ T458] drm_gem_map_attach+0x19c/0x1f0 [ 1725.592843][ T458] dma_buf_dynamic_attach+0x1ea/0x3d0 [ 1725.598211][ T458] drm_gem_shmem_prime_import_no_map+0xc1/0x2f0 [ 1725.604443][ T458] drm_gem_prime_fd_to_handle+0x196/0x4d0 [ 1725.610157][ T458] drm_ioctl_kernel+0x2cf/0x390 [ 1725.614999][ T458] drm_ioctl+0x67f/0xb10 [ 1725.619232][ T458] __se_sys_ioctl+0xfc/0x170 [ 1725.623824][ T458] do_syscall_64+0xfa/0xfa0 [ 1725.628313][ T458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.634194][ T458] [ 1725.636500][ T458] The buggy address belongs to the object at ffff88807dd8c000 [ 1725.636500][ T458] which belongs to the cache kmalloc-2k of size 2048 [ 1725.650545][ T458] The buggy address is located 0 bytes to the right of [ 1725.650545][ T458] allocated 1032-byte region [ffff88807dd8c000, ffff88807dd8c408) [ 1725.665113][ T458] [ 1725.667426][ T458] The buggy address belongs to the physical page: [ 1725.673819][ T458] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7dd88 [ 1725.682574][ T458] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1725.691059][ T458] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1725.698595][ T458] page_type: f5(slab) [ 1725.702572][ T458] raw: 00fff00000000040 ffff88813ffa7000 dead000000000100 dead000000000122 [ 1725.711145][ T458] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1725.719717][ T458] head: 00fff00000000040 ffff88813ffa7000 dead000000000100 dead000000000122 [ 1725.728392][ T458] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1725.737060][ T458] head: 00fff00000000003 ffffea0001f76201 00000000ffffffff 00000000ffffffff [ 1725.745739][ T458] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1725.754401][ T458] page dumped because: kasan: bad access detected [ 1725.760818][ T458] page_owner tracks the page as allocated [ 1725.766516][ T458] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9649, tgid 9648 (syz.1.976), ts 315936378509, free_ts 315691197330 [ 1725.787871][ T458] post_alloc_hook+0x240/0x2a0 [ 1725.792635][ T458] get_page_from_freelist+0x2365/0x2440 [ 1725.798173][ T458] __alloc_frozen_pages_noprof+0x181/0x370 [ 1725.803975][ T458] alloc_pages_mpol+0x232/0x4a0 [ 1725.808820][ T458] allocate_slab+0x96/0x3a0 [ 1725.813325][ T458] ___slab_alloc+0xe94/0x18a0 [ 1725.818081][ T458] __slab_alloc+0x65/0x100 [ 1725.822486][ T458] __kmalloc_cache_noprof+0x411/0x6f0 [ 1725.827847][ T458] nbp_vlan_add+0x20f/0x3c0 [ 1725.832347][ T458] br_vlan_info+0xfa/0x460 [ 1725.836820][ T458] br_process_vlan_info+0x600/0x890 [ 1725.842020][ T458] br_afspec+0x395/0x5f0 [ 1725.846264][ T458] br_setlink+0x280/0x800 [ 1725.850589][ T458] rtnl_bridge_setlink+0x5b5/0x7d0 [ 1725.855794][ T458] rtnetlink_rcv_msg+0x77c/0xb70 [ 1725.860725][ T458] netlink_rcv_skb+0x208/0x470 [ 1725.865492][ T458] page last free pid 5846 tgid 5846 stack trace: [ 1725.871823][ T458] __free_frozen_pages+0xbc4/0xd30 [ 1725.876939][ T458] __put_partials+0x146/0x170 [ 1725.881802][ T458] put_cpu_partial+0x1f2/0x2e0 [ 1725.886563][ T458] __slab_free+0x2b9/0x390 [ 1725.890980][ T458] qlist_free_all+0x97/0x140 [ 1725.895567][ T458] kasan_quarantine_reduce+0x148/0x160 [ 1725.901017][ T458] __kasan_slab_alloc+0x22/0x80 [ 1725.905863][ T458] __kmalloc_noprof+0x3c3/0x7f0 [ 1725.910752][ T458] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1725.916295][ T458] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1725.921774][ T458] security_path_chmod+0x136/0x350 [ 1725.926874][ T458] chmod_common+0x182/0x400 [ 1725.931373][ T458] do_fchmodat+0x12d/0x200 [ 1725.935784][ T458] __x64_sys_chmod+0x62/0x70 [ 1725.940365][ T458] do_syscall_64+0xfa/0xfa0 [ 1725.944855][ T458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.950735][ T458] [ 1725.953052][ T458] Memory state around the buggy address: [ 1725.958665][ T458] ffff88807dd8c300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1725.966714][ T458] ffff88807dd8c380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1725.974762][ T458] >ffff88807dd8c400: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1725.982810][ T458] ^ [ 1725.987137][ T458] ffff88807dd8c480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1725.995198][ T458] ffff88807dd8c500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1726.003252][ T458] ================================================================== [ 1726.167550][ T458] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1726.174782][ T458] CPU: 1 UID: 0 PID: 458 Comm: syz.7.7526 Not tainted syzkaller #0 PREEMPT(full) [ 1726.183996][ T458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1726.194172][ T458] Call Trace: [ 1726.197462][ T458] [ 1726.200398][ T458] dump_stack_lvl+0x99/0x250 [ 1726.205005][ T458] ? __asan_memcpy+0x40/0x70 [ 1726.209610][ T458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1726.214830][ T458] ? __pfx__printk+0x10/0x10 [ 1726.219628][ T458] vpanic+0x237/0x6d0 [ 1726.223634][ T458] ? __pfx_vpanic+0x10/0x10 [ 1726.228153][ T458] ? preempt_schedule+0xae/0xc0 [ 1726.233129][ T458] ? __pfx_preempt_schedule+0x10/0x10 [ 1726.238530][ T458] panic+0xb9/0xc0 [ 1726.242274][ T458] ? __pfx_panic+0x10/0x10 [ 1726.246706][ T458] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1726.252629][ T458] ? change_page_attr_set_clr+0x625/0xfc0 [ 1726.258371][ T458] check_panic_on_warn+0x89/0xb0 [ 1726.263337][ T458] ? change_page_attr_set_clr+0x625/0xfc0 [ 1726.269088][ T458] end_report+0x78/0x160 [ 1726.273358][ T458] kasan_report+0x129/0x150 [ 1726.277887][ T458] ? change_page_attr_set_clr+0x625/0xfc0 [ 1726.283633][ T458] change_page_attr_set_clr+0x625/0xfc0 [ 1726.289206][ T458] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 1726.295294][ T458] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 1726.301454][ T458] ? memtype_reserve+0x874/0xb30 [ 1726.306392][ T458] _set_pages_array+0x145/0x270 [ 1726.311242][ T458] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 1726.317310][ T458] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 1726.323926][ T458] drm_gem_shmem_pin_locked+0x22c/0x460 [ 1726.329467][ T458] ? __pfx_drm_gem_shmem_pin_locked+0x10/0x10 [ 1726.335530][ T458] ? ww_mutex_lock+0x3f/0x1c0 [ 1726.340199][ T458] drm_gem_map_attach+0x19c/0x1f0 [ 1726.345214][ T458] dma_buf_dynamic_attach+0x1ea/0x3d0 [ 1726.350577][ T458] ? __fget_files+0x3a0/0x420 [ 1726.355246][ T458] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 1726.362088][ T458] drm_gem_shmem_prime_import_no_map+0xc1/0x2f0 [ 1726.368320][ T458] ? drm_gem_prime_fd_to_handle+0x185/0x4d0 [ 1726.374215][ T458] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 1726.381050][ T458] drm_gem_prime_fd_to_handle+0x196/0x4d0 [ 1726.386765][ T458] drm_ioctl_kernel+0x2cf/0x390 [ 1726.391612][ T458] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1726.398026][ T458] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1726.403391][ T458] drm_ioctl+0x67f/0xb10 [ 1726.407684][ T458] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1726.414181][ T458] ? __pfx_drm_ioctl+0x10/0x10 [ 1726.418945][ T458] ? __fget_files+0x3a0/0x420 [ 1726.423614][ T458] ? __fget_files+0x2a/0x420 [ 1726.428194][ T458] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1726.433123][ T458] ? __pfx_drm_ioctl+0x10/0x10 [ 1726.437888][ T458] __se_sys_ioctl+0xfc/0x170 [ 1726.442466][ T458] do_syscall_64+0xfa/0xfa0 [ 1726.446955][ T458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.453013][ T458] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1726.458632][ T458] ? clear_bhb_loop+0x60/0xb0 [ 1726.463313][ T458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.469200][ T458] RIP: 0033:0x7fd6c998eec9 [ 1726.473608][ T458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1726.493205][ T458] RSP: 002b:00007fd6ca872038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1726.501609][ T458] RAX: ffffffffffffffda RBX: 00007fd6c9be6090 RCX: 00007fd6c998eec9 [ 1726.509656][ T458] RDX: 0000200000000300 RSI: 00000000c00c642e RDI: 0000000000000006 [ 1726.517615][ T458] RBP: 00007fd6c9a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1726.525582][ T458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1726.533540][ T458] R13: 00007fd6c9be6128 R14: 00007fd6c9be6090 R15: 00007fd6c9d0fa28 [ 1726.541530][ T458] [ 1726.544933][ T458] Kernel Offset: disabled [ 1726.549245][ T458] Rebooting in 86400 seconds..