last executing test programs: 1m42.209117342s ago: executing program 4 (id=1431): socket(0x80000000000000a, 0x5, 0x0) (async) r0 = socket(0x80000000000000a, 0x5, 0x0) socket$inet6(0xa, 0xa, 0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x3) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, 0x0) sendmmsg$unix(r2, &(0x7f0000000300), 0x0, 0x4000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="758cfb284e7d24e2699474ad92edf352a3c486475b3e957b38a02a9697a7badac5784235a0dc67304a418f4fdddaddc09e8a27db71d5ce310ce10f036149699bdf0155e3f209aab6bad1235fe2dc96603cd21e9134", @ANYBLOB="000027bd7000fddbdf250100000114000180080009001e3c0000060002000000000024000280080005000400000008000200010000000000000000000000060000004e240000"], 0x4c}, 0x1, 0x0, 0x0, 0x804a8d0}, 0x50) (async) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="758cfb284e7d24e2699474ad92edf352a3c486475b3e957b38a02a9697a7badac5784235a0dc67304a418f4fdddaddc09e8a27db71d5ce310ce10f036149699bdf0155e3f209aab6bad1235fe2dc96603cd21e9134", @ANYBLOB="000027bd7000fddbdf250100000114000180080009001e3c0000060002000000000024000280080005000400000008000200010000000000000000000000060000004e240000"], 0x4c}, 0x1, 0x0, 0x0, 0x804a8d0}, 0x50) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd700009003e00000008000400080000002400028006000e004e210000080004000600000006000f0006000000040001800c08000300040400"/69], 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x8010) (async) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd700009003e00000008000400080000002400028006000e004e210000080004000600000006000f0006000000040001800c08000300040400"/69], 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x8010) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sysinfo(0x0) (async) sysinfo(0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0xfffffffffffffebf) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0xfffffffffffffebf) r6 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYRES32=r6], 0x3c}}, 0x8041) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) (async) sendto$packet(r7, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) 1m41.948415351s ago: executing program 4 (id=1433): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000100)={0x2, 0x0, {&(0x7f00000007c0)=""/4083, 0xff3, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x3}}, 0x48) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x108) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000003b40)) statx(0xffffffffffffffff, 0x0, 0x0, 0x800, &(0x7f0000003bc0)) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x900, 0x8, &(0x7f0000000880)) sendmmsg$unix(r1, &(0x7f0000003ec0), 0x0, 0x4008000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000c00)={{r3}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x4080, 0x0) writev(r4, &(0x7f00000014c0)=[{0x0}], 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040), 0x0) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1m40.971482831s ago: executing program 4 (id=1435): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) mlock2(&(0x7f00003a8000/0x1000)=nil, 0x1000, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x44e, 0x1215, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x800, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820f", 0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000080)) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a90600000000000000e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47ed000000000000000026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13750100f74f46cf801704d2da8b96c35870b233af0afcc436712e58ed25e721193af05a045ad3fd46", 0xa5}], 0x3}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x20, 0x24, 0x8, {0x8, 0x5, "3b069599d5e3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m37.883143444s ago: executing program 4 (id=1444): msgsnd(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000080822"], 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc2"], 0x14}}, 0x20008000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x6}, 0x4) r4 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000200)={0x1}, 0x4) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x47, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) renameat2(r5, &(0x7f0000000100)='./file0\x00', r6, &(0x7f0000000200)='./file0\x00', 0x6) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303034303030302c757365725f69643d000000000000d57757a013a7963b00", @ANYRESDEC=0x0, @ANYRES16=r5, @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r7, &(0x7f0000009380)="888ec1592bac40034794a136455f4c2e401253a526c7cd1f2de6b7f17c737b79866c6ea36c9f7918b758838393306cc90954b7000d6d42fc511fb3556b09d6161ce3a2b7aa78827c4528716eacd5ce63cea1a6016f17212f1e5cb10323725def3d86ac409122c48948944015cbbfbe12c3db62b3a47bc4b6f9b42f5e49c872adc2b575a11a3072e12a6a9af28acf783e46de19af768e9dab556f6012c7b2d68ccc6fad36bbf64255eeaaba46d5c90b4df84fc7f5e9c1ea110252d34529473c90cb68fb3efa09a485cf8aef4f17ff0038311fa7992ec8e64ed64d80ec07904bb1e507459a94ad5ab750e53bf7ee520d162a89ae53f43611016fd24236d29265cb04908ff8efedf6168308e18211a54a1ca04f829060ef1bdddfd5c531deef2f1c3850d975d2d0a9cb55058388be4f5998962251a7c3214a046150bc6912c864bc3d60da8b05d007e9b58fe21222d10a51ead5bae2c04993ad023e9b8841350804b1ebc842f1fb160d5454898f95da6107b53d7f52e0534209669972ac7624e7b3eb422cf25ae23758027d6ef538d43dad73b58e227562c948f8a2edcbafd54a401298f2dc64b6f18615820698bbe61d578f90eac03a0bd7f431816e4155b9353d9cf229b740f9f3bf9515b7ba8859766fbc53a864abf0ebf43814220669c4672c5d1ea44e3e9614d1d2766eca4d5c8a868cccd25c4ab5af5cb1ed943064261d313a4b8b2d104aad9acc725add76d42d16f6dc20b3bd60782974f076bd169a91fcd677c29aa5e2ff33424786acb516b2a9c6829ea1dfb950aeecc7a7eb592a976962dbf0516d9ed0bea079e02b4c78c500be28020836e24078dab3680ef89c8f93e0ac2ee58e014ddb41a375e1e88d6348160591ee0abe1a43f30b4506031154e77324e0ebf1596bf962e91d05dce3edf108a2433a609cde8978b6d3d9fe0feb5a90166d389af8df0f7169119aa07e3918e2b89961f385e60fe3c686290a18d65bdd3bd17be2fe951f8972963a0114ccf819fea5cd3304afed74c4730082fa06392532f5c2941ed1155fd307add6e102ae0a76ce1bdddc4169403288367d23e956f63a038e528c0b9e076b3369fa70741580014074eefb5bafed9fb88424b265f97ef21b1bbc62e547b3643f8dbd16d2c21b7d11f0628b30d681c3348d3d00c798b10c1c324e3a70a09428bf953d6640c2f2102ee4887e9f3f90e2b0b3bdb243ca904d20f1f62cf9c480bc357ab442b92fe3633c8ed4aade2db007d553d117aa9c98f07a64bfb38a6f49779304555da9eb0ac4cba40d3b5dcc491e5230ce40a02b51e32e480a678694185bc8f6ab0961d52f4bf82e822ea5e14e0df252d0a882ea04aafb8a5d0a923a636d561b046b1f8b995d8eb1ce2507fbb9fb1e0d5fe9c8b73a45f1ffb06b5cb26ae2b9acd5c0a87aefb3546b255e66cab74d9eb68321221546fc5332d1ce6357ec47ca431d9a7b79e6e0fb3d9a29813c1f76ad89232fae1108aab9806ee1bbf0c5a45940dd9a22214d2756c60ba7571d5cd66ba95224432fe0c0cc5087765c024cf08e81eac7875465846866e7fd97228d285823bc5a977b0d7d3d3f2f35196bb2ebc02687ebc839a7b100de526e556db4f7794b14453e8fa7a5fde170d4de217536b38a6a84c1711e37915a1d0f627737f062ec2fedc60bc6fa153942ddfafd462a4a9fa894405e5354eb642a4be06047816ac1923a9d41815e31872fd009e785c3efdae034f198ef95990549774e8645a973592c595293af7a497f0a3a1f6ae5d600faf14cdad05a7d7f519b8ef4d5683dbcb8bcc01a38905cecef63056dd834c9e83e34bc3904cee05e47b8b7dd461e7271d45cf3f659b5b75cde3c2f490aaeb6b0ae9def27c70fad78ed851dce2fb539a5dc3be4d4475342eaebe4ddbcb7f06383418a55d24da6afdba92cc9e09d35d5260ba5d31e7d8f6912bbf3f29c9e8dc19252943170187c4df22c3b8ae5060a6b70e4d9ece4472bc2ccbc4037b509d2f4843762e6075a0cb8965f6da1aa5fe4a9c3f18b321c737d3a69df958eaff69ff686a0536fafb91cf5df9db7e21d8be0f6dd0852eb5ed1ac7345e291240f601c7dfb1e034c6a81a5beed06310dfdb9ee5b17c0f28ad08a896afa58b9d3e797fed9aec9b6d5445d577b1e56bb680769883806ce3a91772bb488c58ab821220d31313367c21d954a84898a6e1e09e7bbe6261cb8e7b7a73eafc96abb514bf141b4748e76407c7f8fb643692b03442b0305ccc40f9765a6620d00ac2858e2cf39126ee67a9ce35fc3fba8ae0f494ba774048f1a0762ad6a1949fae1ad788f20cce5001943a6214d055e8aa7ace5742fbb143b4ab682424278c236ce600df67babaa64ab4d7ffb0e316e8289d863975512e03d9ed75ba516e81ad9081dd6caa4f750722baeb9128681f7e6a150dd2cb03d1ff81a43fbeaeabc375a350ed3d14ed076a01d65f31a240682ac519750e691c45896c9106342db1126a2a05ddb0f2f72f0a2e58245b4fceec11ac417671b4b1f8860c6ddb67de10a576db46033b5654d93d3d8ae637bf0cb80a0ecf0d598826a8e9bf2c6a25f5f17a8b510b93f28f06c7fd501fdecd84f96d448cfb3339fd237eb27cebacf930f2f0affc2736523ae10d905c7b55c713600df8d5248b74db73876ce27a23ab61cf01fe7981114b724dc3dedcd4fc39cb139f9a8419a6455d63f3f56d575379c7a02bdba68e3dc2e7edd71c5e9e8a6a90a52263b23537edb2530e44f40e63253436274586d6eb5204e4676647f282c2ef3bd97f68235e6b667d9cc777ed182d78f16ea09a1954379cb3efeb24aaf756c02670a2a867099b9d8583be685f651d8624fc94f6992cf06f064b9dccd2bf76b9ce7cabd020dff856f131cb49370b4612779292afa59a51712ea150f01194d6536fd00370b6c435040464370db2a99c24c9c3ec5827d14e5f99ee78ab9f6120ce104d695bb42c73ce2dfc79796f388bc63d900cea089871b37d01199f1859013f067aa28557edb6c8c3649e0d40247d49dea89a5170b6ada5ae86aaa36e9c0d001a079aa56b61bfb730a035aa6b5066ada6002636493e556978ab4cdcc15f2b62c314526e56c27083284aa35d5814d4d0c1753d3647c354e15379fcacadcca91163e0b2268b7ba5d9453d5906be1d697473db779a3fac407834cdae6ba24f2cfdceda091b6870a7235e0794868ccf2b8e5c59ed88a9366156482bde73404f2600ad0d25227cd2a2518d1a157b329d10d54b6c1d3dbd8d7a37dc08647624c823be31e5fcb7bd786565431e33053fd0438216d573546de3e9120b7e760d6cf45bec8cf49905dd264a6a95135b09a1d38ee1d08a676f39652f6afd281ad19dba784ab24f3c5e508a5d23ac031d776a702721e47d45f89893341b91f0a218f377d379f1d8a7595eda3ec44e8845c71d8491fe7a955896395de0b68f2df0457928e5601aea9d2179732b78d82b283889ba801e5363008994b90d5180b8a72eb32f3834eeca4a51b1cc9ed868b06c76d0493e6813625a3347d6ede39d240a3e02e7e87d040e5f91307509a47c2a3af5bf2c16cd19aa8097492b68950a7a563310e76fc0a0b01c22c096f8c4649d2fdcd665836c27f293fc1dced786b8e352080e058c4cbebac4308c28f3f7d4a370418e4241251ce270160be51519452e32ddfc86906a02c97dea6df9816ea5c9e6c5728a8a70e911eb2222dd8550a622e02dc9189d4d6e8c5a883f21cc20acc86141ecd3dcefdd44fed1e8b1fb8bd50cf32f1c40d39701e7edfccccda7488fd90e54b28f9cad4dde30df2aad29d8b2b733e5284e42a24bd3f11cc2bd2c1ea308a76f8df4ff12f027c495c9fb26a879e1ba30819af9869905f868675b71c0c61ec5e743206916ed791bcb085f623d6f0363db12dd49487fae07c5a4f79e2e93d2ce758e69959e8d3a4498cf95ee724fb8f6fc54ea8ee9e16c08d769c9be80dfbdd7be57e5b82135ede653e625784c4e5139cd998f86f74cda291f67b3a81cc411fa00256779f0182654f3eccca128b5730f2290bb30100f15fde886a3186310e9b4cfad2804ecc3e0522710df5fc99a743d2714a88b278e0e345804d52f126acbae22cad9fdd8b97bba0815b959a829113e961a00921ed5d9fcbc5a5e173e9a170222ff5fc2fa7c854c5be0a5efb2b6f5e66b591e7c29a1d6e41df57517cefc0dc0e5b8b720232cb3332a81e2282936cdea352a064fa1623c762510172ed2ab976924b0b8bcde03defe810b9b7713b16837b96f26aa5aef94c27a954713a0c5a4da815fa4dbc3edc844411395be2d5c9418379e63d9a0792a6bce1bfb1eb69d77e180b6d508e25cf1e5ad90671b3f3976dc8add802a96fb803fa82074fde10cbad81a16d7e7aa59a71d60f655a73540de400cf80de48e0e77c78578f6711d42e068ce4ea78859ba8fbd4703ef4812dd771cc5a71ce8b5acd00312ce09a3b456ca41139c9804b31a120a5226dc6be805bcc3ac284726ac838dbc363109a12e4b9952ccd85b35aef145f008917f676c5cdce60eb99fb9c5b3fa6fba456204857c9dcb58e5d38f553b8d0916eb8ac5cdf1ec3b89fe45f48ebf874b725c4e02d4e1981fc718f6f61cf6611e6ee70b9303dfaeb67575844fcec5f1dbbb5ea2d3f6fccfccea390bc3e8392063fd27cf2fd667f989f2cfa2572797dee5070e4fa46125f3f3a63c9d76d9d84db025b9429398a857a8731bb06b91e8455a4d091227e15dff6e1fbb36970800075b47f782a26ce47085eaf750105758616cb26884843b180f43ce769d9c61b85310872b5768c0d649ecbda8dd8169c5c3671700c27017c0a53564bb6f4e2e939333e9483655e2159097ea93238f418d33217205cef92ffa0fccf903a2473ed2e8719902d22266a15acbe378186b34c4ef3e76bbb9e2884611ac9326ce7c8da606218089953b9ef9b9c4eff170fb0d537fe51dec1aad2089900ef663fc2eadfa699f513bb5e62be6102e29d7ab05cbf6f31d68bd0e4a3d1be1c1b5d5388ebc44124dbc513e559afce33b1608b53565cf1d3e69623f9e1bd438df42b9efd583dadb0966f93668db2f10291dac7c4ee9064e72d04ce8154f20118c692bd88e7f60d6c655e87035e94995a8dd365581869cd281f09f1b337801bef1e58fd313fe2facb2805816a1d0cf2036e232403e159c14112c723a1e0638b7caa392a1bfde5bbb60f78e2bf1b99e9d3002f4d5f639bed33b546e461752acedbaaeb28acde8f8aaa417c7bd043a0e4a0cc506e82055b69a7dfa9f73ef75570a191a9af06225b482363265f3ccc00f52e743a01f74295db928ef8a2d5992594acd61780624151f5dc20bfa4802a2ed5d4c374d8aa8b22ba6afc05aece431c538ed06850d5a0711e6fbbee8246aa71a01e08b459efe32a6b3cc932e65b3d238b84c10e9880a60f2d83429e437fd90081fb2dd98ae7e850b165d55b4fc0b5a733ed742149299454a14bd59ebefebf4ede686f1ed6b9754714c921508cc6722a9068fe1e90a4dbaa6f0cfa9bfbee1ab719bb1b187e6fabbdd14a3c0d00c77d7c4c2d6738fb91a06634c49da7f15c2b66de13ae6540e439813a5f87a09b60d5fb8fcaceb498bee06410a1b22d710a30bd332c8a20ed2e2165a655d1cac4be81c4942187352a359d8a8c72199520834b5cf43c7c1e82c5a37e92ba946f4e60b8d6534c792b2ee3e07bc81a26125e01f6f32e13550950747a15840cfd7dae3780ca2ba464fe984c97b9aad4fa2928d43858c912c552ef0322ef6406da768caacb0b8b6951749c21ca448c834563859f4bd8c0d984d81e4956de0d7e6104481687720070616c9b75c78ee9a77891bab27e17aa168aefd2a5e8038678d6a58261cf7d6bf9c5c3a7c27db76cf08f3436e575405d41c88971e701cd7e56a31e95ddab5d450de7ba16d6ac586e67b9cf748e7a6e7fdd072efce922054d62c86c29454e2d7fa4a56bee28db47eea0be0ea3f9f56e551d9e340db027ad8c2faaa3e1a88a4cac518587512d111b30ce5b5334e1cb74c70344ac380b8e5fcc9f3a3d3600e6d7d99e76a7397faa5e35a232762f69f9a1aa547bc78b917eceae7e600a74d42bc4ced9ff7eb62f0404c0c689784df2d7646bf7f5d3809da701608a7df1672029a9fa5abc7559115f6a12c82d39b258abc13900a4536cdeb6a6d61b7ce7381fc5e08597f1043b5f9b4cba2e3d068473445d46c4e53a16269881f8e6ac265ffdced2a57b7fdac472160772426659ec2cd36f9c73ae1eb38aece9f335227590740901c41f4f600a18f62e50c0f4e79d6edd2c5872e671a2fe275ebe44c2098f2936ae5bf3ff5057913ec3502200866ae8942c95efc37c24636fef1010f14ad5162485d7543b2ed8e95b97ba87cba691fb5fa408c86a03f7fdeae2666cdc5b1bb25e18a12e3b3f3dd971c3236a462b996267c4eb8703b78b7301e5bebc42cdd70564896c780814856bf68f6f60abd214a5915ef059f9ecacd894aa5a91904e37cfb76c85f22c1f091e283374791f9d74b37d1de577783e3bfc90f224a6387b9a6b2ffe0db32bd2364d597fc0fc2ddae92e12f4f3dba04178b6751f59b8abec3d043e6f02abc27d86aedf4356f30fd5fb975697e56bcd6edee7617b0e4db8f303b7385fd9eee84a407dcf796c3899a814db4cc9da48f86daa60f604adb2c43dfd25e1de9dbadf82e7698d110537d57cbb0e40e1c4e6e2d1f64094c43b27c883e83a66ff265bb26a3ea21bdbdf9f4427304b5782c79fdeac15dab6d9ed5ea560833d58a4b1ef8280daa456594a203c50ea9521ddf6a95d382960dfbf25ebd67071e88fe76990f2f2df66baf0867ccbe6c7cc74baa60bad16c4ad1982be1a048d7a9ff13db075e04b19bdf4c579b6e4c53003437e6fc99f652a977ef4d2aeb6569e5b8b56bc5c1fb2bee65ac594571d68e4940dd953897ab764b51b07fd2107a2af14f3e1cdf25956707cbb35e5e231f9df1568a967f77f421b2db03fcdd3e477f6254051f2a1e027803e5273433c866b4baf78725f7d415429f624a594e820d1c7dabcd160cc4d33cd45acb132eab949b1428328a282f4f6a880ea86f7b25d347a8ae0e65c43c1a7430d480707a280b4afbbaa0373d47a66f52b8b0e110214d59b3a4c1ca21700e8c50b080799e24543cf616ab0179861247e0102149d0c2acb7a20437dd0f5fab4c9672330e126724059051525d72c0d17564f56ca0078c7a0fcec524b0ee23986ff1f44d30a8ac09688da43fa051a78d848049f5a325512ff788e1be5adab09dd3f9c5ba15f19d950b8062076dec014aa25c0cc1882d725f56d481d7a525c9dff225a448a68a9f41c474073e33ac7de052e052715c7763168c89681ee9c93168861436124b9ed71592a734226c86ae01b231031761a7bb721d77bae85258b5078a18376e5a2c2c20900daceafac000dc5e942640569ded7f64defb185d365007aa588c34079068859ccd122c5512ab2a08ea4885654bf95846be81a83f15b1fbae3c4a5f747aaaa29b1e80327649b85aa49bb10b5ba5e204269b03f086bf71b488e0b13084b7289e5d9ba010863b3c6f0f55e2c5f57aaaa5a7bbf043b8189974cb9712b356a459ff8ec546e1aebed8f4f60b6f93231b0eb44d3e07ff5ea889a537c9e5de97b6ea6fc95996c128e0be4323d1e5b818d35894b3948ed8907d0b2f311dfb052954ebdecc2e203c485ff7262ac3bdd03a56c366fbb397e24591b12f8c322caa0ccab3c626c0c15f1b83bf84120df3833d270430fb5b6c9ff83e81d9e027dd6c5ce38e39cb5e454010fa042b42dbd8a7306a964721ef3bb9ca206577e42a4784ae89ad7b70cb699187c53a71ca855c791145d7d7e7e0c221467325132dfe018cc92db2be133e45a7a0032b048b1086a3adf687c72046dba64f3b1ce52eff66c42a073a7d184ecd8e28a5fedc3c878910abaa9a70470baa15d4b245b09fe3d653301d85e5a1525c27710fbef8c7845803c377e1a3b3238701131ebd6545b68be921576f3baa53e91968e4bad19557eb2faf6a539201cd8163d0788bfae9a604e3da8ff76e2504e6dc4b614e8084367aab0ca5cefbad8142e11a6be857182f10fe78d6603bf49ff33843ed2f35afd637dfcf5deabb4f188f1c39dc11837dd7b81974cacc1fc15d52da7bf9792425ece96599cf32d51e5d25ea75daca0650f7148f31dfbc6acb292d7f663810c858369ba3fc11a039f4d8ea535ac92db095f097a817f85b7a8f2c133eb7f474e7443105733474afc025ce16a800550aa51cb27ed0cfda2727c4dd21d67650177b89554fbd620786af4c13672ac478bda924b8cb90b11430273d59280f288fdc5e9ae8793b9f3965cca4230a8b4d330b6d3511d3cc7e6e2a8cb23355fd5acb7951f0f6b1e78f035b85d6be546fc8ea9943b256886fe6d808b13db1de07af1cd79b50cc6bfa6e75259f1a2558aee4e4d61a2796e9d14f56a54db0e472f19ff350de6287b24419779aad69fc9f51d0dd9256ff85a4df96a9cdb404d5d9a7fce81f4555639fd0ecdd6f7fa44035f3478718ba4220e202ba75ae0f034e896e4a7cf0f4da1ec75ed60546a81e531b63111757acfa84d0a87ebfd7c6fac637f5d71a4d3fbe9983d4cf2c2946c5fbbc0b6d39ce650f21ad6266b2be7b1e7b1e279204805d80f569bf4b662159070096fbf6dbc7fba5d0e9ee471f82f76ab5a4eeeffefa783e8131ecd688fc18180f7a6e725d930a4cac75326941e7790ae9caaa9e7837867dcbb581c306255ac38de9a53877b0984157cadbfec98073d4a44c8d15c7b6d5db4b77241a81484fbcd7c7b2c9e4cd777f271fac17e46ac6f1764cd9bea3edad9e7f9aad5930fa686137f586005d589694ee60e39b78b33501431608369baf27aeeab55439ea4bcf719649ba1088e2f8eb6a576a50e43b84749b2c81649617ace0cccbfeb889715b80463fa3ca22d41913eb0d402536313b38118b5f50304d07732254a006696b16df89d261c1f89dcb1776a308af9b3bfaa418c637f4e66de441e89737319997dcc8346584026c1ad144a574ab9ef7c0ec72348ffd34179420324184e5ffe74987d045090fb81dbf9078c62959d531f38b342b4e3252f734e73b422fa9b709021d372191cb0fa92d5448fc9c855bfa2dfa27f5645ff54fe349fd81152ce38568dc873bcf10f5c370eb9e96ec28484aa875a8e4e6f032a633686fe862bed57db10ee9fc019a0cba0122bf724c191b83cdbcabc735405179af598d46d5fff6f70e99f355a2eee2dfdf618e275aac2c42ab79815f9de8c6f81433b55764b5df868355a9dd3a11664ab03f33caae1b456dc722400347cf971b013690d63f16c7cfd3ab37d7636c2cf2874c9d27f1eb49c41d7ffca921df59d13df32ea7579fd60f0ae04aea1c1dcf1d90a01533fb41bcdf989b1b51a2aff0f350e4e01bf44ab0d59fef3f9d9791048bb49ea512e9f395c7ae444e084ae019f55d6e29fcaaf875fe88c986f026ab6c115c4418d8a4866c65842088555923df9006ae49b2bbd7eb7d43350abef16b2bcd4b991ae77f5c3c767cd3823c2abf0ff03baf7cc073c2a14462c0852343594dd5a08004d52acc00ccf6cbf8b4a6a00234408eee74f40f1f40de814a857c7db80211f0a15822d4b9776ad33e3fe2b8b6a9b5aabcf55b752d74926851491267dd847f936ad4f37caa4a4d84cbf6a6e8c553e84eaede67f75c4fc6386a3599481cffb19624f1b9ca9f7af4e4fe4ddfa9f7dc1a3637427c3bd585938f06365332583cda295d7611a88411838f7b676b70b3e6ca717ce122b3cb2e2b28e14af56cd2d50c74dffd5c2980e200d7f0baecf7d1519327b109b2f05d00ee8dce207a1cd8b7c074e4ccf54a83b1e92ce25d382b91ca05ae2cb01fd62ff4324c54edd95b9fea615b43be5e4acfbc59c5699abc2572cfed7deaafcd7f4385fe4d289b3bd2dccf80a465961a48f4a4cfa6ebc355a65082ccebc2348ed1d512da3ded8a8fa6493f98897b7afa50094d3b0686aed571cdab5c1f81c675165a1243f20efd40d88c27854431991da3bfd5ea3b4d3849450e10ecef8bcd93d8fa6b493782ad80a392c676a7b0eaf7737b19fc620faf75eac1cc494eecfaf1a0c19e04e84aa13cb289c74da86d81fea88e810f14eea41f2a3a7c708f70c23be13f07673d5ca588d1bb64160e3c1afc681192506b3c291a9c87d40bad4b0f0413e9649d48af542719ea68ae205fb2e4fcb46a70db26efffc3fe16aaef1c3c6ccb499e923406fe6b0749227a1ad227f1dcb5c89f5d9e078dda4ee0df516747f91f105fab9953012bc0a1375e9280c4a35346f1da4c55637b45d83a2daaa1109e90477d6e4697127eb1c7bcc6e5c476caeb475933528336be5f365fddd24c3752e5cd5c7245c5780a013f094476f6f112b18cd6f5d62e39bc50d8c7c6f214b55bcee822967f5e9091872abe90f1b4a6999495f12741ec277d92e7e355651cb4fa06b4599b36f77c1d3dfce3bcfa970fdfab183c7143282d69e35c3f71fa9dc8f71c1d10e9605df11becaeaa0fdb64743ee63b7c9c3323f39e4e25a3b2c4dca40248b7e7dabaa0c571378c497a209ef4d9a39eee498b867f0e1ef6049ed562cbfeba8247f987018a2257f0c83008652de4e0ecdd1e0dab727f2eee0393e6fc04dbcd0ae0f170a8937450af5b65af5ec37189f121279c544ff8fd12446f1f9c43c50064257f986ccf8043fd98af1277965b124230aa4093df3e008bcd5af395e45ceaef89a598406c924e49a7ab2180aa7212a22711dbd0719d8cc12c872f16c46066378b241e616a0c8910596c3c982f0e5063a7c97232b436f219f7aa532643887ea7702f14dc6bddc6c2706cd0d01704f353ff5021e5ccedead949033eb11c1629cd6c2e80406905e60ae173a383ab6cb6e2075c36a8a74619fd9b898b98f84d394174b41d00b4a731149c4b73afc4278d52a449da6a16b042f3d588672b90a59b31a3d6842cc33187e633acfc6761747d4b916ce83b20b45cd47157b0caa11f13f8441a7ab324443a930401dff1f87cfd6f5b5c2d99b3200c34baf8a0be52e75aee8e79d6f07b59d355c064bed28130797ae500a6886c837e5aa887bb5ed461a4a0d464b14f0ee68722f5e83d2b97b112b37ed7439fde36d13f1909127989b992724db074dd0c324eb41fcf17f3ba17b75801d77981ecafd4b34e041d4d26cf45cdd1fe6094a165feaed0dd6ed9e13edfc7ead2b25b9acb1416a052b90822fcc24fc6452599ffde2ce41db00a3fd3cda300b3425cb9fcb9deadd1d39868ef6a44d98876bac74a2e70d88e8d4e32228ce32a78c690448e579f147a016828a9dadbe6fdeb31568744bd26b0c01f670b3bcdd7b2e6fea186a68db7582e3ac56e7d819e2501bad9471d5306d44cbc2509874a9084874e7e517269de55c8ee74044124d53a15fcf31aeabc45bedb97a5980686392819f0460e8a4fe7f495d77ac14bc2c1646c0230bac484469aa0ece933b54e71cee20023be3dc49ac6ecd4320754cbf3b4ef7fd7042ee63c94c857e5eb03bac3a9ea04b4c6095483133f5b5bb8ba8bdcc7aa44390230ad7d52507bb3a84901766", 0x2000, &(0x7f0000002dc0)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x4, 0x0, 0xc3cc, 0xed2, 0x9, 0x3, 0x0, 0x0, 0x4, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x2c, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7174}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={r9, 0x6}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x38, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x4, 0x2, 0x0, 0x9, 0xfffd, 0x7f]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000000) 1m37.689061291s ago: executing program 4 (id=1445): syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904000002ffffff0009050b0000000000000905ece2"], 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x81, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x2, 0x1, 0xe, 0x80, 0x6d, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, '\x00\x00\b\x00\x00\x00'}, {0x5, 0x24, 0x0, 0x6f}, {0xd, 0x24, 0xf, 0x1, 0xf, 0xff1c, 0xffc8}, {0x6, 0x24, 0x1a, 0x2, 0x10}, [@obex={0x5, 0x24, 0x15, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x2, 0x7f}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0xe, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x40, 0x2, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x7, 0x14}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x6, 0x0, 0x85, 0x40, 0x8}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x7, [{0xf6, &(0x7f0000000100)=@string={0xf6, 0x3, "7ed515a9f8df902257e47bea2ddb0e3e9c8cb106f99b478555bcca1da83c03ca1facd407e029dc3e0d0770f56a1e0a6fb3b06f190854f34d55c35fb2bd66ed3c5a9f50fa1ba7c9f2b481df21bcedff5ca6f14555ac2de76ae859f05fa9e2817fb6af47aaf88f76923bbb00a10fb23d9944fa1d810661696352fe53790aa6b85cdd7b85d6da95447e18a14e7b9e7ea4acace25aaa446efc021e895eeec59652c6f890768b27c3a5b85ef48bcb9d68ff56201f6b1225226819a490278af926395ad6a1eb5a207e42309b09ab6705a99a602e20ddaff1e012614f9116115158e93488849df906a511063a3ed38aa7b335be4240b9a2"}}, {0xab, &(0x7f00000005c0)=ANY=[]}, {0xd9, &(0x7f0000000380)=@string={0xd9, 0x3, "4e8cd671049a3b92dc9ec7aa6e2737e0779e1d0523ef6e031023b93fe540208e3b769f22a6ad5cd741a7764a19a2c51bd7c181dd934fc14bd1c4aba198fe2d1a414df2f17ea41dea672f2795c33958724678a16fefc20f645ffd517be452d7d38123a57307b0fec40eed69046e3d2882a6c90400764993c4b88e3fb400eb2a0f57a70d60729e1caadacd4a448446ca0b899ae76058cb82c94225ff808cda65f63f11e37aff0af7c19dc74593f2ebd03af3bb9fd47edca35fa160c2334891ded4dbe5e275545c5c7e2742a24a0c6dd56242149715496012"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x416}}]}) 1m37.462093377s ago: executing program 4 (id=1446): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x100000005) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card0/oss_mixer\x00', 0x8081, 0x0) ftruncate(r3, 0x80000001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0xff, 0x2001) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc038563b, &(0x7f0000000080)={0x2, 0x2, @stop_pts=0xbd7}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x6, 0x0, 0x3}, 0x1c) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r9 = io_uring_setup(0xcd7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0xea5bc50b6199d77e) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) 1m37.208016597s ago: executing program 32 (id=1446): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x100000005) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card0/oss_mixer\x00', 0x8081, 0x0) ftruncate(r3, 0x80000001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0xff, 0x2001) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc038563b, &(0x7f0000000080)={0x2, 0x2, @stop_pts=0xbd7}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x6, 0x0, 0x3}, 0x1c) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r9 = io_uring_setup(0xcd7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0xea5bc50b6199d77e) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) 7.392964601s ago: executing program 0 (id=1933): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x5, 0x80080) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe06fe05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000003c0)=[@set_irq_handler={0xc8, 0x20, {0x2d, 0x2}}, @code={0xa, 0x7e, {"b94f030000b8c9171062ba000000000f3048b8bc000000000000000f23d00f21f8352000000d0f23f8420f01c42e440f682bff6309f3640f06b9800000c00f3235002000000f3066430f3882933600000048b8f8e06738000000000f23d00f21f8352000000c0f23f8470f00da"}}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x3, 0x10}}, @wrmsr={0x65, 0x20, {0xc001103b, 0x200}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xaa, 0x8, 0x4, 0xb800}}], 0x12e}) ioctl$KVM_GET_SREGS2(r4, 0x8140aecc, &(0x7f0000000280)) 6.889087627s ago: executing program 0 (id=1937): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = syz_open_dev$sg(0x0, 0x0, 0x400000) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001002dbd700000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000019c5cbe4100efef20b2b428d0000000000000000000000000000fcffffffffffffff000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000100000"], 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f11", 0x1b}], 0x1}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$PPPIOCGFLAGS(r9, 0x8004745a, &(0x7f0000000400)) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="68000000030605000000000000000000030000060900020073797a32000000000900020073797a310000000005000100070000000900020073797a31000000000900020073797a3100000000050001000700000005001500070100000900020073797a3200000000"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x40) 6.796285891s ago: executing program 5 (id=1938): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x17d0, &(0x7f0000000240)={0x0, 0x0, 0x80, 0x0, 0x4}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x87}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x3, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r4, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f00000034c0)={0x2020}, 0xcac) get_mempolicy(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2) syz_usb_connect(0x0, 0xf5, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505240600010524007f000d240f0104000000080000000006241a03000a052404"], 0x0) 6.360833603s ago: executing program 3 (id=1939): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000380)={0x0, 0x60d3, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x28, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000009c0), 0x42, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r7, 0x80085610, &(0x7f0000004100)=""/42) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@nl=@kern={0x10, 0x0, 0x0, 0x80000}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="1006000000000000ee8de7932b326f8a3164ae439862807a1589836c734d2341f7", 0x21}, {&(0x7f0000000400)="c23946040f6000ffffffa31700000000000000f198d6321bff114030acdde61626aa1a692e3fd74f50d24f28c8c47099a888ad697fe3a043a195c4e82eedc8776037808cb6f5d30d716da509e56d2c5d09ebc17151928b53631a0e5ce83b437096282bfa3323470c344d3023dd365e3fcfc44cf124c43af27ae242daa124e228f9184cbe30622cfbbc1a475936faea36121101642bd29bd1afb178bada5d7ff64652006899255deb51f3156b98ed0b1a7e", 0xb1}, {&(0x7f0000002340)="b72abab9439ca41f5cf14d6435575ba774ee5f5c23ff2f5176f5773d08a15668ec280cfe4ea416cf769dbf978a8191bbe006e0da50029176c0f24e3ff4d3e895a2afbf52cef2fe1ca31edd842b126ec4be67e6e3624b9ddf806fc146c645ec1d37fe7e3b025c156d5d520104b53f7fb2af436201cfd5dca170edea5a190e4786bfaac544b60f514d7ef420526c467f14790dcfa5ab915d7dbcdf2765bbcad014c991f8b829c79f53586de79f0b987ad796f9de4a6e53136a07a39ab1f5a2ce30aded70a9b72d1beff7e8b6405fd6331e5635ee71e809be2d58f412dcd7b2e856d692dbfed19045ff13244acce351b6e450395568063569c71ea80a04f83fbe6ad1d0862fb97f816576c4844da65d751ee1fdc522ae1158670de297cdb2117bc0adc1486e016a6bcc922a162fce6a9ecc8c42b0c44c566004eda037864e5f339bbb0998cdaf2b8e49ae003659bc033668f7c8e550197ed95c420461254ba1883dbd9403672d579cee85c37f103ee9a350a768286017158784baeb063c8c684b91b022b0db2238b679092a1f6909f0cd9228500e088f5cc7bac4c0dc56e80fedac93554aec79715ce02e8bf3fcbd70382f619bfe3dcf06890d8542022ee58bdfb075d319c9fc8474cadc8de5c3dd3f682d3f68324d0af7a727064053ad84c94643eef190783c616467628f84620044c084b80e3e57bfcdf293c9c36b4474a52398b35e49e2ad4a4ac090bffc5cd27d3c69b4ae5f841d5b0766ccd36d25eb58d8f01621a05744b79ede39019ab9d7a1946353d8f3b7f833ce1a102a8c97a9e3f32138ffafd305448f2518ccdb7eef594a890eaeaff3f876f742fec22669a97085ed93b18228ecbe9e354e8f69967ca749fd2b1cf026665ca912e3fc0188b294519078b46676052de4fe22798290bd1e232c9791fc01ddb4ae776b5769143df2867042e8a3ddfa8e786bd8a244076956d4ab137939ad381650dd4fefd2b942a98d6f2edfd7019ae473e7608647b86d643e8ff3d7d4e89ed826e4b8c6e8fed224c528d805ade85c5b45261b2692c0f403dec050bd973b0999df214689f4402dd1598a16b0c7671e5e204a00b06376ddee7cb99292a8b835c0b451642b71f2ffa1aeea56255817b2384bfe4f8213ccfc1f762f250592896102e5f6d34cdd726bc0f86af52fd7c4483d32e23e5af770e960c7445b8e67b6086f0cadcd22d0d4bdadc31b5a94dd687379dc6e078210ccc71f8e67eb58d330394425ab17e55d1ca8f868f6bf738af291d2293c3dfa2ccff25061ded22878b3cc6532d19e5a00d1f0f1b9de35305fac2c6cfd5d77a2b02618735b7d392738bd5cd3eabb7039c790a9f193913f16e06605d405d6a0cf0011a2e5f935d8563fef1722692dd266c3d320b9f5eeb2a4b2f72155522f0ed72ff1efa0b6ee78e70d3d45241609e7f87d7bcfe1af71159baa11ad667a0ead3986b2b06500ba2615ee966ea86ca68d02de4802bd9ef18dac5ba53ca98b90df49ef4e3268ceee538973620e5a60513ea330989642626420b67dceebc569478657aedeb62c45b079348796923ad1fba5a99e6b150cf97ba2a570150053309c6dca7fa352fa1678c9b919fbc47ae0a84175a7fc25a00fa5888cb017e8d8225fadb29e34bd3c5bbccfb22a83255fec3967c991d5b3e6719ade82fb7ef85c8a4b9e7ad8ef2a3a7bc78de424572224affb1f9e0c5a969e61ee2ebb4f247bfa09384bdad04438f2efbfae303d47c3afe7e8d3a157b2a6f37572ea3ecc441dfb208ba755f781f144e58d80aea590abcfccbe8678ec6de47511f9d61cc408cbbe90eeab2cffe6d1a48dc3eb4e48e228fd43cafd7ff2c85c3ed52e99fe16887be28fcd2cd4ba4cac414c92c96294fa7d628e4356c748c173f790a7f30071d0bd53817c78d163249c7402b222b8f28668cae7afd17b97dbaf10b75b61409ca6f5b285d1ab09207c5a91c68b0d4b5da6d6b5a495c8debd7f4400e56d9e22d1cc330f782f2b5441a31b9ccf35aa1a151219cdcff5ab8b240af5b5a751eca67773c057412a935e3a7a367b2bcd28463904ee040a586d6f4f969cee56d55b6b4d97d1fe93b67e2f6bd47925054c4702ec8969a1a6211ea8f6783ca0e8ae333922ce19eceb24e2ff714a0208d2489a62f299aa50cdbfe5a826e872ab231bbddf5bd2fca92d4460379e05e13ff34a200fd921dcb67a002873bda8d86536cddaccb54eb72dd4e399fe9195ad5574ad85d9ed2eaae4106234f0a8db05a230ff377b59b54fd0919d1b86b938622ae6098f003db7f4d45d6874f54c33064ce6184dccc99fece2d994e9572d4840b0cbdd704fd70b4f625912d48a512339f883533768f09a4f614583dfb72defe713ee38f61184df279461b7d35becd8e67d01f015554d5a69db373a662085733d09ad9153e7d432c94f872ff7cd72995b3a581ea17722ed13a191b366208f75661112b1a7d42c252c907488ca8dd8f819d4618b0053d4bcddb3b5975cb8615ebc472e052552ee74d5253174a2b0cb96e1eaf6349b6c39be975123ee72b0ffe1367df7aba54de26c9135a3422d21067034551be5efc5daf8b8f59bc725e4fd171378fd9f16a785f1b0378823c85eec521e0b2aca70b7b72b719a20eb2fb0addc0b05851c8e181607f49dad7323bc255309097584c2099574db1ed7940fd16796aef19d30acd714dc1f898716df64db87d852eddf2f86e78fd7fd64868b4cb6cc626efcdea49c4a2779a0e777bbe23968e14233a810d9883680894de93023a8deae51ccbf32e6d1e53618ebee95c761221a33bc3263fff0f5ae23e14dba0418cf3f31effcb36956e06c57a17620044260419a208ae1d2296ec9472d44be74a8ed0a33a23181acdef8c7d2695ce9485ed8d17d9f6f30b9b128ee0ba15c42cbf6059bcfef008c09db8855343f79c3ce1c4d79077c8a62237d4e400a5aa88e7424f2f99df6c2070d6ed071f4968376581e20e52d64e9c4f8a6f73bb33f5b6b62c1deecc85bf789565fde14e4454306ed8f09af08afb360ee4fb40dd5dca0be43ccff75e5c0ef85ea7c521cb4840d61e99e1ce4661e721446d5a571cddffbc3643ec9b58237fd416376906bdca09485c2c80f82b23e8e7bbf22035fdbcacd804ae3771fd616901184ced46987d533017eef717e9b34a5531c3efe2d77c9b6cb0617382d69951545378a4118e71c64a1f16d096a8f933580922083d0536b90ae1715c63f682e8241b42e1646b0c52e34aa9c91efe2b6b787ce0747d4ff0dd07d6ebc9ce27e0ef35705eb7b78763a9829b464523ff3ed9078aff6ee29e6e7a59a5243825e8bb9235f8e49a9dfb5932536666c3dc75b29e515dbca4c84268cf23cd7b6da6814328a3cb26d7b1d6c28e20b36f9a2c9e2fcf663c314f72f37d2b8f405cfc686a6b35400435be0eab01709c2c4b3005491cbb0b560e33547b77ba9f25f01b194e20534199a3786ddfaf0a75aafb65cd4df4da7b5f98fe72a8bc7d045339fd41508cecca791c717a10d4fed8aa69eec80955bd899a6f8aaf3411be40568149e631ccbe17c68f85e87b58da81ba78def8b1a48c49b2dc7613f7d6ea8b158bed077666d37d1caba9a23b7cb2772e780f70872113e5bcaebaf9f9499f651dc894be3bba1e99d58b33d60c0eda397df91d7cf9fb072f247fa9a9f59c4f59c4284a3832ff0a1f9ce8f6346cb5c08a9dcb2851c7f169af688fc13f00cf9519ade547671698caaa3f4d4921fee83753b9ab0875707000043eddb5b87bec86aae023c9571b8e389ff3f4c692b6fb19686105249ce033116777d919ceb4559a67ee6b6ad9d4b53d2be24315429de3bf201107fe7dff9cbc92dbf9173391d555b0a1b8ea3252fd7d7fd15d8a3cc70cecdbdd43c4edcc4bb2fbbf646d5ec7dad0d3156a513d14184e0c316f8155e774f7dcea485f904828edf28510d692b66b1500c5a704371c2188a2812bd323de012f36a79674082b5f5e9f7f4ce1a75ed854b71555e9fcd1f0322c22a9e543674c79a74404e08e61860f505dc56e1b52977b9a9af18be4064b5f6aa7c891382bbbe65e70a4cee33176570341a525fb6b25c0b20bfa3f2ee4a01584f259f43c3b63a2dfc376f435827211379ab3ca8912cbe01e4f837920666fbda682f6954d1c156f21e12547b885f485c38f62e765013144be8ca92b1d4872790a5c02671517f6a8f0ceb247e08c64268ad8970b57bb6d077c9b8ebe7fb1183087c9a3baee06100609204be588621253b9b120c08db9f28c2d38c9bc3f59018bb7216d73186048770d1e556faa49df23a40a64b40cdda2041dccf5619db09b7a7795fd7eb631c0e0bffc3b64422bf6acd84b7fae8bd05b057260a4d7c4851829c7bbf0b6f27c5db0ff10f42df3528f79dc9bbd591965259cd0389deb124b1fadc5dfd3ade9742d29261379ea3d98929512371dec991f0636fbda5dac355a04e363beeb4751781d9cef3a0b6ac6500895d223ad43ed75cac8b0a868253fffa10bf6c2de99c687fd056e075cf0632b6d8ed2263ca08ad95b6f335a3b6d8ab7801422ac8597441ac1bbe289b50af31eb221d19a2d3177d4ad1056d616295e89471e65d811b8fa4fe2c0c12793f43ef7e75c7f657f6c26ca9cbae63ce99301069ab257ae77c38778d35afd326d569c626a68f3904b2c376dfaa05568892f346f86fb05e71fb751e09cd22525cb63512a7d2e4670bd31109b87818278e66dc73fa9667e35c5bc6588cd36d2b62592a4103803d93c194f8edd5d20c6597231321b909bbb3c1d13408e5cf27728883e333b391222e6b6665454892dfedd17a1066f1145163e1a31ba9a3e3cee925e55d794b89462a0a092a639ccd4a2451400bcb68224c87c18f0bb39ff721cc598e686b5fef169bc30f9ec6df397905f8340f6ae7ad826aac774cc46bfb9dfe8192e9ef10e8355d7c2810269eb73c7ecb8d3ffa33437142b8e596cdb778cd3cdda5bbbd09a8ea919929adbc63ff1004490c45a9ea59def65fabc884c39beac1b74a218f59c5e31ba85dcc4b8bd81d7a66d8aaf0edb64b505f760442e16fb7f07a069aba88601c3ace27762cef8196da3d44b14796b04e7fa3bab37209190a1de6e6ecfd99353279ef643766814fa7fac7254eba59bff3546bf21afc7445a4f1bc92c7b013f34962ff029e0f2926acf6c8a25fecea5b0b810656c981535492a2a4159dcfd0bf98085dc9612159fa0ad837a22eaffce804053662897931ef3eacbf5a663175acc306eb07000000000000", 0xe89}, {&(0x7f00000033c0)="d6d038091fcf458c47fa6bd5a8edbf8f968178124964b4b012f804", 0x1b}], 0x6}, 0x40000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000408000440000008090900010073797a30000000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x4804}, 0x40400c0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r10, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) clock_getres(0x3, &(0x7f0000000000)) r11 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) write$binfmt_format(r11, &(0x7f00000001c0)='-1\x00', 0x3) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r6, @ANYRES16=r6], 0x0) 5.108121495s ago: executing program 5 (id=1941): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x4593}]}}]}, 0x38}}, 0x0) syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000006900)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x1, 0x8, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5d7, 0x4}, [@processing_unit={0xc, 0x24, 0x7, 0x1, 0x5, 0x2, "10d15ad4a4"}, @processing_unit={0xc, 0x24, 0x7, 0x2, 0x0, 0x60, "00f3da2360"}, @feature_unit={0xd, 0x24, 0x6, 0x6, 0x2, 0x3, [0x6, 0x5, 0xa], 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x4, 0xcb, {0x7, 0x25, 0x1, 0x0, 0x5, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x2, 0xcd, 0x40}, @as_header={0x7, 0x24, 0x1, 0xb4, 0x30}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x2, 0x8, {0x7, 0x25, 0x1, 0x81, 0x6, 0x3}}}}}}}]}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x4593}]}}]}, 0x38}}, 0x0) (async) syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000006900)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x1, 0x8, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5d7, 0x4}, [@processing_unit={0xc, 0x24, 0x7, 0x1, 0x5, 0x2, "10d15ad4a4"}, @processing_unit={0xc, 0x24, 0x7, 0x2, 0x0, 0x60, "00f3da2360"}, @feature_unit={0xd, 0x24, 0x6, 0x6, 0x2, 0x3, [0x6, 0x5, 0xa], 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x4, 0xcb, {0x7, 0x25, 0x1, 0x0, 0x5, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x2, 0xcd, 0x40}, @as_header={0x7, 0x24, 0x1, 0xb4, 0x30}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x2, 0x8, {0x7, 0x25, 0x1, 0x81, 0x6, 0x3}}}}}}}]}}, 0x0) (async) 4.647326126s ago: executing program 0 (id=1944): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000480)={0x8, 0x4, 0x4, 0x1000, &(0x7f0000001280)=""/4096, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x84, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x48, 0x16, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3ff, 0x6fb, 0xffffffff, 0x88a8}}, {0x14, 0x1, {0xe39, 0x3f, 0xd, 0x8100}}, {0x14, 0x1, {0x6, 0x6af, 0x7, 0x88a8}}]}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x80, 0x2, 0x63, 0x4, @local, @dev={0xfe, 0x80, '\x00', 0x16}, 0x8, 0x7, 0x1, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'gre0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x7800, 0x1, 0x708e, 0x4, {{0x26, 0x4, 0x1, 0x3a, 0x98, 0x64, 0x0, 0xee, 0x4, 0x0, @remote, @local, {[@lsrr={0x83, 0x2b, 0x2d, [@rand_addr=0x64010102, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x1f}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @cipso={0x86, 0x1f, 0x2, [{0x0, 0x10, "e5883711ead49b4023e8889e21ce"}, {0x1, 0x9, "6ad7478efd737f"}]}, @ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0xc, 0x9, 0x1, 0x0, [{@loopback}]}, @cipso={0x86, 0x15, 0x3, [{0x0, 0xf, "d5866d8d084d497b52ca53605d"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x1c9, 0xd, "8a4c90623d7dd6d52cf65d"}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, r7, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x17cdc9699378dc7d}, 0x40080) r10 = msgget$private(0x0, 0x4a0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r10, 0x2, 0x0) msgsnd(r10, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xe3, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.596563537s ago: executing program 2 (id=1945): socket(0x11, 0x3, 0x1000000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0xfe, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000040)={r1, 0x3}, 0x8) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') epoll_create1(0x80000) socket$xdp(0x2c, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x440180, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r6}, 0x18) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f0000000300)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r9, &(0x7f0000000300)={0x11, 0x0, r10, 0x1, 0x8, 0x6, @remote}, 0x14) syz_emit_ethernet(0x92, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) 4.156432761s ago: executing program 1 (id=1947): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4d, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000000), 0x0, 0x0, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="672e670fc7baf5ceb9230200000f320fc5b0040000000f9a000000008b000f01cfc4e21d4501660f38823d0e3000005224020f01c50000c744240600000000c4e17de69222ad2eec0fc76e04b8200fae8266bafc0c66b8004066ef", 0x5b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000005c0)={{0x0, 0x0, 0x80, {0x2000, 0x4000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e516"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.546841118s ago: executing program 5 (id=1948): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc005}, 0x68081) (async) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000002c0)={0xfffffffffffffdf2}) (async) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0), 0x404100, 0x0) read$FUSE(r4, &(0x7f0000001500)={0x2020}, 0x2020) (async) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r5, &(0x7f0000000340)=[{&(0x7f0000000140)=""/144, 0x8c}], 0x1000000000000360) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000000)) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="05f300000000000000002000000004000380"], 0x18}}, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000000c0)=r6) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000480)={{r0}, r6, 0x1e, @inherit={0x80, &(0x7f0000000040)={0x1, 0x7, 0x2, 0x2, {0x11, 0x6, 0xcd41, 0x1ff, 0x2}, [0x6, 0xd57f, 0x3, 0x77f0ce17, 0x8, 0x401, 0x6]}}, @subvolid=0x7}) (async) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/mnt\x00') r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000001480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000071402002dbd7000fddbdf25050054000100000008004400", @ANYRES32=r3, @ANYBLOB="05000008004400", @ANYRES32, @ANYBLOB='\b\x00D\x00', @ANYRES32=r7, @ANYBLOB='\b\x00D\x00', @ANYRES32=r8, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 3.440496312s ago: executing program 2 (id=1949): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYRESDEC=r2, @ANYRES16=r4, @ANYBLOB="01002bbd7000fddbdf250b00000008000300", @ANYRESDEC=r3, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4040004}, 0x20040000) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r5 = syz_io_uring_setup(0x239, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r5, 0x47ba, 0x100, 0x5, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x1, {0x7, 0xa44}, 0x80}, 0x1) 3.411387648s ago: executing program 1 (id=1950): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000045ae8a659caa0000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff"]}, 0x108) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x34424752, 0x0, 0x0, 0x0, 0x0, 0x2, 0x779acd4f0ad4811f, 0x0, 0x2, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000240)={0x80001a, 0x1, 0x1, "3a8e07ca5de21f00713c8fa98601acc620004b0000002100", 0x3231564e}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x68, r7, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x7, @media='ib\x00'}}}, ["", "", "", "", "", ""]}, 0x68}}, 0x24000000) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 3.249385618s ago: executing program 5 (id=1951): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x104, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xc0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x8c, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x58, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x27, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aa"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x104}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = inotify_init() r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r4, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r4, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, &(0x7f00000002c0), 0x6, 0x0) ioctl$EVIOCSMASK(r6, 0x40104593, &(0x7f0000000b00)={0x15, 0xe2, &(0x7f0000000a00)="5085e2f85fffb521f1ba3e5ad17d84797d872618cd22942d60e203fe85e89138c028b05af283f35f3ac1cbad695427d2dc6e0a3617c0bb09bd7b8e0f7a18e65808b3b6b283c3cbc770a916cac6fd73a55e18110581344523a2464888b5cd61b43c7ebed0fa2b0509af796335a21f3e044526bcb85541105d66b7b18856585bdf53103605fe8dbd095c8f854530df608bc5a7d38c45048ce5a49a38cefc6cbb62be410db36bf3959788a85c2f5cdb3c212f0fbe9f4e3be606d273fa041a945c1ad2d73790bb182d7bddb488aef5a1f9307b6d860489dffd4ee18e42f5252e49b51cba"}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r4, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4}) close_range(r2, 0xffffffffffffffff, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000180)={0x40, 0x3, 0x2, "3283"}, 0x0, 0x0}) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r9, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x6, 0xc, 0x3, 0x9, 0x1, 0x4, 0x1000, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x5, 0x7, 0x10001, 0xffff, 0x0, 0x4, 0x0, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x3, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x935, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1000, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24e, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x1, 0xffefff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f15, 0xc, 0x2, 0x9, 0x7, 0x5, 0x5, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x250, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x1, 0x8001, 0x7abe, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x3, 0xc92, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x140, 0x2, 0x2, 0xb, 0x4, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x4, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x6db, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x200, 0x6, 0x2, 0x1, 0xfffffff3, 0xd077, 0x4, 0x3, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x1, 0xa476, 0x5, 0x80000001, 0xffff, 0xd, 0xfffffffc, 0x6, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000109737107d071004c1ec010203010902", @ANYRES64=r1], 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES64=r10], 0xc8}}, 0x10) 3.172624302s ago: executing program 2 (id=1952): ioprio_set$pid(0x1, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x60, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="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", 0xfd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r2 = syz_clone(0x2046a00, 0x0, 0x0, &(0x7f0000001840), 0x0, 0x0) wait4(r2, 0x0, 0x40000000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000df80), 0x0, 0x4000001) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) r4 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$dsp(r4, 0x0, 0x0) write$dsp(r3, 0x0, 0x0) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) 3.112593248s ago: executing program 0 (id=1953): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000088, 0x6, 0x4, 0x80000001}) (async) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000680)={0x0, 0x2, 0x1, [0xfffffffffffffff7, 0x2, 0x1, 0x80000001, 0x5], [0x8, 0x0, 0x8ee0, 0x5, 0x3, 0x5, 0x9529, 0x6, 0x3, 0x5, 0x9, 0x0, 0x7, 0x3, 0x9, 0x8000000000000001, 0x3, 0x1, 0xfffffffffffffffc, 0x8fc, 0x8000000000000001, 0x1, 0x6, 0x5, 0x6, 0x9, 0x3, 0x4, 0xfffffffffffffffd, 0x8, 0x7ff, 0x8001, 0x3182dbb7, 0x1, 0xee5, 0x9, 0x0, 0x2, 0x7, 0x3, 0x8, 0xfffffffffffffffc, 0xb5, 0x140000000000000, 0x80000000, 0x100, 0x9, 0x43, 0x5, 0x6, 0x9, 0x8000000000000001, 0x3, 0x1ff, 0x2, 0x9, 0x148b, 0x2, 0x8, 0x9, 0x1c1, 0x1, 0x5, 0xfffffffffffffffa, 0xa, 0xee25, 0x7, 0x800000000, 0xd81, 0x8, 0x7, 0x1ff, 0x7, 0x2, 0x8, 0x7, 0x6, 0x8, 0x1, 0x5, 0xc, 0x200, 0xcf4, 0x7, 0x9, 0x2, 0x1, 0x5, 0x73, 0x5f, 0xa, 0x401, 0xfffffffffffffff8, 0x1, 0xfffffffffffffffe, 0xaa, 0xe, 0xae82, 0x0, 0x1, 0x7fffffff0000000, 0xfffffffffffffffc, 0xb, 0x0, 0x4, 0x2, 0x5, 0xff, 0xaa7, 0x5, 0x6, 0x9, 0x51a, 0xc1, 0x3, 0x9, 0x4, 0x3, 0x4, 0x3, 0x5]}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) fremovexattr(r2, &(0x7f0000000100)=@known='system.posix_acl_default\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="f0010000321938df1f5086d80000000031d71414097b3d643baf7c7afa1a28a33e6831f7d472850ab1dfa196", @ANYRES16=r4, @ANYBLOB="080028bd7000fcdbdf2518000000280005801c0002800800040006000000080003000000010008000300050000000800010065746800580101804c00028008000300400000000800030004000000080001001200000008000400080000000800010016000000080001001b0000000800030079de936208000100010000000800030008000000380004001400010002004e20640101010000000000000000200002000a004e2100000000fe8000000000000000000000000000aa060000000d0001007564703a73797a310000000038000400200001000a004e2200000005fe8000000000000000000000000000aa000000001400020002004e22ac1e000100000000000000002c0002800800030002000000080003000c000000080002000104000008000300ff7f00000800040000000000080003000900000044000400200001000a004e2435fc5a37ff02000000000000000000000000000102000000200002000a004e2000000003fe880000000000000000000000000001f8ffffff0d0001007564703a73797a31000000001400098008000100010000000800020005000000480006803f00040067636d286165732900000000000000000000000000000000000000000000000017000000e1c90254621e24d71d9fbc7e120bf120e38c3782f6203f0004000500"], 0x1f0}, 0x1, 0x0, 0x0, 0x800}, 0x8005) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x45, &(0x7f0000000140)=0x40b8, 0x4) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000080)=0x40) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000004c0)={0x800100, 0xfffffffd, 0x0, 0x8, 0x9, 0x6}) 3.052896076s ago: executing program 3 (id=1954): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x4, 0x4) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2, 0xfffffffe}, 0x1c) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x4, 0x4) (async) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x2, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2, 0xfffffffe}, 0x1c) (async) 2.967561327s ago: executing program 2 (id=1955): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r1 = getpgrp(0xffffffffffffffff) fcntl$setownex(r0, 0xf, &(0x7f0000000200)={0x2, r1}) r2 = syz_usb_connect(0x3, 0xab2, &(0x7f0000000fc0)={{0x12, 0x1, 0x0, 0xf4, 0x24, 0x8e, 0x20, 0x84f, 0x1, 0xa71d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa0, 0x4, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x57, 0x1, 0x5d, 0x9e, 0x0, 0x81, [@generic={0xb1, 0x9, "60298f1ccd31ed7200d9c5d3fa95eeaabe6ef0a3e28b052eb47ebd350ee6499e0a2a7a3e5f13af81f270e9c6407978ed24aaf2172e8f05e0b84d181b5eccacab3f726bd6744670830e0b16959d348038ff9ea30df0f043d2ea01e524a4eaee3def0e3e81b21d4c553195d82ecb626471dce163b829daafe8c7bd3d6f6e419937e4573bfa7dc2066e43c6845b83f89f797d979975142f048e0455754caa35273eea8b197836265c2c5e3c43d01d6f82"}], [{{0x9, 0x5, 0x9, 0x10, 0x10, 0x4, 0x8, 0x8, [@generic={0x39, 0x21, "4f0ea870e7f822e5fb6d177e871072d070a729d5dd96dbbc8a1564c910c6460331ea0ec49e253145ca9ed4029866e8956b87aa620fdc53"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0xf4}]}}]}}, {{0x9, 0x4, 0x2d, 0x1, 0x2, 0xff, 0x1, 0x1, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0xac26, 0xd}, [@feature_unit={0xf, 0x24, 0x6, 0x6, 0x2, 0x4, [0x0, 0x6, 0x8, 0x9], 0x3}]}], [{{0x9, 0x5, 0x7, 0x10, 0x10, 0x9, 0x5, 0x0, [@generic={0xd6, 0x0, "4ca4bad6388b38ced8e78a82ed387ce89b5ab14fc62f42570e1663f94f709bf39d41cab71ebb61e971ac402d9ecf42ee236e648b297ce5fa4b39d400643d72ae63ce12a7638b3659716f1ede3f9bb6e9d64295b1937871815c5cbac7b346466b86b9ae517a643843cf5595d6b136a90225d63471fe2bdce51972f35238455aeaafd27712175767a88f376c6950f827082a592426df47830370b611201b91a27f8a5f7d602cb36a384a141e57b1a538a1770d95d1eb30e175fb5672ff448aa2f415ad4e296b8e906a0c7a3aedacc3c91ad7882e32"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0xfffa}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x0, 0xc0, 0x0, [@generic={0x1b, 0x9f5e9beeeb8dc2ea, "e3268c3d04f1d3f19658e579175af659627fed6baa66c8e463"}]}}]}}, {{0x9, 0x4, 0xdc, 0x6, 0x9, 0x47, 0x5e, 0xeb, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0xfffe, 0x3}, [@feature_unit={0xb, 0x24, 0x6, 0x2, 0x3, 0x2, [0xa, 0x5]}, @selector_unit={0xb, 0x24, 0x5, 0x5, 0x2, "8b0f239d2599"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x304, 0x7, 0x3, 0x6}, @processing_unit={0xc, 0x24, 0x7, 0x6, 0x3, 0x0, "70293a1267"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x201, 0x2, 0x2, 0x5, 0x5, 0x9}]}], [{{0x9, 0x5, 0x2, 0x10, 0x40, 0xa5, 0x7a, 0x3}}, {{0x9, 0x5, 0xd, 0x3, 0x10, 0x8, 0x4, 0x5}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x1, 0x49, 0x8, [@generic={0xa6, 0xb, "2b5f671ec9a18654e74656f96981ea77c0156c215d3baa696bd9b69f4e79c01a58f1a1f5c8fc53a7cfce3feb64c65100c4db50a0a4b71bd8b49255a5f917096ace484f6d7f285fd443c4d8ba148cc4432edfff0e0b0dc2e6807e92d68075930f3cf42816e6973ecab4671ddb1e4e6657113ace427cd77fe2d781ef5ac4832e53e31b205e121d863a6d94b695c1cc15d4fcc795dd9a3d55323925715af4e4b37fe77d37e6"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xaf, 0x3}]}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0xff, 0x91}}, {{0x9, 0x5, 0x4, 0x1, 0x400, 0x4d, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0xe}]}}, {{0x9, 0x5, 0x6, 0x10, 0x600, 0x8, 0x5, 0x54, [@generic={0x102, 0x24, "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"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x5, 0x10, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x6}]}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0xe, 0x35, 0x4, [@generic={0xe0, 0x24, "526a103ad9c4bb495a91b0670b59b9c0549f4ff0208e538f0918712f6d03213a9f8313f803ed1d893320ea1afe2d8e412309dbde9459d24ff9f2b422739a91d838d7057e7a45048db70daaf60a5339f9950d6121018dab11442f0850d9178805e2905d3b3bdcb537ef217c154b03717a0ae1fa837776c720bd7677f6cd9fbe393add1c0dfe22d5cc57d5b4ea325728faa3a223b3c1da7ed9adfba6028fbab0744a3606a2d741bae397865d0b993b359550f7af1596680a95ae331ad0b8ec527d678746de57edcc9190b45c8f7f26cf2a7a1df3d2228ef9299193bc8ed362"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x70, 0xc, 0x27, 0x2}}]}}, {{0x9, 0x4, 0xcf, 0x7, 0xe, 0x5b, 0x29, 0xaf, 0x1c, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x9, 0xd, 0x4}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x0, 0x4, 0x9, 0xf, "88bfdef9"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x5, 0xa, 'Mh'}, @as_header={0x7, 0x24, 0x1, 0x2, 0x20, 0x5}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xf84, 0x0, 0x6}]}, @uac_as={[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xc, 0xc, 0x4c, "e549"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x80, 0x4, 0x0, 0x5, "5c03"}]}], [{{0x9, 0x5, 0xb, 0x0, 0x8, 0x4, 0x4, 0x7f, [@generic={0xcc, 0x22, "e66481df21ab55c32425600e40eee044581d5a5c49d08c5588173d646fabe3cf4dcf2ada1b8daa79463d57d6774d65c29dc06611e5d2f19d610cab48be7fe18347b8ebbe4eddb476e77bfbcdce53533edbd1ed50390e804c42af007d1ae2aad0efc938aebd8b90cc73c1624887956d1f1526d3197f62a5a8e2f28bd5a4079077eca22bdd9e18a5350ab7b9b3bfbb39f003dd71fcf595fd03d068d5119afc16c2e13e0702e40e3740f404941d13ebec60c2be5972babfe1d59a9d39eb55dd0d22e7c5aed300e7d83fd7ea"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x2, 0x6, 0xd, [@generic={0x42, 0x23, "453647eb063916e234867ccd9fb6390b0ec3b3e6e0cbbf117d85243b0f7398709715e3c521ff3cb4e1ba546ac78a1e68341484424cdae37d5ef4eb4696ccc4a5"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xc40c}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x38, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x6}, @generic={0xbf, 0x31, "2a549177c52cf74ecb8b6d9ab7f8d7cf33374601d00fef29cf916cf641ab4320f9c8faa62e3bc9954a7d376c0db4280e053106a2070e66f334b35f6ddc37cfa4ec5be0c6680131dbd994cda6552042ce4bf14abd922a6fae3bbf2dbbb74232b688b28795052d0dc11b918b7a65f2a08ff29f0bd7132a24fc006dd203711bbe1e56dd3bf0a8fce503b10c32b805599f738ef89b151387546b5e647a05fc586a37e622235b0058ab7b6f95706ce30a5d0934dedfcd01baeedeed00e3b6b5"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x8, 0x0, 0xbc, [@generic={0xb2, 0x21, "5ac3a30fd769cb7b863aa3dd42ec4c2fe4e7d78b7a420f489fd012631abb2b8e75337a9bc7a5388a94d0d864b969f723e4cb0307c83c1bc57b1a033b86cfb15129aca0feb9617d4ef8870d1e058341508f144d51ef6864fd9a12b6971a99dad60e337efb091e125277121242875e9f1b9c0059050e4dd68963a458f1aaa35c8b46d3540cadb63da33bf3f737374aa6c6728166efcc1a8d4c4b5c3b8d3ec9ddf5e9e43612e9aad46db9dbb0f3a93404e3"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x40, 0x40, 0x2, [@generic={0xa3, 0x6, "697bbf5a4872e8adb6791426b907f405c12286608354b8c98be7ef39d423a948e67bd68f66df156dac0ffbc06f8def46d9562a20048eeae4019b452a9c0f7df255c7c066cdd070a1e8cc6a85893a66bacb5e7dbdf1e87ff0a184682017a3f60c1125b26745e7f03d552582cf96d21f1b4b0655cfb99c2d07bc7e9126ebb4dff0195a0d788f8ca294bc1ac3657dcf284f533543719b20c67aea8f2ccd6141387544"}]}}, {{0x9, 0x5, 0x3, 0xa, 0x400, 0x3, 0x2a, 0xa}}, {{0x9, 0x5, 0x80, 0x11, 0x400, 0x4, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3e, 0x3}, @generic={0x35, 0x5, "f7569739ba268e07250ec7f4f5254de801da4dc2512750dd04f5729425f87b42730ea7c6d89736b9275a551833dbe90552a366"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x5, 0x80, 0x6}}, {{0x9, 0x5, 0x2, 0x1, 0x40, 0xe7, 0x8f, 0x1, [@generic={0x57, 0x30, "edbfa1f7948b16a01c2f7f35933862d854c9fb8c49bc94e1471c6dce8fe0ebfeaa3d094a6b5f9bd41384ff3a81a579045f47fd08deadce6aff8b590ae863ffd4e2e4d0c0e4ec5f358a449702f7d633130afc557cdf"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x400, 0x6, 0xf2, 0x4}}, {{0x9, 0x5, 0x3, 0x3, 0x10, 0x0, 0x2, 0x2c, [@generic={0x91, 0x22, "b8cfdf42fc5dac3b8d7ed33f9c14405161da27cbb842ab365e63c7afcae04e01a86eeba7138b53acb228af9322b8bc0079010e0cdc1b49f3fd29dd9c2db5aad167465277f52886f0a9767ff46848217c1659d8911e94ed5373347dda77420e9887774bf4410b6146cfa7e95e6f330cb7611d87d1781ff33f7bafe8d0ebb637a4aa1964372f7d8d756347eee1117cfb"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x40, 0x8, 0x1, 0x6d}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0x8d, 0x53, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x1f95}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x9c, 0x6, 0xa}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_usb_connect(0x4, 0xb08, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0xad, 0x6d, 0xc3, 0xe54053c66b3694a4, 0x12d1, 0xde48, 0xe803, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf6, 0x3, 0x9, 0x7, 0xee807dcbb21d57b5, 0x2c, [{{0x9, 0x4, 0x59, 0x7f, 0x6, 0xff, 0x4, 0x78, 0x6, [@hid_hid={0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0xc39}}, @uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x2, 0xa, 0xa3, '/\t'}, @as_header={0x7, 0x24, 0x1, 0x13, 0x5, 0x5}, @as_header={0x7, 0x24, 0x1, 0x0, 0x8, 0x3}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x8, 0x1, 0x40, 0x9, "3b22c2"}]}], [{{0x9, 0x5, 0xf, 0x3, 0x200, 0x0, 0x5, 0xe, [@generic={0x33, 0x21, "73f0b7e16ffd70f08bf7b3046414ee546210e96eccd972eaa5a36232b81265ee4270ff2d1ac2496230936f1afe123929e2"}, @generic={0x65, 0x8, "c96a857ab7237d25a8a228a34c5ddf00fafc4be146b65f7956f077feb3ea57b566b4b56d5cd4d2726dd7c1c6ab977ff3be1192a4924e9a90e3f80d3a0c84cdf92d39274ffad6d7bfdfaa79a0106e470cfc5d5292168515b7b9fbbf7f40e44f46aa9ac8"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0xcf, 0x81, 0x0, [@generic={0xe, 0x3, "8e9f557f9d9a79579d8345d7"}, @generic={0xd, 0xa, "59de03798c22a1b1bd6bed"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x0, 0x2, 0x7, 0xfe}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x8, 0x18, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x2b}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x3}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x1, 0xa7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x79, 0x1}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0xc0, 0x3, 0x2}}]}}, {{0x9, 0x4, 0xdf, 0x8, 0x10, 0x3, 0xf9, 0x2, 0x6, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "883526"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x10, 0x8, 0x229, 0x5}, {0x6, 0x24, 0x1a, 0x9371, 0x10}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x1, 0x5, 0x8}, @mdlm_detail={0x85, 0x24, 0x13, 0x9, "1165b2445d21b9f6b6f15e19c0f01b4b9378778dd434114e6e2ae977e6fb26229b047c0c659e0d66e33af6978977b381ceebc2fd01d9ad09de6b821dbeb940034722138edf5d09510a35d84906c32d0dcffc158a2e4e356b2fbe82d7dd6a232f9c2afa0a05f0adf3d2356f64dbaacf65e58419e774d6b893a23fafd5eddb238b9f"}, @obex={0x5, 0x24, 0x15, 0x7}, @mdlm_detail={0x57, 0x24, 0x13, 0x9, "6a64ea3626700d30b1ed24d7c0e9e6a8612f763ad8b00be7798d9d98cfa7053800f6c19ccf94295a14f60e6e59611a4136a09fef688c30b62f4afbd199515a8f8276f493f5fcd3b8cd7dc05344bf334cd86726"}, @dmm={0x7, 0x24, 0x14, 0x0, 0x5}]}], [{{0x9, 0x5, 0xc, 0xc, 0x200, 0x2, 0x3, 0x71}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0x2, 0x4b, 0x7, [@generic={0xdb, 0x7, "f68396a07a3987c2e3e3d25edbafe7a581e355b7fa5b0d64afbe459be5601a35c6b053d122582a8583b6a91283ec75a3998aa77fb7dc0af360b72740c40518fbca0dc5b1684acafd83713ba1d2d34747deeecf52180f9c15b350cced86a2692df32e18164f88c21a4b2d2125769c792b09f844d37f54bc8ff69c5fc520767a0d0743f0a22a7fccd9a61c4ab18d12e882c366ba712154af95634e2f7933fab591227328211f0170cabb4124b529ae1e634ca37ba6633abe8bf44e775855098023b6dd495c1c59386aec54b3b0ab0e0268e9b63ddc61fcf195eb"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x55, 0x200}]}}, {{0x9, 0x5, 0x3, 0xc97b68b67204c7d8, 0x10, 0x9, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x9}]}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x18, 0x4, 0xdd, [@generic={0xed, 0x23, "9c90d71edcc96bd1be926f9e3dda0c9def6159ab5909c027e7333260396316a177557f2c5b4ee67fef360614d095dfeade2c078e84a24e58782a728ccd2589d2c954101ce6fc76c32c92cba0f53b3b246c1ce1d2b8e2cfa36d45ffc81f0550339dea80acfe52c59bc0b70766dd89aacbbba53b9c3016f267cc170cbf96f409435265e251487bb508a0e9adfe7831901aefff6771ce1df233f85641c56eb9dd4896d3b336e28bf2a7c9f12a2dabb5d48932468cbc7b3fb6c2bcac3e5f2c3d5993c0e0fc3e2535930688ed367f013df2687511cf71f831c4d323e43418eda39c250f766e99d5e73c34e05ab8"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x0, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x3}, @generic={0x69, 0x11, "4b3ebb5c35fd3f0b733f86d83a0554b863e99a5720670218d0f17f0996b5bef1db883fa2056dcc949d9e19663edcdbd698220c4305f6e3f02e4355b2fce4e4af9251ef74380a6774220fc3d2865c4f50e11f9b61be10f649777ece94058b87bb9919a1671b6b5c"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x7, 0xf9, 0x6, [@generic={0x56, 0x5, "6b84af14a6217861c6de83988abb89dde500ee3f4a45978d686940c9d7aa9ee1c5fc636d9f05085bb865a845e87390a84c279d7cbcc6c9987bf3d2dddad871930211e7e3744863856905823f8f4986603a2221ab"}, @generic={0xa, 0x0, "56f24af9af74aa42"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x5, 0x5, 0x6}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0xa, 0xa, 0x9d, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x6}]}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x4c, 0x8, 0x0, [@generic={0x88, 0x8, "442ff76d049b195b1c9b84f8ce6faaeffe62039c241e49885cc736970570b9fd6bdaf42a0a3afa500a8e4c33114af1327c3b271d5aa6e99766161221830a678730aa9caff752ac75171235fc6f1347cef7b8632f85acc59f4fc2a8faabcac5d92301303e6669c442c90c0dc2dc424a40b1f444e039b60ed23f464e1913428068eb2dcaeb9c12"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x0, 0x8, 0x7f, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3f, 0xfff8}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x4, 0x1, 0x99}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0xf2, 0xe, 0x5}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0x4, 0x8, 0xb8, [@generic={0xf9, 0x22, "36a5da27fe3c3b3f8c9d7c69db00f91f207ed4799dfb54aa2baf2fa726ef1eaae35b7ec06c1cb165558cfff9a3b6f5397885b273df9300b1ffae7831b582da680e30b49c18da6f5b791bb20eec3fe204031d730997c23a280a217a9e99c238166a900176e156dcb6c46108eb01b117d4b1c2dfd8d49d206569da6d1430349faf866e97ef33d7b87b2618cea5879f0ee7826cbfd05fe0d7b2d7a0d751ae082e37434ea552ae981871bd5c833460ae1eb9997e96f3adc809fc1e84678d654d559f047095dce2c7c4627786e42f6d8a2eddd6fd4ffc119c4086bd6db7e45c70d91748307e1cd9e0ceaadd8b82adeabe8a45d4c2c8b2b39bca"}]}}, {{0x9, 0x5, 0xc3aeaa5fbc42fc47, 0x10, 0x3ff, 0xa9, 0x8, 0xfe, [@generic={0xfc, 0x31, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x6}]}}, {{0x9, 0x5, 0x10b, 0x1, 0x40, 0x7, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc7, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x4}]}}, {{0x9, 0x5, 0x80, 0x2, 0x20, 0x1, 0x0, 0x7, [@generic={0x10, 0x8, "1fcbe59933933451427b1e33fe2c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xfffc}]}}]}}, {{0x9, 0x4, 0x9a, 0x1, 0xc, 0xf7, 0xec, 0x8f, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0xb}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x305, 0x1, 0x6, 0xf}, @processing_unit={0xd, 0x24, 0x7, 0x6, 0x0, 0x4, "b0af92f35b12"}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "60af0becf9"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xa8a1, 0x9}, [@mdlm={0x15}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x8}, @obex={0x5, 0x24, 0x15, 0x32d}, @dmm={0x7, 0x24, 0x14, 0xf9f4, 0x7}]}], [{{0x9, 0x5, 0xa, 0x8, 0x20, 0x7, 0x3, 0x30, [@generic={0x35, 0x22, "39f20480ae95d47e6ae8e3ab6530c5bd1f428a8ef429cf1a1b04040fc438484c10f96546aae1949c83bcc6695a731c7b3196ad"}, @uac_iso={0x7, 0x25, 0x1, 0xc2, 0x0, 0xfb32}]}}, {{0x9, 0x5, 0x80, 0x11, 0x40, 0xc, 0x0, 0x2f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0x7fff}, @generic={0x54, 0x7, "88aed1ed20145a645183f6d7e5c734bd855237bd9a4873e5d90e582e926c4102db5b35636aadecc743156fa42612f3b7cc7f039ff6b5a24e7847c1cc608d02764dd69472e15a6a1888f61727c991e427c2cd"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x1, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x81}, @generic={0x3c, 0xc, "eb074d7b82ce2bc837879690a729d79ae2a5c399de9406dfed817f6be62d3d0d78a92d9cca4d88c5ad01bcfc190cd13cf95300002ad91da8df18"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x400, 0x1, 0x81, 0x1}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x9, 0x28, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x9}, @generic={0x30, 0x22, "60688f3e7f5038f7c61e37196d06a31741c0ffa6c08f485c5268d9af6ebef17b0c0aa1ce60aa2d0d86e8e06e56e1"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x20, 0x94, 0x3, 0x3}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x8, 0x6, 0xd}}, {{0x9, 0x5, 0x5, 0xc, 0x8, 0x0, 0x10, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x9}]}}, {{0x9, 0x5, 0x6, 0xc, 0x20, 0x2, 0x5, 0x1, [@generic={0xb8, 0x31, "43b43ce522e61337b18f61373e832dfd3fcb691966e36c81927c99a3bbd134f980972d9f07d568a9d8cc5a6ca02ca8da601280a0dfabc378fc9cb1be718bb2bb08e467e79afd45f14183a9d393e7d169ba349cfe7efe4b13eebff505bd668bc79bf76dc3692c1efb33b12e24e46bb0152cdc33b87dfbf09e198be4148529f78ebf36c69218b40003c23c0f3704c380546372871b8dca9a8499764881190e6ad8617caf2e9cbf22fca97f82c3c14abc7390e8cbd3b8a9"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x5, 0x80, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xa, 0x6}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0xd0, 0x7, 0x38}}, {{0x9, 0x5, 0xc, 0x2, 0x10, 0x9, 0x8, 0xb}}]}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x8, 0x5, 0x3, 0x40, 0x3e}, 0xe5, &(0x7f0000000040)={0x5, 0xf, 0xe5, 0x5, [@generic={0xbb, 0x10, 0x4, "e77c914ad6ed544209c9a60ca97baae796b258c12797d45f5578f3396529754e4a76cbb8af923a85bfdf34b5fe26faa8f38053fb33d6563bdded5a0789c9db8d705b13e1d39beaf2bed99652f8bc383e8e82a6d78d09aca2b9135411a82d7be3dd45b0e1b689c1ea9c07cef84b00508db553514e1bd8675eade25fa639ce915c18945236ff09349ba72c42a1bd5e7cc47d1ed2c7091b7b71f3a87bbf952a7bd5bf183afdad5a265e04659716882a6dc735ecf0324341b10d"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "03057670adcacb90f3c7b6810e4a373a"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa0, 0x7f, 0x5, 0x4, 0xc3}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x4, [{0x30, &(0x7f0000000140)=@string={0x30, 0x3, "a33430cc66b8f70b0f60553329e78845cf5406ca727af82bee92bf883b8961d4acb05112916e7eb32ec8c47c3ab5"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x807}}, {0xe8, &(0x7f0000000dc0)=@string={0xe8, 0x3, "9c9c99243f993503fccfc7bd27a49722f70508c727a05f1a09e6910175ba5ad0031661e95739c134d5fb72755db7e6ef87c926296c81f6d094f53bb3b8785c3e958a63b55090788f60861f9be7b21054e7c1c7982ce0b20b9bb819189e7308a9f2d05a1e9fc0279d558bcb6538e4849146934dd40fafe5772d334a3ad2c2a0fb4d13ffe5c71ebca82c2c4142ee648ce996a41d36f8157ab9d2c77386c8f9fb5b363642375e80f4588bb707796c38ee8a970e009373be77101d7531b44d228c49c61613cd11664430660ae93ae0f8267a92755781df172500171470777343cce9ed8e7cc2c924"}}]}) 2.884144359s ago: executing program 0 (id=1956): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000000)={0x2, 0x3b3, &(0x7f0000000400), 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 2.883687354s ago: executing program 1 (id=1957): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x2100}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.755213251s ago: executing program 3 (id=1958): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) socketpair(0x2b, 0x0, 0x100, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, 0x0) 2.719258247s ago: executing program 1 (id=1959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ptrace$setopts(0x4200, r3, 0x99a, 0x40) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[], 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000007c0)=@overlay={0xfffe000, 0x3, 0x4, 0x100, 0xfa1, {}, {0x3, 0xc, 0x40, 0x4, 0x2c, 0x9, "009b00"}, 0x25c8, 0x3, {}, 0x7}) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) epoll_create1(0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1400000011000100e4000008000000000300000a8dda5817d32f9636e5315055a0c19620eb3ebf1c7b98bbc64ae60abcafb2f65b974e333573ae2a74857e70692b4ee5ed82c0cc11e0be75637348f3dfa457c22528a6b17f6a6e48dd5c46abc5f1e0c5b245903be7c033b3ac5532c2a66a790bc75a508b18"], 0x28}}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x103402, 0x0) socket$inet(0x2, 0x3, 0x3) r7 = syz_io_uring_setup(0x186, &(0x7f0000000540)={0x0, 0xe328, 0x13100, 0x1}, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000040801080000000000000000030000002c000480080001400000ffff0800024000000c8e080001400000000208000240000000010800014000000007080001400000000408000140ffffffff"], 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) close_range(r6, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89101) 2.628910583s ago: executing program 0 (id=1960): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') syz_usb_connect$hid(0x6, 0x6b, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1, 0xe, 0x1, {0x22, 0xd10}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9}}}}}]}}]}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) syz_open_procfs(0x0, 0x0) 1.15283066s ago: executing program 3 (id=1961): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) sendfile(r1, r1, 0x0, 0x2000fb) sendfile(r1, r1, 0x0, 0x25b) socket$inet_udplite(0x2, 0x2, 0x88) 890.017167ms ago: executing program 2 (id=1962): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) (async) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', &(0x7f0000000380)={0x40440, 0x15c, 0x12}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0xdddd0000, 0x8e, &(0x7f0000000580)=""/142}]}) (async, rerun: 64) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) (async, rerun: 64) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r4 = socket$unix(0x1, 0x5, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) (async, rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) (rerun: 64) 669.344888ms ago: executing program 2 (id=1963): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_gettime(0x0, &(0x7f0000000080)) r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000800)=ANY=[@ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000280)={0x60, 0x18}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000007c0)={0x24, &(0x7f0000000540)={0x0, 0x9, 0x71, {0x71, 0x9, "3ef0a4c694367abdc846914c562aae2fee6b3f8a23fd508978ac355e5ca152b75afa87c4479f297a3bb290c651dc1d027e269a33eef84bbfd654c3a38be450144ad0ce3ea09eca5a8c053873fdc28dd3a01bf98d7874560d6cb64d23ee814d89f29e520fe7175aa56f0992e0a86b77"}}, &(0x7f00000006c0)={0x0, 0x3, 0xdc, @string={0xdc, 0x3, "91e15314749e1b3f7a24b057fdccf0c6aaa69328819e30e7d787919585a0e38135f84ff067fd636cf0ee559286fd6b19e9382d0e3ef2e27e81499bc7bab0990f33c0ca0686985dc6623ffcdbce4ab98c0b974377d1fdf81498b9f0fdc8795e47e1adc24acccebec22a053f266206f93dc3cf09ba3f44eaf5c03c7f8c233b5a9f514c1a0a4f75f7140ae0ff10921d37d28a1cb3c2edf78d8ed3df3cb64bae9d1c7c0658908c016624f61781d496e860bfd4d711469243ab121e77ac15b266da0e40b599730c685ca38b6de8202b50c19caa4c8308867f66c9b671"}}, &(0x7f00000005c0)={0x0, 0x22, 0x17, {[@global=@item_4={0x3, 0x1, 0x9, "bf027fad"}, @main=@item_4={0x3, 0x0, 0xb, "ac1ada38"}, @main=@item_4={0x3, 0x0, 0x8, "72a35946"}, @global=@item_4={0x3, 0x1, 0x8, "fa1b10ea"}, @global=@item_012={0x1, 0x1, 0x0, 'q'}, @global=@item_012={0x0, 0x1, 0x1}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x59, 0x1, {0x22, 0x344}}}}, &(0x7f0000000980)={0x2c, &(0x7f0000000840)={0x0, 0x16, 0x19, "870a2465f68eeaa98c5f30461cbeb21c101010e39e0d75e047"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0xfe}, &(0x7f0000000900)={0x20, 0x1, 0x29, "9935951443ceb651662926e7abeb69db61f09b03b537b7ea9db4c0de01c14a127cbded73c69063290a"}, &(0x7f0000000940)={0x20, 0x3, 0x1, 0x3}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="000000100000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x20, 0x4, 0xcf, {0xcf, 0x28, "037e727a85e21d11d18ad61306387324b50a075327a54cf81bb664ac98ebc026753fa2ebb6ec0b769c3bca7fda52194801ba4c85f191bcc30e3b587789f7f26094271918af406a5b2b6274494dac8bb6fbcdb1381959e274c7977a6a85d3d6696140e76793bfc551cd46ad8c8c7e8095080cf3d5dc1389b9efd5cc973c6995defd1487e78ff088e11d4214ecf8e0b59f604dc7662cac80df03a48035902f73697acf51fd11d7f9b65bb346cb7a1fd77b52a9cfd29790299083e03ca4aee24b1c2b77b606b60271931c2f52eb4d"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}}, &(0x7f00000004c0)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB="2008270000008e47085cd294863011a0d3b51bff9768ad2766c27b3836b18536e514b6b12df692424e3f0b53ec2babf11f6ead8911613e92d599248206562d83aeae602b0499"], &(0x7f0000000200)={0x0, 0xa, 0x1, 0xb6}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xc}, &(0x7f00000002c0)={0x20, 0x81, 0x1, '#'}, &(0x7f0000000300)={0x20, 0x82, 0x3, "d770a5"}, &(0x7f0000000340)={0x20, 0x83, 0x3, "406083"}, &(0x7f0000000400)={0x20, 0x84, 0x3, "30eec9"}, &(0x7f0000000440)={0x20, 0x85, 0x3, '\x00>Q'}}) 668.409185ms ago: executing program 3 (id=1964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1c1e0}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00052fb96dffff1144ee163cddcb000000000000000000000000000060", 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 452.053229ms ago: executing program 1 (id=1965): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x40305828, &(0x7f0000000200)={{r0}, "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"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) ioctl$VHOST_VDPA_GET_STATUS(r2, 0x8001af71, &(0x7f00000000c0)) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r3, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000180)='p', 0x1}], 0x1, &(0x7f0000000680)=ANY=[], 0x1188}}], 0x1, 0x4010) write$FUSE_WRITE(r2, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 427.413591ms ago: executing program 3 (id=1966): socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x0, 0x0, &(0x7f0000000100)) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) (async, rerun: 64) r4 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r4, &(0x7f0000ff1000/0x3000)=nil, 0x400c) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000000)=0x80000000) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) (async) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) (async) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) 245.729931ms ago: executing program 5 (id=1967): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) syz_open_procfs(0x0, &(0x7f0000000340)='net/netstat\x00') (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020008034900020073797a310000000008000440000000000900010073797a30000000000800034000000007140000001100010000000000000000000200000a"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) (async, rerun: 64) write$cgroup_int(r0, &(0x7f0000000040)=0x922, 0x12) (async, rerun: 64) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r4, r4, 0x0, 0x68) (async) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000"], 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) (async) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f0000000340)=ANY=[], 0x14) (async) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)=ANY=[@ANYBLOB="200000003e0007010000000000000000047c000c0c001a8008000a80ef0771c3"], 0x20}}, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100002192ea0845050c800a0600020301090212000100100000090400000079e60100ce6f2c59d8e28d6569bfb80b59113bc2daf01698082ee68ca81f4edee899b88c5a124b236f525d88e155b753177faa79cdad006053d745ed973a979aa287cf9e"], 0x0) (async) faccessat2(0xffffffffffffffff, &(0x7f0000001400)='\x00', 0x0, 0x1100) clock_gettime(0x0, &(0x7f0000000300)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 27.883602ms ago: executing program 1 (id=1968): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x170e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010f204180400010000000109022400010000000909040108010300000009210000000122040009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="ad21000000000000140003006e657464657673696d30000000000000080004000e04000034001680300001802c000c"], 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0xb, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b9a6, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x101, 0x1000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x0, r6, 0x1, 0xd8, 0x6, @remote}, 0x14) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001940)={0x2c, &(0x7f0000001680)={0x0, 0x0, 0xc5, {0xc5, 0x21, "aac84f539a3c6f7c4fd91a4b12330bc5ad825675bc86421690603edb922cb7ac5c85ca56eb28dad46f7166b5bcfb52f155f4e88c58756e3b9c89dba88a39b7743f0385a962696c9d1ee91beb9cacd623b85c272bd66247a919b06b433f79e18d53aa81635fc335be88252f1e272a776da06c1c717781e24b45bc770ab74e55594ebdef2f8a62d95e03bdde0de489cd895be668ad24453d73a9886bac435640adc239bd870bf307ecf07c5b695e2c95fbbfb03c20267156f3572915211a59573afd4c18"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 5 (id=1969): prctl$PR_SCHED_CORE(0x3e, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000000)) getpgrp(0xffffffffffffffff) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x2, 0xd, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x31, 0x5}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x0, 0x86, 0xb, 0x40, 0x1}, 0x28, &(0x7f00000000c0)={0x5, 0xf, 0x28, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x331, 0xf, 0x9, [0xc0, 0x3f0f, 0x3f]}, @wireless={0xb, 0x10, 0x1, 0x0, 0x48, 0x9, 0xd, 0xb, 0x9}]}, 0x8, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x340e}}, {0x13, &(0x7f0000000200)=@string={0x13, 0x3, "5ee30f916af88d64d17b9510dbea910cdb"}}, {0xcb, &(0x7f0000000240)=@string={0xcb, 0x3, "0f34dd5919461ee1872aaa26c1cb060fcb29f7ce1d780b70c560509cbb9343797af0cf6af4f68519d2da7444ea48b573d90ab8cfd9152fcee055732085ea2b9126235c90dd1ccbd8f7fdf44e5e2828e5748f4585646450f871aafe7f673bdfd8b74f81ab5a256d5a24d8076a8829e75f928e1f27192e977cbc907610bd965cd2950733b8e40b7f58440d184aa67afb76a24f99a5f4455ece055d0b1e704fc8ec9ae5781714fee801d988c41c10d95f18ef5ece10a9361bdc6d7213c5654450216d79a8d094c06737c2"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x444}}, {0xcc, &(0x7f0000000380)=@string={0xcc, 0x3, "b4a29cf6a630fd176d72ba5032d6ae0f1446e34f545be8b2e71e7229a79dd0fbd79402f154a6b4394cf7ea72652ab44f153b3b989cf3b815521dda8aa145861dab388791e91b3269f12f1760da920299baab7423fc344bf09ee5f6a8bb4f69079ca3e672042bb92032b410fd00b3d44f964984a50ec29046aeaad8ae62155b045669916fa58c0ac0fd7113c41e3ec7c2e04f7ec653550915a13a30c980fad73146e1cd4f0fce0c20098c4db91ddf3e095589d5b9342bef9c4939a09c6d5392c399b29d0e22d3e912cad9"}}]}) r0 = memfd_secret(0x80000) ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) lseek(r0, 0x5, 0x2) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000500)={0x0}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000640)={r1, 0x5, &(0x7f0000000540)=[0xfffffff9, 0xfffffff7, 0x7, 0x43e, 0x0], &(0x7f0000000580)=[0x80, 0x0, 0x0, 0x7a5b6174, 0x80], 0x8e, 0x1, 0x7, &(0x7f00000005c0)=[0x2], &(0x7f0000000600)=[0x8, 0x3, 0x8000]}) read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$peekuser(0x3, r5, 0x2) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000026c0), 0x2, 0x0) write$FUSE_ENTRY(r6, &(0x7f0000002700)={0x90, 0xfffffffffffffff5, r2, {0x0, 0x0, 0x0, 0x8, 0xfffffffe, 0x9, {0x0, 0xc0000000000000, 0x6, 0x2, 0x0, 0x8, 0x10001, 0x7d29, 0x2, 0x8000, 0x0, r3, r4, 0xffffff7f, 0x1c0}}}, 0x90) r7 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000027c0), 0x2, 0x0) readv(r7, &(0x7f00000029c0)=[{&(0x7f0000002800)=""/161, 0xa1}, {&(0x7f00000028c0)=""/237, 0xed}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000002a00)={0x1ff, 0x4, 0x2f000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) pwrite64(r0, &(0x7f0000002a40)="7d14b0b62bd5332e14f99f398c40e71ac450a06d008581fd9b60aa113c9d5bbf9b1011c9162043a49a0bd0096a00899347273d2c695d1aadd3063334cdb9a4fca3645b71f0b0c790af0fbc78739490a9a08c70f9235701700e3effcbe3a445ab79bc00da97254561a22b66779feffa1f5f222cdc1cce3ad870d4302216d81fb94db7dd01d20854e55a8e303c362da4087c8b8cb4649509d17a397f3a7bbf00bcd4fd84d3f642496121b25598af4eb970a6bb0cb82f121e1f3063953bfc5b34f9a624ad3f93d3c585573b0657f264a0d56d39afad43354153da88f8800b04c93462e5e6893a975cf517", 0xe9, 0x6) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r6, 0x4002f516, &(0x7f0000002b40)={0x9, 0xd3}) syz_open_dev$sndmidi(&(0x7f0000002b80), 0x3, 0x101000) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f0000002bc0)={0x0, 0x8, 0xf}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000002c00)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f0000002c40)={0x7fffffff, 0x1, 0x40, 0xff, 0x1, 0x80}) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) sched_getaffinity(r5, 0x8, &(0x7f0000002cc0)) syz_usb_connect(0x6, 0x76f, &(0x7f0000002d00)={{0x12, 0x1, 0x110, 0x80, 0x6b, 0xb0, 0x20, 0xbda, 0x8191, 0x4925, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75d, 0x4, 0xf2, 0x39, 0x120, 0x2, [{{0x9, 0x4, 0xf5, 0x43, 0x4, 0x1, 0xad, 0x6e, 0x3, [], [{{0x9, 0x5, 0xb, 0x0, 0x8, 0x6, 0xb, 0x9}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0xf3, 0xfb, 0x9e}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x7, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x9}, @generic={0xd7, 0xd, "f939ca6552cf60e610605a3232c65085ac4fdba1b6dedf11fe45f64a9f1654152e268b95212cf97c2b3a0bf7c307f56c7ac83f8b6089aa0844dcbc80258a8bd16f8a0400366bf1f369e134f34ba51ec366c1485139a7a4bff9746eca663eedb656bd3c3979e00787959e96a4d648f34f61162a68bea476152d2069331ba1cc14cbe547a7921da27bbdd5587fc87004f91f4f60eddf443450674a98a5d8776358dae886857dffe4df956a02fc070f081c927b9e4bfec82ded6edc2aa97a045c654181735777f85e0c202a9462c67505076c1cd5df40"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0x3, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x84, 0x6}]}}]}}, {{0x9, 0x4, 0xd5, 0xc, 0x0, 0xf9, 0xf3, 0xc0, 0x8}}, {{0x9, 0x4, 0xa, 0x10, 0x0, 0xff, 0x99, 0xbe, 0xe}}, {{0x9, 0x4, 0x73, 0x8, 0xf, 0xff, 0xff, 0x0, 0x53, [@hid_hid={0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0x78}}], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x5, 0x3, 0x3c}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x7, 0x8, 0x10}}, {{0x9, 0x5, 0xd, 0x3, 0x10, 0xa3, 0x7, 0xc, [@generic={0xb8, 0x23, "bd6aeaa03910858979b94047b4a7d266aa9922878554334af65b6750d076c845cee68036b559cd7aaca3c4942edcc96b01fab56e62c75924f60c4652de08f6cfdd2627c9faac19ac450873f89dae37c3fcb8acf24c5b6a9c9769108e34725184369b14355370d96daaaaf0397134605a94722b8933ab3c19ec1ceb23d8e606a71fc2be821e331497f90f43b8f0d7d4ee51aeaf6f098932c0aa391ba74a9039cfc7a1aa7d6315e779575586f557c8f627fa5b37b72d2d"}, @generic={0xdf, 0x31, "0e123a06b13a8af8c7140f1ff32a9708798c44d3adaf5d86c673aef27679b59e4a4138f023fa7d8dc38ea8ea80af5dd6cfe030f75eee69df9ccd8329ff22446d7e1fc2381cee37faf0c49ffc68ac3df1aa0494364af228cfaf1b2d4f02349615bdfcce683e999db3749c7e12fc33649c5c0fec610422b2722f26fa7413c88e4e2b2958e03ee9bfca12f1c9ce84a9aab8f07d545a250ba990161ca94d177c14302ad60ffa80d9e0bb379546126e6df376f3c5dcad947241739a6dd0711ff641de513539d59984678004a96dba502dabf966e739c205016cd7c5f35b644b"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0xe, 0xb8, 0x3, [@generic={0x4c, 0xd, "4f42b605699a88d594aceb0bca8633f71a9103314d2140347180f8ef6a92744903bdee240fe13d8448c75fff0868355fec9485825db47cc8574f6cba6bd849873d7b21bd82b210fc3e6c"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x4, 0xf8, 0x4, [@generic={0xbf, 0x7, "c24d961dde86806fdb3992a19e637841cb1d03ead77add4b030d80fef51a8566c02a9ea2573f66159ea81b89561f967212aee73efb5f1c2e1a8fd5ea95cc23e796d46f3282062d13052ef0ad623fe3bcbbc2ac5ce349cc0eed471094064ed20a49532fee43fc4cc0a4fbb5b30c2e35a1c8440d608c00ad86840bfccf5ce961bf5a748596d3663e7e2f47d3ff9ddfb952bb85366c23ab34921eed287775226b907a6b23cbeb82edf31e56b673f96c93f2b3e949f17a39c518c8463084ec"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x18, 0x93, 0x29, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0xef53}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x10, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x9}]}}, {{0x9, 0x5, 0xd, 0x10, 0x0, 0x1, 0x5, 0xdb, [@generic={0x84, 0x11, "fc35e8bc245d959dfe34a2336ed803c65eb26eca395db7e6261f1d9e336c3590c4a22e59144b71198b95696f0670b4217614755a426d9155ad189733cadf651fce00ee5f486db600bcc5b440bd505203f29c8c1007a0a466f9d9edab4ef2e6118a0c24aa7b3674f8d099c79d5b07cd9ff78bd3c8c69f2dc9a73226be62a49600eceb"}, @generic={0x9, 0x6, "82c783c3f57012"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0xb4, 0x8, 0x9}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x8, 0xf, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe, 0xaf50}]}}, {{0x9, 0x5, 0xb, 0x2, 0x400, 0x7, 0xff, 0x81, [@generic={0xbb, 0x3, "a75dcf92fc2a5ce2be09b5e6b13ee3fb5d29d2458bad3f186407cdf72058f329f9d4075c9a928963aa547819eee06f59af60059bf10c9ec727a40522bd81504d116fc4f31613ac730d151083659740c14a0ff5a384b99c13a7ee523f1d35d6462f3de74e374ea06c959609f30765973452441e5e71c2454cce3f5fd365a5587f842c6893e20ed8291eda14f966dca47d495a394db306b0e98f69066826fc59a4983abfb2b329fb7335a38b2def646c63e4714c63e840360a7f"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x10, 0x80, 0xf4, 0x5, [@generic={0xe7, 0xf, "72f242cfa91df74fe13c4dc65910513b10ac9c98cd2dea7305f4b8e97cd527c6c3d59e9f6c349b77498e8b18005477db8ba02aa372316b3d84d6fb46403407ebc6e782e08b8ed61ae696f3a2ac512db36934a0a0b93a8dbdc155aef23350381ac2503d149db36710c64177abe5f203845d911ab9947572accea8a8f5d135e0fa343ef5ec43637c8780fbc516b88b9cd41bfc654ddc1aba6dde640fc4ef1d3f797e23cabcb425ce25e4bc604499a140f7fb05981b5f3273472da6290c395c661ddd6043fd9bf69d0609a3851c790d09cb62527e85e60da4993b867f5a4d0764645c3cfcab0e"}, @generic={0x4, 0x22, '\b:'}]}}, {{0x9, 0x5, 0xe, 0xc, 0x10, 0xc, 0x7f, 0x19}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x6, 0x9, 0x80, [@generic={0x1c, 0xc, "fa97823855bb8605647ab6359230c09526c40e663b600426cab5"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x7, 0x3, 0x9, [@generic={0x83, 0x1c, "b897b8e8b39f5a1db8d0c3435c8d04efea4c90a0ce8f8db25edb8373c3f69267c831cf11bba0e402930dd8e490fe15d06daa76ad43d189b887dddefeaed22d83d058a6326dec0b616566572391450d755c0f76451fbb3abc3a8f9ff3a6de277039a11fb03919b091d85b9742df11919066d31d5c4506d01d884e556cfc98ae811b"}]}}]}}]}}]}}, &(0x7f0000003600)={0xa, &(0x7f0000003480)={0xa, 0x6, 0x0, 0x7f, 0x2, 0x3, 0x8, 0x2}, 0x2c, &(0x7f00000034c0)={0x5, 0xf, 0x2c, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x4, 0xff0f, 0x0, [0x0, 0xff0000, 0x0, 0x1fec000, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x6, 0x5, 0xd}]}, 0x3, [{0x50, &(0x7f0000003500)=@string={0x50, 0x3, "1d0d479ecefcb8a7611bb8ce24a58ad3f292e26e39aa7873f35608eaf8519387aee53b8c4ec49fb58aa738346e997f7cebd815f8c0ff0f422083bfb7f8ae63b746586adb80225fc70ad2822314c8"}}, {0x32, &(0x7f0000003580)=@string={0x32, 0x3, "9a28e5d313b49c1da73034dfc64964f86c5edc77df6d808e8b3aa916950da68dceea1f636b3541d9a54f6c61f1089765"}}, {0x4, &(0x7f00000035c0)=@lang_id={0x4, 0x3, 0x404}}]}) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000003640)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0xd4b946120b4d4f77, 0x7, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x1, 0x0, 0xea}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0xc, 0x78, 0xc}}]}}}]}}]}}, &(0x7f0000003b40)={0xa, &(0x7f0000003680)={0xa, 0x6, 0x201, 0x5, 0x9, 0x80, 0x8, 0x7}, 0x40, &(0x7f00000036c0)={0x5, 0xf, 0x40, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "2a1e0984aab19ea7b4ed0f8e6574f392"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x9, 0x40, 0x7}, @generic={0x8, 0x10, 0xa, "1c88099bc6"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "7ac20b11e23391ba4c9b4583aed84715"}]}, 0xa, [{0x4, &(0x7f0000003700)=@lang_id={0x4, 0x3, 0x2400}}, {0x4, &(0x7f0000003740)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000003780)=@lang_id={0x4, 0x3, 0x41d}}, {0x6f, &(0x7f00000037c0)=@string={0x6f, 0x3, "925bcdc7585fbaf661b70e8724ca3868404bcf5c35975b637b9d2aefe07d1740a79895ff361354b065a847872301929f5ccff3cd9b849686b4cb5064dcc5185a66cef067051b14632bae78ef46ca679cfd261b45e27bdd8ed7de5afdb096cb90416e3019ce7b98d8b4ff538e9c"}}, {0x4, &(0x7f0000003840)=@lang_id={0x4}}, {0x4, &(0x7f0000003880)=@lang_id={0x4, 0x3, 0x459}}, {0xca, &(0x7f00000038c0)=@string={0xca, 0x3, "3d2be23929c591a9b98a53b2a0b4d2cfc93594e8afb5d050b1453cf4d45c3bd2cfb7a7bf34b018d61bb2aa47e9f2b2c88c6b81f9f8357c6883838b23ad341f3505c06bd2a6d046165a800a3a04542e69b40b089eb481c7ea2ad0a86ac2222c7365cb6997f73d766d54ee801cde092d40f24d6da62adb9de65810ae974d0a28368bc1189d6bdb404d7588e3643bb05ac3b782936cf5f612131fc23b3a19c17e1959a6ee4d31a47b5dcca63283484eb0de8cfe244775875fde632e7fb38cdc87b407b18ccd48726400"}}, {0x92, &(0x7f00000039c0)=@string={0x92, 0x3, "173686a5b66a68c7c8c0f9ff6a38bffc56c3cce28f4f77af1fcc13ac9e1853488d1db764b723b3936848ad2b9ecfae8ed54f36c5f63fbe93d3ed8ffbf341f00822466879e79002bc9ca5880f89240837d0245e53fa392145e941cc95e7a8d98c62a44bc0005757ed49b70cba90c5df9e4fd8dfc5f9342d79a679eb7c2911da1074329bd6eb0da32cf2f449294f4990dd"}}, {0x4, &(0x7f0000003a80)=@lang_id={0x4, 0x3, 0x1007}}, {0x46, &(0x7f0000003ac0)=@string={0x46, 0x3, "83ee4dda6a8070fa9990ea731ca1ee141409db8faa447d21d2a930567ddbde7a6655aec101e3456e774636bf8205ddabe59daaba8cb978339c23f5eac0c2139a1dbb88a4"}}]}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003c40), r0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000003c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000003f80)={&(0x7f0000003c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003f40)={&(0x7f0000003cc0)={0x270, r9, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9, 0x33}}}}, [@NL80211_ATTR_IE={0x2a, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x26, 0x60}}, @peer_mgmt={0x75, 0x16, {0x1, 0xe, @void, @val=0x34, @val="b1404f1f2334770ac7be50c5815d0c0a"}}, @channel_switch={0x25, 0x3, {0x0, 0xb9, 0x8}}]}, @NL80211_ATTR_IE={0x172, 0x2a, [@tim={0x5, 0xc5, {0x7, 0xe9, 0x0, "264bc6eb9f715d1d64efdf6719bb74f0cbb8cd6cd5dc43cfe10247fa925343b04204f44f704dd1b1d2eec4d2f7865fcf7ca1a4f40c027cf686f2f3d6a9afdb94f37b5af524378f85682a353edc48a8dd8b4ae2a0500afd59c36c52aa07caad4033db11de8a6424c426de0ef28714b167131f0df2df2cd997fa09bf91a60314dce3e9a67b7ba1fa783246561474dbc160c5be0dd59ec40c043f24000ecb8f245700f64f2e28a36b07454997ba6972d552416a0d959bba5757bbe1d30e45ab37f88539"}}, @rann={0x7e, 0x15, {{0x1, 0x1}, 0x40, 0x40, @device_a, 0x6, 0x6, 0x2}}, @mesh_chsw={0x76, 0x6, {0x1, 0x0, 0x41, 0x6}}, @preq={0x82, 0x46, {{0x0, 0x1}, 0x5, 0x1c, 0x0, @device_a, 0x8001, @void, 0x9, 0x8, 0x4, [{{0x1, 0x0, 0x1}, @broadcast, 0x7}, {{0x1}, @device_b, 0x6}, {{0x0, 0x0, 0x1}, @device_b, 0x1}, {{}, @broadcast, 0x9}]}}, @tim={0x5, 0x28, {0x9, 0x30, 0x8, "732c175aad6858ec4246d694bd9e4faaffbc76755af4846312bcf309f5c5d2161fe4c3f4b5"}}, @peer_mgmt={0x75, 0x14, {0x0, 0x3000, @void, @void, @val="48fdc394b8c84c994e8c8ed7b8e9d023"}}]}, @NL80211_ATTR_IE={0xa5, 0x2a, [@tim={0x5, 0x9f, {0x6, 0x15, 0x0, "cc61c88302067de0f3cf0559bb854ef547e8f711edfa1abd119784a75a74ef026a32e5c18a5ec466c7d9508f5add76a9f6810af00ed9d7361f7798795167b4b507d843ec151501d309561afb299db35a218771eb214d66660084eecaace4001e10d9a9cdfab999c47c48684ee81d4bcd6244dc8e90b0ff9e46d6e5f5687605c0f057393cc23b6e36b4aada8127d60d1aaca021b9b9691eaa8420c1d4"}}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x20040080}, 0x48044) fcntl$setown(r6, 0x8, r5) bpf$PROG_LOAD(0x5, &(0x7f00000044c0)={0xe, 0x32, &(0x7f0000003fc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_fd={0x18, 0x3, 0x1, 0x0, r8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000004180)='GPL\x00', 0x7, 0x61, &(0x7f00000041c0)=""/97, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x37, r0, 0x8, &(0x7f0000004240)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000004280)={0x2, 0x10, 0xc, 0x3b99}, 0x10, 0x0, r8, 0x4, &(0x7f0000004440)=[r8], &(0x7f0000004480)=[{0x1, 0x5, 0x1, 0x6}, {0x2, 0x5, 0x8, 0x6}, {0x0, 0x4, 0x7, 0x6}, {0x2, 0x2, 0x8, 0x1}], 0x10, 0x8}, 0x94) kernel console output (not intermixed with test programs): , SerialNumber=3 [ 468.349356][ T5932] usb 1-1: SerialNumber: syz [ 468.392135][ T6038] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.403648][ T6038] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 468.416790][ T6038] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 468.432881][ T6038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 468.445074][ T6038] usb 3-1: SerialNumber: syz [ 468.578551][ T5932] usb 1-1: 0:2 : does not exist [ 468.617515][ T5932] usb 1-1: unit 5: unexpected type 0x09 [ 468.673027][ T6038] usb 3-1: 0:2 : does not exist [ 468.675275][ T5932] usb 1-1: USB disconnect, device number 79 [ 468.748024][ T6038] usb 3-1: USB disconnect, device number 92 [ 469.049249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.345249][T11410] netlink: 'syz.5.1497': attribute type 4 has an invalid length. [ 469.419278][ T5932] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 469.589960][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 469.652606][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.674728][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.704119][ T5875] Bluetooth: hci1: command tx timeout [ 469.709260][ T5932] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 469.718626][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.729995][ T6038] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 469.750345][ T5932] usb 4-1: config 0 descriptor?? [ 469.779316][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 469.901339][ T6038] usb 3-1: Using ep0 maxpacket: 16 [ 469.925091][ T6038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.950190][ T6038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.966236][T11396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.969263][ T6038] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 469.974839][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 469.988602][T11396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.019258][ T6038] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 470.028631][ T9] usb 6-1: config 0 has no interfaces? [ 470.037092][ T6038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.045941][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 470.059238][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 470.062889][ T6038] usb 3-1: config 0 descriptor?? [ 470.097856][ T9] usb 6-1: Manufacturer: syz [ 470.102670][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.182595][ T9] usb 6-1: config 0 descriptor?? [ 470.283036][ T5932] usbhid 4-1:0.0: can't add hid device: -71 [ 470.302786][ T5932] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 470.334563][ T5932] usb 4-1: USB disconnect, device number 106 [ 470.505581][T11422] tipc: Started in network mode [ 470.510970][T11422] tipc: Node identity 7f000001, cluster identity 4711 [ 470.518789][T11422] tipc: Enabling of bearer rejected, failed to enable media [ 470.537303][ T6038] input: HID 0955:7214 Haptics as /devices/virtual/input/input51 [ 470.783300][ T6038] shield 0003:0955:7214.0018: Registered Thunderstrike controller [ 470.800922][ T6038] shield 0003:0955:7214.0018: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 470.875271][T11427] delete_channel: no stack [ 471.013040][T11425] random: crng reseeded on system resumption [ 471.129236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.189372][ T6038] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 471.662865][ T6038] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 471.692688][ T5949] usb 3-1: USB disconnect, device number 93 [ 471.698779][ T5861] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 471.712110][ T6038] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 471.732890][ T5861] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 471.759487][ T6038] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 471.768889][ T5861] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 471.780553][ T6038] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.793962][ T5875] Bluetooth: hci1: command tx timeout [ 471.802383][T11427] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 471.813415][ T6038] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 471.833555][ T5861] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 472.169219][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.854947][ T30] kauditd_printk_skb: 122 callbacks suppressed [ 472.855200][ T30] audit: type=1326 audit(1765804888.376:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11443 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f50c618f749 code=0x7ffc0000 [ 473.104510][ T5932] usb 6-1: USB disconnect, device number 2 [ 473.202099][T11447] fuse: Bad value for 'fd' [ 473.209228][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.669597][ T5932] usb 1-1: USB disconnect, device number 80 [ 474.049348][ T5932] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 474.222106][ T5932] usb 1-1: unable to get BOS descriptor or descriptor too short [ 474.231866][ T5932] usb 1-1: config 26 has an invalid interface number: 153 but max is 0 [ 474.240244][ T5932] usb 1-1: config 26 has no interface number 0 [ 474.251089][ T5932] usb 1-1: config 26 interface 153 altsetting 2 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 474.262219][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.445743][ T5932] usb 1-1: config 26 interface 153 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 474.474911][ T5932] usb 1-1: config 26 interface 153 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 474.505895][ T5932] usb 1-1: config 26 interface 153 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 474.522543][ T5932] usb 1-1: config 26 interface 153 has no altsetting 0 [ 474.720393][ T5932] usb 1-1: New USB device found, idVendor=2357, idProduct=0100, bcdDevice=e3.d8 [ 474.729976][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.740223][ T5932] usb 1-1: Product: syz [ 474.751273][ T5932] usb 1-1: Manufacturer: syz [ 474.759704][ T5932] usb 1-1: SerialNumber: syz [ 474.898067][T11484] macvlan0: entered promiscuous mode [ 475.007019][ T5932] usb 1-1: USB disconnect, device number 81 [ 475.289244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.475355][ T5932] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 475.649468][ T5932] usb 6-1: Using ep0 maxpacket: 8 [ 475.656598][ T5932] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 475.670527][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.711711][ T5932] pvrusb2: Hardware description: Terratec Grabster AV400 [ 475.813821][ T5932] pvrusb2: ********** [ 475.844063][ T5932] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 475.868643][ T5932] pvrusb2: Important functionality might not be entirely working. [ 475.885735][ T5932] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 475.942897][ T5932] pvrusb2: ********** [ 475.967460][ T2346] pvrusb2: Invalid write control endpoint [ 476.215322][ T5932] usb 6-1: USB disconnect, device number 3 [ 476.329250][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.622120][ T2346] pvrusb2: Invalid write control endpoint [ 476.629048][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 476.678242][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 476.696140][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 476.714857][ T2346] pvrusb2: Device being rendered inoperable [ 476.726823][T11513] netlink: 'syz.0.1521': attribute type 9 has an invalid length. [ 476.740056][T11513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1521'. [ 476.756064][T11513] macvlan2: entered promiscuous mode [ 476.798710][T11510] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 476.807623][T11513] hsr0: entered promiscuous mode [ 476.812939][T11513] macvlan2: entered allmulticast mode [ 476.818730][T11513] hsr0: entered allmulticast mode [ 476.819724][ T9] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 476.823980][T11513] hsr_slave_0: entered allmulticast mode [ 476.850976][ T2346] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 476.862780][T11513] hsr_slave_1: entered allmulticast mode [ 476.886583][ T2346] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 476.999275][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 477.007459][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.007564][ T2346] pvrusb2: Attached sub-driver cx25840 [ 477.080437][ T9] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 477.092249][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.127467][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 477.159560][ T9] usb 4-1: Product: syz [ 477.163742][ T9] usb 4-1: Manufacturer: syz [ 477.168324][ T9] usb 4-1: SerialNumber: syz [ 477.207658][T11527] input: syz1 as /devices/virtual/input/input52 [ 477.220043][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 477.243136][ T9] usb 4-1: config 0 descriptor?? [ 477.285208][ T9] imon_raw 4-1:0.0: IR endpoint missing [ 477.369256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.513653][T11515] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1522'. [ 477.686337][T11515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1522'. [ 478.288109][T11560] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1534'. [ 478.409248][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.625317][T11571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.636647][T11571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.812405][T11573] tipc: Enabling of bearer rejected, already enabled [ 479.069631][ T6038] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 479.229229][ T6038] usb 3-1: Using ep0 maxpacket: 8 [ 479.244160][ T6038] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 479.253395][ T5949] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 479.275778][ T6038] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 479.294086][ T6038] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 479.316684][T11588] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 479.333344][ T6038] usb 3-1: Product: syz [ 479.341833][ T6038] usb 3-1: Manufacturer: syz [ 479.352494][ T6038] usb 3-1: SerialNumber: syz [ 479.421220][ T5949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.432319][ T5949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.449274][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.499838][ T9] usb 4-1: USB disconnect, device number 107 [ 479.568603][T11591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1544'. [ 479.579393][ T5949] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 479.618162][ T6038] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 479.646787][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.662815][ T6038] usb 3-1: Handspring Visor / Palm OS: port 109, is for unknown use [ 479.716111][ T6038] usb 3-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 479.725417][ T5949] usb 6-1: config 0 descriptor?? [ 479.754099][ T6038] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 479.818950][ T6038] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 479.865850][ T6038] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 479.988081][ T6038] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 480.281093][T11582] syzkaller0: entered promiscuous mode [ 480.293694][T11582] syzkaller0: entered allmulticast mode [ 480.489236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.406099][T11608] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 481.412664][T11608] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 481.476403][T11608] vhci_hcd vhci_hcd.0: Device attached [ 481.529331][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.713073][ T5861] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 481.841627][ T5932] usb 3-1: USB disconnect, device number 94 [ 481.853332][ T5932] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 481.867561][ T5932] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 481.894948][ T5932] visor 3-1:1.0: device disconnected [ 482.025575][T11609] vhci_hcd: connection reset by peer [ 482.059456][T10686] vhci_hcd vhci_hcd.3: stop threads [ 482.064830][T10686] vhci_hcd vhci_hcd.3: release socket [ 482.071455][T10686] vhci_hcd vhci_hcd.3: disconnect device [ 482.163005][T11628] xt_hashlimit: max too large, truncated to 1048576 [ 482.579214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.656727][T11632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.687443][T11632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.613587][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.924962][T11618] pimreg: entered allmulticast mode [ 483.972338][ T5949] usbhid 6-1:0.0: can't add hid device: -71 [ 483.983566][ T5949] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 484.013295][ T5949] usb 6-1: USB disconnect, device number 4 [ 484.069876][T11637] SET target dimension over the limit! [ 484.348166][T11653] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1564'. [ 484.499603][ T5932] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 484.507317][ T9] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 484.639874][ T5932] usb 3-1: device descriptor read/64, error -71 [ 484.659227][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.667917][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 484.675349][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 484.689247][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 484.708631][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.713935][T11669] kernel read not supported for file /!óel (pid: 11669 comm: syz.1.1567) [ 484.732373][ T9] usb 1-1: config 0 descriptor?? [ 484.742008][ T30] audit: type=1800 audit(1765804900.266:763): pid=11669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1567" name=21F3656C dev="mqueue" ino=40681 res=0 errno=0 [ 484.899358][ T5932] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 485.039418][ T5932] usb 3-1: device descriptor read/64, error -71 [ 485.145869][ T9] hid (null): unknown global tag 0xc [ 485.159736][ T5932] usb usb3-port1: attempt power cycle [ 485.192620][ T9] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0019/input/input53 [ 485.282393][ T9] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0019/input/input54 [ 485.300403][ T5949] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 485.347912][ T9] kye 0003:0458:5013.0019: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 485.368038][ T9] usb 1-1: USB disconnect, device number 82 [ 485.461067][ T5949] usb 6-1: config index 0 descriptor too short (expected 4891, got 27) [ 485.469687][ T5949] usb 6-1: config 0 has an invalid interface number: 205 but max is 0 [ 485.498336][ T5949] usb 6-1: config 0 has an invalid descriptor of length 223, skipping remainder of the config [ 485.519044][ T5932] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 485.520221][ T5949] usb 6-1: config 0 has no interface number 0 [ 485.545625][ T5949] usb 6-1: config 0 interface 205 altsetting 241 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 485.559985][ T5932] usb 3-1: device descriptor read/8, error -71 [ 485.569262][ T5949] usb 6-1: config 0 interface 205 has no altsetting 0 [ 485.578696][ T5949] usb 6-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 485.588800][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.597040][ T5949] usb 6-1: Product: syz [ 485.601486][ T5949] usb 6-1: Manufacturer: syz [ 485.606175][ T5949] usb 6-1: SerialNumber: syz [ 485.622604][ T5949] usb 6-1: config 0 descriptor?? [ 485.689260][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.799802][ T5932] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 485.822209][ T5932] usb 3-1: device descriptor read/8, error -71 [ 485.834770][ T5949] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 485.853876][ T5949] dvb-usb: bulk message failed: -22 (3/0) [ 485.886731][ T5949] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 485.910242][ T5949] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 485.936945][ T5949] usb 6-1: media controller created [ 485.948881][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 485.949624][ T5932] usb usb3-port1: unable to enumerate USB device [ 485.987030][ T5949] dvb-usb: bulk message failed: -22 (6/0) [ 486.009568][ T5949] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 486.052418][ T5949] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input55 [ 486.085683][ T5949] dvb-usb: schedule remote query interval to 150 msecs. [ 486.102472][ T5949] dvb-usb: bulk message failed: -22 (3/0) [ 486.121365][T11698] kvm: MWAIT instruction emulated as NOP! [ 486.128647][ T5949] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 486.145077][ T5949] usb 6-1: USB disconnect, device number 5 [ 486.178978][ T5949] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 486.209065][T11702] delete_channel: no stack [ 486.399277][ T794] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 486.449312][ T6038] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 486.556863][ T794] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.571257][ T794] usb 4-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 486.584855][ T6038] usb 1-1: device descriptor read/64, error -71 [ 486.594556][ T794] usb 4-1: config 1 interface 0 has no altsetting 0 [ 486.609623][ T794] usb 4-1: New USB device found, idVendor=0eef, idProduct=7224, bcdDevice= 0.40 [ 486.620397][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.628594][ T794] usb 4-1: Product: syz [ 486.633468][ T794] usb 4-1: Manufacturer: syz [ 486.638226][ T794] usb 4-1: SerialNumber: syz [ 486.654891][T11701] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 486.729239][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.779927][ T5949] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 486.799303][ T5861] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 486.839269][ T6038] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 486.888124][T11701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.897137][T11701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.008208][ T6038] usb 1-1: device descriptor read/64, error -71 [ 487.019105][ T5949] usb 6-1: Using ep0 maxpacket: 16 [ 487.048659][ T794] usbhid 4-1:1.0: can't add hid device: -71 [ 487.055654][ T794] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 487.067801][ T794] usb 4-1: USB disconnect, device number 108 [ 487.078786][ T5949] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 487.090720][ T5949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 487.124419][ T5949] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 487.134561][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.143154][ T6038] usb usb1-port1: attempt power cycle [ 487.151375][ T5949] usb 6-1: Product: syz [ 487.155623][ T5949] usb 6-1: Manufacturer: syz [ 487.160613][ T5949] usb 6-1: SerialNumber: syz [ 487.169059][ T5949] usb 6-1: config 0 descriptor?? [ 487.212700][ T5949] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 487.290831][ T5949] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 487.569291][ T6038] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 487.612161][T11722] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 487.618721][T11722] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 487.669017][T11722] vhci_hcd vhci_hcd.0: Device attached [ 487.681728][T11723] vhci_hcd: connection closed [ 487.681948][T10688] vhci_hcd vhci_hcd.3: stop threads [ 487.706199][ T6038] usb 1-1: device descriptor read/8, error -71 [ 487.713649][T10688] vhci_hcd vhci_hcd.3: release socket [ 487.743600][T10688] vhci_hcd vhci_hcd.3: disconnect device [ 487.769244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.848258][ T5949] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 487.856887][ T5949] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 487.979751][ T6038] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 488.040816][ T6038] usb 1-1: device descriptor read/8, error -71 [ 488.159596][ T6038] usb usb1-port1: unable to enumerate USB device [ 488.181892][T11741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.197955][T11741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.242239][ T5861] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 488.422875][ T5861] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 488.431879][ T5861] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 488.445551][ T5861] usb 3-1: config 150 has no interface number 0 [ 488.479310][ T5861] usb 3-1: config 150 interface 204 has no altsetting 0 [ 488.501634][ T5861] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 488.519633][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.539684][ T5861] usb 3-1: Product: syz [ 488.543892][ T5861] usb 3-1: Manufacturer: syz [ 488.549878][ T5861] usb 3-1: SerialNumber: syz [ 488.780389][ T5861] xr_serial 3-1:150.204: skipping garbage [ 488.786210][ T5861] xr_serial 3-1:150.204: xr_serial converter detected [ 488.809268][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.841959][ T5861] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 488.859308][ T5861] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 488.873284][ T5861] usb 3-1: USB disconnect, device number 99 [ 488.919223][ T5861] xr_serial 3-1:150.204: device disconnected [ 489.156285][ T5949] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 489.173346][ T5949] em28xx 6-1:0.0: No AC97 audio processor [ 489.270840][ T5932] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 489.326336][T11764] netlink: 'syz.0.1593': attribute type 1 has an invalid length. [ 489.431482][ T5932] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 489.440658][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.465008][ T5932] usb 4-1: config 0 descriptor?? [ 489.750012][ T5949] usb 6-1: USB disconnect, device number 6 [ 489.761697][ T5949] em28xx 6-1:0.0: Disconnecting em28xx [ 489.849237][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.961052][ T5932] usbhid 4-1:0.0: can't add hid device: -71 [ 489.967113][ T5932] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 489.977942][ T5949] em28xx 6-1:0.0: Freeing device [ 490.050028][ T5932] usb 4-1: USB disconnect, device number 109 [ 490.247022][T11780] macsec1: entered allmulticast mode [ 490.259933][T11780] veth1_macvtap: entered allmulticast mode [ 490.298518][T11780] veth1_macvtap: left allmulticast mode [ 490.534560][ T5949] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 490.574979][T11800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.594202][T11800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.701117][ T5949] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 490.729623][ T5949] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 490.746413][ T5949] usb 3-1: config 220 has no interface number 2 [ 490.779643][ T5949] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 490.796135][ T5949] usb 3-1: config 220 interface 0 has no altsetting 0 [ 490.803423][ T5932] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 490.815530][ T5949] usb 3-1: config 220 interface 76 has no altsetting 0 [ 490.823744][ T5949] usb 3-1: config 220 interface 1 has no altsetting 0 [ 490.833723][ T5949] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 490.843559][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.852045][ T5949] usb 3-1: Product: syz [ 490.856542][ T5949] usb 3-1: Manufacturer: syz [ 490.862845][ T5949] usb 3-1: SerialNumber: syz [ 490.899225][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.972406][ T5932] usb 6-1: Using ep0 maxpacket: 16 [ 490.980143][ T5932] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.993869][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 491.013054][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 491.029253][ T5933] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 491.038263][ T5932] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 491.049360][ T9] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 491.064799][ T5932] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.104864][ T5949] usb 3-1: selecting invalid altsetting 0 [ 491.115087][ T5932] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 491.115739][ T5949] usb 3-1: selecting invalid altsetting 0 [ 491.133421][ T5949] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 491.141189][ T5932] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 491.141217][ T5932] usb 6-1: Manufacturer: syz [ 491.155148][ T5949] uvcvideo 3-1:220.0: No valid video chain found. [ 491.157290][ T5932] usb 6-1: config 0 descriptor?? [ 491.175672][ T5949] usb 3-1: selecting invalid altsetting 0 [ 491.183020][ T5949] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 491.197582][ T5949] usb 3-1: USB disconnect, device number 100 [ 491.210119][ T5933] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 491.221651][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 491.231627][ T5933] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 491.248699][ T9] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 491.261219][ T5933] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 491.276634][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.287343][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.302711][ T9] usb 1-1: Product: syz [ 491.306915][ T9] usb 1-1: Manufacturer: syz [ 491.323464][T11812] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 491.330735][ T9] usb 1-1: SerialNumber: syz [ 491.337952][ T9] usb 1-1: config 0 descriptor?? [ 491.348220][ T5933] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 491.530056][ T5932] rc_core: IR keymap rc-hauppauge not found [ 491.535975][ T5932] Registered IR keymap rc-empty [ 491.551477][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 491.553913][T11812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.573045][ T5949] usb 1-1: USB disconnect, device number 87 [ 491.579335][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 491.601135][ T5932] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 491.640440][T11812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.721030][ T5932] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input56 [ 491.765822][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 491.925027][T11822] loop6: detected capacity change from 0 to 524287487 [ 491.932268][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.944151][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 491.994398][T11822] Buffer I/O error on dev loop6, logical block 0, async page read [ 492.002987][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 492.006918][T11822] Buffer I/O error on dev loop6, logical block 0, async page read [ 492.023792][T11822] Buffer I/O error on dev loop6, logical block 0, async page read [ 492.040853][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 492.089405][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 492.109572][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 492.149302][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 492.157903][T11822] Buffer I/O error on dev loop6, logical block 0, async page read [ 492.166234][T11822] Buffer I/O error on dev loop6, logical block 0, async page read [ 492.174517][T11822] Buffer I/O error on dev loop6, logical block 0, async page read [ 492.182689][T11822] Buffer I/O error on dev loop6, logical block 0, async page read [ 492.190782][T11822] Buffer I/O error on dev loop6, logical block 0, async page read [ 492.199935][T11822] ldm_validate_partition_table(): Disk read failed. [ 492.206840][T11822] Buffer I/O error on dev loop6, logical block 0, async page read [ 492.215371][T11822] Buffer I/O error on dev loop6, logical block 0, async page read [ 492.223553][T11822] Dev loop6: unable to read RDB block 0 [ 492.229748][T11822] loop6: unable to read partition table [ 492.247216][T11822] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 492.369723][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 492.417244][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 492.439766][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 492.460997][ T5932] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 492.470615][ T5932] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 492.519835][ T5932] usb 6-1: USB disconnect, device number 7 [ 492.810051][T11831] FAULT_INJECTION: forcing a failure. [ 492.810051][T11831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.840268][T11831] CPU: 1 UID: 0 PID: 11831 Comm: syz.0.1613 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.840304][T11831] Tainted: [L]=SOFTLOCKUP [ 492.840312][T11831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 492.840329][T11831] Call Trace: [ 492.840337][T11831] [ 492.840347][T11831] dump_stack_lvl+0x189/0x250 [ 492.840375][T11831] ? rcu_is_watching+0x15/0xb0 [ 492.840404][T11831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.840444][T11831] should_fail_ex+0x414/0x560 [ 492.840486][T11831] strncpy_from_user+0x36/0x2c0 [ 492.840520][T11831] __se_sys_add_key+0xcc/0x410 [ 492.840553][T11831] ? __pfx___se_sys_add_key+0x10/0x10 [ 492.840588][T11831] ? do_syscall_64+0xbe/0xf80 [ 492.840608][T11831] ? __x64_sys_add_key+0x20/0xc0 [ 492.840638][T11831] do_syscall_64+0xfa/0xf80 [ 492.840659][T11831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.840679][T11831] ? clear_bhb_loop+0x60/0xb0 [ 492.840702][T11831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.840725][T11831] RIP: 0033:0x7fec4a38f749 [ 492.840743][T11831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.840760][T11831] RSP: 002b:00007fec4b1cc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 492.840780][T11831] RAX: ffffffffffffffda RBX: 00007fec4a5e5fa0 RCX: 00007fec4a38f749 [ 492.840795][T11831] RDX: 0000200000001940 RSI: 0000200000001900 RDI: 00002000000018c0 [ 492.840807][T11831] RBP: 00007fec4b1cc090 R08: fffffffffffffffe R09: 0000000000000000 [ 492.840827][T11831] R10: 00000000000fffff R11: 0000000000000246 R12: 0000000000000001 [ 492.840838][T11831] R13: 00007fec4a5e6038 R14: 00007fec4a5e5fa0 R15: 00007fec4a70fa28 [ 492.840867][T11831] [ 492.999270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.003107][ C1] hrtimer: interrupt took 153987754 ns [ 493.043609][ T5932] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 493.100324][T11833] : entered promiscuous mode [ 493.234865][ T5932] usb 6-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 493.244760][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.254689][ T5932] usb 6-1: Product: syz [ 493.259681][T11837] dummy0: entered allmulticast mode [ 493.265524][ T5932] usb 6-1: Manufacturer: syz [ 493.271451][T11837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1616'. [ 493.281082][ T5932] usb 6-1: SerialNumber: syz [ 493.288981][ T5932] usb 6-1: config 0 descriptor?? [ 493.295074][T11836] dummy0: left allmulticast mode [ 493.305585][ T5932] hub 6-1:0.0: bad descriptor, ignoring hub [ 493.305604][ T5932] hub 6-1:0.0: probe with driver hub failed with error -5 [ 493.306171][ T5932] f81232 6-1:0.0: f81534a converter detected [ 493.521251][ T5932] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 493.545375][T11846] netlink: 'syz.1.1618': attribute type 4 has an invalid length. [ 493.559263][T11846] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1618'. [ 493.581162][T11846] .`: renamed from bond0 (while UP) [ 493.643048][ T5932] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 493.685865][T11852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.715805][T11852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.736172][ T5932] usb 6-1: USB disconnect, device number 8 [ 493.745226][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'. [ 493.755020][ T5932] f81232 6-1:0.0: device disconnected [ 493.762529][T11852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1619'. [ 493.781269][T11852] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1619'. [ 493.835240][T11852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.848089][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'. [ 493.863747][T11852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.869457][T11854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1619'. [ 493.926222][T11854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1619'. [ 494.009260][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.278427][ T5861] usb 4-1: USB disconnect, device number 110 [ 494.490882][ T5949] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 494.813754][ T9] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 494.826535][T11879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1621'. [ 494.889610][ T5949] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 494.941531][ T5949] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 494.968985][ T5949] usb 3-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 495.001295][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.019275][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 495.026447][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 495.037728][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 495.050915][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 495.062064][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.086302][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 495.110033][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 495.122209][T11859] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 495.170570][ T5949] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 495.199316][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 495.218000][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.269356][ T9] usb 1-1: config 0 descriptor?? [ 495.280395][T11867] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 495.499000][T11867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.515917][T11867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.788480][ T794] usb 1-1: USB disconnect, device number 88 [ 495.790957][ T5875] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 495.804200][ T5949] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 495.999348][ T5949] usb 4-1: device descriptor read/64, error -71 [ 496.099234][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.214004][T11891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.239290][ T5949] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 496.339746][T11891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.369471][ T5949] usb 4-1: device descriptor read/64, error -71 [ 496.479522][ T5949] usb usb4-port1: attempt power cycle [ 496.850575][ T5949] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 496.930035][ T5949] usb 4-1: device descriptor read/8, error -71 [ 497.048101][ T794] usb 3-1: USB disconnect, device number 101 [ 497.129229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.215758][T11902] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 497.222841][ T5949] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 497.250010][ T5949] usb 4-1: device descriptor read/8, error -71 [ 497.360091][ T5949] usb usb4-port1: unable to enumerate USB device [ 497.479414][ T794] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 497.654311][ T794] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 497.664685][ T794] usb 3-1: config 0 has no interface number 0 [ 497.681851][ T794] usb 3-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 497.706545][ T794] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 497.829282][ T794] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 497.888995][ T794] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 497.906261][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.957409][ T794] usb 3-1: config 0 descriptor?? [ 497.982723][ T794] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input57 [ 498.164659][T11920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1636'. [ 498.169261][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.544278][ T5932] usb 3-1: USB disconnect, device number 102 [ 498.649534][ T9] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 498.804615][T11935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1641'. [ 498.832369][T11935] bridge_slave_1: left promiscuous mode [ 498.838673][T11935] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.852143][T11935] : left allmulticast mode [ 498.856900][T11935] : left promiscuous mode [ 498.857987][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 498.862450][T11935] bridge0: port 1() entered disabled state [ 498.899920][ T9] usb 1-1: config 1 interface 0 altsetting 210 endpoint 0x1 has invalid maxpacket 584, setting to 64 [ 498.919403][ T9] usb 1-1: config 1 interface 0 altsetting 210 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 498.939245][ T5932] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 498.963486][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 498.999293][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 499.008409][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.021279][ T9] usb 1-1: Product: ꄪ핿痔≿ⰴ쯲ট븨촦铭㭳뗮╰ﷇਆ崧鼩邠껮좜褨å©é¢¾ë¡â˜‰ï¦’⤤ඳä鹕䘌䇼⦮콾심횱闛 [ 499.051407][ T9] usb 1-1: Manufacturer: [ 499.059230][ T9] usb 1-1: SerialNumber: syz [ 499.080817][T11923] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 499.121421][ T5932] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 499.139239][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.165246][ T5932] usb 6-1: config 0 descriptor?? [ 499.209241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.246980][T11944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.289681][ T5949] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 499.290180][T11944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.449252][ T5949] usb 3-1: Using ep0 maxpacket: 32 [ 499.461484][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.488593][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.509391][ T5949] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 499.533311][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.558675][ T5949] usb 3-1: config 0 descriptor?? [ 499.566785][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 89 if 0 alt 210 proto 1 vid 0x0525 pid 0xA4A8 [ 499.575741][ T5949] hub 3-1:0.0: USB hub found [ 499.594903][T11930] netlink: 'syz.5.1639': attribute type 29 has an invalid length. [ 499.629292][ T5932] ath6kl: Failed to submit usb control message: -71 [ 499.635983][ T5932] ath6kl: unable to send the bmi data to the device: -71 [ 499.647095][ T9] usb 1-1: USB disconnect, device number 89 [ 499.670891][ T9] usblp0: removed [ 499.689528][ T5932] ath6kl: Unable to send get target info: -71 [ 499.696333][ T5932] ath6kl: Failed to init ath6kl core: -71 [ 499.712861][ T5932] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 499.760330][ T5932] usb 6-1: USB disconnect, device number 9 [ 499.775665][ T5949] hub 3-1:0.0: 1 port detected [ 499.996262][T11952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.007460][T11952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.048367][T11952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.062237][T11952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.159487][ T5932] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 500.225849][T11962] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1648'. [ 500.249385][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.266847][T11962] libceph: resolve '0.0' (ret=-3): failed [ 500.331112][ T5932] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 500.331145][ T5932] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 500.331172][ T5932] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 500.344489][ T5932] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 500.344521][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.344542][ T5932] usb 4-1: Product: syz [ 500.344558][ T5932] usb 4-1: Manufacturer: syz [ 500.344573][ T5932] usb 4-1: SerialNumber: syz [ 500.348469][ T5932] usb 4-1: config 0 descriptor?? [ 500.349309][T11950] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 500.349442][T11950] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 500.350935][ T5932] usb 4-1: ucan: probing device on interface #0 [ 500.443477][T11969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.443956][T11969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.571330][ T5932] usb 4-1: ucan: could not read protocol version, ret=0 [ 500.571357][ T5932] usb 4-1: ucan: probe failed; try to update the device firmware [ 500.777238][T11975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.788966][T11975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.789863][ T5932] usb 4-1: USB disconnect, device number 115 [ 501.111590][T11985] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1656'. [ 501.289234][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.370600][ T5949] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 501.533738][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.540377][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.549520][ T5932] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 501.709541][ T5932] usb 6-1: Using ep0 maxpacket: 32 [ 501.718149][ T5932] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 501.727447][ T5932] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 501.740246][ T5932] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 501.754611][ T5932] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 501.773013][ T5932] usb 6-1: config 0 interface 0 has no altsetting 0 [ 501.790421][ T5932] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 501.800890][ T5932] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 501.809533][ T5932] usb 6-1: Product: syz [ 501.818287][ T5932] usb 6-1: Manufacturer: syz [ 501.830677][ T5932] usb 6-1: SerialNumber: syz [ 501.844891][ T5932] usb 6-1: config 0 descriptor?? [ 501.858715][ T5932] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 501.872740][ T5932] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 501.879595][T12013] xt_TCPMSS: Only works on TCP SYN packets [ 502.083276][ T5932] usb 6-1: USB disconnect, device number 10 [ 502.113764][ T5932] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 502.139522][ T5949] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 502.162455][ T794] usb 3-1: USB disconnect, device number 103 [ 502.329231][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.372736][ T5949] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 502.403426][ T5949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 502.403461][ T5949] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 502.403529][ T5949] usb 1-1: New USB device found, idVendor=056a, idProduct=0039, bcdDevice= 0.00 [ 502.485528][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.488165][ T5949] usb 1-1: config 0 descriptor?? [ 502.488998][T12013] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 502.874637][T12034] libceph: resolve 'c' (ret=-3): failed [ 502.988830][T12041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.988932][ T5949] wacom 0003:056A:0039.001A: hidraw0: USB HID v0.00 Device [HID 056a:0039] on usb-dummy_hcd.0-1/input0 [ 502.997984][T12041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.123768][T12041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.145034][T12041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.346298][ T9] usb 1-1: USB disconnect, device number 90 [ 503.369265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.649558][ T30] audit: type=1326 audit(1765804919.166:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12056 comm="syz.2.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9898f749 code=0x7ffc0000 [ 503.674555][T12057] syz.2.1680(12057): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 503.745160][ T30] audit: type=1326 audit(1765804919.176:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12056 comm="syz.2.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9898f749 code=0x7ffc0000 [ 503.787933][ T30] audit: type=1326 audit(1765804919.196:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12056 comm="syz.2.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f9f9898f749 code=0x7ffc0000 [ 503.833379][ T30] audit: type=1326 audit(1765804919.216:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12056 comm="syz.2.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9898f749 code=0x7ffc0000 [ 503.857008][ T30] audit: type=1326 audit(1765804919.216:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12056 comm="syz.2.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9f9898f749 code=0x7ffc0000 [ 503.884950][ T30] audit: type=1326 audit(1765804919.216:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12056 comm="syz.2.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9898f749 code=0x7ffc0000 [ 503.937093][ T30] audit: type=1326 audit(1765804919.216:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12056 comm="syz.2.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9f9898f749 code=0x7ffc0000 [ 503.962867][ T30] audit: type=1326 audit(1765804919.216:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12056 comm="syz.2.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9898f749 code=0x7ffc0000 [ 503.996659][ T30] audit: type=1326 audit(1765804919.216:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12056 comm="syz.2.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9f9898f749 code=0x7ffc0000 [ 504.024539][ T30] audit: type=1326 audit(1765804919.216:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12056 comm="syz.2.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9898f749 code=0x7ffc0000 [ 504.229353][ T5861] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 504.304831][T12075] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1686'. [ 504.383380][ T5861] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 504.392241][ T5861] usb 1-1: config 0 has no interface number 0 [ 504.403985][ T5861] usb 1-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=c6.7f [ 504.409303][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.414080][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.449240][ T5861] usb 1-1: Product: syz [ 504.458403][ T5861] usb 1-1: Manufacturer: syz [ 504.469543][ T5861] usb 1-1: SerialNumber: syz [ 504.489067][ T5861] usb 1-1: config 0 descriptor?? [ 504.513421][ T5861] esd_usb 1-1:0.120: sending version message failed [ 504.525514][ T5861] esd_usb 1-1:0.120: probe with driver esd_usb failed with error -8 [ 504.741698][ T9] usb 1-1: USB disconnect, device number 91 [ 505.119392][ T9] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 505.459326][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.590706][ T9] usb 4-1: config 0 has an invalid interface number: 33 but max is 0 [ 505.598848][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.617238][ T9] usb 4-1: config 0 has no interface number 0 [ 505.628595][ T9] usb 4-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 505.659214][ T9] usb 4-1: config 0 interface 33 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 505.668981][ T9] usb 4-1: config 0 interface 33 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 505.742237][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 505.763026][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.789473][ T9] usb 4-1: Product: syz [ 505.801119][ T9] usb 4-1: Manufacturer: syz [ 505.809296][ T5932] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 505.817013][ T9] usb 4-1: SerialNumber: syz [ 505.832125][ T9] usb 4-1: config 0 descriptor?? [ 505.851576][T12084] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 505.907821][ T9] hdpvr 4-1:0.33: Could not find bulk-in endpoint [ 505.920179][ T9] hdpvr 4-1:0.33: probe with driver hdpvr failed with error -12 [ 505.969444][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 505.988635][ T5932] usb 1-1: config 0 has an invalid interface number: 238 but max is 0 [ 505.997682][ T5932] usb 1-1: config 0 has no interface number 0 [ 506.005608][ T5932] usb 1-1: config 0 interface 238 altsetting 255 endpoint 0x81 has an invalid bInterval 50, changing to 9 [ 506.018666][ T5932] usb 1-1: config 0 interface 238 altsetting 255 endpoint 0x81 has invalid maxpacket 1792, setting to 1024 [ 506.046218][ T5932] usb 1-1: config 0 interface 238 has no altsetting 0 [ 506.062223][ T5932] usb 1-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 506.085631][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.121207][ T5932] usb 1-1: config 0 descriptor?? [ 506.172669][T12090] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 506.489236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.391971][ T5932] usbhid 1-1:0.238: can't add hid device: -71 [ 507.403691][ T5932] usbhid 1-1:0.238: probe with driver usbhid failed with error -71 [ 507.422694][ T5932] usb 1-1: USB disconnect, device number 92 [ 507.453845][ T5861] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 507.529228][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.589280][ T5861] usb 3-1: device descriptor read/64, error -71 [ 507.731934][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1690'. [ 507.740996][T12111] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1690'. [ 507.771558][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1690'. [ 507.780918][T12111] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1690'. [ 507.811123][T10690] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.834614][T10690] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.845754][T10690] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.860981][ T5861] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 507.931852][ T5932] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 507.960623][T10690] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.089368][ T5861] usb 3-1: device descriptor read/64, error -71 [ 508.120496][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 508.132772][ T5932] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 508.142803][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.151147][ T5932] usb 1-1: Product: syz [ 508.162217][ T5932] usb 1-1: Manufacturer: syz [ 508.184693][ T5932] usb 1-1: SerialNumber: syz [ 508.201517][ T5861] usb usb3-port1: attempt power cycle [ 508.215316][ T5932] r8152-cfgselector 1-1: Unknown version 0x0000 [ 508.223198][ T5932] r8152-cfgselector 1-1: config 0 descriptor?? [ 508.332537][ T5949] usb 4-1: USB disconnect, device number 116 [ 508.439732][ T5932] r8152-cfgselector 1-1: Needed 1 retries to read version [ 508.569281][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.569807][ T5861] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 508.599829][ T5861] usb 3-1: device descriptor read/8, error -71 [ 508.648504][T12107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.720600][T12107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.742340][ T5949] r8152-cfgselector 1-1: USB disconnect, device number 93 [ 508.919230][ T5861] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 509.411372][ T5861] usb 3-1: device descriptor read/8, error -71 [ 509.530583][ T5861] usb usb3-port1: unable to enumerate USB device [ 509.609243][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.695524][T12127] sg_write: data in/out 1221621995/8 bytes for SCSI command 0x0-- guessing data in; [ 509.695524][T12127] program syz.1.1697 not setting count and/or reply_len properly [ 510.480614][T12146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1704'. [ 510.499426][T12146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1704'. [ 510.649239][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.944465][T12157] veth1_macvtap: left promiscuous mode [ 511.007723][T12161] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1709'. [ 511.410636][ T5949] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 511.592312][ T5949] usb 6-1: unable to get BOS descriptor or descriptor too short [ 511.617064][ T5949] usb 6-1: not running at top speed; connect to a high speed hub [ 511.642982][ T5949] usb 6-1: config 9 has an invalid interface number: 198 but max is 0 [ 511.664172][ T5949] usb 6-1: config 9 has no interface number 0 [ 511.684730][ T5949] usb 6-1: config 9 interface 198 has no altsetting 0 [ 511.689233][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.708629][ T5949] usb 6-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 511.730582][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.749344][ T5949] usb 6-1: Product: syz [ 511.759438][ T5949] usb 6-1: Manufacturer: syz [ 511.775552][ T5949] usb 6-1: SerialNumber: syz [ 512.018208][ T5949] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 512.062120][ T5949] dvb-usb: bulk message failed: -22 (3/0) [ 512.139671][ T5949] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 512.182758][ T5949] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 512.204138][ T5949] dvb_usb_umt_010 6-1:9.198: probe with driver dvb_usb_umt_010 failed with error -22 [ 512.234869][ T5949] usb 6-1: USB disconnect, device number 11 [ 512.326844][T12192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.346399][T12192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.383708][T12192] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 512.469273][ T5833] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 512.616489][T12196] netlink: 'syz.5.1719': attribute type 1 has an invalid length. [ 512.627352][ T5833] usb 1-1: not running at top speed; connect to a high speed hub [ 512.644313][ T5833] usb 1-1: config 1 has an invalid interface number: 54 but max is 0 [ 512.657828][ T5833] usb 1-1: config 1 has no interface number 0 [ 512.676584][ T5833] usb 1-1: config 1 interface 54 has no altsetting 0 [ 512.702561][T12198] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 512.729256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.737705][ T5833] usb 1-1: New USB device found, idVendor=1114, idProduct=0001, bcdDevice=f4.a7 [ 512.747094][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.758651][T12198] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 512.770791][ T5833] usb 1-1: Product: syz [ 512.780583][ T5833] usb 1-1: Manufacturer: syz [ 512.806467][ T5833] usb 1-1: SerialNumber: syz [ 512.817320][T12196] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 512.868708][T12196] bond1: (slave gretap1): making interface the new active one [ 512.905471][T12196] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 513.040328][T12184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.051293][T12184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.060926][T12184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.072119][T12184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.088342][T12184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.102061][T12184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.115719][T12184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.153269][T12184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.202834][T12184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.221552][T12184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.242681][ T5833] usb 1-1: USB disconnect, device number 94 [ 513.769240][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.079300][ T6038] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 514.117783][T12245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.126630][T12245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.249847][ T6038] usb 1-1: Using ep0 maxpacket: 32 [ 514.289470][ T6038] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 514.307404][ T6038] usb 1-1: config 0 has no interface number 0 [ 514.307599][ T5833] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 514.321927][ T6038] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 514.351369][ T6038] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.369518][ T6038] usb 1-1: Product: syz [ 514.384863][ T6038] usb 1-1: Manufacturer: syz [ 514.399562][ T6038] usb 1-1: SerialNumber: syz [ 514.410774][ T6038] usb 1-1: config 0 descriptor?? [ 514.434683][ T6038] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 514.489880][ T5833] usb 6-1: Using ep0 maxpacket: 32 [ 514.507194][ T5833] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 514.518738][ T5833] usb 6-1: config 0 has no interface number 0 [ 514.550501][ T5833] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 514.561001][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.593460][ T5833] usb 6-1: Product: syz [ 514.618297][ T5833] usb 6-1: Manufacturer: syz [ 514.633627][ T5833] usb 6-1: SerialNumber: syz [ 514.641065][T12241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.653234][ T5833] usb 6-1: config 0 descriptor?? [ 514.662495][T12241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.690953][ T5833] smsc95xx v2.0.0 [ 514.693450][T12241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.703731][T12241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.777627][ T6038] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 514.809251][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.819316][ T6038] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 514.959333][ T5932] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 514.968100][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 514.976210][ T6038] usb 1-1: USB disconnect, device number 95 [ 515.003834][ T6038] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 515.023388][ T6038] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 515.040913][ T6038] quatech2 1-1:0.51: device disconnected [ 515.069901][ T5833] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 515.089432][ T5833] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 515.136859][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 515.160612][ T5932] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 515.174870][ T5932] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 515.186717][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 515.195566][ T5932] usb 3-1: Product: syz [ 515.200315][ T5932] usb 3-1: Manufacturer: syz [ 515.205065][ T5932] usb 3-1: SerialNumber: syz [ 515.215046][ T5932] usb 3-1: config 0 descriptor?? [ 515.222221][T12252] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 515.264908][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 515.264925][ T30] audit: type=1326 audit(1765804930.786:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12262 comm="syz.1.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7576b8f749 code=0x7ffc0000 [ 515.294443][ T30] audit: type=1326 audit(1765804930.786:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12262 comm="syz.1.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7576b8f749 code=0x7ffc0000 [ 515.320499][ T30] audit: type=1326 audit(1765804930.846:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12262 comm="syz.1.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7576b8f749 code=0x7ffc0000 [ 515.343409][ T30] audit: type=1326 audit(1765804930.846:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12264 comm="syz.1.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7576bc2005 code=0x7ffc0000 [ 515.366040][ T30] audit: type=1326 audit(1765804930.846:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12262 comm="syz.1.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7576b8f749 code=0x7ffc0000 [ 515.389415][ T30] audit: type=1326 audit(1765804930.916:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12262 comm="syz.1.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f7576b8f749 code=0x7ffc0000 [ 515.412825][ T6038] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 515.421408][ T30] audit: type=1326 audit(1765804930.916:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12262 comm="syz.1.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7576b8f749 code=0x7ffc0000 [ 515.446246][ T30] audit: type=1326 audit(1765804930.916:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12262 comm="syz.1.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7576b8f749 code=0x7ffc0000 [ 515.481579][ T30] audit: type=1326 audit(1765804930.916:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12262 comm="syz.1.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7576b8f749 code=0x7ffc0000 [ 515.504679][ T30] audit: type=1326 audit(1765804930.916:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12262 comm="syz.1.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7576b8f749 code=0x7ffc0000 [ 515.564522][ T5932] usb 3-1: USB disconnect, device number 108 [ 515.600470][T12243] syzkaller1: entered promiscuous mode [ 515.608407][T12243] syzkaller1: entered allmulticast mode [ 515.617425][ T6038] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 515.634195][ T6038] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 515.651379][ T6038] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 515.661051][ T6038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.669232][ T6038] usb 4-1: Product: syz [ 515.673724][ T6038] usb 4-1: Manufacturer: syz [ 515.678381][ T6038] usb 4-1: SerialNumber: syz [ 515.686141][ T6038] usb 4-1: config 0 descriptor?? [ 515.696031][T12261] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 515.703667][T12261] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 515.849238][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.913198][T12261] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 515.920906][T12261] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 516.889356][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.950616][T12261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.972333][ T6038] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 517.001012][T12286] team0: Device gtp2 is of different type [ 517.043665][ T5861] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 517.206933][ T5861] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.218864][ T5861] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 517.290230][ T5861] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 517.299793][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 517.317680][ T5861] usb 1-1: SerialNumber: syz [ 517.397645][ T6038] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 517.439569][ T6038] usb 4-1: USB disconnect, device number 117 [ 517.463212][ T6038] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 517.593808][ T5861] usb 1-1: 0:2 : does not exist [ 517.613868][ T5861] usb 1-1: USB disconnect, device number 96 [ 517.832370][ T5833] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 517.845728][ T5833] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 517.883386][ T5833] usb 6-1: USB disconnect, device number 12 [ 517.939241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.555258][T12307] fuse: Bad value for 'fd' [ 518.859568][ T6038] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 518.969238][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.041989][ T6038] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.052199][ T6038] usb 1-1: config 0 interface 0 has no altsetting 0 [ 519.080406][ T6038] usb 1-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 519.114126][ T6038] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.154966][ T6038] usb 1-1: config 0 descriptor?? [ 519.686987][ T6038] aquacomputer_d5next 0003:0C70:F014.001B: unknown main item tag 0x0 [ 519.695596][ T6038] aquacomputer_d5next 0003:0C70:F014.001B: unknown main item tag 0x0 [ 519.699283][ T5833] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 519.703957][ T6038] aquacomputer_d5next 0003:0C70:F014.001B: unknown main item tag 0x0 [ 519.722357][T12319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.734720][T12319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.761998][ T6038] aquacomputer_d5next 0003:0C70:F014.001B: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.0-1/input0 [ 519.852282][ T5833] usb 3-1: device descriptor read/64, error -71 [ 519.890403][ T6038] usb 1-1: USB disconnect, device number 97 [ 520.009227][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.022480][T12337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 520.099605][ T5833] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 520.239536][ T5833] usb 3-1: device descriptor read/64, error -71 [ 520.340050][T12348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1759'. [ 520.359794][ T5833] usb usb3-port1: attempt power cycle [ 520.493061][T12351] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 520.716890][ T5833] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 520.730425][ T6038] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 520.739894][ T5833] usb 3-1: device descriptor read/8, error -71 [ 520.919281][ T6038] usb 1-1: Using ep0 maxpacket: 32 [ 520.929621][ T6038] usb 1-1: config 0 interface 0 has no altsetting 0 [ 520.944584][ T6038] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 520.961832][ T6038] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.984173][ T6038] usb 1-1: Product: syz [ 520.991690][ T5833] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 520.993144][ T6038] usb 1-1: Manufacturer: syz [ 521.007815][ T6038] usb 1-1: SerialNumber: syz [ 521.016150][ T6038] usb 1-1: config 0 descriptor?? [ 521.039961][ T5833] usb 3-1: device descriptor read/8, error -71 [ 521.044582][T12362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.049262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.057174][T12362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.190102][ T5833] usb usb3-port1: unable to enumerate USB device [ 521.201337][T12372] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1766'. [ 521.675009][ T6038] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 522.089238][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.634894][ T6038] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 522.654321][ T6038] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 522.682987][ T6038] usb 1-1: USB disconnect, device number 98 [ 522.885740][T12402] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1775'. [ 523.129274][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.639268][ T6038] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 523.823403][ T6038] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 523.845359][ T6038] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 523.874157][ T6038] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 523.904035][ T6038] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.961221][T12425] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 523.980380][T12425] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 524.005769][ T6038] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 524.169240][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.189236][ T5861] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 524.207960][ T5932] usb 6-1: USB disconnect, device number 13 [ 524.382464][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.420625][ T5861] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 524.457538][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.495092][ T5861] usb 4-1: config 0 descriptor?? [ 524.761271][T12453] binder: 12447:12453 ioctl c018620c 2000000000c0 returned -1 [ 524.834920][T12457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.843847][ T5861] logitech-hidpp-device 0003:046D:C086.001C: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.3-1/input0 [ 524.916121][T12457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.119975][ T5932] usb 4-1: USB disconnect, device number 118 [ 525.209882][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.352016][T12464] binder_alloc: 12461: binder_alloc_buf size 65088 failed, no address space [ 525.415105][T12464] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 525.456465][T12467] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 525.551616][T12467] bond4: (slave lo): Enslaving as a backup interface with an up link [ 525.556274][T12469] netlink: 'syz.2.1794': attribute type 7 has an invalid length. [ 525.568708][T12467] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 525.642455][T10679] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.677462][T10679] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.689607][T12469] netlink: 'syz.2.1794': attribute type 7 has an invalid length. [ 525.767005][T10679] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.846862][T10679] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.059623][ T5861] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 526.215521][T12482] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1798'. [ 526.250838][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.259468][ T5861] usb 1-1: Using ep0 maxpacket: 8 [ 526.277989][ T5861] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.363011][ T5861] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 526.451668][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.516741][ T5861] usb 1-1: config 0 descriptor?? [ 526.575220][ T5861] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 526.856482][T12497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.883247][T12497] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.058466][T12497] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 527.122759][T12503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.155036][T12503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.237112][T12503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.273351][T12503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.289250][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.329238][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.566587][ T5833] IPVS: starting estimator thread 0... [ 528.699324][T12521] IPVS: using max 49 ests per chain, 117600 per kthread [ 529.017047][T12533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.050475][ T5861] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 529.070436][T12533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.239324][ T5861] usb 3-1: Using ep0 maxpacket: 32 [ 529.247030][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 529.263656][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 529.294827][ T5861] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 529.305989][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.316752][ T5861] usb 3-1: Product: syz [ 529.321153][ T5861] usb 3-1: Manufacturer: syz [ 529.326308][ T5861] usb 3-1: SerialNumber: syz [ 529.335835][ T5861] usb 3-1: config 0 descriptor?? [ 529.369305][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.395945][ T5861] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 529.579465][T12531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.588243][T12531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.749913][ T5833] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 529.914223][T10685] usb 3-1: Failed to submit usb control message: -71 [ 529.923851][ T5932] usb 3-1: USB disconnect, device number 113 [ 529.924037][T10685] usb 3-1: unable to send the bmi data to the device: -71 [ 529.969373][ T5861] usb 1-1: USB disconnect, device number 99 [ 529.987482][T10685] usb 3-1: unable to get target info from device [ 530.013700][T10685] usb 3-1: could not get target info (-71) [ 530.029326][T10685] usb 3-1: could not probe fw (-71) [ 530.061272][ T5833] usb 6-1: device descriptor read/64, error -71 [ 530.276868][T12566] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 530.296249][T12566] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 530.309337][ T5833] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 530.409282][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.459285][ T5833] usb 6-1: device descriptor read/64, error -71 [ 530.569791][ T5833] usb usb6-port1: attempt power cycle [ 530.702992][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 530.704192][ T30] audit: type=1326 audit(1765804946.226:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12576 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9898f749 code=0x7ffc0000 [ 530.774628][ T30] audit: type=1326 audit(1765804946.286:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12576 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9898f749 code=0x7ffc0000 [ 530.805120][ T30] audit: type=1326 audit(1765804946.286:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12576 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9f9898f749 code=0x7ffc0000 [ 530.878969][ T30] audit: type=1326 audit(1765804946.286:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12576 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9898f749 code=0x7ffc0000 [ 530.917523][ T5833] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 530.924710][ T30] audit: type=1326 audit(1765804946.326:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12576 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9f9898f749 code=0x7ffc0000 [ 530.959984][ T5833] usb 6-1: device descriptor read/8, error -71 [ 531.011817][ T30] audit: type=1326 audit(1765804946.386:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12576 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9898f749 code=0x7ffc0000 [ 531.088024][ T30] audit: type=1326 audit(1765804946.396:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12576 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f9898f749 code=0x7ffc0000 [ 531.192927][ T30] audit: type=1326 audit(1765804946.396:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12576 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9898f749 code=0x7ffc0000 [ 531.276541][ T30] audit: type=1326 audit(1765804946.396:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12576 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9898f749 code=0x7ffc0000 [ 531.299529][ T5833] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 531.322733][ T30] audit: type=1326 audit(1765804946.426:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12576 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9f9898f749 code=0x7ffc0000 [ 531.323452][ T5833] usb 6-1: device descriptor read/8, error -71 [ 531.369350][ T6038] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 531.459294][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.551005][ T6038] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 531.558687][T12585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.576022][ T5833] usb usb6-port1: unable to enumerate USB device [ 531.579251][ T6038] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 531.593129][T12585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.625939][ T6038] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 531.665888][ T6038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 531.687073][ T6038] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 531.702863][ T6038] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 531.714609][ T6038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.746948][ T6038] usb 3-1: Product: syz [ 531.763466][ T6038] usb 3-1: Manufacturer: syz [ 531.777703][ T6038] usb 3-1: SerialNumber: syz [ 531.799994][ T6038] usb 3-1: config 0 descriptor?? [ 531.817010][T12578] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 531.859474][ T6038] usb 3-1: ucan: probing device on interface #0 [ 531.865822][ T6038] usb 3-1: ucan: invalid endpoint configuration [ 531.875662][ T6038] usb 3-1: ucan: probe failed; try to update the device firmware [ 532.072599][ T6038] usb 3-1: USB disconnect, device number 114 [ 532.446593][T12603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.459778][T12603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.475788][T12604] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1834'. [ 532.499321][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.019250][ T6038] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 533.189209][ T6038] usb 4-1: Using ep0 maxpacket: 16 [ 533.206175][ T6038] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 533.259070][ T6038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.277541][ T6038] usb 4-1: Product: syz [ 533.331938][ T6038] usb 4-1: Manufacturer: syz [ 533.353653][ T6038] usb 4-1: SerialNumber: syz [ 533.378607][ T6038] r8152-cfgselector 4-1: Unknown version 0x0000 [ 533.402580][ T6038] r8152-cfgselector 4-1: config 0 descriptor?? [ 533.529575][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.801837][ T5932] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 533.804635][ T6038] r8152-cfgselector 4-1: Unknown version 0x4810 [ 533.843975][ T6038] r8152-cfgselector 4-1: bad CDC descriptors [ 534.004295][ T5932] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 534.018298][ T5932] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 534.031963][ T5932] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 534.041736][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.050260][ T5932] usb 3-1: Product: syz [ 534.058258][ T5932] usb 3-1: Manufacturer: syz [ 534.085301][ T5932] usb 3-1: SerialNumber: syz [ 534.113737][ T5932] usb 3-1: config 0 descriptor?? [ 534.140395][T12624] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 534.147757][T12624] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 534.532461][T12624] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 534.569275][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.664682][ T5932] dm9601 3-1:0.0: probe with driver dm9601 failed with error -71 [ 534.746948][ T5932] usb 3-1: USB disconnect, device number 115 [ 535.292764][ T5932] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 535.459327][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 535.494618][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 535.567147][ T5932] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 535.608200][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.616463][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.656705][ T5932] usb 3-1: Product: syz [ 535.665689][ T5932] usb 3-1: Manufacturer: syz [ 535.681832][ T5932] usb 3-1: SerialNumber: syz [ 535.728266][ T5932] usb 3-1: config 0 descriptor?? [ 535.806876][ T5932] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 535.893132][ T5833] r8152-cfgselector 4-1: USB disconnect, device number 119 [ 535.980901][T10685] usb 3-1: Failed to submit usb control message: -71 [ 535.989611][ T5932] usb 3-1: USB disconnect, device number 116 [ 536.019253][T10685] usb 3-1: unable to send the bmi data to the device: -71 [ 536.139621][T10685] usb 3-1: unable to get target info from device [ 536.159648][T10685] usb 3-1: could not get target info (-71) [ 536.192170][T10685] usb 3-1: could not probe fw (-71) [ 536.649303][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.308279][T12685] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1852'. [ 537.689286][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.220116][T12705] xt_hashlimit: max too large, truncated to 1048576 [ 538.239304][ T5833] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 538.303436][T12705] fuse: Unknown parameter '000000000000000000030x0000000000000009' [ 538.379261][ T5861] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 538.399357][ T5833] usb 6-1: Using ep0 maxpacket: 32 [ 538.409335][ T5833] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 538.417962][ T5833] usb 6-1: config 0 has no interface number 0 [ 538.432975][ T5833] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 538.447807][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.468420][ T5833] usb 6-1: Product: syz [ 538.478470][ T5833] usb 6-1: Manufacturer: syz [ 538.494676][ T5833] usb 6-1: SerialNumber: syz [ 538.501035][T12708] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1860'. [ 538.532050][ T5861] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.532772][ T5833] usb 6-1: config 0 descriptor?? [ 538.543620][ T5861] usb 3-1: config 0 interface 0 has no altsetting 0 [ 538.559006][ T5833] smsc95xx v2.0.0 [ 538.559359][T12708] netlink: 'syz.0.1860': attribute type 1 has an invalid length. [ 538.659689][ T5861] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 538.670244][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.692192][ T5861] usb 3-1: Product: syz [ 538.699747][ T5861] usb 3-1: Manufacturer: syz [ 538.713947][ T5861] usb 3-1: SerialNumber: syz [ 538.729286][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.747975][ T5861] usb 3-1: config 0 descriptor?? [ 538.777442][ T5861] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 538.814030][ T5861] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 538.852266][ T5861] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 538.867638][ T5861] usb 3-1: media controller created [ 538.950610][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 539.063541][T12717] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1862'. [ 539.100197][ T5861] DVB: Unable to find symbol tda10046_attach() [ 539.106480][ T5861] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 539.134980][ T5861] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 539.346132][ T5932] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 539.590623][ T5932] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 539.600226][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.618840][ T5932] usb 4-1: config 0 descriptor?? [ 539.629881][ T5932] cp210x 4-1:0.0: cp210x converter detected [ 539.685667][ T5861] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 539.712043][ T5861] usb 3-1: USB disconnect, device number 117 [ 539.769278][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.781828][ T5833] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 539.798217][ T5833] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 539.820061][ T5833] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 539.841014][ T5932] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 539.848624][ T5932] cp210x 4-1:0.0: querying part number failed [ 539.875714][ T5833] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 539.906558][ T5932] usb 4-1: cp210x converter now attached to ttyUSB0 [ 539.924906][ T5833] usb 6-1: USB disconnect, device number 18 [ 540.070702][T12725] fuse: Bad value for 'fd' [ 540.227441][T12741] syzkaller1: entered promiscuous mode [ 540.243397][T12741] syzkaller1: entered allmulticast mode [ 540.400741][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 540.400765][ T30] audit: type=1326 audit(1765804955.926:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.0.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4a38f749 code=0x7ffc0000 [ 540.438213][ T30] audit: type=1326 audit(1765804955.956:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.0.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fec4a38f749 code=0x7ffc0000 [ 540.516186][ T30] audit: type=1326 audit(1765804955.956:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.0.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4a38f749 code=0x7ffc0000 [ 540.575019][ T30] audit: type=1326 audit(1765804955.956:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.0.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fec4a38f749 code=0x7ffc0000 [ 540.599352][ T30] audit: type=1326 audit(1765804955.956:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.0.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4a38f749 code=0x7ffc0000 [ 540.632320][ T30] audit: type=1326 audit(1765804955.956:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.0.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec4a38f749 code=0x7ffc0000 [ 540.663624][ T30] audit: type=1326 audit(1765804955.986:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.0.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4a38f749 code=0x7ffc0000 [ 540.708535][ T30] audit: type=1326 audit(1765804955.986:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.0.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec4a38f749 code=0x7ffc0000 [ 540.735386][ T30] audit: type=1326 audit(1765804955.986:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.0.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4a38f749 code=0x7ffc0000 [ 540.759007][ T30] audit: type=1326 audit(1765804955.986:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.0.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec4a38f749 code=0x7ffc0000 [ 540.809320][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.845795][ T6038] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 540.940639][T12766] 8021q: adding VLAN 0 to HW filter on device .` [ 540.960409][T12766] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 540.986494][T12767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.996096][T12767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.006141][ T6038] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 541.017015][ T6038] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 541.038920][ T6038] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 541.048671][ T6038] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.058672][ T6038] usb 1-1: Product: syz [ 541.063932][ T6038] usb 1-1: Manufacturer: syz [ 541.068949][ T6038] usb 1-1: SerialNumber: syz [ 541.074113][ T5861] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 541.087931][ T6038] usb 1-1: config 0 descriptor?? [ 541.097290][ T6038] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07 [ 541.229287][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 541.236732][ T5861] usb 3-1: config 0 has an invalid interface number: 130 but max is 0 [ 541.246575][ T5861] usb 3-1: config 0 has no interface number 0 [ 541.255295][ T5861] usb 3-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 541.264830][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.273037][ T5861] usb 3-1: Product: syz [ 541.277567][ T5861] usb 3-1: Manufacturer: syz [ 541.282428][ T5861] usb 3-1: SerialNumber: syz [ 541.291517][ T5861] usb 3-1: config 0 descriptor?? [ 541.312438][ T5861] as10x_usb: device has been detected [ 541.330137][ T5861] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 541.350521][ T6038] usb 1-1: USB disconnect, device number 100 [ 541.361885][ T5861] usb 3-1: DVB: registering adapter 2 frontend 0 (PCTV Systems picoStick (74e))... [ 541.386772][ T5861] as10x_usb: error during firmware upload part1 [ 541.404986][ T5861] Registered device PCTV Systems picoStick (74e) [ 541.505945][ T5861] usb 3-1: USB disconnect, device number 118 [ 541.535133][ T5861] Unregistered device PCTV Systems picoStick (74e) [ 541.536532][ T5861] as10x_usb: device has been disconnected [ 541.849549][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.113837][ T6038] usb 4-1: USB disconnect, device number 120 [ 542.149579][ T5861] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 542.164289][ T6038] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 542.193239][ T6038] cp210x 4-1:0.0: device disconnected [ 542.329231][ T5861] usb 1-1: Using ep0 maxpacket: 16 [ 542.345317][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.417515][ T5861] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 542.495782][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.508877][ T5861] usb 1-1: config 0 descriptor?? [ 542.644661][T12787] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 542.789302][ T5833] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 542.889293][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.929369][ T6038] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 542.944017][ T5833] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.954545][ T5833] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 542.965789][ T5833] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 542.976183][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 542.985050][ T5833] usb 3-1: SerialNumber: syz [ 543.021113][T12774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.068022][T12774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.092116][ T5861] mcp2221 0003:04D8:00DD.001D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 543.140347][ T6038] usb 6-1: Using ep0 maxpacket: 8 [ 543.166351][ T6038] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 543.208427][ T6038] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 543.212222][T12786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.244941][ T6038] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 543.265407][T12786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.265407][ T6038] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 543.265457][ T6038] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 543.361216][ T6038] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.437001][ T5833] usb 3-1: 0:2 : does not exist [ 543.499367][ T5833] usb 3-1: USB disconnect, device number 119 [ 543.542462][ T5932] usb 1-1: USB disconnect, device number 101 [ 543.625096][T12789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.634919][T12789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.646618][ T6038] usb 6-1: usb_control_msg returned -32 [ 543.665141][ T6038] usbtmc 6-1:16.0: can't read capabilities [ 543.929346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.941408][T12802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1888'. [ 543.951097][ T6038] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 544.110488][ T6038] usb 4-1: Using ep0 maxpacket: 16 [ 544.112450][ T6038] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.112484][ T6038] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.112533][ T6038] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 544.112576][ T6038] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 544.112600][ T6038] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.115339][ T6038] usb 4-1: config 0 descriptor?? [ 544.379594][ T5861] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 544.449403][ T5949] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 544.532939][ T6038] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001E/input/input61 [ 544.544994][ T5861] usb 3-1: Using ep0 maxpacket: 32 [ 544.555772][ T5861] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 544.566883][ T5861] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 544.577621][ T6038] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 544.596162][ T5861] usb 3-1: config 0 interface 0 has no altsetting 0 [ 544.605546][ T5861] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 544.617917][ T5861] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 544.627110][ T5861] usb 3-1: Product: syz [ 544.631549][ T5861] usb 3-1: Manufacturer: syz [ 544.636312][ T5949] usb 1-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 544.647557][ T5861] usb 3-1: SerialNumber: syz [ 544.652802][ T5949] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.665283][ T5949] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.676350][ T5861] usb 3-1: config 0 descriptor?? [ 544.681590][ T5949] usb 1-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 544.695073][ T5949] usb 1-1: config 0 interface 0 has no altsetting 0 [ 544.702988][ T5949] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 544.712343][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.722679][ T5949] usb 1-1: config 0 descriptor?? [ 544.732194][T12792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.746361][T12792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.774009][ T5932] usb 4-1: USB disconnect, device number 121 [ 544.904641][ T5861] gs_usb 3-1:0.0: Couldn't get device config: (err=-32) [ 544.912121][ T5861] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -32 [ 544.969363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.143307][ T5949] hid (null): bogus close delimiter [ 545.149601][ T5932] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 545.309376][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 545.316837][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.327620][ T5932] usb 4-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 545.337877][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.376387][ T5932] usb 4-1: config 0 descriptor?? [ 545.545006][ T5949] uclogic 0003:5543:004D.001F: failed retrieving Huion firmware version: -71 [ 545.555813][ T5949] uclogic 0003:5543:004D.001F: failed probing parameters: -71 [ 545.567423][ T5949] uclogic 0003:5543:004D.001F: probe with driver uclogic failed with error -71 [ 545.583353][ T5949] usb 1-1: USB disconnect, device number 102 [ 545.803834][ T5932] betop 0003:11C0:5506.0020: hidraw0: USB HID vff.fb Device [HID 11c0:5506] on usb-dummy_hcd.3-1/input0 [ 545.815700][ T5932] betop 0003:11C0:5506.0020: no inputs found [ 545.874347][ T5932] usb 6-1: USB disconnect, device number 19 [ 545.997084][ T5949] usb 3-1: USB disconnect, device number 120 [ 546.008079][ T5833] usb 4-1: USB disconnect, device number 122 [ 546.014244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.269332][ T5932] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 546.307938][T12847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.324086][T12847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.350194][T12847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.363668][T12847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.432159][ T5932] usb 6-1: Using ep0 maxpacket: 32 [ 546.439411][ T5949] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 546.441914][ T5932] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 546.463879][ T5932] usb 6-1: config 0 has no interface number 0 [ 546.474176][ T5932] usb 6-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 546.491336][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.500815][ T5932] usb 6-1: Product: syz [ 546.505031][ T5932] usb 6-1: Manufacturer: syz [ 546.510131][ T5932] usb 6-1: SerialNumber: syz [ 546.518965][ T5932] usb 6-1: config 0 descriptor?? [ 546.569348][ T5949] usb 3-1: device descriptor read/64, error -71 [ 546.741339][ T5932] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 546.784808][ T5932] usb 6-1: USB disconnect, device number 20 [ 546.811904][ T5949] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 546.860986][T12860] netlink: 'syz.3.1903': attribute type 1 has an invalid length. [ 546.951562][T12860] bond4: entered promiscuous mode [ 546.969671][ T5949] usb 3-1: device descriptor read/64, error -71 [ 547.049274][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.083210][ T5949] usb usb3-port1: attempt power cycle [ 547.101861][T12860] 8021q: adding VLAN 0 to HW filter on device bond4 [ 547.166784][T12864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1903'. [ 547.293500][T12863] 8021q: adding VLAN 0 to HW filter on device bond4 [ 547.320881][T12869] No such timeout policy "syz1" [ 547.382549][T12863] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 547.431420][T12863] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 547.451216][T12863] bond4: (slave ip6gre1): making interface the new active one [ 547.459989][T12863] ip6gre1: entered promiscuous mode [ 547.465398][ T5949] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 547.477803][T12863] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 547.553252][ T5949] usb 3-1: device descriptor read/8, error -71 [ 547.779468][T12887] fuse: Unknown parameter '' [ 547.817717][ T6038] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 547.825514][ T5949] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 547.866967][ T5949] usb 3-1: device descriptor read/8, error -71 [ 547.979673][ T5949] usb usb3-port1: unable to enumerate USB device [ 547.999301][ T6038] usb 6-1: Using ep0 maxpacket: 32 [ 548.010433][ T6038] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 548.024537][ T6038] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.043523][ T6038] usb 6-1: Product: syz [ 548.053737][ T6038] usb 6-1: Manufacturer: syz [ 548.065369][ T6038] usb 6-1: SerialNumber: syz [ 548.075974][T12864] bond4 (unregistering): (slave ip6gre1): Releasing backup interface [ 548.086253][ T6038] usb 6-1: config 0 descriptor?? [ 548.099293][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.100958][ T6038] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 548.128305][T12864] ip6gre1: left promiscuous mode [ 548.206107][T12864] bond4 (unregistering): Released all slaves [ 548.276267][T12867] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1903'. [ 548.307011][T12877] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1907'. [ 548.582994][T12898] netlink: 'syz.1.1913': attribute type 21 has an invalid length. [ 548.591652][T12898] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1913'. [ 548.648293][T12898] netlink: 'syz.1.1913': attribute type 4 has an invalid length. [ 548.667984][T12898] netlink: 'syz.1.1913': attribute type 5 has an invalid length. [ 548.768430][ T6038] gspca_ov534_9: reg_w failed -71 [ 548.797926][T12898] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1913'. [ 548.823037][T12902] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1912'. [ 548.907733][T12904] x_tables: ip_tables: ah match: only valid for protocol 51 [ 549.108880][T12906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.128549][ T6038] gspca_ov534_9: Unknown sensor 0000 [ 549.128614][ T6038] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 549.149761][T12906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.183181][ T6038] usb 6-1: USB disconnect, device number 21 [ 549.522684][T12910] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1917'. [ 549.589348][ T5833] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 549.749358][ T5833] usb 3-1: Using ep0 maxpacket: 32 [ 549.757326][ T5833] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 549.769009][ T5833] usb 3-1: config 0 has no interface number 0 [ 549.805943][ T5833] usb 3-1: config 0 interface 184 has no altsetting 0 [ 549.886538][ T5833] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 549.900668][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.969230][ T5833] usb 3-1: Product: syz [ 549.973603][ T5833] usb 3-1: Manufacturer: syz [ 549.978189][ T5833] usb 3-1: SerialNumber: syz [ 550.069238][ T5932] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 550.092453][ T5833] usb 3-1: config 0 descriptor?? [ 550.111587][ T5833] smsc75xx v1.0.0 [ 550.249455][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 550.261691][ T5932] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.321344][ T5932] usb 1-1: config 0 has no interfaces? [ 550.331551][ T5932] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.345475][ T5932] usb 1-1: config 0 has no interfaces? [ 550.353340][ T5932] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.364272][ T5932] usb 1-1: config 0 has no interfaces? [ 550.372029][ T5932] usb 1-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 550.386655][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 550.395102][ T5932] usb 1-1: Product: syz [ 550.399391][ T5932] usb 1-1: Manufacturer: syz [ 550.406273][ T5932] usb 1-1: config 0 descriptor?? [ 550.530331][ T6038] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 550.559276][ T5949] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 550.592021][ T5833] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 550.621441][ T5932] usb 1-1: USB disconnect, device number 103 [ 550.645224][ T5833] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 550.665062][ T5833] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 550.678074][ T5833] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 550.688185][ T5833] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 550.707306][ T5833] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 550.716831][ T6038] usb 4-1: device descriptor read/64, error -71 [ 550.734856][ T5949] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.751814][ T5833] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 550.761004][ T5949] usb 6-1: config 0 has no interfaces? [ 550.777344][ T5949] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 550.781688][ T5833] usb 3-1: USB disconnect, device number 125 [ 550.789262][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.808103][ T5949] usb 6-1: config 0 descriptor?? [ 550.874338][T12938] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 550.881610][T12938] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 550.894003][T12938] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 550.949259][ T6038] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 551.079298][ T6038] usb 4-1: device descriptor read/64, error -71 [ 551.236891][ T6038] usb usb4-port1: attempt power cycle [ 551.261981][T12949] vivid-007: disconnect [ 551.665261][ T6038] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 551.832269][ T6038] usb 4-1: device descriptor read/8, error -71 [ 552.079248][ T6038] usb 4-1: new full-speed USB device number 126 using dummy_hcd [ 552.110454][ T6038] usb 4-1: device descriptor read/8, error -71 [ 552.229564][ T6038] usb usb4-port1: unable to enumerate USB device [ 552.893572][ T5875] Bluetooth: hci1: command 0x0c1a tx timeout [ 553.104912][T12970] netlink: 'syz.0.1933': attribute type 5 has an invalid length. [ 553.434589][T12946] vivid-007: reconnect [ 553.465049][ T5833] usb 6-1: USB disconnect, device number 22 [ 553.506724][T12987] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1936'. [ 553.535430][T12988] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1936'. [ 553.611553][ T6038] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 553.709524][T12997] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1937'. [ 553.799252][ T6038] usb 3-1: Using ep0 maxpacket: 32 [ 553.809126][ T6038] usb 3-1: config 0 has an invalid interface number: 209 but max is 0 [ 553.817654][ T6038] usb 3-1: config 0 has no interface number 0 [ 553.824356][ T6038] usb 3-1: config 0 interface 209 has no altsetting 0 [ 553.855343][ T6038] usb 3-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 553.865664][ T6038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.880863][ T6038] usb 3-1: Product: syz [ 553.889254][ T6038] usb 3-1: Manufacturer: syz [ 553.903193][ T6038] usb 3-1: SerialNumber: syz [ 554.019268][ T5833] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 554.048574][ T6038] usb 3-1: config 0 descriptor?? [ 554.233715][ T5833] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 554.245222][ T5833] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 554.278969][T12974] fuse: Bad value for 'group_id' [ 554.284258][T12974] fuse: Bad value for 'group_id' [ 554.300262][ T5833] usb 6-1: config 220 interface 0 has no altsetting 0 [ 554.313349][ T6038] usb 3-1: USB disconnect, device number 126 [ 554.339279][ T5949] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 554.389300][ T5833] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 554.425507][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.434784][ T5833] usb 6-1: Product: syz [ 554.439053][ T5833] usb 6-1: Manufacturer: syz [ 554.444239][ T5833] usb 6-1: SerialNumber: syz [ 554.549488][ T5949] usb 4-1: Using ep0 maxpacket: 16 [ 554.583067][ T5949] usb 4-1: config 1 has an invalid descriptor of length 47, skipping remainder of the config [ 554.610521][ T5949] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 554.688997][ T5833] uvcvideo 6-1:220.0: Found Unit with invalid ID 0 [ 554.706862][ T5833] uvcvideo 6-1:220.0: probe with driver uvcvideo failed with error -22 [ 554.717813][ T5949] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 554.722453][ T5833] usb 6-1: USB disconnect, device number 23 [ 554.743579][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.765712][ T5949] usb 4-1: Product: syz [ 554.780544][ T5949] usb 4-1: Manufacturer: syz [ 554.794347][ T5949] usb 4-1: SerialNumber: syz [ 554.986006][ T5875] Bluetooth: hci1: command 0x0c1a tx timeout [ 555.609409][ T5861] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 555.799271][ T5861] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 555.809520][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.817562][ T5861] usb 6-1: Product: syz [ 555.847043][ T5861] usb 6-1: Manufacturer: syz [ 555.907632][ T5861] usb 6-1: SerialNumber: syz [ 555.964423][T13023] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 555.973199][T13023] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 556.321743][T13027] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 556.984272][T13044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1948'. [ 557.059325][ T5875] Bluetooth: hci1: command 0x0c1a tx timeout [ 557.082464][T13046] tipc: Enabled bearer , priority 0 [ 557.200125][ T5949] usb 4-1: 0:2 : does not exist [ 557.240160][ T5949] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 557.303802][ T5861] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 557.355345][ T5949] usb 4-1: USB disconnect, device number 127 [ 557.369405][ T5861] usb 6-1: 2:1 : sample bitwidth 205 in over sample bytes 2 [ 557.376863][ T5861] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 557.509471][ T5861] usb 6-1: USB disconnect, device number 24 [ 557.690216][ T5833] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 558.017090][ T5861] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 558.108140][ T5833] usb 3-1: Using ep0 maxpacket: 32 [ 558.167485][ T5833] usb 3-1: config 0 has an invalid interface number: 174 but max is 3 [ 558.261386][ T5833] usb 3-1: config 0 has an invalid interface number: 45 but max is 3 [ 558.270467][ T5932] tipc: Node number set to 2130706433 [ 558.277096][ T5833] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 558.330735][ T5833] usb 3-1: config 0 has no interface number 0 [ 558.337379][ T5833] usb 3-1: config 0 has no interface number 1 [ 558.344678][ T5833] usb 3-1: config 0 interface 45 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 558.358006][ T5833] usb 3-1: config 0 interface 45 altsetting 1 has 15 endpoint descriptors, different from the interface descriptor's value: 2 [ 558.365472][ T5861] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 558.388657][ T5833] usb 3-1: config 0 interface 174 has no altsetting 0 [ 558.403948][ T5833] usb 3-1: config 0 interface 45 has no altsetting 0 [ 558.414571][ T5833] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=a7.1d [ 558.416049][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.424263][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.456404][ T5833] usb 3-1: Product: syz [ 558.460789][ T5861] usb 6-1: Product: syz [ 558.470915][ T5861] usb 6-1: Manufacturer: syz [ 558.481069][ T5861] usb 6-1: SerialNumber: syz [ 558.601890][ T5833] usb 3-1: Manufacturer: syz [ 558.606599][ T5833] usb 3-1: SerialNumber: syz [ 558.615044][ T5861] usb 6-1: config 0 descriptor?? [ 558.617536][ T5833] usb 3-1: config 0 descriptor?? [ 558.642868][ T5861] ch341 6-1:0.0: ch341-uart converter detected [ 558.850858][ T5833] empeg 3-1:0.174: empeg converter detected [ 558.863932][ T5833] usb 3-1: active config #0 != 1 ?? [ 558.881076][ T5833] empeg 3-1:0.45: empeg converter detected [ 558.889295][ T5833] usb 3-1: active config #0 != 1 ?? [ 558.933006][ T5833] usb 3-1: USB disconnect, device number 127 [ 559.490160][T13052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.512758][T13052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.546876][ T5861] usb 6-1: failed to send control message: -71 [ 559.553710][ T5861] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 559.633726][ T5861] usb 6-1: USB disconnect, device number 25 [ 559.662114][ T5861] ch341 6-1:0.0: device disconnected [ 560.069693][ T5861] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 560.199315][ T5861] usb 3-1: device descriptor read/64, error -71 [ 560.338669][T13112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.374259][T13112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.409751][ T31] INFO: task kworker/0:6:5947 blocked for more than 143 seconds. [ 560.426318][T13112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.441749][ T31] Tainted: G L syzkaller #0 [ 560.449242][ T5861] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 560.464289][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 560.477114][T13112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.486796][ T31] task:kworker/0:6 state:D stack:21288 pid:5947 tgid:5947 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 560.502048][ T31] Workqueue: usb_hub_wq hub_event [ 560.508023][ T31] Call Trace: [ 560.511953][ T31] [ 560.515424][ T31] __schedule+0x14bc/0x5000 [ 560.522889][ T31] ? __pfx___schedule+0x10/0x10 [ 560.529716][T13112] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 560.539846][T13112] tipc: Resetting bearer [ 560.545975][ T31] ? schedule+0x91/0x360 [ 560.551709][ T31] schedule+0x165/0x360 [ 560.557139][ T31] schedule_timeout+0x9a/0x270 [ 560.562767][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 560.572993][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 560.580168][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 560.585837][ T31] ? wait_for_completion+0x267/0x5d0 [ 560.593235][ T31] wait_for_completion+0x2bf/0x5d0 [ 560.600025][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 560.605977][ T31] i2c_del_adapter+0x591/0x760 [ 560.610969][ T5861] usb 3-1: device descriptor read/64, error -71 [ 560.621364][ T31] ? kfree+0x1c0/0x660 [ 560.625734][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 560.631888][ T31] ? dvb_usbv2_exit+0x949/0xb90 [ 560.637059][ T31] dvb_usbv2_probe+0x497/0x3c20 [ 560.643802][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 560.649400][ T5833] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 560.650667][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 560.663674][ T31] usb_probe_interface+0x668/0xc90 [ 560.669094][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 560.675732][ T31] really_probe+0x26d/0xad0 [ 560.680901][ T31] __driver_probe_device+0x18c/0x320 [ 560.688763][ T31] driver_probe_device+0x4f/0x240 [ 560.694806][ T31] __device_attach_driver+0x279/0x430 [ 560.702919][ T31] bus_for_each_drv+0x251/0x2e0 [ 560.710373][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 560.717212][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 560.723258][ T5861] usb usb3-port1: attempt power cycle [ 560.733356][ T31] __device_attach+0x2b8/0x430 [ 560.738324][ T31] ? __pfx___device_attach+0x10/0x10 [ 560.744798][ T31] ? _raw_spin_unlock+0x28/0x50 [ 560.750390][ T31] device_initial_probe+0xa1/0xd0 [ 560.755690][ T31] bus_probe_device+0x12a/0x220 [ 560.761093][ T31] ? device_add+0x726/0xb80 [ 560.766932][ T31] device_add+0x7b6/0xb80 [ 560.772658][ T31] usb_set_configuration+0x1a87/0x2110 [ 560.778422][ T31] usb_generic_driver_probe+0x8d/0x150 [ 560.779316][ T5833] usb 6-1: device descriptor read/64, error -71 [ 560.784703][ T31] usb_probe_device+0x1c4/0x3c0 [ 560.796965][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 560.805240][ T31] really_probe+0x26d/0xad0 [ 560.813350][ T31] __driver_probe_device+0x18c/0x320 [ 560.818884][ T31] driver_probe_device+0x4f/0x240 [ 560.825469][ T31] __device_attach_driver+0x279/0x430 [ 560.832410][ T31] bus_for_each_drv+0x251/0x2e0 [ 560.837694][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 560.847100][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 560.853211][ T31] __device_attach+0x2b8/0x430 [ 560.859423][ T31] ? __pfx___device_attach+0x10/0x10 [ 560.868653][ T31] ? _raw_spin_unlock+0x28/0x50 [ 560.873868][ T31] device_initial_probe+0xa1/0xd0 [ 560.879438][ T31] bus_probe_device+0x12a/0x220 [ 560.884463][ T31] ? device_add+0x726/0xb80 [ 560.889041][ T31] device_add+0x7b6/0xb80 [ 560.893881][ T31] usb_new_device+0xa39/0x1720 [ 560.898722][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 560.904889][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 560.910568][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 560.915941][ T31] hub_event+0x29b1/0x4ef0 [ 560.920872][ T31] ? __pfx_hub_event+0x10/0x10 [ 560.925723][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 560.931683][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 560.936940][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 560.942884][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 560.948693][ T31] process_scheduled_works+0xad1/0x1770 [ 560.954747][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 560.960893][ T31] worker_thread+0x8a0/0xda0 [ 560.965666][ T31] ? __kthread_parkme+0x7b/0x200 [ 560.970806][ T31] kthread+0x711/0x8a0 [ 560.974966][ T31] ? __pfx_worker_thread+0x10/0x10 [ 560.980334][ T31] ? __pfx_kthread+0x10/0x10 [ 560.985060][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 560.990408][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 560.995665][ T31] ? __pfx_kthread+0x10/0x10 [ 561.000336][ T31] ret_from_fork+0x599/0xb30 [ 561.005463][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 561.011238][ T31] ? __switch_to_asm+0x39/0x70 [ 561.016047][ T31] ? __switch_to_asm+0x33/0x70 [ 561.021181][ T31] ? __pfx_kthread+0x10/0x10 [ 561.025844][ T31] ret_from_fork_asm+0x1a/0x30 [ 561.030820][ T31] [ 561.034204][ T31] [ 561.034204][ T31] Showing all locks held in the system: [ 561.037813][T10685] tipc: Resetting bearer [ 561.042374][ T31] 1 lock held by khungtaskd/31: [ 561.053879][ T31] #0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 561.064134][ T5833] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 561.079397][ T5861] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 561.091352][ T31] 2 locks held by getty/5590: [ 561.096104][ T31] #0: ffff88814d7de0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 561.115414][ T5861] usb 3-1: device descriptor read/8, error -71 [ 561.130755][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 561.156390][ T31] 7 locks held by kworker/0:3/5833: [ 561.162637][ T31] #0: ffff888140eb2148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 561.177420][ T31] #1: ffffc90003fafb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 561.189647][ T31] #2: ffff8880287c0198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 561.198647][ T31] #3: ffff8880287c3518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 561.208985][ T31] #4: ffff888027e04d68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 561.210296][ T5833] usb 6-1: device descriptor read/64, error -71 [ 561.219518][ T31] #5: ffffffff998e3780 (&tkd->lock){-.-.}-{2:2}, at: vkms_crtc_handle_vblank_timeout+0x30/0x290 [ 561.236263][ T31] #6: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 561.245273][ T31] 6 locks held by kworker/1:3/5861: [ 561.250777][ T31] #0: ffff888140eb2148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 561.262235][ T31] #1: ffffc900041cfb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 561.274329][ T31] #2: ffff888143b4a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 561.283713][ T31] #3: ffff888143b4d518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 561.297191][ T31] #4: ffff8881437c0d68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 561.307449][ T31] #5: ffffffff8ebd0770 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1850 [ 561.318656][ T31] 1 lock held by syz-executor/5879: [ 561.323961][ T31] #0: ffffffff8df47538 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 561.334988][ T31] 4 locks held by udevd/5912: [ 561.339788][ T31] #0: ffff888056b27b08 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 561.348677][ T31] #1: ffff8880591f3088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 561.349958][ T5833] usb usb6-port1: attempt power cycle [ 561.358286][ T31] #2: ffff88801afcf698 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 561.373569][ T5861] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 561.381164][ T31] #3: ffff888021aa6198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 561.391075][ T31] 5 locks held by kworker/0:6/5947: [ 561.396310][ T31] #0: ffff888140eb2148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 561.407750][ T31] #1: ffffc9000471fb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 561.420838][ T31] #2: ffff888143b32198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 561.430086][ T5861] usb 3-1: device descriptor read/8, error -71 [ 561.436347][ T31] #3: ffff888021aa6198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 561.445725][ T31] #4: ffff8880778e4160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 561.455144][ T31] 2 locks held by syz.1.1968/13116: [ 561.460441][ T31] #0: ffffffff8f311b48 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 561.470016][ T31] #1: ffffffff8df47538 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 561.481145][ T31] 1 lock held by syz.1.1968/13117: [ 561.486425][ T31] #0: ffffffff8f311b48 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 561.496131][ T31] [ 561.498535][ T31] ============================================= [ 561.498535][ T31] [ 561.507283][ T31] NMI backtrace for cpu 1 [ 561.507305][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 561.507329][ T31] Tainted: [L]=SOFTLOCKUP [ 561.507336][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 561.507347][ T31] Call Trace: [ 561.507354][ T31] [ 561.507363][ T31] dump_stack_lvl+0x189/0x250 [ 561.507391][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 561.507413][ T31] ? __pfx__printk+0x10/0x10 [ 561.507449][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 561.507475][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 561.507505][ T31] ? __pfx__printk+0x10/0x10 [ 561.507532][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 561.507561][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 561.507589][ T31] sys_info+0x135/0x170 [ 561.507612][ T31] watchdog+0xf95/0xfe0 [ 561.507645][ T31] ? watchdog+0x20a/0xfe0 [ 561.507679][ T31] kthread+0x711/0x8a0 [ 561.507708][ T31] ? __pfx_watchdog+0x10/0x10 [ 561.507735][ T31] ? __pfx_kthread+0x10/0x10 [ 561.507762][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 561.507792][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 561.507812][ T31] ? __pfx_kthread+0x10/0x10 [ 561.507838][ T31] ret_from_fork+0x599/0xb30 [ 561.507860][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 561.507888][ T31] ? __switch_to_asm+0x39/0x70 [ 561.507914][ T31] ? __switch_to_asm+0x33/0x70 [ 561.507939][ T31] ? __pfx_kthread+0x10/0x10 [ 561.507963][ T31] ret_from_fork_asm+0x1a/0x30 [ 561.508005][ T31] [ 561.508039][ T31] Sending NMI from CPU 1 to CPUs 0: [ 561.668213][ C0] NMI backtrace for cpu 0 [ 561.668235][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 561.668259][ C0] Tainted: [L]=SOFTLOCKUP [ 561.668266][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 561.668277][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 561.668301][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 a0 0c 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 561.668317][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 561.668333][ C0] RAX: 9e0f42ed6cc68a00 RBX: ffffffff81978eba RCX: 9e0f42ed6cc68a00 [ 561.668347][ C0] RDX: 0000000000000001 RSI: ffffffff8d7921b8 RDI: ffffffff8bc08360 [ 561.668360][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 561.668374][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f821e70 [ 561.668388][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 561.668399][ C0] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 561.668414][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 561.668427][ C0] CR2: 00007fec4a70a8d0 CR3: 0000000075926000 CR4: 00000000003526f0 [ 561.668446][ C0] Call Trace: [ 561.668454][ C0] [ 561.668461][ C0] default_idle+0x13/0x20 [ 561.668482][ C0] default_idle_call+0x73/0xb0 [ 561.668503][ C0] do_idle+0x1ea/0x520 [ 561.668522][ C0] ? irqentry_exit+0x5ba/0x660 [ 561.668542][ C0] ? __pfx_do_idle+0x10/0x10 [ 561.668568][ C0] cpu_startup_entry+0x44/0x60 [ 561.668587][ C0] rest_init+0x2de/0x300 [ 561.668610][ C0] start_kernel+0x3a7/0x400 [ 561.668639][ C0] x86_64_start_reservations+0x24/0x30 [ 561.668661][ C0] x86_64_start_kernel+0x143/0x1c0 [ 561.668682][ C0] common_startup_64+0x13e/0x147 [ 561.668712][ C0] [ 561.670037][ T5861] usb usb3-port1: unable to enumerate USB device [ 561.724753][ T5833] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 561.747950][ T5833] usb 6-1: device descriptor read/8, error -71 [ 561.757036][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 561.757061][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 561.757089][ T31] Tainted: [L]=SOFTLOCKUP [ 561.757098][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 561.757111][ T31] Call Trace: [ 561.757120][ T31] [ 561.757131][ T31] dump_stack_lvl+0x99/0x250 [ 561.757160][ T31] ? __asan_memcpy+0x40/0x70 [ 561.757181][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 561.757212][ T31] ? __pfx__printk+0x10/0x10 [ 561.757251][ T31] vpanic+0x237/0x6d0 [ 561.757276][ T31] ? __pfx_vpanic+0x10/0x10 [ 561.757300][ T31] ? preempt_schedule_common+0x83/0xd0 [ 561.757327][ T31] panic+0xb9/0xc0 [ 561.757351][ T31] ? __pfx_panic+0x10/0x10 [ 561.757375][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 561.757400][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 561.757431][ T31] watchdog+0xfdf/0xfe0 [ 561.757462][ T31] ? watchdog+0x20a/0xfe0 [ 561.757500][ T31] kthread+0x711/0x8a0 [ 561.757530][ T31] ? __pfx_watchdog+0x10/0x10 [ 561.757555][ T31] ? __pfx_kthread+0x10/0x10 [ 561.757583][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 561.757612][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 561.757631][ T31] ? __pfx_kthread+0x10/0x10 [ 561.757657][ T31] ret_from_fork+0x599/0xb30 [ 561.757679][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 561.757708][ T31] ? __switch_to_asm+0x39/0x70 [ 561.757734][ T31] ? __switch_to_asm+0x33/0x70 [ 561.757759][ T31] ? __pfx_kthread+0x10/0x10 [ 561.757785][ T31] ret_from_fork_asm+0x1a/0x30 [ 561.757827][ T31] [ 561.764333][ T31] Kernel Offset: disabled