last executing test programs: 15m54.974934045s ago: executing program 1 (id=19): syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000"], 0x0) r0 = socket(0x40000000002, 0x3, 0x80000000002) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r4, &(0x7f0000000040)='./file7/file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r1, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) r6 = syz_clone(0x800000, &(0x7f0000000180)="8f9e8f88cc433665bc01289c77942517267a8d88b75c0bc1c2190854191a8004f5726bbce6fc0e3809d2d6f0a51070b1f69efab1276ba98d4e1db82bfa1c83985a262db7de9f2280e2bfcaa5dfeff73facf8178a581b", 0x56, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000300)="8ba9deffeb65f4131c31052ff6da22977f302426") prlimit64(r6, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={0x0, 0x2}, &(0x7f0000000380)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x4010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r1, r5, 0x0, 0xffffffff004) syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) 15m47.352160818s ago: executing program 1 (id=27): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x57) r2 = socket$netlink(0x10, 0x3, 0x12) writev(r2, &(0x7f00000003c0), 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001ac0)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0xb5, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f00000004c0), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000022c0)='/proc/slabinfo\x00', 0x0, 0x0) lseek(r4, 0xfffffffffffffff5, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x19, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="b4000000120b00007910000000000000db100000f10000009500740000000000079c69dc7ded5dbeeb92de3145e8ed7ac5b86c4890cdeb50347c32060581272b94c6dd22a2b589b6cbad46ed6ef790bb41931f9a3d03d127c1b4077f4b33540018bca72886eae49f7468f5e603950c4f67581c92ef8a7e000017d5f1110ed29d3b2aaf153bcf69bebf18262352ba68d39942c3b567e06411d8879622f74cc431dabd332c4c4702e4c3d41bfb54b574e8947309c7503c3e8ea23e12e0648aa223a1f97a9832f442e8cbeab700fc00bd8465593c000000000000000000000000000000ef429b14459ffd882b7cc45229b0eb1e80af5c202a8e32d36163a3614a9ab155f101b2fcbfb5b81b73035fd5a76985d4710fb6fbfb2afc59fe95637e660817e77ca962017197ff712a12c63cdd0dec053fdbc310f29c6b8be788b559a80135bb7369351b952ade2339eddde60eb16301b0f4640be5852e1cef861b861b7b19ea03dfc83f729d02e9e73db24dd5dfb09d4b1bbbd5dd5daa98903d11836af0f64f229f9886862e116612ade616b1768e97549d095b3b9f548371cd192edf40433cc20a4d02801406491d7706aef30028556c3d889418bdb8f9e6fea20b886b348ea41bda7ec1275e8a0f1e38da071fd7410dfcb720dc94e04d08898d087891a0f450e245f9cc6a8ef13af1e319000000000000000000000000000000000000009d6ec85d359c739834ba2492b06f95a5e75081ee7bdd1762df42f491b7000000000000000000000000004000000000002c9d4e105ebbf60ada6a5bc143fc889bf96e209310a0904abb9f680b8c476af078aafbd4a6dc1f000000000000b80b7db4437eac09c4ecc96b58701407b1b2d3bfa80d31f645c545ee46f70604dbd6e8e10f722731c7d807f9fab7d3c86112b13ded0d1d00eea4f1535fac8f0cbf3c0f3b75977ca16e5a6fc59a83794ac80ec00504bc9577af8cb8711baeda11820fbe7f447f3d2ddb68aea5df1b1d3fe22ff7e290643eadf083a1eca5eeea03ce3ebec307964fbc4766706cc2677352259bbc2e22efec84500442e69b1f57658370d345c8e0ae17ad2ba5564336e384f9f7dd777138f5a9f8ee23d4efc73d62b0c718bc6b38a64394b3970000000000000000"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, r3}, 0x94) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r6, r5, 0x0, 0x20000023893) syz_open_dev$vcsu(&(0x7f0000000140), 0x40, 0x80) 15m45.890470872s ago: executing program 1 (id=30): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$netlink(0x10, 0x3, 0x16) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001d40)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x1c}}, 0x0) r8 = socket$kcm(0x23, 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e22, 0x109, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x6}, 0x1c) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(r9, &(0x7f0000000000)="12", 0x1, 0x4040800, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000400)=0x10, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0}, &(0x7f0000000400)=0x40) readv(r8, &(0x7f0000000780)=[{&(0x7f0000000280)=""/206, 0xce}], 0x1) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) 15m42.321527985s ago: executing program 1 (id=44): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018080000", @ANYRES32, @ANYBLOB="00000000000000006600fcff0000000018000000000000000000000000000000950000000000000018010000202073250000000000202020c31af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001480)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003f80)=[{{&(0x7f0000001580)=@nfc_llcp={0x27, r0, 0x1, 0x5, 0xee, 0x6, "f0fd756e590fcf4c1214a25fff16c6f0c4fdd2200db72075e888b1a90a3cfdaf8b26c9b2266305ce26f2ea021a840c9c58e861e5ea7bb0aaefde66ec5e2e01", 0x30}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000014c0)="4530ac602f990786287fdf31ac69bc49827b65cb8e67a02a503d2041ad402ea9ca45da591aee24363c", 0x29}, {&(0x7f0000001600)="e3664d0aa91f945e30c933a2220e0ecdb445f54f574753090b1dc2102795e345b6c7aa558b62349c19684c35c6b0afbee3320504857ccf83d37733d802f8117af3314bb312153012c32f6f3f0989a69e97c6302c744c37132bfeea9bf5d59efcbec03c70b00911804c936fafa1ec18ebd53d81fa8473e371bdf43f9b2f6dcc46edca41c7e8ec3866b33612c80cd059861bebc9b93479605bb6fa16eed433199efb3d67d3fd4217da81521fc645cec784", 0xb0}, {&(0x7f00000016c0)="8586651af09eb3affc6b6881ae29b4099f26787290176fedd39e216801cffd21133cbfa74944a14eed291026266b0b03bae32f5fde75bfefe3eff40fcefea88a501ddce1cc4a351c16ee3dceffc7b1a01c413ddd7ac76267c0ec52d6ef64079dd80ae522489efb9fbd3f68f62f3b813794357610545a28aa5e0c533ebd501b908daa2667e54c606cc08ebe80f36d211018aef94e168a0a240cd0dc76444bb9500a2b5dd227", 0xa5}, {&(0x7f0000001780)="f9e09fcf1fc3faa13a1b95a34a9f42ef0c30328b8f14871c8acd0401c2698baf073eb09eaca2c32863dfbfc6fd168fa7a78d181bcd2006", 0x37}, {&(0x7f00000017c0)="96c1ea5da9f9d358cf50f9f88f2796c44b3959f7b4961c5c2532b10f233d0c0ef020eaf59f71479e3c009ac5f9847877cee8759978934325ad97ef8f2ea4", 0x3e}, {&(0x7f0000001800)="5aab3d07e2c485f981cc3778168f83ceef9846b910a8fcf95d393b0d6a02d1a91f24dc48dffc9a0f6af756af51948c1a8b6df313e84279f40bf5f1b1b3baa04ed935632847523c9dfdc5cdcbf4fc060c29d3cb44deedcfd74cec50ddab7dc5e2d63fed61aed3ddeb84eb270c6412080ff2f54ced8abcfeaf002d349bcbdb5d89526904af416044328d5aaa99c4fa2ac0bb03", 0x92}, {&(0x7f00000018c0)="5a08ee6c8464b94af8826f9fae68615216a113774157bedca8ed01a01a2ab5c075b7ed6f81dea7c8aedfae429a754968a9a09e920ffe6bba887d6fa88519cde8035cff6ee8c028bb9be3fb5f6558e2508cf1fa21f0714b94ee151f706d7e654f1234b627d5d846f308ec5a3fa56ad814c3b0f2f384b9d1f68d4fdaf90ee150cfef95df809db800314b08e32aa5925da7e4db16975876a3e16845e884a176fb0e24ca6294d2fafb34d8faa70b2a20a31053aa", 0xb2}, {&(0x7f0000001980)="a9fa50d93213def0a450fce673a49eccc3eede30bbad566e741a3207fef5feb8f753978fad25c04cffdc449dc8edba8293b15c81", 0x34}], 0x8}}, {{&(0x7f0000001a40)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000002ac0)="137ed2143adc6caa5a4cd7d71fef384efb97da6adf46c1b36b469584c43c3a729d4f441ba7d5c98a182f46971663573c1c2ea92cea346fe250e7f593e9ee118d415d05bf15795118fecf7fc59b608056241cb149344caa118294f6dd18efd99bb476b62cb2ae641b1f753da73aa7375e6704e71c98e843aef8373258d9681a7fd86d3eae9624cd9d22471968368487655b80c540edfcaf9127218ca4757be8a0e3ac924cec6bb0a07bcd78472a1909ed2cd4447f48ba6668ed98ce406aab47aa0d5d13d395559b2f469027f8c7315f2849f12c7c1e7035d5f079d58eca43a9e87f98ab9385978bc8b2f7e811ab84b4bb365441be0fd492328abf", 0xfa}, {&(0x7f0000002bc0)="07de0f7c50d4bfb595f037b3aef798d4319774ff7e12dd3303b2241ebdd270dfb582168b75acfb382e6d66712f2e75e4e89cabc666a689075a0a72a2854ccb779772fbc1743e23bcfb4b86631fd8e72378fc", 0x52}, {&(0x7f0000002c40)="ba8425b29a15d2813c5e88f00b39204d434675769ea5cd195c3bf6f9b186405087464b16a03a80ea48decc47d67da19decee026f6f72a78cdd86530673625f08e95f37c639e2e8ab62dbb87f996ec331d53f9654f4", 0x55}, {&(0x7f0000002cc0)="5f7c0c0ed0777205c49d0e0d7f6f8099949e623b8292ea0debebf6e88006de6beaff8113a2dbbf334951bc5d6e591bcd157d541def49291c1e8a0d975b815c6078aea30f58503633764748edcbcfbbf18377334c31ca5b5e2c67abab66c63753985ef41fb7aa1dd39deb5b4afadbcfe9b25c237643204de371596ce1531ea843fcc85112941690bc320bcbc3ca80d89d", 0x90}, {&(0x7f0000002d80)="4e2813ff6e38257dfb439153683ff3564e42e82d63892498808fa175e19312da7e720f73a86af461915cf462a9595b4ec03e07d1fab8238c362909", 0x3b}, {&(0x7f0000002dc0)="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", 0x1000}], 0x7, &(0x7f0000003e40)=[{0x30, 0xaa, 0x100, "4bb66a3b9c02735d70fbdba3eba8776fa81259408f194c61ce52137c414f"}, {0x110, 0x10a, 0x9, "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"}], 0x140}}], 0x2, 0x4000015) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r1, 0x4122, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000140)="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", &(0x7f0000001500)=""/126, 0x4}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) lstat(&(0x7f0000000240)='./bus\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) syz_usb_connect(0x4, 0x8a1, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0x6b, 0x3e, 0x0, 0xff, 0x93c, 0x701, 0x3b22, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88f, 0x3, 0x1, 0x4, 0x60, 0x3, [{{0x9, 0x4, 0x1a, 0x94, 0xf, 0x23, 0xe1, 0xf1, 0x1, [], [{{0x9, 0x5, 0x7, 0x4, 0x400, 0x9, 0xf0, 0xe, [@generic={0xc, 0x7, "104909c676d1d4a507c2"}, @generic={0x8a, 0x5, "52241006a948a2869027811c9d0e69a40924272d012d552d281089966393f94ecd109d397e73c8d20248c1a6125e86f123de9d6e3c70d769fb3c7faadb434bb2a1a4dd5035816e489b4a38e7364779f617dea21251732a62e84ed1afb3af7101034d7561cf243694d48a6000a167caabcbc35d97347eed3faadd79da08738de4af808d130291ba82"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x200, 0xb5, 0x0, 0x5}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0xa, 0x80, 0xe4}}, {{0x9, 0x5, 0xa, 0x1, 0x200, 0x4, 0x98, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x9}, @generic={0xd8, 0x21, "76b5c81a60100aad579a611e05d831d33a0305dd5954f20b94c76d21be143e5200e2b7a9f68b1e0324842a24a2926320ea04a4b79df87386cfe5f5ec48f3e6faaa1d0c2376f4d4f3b0bb7c59be3cdf27e6f4404a4f93f8e6a53684d8906efe61b823591b42baaa4731722e727db24c557e96f1cc88a38d90dbaa8c57192ecb461a2e71717de2d6a08da9829f689fe1cc22d9dd6710005063ffdfecb126e87ccc456265b97a481cdb5cacec1fd0feea37e8dfe2a0b2cf062b6048e3dfc86e1d61f361479494c98c876e2fba01f6d6eb621fe9663d7f84"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x8, 0x6, 0x7, [@generic={0xce, 0xc, "4460f9cff0d06820b32777892658366900ff054f6253491ba2f5d16a20d2cc9f9c84fc08a906ec1d65a380f15a770dc8ac44ba750c46d600acf7cc10526e940945e793bf5901fda3a5ca33e3a6c6501ad35f0d9edc7f128ae3eb78863dddba278d51fec5fe2bcee88809009c4b4b0bb53d2e2132f58f883a3ff72aac5eb46c599f309fd3e07565072d546082f15aa079e40bcbe100ce8edcd483d004d4fa7e2b18bf0f3f09dc09a284b8ab5bb2f107dc2f2233943017177d4a9c01f43e34baffbf3e93fb61d285b98f964f24"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x3}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x6, 0x9f, 0x70, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x53, 0x81}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x10, 0xc7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xfff}, @generic={0x5, 0x22, "87cd4b"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x9, 0x4, 0x5}}, {{0x9, 0x5, 0xd, 0x4, 0x400, 0xf8, 0x7, 0xf}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x9, 0xeb, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0xc7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x101}]}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0x1, 0x0, 0x7}}, {{0x9, 0x5, 0xa, 0x8, 0x40, 0x4, 0x63, 0x42, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xf}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x2}]}}, {{0x9, 0x5, 0xd, 0x3, 0x10, 0x4, 0x6, 0x8}}, {{0x9, 0x5, 0x5, 0x4, 0x400, 0xf7, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x8}, @generic={0xba, 0x8, "f16e1fd5f2aef49a59dc13f573cbda31ee35cf8778d1b582b2ac434b839cfb1a35d85a53ed7097ee4d0e66bad5f285c17e247b68c338b560a7ca46191110d155b6e696cce79a2b3755279910faa4e29dd3faf4e096e4a0cd7d2e198d7a6f973eb9dbf4d6ab3022f37744e7417ecce7492c97d7c11d88ba5e865afb7ad9efd2c740a1693539021462e6401260f746389efac89e478dcad7f9221666cef0f2419bfb93f5486f537f06123d1bcbc0a8c924bc7b5e8c42bb1ce6"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x400, 0x9, 0xd, 0x6e, [@generic={0x18, 0x31, "88e806b61b727dac32bc4746472a5b8cb377562f462a"}]}}]}}, {{0x9, 0x4, 0x6a, 0x0, 0x5, 0xff, 0x1, 0x79, 0xe, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, ']'}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x3, 0xb, 0x4}, {0x6, 0x24, 0x1a, 0x8000, 0x2}, [@acm={0x4, 0x24, 0x2, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x2b, 0x10, 0x2d, 0xb}, @acm={0x4, 0x24, 0x2, 0x1}]}], [{{0x9, 0x5, 0xc, 0x2, 0x10, 0x4, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x6}]}}, {{0x9, 0x5, 0xb, 0x3, 0x400, 0x1, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3a, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xba5}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x9, 0x3, 0x6}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x5, 0x20, 0x0, [@generic={0x46, 0x9, "455ec5874863be2d145f8ccd9b3f9851c2a051087f0e6e347048eabc8bde7fe40f684ccc1ec18476d24ddad47251f6b8f9c0c22dc518bc5a89f819f60af09597110d55fc"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x8, 0x1, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1c, 0x8001}, @generic={0x30, 0x8, "fbda64392ca773071f683bea7b89a3b57cc3cc0fd11e2361fc01c3cce04027345033d64c9543274408ac6c385af2"}]}}]}}, {{0x9, 0x4, 0xa2, 0x1, 0xe, 0xc8, 0xba, 0x95, 0x5, [], [{{0x9, 0x5, 0x1, 0xc, 0x400, 0x1, 0x3, 0x1, [@generic={0x22, 0x2, "aa6cf508c9d9f186c58aa6edf41d78d325c70e6bf5004374f0cba13209829595"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x4}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x4, 0x81, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0xe}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0x4}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x8, 0x7, 0x3, [@generic={0x5b, 0x5, "07f5ed380419690b94022b8fe870504513fe41479763c6aa1a23f654a49f02c392e8c7c7b0a0d4a7cb59ec0daa431fa057faa65b3ea8ec78011b1e0235c0091b37c725d411eb17f8019772cd4a0731e8a0f68e1ce7440558f1"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x1}]}}, {{0x9, 0x5, 0x6, 0x1, 0x10, 0x6, 0x8, 0x40}}, {{0x9, 0x5, 0xb, 0xd, 0x8, 0xf7, 0x81, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xfffe}]}}, {{0x9, 0x5, 0x7, 0x3, 0x200, 0x8, 0x27, 0x3c}}, {{0x9, 0x5, 0x6, 0xc6551c83ae6f6b40, 0x210, 0x4, 0x8, 0x4, [@generic={0x9, 0x4, "334abb0718dd32"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x5c, 0x1}]}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0x0, 0x2, 0x3}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x10, 0xfd, 0x2, [@generic={0x4f, 0x25, "1d2c760f1a49b19afae6da419635bf9bb40ee9089812bd358f545c71937d7dc940f19e58514cb4d73351ac340b2d97e2879b220f18ffd54faba2481978832f3de537e298125e8b55a0fa76f2f8"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x1, 0x3, 0x80, [@generic={0x6c, 0x21, "a2f3431e47b44dbe0a38a213b23b2a1ef7d2277414bcda5545b9f9dbb1be6b51fd0eb64de6b6f8fb70d0232d747ea011906b5624f16e6eeda80beb88e4a5e39cbb5e0e54123f838e405dc09dd4586a10e0241bc15acbfa4237dad697bf55740832a80939bd7f70a277a3"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x0, 0x0, 0x6, 0x9, [@generic={0x102, 0x21, "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"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0xf7, 0xc7, 0xff, [@generic={0x98, 0x11, "1082aac2247c153d00a039c1a871d554e2765e98e95e6ad99e334ec5d7fc162c29b92b90346fda840d87861ef9219e0eb03f0087ecc9daf8d37bee88226d4428a99344e3cff716915afdb36ca84f9cefa04e6dbc4858d79c71688a5fbbb4ab9536de4add29456f6215bf966e083afce1ffd9c4f537cabc3feeb1e9183781522e23480e1bb4a2cda538e6b08b9531ce110199b986d238"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x1}]}}, {{0x9, 0x5, 0x1d, 0x0, 0x10, 0x67, 0x3, 0xfb}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x5, 0x1, 0x77, [@generic={0xe, 0x36, "3bb745ea50b8400fdb1d20d0"}]}}]}}]}}]}}, &(0x7f00000013c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0x5, 0x8, 0x0, 0x10, 0x81}, 0x5e, &(0x7f0000000300)={0x5, 0xf, 0x5e, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0xf1, 0x5, 0x115e, 0xfd}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "2cc3cca0daf94d02197fe10ecd02ae80"}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x6, 0xf00, 0x200, [0xff0000, 0xc0c0, 0x3f00, 0x8, 0xf, 0x0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0x2, 0x9, 0x53bb, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x7, 0xe, 0x8001, 0x5}]}, 0xa, [{0xf9, &(0x7f0000000f80)=@string={0xf9, 0x3, "f1be5c2432a864cb9ce9d2be111fe1d795cfac7acf0d28169452e5b04db23c653c27688a9110ad8e12e02e87b7926403e74a4146252ccd17542602088bf75537950a33ab49c282ee2f7136ca9a01c9e7add02f6779f7034e25a3580e5156bc801bc60d5590bdf1f98739d446f743fae1304a8d94e908e3e55c979c6bd428be25fe30ab0ac8f992e2efa1cc564d1efd84e09fc7163b26616e2a86656f88fed27fb6863e22debd030dbbb1a2972c58024e472b63b4365e26cef9a18c9d6867826402f6358c0264f250c86bf1d966244c10614db723fd0a40c494d8385cbfb74e49f18aed133f80ee4fdfe4ce3c945d8b11574f7e624a4bb3"}}, {0xb1, &(0x7f0000001080)=@string={0xb1, 0x3, "8eaaebd3f8e3e6c16b0a338314a393d95bcf5a42fd8bec53c14b7fa17b38b2287b9717d12f99d35dd65c4fc5b5b6417dfc24c55bb62a86f845b9b33af9fab408d27892ebf5eb268da279d55208549bd2068c9106e4d070c2dc9d65b61e6b287bb4eab90af689ed4f38aa63414f49844a29745cd23ea12977e5830a2bc242cf77b4757d8ec88889fd851a491cfd0c0696ccbc90b7dcb8a95899e4ade9a8285526bf4a0a71ee41e1951365feba957529"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x4000}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x81d}}, {0x69, &(0x7f0000001140)=@string={0x69, 0x3, "91c6416697b6699be3e304038eb0e4b998103189b7f0e34dc9c749ddfd7f6cec3230e548a61cff905f6ad566337c448a601c1373d33a551a846c376ecbd0ec7d3c63e8b40a37f936734e0800d6928c2f13d74921b763f7aa1820b0329e4e159b9aea47805e8e06"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x810}}, {0x42, &(0x7f00000011c0)=@string={0x42, 0x3, "64ee7d784946c717da1726beb8397f2cfc6b044e9c58cf2fabbe28cb48b064d78d6ec1559182c540f5a36b406902a0f1293a9a96c14edaa204bd5c60c1f79334"}}, {0xc3, &(0x7f0000001240)=@string={0xc3, 0x3, "98f9a72cba8792111c0bf0c98609197865d909ceae2a52319e430014918d21f325c10f63f31b1cd3dc5adef3ef278832b8411da85a8d17b4235eee837b170472b937ec50250e42ac5060794800f1cb4747c2148f8716e218b9ea2e31158f56db68cc8feecdfc2093d45a65677ea7b475c3ec90de85035fee9772989f6e47799cb6169e8cb323368a003b02b340cbd5899d45e8216eccf29fe61ec801501c8c9bfb2ca9da0b64c8e2549a05b0af46037459f8cf43ae3dde13aa73d2470737acd8f7"}}, {0x62, &(0x7f0000004240)=ANY=[@ANYBLOB="62031fbf784abdf6f94c0889a19546792563da0aef2156138b16f021953cb6f117c95c4e5c53f7b0e83e1b978e0eb193b6eeeae2e53b5319a5d1b268f1e8ad00da19ab2676add4b2f6f5c3c18fc37fa071743bcd0a17bff99bfe9c056eee13f38321900935da3dce40498706884740716d028888444f757638a399afb5f9842a53034897ff3e08ac61647762a1b7e431dbec459fb45bb31c"]}]}) syz_usb_connect$cdc_ecm(0x5, 0x8a, &(0x7f0000004000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x1, 0x1, 0xa5, 0x10, 0x9, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x7, 0x24, 0x6, 0x0, 0x0, "f3e8"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6fa9, 0x1, 0x7f}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x3, 0x2c, 0x7f}, @ncm={0x6, 0x24, 0x1a, 0x744}, @mdlm={0x15, 0x24, 0x12, 0x401}, @ncm={0x6, 0x24, 0x1a, 0x6c9f, 0x14}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x2}, @obex={0x5, 0x24, 0x15, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x4, 0x23}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0x80, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x5, 0x41}}}}}]}}]}}, &(0x7f0000004200)={0xa, &(0x7f00000040c0)={0xa, 0x6, 0x200, 0xfa, 0xff, 0x7, 0x0, 0xc}, 0x17, &(0x7f0000004100)={0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0xc, 0x4, 0xba, 0x5b, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x7, 0x5, 0xfeff}]}, 0x1, [{0xc0, &(0x7f0000004140)=@string={0xc0, 0x3, "9d78979e268ad1d4755e6d3710884e7c595c38b1394363ddb29173360097cc8651b6438afa05defad92b3e46186deeb47aab77307957e992b89916e2a8e45fee1cd33917a480e131f2468f1b54b72be9d18762f5b9275ed1937fc45f6bd88522a4c60a1a115e4e5a067746691de7198b05fcefea06a7176c83b928829d1cc57a4dd3f85ab8309e0782338ab59be854ae9c52729e6b7ab3b9d2c1a515e02388cb411c70fc0ecaf237da855b8acd9b30d6b51819bddeab3be8eed147feb82f"}}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcff"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000002c0)) 15m41.066284654s ago: executing program 1 (id=47): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r6}, './file0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x20008040) 15m40.345812944s ago: executing program 1 (id=51): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) (async, rerun: 64) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) (async, rerun: 64) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) recvmmsg(r0, &(0x7f0000005100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)=""/4096, 0x1000}, 0x5661}], 0x1, 0x100, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000200)={'mangle\x00', 0x0, [0x8081, 0x1, 0x20000009, 0x80000000, 0x44009]}, &(0x7f0000000400)=0x54) 15m36.048077576s ago: executing program 4 (id=63): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x11, 0x3, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa2c0000000000059078ac141400e00000010704040500000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000000907809f1"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000280)={0x4c, 0x5f, 0x6, 0x3, 0x7, "00da900eaf7919c635d4a15ac41e3100", 0x80000000, 0x7fe}) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000300)={0xd, {"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", 0x1000}}, 0x1006) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x7a00, 0x0, 0x4004010}, 0x24000880) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) msgrcv(0x0, 0x0, 0x0, 0xffffff7f00000000, 0x3000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xa00, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000000c0)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000040)={0x5, 0x1fd, {r0}, {r7}, 0x100000000, 0x4}) ptrace$cont(0x9, r8, 0x4, 0x6) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 15m34.706237517s ago: executing program 4 (id=64): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="f40b0100004086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) (async) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be29", 0xc1}], 0x1}, 0x0) (async) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x8802, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xaf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0xfffffffe}, {}]}) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf25090000003c00038008000100"], 0x50}}, 0x48040) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r4, @ANYBLOB="000125bd7000ffdb0325020000005400038005000800070000000800010000df0000140002007465616d5f736c617600050008000800000000776c616e31010000001d000000000000060007004e2400bdcdf8ae2fc02c8568ea002000080003000000380001800600020084000000080005000200000014f20200ac1414aa0400000000000000000000100800090050000000060004005b6100000c00028006000ff0078e000094fce09208d2bb825d0ff9650db71988276dec763a257c8b11bc603790248ee53bea86d6ef698f22f9958dcd132e8537e5aa60ecbbaa557eeaa0afd6016c11d083faa896b502d5d64211f70f65756b4b9e6cf1272361cbec0e528be31fb08c3bee26170bee56df184a5a1d1abe6fa0d7edab97c60d042f9efb0b65f2937d3c9469608091d803047c4fc36ba44d3e62a874c98fbd72cfe382c1469fa6b6490b000000000000"], 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) mmap$dsp(&(0x7f00005d6000/0x1000)=nil, 0x1000, 0x9, 0x8010, r2, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r1, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xc1}], 0x1) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000780)=ANY=[@ANYBLOB="200aec000000f8e371c3a424058e3e6d9e54ec48a48156f310b693dfdff7c976dc243fa45aa55fc34721479602a886d00dce2ba25dfd7a74de70bf053905e1e9b7ddd6f1f03d31c26756fd62bc3607000000af37221625d947a0f555687503c63fc98a4aa41851d7ba77310261553a75ef202dd3fa2726b3afee77d4688d8e202a249b98cf401d91db7bf9558fd2a10c21c9cc47a282ce398b07a19a1b089e1faab3d770cfdd0e2cbc7b0503a149b94d045998af5fe2a3bf03034a8eefe297331494f2836e4afac045e34d1b551e0149698a621745b4066cd97091a929b6b8451040465e2b928645999d6deaa48dd5e28c4503bee7f43e9be4f062385e343f980b24c18318c7b78b5a8aa833861fb51ec58f2f5cf089dde5b7bbd2e9d2392566cd465adaab500d7304aec1cb51ff233955e4e5257dd568cb0f07be00"/340], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15m31.04197333s ago: executing program 4 (id=70): bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) syz_usb_connect(0x0, 0x3d, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004e826d4094225a4241d10102030109022b00010020000009040000020764c2000905a17f00000000000705"], 0x0) (async) syz_usb_connect(0x0, 0x3d, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004e826d4094225a4241d10102030109022b00010020000009040000020764c2000905a17f00000000000705"], 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000007, 0x810, r0, 0x0) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000007, 0x810, r0, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0xc0041) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) ptrace(0x10, r2) ptrace$poke(0x4, r2, &(0x7f0000000080), 0x4) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x20002, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x20002, 0x0) fsopen(0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) epoll_pwait2(r3, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f00000002c0), &(0x7f0000000280)={[0x3]}, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x100010, 0xffffffffffffffff, 0xfffff000) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x100010, 0xffffffffffffffff, 0xfffff000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) (async) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x54, 0x0, &(0x7f00000003c0)=[@enter_looper, @register_looper, @release={0x40046306, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$KDGKBMETA(r6, 0x4b62, &(0x7f0000000180)) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xee01}}, './file0\x00'}) 15m28.886137013s ago: executing program 4 (id=79): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="00d85dfba67240250b129807cac4710f9f8edbe252611d72ff70b9b1485af7cddaa389ab5990e729eefebe741d9f8cde077a8581323372dfdb57399215da09bc197e996a48877b6b249153bfd1f9d2260ebdd1f566813b1f7b2994c76e3d92bed35791d96d34c85c5d48bc78076074017746b46b88fa0d35d8dae2cc01a193e79a242f611c45fd35a08475a2") r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x27, 0xc0, 0xde, 0x20, 0x86a, 0x3, 0xf03f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x2, 0x2, 0x2, 0xf3, 0xbf, 0xf5, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x4, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r2, 0x4) syz_usb_control_io$uac1(r1, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003160000001603"]}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000240)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c000700200000000200000008"], 0xc4}}, 0x4008800) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) syz_open_dev$dri(&(0x7f0000000180), 0x5, 0x602400) 15m27.208605836s ago: executing program 4 (id=82): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r0, r0, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x105}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x20050800) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000040000080000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001000b5020000000000008500000083000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 15m26.856337156s ago: executing program 4 (id=83): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000040)=""/24) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0xffffffff, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000500040000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000a00000014001a80100004800c00028008"], 0x34}}, 0x0) 15m26.462782818s ago: executing program 32 (id=83): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000040)=""/24) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0xffffffff, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000500040000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000a00000014001a80100004800c00028008"], 0x34}}, 0x0) 15m24.7616622s ago: executing program 33 (id=51): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) (async, rerun: 64) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) (async, rerun: 64) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) recvmmsg(r0, &(0x7f0000005100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)=""/4096, 0x1000}, 0x5661}], 0x1, 0x100, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000200)={'mangle\x00', 0x0, [0x8081, 0x1, 0x20000009, 0x80000000, 0x44009]}, &(0x7f0000000400)=0x54) 14m55.912819684s ago: executing program 2 (id=153): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x1b, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, 0x0, &(0x7f0000001580)=""/92}, 0x20) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r2, 0x400455c8, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x2c, 0x10, 0xffffff1f, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1809, 0x20200}, [@IFLA_ADDRESS={0xa, 0x1, @random}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xdb) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000380)=0x2) 14m55.165276734s ago: executing program 2 (id=155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x4}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x804) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f0000000180)={0x6, 0x5, 0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r7, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$unix(0x1, 0x2, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028000300268a80c3556bb41c591c9b03d318558e0bec303e188980eb3e13c9d6bd", @ANYRES32=r11, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050008000000"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 14m53.726017357s ago: executing program 2 (id=157): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='fib6_table_lookup\x00', r0}, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000440), 0x10, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @win={{0x400, 0x9, 0x7, 0x5}, 0x5, 0x100, &(0x7f0000000480)={{0xfffff7d0, 0x81, 0xa39, 0x879}, &(0x7f0000000400)={{0x80000001, 0x0, 0x2, 0x3}}}, 0x0, &(0x7f0000000600)="ea428835ddeb8e97177682dbb705f2c20a6e483cadfd50cf3f47493a8d22a3234c559037af100ea13e3966c2965bdae537ed42496d043cad1c84f50b2b007b1655e4da6f59309eaf78b820690e40acf9d6059c71021125e1f5094ac7a872d552b6aaa2356a3fb9ec446700c6c67ee690c43c12c4000000000000000732d14cd97601021e9d41091ff1b3961dd7e1629cdc7c9f18234f80321b38bf08000000000000002b50fd1197279126de85a5675519e2bffd0300", 0x10}}) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x8}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)="a5a281c0b7"}], 0x1}, 0x40080c0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x101040, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r5, &(0x7f0000000300)="ca0e808bb35bda", 0x7) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9902000012006b9c9e3fe3d86e6c1d0000147ea60864160af365", 0x1a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r7, 0x20, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) memfd_secret(0x80000) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) 14m52.732632686s ago: executing program 2 (id=159): socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(0x0, 0x182) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x2a05004, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB="080004000001"], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) sendfile(r4, r3, 0x0, 0x80000000) socketpair$unix(0x1, 0x1, 0x0, 0x0) 14m48.410094471s ago: executing program 2 (id=170): ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x7f, 0x5, 0x7, 0x4, 0x8, "03f37fe99f4da288"}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x8001) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x42080, 0x0) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000840)={'hsr0\x00', 0x8}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f00000000c0)={@multicast1=0xe0000300, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x7, 0xa}, {0xfff3}}}, 0x59}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r3, &(0x7f0000000080)={0x11, 0x4, r7, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) (async) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xfff1}, {0xfff1, 0xa}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008010}, 0x40000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070056060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff6d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded85d3cdd66d9c79f0529d045625b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c700e3806f825f1d0da2a304e06543b56d35235d7897a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664b44e22b72e843e7cf55f394cf75d1cd57c9150bfb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcfc5540f9574f20e7f513a2a7c5dad90e7d479724d69fa0c0bf97af1231a49ea166f743279d240e2e6f01d8704f313d68b16198be5f6a50e9e0fd20893b2922df566d2622edee5000000000000000000d91c6da09fa7cdbbf16d4780d8c2401c55aff772aced3ff966ff76d796c171f5f7a31e1b14b0c0c712c0fdd2710f37a3d15710d68e7326a7db043c57784bd9bdb047db75"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x2f}, 0x94) (async) chdir(&(0x7f0000000140)='./file0\x00') symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 14m46.935742745s ago: executing program 2 (id=176): r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x48) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDR6={0x14, 0xb, @remote}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8}]}, 0x40}}, 0x4008000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000800)="7deb", 0x5dc}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x24048801) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x25, 0x0, 0x8) 14m45.837615699s ago: executing program 34 (id=176): r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x48) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDR6={0x14, 0xb, @remote}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8}]}, 0x40}}, 0x4008000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000800)="7deb", 0x5dc}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x24048801) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x25, 0x0, 0x8) 10m5.536141055s ago: executing program 7 (id=1039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x8, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x41050}, 0x4000004) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x14000, 0x0) r2 = fanotify_init(0x40, 0x8000) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x200000, 0x52) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private2}}, &(0x7f0000000380)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x936afdd06d8e0bf5, &(0x7f0000000440)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@default_permissions}]}}) write$dsp(r1, &(0x7f0000000500)="d39d7c96cf110eba799182cf82f9d324eba9735d3e462ca11ad57bd866f76ccda88dc3032c8d17e34c0f027a", 0x2c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r8, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x29}}}}, [""]}, 0x28}}, 0x4000810) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000006c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001d80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001d40)={&(0x7f0000000700)={0x1610, r9, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x15a4, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x498, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_ALLOWEDIPS={0x3c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x3cc, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2b}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @loopback, 0x9}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xe, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffc0}}]}, {0xa4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x604}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x100}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x178, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xb4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2b}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x9}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9c9be6bd9050f09ca5ec1a2931f90543ae088790bdf3757bdeaafd4207d2fbd0"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "255478e6a2c6e903f692422de6682ab1ea915a3cb2b62f49ab1e68b0a3e6e92f"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010102}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x200, @remote, 0x5}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xe, @local, 0x2}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "173aefee51249983769b81ba31a4ad7338b38fe5e23d5a566a31c066e014e4cd"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "83cddd11b5f734a146ae92f7979cc93ca29461462c02c7eb9c497820a4764326"}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7f, @private1, 0x200}}]}, {0xd6c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x570, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}, {0x5, 0x3, 0x1}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010101}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2e896311fecdcd767062de964cca6cade5662145050b9f62c53c7ec6f89974fd"}, @WGPEER_A_ALLOWEDIPS={0x728, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x1610}, 0x1, 0x0, 0x0, 0x14}, 0x40000c0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000001dc0)=0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001e00)={'wlan0\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000001e40)={0x0, 0x0, {r5}, {r6}, 0x6}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r3, 0x80044dff, &(0x7f0000001ec0)) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x10, 0x3f5, 0x8, 0x70bd2c, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x80) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r10, &(0x7f0000002140)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002100)={&(0x7f0000002040)={0xa8, 0x2, 0x7, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb}]}]}, 0xa8}}, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000002180)={'adq12b\x00', [0x3, 0xfffffff7, 0x2, 0x8, 0x7, 0x2, 0x0, 0x4, 0x0, 0x4, 0x7584, 0x6, 0x11c, 0x7ff, 0x0, 0x3, 0x0, 0x4, 0x17649858, 0x8, 0x10, 0x3, 0xf, 0xc3, 0x8, 0x5, 0x5, 0x6, 0x2, 0x3825, 0x1, 0xe8]}) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x68, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0xffffffff, @media='ib\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x821}, 0x24008000) bind$rds(r3, &(0x7f0000002380)={0x2, 0x2, @local}, 0x10) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x28, 0x4, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x30000000}, 0x20009880) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f00000024c0)={0xd, 0x8}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000002540), r3) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x38, r11, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 10m5.149505398s ago: executing program 7 (id=1042): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x1b, 0x200, &(0x7f0000000880)="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"}) msync(&(0x7f00007c1000/0x3000)=nil, 0x3000, 0x2) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getrusage(0xffffffffffffffff, &(0x7f00000011c0)) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) r2 = socket(0x840000000002, 0x3, 0x100) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000004"], 0x24, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) fgetxattr(r1, &(0x7f00000000c0)=@known='user.incfs.id\x00', &(0x7f00000003c0)=""/247, 0xf7) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) creat(&(0x7f0000000140)='./file0\x00', 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r1, @ANYRES8=r4, @ANYBLOB="8ebf401bba83bdc6dbedb80177606c78b65dd68f723bd647a70475cc5d35e10e9e335166d4b164202bb2c6f73180d6a81f9772db86b9e5703c4a870a6f3a8bdf472cbbc7e2593fd4ffb8ce0d7b70d9a1b92892de1ce3f8a268e36e908a2de5e425cd14139e7670afff4b4deef30dc9811614ebc02730a3896a151d4fecde66589fed8ddc875a613e280126c90dde1f81fd9f5e56fcbd67aaef0b21bb7bae1e258e4c2dd06659990eb92a6c8afbf07a37a65861dbc9d02210c0ff8d8698b7dbd3e910f2d5c25b8c99580133cd47837eb7b453cc33b40b1c78e95c7e42"], 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001380)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0x25, 0x148, 0x0, 0x60, 0x490, 0x2a8, 0x2a8, 0x490, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x8, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x20]}}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x4, 0x0, 0x5, 0x1, 0x0, 0x5], 0x3, 0x2}}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x588) 10m1.274018657s ago: executing program 7 (id=1058): r0 = socket$kcm(0xa, 0x1, 0x106) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x286f, 0x80, 0x2, 0x3bb}, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x6000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x40, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x10, r3, 0x3, r1}, 0x10) 10m1.057041668s ago: executing program 7 (id=1060): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x80000000}) sendto$inet6(r0, &(0x7f0000000000)="10", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x29}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000002c0)='$', 0x1}], 0x1}, 0x20000000) 10m0.83772979s ago: executing program 7 (id=1062): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x8, 0x0, @void}, 0x10) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x75, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xa}}}}}]}}]}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) write(r4, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030004000500e1000c040007001a000200", 0x33a) syz_usb_control_io(r3, 0x0, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x20, 0x19, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x8800) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x8000000000000001, &(0x7f0000000180)=[{0x3, 0x9, 0xb0c5}], 0x1, 0x80000000, 0x0, 0x4, 0xf74b21a361e31017}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) writev(r5, &(0x7f0000000b40)=[{&(0x7f0000000a00)='.', 0x1}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x1f, 0x0, 0xfffffffd}, {0x44, 0x0, 0x5, 0x200}, {0x6}]}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r9, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) r10 = fcntl$getown(r6, 0x9) fcntl$lock(r9, 0x25, &(0x7f0000000340)={0x1, 0x2, 0xad, 0x9, r10}) fcntl$lock(r8, 0x24, &(0x7f0000002d40)={0x2, 0x0, 0x28005, 0x400000006}) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x2, "2b125fa4"}, @main=@item_012={0x0, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x7, "fd6ea1b3"}]}}, 0x0}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES16=r0, @ANYBLOB="030300000000000000000500000008000300", @ANYRES8=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000004c0)={{0x4, 0x4, 0x78, 0x7f, 'syz1\x00', 0x4}, 0x0, [0x2, 0x8000, 0x61, 0xbe2f, 0xc8, 0x5, 0xc1e7, 0x2, 0x0, 0x8c6, 0xaa, 0x9, 0x400, 0x7, 0x5, 0x5, 0x7, 0x21, 0x3, 0xda, 0x0, 0x8200, 0x2, 0x4, 0xfff, 0x9, 0x4, 0xe, 0x1e27, 0x9, 0x0, 0x8, 0xa4c, 0x9, 0xa41, 0x1000, 0x4, 0x81, 0xfb, 0xfffffffffffffffe, 0x6, 0x6, 0x8, 0xd7, 0x4, 0x9, 0x0, 0x6, 0xffffffffffffff00, 0x1, 0x8000, 0xffffffff00000000, 0x4, 0x7fffffff, 0xc, 0x6, 0x7, 0x6, 0x1, 0x5e, 0x6, 0x6, 0x4, 0x1, 0x7fffffff, 0x81, 0xfffffffffffffff6, 0x7, 0x7, 0x1000, 0x0, 0x2, 0x3ff, 0x7fff, 0x7a0, 0x4, 0x2, 0x3, 0x9, 0x6, 0x10, 0xf87b, 0xe, 0x3a1d, 0x4d69, 0x8, 0x9, 0x4, 0xd925, 0xfe, 0x484, 0x3, 0x100000001, 0x76, 0x7f, 0x400, 0x3, 0x3ff, 0x7f, 0x9, 0x2, 0x9, 0x3, 0xe, 0x5fc0, 0x3, 0x5, 0x9, 0x6, 0x200, 0xb, 0xaf, 0x9, 0x9, 0x2, 0x5, 0x1, 0x8, 0xa8, 0xfffffffffffffffd, 0x80, 0x6, 0x0, 0x80, 0xffffffff80000000, 0xffffffffc0000000, 0x6, 0x7]}) r11 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], 0x0) syz_usb_connect$printer(0x4, 0x0, 0x0, &(0x7f0000000500)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x80, 0x80, 0xff, 0xff, 0x3}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x82c}}]}) syz_usb_ep_write(r11, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1") pidfd_getfd(0xffffffffffffffff, r4, 0x0) 10m0.218319644s ago: executing program 7 (id=1063): r0 = creat(&(0x7f0000000600)='./file0\x00', 0xe5) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) (rerun: 32) write$qrtrtun(r0, &(0x7f0000001d00)="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", 0x45d) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r0, 0x20, &(0x7f00000001c0)={&(0x7f0000000100)=""/24, 0x18, 0x0, &(0x7f0000000180)=""/12, 0xc}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x6], &(0x7f00000002c0)=[0x0, 0x4, 0x5], 0x2, 0x1, 0x0, 0xffffffffffffffff}}, 0x40) (async) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0) 9m59.272680059s ago: executing program 35 (id=1063): r0 = creat(&(0x7f0000000600)='./file0\x00', 0xe5) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) (rerun: 32) write$qrtrtun(r0, &(0x7f0000001d00)="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", 0x45d) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r0, 0x20, &(0x7f00000001c0)={&(0x7f0000000100)=""/24, 0x18, 0x0, &(0x7f0000000180)=""/12, 0xc}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x6], &(0x7f00000002c0)=[0x0, 0x4, 0x5], 0x2, 0x1, 0x0, 0xffffffffffffffff}}, 0x40) (async) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0) 10.062905516s ago: executing program 8 (id=2892): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x0, 0x5d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052413", @ANYRES16], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='bond_slave_0\x00', 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000200)={{0x2, 0x4e21, @broadcast}, {}, 0x10, {0x2, 0x4e21, @remote}, 'xfrm0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f50850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x5452, &(0x7f0000000a00)={'dvmrp0\x00', @random='c\b\x00'}) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000000), 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bind$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x4, @none, 0x0, 0x1}, 0xe) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000500000", @ANYRES32=0x0, @ANYBLOB="000900006440002008001b55eed6aa6be7c6e9ffffffff04001000047095a6b98947dfa83c424263113dc0cc7972e01a430d5d22f6d1a3da00910d1614f68e07038ccd40a93e1bafdbacc072373efe245454c067c11a8494cc0515cad659a7969a59c796105b"], 0x30}}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x8800) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)={0x60000010}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) time(0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x2c, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, r10, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 7.68015941s ago: executing program 5 (id=2902): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) (async) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) close_range(r1, 0xffffffffffffffff, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x11) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x7}, 0x10) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500090002000000", 0x24) (async) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x188, 0x0, 0x0, 0x0, 0x20, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x2, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xc, 0xfe}}}}}]}}]}}, 0x0) unshare(0x22020400) (async) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0xc, 0x286000) syncfs(r7) syz_usb_control_io(r6, 0x0, 0x0) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8, 0x9, r10}]}, 0x24}}, 0x0) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r11, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0xb1, 0x1, 0x40, r8, 0x1, '\x00', r10, r11, 0x4, 0x3}, 0x50) (async) syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="400510"], 0x0, 0x0, 0x0, 0x0}, 0x0) 7.610288393s ago: executing program 3 (id=2903): syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0)) mmap(&(0x7f0000899000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001300)={0x18, 0x16, 0xa01, 0x80000000, 0x25dfdbfe, {0x15}, [@generic='!']}, 0x18}}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x400d0}, 0x0) 6.048851113s ago: executing program 8 (id=2909): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0xffffffffffffffa4, 0x1, 0x1000) r1 = semget(0x2, 0x2, 0x80) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000040)=""/1) msgrcv(r0, 0x0, 0x0, 0x0, 0x800) msgctl$IPC_RMID(r0, 0x0) 5.706163664s ago: executing program 8 (id=2911): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000180)=ANY=[], 0x75}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000"]) openat$kvm(0xffffff9c, 0x0, 0x80800, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000007e40)={'wpan0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000084) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000280)="92af7b4fac79a2b47a4af7cfaf31100f", 0x10) fsmount(r1, 0x0, 0x0) socket$inet6(0xa, 0xa, 0x7c9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000f31acd0a04c433b5380100000000000400", @ANYBLOB="ef030000000f000008000500", @ANYRES32=r6, @ANYBLOB="1c00128009000100766c616e000000000c00028006"], 0x44}}, 0x4004850) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r7, &(0x7f0000000100)={0x1f, @none}, 0x8) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000002d000100000000090000000004000080350011802fe5afbf24fbcccc554cd9761e79b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650dbe7000000"], 0x4c}], 0x1}, 0x20004840) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) setsockopt$MRT6_DEL_MFC(r8, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x2f, @empty, 0x5}, {0xa, 0x4e24, 0xfffff809, @private0, 0x4}, 0x1, {[0x5, 0x8, 0xbf41, 0x6, 0x100, 0xcdd, 0xff, 0xd]}}, 0x5c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r8, 0xc028ae92, &(0x7f0000000100)={0x20000000, 0x23000000}) semctl$SEM_INFO(0x0, 0x2, 0x13, &(0x7f0000000080)=""/141) 4.42120479s ago: executing program 0 (id=2912): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000c40)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x4800052}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffffff, &(0x7f0000001b80)='./file1\x00', 0x400200, 0x85) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000001800)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x40000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/19, 0x13}, {&(0x7f0000000100)=""/65, 0x41}, {&(0x7f00000001c0)=""/33, 0x21}], 0x3, &(0x7f0000000580)=[{0x0}, {&(0x7f0000001980)=""/81, 0x51}, {&(0x7f0000001a00)=""/150, 0x96}, {&(0x7f0000001ac0)=""/150, 0x96}], 0x4, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.419791211s ago: executing program 8 (id=2913): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) sendmsg$inet(r4, 0x0, 0x40) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1ff) write$binfmt_elf32(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460000004000000000000000000300030000000000000000003800000000000000000000000000200080"], 0x158) close(r6) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f00000005c0)="a30f5fce4ebe", 0x6, 0x10, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @local, 0x4}, 0x1c) shutdown(r8, 0x1) 4.342844188s ago: executing program 5 (id=2914): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x5, 0x72, 0x8, 0x5}]}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="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", 0x14d, 0x2400c811, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) syz_open_dev$loop(0x0, 0x9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000040)='signal_generate\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) keyctl$unlink(0x9, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) recvmmsg(r1, &(0x7f0000000700)=[{{&(0x7f00000003c0)=@qipcrtr, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)=""/228, 0xe4}, {&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000440)=""/115, 0x73}], 0x3, &(0x7f0000000680)=""/68, 0x44}, 0x10000}], 0x1, 0x100, &(0x7f0000000780)={0x77359400}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611980000000000095000000000000001768bb0b9811a7031da482a6346cdb41d77b916376eb84b2fabf227e546ebe8240755b809007ac50d6048d835da64a30fc5bd60bd418e48fa59cb9a675e9ef906d0019c59adfaa36d53b39ee5902d3c7b241205e6ffbb0bbbd543107d028e34c64b3acfec7c542305617e8d79cd93e043e300cf9b69d90a01ea1ad7c99f3a3a69abde2a619aa7b97e6da17461303ac8ad7f1e35ab6"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) sched_setattr(0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) 4.112499723s ago: executing program 3 (id=2915): socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = gettid() syz_open_procfs(r0, &(0x7f00000000c0)='mounts\x00') socket$netlink(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x5e1800, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x3, 0x8, 0x2, 0xc, 0xfffffffffffffffc, 0x3}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x4, 0x2, 0x466}, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='devpts\x00', 0x2200892, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$igmp(0x2, 0x3, 0x2) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) gettid() (async) syz_open_procfs(r0, &(0x7f00000000c0)='mounts\x00') (async) socket$netlink(0x10, 0x3, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x5e1800, 0x0) (async) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x3, 0x8, 0x2, 0xc, 0xfffffffffffffffc, 0x3}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x4, 0x2, 0x466}, 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='devpts\x00', 0x2200892, 0x0) (async) 3.38227561s ago: executing program 5 (id=2916): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x6f35, 0x9, 0x2}, 0x10) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) (async, rerun: 32) fchdir(0xffffffffffffffff) (async) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000600), 0xfec8) (async) recvmmsg(r5, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000ac0), 0x0, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}], 0x1, 0x208a, &(0x7f0000008000)={0x0, 0x989680}) (async) unshare(0x68040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) socket$kcm(0x10, 0x2, 0x0) 3.211443742s ago: executing program 8 (id=2917): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x58, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.11739183s ago: executing program 3 (id=2919): syz_open_dev$tty1(0xc, 0x4, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r0 = getpid() (rerun: 32) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={0x0, &(0x7f0000000280)}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'vcan0\x00', 0x20}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbf8, {0x0, 0x0, 0x0, r8, {0xfff3, 0x10}, {}, {0xfff3, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40008cc}, 0x20004804) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="6d706f6c3d6c6f63616c2c687567653d77697468696e5f73697a652c00a0c445294162af2edc855a080b286656d68a9dae4b067f42b232fc69612a9533e6fd4eabd9900ba4b97b05b66caac36c86d38c6e0b218d05b6ffdadc242c63f45f9be9a7d51565a4481a6b4c53b09e18fd09ea88fe87413484d526959e83b552091e0e9b171da4a6d73c26f22f1bb5bcc837a9"]) (async, rerun: 32) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') (rerun: 32) read$FUSE(r9, &(0x7f0000002280)={0x2020}, 0x2020) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, 0x0) (async, rerun: 64) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) (rerun: 64) syz_io_uring_setup(0x5a6e, &(0x7f0000000140)={0x0, 0x97ef, 0x8, 0xffffffff, 0x98, 0x0, r6}, &(0x7f0000000100), &(0x7f00000003c0)) 3.111354252s ago: executing program 0 (id=2920): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2000}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$unix(r1, &(0x7f0000000300)=@abs={0x2, 0x0, 0x4e26}, 0x6e) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="09000000000000000000070000001400018005000200"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x3a) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg(r7, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x400000000000113, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2c0c40, 0x100, 0x3}, 0x18) 2.859773841s ago: executing program 0 (id=2921): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtclass={0x40, 0x28, 0xbc52920a1497331c, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xb}, {0xf, 0xc}, {0x5, 0xfff3}}, [@tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x1, 0x1010, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) (async) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)="020000000d80", 0x6) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r5, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) (async) recvmmsg(r3, &(0x7f00000010c0), 0x10152, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x50) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x202840, &(0x7f00000001c0)=ANY=[@ANYRES16=r2]) (async) chdir(&(0x7f0000000300)='./file0\x00') (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x30) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000"/15], 0xf8}}, 0x0) (async) keyctl$clear(0x7, 0xfffffffffffffffb) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) (async) lseek(r7, 0xfffffffc, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x104}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @remote}]}, &(0x7f0000000100)=0x10) 2.859026049s ago: executing program 5 (id=2922): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x59, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x40, &(0x7f0000000300)=[@vmwrite={0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x1000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "5d4b42fac245ae74", "21cb70af1a8d3978b3ad1a2c6ede97acca25f6a9000bab0d716e9ebdee04ab7e", "b65dab43", "9a2c4361134d8abe"}, 0x38) ioctl$int_in(r6, 0x5452, &(0x7f0000000280)=0xfffffffffffff6d5) recvmsg(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/114, 0x72}], 0x1}, 0x20) shutdown(r6, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000780), r3) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000180)={0x2c, r8, 0x801, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x2a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x14) 2.584235981s ago: executing program 0 (id=2923): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x1c1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file4\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001380)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x6a}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x23, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) userfaultfd(0x801) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(r0, 0xb, &(0x7f0000001180)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001340), 0x391680, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x5fea, 0x38d583) writev(r3, &(0x7f0000000840), 0x0) r4 = syz_open_dev$dri(&(0x7f0000001280), 0x9, 0x181004) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001300)=ANY=[@ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x18004}, 0x40c4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000001240)={0x0, &(0x7f0000001200)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000001100)={0x0, 0x712b, r6}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, 0x0) unshare(0x22020600) r7 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x4) r9 = openat$cgroup_ro(r8, &(0x7f00000023c0)='cgroup.controllers\x00', 0x5000000, 0x0) readv(r9, &(0x7f00000012c0)=[{&(0x7f0000002400)=""/4088, 0x1004}], 0x100000000000003b) 2.37755635s ago: executing program 3 (id=2924): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f00000000c0)=""/23, 0x0, 0x0, 0x800, 0x1}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2200c841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x88203, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f00000005c0)) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.335540886s ago: executing program 0 (id=2925): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x8, @loopback}, 0x1c) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffce2a0000000000000011424203"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000400)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0x52, 0xb, "6eae22d08a6c7fc6a64d36441be550c1c6a3ee537ce811db7848f7703725f26c80b52cd59cf884f6e63928cf50e9391041c28f2dad3524e56343ebf10100", 0x3d}, 0x80, 0x0}, 0x2004c010) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x1) getrlimit(0xa, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000280)={0x1, r3, 0x80000}) accept4$netrom(r5, &(0x7f0000000300)={{}, [@default, @bcast, @netrom, @null, @remote, @remote, @remote, @netrom]}, &(0x7f0000000040)=0x48, 0x80000) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) setsockopt$TIPC_MCAST_BROADCAST(r6, 0x10f, 0x85) recvmmsg(r6, &(0x7f00000000c0), 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000bc0)="1c111eb9237a391c1576215868c45277f5513b8d67b2a96c3fc4508c171669324c2f02507691486c966b8f4f90af023c27f9b31de1d9a77122b031d5697c71ea33bb408f88ef2358aa1d818d00ff1ff32290149fe56581934c3983cef09ac7f742f0dd7342b9af38b17f549ae478f6ff199eff97a2b3c7ece2837fbed9af4e9948fcfccc5dd61943d233c91df47e6eda3a1b63042e7cc9238de2ef0303ce297b282ad03b0e98744be2f8f6a926a946013bf16b011729ed8d61c4ed4afdda1ec1ef8b97b4f3177ede120be6e8c772320cc931ae0dde86d5396a381b643a91cae072c935ed9ac51508239e46480d52737fd62a0c3b0afb165324056f55300169157f8fed4a9e002b54aaa20ddba09fd938a6dab4c1e552d08eaefac815bfa9878588b0b77b68b80a00852a1dbdc1b7cd0bc039b5d00807124e947e77a22c952f650474f2430d674a41a96629def2541a031a8f4889da50fd917731144d33b4825fd9eedb6575246f892491886d7076e1f6f2b18f0684f527d5bd2f341d63821ff294ce25834fa42bf68d4c1dc3e2d70e4dcf36d220d7038576085a4f7b7014f7f71eed9f9995f51fb34af92a2196e7156d8edef559d17bfc723da15a9e11d0ce785bdf3c989f54bd36d7916f4c11bc0af7dd6b9f254c92eabbc6a7e342066ec345151c4e94cd102fdd42e018fd78509bf1f3c91100ac8ffc7ab529024e04c672f8355e27447e5921669c50adb722cd7737522a05c13366dcf5492be6f13138b617970cb41a01d28558bc99948746c11390957bcaa48f0081a62d0d4601e4b8292c00a22a44638a55ec1539acbc2ca1249f22b7b4d28bb1e3d5514e0e3ad88c84371438486b03146c120798897c12852b77b0147b43171e90af4d751ea084d9a92e26f4010698cd61be414d7ec4cc65be47eb48eb065df7164ea7be22864053c242080fc65a10fb5c2f9389e8507b90081988338c85ff16886ceccdc81bbb5edf585e6c51371281b4aef1923b3f1607d0e8165a76de4b6640a0ba574f48fc5f5553f3da37fcfc66d6bdee8fc4d8c17548fd6079207d109634bcbf32e41bcca2cbc41bc4051f9821dade72acd229f74bc8aeeaa0603f6d6be7832b8a9bab91408f66c3eadef9d9b144ef003014ae6463447f49451993a1d70bf090d8fece1810a18559ca696469a409a44473565353573700560ddd353f7ade79f2858fddbd95b7a32e100253d2b7068d775e2aaedab1c52a11c9fa2dbed3a31b0dcfad4925990bb428688fe3fb221f16da6a32e05851e56967dbc40a0eab1bf63cb8f0ab5afccbc2bbde8bf96da838c0b4d09c14da5b57dcd15098a1ab", 0x3b5}], 0x1}}], 0x1, 0x0) 1.526006861s ago: executing program 5 (id=2926): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {0x1, 0x8, 0x7f}, 0x30, [0x0, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x101, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xf60d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x171b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x5, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x80000000, 0x0, 0x0, 0x10000, 0xc157, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x78c, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0xa6d3, 0x3, 0x97aa, 0x0, 0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40007, 0x0, 0x0, 0x0, 0x70bb, 0xfffffffe, 0x9], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x6, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_io_uring_setup(0xbde, &(0x7f0000000540)={0x0, 0xec25, 0x400, 0x41, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="380000002c000100000000000000000008000000", @ANYRES32=r7, @ANYBLOB="0b0001800000000000003000140001800d198eaad0b8a7e56d7bd90400000093"], 0x38}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r8 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080), &(0x7f00000000c0)={'L-', 0x3}, 0x16, 0x3) close(r8) r9 = socket$unix(0x1, 0x5, 0x0) bind$unix(r9, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r9, 0x0) ioctl$int_in(r9, 0x5452, &(0x7f0000000000)=0x8) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x10044, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) mq_timedreceive(r1, &(0x7f0000001900)=""/4096, 0x1000, 0x8, &(0x7f0000000000)={0x77359400}) 1.167515378s ago: executing program 6 (id=2927): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000500)=0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}}], {0x14, 0x10}}, 0xffffffffffffff26}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000500)=0x1) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}}], {0x14, 0x10}}, 0xffffffffffffff26}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 1.067024107s ago: executing program 3 (id=2928): r0 = syz_io_uring_setup(0x6fda, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) fallocate(r5, 0x1, 0x100000000, 0x10000) (async) fallocate(r5, 0x1, 0x100000000, 0x10000) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x2, 0xba, {}, 0x0, 0x94cbe5c89abd043b, 0x1}) io_uring_enter(r0, 0x567, 0x2191, 0x2f, 0x0, 0x0) 970.141048ms ago: executing program 0 (id=2929): sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08", @ANYRES32=0x41424344], 0x0) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) (async) r2 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x10200, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') (async) syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x90, 0x40100000, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES64=r7], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0x94) r9 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaad3ae28ac9afea5e1000000c2790f3ba2c6effe57405b12af6d968502907800000000e000005e091b40a42b1cd5f16a"], 0x0) sendmsg(r9, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (async) sendmsg(r9, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r8}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) 933.288688ms ago: executing program 6 (id=2930): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000c40)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x4800052}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffffff, &(0x7f0000001b80)='./file1\x00', 0x400200, 0x85) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000001800)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x40000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/19, 0x13}, {&(0x7f0000000100)=""/65, 0x41}, {&(0x7f00000001c0)=""/33, 0x21}], 0x3, &(0x7f0000000580)=[{0x0}, {&(0x7f0000001980)=""/81, 0x51}, {&(0x7f0000001a00)=""/150, 0x96}, {&(0x7f0000001ac0)=""/150, 0x96}], 0x4, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 826.146272ms ago: executing program 6 (id=2931): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x140, 0x800, 0x3ff, 0x0, 0x0, 0x0, {0x4, 0x4}, {0xfffffffd}, {0x0, 0x4}, {0x0, 0x4, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x69, 0x0, 0x100, 0x2, 0xc}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x802, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc504"]) syz_fuse_handle_req(r1, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x13, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000c008500000017000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) keyctl$reject(0x13, r0, 0x9, 0x3ff, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap$usbmon(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000003, 0x100010, r1, 0x3) ioctl$SG_SET_TIMEOUT(r7, 0x2201, &(0x7f0000000100)=0x6) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 777.977401ms ago: executing program 3 (id=2932): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000600)=@urb_type_iso={0x4, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, [{0x9, 0x35c, 0x5}]}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) unshare(0x20000600) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, 0x0, 0x25, 0x16, @void}, 0x10) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r7 = dup3(r6, r1, 0x80000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x0, 0xe1, {{0x10, 0x4, 0x1, 0x2, 0x40, 0x67, 0x0, 0xd, 0x2f, 0x0, @remote, @loopback, {[@rr={0x7, 0x2b, 0xc2, [@local, @empty, @multicast1, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @local, @local, @broadcast]}]}}}}}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0xb2c, 0x1ff, 0x4}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r10, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0x3f, &(0x7f0000000300)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000340), &(0x7f0000000580), 0x8, 0x63, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r13, 0x1, 0x1d, 0x0, &(0x7f0000000680)) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xb, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000006000000000000000800000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70c000014000000b70300000000002e8500000083000000000000954400000100000018110000", @ANYRES32=r7, @ANYBLOB="000000000000000085000000c800000018590000050000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x4, '\x00', r11, @fallback=0x1e, r9, 0x8, &(0x7f0000000940)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0x10, 0xfffffffe, 0x4}, 0x10, 0x0, r9, 0x0, &(0x7f00000009c0)=[r9, r7, r9, r9, r9, r10, r7, r7, r9, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000ac0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYRESDEC=r13], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0xe, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, r14, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x800}}, &(0x7f0000000140)='syzkaller\x00', 0x6, 0xca, &(0x7f00000002c0)=""/202, 0x41100, 0x8, '\x00', r8, @sk_lookup, r9, 0x8, &(0x7f0000000440)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0xf, 0xffffff80, 0x3ff}, 0x10, r12, r0, 0x0, &(0x7f00000004c0), 0x0, 0x10, 0x4}, 0x94) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e00000011008188040f46ec0800b9cca7480ef4210000fee3bd6efb440013030e001b000d000008ba800082da01", 0x2e}], 0x1}, 0x48d4) 710.060166ms ago: executing program 6 (id=2933): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r3}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000340)={0xd, 0xfffffff8, 0x9}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000240)={r11, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x1000, 0x1], [0x0, 0x2, 0x0, 0xe3c]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000100)={r12, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r13}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f00000001c0)) r14 = dup2(r5, r4) close_range(r14, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 404.752106ms ago: executing program 6 (id=2934): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff9, @ipv4}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x200) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r3 = syz_open_dev$audion(&(0x7f0000000000), 0x1000, 0x80040) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000080)={'macsec0\x00', {0x2, 0x0, @local}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000039000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000400), &(0x7f0000000380)=r4}, 0x20) 395.589727ms ago: executing program 5 (id=2935): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x8, &(0x7f0000002a00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2200c840) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) poll(&(0x7f0000000000)=[{r4, 0x2008}], 0x1, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) process_mrelease(0xffffffffffffffff, 0x0) r5 = dup(r3) write$UHID_INPUT(r5, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) 230.23916ms ago: executing program 8 (id=2936): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x1000) nanosleep(&(0x7f0000000280), 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002240)=""/102395, 0x18ffb) r2 = fspick(0xffffffffffffffff, 0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') getpeername$packet(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000000200), 0x4001) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140073b1", @ANYBLOB="9c34e271a7e45b6c3b83dfd934bb41423aca8691cf37bcdc39ffcf53492d632ba954ba61c1989e899d489ced772bccaf8dc122d23b38d797a680f0408bd57d8e02016d094611f7f646e9e637ace10acac2a12a02d9544cfde3e3b004e423dbcf3607ca28f2a2ed91892f0ae577e6255047651bf146f5e2bc20aaa8d21e29e360315927f93b"], 0x14}}, 0x8000) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x101403, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x81044d03, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffc, @local, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESDEC=r5, @ANYRES16=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x0) 0s ago: executing program 6 (id=2937): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800000a0100"]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x8e142) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r9, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 897.114147][T11794] usb 1-1: device not accepting address 92, error -71 [ 897.130820][T11794] usb usb1-port1: unable to enumerate USB device [ 897.147496][ T5923] hid-steam 0003:28DE:1142.001B: Steam wireless receiver connected [ 897.198685][ T5923] hid-steam 0003:28DE:1142.001C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 897.278885][ T5903] usb 6-1: USB disconnect, device number 83 [ 897.313910][ T5903] hid-steam 0003:28DE:1142.001B: Steam wireless receiver disconnected [ 897.453272][T15318] sctp: [Deprecated]: syz.6.2348 (pid 15318) Use of struct sctp_assoc_value in delayed_ack socket option. [ 897.453272][T15318] Use struct sctp_sack_info instead [ 898.397260][ T5923] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 898.922004][T15348] netlink: 'syz.6.2356': attribute type 1 has an invalid length. [ 898.930130][T15348] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2356'. [ 899.102996][ T5923] usb 6-1: device descriptor read/64, error -71 [ 899.531291][ T5923] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 899.534792][T15351] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2357'. [ 899.712087][ T5923] usb 6-1: device descriptor read/64, error -71 [ 899.785681][T15356] netlink: 'syz.3.2358': attribute type 10 has an invalid length. [ 899.794232][T15356] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2358'. [ 899.869953][T15356] team0: Port device geneve0 added [ 899.884085][ T5923] usb usb6-port1: attempt power cycle [ 900.279102][ T5923] usb 6-1: new full-speed USB device number 86 using dummy_hcd [ 900.297127][ T5982] usb 9-1: string descriptor 0 read error: -71 [ 900.311323][ T5923] usb 6-1: device descriptor read/8, error -71 [ 900.311444][ T5982] hub 9-1:0.0: USB hub found [ 900.343508][ T5982] hub 9-1:0.0: config failed, can't read hub descriptor (err -22) [ 900.366499][ T5982] usbhid 9-1:0.0: can't add hid device: -71 [ 900.372836][ T5982] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 900.431917][ T5982] usb 9-1: USB disconnect, device number 48 [ 900.631731][ T5923] usb 6-1: new full-speed USB device number 87 using dummy_hcd [ 900.664062][ T5923] usb 6-1: device descriptor read/8, error -71 [ 900.796102][ T5923] usb usb6-port1: unable to enumerate USB device [ 900.897204][T15375] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2363'. [ 900.929114][T15375] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2363'. [ 901.098807][T15380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2366'. [ 901.108629][T15380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 901.116844][T15380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.144293][T15380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 901.153053][T15380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 902.010498][ T5903] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 902.193660][ T5903] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 902.206440][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.220061][ T5903] usb 6-1: config 0 descriptor?? [ 902.240555][ T5903] cp210x 6-1:0.0: cp210x converter detected [ 902.320271][ T5982] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 902.498046][ T5982] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 902.514998][ T5982] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 902.529591][ T5982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.547027][ T5982] usb 1-1: config 0 descriptor?? [ 902.558048][ T5982] rndis_host 1-1:0.0: probe with driver rndis_host failed with error -22 [ 902.670615][ T5903] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 902.779283][ T5982] usb 1-1: USB disconnect, device number 93 [ 902.895093][ T5903] cp210x 6-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 902.907635][ T5903] cp210x 6-1:0.0: GPIO initialisation failed: -121 [ 902.918290][ T5903] usb 6-1: cp210x converter now attached to ttyUSB0 [ 905.323607][ T5903] usb 6-1: USB disconnect, device number 88 [ 905.374348][ T5903] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 905.420853][ T5903] cp210x 6-1:0.0: device disconnected [ 906.047009][T15454] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 906.956147][T15465] netlink: 'syz.0.2401': attribute type 4 has an invalid length. [ 907.270126][ T30] audit: type=1326 audit(1754863726.899:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15479 comm="syz.0.2406" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f128e78ebe9 code=0x0 [ 909.536736][ T5903] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 909.544646][ T5980] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 909.953074][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 909.963990][ T5980] usb 1-1: Using ep0 maxpacket: 8 [ 909.974287][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.001197][ T5980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 910.026048][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 910.045095][ T5980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8704, setting to 1024 [ 910.060498][ T5903] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 910.079613][ T5980] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 910.096237][ T5903] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 910.108382][ T5980] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 910.118009][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.128676][ T5980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.140727][ T5903] usb 6-1: config 0 descriptor?? [ 910.149518][ T5980] usb 1-1: config 0 descriptor?? [ 910.602445][ T5903] microsoft 0003:045E:07DA.001D: unknown main item tag 0x6 [ 910.619710][ T5903] microsoft 0003:045E:07DA.001D: unbalanced collection at end of report description [ 910.640644][ T5980] holtek 0003:1241:5015.001E: hidraw0: USB HID vff.fa Device [HID 1241:5015] on usb-dummy_hcd.0-1/input0 [ 910.653347][ T5903] microsoft 0003:045E:07DA.001D: parse failed [ 910.655532][T15531] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 910.659556][ T5980] holtek 0003:1241:5015.001E: no inputs found [ 910.662110][ T5903] microsoft 0003:045E:07DA.001D: probe with driver microsoft failed with error -22 [ 910.846790][ T5980] usb 6-1: USB disconnect, device number 89 [ 910.870535][ T1208] usb 1-1: USB disconnect, device number 94 [ 911.060777][ T30] audit: type=1326 audit(1754863730.454:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15542 comm="syz.3.2430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58cf18ebe9 code=0x0 [ 911.087131][ T5903] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 911.300186][ T5903] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.336424][ T5903] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.382783][ T5903] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 911.421355][ T5903] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 911.555871][ T5903] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.802102][ T5903] usb 9-1: config 0 descriptor?? [ 913.345722][T15554] 9pnet_fd: Insufficient options for proto=fd [ 913.385450][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 913.923769][ T5903] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 914.234268][T15570] wg1 speed is unknown, defaulting to 1000 [ 914.422451][ T1208] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 914.817423][ T1208] usb 6-1: Using ep0 maxpacket: 8 [ 915.288575][ T1208] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 915.369092][ T1208] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.442851][ T1208] usb 6-1: Product: syz [ 915.481525][ T1208] usb 6-1: Manufacturer: syz [ 915.553931][ T1208] usb 6-1: SerialNumber: syz [ 915.628993][ T1208] usb 6-1: config 0 descriptor?? [ 915.665321][ T1208] gspca_main: se401-2.14.0 probing 047d:5003 [ 916.120340][T15585] netlink: 'syz.0.2438': attribute type 12 has an invalid length. [ 916.128474][T15585] netlink: 'syz.0.2438': attribute type 29 has an invalid length. [ 916.136392][T15585] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2438'. [ 916.145618][T15585] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2438'. [ 916.297539][ T977] usb 9-1: USB disconnect, device number 49 [ 916.379139][T15593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2439'. [ 916.607683][ T1208] usb 6-1: reset high-speed USB device number 90 using dummy_hcd [ 917.110509][ T1208] gspca_se401: read req failed req 0x06 error -71 [ 917.448051][ T1208] se401 6-1:0.0: probe with driver se401 failed with error -71 [ 917.474380][ T1208] usb 6-1: USB disconnect, device number 90 [ 917.767182][T15622] netlink: 'syz.3.2447': attribute type 4 has an invalid length. [ 917.807753][T15622] netlink: 'syz.3.2447': attribute type 25 has an invalid length. [ 917.843416][ T5923] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 917.860875][T15622] IPv6: NLM_F_CREATE should be specified when creating new route [ 918.013115][T15632] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2449'. [ 918.046397][ T5923] usb 9-1: Using ep0 maxpacket: 16 [ 918.060797][ T5923] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.103790][ T5923] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.117640][ T5923] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 918.139085][ T5923] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 918.171539][ T5923] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.196686][ T5923] usb 9-1: config 0 descriptor?? [ 918.548997][T11794] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 918.735251][T11794] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 918.782298][T11794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.819691][T11794] usb 6-1: Product: syz [ 918.830552][T11794] usb 6-1: Manufacturer: syz [ 918.845729][ T5923] microsoft 0003:045E:07DA.0020: ignoring exceeding usage max [ 918.863058][T11794] usb 6-1: SerialNumber: syz [ 918.876742][ T5923] microsoft 0003:045E:07DA.0020: unknown main item tag 0x6 [ 918.886802][T11794] usb 6-1: config 0 descriptor?? [ 918.904672][ T5923] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 918.935997][ T5923] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 918.963474][ T5923] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 919.032771][ T5923] microsoft 0003:045E:07DA.0020: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 919.050351][ T5923] microsoft 0003:045E:07DA.0020: no inputs found [ 919.067108][ T5923] microsoft 0003:045E:07DA.0020: could not initialize ff, continuing anyway [ 919.102569][ T5923] usb 9-1: USB disconnect, device number 50 [ 919.153696][T11794] usb 6-1: USB disconnect, device number 91 [ 919.297083][T15647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2455'. [ 919.355588][T15638] ubi31: attaching mtd0 [ 919.366254][T15638] ubi31: scanning is finished [ 919.371026][T15638] ubi31: empty MTD device detected [ 919.656149][T15638] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 919.688588][T15638] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 919.719041][T15638] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 919.743779][T15638] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 919.785683][T15638] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 919.834805][T15638] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 919.880734][T15638] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 266906240 [ 919.895786][T15638] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 919.916702][T15659] ubi31: background thread "ubi_bgt31d" started, PID 15659 [ 920.923993][T15683] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2462'. [ 921.369462][T15690] netlink: 780 bytes leftover after parsing attributes in process `syz.8.2464'. [ 922.341040][T15680] xt_hashlimit: max too large, truncated to 1048576 [ 922.918450][T15698] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2466'. [ 923.315421][T15711] XFS (nullb0): Invalid superblock magic number [ 923.481949][T15719] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2470'. [ 924.625555][T15746] wg1 speed is unknown, defaulting to 1000 [ 924.692206][T15749] overlayfs: failed to clone upperpath [ 924.860598][T15757] 9pnet_fd: Insufficient options for proto=fd [ 925.084752][T15762] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2481'. [ 925.118298][T15765] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 925.818175][T15775] tipc: Enabling of bearer rejected, failed to enable media [ 925.884681][T15775] tipc: Enabling of bearer rejected, failed to enable media [ 927.674274][T15796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2493'. [ 927.942039][T15805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 927.953006][T15805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 927.970773][T15805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 927.979482][T15805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 927.987183][T15805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 928.195479][T15803] wg1 speed is unknown, defaulting to 1000 [ 928.237858][T15806] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2490'. [ 929.170356][T15803] chnl_net:caif_netlink_parms(): no params data found [ 929.666294][T15803] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.709751][T15803] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.731324][T15803] bridge_slave_0: entered allmulticast mode [ 929.761996][T15803] bridge_slave_0: entered promiscuous mode [ 929.796426][T15803] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.823663][T15803] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.850158][T15803] bridge_slave_1: entered allmulticast mode [ 929.870854][T15803] bridge_slave_1: entered promiscuous mode [ 930.054956][T15803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.179537][T15847] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2503'. [ 930.231407][ T5840] Bluetooth: hci4: command tx timeout [ 930.270362][T15803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.811161][ T5980] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 930.911716][T15803] team0: Port device team_slave_0 added [ 930.945395][T15803] team0: Port device team_slave_1 added [ 930.992563][ T5980] usb 9-1: Using ep0 maxpacket: 16 [ 931.008528][ T5980] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.064579][ T5980] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.586583][ T30] audit: type=1326 audit(1754863749.405:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15856 comm="syz.5.2506" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba2598ebe9 code=0x0 [ 931.612254][ T5980] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 931.627312][ T5980] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 931.722185][T15867] overlay: Unknown parameter '/' [ 932.335195][ T5980] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.411699][T15803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.420789][T15803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.452020][ T5840] Bluetooth: hci4: command tx timeout [ 932.467555][ T5980] usb 9-1: config 0 descriptor?? [ 932.481155][T15803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.530200][T15803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.546896][T15803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.638971][ T5923] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 932.710603][T15803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.723314][ T5980] usbhid 9-1:0.0: can't add hid device: -71 [ 932.734076][ T5980] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 932.787807][ T5980] usb 9-1: USB disconnect, device number 51 [ 932.811854][ T5923] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 932.834483][ T5923] usb 1-1: config 0 has no interface number 0 [ 932.897209][ T5923] usb 1-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 932.972812][ T5923] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 933.002470][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 933.043228][ T5923] usb 1-1: Product: syz [ 933.067249][ T5923] usb 1-1: SerialNumber: syz [ 933.155518][ T5923] usb 1-1: config 0 descriptor?? [ 933.176071][ T5923] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 933.246909][T15803] hsr_slave_0: entered promiscuous mode [ 933.302881][T15803] hsr_slave_1: entered promiscuous mode [ 933.335535][T15803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 933.343175][T15803] Cannot create hsr debugfs directory [ 933.375917][ T30] audit: type=1800 audit(1754863751.323:428): pid=15888 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.2510" name="nullb0" dev="tmpfs" ino=3108 res=0 errno=0 [ 933.513901][T15891] dlm: no local IP address has been set [ 933.526111][ T1208] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 933.552791][T15891] dlm: cannot start dlm midcomms -107 [ 933.570424][T15891] syz_tun: refused to change device tx_queue_len [ 933.725312][ T5980] usb 1-1: USB disconnect, device number 95 [ 933.849947][T15893] tipc: Enabled bearer , priority 10 [ 934.477392][ T1208] usb 9-1: Using ep0 maxpacket: 16 [ 934.568896][ T1208] usb 9-1: config 1 has an invalid interface number: 105 but max is 0 [ 934.588411][ T1208] usb 9-1: config 1 has no interface number 0 [ 934.616066][ T1208] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 934.634063][ T1208] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 934.655403][ T1208] usb 9-1: config 1 interface 105 has no altsetting 0 [ 934.659437][ T5840] Bluetooth: hci4: command tx timeout [ 934.679689][ T1208] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 934.702502][ T1208] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.733476][ T1208] usb 9-1: Product: syz [ 934.741179][ T1208] usb 9-1: Manufacturer: syz [ 934.749999][ T1208] usb 9-1: SerialNumber: syz [ 934.779275][T15885] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 934.786786][T15885] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 934.820422][T15803] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 934.837876][T15803] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.049380][T15803] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.071920][T15803] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.214553][T15803] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.233363][T15885] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 935.251147][T15885] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 935.259765][T15803] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.416349][T15803] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.446549][T15803] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.482474][ T5980] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 935.499520][ T1208] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 935.512673][ T1208] aqc111 9-1:1.105: probe with driver aqc111 failed with error -32 [ 935.524641][ T1208] usb 9-1: USB disconnect, device number 52 [ 935.656551][ T5980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.678255][ T5903] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 935.696143][ T5980] usb 6-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 935.716271][ T5980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.747280][ T5980] usb 6-1: config 0 descriptor?? [ 935.771842][T15803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 935.788576][T15803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 935.803814][T15803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 935.818209][T15803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 935.871771][ T5903] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.887039][ T5903] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 935.908518][ T5903] usb 1-1: config 0 interface 0 has no altsetting 0 [ 935.916089][ T5903] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 935.931910][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.013226][ T5903] usb 1-1: config 0 descriptor?? [ 936.506571][T15803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.932613][ T5980] zeroplus 0003:0C12:0005.0021: report_id 0 is invalid [ 936.940034][ T5840] Bluetooth: hci4: command tx timeout [ 936.962805][T15803] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.997290][ T5903] kye 0003:0458:501A.0022: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 937.019290][ T5980] zeroplus 0003:0C12:0005.0021: item 0 0 1 8 parsing failed [ 937.021126][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.027717][ T5980] zeroplus 0003:0C12:0005.0021: parse failed [ 937.034158][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 937.043874][ T5980] zeroplus 0003:0C12:0005.0021: probe with driver zeroplus failed with error -22 [ 937.072977][ T5980] usb 6-1: USB disconnect, device number 92 [ 937.082345][ T5903] kye 0003:0458:501A.0022: hidraw0: USB HID v0.01 Device [HID 0458:501a] on usb-dummy_hcd.0-1/input0 [ 937.094674][ T5903] kye 0003:0458:501A.0022: tablet-enabling feature report not found [ 937.116953][ T5903] kye 0003:0458:501A.0022: tablet enabling failed [ 937.184991][ T7299] usb 1-1: USB disconnect, device number 96 [ 937.207819][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.215291][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 938.389942][T15953] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2525'. [ 938.700618][T15959] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2527'. [ 938.955682][T15803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.114586][T15803] veth0_vlan: entered promiscuous mode [ 939.240198][T15803] veth1_vlan: entered promiscuous mode [ 939.364135][T15974] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2529'. [ 940.040938][T15978] netlink: 'syz.5.2532': attribute type 4 has an invalid length. [ 940.074773][T15976] overlayfs: conflicting lowerdir path [ 940.084420][T15803] veth0_macvtap: entered promiscuous mode [ 940.116375][T15978] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2532'. [ 940.153217][T15803] veth1_macvtap: entered promiscuous mode [ 940.193341][T15978] : renamed from bond0 (while UP) [ 940.291306][T15803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 940.370193][T15803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 940.416584][T15803] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.439823][T15803] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.464744][T15803] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.478645][T15803] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.253175][ T5923] IPVS: starting estimator thread 0... [ 941.319154][ T6052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 941.353754][ T6052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.383582][T16001] IPVS: using max 24 ests per chain, 57600 per kthread [ 941.453077][ T977] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 941.787099][T14310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 941.986041][ T977] usb 1-1: device descriptor read/64, error -71 [ 941.992253][T14310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.306060][ T977] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 942.443412][T15805] Bluetooth: hci1: command 0xfc11 tx timeout [ 942.451006][ T5840] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 942.752930][ T977] usb 1-1: device descriptor read/64, error -71 [ 942.875368][ T977] usb usb1-port1: attempt power cycle [ 944.120846][ T977] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 944.221355][ T977] usb 1-1: device descriptor read/8, error -71 [ 944.447078][T16032] SET target dimension over the limit! [ 944.813726][T16035] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2548'. [ 945.211823][T16003] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 945.628069][T16003] usb 4-1: Using ep0 maxpacket: 32 [ 945.724339][T16052] wg1 speed is unknown, defaulting to 1000 [ 945.731688][T16052] wg1 speed is unknown, defaulting to 1000 [ 945.762613][T16052] wg1 speed is unknown, defaulting to 1000 [ 945.793345][T11794] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 945.813619][T16052] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 945.874269][T16003] usb 4-1: config 0 has an invalid interface descriptor of length 8, skipping [ 945.976576][T16052] wg1 speed is unknown, defaulting to 1000 [ 945.991898][T11794] usb 9-1: Using ep0 maxpacket: 16 [ 945.992972][T16052] wg1 speed is unknown, defaulting to 1000 [ 946.012871][T16052] wg1 speed is unknown, defaulting to 1000 [ 946.030171][T16003] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 946.040093][T11794] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 946.041803][T16052] wg1 speed is unknown, defaulting to 1000 [ 946.069832][T16052] wg1 speed is unknown, defaulting to 1000 [ 946.093723][T16052] wg1 speed is unknown, defaulting to 1000 [ 946.212096][T16003] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 946.426425][T11794] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 946.436475][T16003] usb 4-1: New USB device found, idVendor=08d1, idProduct=0401, bcdDevice=f2.70 [ 946.471512][T16003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.471568][T11794] usb 9-1: Product: syz [ 946.497592][T11794] usb 9-1: Manufacturer: syz [ 946.504276][T16003] usb 4-1: Product: syz [ 946.507359][T11794] usb 9-1: SerialNumber: syz [ 946.508491][T16003] usb 4-1: Manufacturer: syz [ 946.541226][T11794] usb 9-1: config 0 descriptor?? [ 946.562613][T16003] usb 4-1: SerialNumber: syz [ 946.584876][T16003] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 946.606087][T16003] usb 4-1: no configuration chosen from 1 choice [ 947.126071][T16049] _Z`Ԁ@: entered promiscuous mode [ 947.142870][T11794] usb 9-1: USB disconnect, device number 53 [ 947.408093][T16063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2556'. [ 947.674940][T16073] openvswitch: netlink: Actions may not be safe on all matching packets [ 947.694132][T16073] overlayfs: failed to clone upperpath [ 947.734535][T11794] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 948.140570][T11794] usb 6-1: Using ep0 maxpacket: 32 [ 948.156484][T11794] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.262904][T16080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2561'. [ 948.889630][T11794] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.900661][T11794] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 948.910625][T11794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.953882][ T977] usb 4-1: USB disconnect, device number 40 [ 949.221180][T16081] ceph: No mds server is up or the cluster is laggy [ 949.357292][T11794] usb 6-1: config 0 descriptor?? [ 949.365614][ T43] libceph: connect (1)[c::]:6789 error -101 [ 949.378931][T16087] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2564'. [ 949.380638][T11794] hub 6-1:0.0: USB hub found [ 949.394049][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 949.627420][T11794] hub 6-1:0.0: 1 port detected [ 950.336540][ T977] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 950.390200][T16098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.404241][T16098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.416885][T16098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.427061][T16098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.530451][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 950.557141][ T977] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 950.593865][ T977] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 950.616043][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.660040][ T977] usb 4-1: Product: syz [ 950.671129][ T977] usb 4-1: Manufacturer: syz [ 950.682415][ T977] usb 4-1: SerialNumber: syz [ 950.698233][ T977] usb 4-1: config 0 descriptor?? [ 950.733262][T11794] usb 6-1: USB disconnect, device number 93 [ 950.781138][T16101] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2565'. [ 951.134395][ T977] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 951.241872][ T977] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 951.401059][T16003] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 951.422518][T16109] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2570'. [ 951.582534][T16003] usb 1-1: unable to get BOS descriptor or descriptor too short [ 951.612798][T16003] usb 1-1: not running at top speed; connect to a high speed hub [ 951.629267][T16003] usb 1-1: config 106 has an invalid interface number: 8 but max is 0 [ 951.641676][T16003] usb 1-1: config 106 has no interface number 0 [ 951.652388][T16003] usb 1-1: config 106 interface 8 has no altsetting 0 [ 951.664995][T16003] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 951.701196][T16003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.710053][T16003] usb 1-1: Product: syz [ 951.728484][T16003] usb 1-1: Manufacturer: syz [ 951.737512][T16003] usb 1-1: SerialNumber: syz [ 951.748392][T16116] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2572'. [ 951.794301][T16118] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 951.805127][T16118] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2573'. [ 951.987715][T16003] kalmia 1-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 952.025221][T16003] kalmia 1-1:106.8: probe with driver kalmia failed with error -22 [ 952.075743][T16003] usb 1-1: USB disconnect, device number 101 [ 952.101402][T16126] netlink: 'syz.6.2576': attribute type 2 has an invalid length. [ 952.117159][T16126] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2576'. [ 952.141392][T16126] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2576'. [ 952.301763][T16132] Bluetooth: MGMT ver 1.23 [ 952.488943][T16138] netlink: zone id is out of range [ 952.494464][T16138] netlink: zone id is out of range [ 952.499666][T16138] netlink: zone id is out of range [ 952.505203][T16138] netlink: zone id is out of range [ 952.510308][T16138] netlink: zone id is out of range [ 952.515692][T16138] netlink: zone id is out of range [ 952.520922][T16138] netlink: zone id is out of range [ 952.526476][T16138] netlink: zone id is out of range [ 952.531601][T16138] netlink: zone id is out of range [ 952.544873][ T977] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 952.591408][T16139] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2577'. [ 953.358504][T11794] usb 4-1: USB disconnect, device number 41 [ 953.368795][ T977] usb 6-1: Using ep0 maxpacket: 16 [ 953.386640][ T977] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 953.411192][ T977] usb 6-1: config 1 has no interface number 0 [ 953.424473][ T977] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 953.448714][ T977] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 953.467551][ T977] usb 6-1: config 1 interface 105 has no altsetting 0 [ 953.479305][ T977] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 953.490159][ T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.498903][ T977] usb 6-1: Product: syz [ 953.503269][ T977] usb 6-1: Manufacturer: syz [ 953.508239][ T977] usb 6-1: SerialNumber: syz [ 953.515849][T16131] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 953.524613][T16131] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 953.646377][ T5903] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 953.784763][ T5903] usb 1-1: device descriptor read/64, error -71 [ 953.945563][T11794] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 953.983534][T16131] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 953.994870][T16131] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 954.052094][ T5903] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 954.105800][T11794] usb 4-1: device descriptor read/64, error -71 [ 954.201642][ T5903] usb 1-1: device descriptor read/64, error -71 [ 954.319664][ T5903] usb usb1-port1: attempt power cycle [ 954.373342][T11794] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 954.512084][T11794] usb 4-1: device descriptor read/64, error -71 [ 954.630067][T11794] usb usb4-port1: attempt power cycle [ 954.687410][T16160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2585'. [ 954.696825][T16160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2585'. [ 954.706528][ T5903] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 954.754130][ T5903] usb 1-1: device descriptor read/8, error -71 [ 954.821203][T16164] overlayfs: failed to clone upperpath [ 955.027905][T11794] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 955.030326][ T5903] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 955.079752][T11794] usb 4-1: device descriptor read/8, error -71 [ 955.109018][ T5903] usb 1-1: device descriptor read/8, error -71 [ 955.239896][ T5903] usb usb1-port1: unable to enumerate USB device [ 955.539255][ T977] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 955.582360][T11794] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 955.624531][T11794] usb 4-1: device descriptor read/8, error -71 [ 955.653981][ T977] aqc111 6-1:1.105 eth17: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 955.699754][ T977] usb 6-1: USB disconnect, device number 94 [ 955.708206][ T977] aqc111 6-1:1.105 eth17: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 955.845764][T11794] usb usb4-port1: unable to enumerate USB device [ 955.923805][ T977] aqc111 6-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 955.945836][ T977] aqc111 6-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 955.957275][ T977] aqc111 6-1:1.105 eth17 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 956.001211][T15805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 956.013170][T15805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 956.041991][T15805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 956.058535][ T1042] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 956.070353][ T1042] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.085870][T15805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 956.096216][T15805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 956.238823][ T1042] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 956.251090][ T1042] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.282040][T16170] wg1 speed is unknown, defaulting to 1000 [ 956.356893][ T1042] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 956.369335][ T1042] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.396610][T16170] wg1 speed is unknown, defaulting to 1000 [ 956.517776][ T1042] netdevsim netdevsim6  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 956.531046][ T1042] netdevsim netdevsim6  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.948700][ T1042] bridge0: port 3(team0) entered disabled state [ 957.038983][ T1042] bridge_slave_0: left allmulticast mode [ 957.052094][ T1042] bridge_slave_0: left promiscuous mode [ 957.067567][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.506136][ T1042] bond0 (unregistering): (slave ip6gretap0): Releasing active interface [ 957.560192][T16193] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2592'. [ 957.728281][T16197] tmpfs: Cannot change global quota limit on remount [ 958.125893][ T1042] dvmrp0 (unregistering): left allmulticast mode [ 958.189493][ T5903] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 958.264340][T15805] Bluetooth: hci1: command tx timeout [ 958.360499][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 958.370151][ T5903] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 958.380678][ T5903] usb 4-1: config 1 has no interface number 1 [ 958.388091][ T5903] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 958.402618][ T5903] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 958.420509][ T5903] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 958.430033][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.439391][ T5903] usb 4-1: Product: syz [ 958.443579][ T5903] usb 4-1: Manufacturer: syz [ 958.448339][ T5903] usb 4-1: SerialNumber: syz [ 958.688377][T16203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.713837][T16203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.752054][ T5903] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 958.791328][ T1042]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 958.794230][ T5903] usb 4-1: USB disconnect, device number 46 [ 958.806324][ T1042] bond_slave_0: left allmulticast mode [ 958.818354][ T1042]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 958.828228][ T1042] bond_slave_1: left allmulticast mode [ 958.840291][ T1042]  (unregistering): Released all slaves [ 959.047989][ T1042] bond0 (unregistering): Released all slaves [ 959.095627][T16193] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 959.120593][T16193] macsec2: entered allmulticast mode [ 959.141952][T16193] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 959.235403][T16170] chnl_net:caif_netlink_parms(): no params data found [ 959.347103][T16218] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 959.876811][T16170] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.889350][T16003] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 959.889545][T16170] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.906299][T16170] bridge_slave_0: entered allmulticast mode [ 959.932385][T16170] bridge_slave_0: entered promiscuous mode [ 960.082614][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 960.090154][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 960.116311][T16003] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 960.127428][T16003] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 960.131176][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 960.139780][T16003] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 960.159382][T16003] usb 1-1: config 1 has no interface number 0 [ 960.165674][T16003] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 960.169691][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.178285][T16003] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 960.227539][T16003] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 960.242826][T16003] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.262660][T16003] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 960.313793][ T1042] veth1_macvtap: left promiscuous mode [ 960.347695][ T1042] veth0_macvtap: left promiscuous mode [ 960.359648][T11794] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 960.380979][ T1042] veth1_vlan: left promiscuous mode [ 960.391587][ T1042] veth0_vlan: left promiscuous mode [ 960.487825][T15805] Bluetooth: hci1: command tx timeout [ 960.538676][T11794] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 960.571265][T11794] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 960.605616][T11794] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 960.615349][T11794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.642647][T16236] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 960.710707][T11794] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 960.870258][T16003] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 960.903726][ T43] usb 6-1: USB disconnect, device number 95 [ 961.119003][T16003] usb 1-1: USB disconnect, device number 106 [ 961.126321][T16003] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 961.386017][ T43] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 961.485697][ T5976] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 961.576651][ T43] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 961.605097][ T43] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 961.626929][ T43] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 961.638489][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.653088][ T5976] usb 4-1: Using ep0 maxpacket: 16 [ 961.671381][T16236] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 961.680515][ T5976] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 961.690164][ T5976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.698553][ T5976] usb 4-1: Product: syz [ 961.703013][ T5976] usb 4-1: Manufacturer: syz [ 961.709285][ T43] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 961.711172][ T5976] usb 4-1: SerialNumber: syz [ 961.726390][ T5976] usb 4-1: config 0 descriptor?? [ 961.735034][ T5976] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 961.866924][ T1042] team_slave_1 (unregistering): left promiscuous mode [ 961.874294][ T1042] team_slave_1 (unregistering): left allmulticast mode [ 961.891901][ T1042] team0 (unregistering): Port device team_slave_1 removed [ 961.993521][ T1042] team_slave_0 (unregistering): left promiscuous mode [ 962.001730][ T1042] team_slave_0 (unregistering): left allmulticast mode [ 962.011384][ T1042] team0 (unregistering): Port device team_slave_0 removed [ 962.777960][T15805] Bluetooth: hci1: command tx timeout [ 963.293232][ T1042] dummy0 (unregistering): left allmulticast mode [ 963.358918][ T5976] usb 6-1: USB disconnect, device number 96 [ 963.653317][T16262] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2612'. [ 964.608338][T16170] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.624385][T16170] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.632661][T16170] bridge_slave_1: entered allmulticast mode [ 964.647560][T16170] bridge_slave_1: entered promiscuous mode [ 964.792377][ T43] usb 4-1: USB disconnect, device number 47 [ 965.026394][T15805] Bluetooth: hci1: command tx timeout [ 965.140724][T16170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 965.273807][T16170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 965.300552][ T1042] IPVS: stop unused estimator thread 0... [ 966.036092][ T5976] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 966.230439][T16170] team0: Port device team_slave_0 added [ 966.269301][T16170] team0: Port device team_slave_1 added [ 966.423501][ T5976] usb 1-1: Using ep0 maxpacket: 16 [ 966.432300][ T5976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.443988][ T5976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 966.456635][ T5976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 966.466719][ T5976] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 966.476544][ T5976] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 966.491838][ T5976] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 966.503696][ T5976] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 966.512226][ T5976] usb 1-1: Manufacturer: syz [ 966.583716][ T5976] usb 1-1: config 0 descriptor?? [ 967.431381][ T5976] rc_core: IR keymap rc-hauppauge not found [ 967.440629][T16170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.455846][ T5976] Registered IR keymap rc-empty [ 967.463968][T16170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.512682][ T5976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 967.533881][ T5976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 967.559031][T16170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.571676][ T5976] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 967.587888][T16003] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 967.613845][ T5976] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input37 [ 967.635612][T16170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.643231][T16170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.648114][ T5976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 967.696665][T11794] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 967.715405][T16170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.718512][ T5976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 967.758027][T16003] usb 4-1: Using ep0 maxpacket: 8 [ 967.805297][T16003] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 967.877298][T11794] usb 9-1: Using ep0 maxpacket: 32 [ 967.878295][T16003] usb 4-1: config 0 has no interface number 0 [ 967.892328][T11794] usb 9-1: config 0 has an invalid interface number: 235 but max is 0 [ 967.892535][T16003] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 967.913999][ T5976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 967.940954][T11794] usb 9-1: config 0 has no interface number 0 [ 967.941175][ T5976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 967.956997][T16315] tipc: Started in network mode [ 967.963162][T16315] tipc: Node identity ac14140f, cluster identity 4711 [ 967.965643][T11794] usb 9-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 967.970365][T16003] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 967.996292][T16315] tipc: New replicast peer: 255.255.255.255 [ 968.005388][T16315] tipc: Enabled bearer , priority 5 [ 968.225526][ T5976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 968.336122][T11794] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.342975][T16003] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.347626][T11794] usb 9-1: Product: syz [ 968.352484][ T5976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 968.358302][T11794] usb 9-1: Manufacturer: syz [ 968.371386][T11794] usb 9-1: SerialNumber: syz [ 968.380405][ T5976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 968.394010][T16003] usb 4-1: config 0 descriptor?? [ 968.394010][T11794] usb 9-1: config 0 descriptor?? [ 968.408862][T16003] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 968.415884][ T5976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 968.454876][ T5976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 968.484438][ T5976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 968.513620][ T5976] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 968.524253][ T5976] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 968.555028][ T5976] usb 1-1: USB disconnect, device number 107 [ 968.598619][T16170] hsr_slave_0: entered promiscuous mode [ 968.639025][T11794] kaweth 9-1:0.235: Firmware present in device. [ 968.640233][T16003] usb 4-1: USB disconnect, device number 48 [ 968.649937][T16170] hsr_slave_1: entered promiscuous mode [ 968.802195][T16170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 968.880146][T16170] Cannot create hsr debugfs directory [ 969.072267][ T5976] tipc: Node number set to 2886997007 [ 969.394594][T11794] kaweth 9-1:0.235: Error reading configuration (-71), no net device created [ 969.484307][T11794] kaweth 9-1:0.235: probe with driver kaweth failed with error -5 [ 969.552442][T11794] usb 9-1: USB disconnect, device number 54 [ 969.688051][T15805] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 970.372974][T16339] 9pnet: Could not find request transport: d [ 970.644236][T16170] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 970.694584][T16170] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 970.768600][T16170] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 970.984536][T16170] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 971.113482][T15805] Bluetooth: hci0: unexpected event for opcode 0x2042 [ 972.246427][T16170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.357353][T16170] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.415809][T14693] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.423019][T14693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.481357][T14693] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.488551][T14693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.844195][T16375] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2641'. [ 973.232940][T16392] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2643'. [ 973.320571][T16170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 973.360944][T16003] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 973.541183][T16003] usb 9-1: Using ep0 maxpacket: 16 [ 973.558835][T16003] usb 9-1: config 4 has an invalid interface number: 9 but max is 0 [ 973.582489][T16003] usb 9-1: config 4 has no interface number 0 [ 973.604130][T16003] usb 9-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 973.618258][T16003] usb 9-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 973.691084][T16003] usb 9-1: config 4 interface 9 has no altsetting 0 [ 973.706435][T16003] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 973.722283][T16003] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.745955][T16003] usb 9-1: Product: syz [ 973.750199][T16003] usb 9-1: Manufacturer: syz [ 973.766926][T16003] usb 9-1: SerialNumber: syz [ 973.779813][T16368] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 973.801831][T16368] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 973.852040][T16003] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 974.011621][ T1208] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 974.086853][T16003] usb 9-1: USB disconnect, device number 55 [ 974.094405][T14693] usb 9-1: Failed to submit usb control message: -71 [ 974.108052][T14693] usb 9-1: unable to send the bmi data to the device: -71 [ 974.125922][T14693] usb 9-1: unable to get target info from device [ 974.147022][T14693] usb 9-1: could not get target info (-71) [ 974.163759][T14693] usb 9-1: could not probe fw (-71) [ 974.214393][ T1208] usb 4-1: Using ep0 maxpacket: 16 [ 974.227978][ T1208] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 974.242975][ T1208] usb 4-1: config 0 has no interface number 0 [ 974.249443][ T1208] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 974.262563][ T1208] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 974.291731][ T1208] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 974.303645][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 974.312094][ T1208] usb 4-1: Product: syz [ 974.316527][ T1208] usb 4-1: SerialNumber: syz [ 974.325337][ T1208] usb 4-1: config 0 descriptor?? [ 974.352463][ T1208] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 974.362846][ T1208] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input38 [ 974.402804][T16170] veth0_vlan: entered promiscuous mode [ 974.434333][T16170] veth1_vlan: entered promiscuous mode [ 974.515021][T16170] veth0_macvtap: entered promiscuous mode [ 974.554759][T16170] veth1_macvtap: entered promiscuous mode [ 974.580252][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 974.636736][T16170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 974.672052][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 974.673249][T16170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 974.681670][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 974.695551][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 974.698890][T16170] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.704076][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 974.713665][T16170] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.719406][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 974.730730][T16170] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.735540][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 974.744511][T16170] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.751996][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 974.768146][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 974.776810][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 974.784867][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 974.799500][ T1208] usb 4-1: USB disconnect, device number 49 [ 974.805639][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 974.846498][ T1208] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 975.038542][ T977] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 975.100174][ T6053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.116705][ T6053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.202356][T14693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.210566][ T977] usb 6-1: Using ep0 maxpacket: 8 [ 975.225261][ T977] usb 6-1: unable to get BOS descriptor or descriptor too short [ 975.227259][T14693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.238824][ T977] usb 6-1: config 8 has an invalid interface number: 255 but max is 0 [ 975.260987][ T977] usb 6-1: config 8 has no interface number 0 [ 975.280224][ T977] usb 6-1: config 8 interface 255 has no altsetting 0 [ 975.298315][ T977] usb 6-1: string descriptor 0 read error: -22 [ 975.306974][ T977] usb 6-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 975.347927][ T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.458355][T15805] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 975.467340][T15805] Bluetooth: hci0: Injecting HCI hardware error event [ 975.477946][ T5840] Bluetooth: hci0: hardware error 0x00 [ 975.492274][T16450] ip6gre1: entered allmulticast mode [ 975.651818][T14693] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 975.660043][T16429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.088093][T16429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.532736][ T30] audit: type=1400 audit(1754863791.695:429): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=16468 comm="syz.0.2659" name="495" dev="tmpfs" ino=2702 [ 976.569723][ T30] audit: type=1400 audit(1754863791.695:430): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=rw pid=16468 comm="syz.0.2659" name="fuse" dev="devtmpfs" ino=99 [ 976.595843][ T30] audit: type=1400 audit(1754863791.695:431): lsm=SMACK fn=smack_key_permission action=denied subject="y" object="_" requested=w pid=16468 comm="syz.0.2659" key_serial=500980637 key_desc="_uid_ses.0" [ 977.390792][ T977] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.5-1, 00:00:00:00:00:00. [ 977.717854][ T1208] usb 6-1: USB disconnect, device number 97 [ 978.384410][ T5840] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 978.705496][T11794] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 978.854466][ T977] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 978.870570][T16502] No control pipe specified [ 978.918883][T11794] usb 1-1: Using ep0 maxpacket: 32 [ 978.939057][T11794] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 978.967052][T11794] usb 1-1: config 0 has no interface number 0 [ 979.009888][T11794] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 979.028168][T16504] sp0: Synchronizing with TNC [ 979.054418][T11794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.056579][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 979.075147][ T977] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 979.115894][T11794] usb 1-1: Product: syz [ 979.120394][ T977] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 979.140794][ T5923] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 979.432635][T11794] usb 1-1: Manufacturer: syz [ 979.442868][T11794] usb 1-1: SerialNumber: syz [ 979.816427][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 980.232348][T16503] delete_channel: no stack [ 980.347886][ T5923] usb 7-1: config 0 has no interfaces? [ 980.395101][ T977] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 980.418402][T11794] usb 1-1: config 0 descriptor?? [ 980.481295][ T5923] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 980.492424][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.503615][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.512721][ T977] usb 4-1: Product: syz [ 980.517653][ T977] usb 4-1: Manufacturer: syz [ 980.522432][ T5923] usb 7-1: Product: syz [ 980.526995][ T977] usb 4-1: SerialNumber: syz [ 980.544970][T11794] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 980.554328][ T5923] usb 7-1: Manufacturer: syz [ 980.559150][ T5923] usb 7-1: SerialNumber: syz [ 980.623722][ T5923] usb 7-1: config 0 descriptor?? [ 981.266029][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 981.286689][T11794] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 981.301912][T16500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2666'. [ 981.333307][T11794] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 981.351469][T11794] usb 1-1: USB disconnect, device number 108 [ 981.366976][T11794] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 981.384939][T11794] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 981.414170][T11794] quatech2 1-1:0.51: device disconnected [ 981.456446][ T977] cdc_ncm 4-1:1.0: bind() failure [ 981.479189][ T977] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 981.489906][ T977] cdc_ncm 4-1:1.1: bind() failure [ 981.514475][ T977] usb 4-1: USB disconnect, device number 50 [ 982.049288][ T1208] usb 7-1: USB disconnect, device number 19 [ 982.252460][T16528] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2674'. [ 982.609532][T16545] netlink: 428 bytes leftover after parsing attributes in process `syz.3.2680'. [ 982.653324][ T1208] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 982.820573][T16003] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 982.841680][ T1208] usb 7-1: Using ep0 maxpacket: 32 [ 983.334646][T16003] usb 9-1: Using ep0 maxpacket: 16 [ 983.384605][ T1208] usb 7-1: config 0 has an invalid interface number: 146 but max is 0 [ 983.429668][T16003] usb 9-1: config 0 has an invalid interface number: 126 but max is 0 [ 983.438165][ T1208] usb 7-1: config 0 has no interface number 0 [ 983.444925][T16003] usb 9-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 983.460039][ T1208] usb 7-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 983.477514][T16003] usb 9-1: config 0 has no interface number 0 [ 983.485992][ T1208] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 983.511012][T16003] usb 9-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 983.535406][ T1208] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 983.551714][T16003] usb 9-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 983.568915][ T1208] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 983.582218][T16003] usb 9-1: config 0 interface 126 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 983.612582][ T1208] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 983.627050][T16003] usb 9-1: New USB device found, idVendor=0f63, idProduct=30bb, bcdDevice=56.88 [ 983.644044][ T1208] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 983.662905][T16003] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.678198][ T1208] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 983.704575][T16003] usb 9-1: config 0 descriptor?? [ 983.716921][ T1208] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 983.740285][T16542] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 983.754934][ T1208] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 983.782588][ T1208] usb 7-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 983.806875][ T1208] usb 7-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 983.841238][ T1208] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.850477][ T1208] usb 7-1: Product: syz [ 983.856534][ T1208] usb 7-1: Manufacturer: syz [ 983.868106][ T1208] usb 7-1: SerialNumber: syz [ 983.891800][ T1208] usb 7-1: config 0 descriptor?? [ 983.897973][T16532] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 983.908897][T16532] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 983.933958][ T1208] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 983.942473][ T1208] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 983.969815][ T5976] usb 9-1: USB disconnect, device number 56 [ 983.994418][ T1208] scsi host1: microtekX6 [ 984.141087][T16532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.158367][T16532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.178755][T16532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.199016][T16532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.230762][T16532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.253496][T16532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.273617][T16532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.294398][T16532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.316619][T16532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.342578][T16532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.389582][T16003] usb 7-1: USB disconnect, device number 20 [ 984.396442][ T1208] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 984.517495][T16577] FAULT_INJECTION: forcing a failure. [ 984.517495][T16577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 984.552363][ T1208] usb 6-1: device descriptor read/64, error -71 [ 984.558903][T16577] CPU: 0 UID: 0 PID: 16577 Comm: syz.0.2689 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 984.558933][T16577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 984.558946][T16577] Call Trace: [ 984.558956][T16577] [ 984.558966][T16577] dump_stack_lvl+0x189/0x250 [ 984.558997][T16577] ? __pfx____ratelimit+0x10/0x10 [ 984.559021][T16577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 984.559045][T16577] ? __pfx__printk+0x10/0x10 [ 984.559079][T16577] ? __might_fault+0xb0/0x130 [ 984.559116][T16577] should_fail_ex+0x414/0x560 [ 984.559146][T16577] _copy_from_user+0x2d/0xb0 [ 984.559176][T16577] rfcomm_sock_setsockopt+0x3d0/0x7a0 [ 984.559211][T16577] ? __pfx_rfcomm_sock_setsockopt+0x10/0x10 [ 984.559242][T16577] ? alloc_fd+0x120/0x6c0 [ 984.559269][T16577] ? __fget_files+0x2a/0x420 [ 984.559291][T16577] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 984.559312][T16577] ? __pfx_rfcomm_sock_setsockopt+0x10/0x10 [ 984.559343][T16577] do_sock_setsockopt+0x179/0x1b0 [ 984.559381][T16577] __x64_sys_setsockopt+0x13f/0x1b0 [ 984.559418][T16577] do_syscall_64+0xfa/0x3b0 [ 984.559441][T16577] ? lockdep_hardirqs_on+0x9c/0x150 [ 984.559463][T16577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.559484][T16577] ? clear_bhb_loop+0x60/0xb0 [ 984.559511][T16577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.559531][T16577] RIP: 0033:0x7f128e78ebe9 [ 984.559550][T16577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 984.559569][T16577] RSP: 002b:00007f128f5a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 984.559592][T16577] RAX: ffffffffffffffda RBX: 00007f128e9b5fa0 RCX: 00007f128e78ebe9 [ 984.559608][T16577] RDX: 0000000000000007 RSI: 0000000000000112 RDI: 0000000000000004 [ 984.559620][T16577] RBP: 00007f128f5a7090 R08: 0000000000000004 R09: 0000000000000000 [ 984.559634][T16577] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 984.559647][T16577] R13: 00007f128e9b6038 R14: 00007f128e9b5fa0 R15: 00007ffd157780c8 [ 984.559685][T16577] [ 985.162023][ T1208] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 985.311175][ T1208] usb 6-1: device descriptor read/64, error -71 [ 985.429432][ T1208] usb usb6-port1: attempt power cycle [ 985.479709][T11794] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 985.656122][T11794] usb 1-1: Using ep0 maxpacket: 8 [ 985.669365][T11794] usb 1-1: unable to get BOS descriptor or descriptor too short [ 985.691493][T11794] usb 1-1: config 4 has an invalid interface number: 255 but max is 0 [ 985.713813][T11794] usb 1-1: config 4 has no interface number 0 [ 985.728843][T11794] usb 1-1: config 4 interface 255 has no altsetting 0 [ 985.751370][T11794] usb 1-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= e.87 [ 985.771298][T11794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.784221][T11794] usb 1-1: Product: syz [ 985.788639][T11794] usb 1-1: Manufacturer: syz [ 985.803059][T11794] usb 1-1: SerialNumber: syz [ 985.803612][ T1208] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 985.836883][ T1208] usb 6-1: device descriptor read/8, error -71 [ 986.102700][ T1208] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 986.138219][ T1208] usb 6-1: device descriptor read/8, error -71 [ 986.297443][T11794] usb 1-1: USB disconnect, device number 109 [ 986.391932][T16601] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 986.402662][T16601] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 986.412028][T16601] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 986.422269][T16601] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 986.432046][T16601] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 986.550499][T16600] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(11) [ 986.557276][T16600] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 986.565747][T16600] vhci_hcd vhci_hcd.0: Device attached [ 986.586206][T16601] vhci_hcd vhci_hcd.0: pdev(8) rhport(6) sockfd(25) [ 986.592971][T16601] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 986.601608][T16601] vhci_hcd vhci_hcd.0: Device attached [ 986.684963][ T1208] usb usb6-port1: unable to enumerate USB device [ 986.718624][T16603] vhci_hcd: connection closed [ 986.727156][T16602] vhci_hcd: connection closed [ 986.732216][ T6182] vhci_hcd: stop threads [ 986.754714][ T6182] vhci_hcd: release socket [ 986.765227][ T6182] vhci_hcd: disconnect device [ 986.776761][ T6182] vhci_hcd: stop threads [ 986.786678][ T6182] vhci_hcd: release socket [ 986.791149][ T6182] vhci_hcd: disconnect device [ 987.123948][ T43] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 987.292896][ T43] usb 7-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 987.313025][ T43] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 987.356400][ T43] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 987.425689][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.455466][T16619] FAULT_INJECTION: forcing a failure. [ 987.455466][T16619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 987.458293][ T43] usb 7-1: Product: syz [ 987.474828][T16619] CPU: 0 UID: 0 PID: 16619 Comm: syz.0.2700 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 987.474859][T16619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 987.474871][T16619] Call Trace: [ 987.474880][T16619] [ 987.474890][T16619] dump_stack_lvl+0x189/0x250 [ 987.474919][T16619] ? __pfx____ratelimit+0x10/0x10 [ 987.474942][T16619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 987.474966][T16619] ? __pfx__printk+0x10/0x10 [ 987.475017][T16619] should_fail_ex+0x414/0x560 [ 987.475047][T16619] _copy_to_user+0x31/0xb0 [ 987.475076][T16619] simple_read_from_buffer+0xe1/0x170 [ 987.475102][T16619] proc_fail_nth_read+0x1df/0x250 [ 987.475129][T16619] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 987.475155][T16619] ? rw_verify_area+0x258/0x650 [ 987.475182][T16619] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 987.475206][T16619] vfs_read+0x200/0x980 [ 987.475239][T16619] ? __pfx___mutex_lock+0x10/0x10 [ 987.475262][T16619] ? __pfx_vfs_read+0x10/0x10 [ 987.475291][T16619] ? __fget_files+0x2a/0x420 [ 987.475316][T16619] ? __fget_files+0x3a0/0x420 [ 987.475336][T16619] ? __fget_files+0x2a/0x420 [ 987.475366][T16619] ksys_read+0x145/0x250 [ 987.475386][T16619] ? __pfx_ksys_read+0x10/0x10 [ 987.475410][T16619] ? do_syscall_64+0xbe/0x3b0 [ 987.475435][T16619] do_syscall_64+0xfa/0x3b0 [ 987.475454][T16619] ? lockdep_hardirqs_on+0x9c/0x150 [ 987.475474][T16619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.475492][T16619] ? clear_bhb_loop+0x60/0xb0 [ 987.475515][T16619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.475533][T16619] RIP: 0033:0x7f128e78d5fc [ 987.475552][T16619] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 987.475568][T16619] RSP: 002b:00007f128f5a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 987.475589][T16619] RAX: ffffffffffffffda RBX: 00007f128e9b5fa0 RCX: 00007f128e78d5fc [ 987.475604][T16619] RDX: 000000000000000f RSI: 00007f128f5a70a0 RDI: 0000000000000003 [ 987.475616][T16619] RBP: 00007f128f5a7090 R08: 0000000000000000 R09: 0000000000000000 [ 987.475628][T16619] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 987.475640][T16619] R13: 00007f128e9b6038 R14: 00007f128e9b5fa0 R15: 00007ffd157780c8 [ 987.475672][T16619] [ 987.635005][T16623] wg1 speed is unknown, defaulting to 1000 [ 987.664352][ T43] usb 7-1: Manufacturer: syz [ 987.738076][T16623] wg1 speed is unknown, defaulting to 1000 [ 987.774232][ T43] usb 7-1: SerialNumber: syz [ 988.500633][ T43] usb 7-1: 0:2 : does not exist [ 988.552650][ T43] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 988.608820][ T43] usb 7-1: USB disconnect, device number 21 [ 988.636390][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 990.347132][T16656] input: syz1 as /devices/virtual/input/input40 [ 991.098791][T16668] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2712'. [ 991.123517][T16670] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2712'. [ 991.351761][ T5976] usb 9-1: new full-speed USB device number 57 using dummy_hcd [ 991.553990][T16678] block device autoloading is deprecated and will be removed. [ 991.672706][ T5976] usb 9-1: unable to get BOS descriptor or descriptor too short [ 991.780061][T16678] syz.5.2715: attempt to access beyond end of device [ 991.780061][T16678] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 991.867630][ T5976] usb 9-1: not running at top speed; connect to a high speed hub [ 992.000758][ T5976] usb 9-1: config 12 has an invalid interface number: 214 but max is 0 [ 992.272038][ T5976] usb 9-1: config 12 has no interface number 0 [ 992.278502][ T5976] usb 9-1: config 12 interface 214 has no altsetting 0 [ 992.295057][ T5976] usb 9-1: New USB device found, idVendor=0711, idProduct=0179, bcdDevice=a7.6d [ 992.937664][ T5976] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.947431][ T5976] usb 9-1: Product: syz [ 992.952820][ T5976] usb 9-1: Manufacturer: syz [ 993.008088][ T5976] usb 9-1: SerialNumber: syz [ 993.275846][ T5976] ax88179_178a 9-1:12.214: probe with driver ax88179_178a failed with error -22 [ 993.325084][ T5976] usb 9-1: USB disconnect, device number 57 [ 993.450900][ T977] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 993.776584][T16688] netlink: 'syz.3.2718': attribute type 1 has an invalid length. [ 993.867918][ T977] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 993.877070][ T977] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.907622][ T977] usb 1-1: config 0 has no interface number 0 [ 993.915870][ T977] usb 1-1: config 0 interface 231 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 993.965987][ T977] usb 1-1: config 0 interface 231 has no altsetting 0 [ 993.976467][ T977] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=21.78 [ 993.988294][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.094121][T16681] syz.6.2714: attempt to access beyond end of device [ 994.094121][T16681] loop13: rw=0, sector=0, nr_sectors = 1 limit=0 [ 994.130242][T16681] FAT-fs (loop13): unable to read boot sector [ 994.293889][ T43] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 994.345148][ T977] usb 1-1: Product: syz [ 994.640829][T16697] netlink: 146840 bytes leftover after parsing attributes in process `syz.5.2720'. [ 994.655170][ T977] usb 1-1: Manufacturer: syz [ 994.659856][ T977] usb 1-1: SerialNumber: syz [ 994.668481][ T977] usb 1-1: config 0 descriptor?? [ 994.733717][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.762418][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.783780][ T43] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 994.793190][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.817117][ T43] usb 4-1: config 0 descriptor?? [ 994.880497][T16702] tap0: tun_chr_ioctl cmd 1074025677 [ 994.886337][T16702] tap0: linktype set to 776 [ 994.899757][ T977] asix 1-1:0.231 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 994.922781][ T977] asix 1-1:0.231: probe with driver asix failed with error -61 [ 995.187964][ T977] usb 1-1: USB disconnect, device number 110 [ 995.577515][ T43] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 995.601893][ T43] cp2112 0003:10C4:EA90.0023: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 995.702883][T11794] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 995.734503][ T5976] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 995.797039][ T43] cp2112 0003:10C4:EA90.0023: Part Number: 0x00 Device Version: 0x4D [ 995.899181][T11794] usb 9-1: config 0 has an invalid interface number: 117 but max is 0 [ 995.908569][T11794] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 995.927128][ T5976] usb 7-1: device descriptor read/64, error -71 [ 995.948733][T11794] usb 9-1: config 0 has no interface number 0 [ 995.955166][T11794] usb 9-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 996.006708][T11794] usb 9-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 996.053476][ T43] cp2112 0003:10C4:EA90.0023: error requesting SMBus config [ 996.178477][T11794] usb 9-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 996.192595][T16714] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2724'. [ 996.202208][ T43] cp2112 0003:10C4:EA90.0023: probe with driver cp2112 failed with error -71 [ 996.207228][ T43] usb 4-1: USB disconnect, device number 51 [ 996.215713][ T5976] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 996.239359][T11794] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.283807][T11794] usb 9-1: Product: syz [ 996.335704][T11794] usb 9-1: Manufacturer: syz [ 996.389771][T11794] usb 9-1: SerialNumber: syz [ 996.600230][ T5976] usb 7-1: device descriptor read/64, error -71 [ 996.640936][T11794] usb 9-1: config 0 descriptor?? [ 996.751669][ T5976] usb usb7-port1: attempt power cycle [ 997.295533][ T5976] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 998.407542][ T5976] usb 7-1: device descriptor read/8, error -71 [ 998.518398][T11794] usbtouchscreen 9-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 998.562288][T11794] usb 9-1: USB disconnect, device number 58 [ 1001.246381][T16744] netlink: 'syz.0.2731': attribute type 9 has an invalid length. [ 1001.272344][T16744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2731'. [ 1001.862389][ T1208] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1002.829117][ T1208] usb 4-1: Using ep0 maxpacket: 16 [ 1004.106083][ T1208] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1004.125555][ T1208] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1004.138027][ T1208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 1004.149348][ T1208] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1004.159698][ T1208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1004.169519][ T1208] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1004.184545][ T1208] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1004.202373][ T1208] usb 4-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 1004.212622][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.222020][ T1208] usb 4-1: Product: syz [ 1004.226673][ T1208] usb 4-1: Manufacturer: syz [ 1004.231401][ T1208] usb 4-1: SerialNumber: syz [ 1004.239468][ T1208] usb 4-1: config 0 descriptor?? [ 1004.246979][T16760] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1004.259358][ T1208] iuu_phoenix 4-1:0.0: iuu_phoenix converter detected [ 1004.273738][ T1208] usb 4-1: iuu_phoenix converter now attached to ttyUSB0 [ 1004.327092][T16782] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2741'. [ 1004.612596][ T1208] usb 4-1: USB disconnect, device number 52 [ 1004.743439][ T1208] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 1004.767009][ T1208] iuu_phoenix 4-1:0.0: device disconnected [ 1005.046194][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1005.771890][ T1208] libceph: connect (1)[c::]:6789 error -101 [ 1005.778589][ T1208] libceph: mon0 (1)[c::]:6789 connect error [ 1005.807987][ T1208] libceph: connect (1)[c::]:6789 error -101 [ 1005.814234][ T1208] libceph: mon0 (1)[c::]:6789 connect error [ 1005.828251][T16805] ceph: No mds server is up or the cluster is laggy [ 1005.908962][T16002] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1006.062479][T11794] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1006.094147][T16002] usb 7-1: Using ep0 maxpacket: 8 [ 1006.109675][T16002] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1006.109740][T16002] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1006.109772][T16002] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1006.109801][T16002] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1006.109871][T16002] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1006.111359][T16002] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1006.111414][T16002] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1006.111443][T16002] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1006.111469][T16002] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1006.111495][T16002] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1006.112771][T16002] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1006.112826][T16002] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1006.112866][T16002] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1006.112893][T16002] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1006.112919][T16002] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1006.116824][T16002] usb 7-1: string descriptor 0 read error: -22 [ 1006.116952][T16002] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1006.116969][T16002] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.147861][T16002] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1006.244542][T11794] usb 1-1: Using ep0 maxpacket: 8 [ 1006.260043][T11794] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1006.260079][T11794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.263381][T11794] usb 1-1: config 0 descriptor?? [ 1006.317382][T16820] x_tables: duplicate underflow at hook 1 [ 1006.487967][T16806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2747'. [ 1006.548491][T16003] usb 1-1: USB disconnect, device number 111 [ 1007.329850][T16839] trusted_key: encrypted_key: insufficient parameters specified [ 1007.364445][T16839] trusted_key: encrypted_key: insufficient parameters specified [ 1007.384873][T16839] trusted_key: encrypted_key: insufficient parameters specified [ 1007.413994][T16839] trusted_key: encrypted_key: insufficient parameters specified [ 1007.791042][T16845] wg1 speed is unknown, defaulting to 1000 [ 1007.912576][T16845] wg1 speed is unknown, defaulting to 1000 [ 1008.381671][T16003] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1008.414189][ T5976] usb 7-1: USB disconnect, device number 26 [ 1009.012305][T16003] usb 6-1: Using ep0 maxpacket: 32 [ 1009.056065][T16003] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1009.069258][T16003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.104453][T16003] usb 6-1: config 0 descriptor?? [ 1009.325898][T16003] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1009.343182][T16003] usb 6-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1009.352282][T16003] usb 6-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1010.134111][T16871] ieee802154 phy0 wpan0: encryption failed: -22 [ 1011.642762][T16886] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2765'. [ 1011.718051][T16886] veth1_macvtap: left promiscuous mode [ 1011.917737][T16892] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input42 [ 1013.358902][T16897] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1013.564101][ T30] audit: type=1326 audit(1754863826.332:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16890 comm="syz.0.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128e78ebe9 code=0x7fc00000 [ 1013.588279][ T5976] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1013.633430][ T30] audit: type=1326 audit(1754863826.332:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16890 comm="syz.0.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f128e78ebe9 code=0x7fc00000 [ 1013.694813][ T30] audit: type=1326 audit(1754863826.332:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16890 comm="syz.0.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128e78ebe9 code=0x7fc00000 [ 1013.758975][ T30] audit: type=1326 audit(1754863826.332:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16890 comm="syz.0.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128e78ebe9 code=0x7fc00000 [ 1013.785299][ T30] audit: type=1326 audit(1754863826.332:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16890 comm="syz.0.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128e78ebe9 code=0x7fc00000 [ 1013.807562][ T30] audit: type=1326 audit(1754863826.332:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16890 comm="syz.0.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128e78ebe9 code=0x7fc00000 [ 1013.836014][ T5976] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1013.836084][ T30] audit: type=1326 audit(1754863826.332:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16890 comm="syz.0.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128e78ebe9 code=0x7fc00000 [ 1013.843721][ T5976] usb 4-1: can't read configurations, error -61 [ 1013.887693][ T30] audit: type=1326 audit(1754863826.332:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16890 comm="syz.0.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128e78ebe9 code=0x7fc00000 [ 1013.919663][ T30] audit: type=1326 audit(1754863826.332:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16890 comm="syz.0.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128e78ebe9 code=0x7fc00000 [ 1013.952808][ T30] audit: type=1326 audit(1754863826.332:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16890 comm="syz.0.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128e78ebe9 code=0x7fc00000 [ 1014.012897][ T5976] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 1014.188725][ T5976] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1014.694071][T16910] ceph: No mds server is up or the cluster is laggy [ 1016.042262][ T5976] usb 4-1: can't read configurations, error -61 [ 1016.051976][ T1208] libceph: connect (1)[c::]:6789 error -101 [ 1016.076524][ T1208] libceph: mon0 (1)[c::]:6789 connect error [ 1016.132769][ T5976] usb usb4-port1: attempt power cycle [ 1016.595736][ T5976] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1017.179920][ T5976] usb 4-1: device not accepting address 55, error -71 [ 1017.481749][T16932] net_ratelimit: 113 callbacks suppressed [ 1017.481766][T16932] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 1017.585767][T16002] IPVS: starting estimator thread 0... [ 1017.693073][T16936] IPVS: using max 24 ests per chain, 57600 per kthread [ 1018.794631][T16956] 9pnet: p9_errstr2errno: server reported unknown error  [ 1019.381468][T15805] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 1019.390119][T15805] Bluetooth: Wrong link type (-22) [ 1019.397205][T15805] Bluetooth: hci1: link tx timeout [ 1019.404413][T15805] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1019.809884][ T5976] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1019.930427][T16914] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1019.981668][T16996] @: renamed from bond_slave_0 (while UP) [ 1020.009848][ T5976] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1020.019491][T15805] Bluetooth: hci1: command 0x0405 tx timeout [ 1020.040014][ T5976] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.070379][ T5976] usb 7-1: config 0 descriptor?? [ 1020.120729][T16914] usb 1-1: Using ep0 maxpacket: 8 [ 1020.140577][T16914] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice= 0.6d [ 1020.150826][T16914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.161130][T16914] usb 1-1: Product: syz [ 1020.165734][T16914] usb 1-1: Manufacturer: syz [ 1020.170419][T16914] usb 1-1: SerialNumber: syz [ 1020.179289][T16914] usb 1-1: config 0 descriptor?? [ 1020.191034][T16914] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1020.318033][ T5976] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1020.355514][T11794] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1020.517628][T11794] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 1020.531226][T11794] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.543414][ T5976] [drm:udl_init] *ERROR* Selecting channel failed [ 1020.543983][T11794] usb 4-1: config 0 has no interface number 0 [ 1020.558532][T11794] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1020.568638][T11794] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1020.585962][T11794] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1020.596133][T11794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.597653][ T5976] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1020.604592][T11794] usb 4-1: Product: syz [ 1020.617028][T11794] usb 4-1: Manufacturer: syz [ 1020.621723][T11794] usb 4-1: SerialNumber: syz [ 1020.630405][ T5976] [drm] Initialized udl on minor 2 [ 1020.632343][T11794] usb 4-1: config 0 descriptor?? [ 1020.649359][ T5976] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1020.671245][ T5976] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1020.688235][ T5982] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1020.705357][ T5976] usb 7-1: USB disconnect, device number 27 [ 1020.712441][ T5982] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1021.084907][T17007] netlink: 'syz.3.2800': attribute type 10 has an invalid length. [ 1021.134727][T17007] team0: Port device dummy0 added [ 1021.177629][T11794] usb 4-1: USB disconnect, device number 57 [ 1021.627892][ T43] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1021.821735][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 1021.871559][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.005003][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.114696][ T43] usb 7-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 1022.214260][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.237037][T15805] Bluetooth: hci1: command 0x0405 tx timeout [ 1022.353020][T16914] gspca_sonixj: reg_w1 err -110 [ 1022.363273][ T43] usb 7-1: config 0 descriptor?? [ 1022.395671][T17021] netlink: 'syz.8.2806': attribute type 1 has an invalid length. [ 1022.412487][T17021] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1022.419623][T16914] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 1022.892085][ T43] waltop 0003:172F:0034.0024: item fetching failed at offset 0/2 [ 1022.940305][ T43] waltop 0003:172F:0034.0024: probe with driver waltop failed with error -22 [ 1023.051038][T16914] usb 7-1: USB disconnect, device number 28 [ 1023.150036][T17049] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1023.512533][T16914] usb 1-1: USB disconnect, device number 112 [ 1024.043392][T16914] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1024.134555][T17059] wg1 speed is unknown, defaulting to 1000 [ 1024.154866][T17059] wg1 speed is unknown, defaulting to 1000 [ 1025.283615][T16914] usb 9-1: Using ep0 maxpacket: 16 [ 1025.296911][T16914] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1025.306887][T16914] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.315198][T16914] usb 9-1: Product: syz [ 1025.319867][T16914] usb 9-1: Manufacturer: syz [ 1025.324773][T16914] usb 9-1: SerialNumber: syz [ 1025.351246][T16914] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1025.361343][T16914] r8152-cfgselector 9-1: config 0 descriptor?? [ 1025.901793][ T1208] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1026.133655][ T1208] usb 1-1: Using ep0 maxpacket: 32 [ 1026.141686][ T1208] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1026.182103][ T1208] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1026.206831][ T1208] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1026.249649][ T1208] usb 1-1: config 1 has no interface number 0 [ 1026.256872][ T1208] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1026.288547][ T1208] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1026.308661][ T1208] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1026.318961][ T1208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.341359][ T1208] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1026.566109][ T1208] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1026.735783][T17071] @m!]D: renamed from bond_slave_0 (while UP) [ 1027.007561][ T1208] usb 1-1: USB disconnect, device number 113 [ 1027.032912][ T1208] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1027.123333][ T5923] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1027.129390][T16914] r8152-cfgselector 9-1: USB disconnect, device number 59 [ 1027.287782][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1027.300533][ T5923] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1027.310282][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.335650][ T5923] usb 4-1: config 0 descriptor?? [ 1027.388140][T17079] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2822'. [ 1027.425288][T17079] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2822'. [ 1027.594787][T16914] usb 4-1: USB disconnect, device number 58 [ 1027.819397][T17088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.833911][T17088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.020544][ T5923] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 1028.063467][ T5976] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1028.184799][ T5923] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.196976][ T5923] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1028.206613][ T5923] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1028.221368][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.244107][ T5923] usb 1-1: config 0 descriptor?? [ 1028.255444][ T5976] usb 9-1: Using ep0 maxpacket: 8 [ 1028.269057][ T5976] usb 9-1: config 0 has an invalid interface number: 239 but max is 0 [ 1028.284678][ T5976] usb 9-1: config 0 has no interface number 0 [ 1028.293230][ T5976] usb 9-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 1028.314636][ T5976] usb 9-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 1028.328820][ T5976] usb 9-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1028.340181][ T5976] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.385670][ T5976] usb 9-1: Product: syz [ 1028.422338][T17096] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1028.517491][ T5976] usb 9-1: Manufacturer: syz [ 1028.521400][ T5923] usb 1-1: USB disconnect, device number 114 [ 1028.537412][ T5976] usb 9-1: SerialNumber: syz [ 1028.736451][ T5976] usb 9-1: config 0 descriptor?? [ 1028.859789][T17087] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1029.218013][ T5976] ath6kl: Failed to submit usb control message: -71 [ 1029.235340][ T5976] ath6kl: unable to send the bmi data to the device: -71 [ 1029.261703][ T5976] ath6kl: Unable to send get target info: -71 [ 1029.278784][ T5976] ath6kl: Failed to init ath6kl core: -71 [ 1029.319955][ T5976] ath6kl_usb 9-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 1029.351564][ T5976] usb 9-1: USB disconnect, device number 60 [ 1029.688187][T16914] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1029.861648][T16914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.882813][T16914] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1029.902107][T16914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.927566][T16914] usb 1-1: config 0 descriptor?? [ 1030.476593][T16914] elecom 0003:056E:00FE.0025: item fetching failed at offset 0/3 [ 1030.500140][T16914] elecom 0003:056E:00FE.0025: probe with driver elecom failed with error -22 [ 1030.749031][ T5976] usb 1-1: USB disconnect, device number 115 [ 1031.127166][T17123] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2835'. [ 1033.472594][ T5982] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1034.525156][ T5982] usb 1-1: Using ep0 maxpacket: 16 [ 1034.563026][ T5982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.830614][ T5982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1034.840747][ T5982] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1034.862846][ T5982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.946929][T17141] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2839'. [ 1034.969152][T17141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1035.273170][ T5982] usb 1-1: config 0 descriptor?? [ 1035.299741][ T5982] usb 1-1: can't set config #0, error -71 [ 1035.319811][ T5982] usb 1-1: USB disconnect, device number 116 [ 1035.835273][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1035.975093][ T5923] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1036.226388][ T5923] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1036.245297][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.286805][ T5923] usb 1-1: config 0 descriptor?? [ 1036.303034][ T5923] cp210x 1-1:0.0: cp210x converter detected [ 1036.667338][T17152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.835828][T17152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.007390][T17152] x_tables: duplicate underflow at hook 3 [ 1037.321947][T16002] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1037.913373][T16002] usb 4-1: Using ep0 maxpacket: 32 [ 1038.089293][T16002] usb 4-1: config 0 has an invalid interface number: 195 but max is 0 [ 1038.108722][T16002] usb 4-1: config 0 has no interface number 0 [ 1038.125251][T16002] usb 4-1: config 0 interface 195 has no altsetting 0 [ 1038.139884][T16002] usb 4-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=5c.6b [ 1038.167352][T16002] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=29 [ 1038.201872][T16002] usb 4-1: Product: syz [ 1038.217361][T16002] usb 4-1: Manufacturer: syz [ 1038.227090][T16002] usb 4-1: SerialNumber: syz [ 1038.265047][T16002] usb 4-1: config 0 descriptor?? [ 1038.278564][T16002] em28xx 4-1:0.195: New device syz syz @ 480 Mbps (1b80:e309, interface 195, class 195) [ 1038.305406][T16002] em28xx 4-1:0.195: Video interface 195 found: bulk [ 1038.493690][ T43] hid (null): bogus close delimiter [ 1038.508180][ T43] hid (null): report_id 34018 is invalid [ 1038.517841][ T43] hid-generic 000E:1400000:0577.0026: unknown main item tag 0x7 [ 1038.559164][ T43] hid-generic 000E:1400000:0577.0026: unknown main item tag 0x5 [ 1038.570705][ T43] hid-generic 000E:1400000:0577.0026: unknown main item tag 0x7 [ 1038.591656][ T43] hid-generic 000E:1400000:0577.0026: bogus close delimiter [ 1038.600903][ T43] hid-generic 000E:1400000:0577.0026: item 0 0 2 10 parsing failed [ 1038.618400][ T43] hid-generic 000E:1400000:0577.0026: probe with driver hid-generic failed with error -22 [ 1038.643930][ T5923] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1038.666388][ T5923] cp210x 1-1:0.0: querying part number failed [ 1038.686691][ T5923] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1038.712721][T16002] em28xx 4-1:0.195: unknown em28xx chip ID (0) [ 1038.722799][ T5923] usb 1-1: USB disconnect, device number 117 [ 1038.734402][ T5923] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1038.742881][ T5923] cp210x 1-1:0.0: device disconnected [ 1038.804278][T16002] em28xx 4-1:0.195: reading from i2c device at 0xa0 failed (error=-5) [ 1038.823222][T16002] em28xx 4-1:0.195: board has no eeprom [ 1038.893132][T16002] em28xx 4-1:0.195: Identified as Easy Cap Capture DC-60 (card=64) [ 1038.931885][T16002] em28xx 4-1:0.195: analog set to bulk mode. [ 1038.954291][ T5923] em28xx 4-1:0.195: Registering V4L2 extension [ 1038.975849][T17195] hfsplus: unable to find HFS+ superblock [ 1038.980717][T16002] usb 4-1: USB disconnect, device number 59 [ 1039.111269][T16002] em28xx 4-1:0.195: Disconnecting em28xx [ 1039.607005][T17198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2856'. [ 1039.622010][ T5923] em28xx 4-1:0.195: Config register raw data: 0xffffffed [ 1039.636451][ T5923] em28xx 4-1:0.195: AC97 chip type couldn't be determined [ 1039.678924][ T5923] em28xx 4-1:0.195: No AC97 audio processor [ 1039.700823][T17199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2856'. [ 1039.729007][ T5923] usb 4-1: Decoder not found [ 1039.741833][ T5923] em28xx 4-1:0.195: failed to create media graph [ 1039.778938][T17199] nbd: device at index 64 is going down [ 1039.786544][ T5923] em28xx 4-1:0.195: V4L2 device video103 deregistered [ 1039.824577][ T5923] em28xx 4-1:0.195: Remote control support is not available for this card. [ 1039.866618][T16002] em28xx 4-1:0.195: Closing input extension [ 1039.881331][T17199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.888765][T16002] em28xx 4-1:0.195: Freeing device [ 1039.934585][T17199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.112166][T16914] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1040.194796][T17208] 9pnet_fd: Insufficient options for proto=fd [ 1040.283725][T16914] usb 1-1: device descriptor read/64, error -71 [ 1040.309656][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1040.309676][ T30] audit: type=1326 audit(1754863851.354:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17209 comm="syz.6.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047d78ebe9 code=0x7fc00000 [ 1040.356767][ T30] audit: type=1326 audit(1754863851.354:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17209 comm="syz.6.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047d78ebe9 code=0x7fc00000 [ 1040.432127][ T30] audit: type=1326 audit(1754863851.354:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17209 comm="syz.6.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047d78ebe9 code=0x7fc00000 [ 1040.453988][ C0] vkms_vblank_simulate: vblank timer overrun [ 1040.478673][ T30] audit: type=1326 audit(1754863851.354:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17209 comm="syz.6.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047d78ebe9 code=0x7fc00000 [ 1040.522727][ T30] audit: type=1326 audit(1754863851.354:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17209 comm="syz.6.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047d78ebe9 code=0x7fc00000 [ 1040.544792][ C0] vkms_vblank_simulate: vblank timer overrun [ 1040.576337][ T30] audit: type=1326 audit(1754863851.354:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17209 comm="syz.6.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047d78ebe9 code=0x7fc00000 [ 1040.598044][ C0] vkms_vblank_simulate: vblank timer overrun [ 1040.605284][ T30] audit: type=1326 audit(1754863851.354:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17209 comm="syz.6.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047d78ebe9 code=0x7fc00000 [ 1040.628131][T16914] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1040.645130][ T30] audit: type=1326 audit(1754863851.354:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17209 comm="syz.6.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047d78ebe9 code=0x7fc00000 [ 1040.667112][ C0] vkms_vblank_simulate: vblank timer overrun [ 1040.679768][ T30] audit: type=1326 audit(1754863851.354:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17209 comm="syz.6.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047d78ebe9 code=0x7fc00000 [ 1040.708018][ T30] audit: type=1326 audit(1754863851.354:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17209 comm="syz.6.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047d78ebe9 code=0x7fc00000 [ 1040.806188][T16914] usb 1-1: device descriptor read/64, error -71 [ 1041.014315][T16914] usb usb1-port1: attempt power cycle [ 1041.757778][T16914] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1041.801330][T16914] usb 1-1: device descriptor read/8, error -71 [ 1042.067763][T16914] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1042.930672][T16914] usb 1-1: device descriptor read/8, error -71 [ 1043.079951][T16914] usb usb1-port1: unable to enumerate USB device [ 1043.532339][T17249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2873'. [ 1043.542147][T17249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2873'. [ 1044.078401][T17253] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2874'. [ 1044.227698][ T5923] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1044.475989][T17259] binder: 17252:17259 ioctl c00c6211 0 returned -14 [ 1044.737425][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1045.157958][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 1045.362352][ T5923] usb 4-1: config 0 has an invalid interface number: 28 but max is 0 [ 1045.420616][ T5923] usb 4-1: config 0 has no interface number 0 [ 1045.484186][ T5923] usb 4-1: config 0 interface 28 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1045.592190][ T5923] usb 4-1: config 0 interface 28 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1045.740686][ T5923] usb 4-1: New USB device found, idVendor=1608, idProduct=030b, bcdDevice=40.85 [ 1045.778510][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.283541][ T5923] usb 4-1: Product: syz [ 1046.287943][ T5923] usb 4-1: Manufacturer: syz [ 1046.765484][ T5923] usb 4-1: SerialNumber: syz [ 1046.774930][ T5923] usb 4-1: config 0 descriptor?? [ 1046.787809][ T5923] usb 4-1: can't set config #0, error -71 [ 1046.796490][ T5923] usb 4-1: USB disconnect, device number 60 [ 1047.092795][T11794] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1047.117386][T17278] tc_dump_action: action bad kind [ 1047.247510][ T5923] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 1047.281759][T11794] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1047.308496][T11794] usb 1-1: config 1 has no interface number 0 [ 1047.357496][T11794] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1047.403751][T11794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.443152][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1047.467688][T11794] usb 1-1: Product: syz [ 1047.493268][T11794] usb 1-1: Manufacturer: syz [ 1047.526697][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1047.544288][T11794] usb 1-1: SerialNumber: syz [ 1047.632270][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1047.769827][ T5923] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1047.887988][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.971961][ T5923] usb 4-1: Product: syz [ 1047.976407][ T5923] usb 4-1: Manufacturer: syz [ 1047.991891][T11794] usb 1-1: USB disconnect, device number 122 [ 1048.019816][ T5923] usb 4-1: SerialNumber: syz [ 1048.052859][ T5923] usb 4-1: config 0 descriptor?? [ 1048.075468][T17273] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1048.102037][T17273] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1048.113806][ T5923] usb 4-1: ucan: probing device on interface #0 [ 1048.275044][T17290] program syz.8.2886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1048.351272][T17294] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 1048.575204][ T5923] usb 4-1: ucan: device reported invalid tx-fifo size [ 1048.588672][ T5923] usb 4-1: ucan: probe failed; try to update the device firmware [ 1049.102532][ T5982] usb 4-1: USB disconnect, device number 61 [ 1049.402143][ T5923] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1049.576259][ T5923] usb 1-1: Using ep0 maxpacket: 32 [ 1049.599867][ T5923] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1049.629037][ T5923] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1049.647636][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1049.647885][T16914] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1049.656832][ T5923] usb 1-1: Product: syz [ 1049.690593][ T5923] usb 1-1: Manufacturer: syz [ 1049.695446][ T5923] usb 1-1: SerialNumber: syz [ 1049.745187][ T5923] usb 1-1: config 0 descriptor?? [ 1049.751557][T17304] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1049.814652][T17323] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1049.829190][T16914] usb 9-1: Using ep0 maxpacket: 32 [ 1049.856508][T16914] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.007867][T17304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.057047][T17304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.101700][T16914] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1050.112072][ T7299] usb 1-1: USB disconnect, device number 123 [ 1050.128894][T16914] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.136979][T16914] usb 9-1: Product: syz [ 1050.144201][T16914] usb 9-1: Manufacturer: syz [ 1050.149120][T16914] usb 9-1: SerialNumber: syz [ 1050.161659][T16914] usb 9-1: config 0 descriptor?? [ 1050.187186][T16914] usb 9-1: bad CDC descriptors [ 1050.256898][T16914] usb 9-1: unsupported MDLM descriptors [ 1051.599057][T17339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2899'. [ 1051.959751][T17352] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 1052.011053][T17352] macsec1: entered promiscuous mode [ 1052.061596][T17352] macsec1: entered allmulticast mode [ 1052.078091][T17352] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 1053.321396][ T1208] usb 9-1: USB disconnect, device number 61 [ 1053.617776][T17370] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 1053.931850][T17380] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>P' [ 1053.961133][T17380] CPU: 0 UID: 0 PID: 17380 Comm: syz.8.2911 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1053.961186][T17380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1053.961199][T17380] Call Trace: [ 1053.961208][T17380] [ 1053.961218][T17380] dump_stack_lvl+0x189/0x250 [ 1053.961248][T17380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1053.961263][T17380] ? __pfx__printk+0x10/0x10 [ 1053.961282][T17380] ? __rcu_read_unlock+0x84/0xe0 [ 1053.961306][T17380] ? kernfs_path_from_node+0x2c/0x260 [ 1053.961324][T17380] ? kernfs_path_from_node+0x22c/0x260 [ 1053.961337][T17380] ? kernfs_path_from_node+0x2c/0x260 [ 1053.961356][T17380] sysfs_warn_dup+0x8e/0xa0 [ 1053.961372][T17380] sysfs_do_create_link_sd+0xc0/0x110 [ 1053.961389][T17380] device_add_class_symlinks+0x1cf/0x240 [ 1053.961411][T17380] device_add+0x475/0xb50 [ 1053.961432][T17380] wiphy_register+0x199a/0x26b0 [ 1053.961462][T17380] ? __pfx_wiphy_register+0x10/0x10 [ 1053.961478][T17380] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 1053.961500][T17380] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 1053.961521][T17380] ieee80211_register_hw+0x33e1/0x4120 [ 1053.961553][T17380] ? ieee80211_register_hw+0x1471/0x4120 [ 1053.961578][T17380] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1053.961599][T17380] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1053.961625][T17380] ? __hrtimer_setup+0x187/0x210 [ 1053.961637][T17380] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1053.961659][T17380] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 1053.961699][T17380] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1053.961715][T17380] ? trace_kmalloc+0x1f/0xd0 [ 1053.961726][T17380] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1053.961738][T17380] ? kstrndup+0xbf/0x160 [ 1053.961761][T17380] hwsim_new_radio_nl+0xea4/0x1b10 [ 1053.961781][T17380] ? __pfx___nla_validate_parse+0x10/0x10 [ 1053.961807][T17380] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1053.961834][T17380] ? __nla_parse+0x40/0x60 [ 1053.961853][T17380] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1053.961874][T17380] genl_family_rcv_msg_doit+0x215/0x300 [ 1053.961894][T17380] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1053.961917][T17380] ? bpf_lsm_capable+0x9/0x20 [ 1053.961932][T17380] ? security_capable+0x7e/0x2e0 [ 1053.961953][T17380] genl_rcv_msg+0x60e/0x790 [ 1053.961971][T17380] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1053.961984][T17380] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1053.962011][T17380] netlink_rcv_skb+0x205/0x470 [ 1053.962029][T17380] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1053.962043][T17380] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1053.962073][T17380] ? down_read+0x1ad/0x2e0 [ 1053.962089][T17380] genl_rcv+0x28/0x40 [ 1053.962101][T17380] netlink_unicast+0x75c/0x8e0 [ 1053.962126][T17380] netlink_sendmsg+0x805/0xb30 [ 1053.962142][T17380] ? rcu_is_watching+0x15/0xb0 [ 1053.962162][T17380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1053.962185][T17380] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1053.962198][T17380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1053.962215][T17380] __sock_sendmsg+0x21c/0x270 [ 1053.962233][T17380] ____sys_sendmsg+0x505/0x830 [ 1053.962256][T17380] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1053.962281][T17380] ? import_iovec+0x74/0xa0 [ 1053.962307][T17380] ___sys_sendmsg+0x21f/0x2a0 [ 1053.962328][T17380] ? __pfx____sys_sendmsg+0x10/0x10 [ 1053.962373][T17380] ? __fget_files+0x2a/0x420 [ 1053.962387][T17380] ? __fget_files+0x3a0/0x420 [ 1053.962409][T17380] __x64_sys_sendmsg+0x19b/0x260 [ 1053.962429][T17380] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1053.962456][T17380] ? rcu_is_watching+0x15/0xb0 [ 1053.962473][T17380] ? do_syscall_64+0xbe/0x3b0 [ 1053.962490][T17380] do_syscall_64+0xfa/0x3b0 [ 1053.962505][T17380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.962517][T17380] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1053.962530][T17380] ? clear_bhb_loop+0x60/0xb0 [ 1053.962547][T17380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.962559][T17380] RIP: 0033:0x7f074d18ebe9 [ 1053.962572][T17380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1053.962584][T17380] RSP: 002b:00007f074dfca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1053.962599][T17380] RAX: ffffffffffffffda RBX: 00007f074d3b6180 RCX: 00007f074d18ebe9 [ 1053.962609][T17380] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 1053.962618][T17380] RBP: 00007f074d211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1053.962626][T17380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1053.962634][T17380] R13: 00007f074d3b6218 R14: 00007f074d3b6180 R15: 00007ffe68c7b748 [ 1053.962655][T17380] [ 1056.768375][ T5923] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1056.960483][ T5923] usb 9-1: Using ep0 maxpacket: 8 [ 1056.990015][ T5923] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1057.000257][ T5982] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 1057.025168][ T5923] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1057.095518][ T5923] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1057.141754][ T5923] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1057.163976][ T5923] usb 9-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1057.165018][ T5982] usb 7-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.188528][ T5923] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.215035][ T5982] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1057.216718][ T5923] usb 9-1: Product: syz [ 1057.225523][ T5982] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.238821][T17428] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 1057.253760][T17428] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 1057.271432][ T5982] usb 7-1: Product: syz [ 1057.275956][ T5982] usb 7-1: Manufacturer: syz [ 1057.281900][ T5982] usb 7-1: SerialNumber: syz [ 1057.478899][ T5923] usb 9-1: Manufacturer: syz [ 1057.484855][ T5923] usb 9-1: SerialNumber: syz [ 1057.495886][ T5923] usb 9-1: config 0 descriptor?? [ 1057.501971][T17402] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1057.568285][ T5982] comedi comedi5: Wrong number of endpoints [ 1057.578257][ T5982] ni6501 7-1:5.0: driver 'ni6501' failed to auto-configure device. [ 1057.597741][ T5982] usb 7-1: USB disconnect, device number 29 [ 1057.744691][ T5923] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1057.784384][ T5923] input: Griffin SoundKnob as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input45 [ 1057.929359][T17435] input: syz1 as /devices/virtual/input/input46 [ 1058.271293][ C1] powermate: config urb returned -71 [ 1058.272601][ T5982] usb 9-1: USB disconnect, device number 62 [ 1058.276906][ C1] powermate: usb_submit_urb(config) failed [ 1058.277021][ C1] powermate 9-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1058.619450][T17454] fuse: Unknown parameter '' [ 1058.630686][T17456] usb usb8: usbfs: process 17456 (syz.3.2932) did not claim interface 0 before use [ 1059.428853][T17468] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.439261][T17468] [ 1059.441629][T17468] ============================================ [ 1059.447773][T17468] WARNING: possible recursive locking detected [ 1059.454052][T17468] 6.16.0-syzkaller #0 Not tainted [ 1059.459070][T17468] -------------------------------------------- [ 1059.465224][T17468] syz.5.2935/17468 is trying to acquire lock: [ 1059.471282][T17468] ffff88807f534d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1a20 [ 1059.482478][T17468] [ 1059.482478][T17468] but task is already holding lock: [ 1059.489845][T17468] ffff88807f534d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x1990 [ 1059.499698][T17468] and the lock comparison function returns 0: [ 1059.505776][T17468] [ 1059.505776][T17468] other info that might help us debug this: [ 1059.514105][T17468] Possible unsafe locking scenario: [ 1059.514105][T17468] [ 1059.521567][T17468] CPU0 [ 1059.524856][T17468] ---- [ 1059.528149][T17468] lock(&dev_instance_lock_key#20); [ 1059.533465][T17468] lock(&dev_instance_lock_key#20); [ 1059.538846][T17468] [ 1059.538846][T17468] *** DEADLOCK *** [ 1059.538846][T17468] [ 1059.547014][T17468] May be due to missing lock nesting notation [ 1059.547014][T17468] [ 1059.555424][T17468] 2 locks held by syz.5.2935/17468: [ 1059.560722][T17468] #0: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x1990 [ 1059.569694][T17468] #1: ffff88807f534d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x1990 [ 1059.579992][T17468] [ 1059.579992][T17468] stack backtrace: [ 1059.585987][T17468] CPU: 0 UID: 0 PID: 17468 Comm: syz.5.2935 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1059.586007][T17468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1059.586015][T17468] Call Trace: [ 1059.586023][T17468] [ 1059.586030][T17468] dump_stack_lvl+0x189/0x250 [ 1059.586051][T17468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1059.586065][T17468] ? __pfx__printk+0x10/0x10 [ 1059.586082][T17468] ? print_lock_name+0xde/0x100 [ 1059.586097][T17468] print_deadlock_bug+0x28b/0x2a0 [ 1059.586114][T17468] validate_chain+0x1a3f/0x2140 [ 1059.586130][T17468] ? is_bpf_text_address+0x292/0x2b0 [ 1059.586142][T17468] ? is_bpf_text_address+0x26/0x2b0 [ 1059.586157][T17468] __lock_acquire+0xab9/0xd20 [ 1059.586171][T17468] ? __netdev_update_features+0xcb1/0x1a20 [ 1059.586183][T17468] lock_acquire+0x120/0x360 [ 1059.586193][T17468] ? __netdev_update_features+0xcb1/0x1a20 [ 1059.586209][T17468] __mutex_lock+0x182/0xe80 [ 1059.586222][T17468] ? __netdev_update_features+0xcb1/0x1a20 [ 1059.586241][T17468] ? kasan_save_track+0x4f/0x80 [ 1059.586259][T17468] ? kasan_save_free_info+0x46/0x50 [ 1059.586274][T17468] ? __kasan_slab_free+0x62/0x70 [ 1059.586283][T17468] ? kmem_cache_free+0x18f/0x400 [ 1059.586295][T17468] ? netlink_broadcast_filtered+0x103e/0x1140 [ 1059.586311][T17468] ? ethnl_multicast+0xb6/0x100 [ 1059.586327][T17468] ? ethnl_default_notify+0x7c0/0x990 [ 1059.586342][T17468] ? ethnl_netdev_event+0xe2/0x160 [ 1059.586360][T17468] ? __netdev_update_features+0xcb1/0x1a20 [ 1059.586371][T17468] ? __lock_acquire+0xab9/0xd20 [ 1059.586382][T17468] ? __pfx___mutex_lock+0x10/0x10 [ 1059.586401][T17468] __netdev_update_features+0xcb1/0x1a20 [ 1059.586418][T17468] ? __pfx___netdev_update_features+0x10/0x10 [ 1059.586430][T17468] ? __wake_up_common_lock+0x190/0x1f0 [ 1059.586447][T17468] ? cfg80211_netdev_notifier_call+0x1ea/0x13c0 [ 1059.586465][T17468] ? consume_skb+0xce/0xf0 [ 1059.586481][T17468] ? netlink_broadcast_filtered+0x10c8/0x1140 [ 1059.586497][T17468] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 1059.586514][T17468] ? __lock_acquire+0xab9/0xd20 [ 1059.586527][T17468] ? do_raw_spin_lock+0x121/0x290 [ 1059.586543][T17468] netdev_update_features+0x6d/0xe0 [ 1059.586558][T17468] ? __pfx_netdev_update_features+0x10/0x10 [ 1059.586576][T17468] macsec_notify+0x2f5/0x660 [ 1059.586596][T17468] ? __pfx_macsec_notify+0x10/0x10 [ 1059.586615][T17468] notifier_call_chain+0x1b3/0x3e0 [ 1059.586631][T17468] netdev_features_change+0x85/0xc0 [ 1059.586646][T17468] ? __pfx_netdev_features_change+0x10/0x10 [ 1059.586660][T17468] ? security_capable+0x7e/0x2e0 [ 1059.586678][T17468] dev_ethtool+0x1520/0x1990 [ 1059.586692][T17468] ? __pfx_dev_ethtool+0x10/0x10 [ 1059.586708][T17468] ? dev_load+0x21/0x1f0 [ 1059.586723][T17468] dev_ioctl+0x392/0x1150 [ 1059.586739][T17468] sock_do_ioctl+0x22c/0x300 [ 1059.586753][T17468] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1059.586765][T17468] ? __lock_acquire+0xab9/0xd20 [ 1059.586777][T17468] ? __asan_memset+0x22/0x50 [ 1059.586793][T17468] ? smack_file_ioctl+0x24a/0x340 [ 1059.586805][T17468] sock_ioctl+0x576/0x790 [ 1059.586819][T17468] ? __pfx_sock_ioctl+0x10/0x10 [ 1059.586832][T17468] ? __fget_files+0x2a/0x420 [ 1059.586845][T17468] ? __fget_files+0x3a0/0x420 [ 1059.586858][T17468] ? __fget_files+0x2a/0x420 [ 1059.586872][T17468] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1059.586885][T17468] ? __pfx_sock_ioctl+0x10/0x10 [ 1059.586897][T17468] __se_sys_ioctl+0xfc/0x170 [ 1059.586914][T17468] do_syscall_64+0xfa/0x3b0 [ 1059.586928][T17468] ? lockdep_hardirqs_on+0x9c/0x150 [ 1059.586940][T17468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.586952][T17468] ? clear_bhb_loop+0x60/0xb0 [ 1059.586965][T17468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.586977][T17468] RIP: 0033:0x7fba2598ebe9 [ 1059.586991][T17468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1059.587002][T17468] RSP: 002b:00007fba2683a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1059.587017][T17468] RAX: ffffffffffffffda RBX: 00007fba25bb6180 RCX: 00007fba2598ebe9 [ 1059.587027][T17468] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 1059.587036][T17468] RBP: 00007fba25a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1059.587044][T17468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1059.587051][T17468] R13: 00007fba25bb6218 R14: 00007fba25bb6180 R15: 00007ffff4cd1ba8 [ 1059.587065][T17468] [ 1060.550982][T17474] netlink: 'syz.3.2932': attribute type 27 has an invalid length. [ 1063.374632][T15805] Bluetooth: hci4: command 0x0406 tx timeout