last executing test programs: 19m8.310102486s ago: executing program 0 (id=527): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$cec(0x0, 0x0, 0x416400) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8004, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timerfd_create(0x0, 0x0) socket(0x1, 0x80000, 0xfffffffe) shutdown(0xffffffffffffffff, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/251, 0xfb, 0xacab) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f8bcffff00000000000000209595cff67daaf6469a7cfd1f7d94ea02000000000000"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x1005, &(0x7f0000001840)=""/4101, 0x0, 0x20}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4000}) r5 = socket(0x400000000010, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x2, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x60, 0x7, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xa}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) r9 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) r10 = getpid() sched_setattr(r10, 0x0, 0x0) sched_setattr(r10, &(0x7f00000000c0)={0x38, 0x0, 0x6, 0x5, 0xc, 0x8000000000000001, 0x1, 0x3, 0xf7f, 0x80000001}, 0x0) ioctl$RTC_UIE_ON(r9, 0x7003) 19m7.326461565s ago: executing program 0 (id=534): socket(0x2b, 0x80801, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000001740)="a3", 0x1, 0x20000000, &(0x7f00000005c0)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000001bc0)=0x3ff, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 19m7.23477501s ago: executing program 0 (id=536): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000001bd5f4", @ANYRES32=r5, @ANYBLOB="1c005e80080002000100000008000100", @ANYRES64=r5], 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') getpid() r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$VIDIOC_G_JPEGCOMP(r8, 0x808c563d, &(0x7f00000000c0)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) eventfd(0x400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000c40)) 19m6.53253592s ago: executing program 0 (id=539): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) fdatasync(r1) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r1) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x10, 0x3, 0x67, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x10, 0x8, 0x6}}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@getqdisc={0x30, 0x26, 0x800, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xb, 0x2}, {0xffff, 0xfff2}, {0xffe0}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x20000081) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0x502a4, 0x7a010}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x340}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}}, 0x8000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) openat$audio(0xffffff9c, &(0x7f00000000c0), 0x440002, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000500), 0x4080, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd27, 0xa000, {0x0, 0x0, 0x0, r8, {0x8, 0x7}, {}, {0xfff3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 19m5.465847504s ago: executing program 0 (id=542): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0x1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {0x0}], 0x4, 0x1) 19m5.153090499s ago: executing program 0 (id=545): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 19m4.648241277s ago: executing program 32 (id=545): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 17m52.694214855s ago: executing program 4 (id=913): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000006c0)={0xa, {{0x2, 0x4e24, @loopback}}}, 0x84) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e", 0x1c, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) close(0x3) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r5, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r6, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x41}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x20040080) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4df342", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x400, 0x0, 0x0, {[@generic={0x13, 0x2}]}}}}}}}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r9, @ANYBLOB="010028bd7000ffdbdf254b00000008000300", @ANYRES32=r10, @ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000013000500000000000300000007000000", @ANYRES32=r11, @ANYBLOB="000000000000000014001a80100005800c00038008"], 0x34}}, 0x0) r12 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$setlease(r12, 0x400, 0x0) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r13, 0x84, 0x70, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e23, 0xfffff303, @mcast1, 0x18000000}}, [0x4, 0x19, 0x80, 0x8, 0xd5, 0x7f, 0x100000001, 0xf1a, 0x8001, 0x8001, 0x4, 0x3ff, 0x20000000000000, 0x2f, 0x9]}, &(0x7f0000000200)=0xfc) 17m51.453796111s ago: executing program 4 (id=917): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x33fc, &(0x7f0000000740)={0x0, 0x8000198a, 0x20, 0x3, 0x22a, 0x0, r1}, 0x0, &(0x7f00000001c0)=0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, 0x0) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b9538000000000300060000000000020000000000000000090000000000000200010000000000000002fdff000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) lseek(r6, 0x10, 0xd14da709040405b4) ioctl$VHOST_VDPA_GET_AS_NUM(r6, 0x8004af7a, &(0x7f0000000080)) ioctl$KVM_GET_NR_MMU_PAGES(r6, 0xae45, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1000}, 0x1}) io_uring_enter(r2, 0x2deb, 0x4000, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) unshare(0x8000400) r8 = openat$vimc0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r8, 0xc028564e, &(0x7f00000000c0)={0x0, 0x1, [0x7, 0x8, 0x16, 0x1400, 0x81, 0x3, 0x7, 0x6]}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="050000007b000000430000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000e00000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000100)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003ffc, 0x8, 0x0, 0x0}}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000380), &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x3, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000004c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000180)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1, 0xe, 0x0, r9}) readv(r7, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth1\x00', @random="8bf173456786"}) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) r10 = userfaultfd(0x801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_CONTINUE(r10, 0xc028aa05, &(0x7f0000000000)={{&(0x7f0000afc000/0x3000)=nil, 0x3000}, 0x1000000}) 17m50.691183036s ago: executing program 4 (id=920): ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0xc0a45320, &(0x7f00000001c0)={0x80, 0x0, 'client0\x00', 0x80000001, "786281f043ca447c", "b437067509007708e18f85bb3d22ac7a6568af9ebb8891fdffa0225452869ac0", 0x0, 0xfffffffe}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0x1}, 'port1\x00', 0x0, 0x150014, 0x80, 0x200000, 0x503, 0x408, 0x2, 0x0, 0x4}) r0 = socket(0x10, 0x3, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x40187013, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) close(r1) 17m50.408931794s ago: executing program 4 (id=925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) fdatasync(r1) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r1) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x10, 0x3, 0x67, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x10, 0x8, 0x6}}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@getqdisc={0x30, 0x26, 0x800, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xb, 0x2}, {0xffff, 0xfff2}, {0xffe0}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x20000081) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0x502a4, 0x7a010}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x340}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}}, 0x8000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) openat$audio(0xffffff9c, &(0x7f00000000c0), 0x440002, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000500), 0x4080, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd27, 0xa000, {0x0, 0x0, 0x0, r8, {0x8, 0x7}, {}, {0xfff3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 17m49.406944194s ago: executing program 4 (id=929): syz_io_uring_setup(0x1d38, &(0x7f0000000340)={0x0, 0xc9e6, 0x10100, 0x0, 0x20}, &(0x7f00000003c0)=0x0, &(0x7f00000000c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_RECVMSG={0xa, 0xa, 0x0, r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000101, 0x1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) syz_open_dev$video(0x0, 0x4, 0x0) r4 = syz_usb_connect(0x5, 0x2d, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x3, 0x183a00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', 0x0, &(0x7f0000000080)='\x00\x00', 0x2, r7) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r8, 0x114, 0x3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x2) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x786c0, 0x0) syz_usb_disconnect(r4) syz_clone3(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, &(0x7f0000000140)) syz_usb_disconnect(r4) socket$inet6_udp(0xa, 0x2, 0x0) 17m47.753088701s ago: executing program 4 (id=936): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x4, 0x1) 17m47.474477749s ago: executing program 33 (id=936): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x4, 0x1) 17m1.155494919s ago: executing program 2 (id=1135): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x309501, 0x0) listen(r1, 0x7) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x56, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xc, 0xf989, "3a38c5c9a3e47e37"}]}}}}}}}}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x9) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x24, &(0x7f0000000100)={0x20, 0xe, 0x36, "000074a0ca5215f41606a04921f5f3bddd8b2da1f2f17b79959d29906c1cfddc9843b5d348546d82b48db53f4a118694e89c6df708f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000080)='virtiofs\x00', 0x0) r3 = dup2(r2, r2) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000040)='source', 0x0, r2) read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000e00)={0x18, &(0x7f0000000cc0)={0x40, 0xa, 0x2, "6597"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000580)={0x20, 0x7e0e36d0927102ef, 0x1, '_'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 16m55.990469471s ago: executing program 2 (id=1153): ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0xc0a45320, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x40187013, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x40}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) close(r1) 16m55.919564858s ago: executing program 2 (id=1154): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) eventfd(0x400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000c40)) 16m55.557835511s ago: executing program 2 (id=1156): r0 = socket(0x1e, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xe}, 0x8) sendto$inet6(r1, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x8}, 0x1c) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002500)=@polexpire={0xb8, 0x1b, 0x300, 0x70bd25, 0x25dfdbfc, {{{@in6=@local, @in=@multicast2, 0x4e23, 0x1, 0x4e20, 0x6, 0x2, 0x80, 0xe0, 0x92}, {0x4, 0x89ef, 0x5, 0x1, 0x400, 0x8, 0x6, 0x25}, {0x6, 0x81, 0x7, 0x101}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x3f}}, 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x18, 0x140c, 0x100, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x200000c1}, 0x8000) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000020601080000000000000000000000040c000300686173683a69700005000500030000000500"], 0x38}}, 0x4000000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) 16m54.525492015s ago: executing program 2 (id=1163): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000016c0)={0x2, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0xef, &(0x7f00000015c0)=""/239}]}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @remote}}}, 0x104) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001c0001"], 0x14}}, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r7 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x25, 0x0, &(0x7f0000000180)) 16m54.338596967s ago: executing program 2 (id=1165): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)={0x8, 0x100001d, 0x4003, 0x83ffffc, 0xb, "69b7841b47f3ce7a26149600"}) r1 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x201, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c81, 0xfffff) socket$kcm(0x2, 0x200000000000001, 0x106) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4) ftruncate(r6, 0x2007ffb) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendfile(r6, r6, 0x0, 0x1000000201005) 8m14.034392215s ago: executing program 3 (id=3561): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x1, 0xfd9, &(0x7f0000001840)=""/4057, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m12.144324717s ago: executing program 3 (id=3563): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 8m11.99132038s ago: executing program 3 (id=3564): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x0, 0xfa00, {0x3, &(0x7f0000001180)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r1, 0xc3ffffff, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x8, @local}}}, 0x118) 8m11.866407436s ago: executing program 3 (id=3565): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000010c0), 0xc9842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r2, &(0x7f00000000c0)=""/4096, 0x1000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x18da, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2, 0x401a}, &(0x7f0000000100), &(0x7f0000ffe000)) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffffffffbff, 0x9, 0x8, 0x2, 0x3}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x1, 0x9, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 8m9.523473493s ago: executing program 3 (id=3571): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0xa, 0x1) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0xc, 0x4, 0x0, 0x3c, 0x5c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2]}, @ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) socket$inet(0x2, 0xa, 0x1) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) (async) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0xc, 0x4, 0x0, 0x3c, 0x5c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2]}, @ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) (async) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) (async) 7m54.389580738s ago: executing program 35 (id=3571): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0xa, 0x1) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0xc, 0x4, 0x0, 0x3c, 0x5c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2]}, @ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) socket$inet(0x2, 0xa, 0x1) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) (async) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0xc, 0x4, 0x0, 0x3c, 0x5c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2]}, @ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) (async) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) (async) 5m54.745779893s ago: executing program 7 (id=4206): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) ptrace$pokeuser(0x6, r2, 0x800, 0x7) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b, 0x0, 0xffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) write$FUSE_INIT(r4, &(0x7f0000000e80)={0x50, 0xfffffffffffffffe, r3, {0x7, 0x2b, 0x0, 0x4181a002, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x50) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x90, 0x11, 0x148, 0x0, 0x0, 0x184, 0x2a8, 0x2a8, 0x184, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vlan1\x00', 'geneve1\x00', {}, {0xff}, 0x4, 0x1, 0x46}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x5, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x3}, 0x0, 0xd4, 0xf4, 0x0, {}, [@common=@inet=@ecn={{0x24}, {0x11, 0x1, 0x9, 0x5e}}, @common=@set={{0x40}, {{0x2, [0x1, 0x4, 0x0, 0x5, 0x1], 0x4, 0x5}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x274) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x4000000, 0x4) 5m54.341516858s ago: executing program 7 (id=4210): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x6, 0x3, 0x2, 0x800000000400000, 0x81, 0x0, {0x1, 0xfffffffffffffffd, 0x80000000000, 0x80000000004, 0x400000000000, 0x4000000000006, 0x0, 0xfffffffd, 0x1, 0x4000, 0x4000000, 0x0, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x1}}, 0x10) unshare(0x26000400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'veth1_to_bond\x00', {0x2, 0x0, @multicast2}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000014c0), 0x2500, 0x0) preadv(r3, &(0x7f0000001900)=[{&(0x7f00000000c0)=""/262, 0x106}], 0x1, 0x13a3, 0x7) syz_open_dev$vim2m(&(0x7f0000000340), 0x3, 0x2) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801c}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bond0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095018001020301090212000100000000090401000015cc1c00"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000380)={&(0x7f0000000100)=[{0x6, 0x10, 0x0, 0x0}, {0x2, 0x4000, 0x0, 0x0}, {0x9, 0x1000, 0x0, 0x0}], 0x3}) 5m51.153748992s ago: executing program 7 (id=4223): name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000100)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x6, 0x4, 0x25, 0x8}, 0xffffffff, 0x5}}, 0x0, 0x1400) r0 = epoll_create1(0x0) r1 = landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x2, @rand_addr=0x64010102}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000680)={r4, 0x8c4, 0x800}, &(0x7f0000000740)=0x8) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r2, 0x15b77000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) futex(&(0x7f00000017c0), 0x7, 0xfbfff8, 0x0, 0x0, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x13a8, 0xffffffff, 0x1140, 0x1218, 0x1140, 0xfeffffff, 0xffffffff, 0x12e0, 0x12e0, 0x12e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x111c, 0x1140, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x3, './cgroup.cpu/syz0\x00', 0x7, {0x80000000}}}, @common=@hbh={{0x48}, {0x4, 0x0, 0x0, [0x6, 0x1d, 0xb6, 0x6, 0x7, 0x6, 0x9, 0xd, 0x400, 0x8, 0x9, 0xff01, 0x3, 0xe, 0x8, 0x1], 0x1}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, [0xff, 0x0, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xff000000], 'nicvf0\x00', 'macvtap0\x00', {}, {}, 0x5e, 0x2, 0x0, 0x4}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x3, 0x1}, {0x1, 0x5, 0x1}, 0x5}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x1404) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x268, 0x0, 0x800000000000000}]}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r8, &(0x7f0000000080)={0x9d32f4b220c65367}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a901a078900be0083000049eec2"], 0x0}, 0x0) r11 = dup(r9) write$UHID_INPUT(r11, &(0x7f00000029c0)={0xa, {"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", 0x1000}}, 0x1006) setsockopt$RDS_GET_MR_FOR_DEST(r11, 0x114, 0x7, &(0x7f00000001c0)={@in6={0xa, 0x4e22, 0x20200000, @loopback, 0xfffffffe}, {&(0x7f0000000140)=""/119, 0x77}, &(0x7f00000000c0), 0x20}, 0xa0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x5000000c}) 5m50.53828305s ago: executing program 7 (id=4226): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) open_tree(r2, &(0x7f0000000080)='.\x00', 0x9001) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000000)={@mcast2, r5}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x2c, 0x11, 0x1, 0x70bd29, 0x1ffe, {0x0, 0x0, 0x74, r5, {0xfff5, 0x10}, {0x8, 0xfff1}, {0x0, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x30018000}, 0x840) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r6, @ANYRES16=r6], 0xd0}}, 0x4000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x339) close(r4) 5m50.198173608s ago: executing program 7 (id=4230): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002e00000080000000000000000400000004003d00c937ddd17dc99a91e68f11e08710e53ba2bf6abcfff10e93bfa7f1c1cc185d"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x8c69) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x4, r5, 0x11}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) sendmsg$sock(r6, &(0x7f0000000540)={&(0x7f0000000380)=@pppoe={0x18, 0x0, {0x3, @multicast}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)="2f52b8af820705de5ccd7e4398928735963e453464d798311f", 0x19}], 0x1, &(0x7f00000004c0)=[@timestamping={{0x10}}, @txtime={{0x14, 0x1, 0x3d, 0x101}}, @mark={{0x10, 0x1, 0x24, 0x3}}, @timestamping={{0x10, 0x1, 0x25, 0x1}}, @timestamping={{0x10, 0x1, 0x25, 0x95b}}], 0x54}, 0x800) write$UHID_CREATE2(r7, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r6], 0x118) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x20000800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000400)="ea00507b00f30f009f1d00baf80c66b80840fc8c66efbafc0c66b80d00000066ef6766c7442400007800006766c74424027e6a00006766c744240600000000670f0114240f79c066b9800000c00f326635000800000f30b8a5000f00d866b8007000000f23c80f21f86635000040000f23f80f1f40009acb8fa300", 0x7b}], 0x1, 0x4, &(0x7f0000000480)=[@cstype3={0x5, 0x2}], 0x1) bind$l2tp6(r7, &(0x7f0000000200)={0xa, 0x0, 0x590ed51c, @private1, 0xfffffffe, 0x3}, 0x20) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7f, 0x80}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x4004) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0) (async) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x8) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002e00000080000000000000000400000004003d00c937ddd17dc99a91e68f11e08710e53ba2bf6abcfff10e93bfa7f1c1cc185d"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) eventfd(0x8c69) (async) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x4, r5, 0x11}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) (async) sendmsg$sock(r6, &(0x7f0000000540)={&(0x7f0000000380)=@pppoe={0x18, 0x0, {0x3, @multicast}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)="2f52b8af820705de5ccd7e4398928735963e453464d798311f", 0x19}], 0x1, &(0x7f00000004c0)=[@timestamping={{0x10}}, @txtime={{0x14, 0x1, 0x3d, 0x101}}, @mark={{0x10, 0x1, 0x24, 0x3}}, @timestamping={{0x10, 0x1, 0x25, 0x1}}, @timestamping={{0x10, 0x1, 0x25, 0x95b}}], 0x54}, 0x800) (async) write$UHID_CREATE2(r7, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r6], 0x118) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x20000800) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000400)="ea00507b00f30f009f1d00baf80c66b80840fc8c66efbafc0c66b80d00000066ef6766c7442400007800006766c74424027e6a00006766c744240600000000670f0114240f79c066b9800000c00f326635000800000f30b8a5000f00d866b8007000000f23c80f21f86635000040000f23f80f1f40009acb8fa300", 0x7b}], 0x1, 0x4, &(0x7f0000000480)=[@cstype3={0x5, 0x2}], 0x1) (async) bind$l2tp6(r7, &(0x7f0000000200)={0xa, 0x0, 0x590ed51c, @private1, 0xfffffffe, 0x3}, 0x20) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7f, 0x80}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x4004) (async) 5m49.994254193s ago: executing program 7 (id=4233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x58, r1, 0x1, 0x0, 0x10000, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "e3da3d7b4cd089c3ee77e105d86fc6cb36198900000000"}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x600) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, 0x0, &(0x7f0000000280)=0x5e) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001700)=ANY=[@ANYBLOB="1c0000003600010325bd7000fcffff002780"], 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 5m49.367409018s ago: executing program 36 (id=4233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x58, r1, 0x1, 0x0, 0x10000, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "e3da3d7b4cd089c3ee77e105d86fc6cb36198900000000"}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x600) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, 0x0, &(0x7f0000000280)=0x5e) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001700)=ANY=[@ANYBLOB="1c0000003600010325bd7000fcffff002780"], 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 7.980473349s ago: executing program 9 (id=5642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000f80)="bad330fbc9b55400040000ea0756a85d86dd", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r6, 0x1000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x3ff, r7}, 0x38) inotify_init1(0x800) r8 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x101000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$FS_IOC_SETFLAGS(r9, 0x40046602, &(0x7f0000000840)=0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r11, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r12 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r12, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(0x4) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r13) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="03e0ffff5f8802002c001280110018016272696467655f736c617665000000001400058006000200030000000500010004000000140003006272696467655f736c6176655f30"], 0x60}, 0x1, 0x0, 0x0, 0x60004895}, 0x48000) 7.656624968s ago: executing program 9 (id=5644): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x43c001) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc, 0x0, 0x5}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x1c, &(0x7f0000001000)=[@in6={0xa, 0x4e23, 0xfffffffb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}]}, &(0x7f0000000140)=0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r1, 0x0, 0x0, 0x5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xff, 0x1000}, &(0x7f0000000080)=0x88) r3 = openat$audio1(0xffffff9c, &(0x7f0000000500), 0x101000, 0x0) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000540)) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000140)=0x4) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @broadcast}, &(0x7f0000000280)=0x10, 0x80800) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r5 = socket$netlink(0x10, 0x3, 0x0) openat$sw_sync(0xffffff9c, &(0x7f0000000040), 0x80, 0x0) syz_usb_connect(0x2, 0x4f, &(0x7f0000000680)=ANY=[@ANYBLOB="1201510329fbf04038074045cec60102030109023d0002020610780904d40906000000400905010000020904020904e20002b22618bb0905010000027c9e09070585e371932d0905070b0000097303745de007059b0032585b133c40a42d19f8ba87720a9aff05f27e3235d88eede69a044c5fbaac355d9e8ee8b5c39f823fc07442a7b29749e82282acd7a246a6cb46b4cb7c4e46d01cab5e4c5f83"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) r6 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0185648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90f, 0x20, '\x00', @p_u8=&(0x7f0000000040)=0x1}}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000305000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000200000000001c0012c40b0001006d616373656300000c000280050003000df7ff00"], 0x3c}}, 0x0) socket$kcm(0x11, 0x3, 0x0) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_GET_MSRS_sys(r7, 0xc008ae88, &(0x7f0000000000)={0xfffffffffffff48}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x800, 0x4) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r8, 0x3) pread64(r8, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) timer_create(0x5, &(0x7f0000000480)={0x0, 0xb, 0x0, @thr={&(0x7f0000000340)="1eea9d781ec69151495fa36c6a67b5c77722537a6f28a0b6e8f7152afd10350b027d0f49b4c2e78cefced23c96c38fc4613440fa7b3c8f0ec70133b4153f12a1027ad19296aa912c7916b77d0652db3cb1dc43ada3b1fdee9dfd93d812e160467033604a2a17020256662496141cb1a4618aa355cddb41fa17020ee63ae735edfd6a63af487ce5768c43c491f1fe97455984c710c6d2512a7236e289361d87aa622d890c3b56aede92044a4403bdae82e6", &(0x7f0000000400)="12c8f482acd4f05749cea0c7f4b2403a012510577f2424e252a885a8adc84d0aa7f76838bf2a4109618e83f49bc8f03364d2b4d28e52f2cf9eb1c04dbc32f229288930a16c46177411255c21b8853d3d33db02c18bf4ea330fb3ecbcbe188a062741b14da8"}}, &(0x7f00000004c0)) 5.446615561s ago: executing program 1 (id=5650): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x0, 0x1, 0x6, 0xfffffffffffffff6}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000740)={0x3a, 0xf, '\x00', [@generic={0x7f, 0x6f, "460659f101e89996191e03b3beacc223c86c66efc687fd82a80497aa39422fbca667be44273b32fd79c37e4c6cbaee53880e8cca1334ac0df288f0cef8f0a0c23652ef09f1483f40d62dd1f8f906e4568a08c46957021911242d6feae18b5c78a099b0d9a0f0413843db87182ea4e8"}, @jumbo={0xc2, 0x4, 0x9d}, @generic={0x80}]}, 0x88) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2, 0xffff}}}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, 0x0, 0x8082) r4 = syz_open_dev$video4linux(&(0x7f0000000200), 0x6, 0x24202) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc038563c, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r7 = socket$pppoe(0x18, 0x1, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r8, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0xffff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, 'dummy0\x00'}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000001c0)={0x5, 0x9, 0x2}) bind$can_j1939(r5, &(0x7f0000000280)={0x1d, r6, 0xffffffffffffffff, {0x2, 0x0, 0x6}, 0xff}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r9 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000700)=0x1a4, 0x4) sendmmsg(r9, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(r9, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2002, 0x0) socket$unix(0x1, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 5.446322277s ago: executing program 8 (id=5651): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48014) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x9000) rmdir(&(0x7f0000000000)='./file0\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4ea0, 0x2, @empty, 0x6}, 0x1c) close(0xffffffffffffffff) 5.374002161s ago: executing program 1 (id=5653): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000406d0493c2000000000001090224000100000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002207000000a9f307f2da59cd"], 0x0}, 0x0) 4.97507043s ago: executing program 6 (id=5655): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) unshare(0x28020480) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000003c0)={0x1, @win={{0x10001, 0x5, 0xc, 0x4}, 0x5, 0x0, 0x0, 0x400, 0x0, 0xff}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x500, 0x0, 0x32315842}}) 4.864348083s ago: executing program 6 (id=5656): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x1, &(0x7f0000000280)=""/236, 0xec}, &(0x7f0000000440)=0x40) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) r10 = dup(r9) (async) r11 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r11, 0xee72) sendfile(r10, r11, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)=0x19) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FD={0x8, 0x6, r10}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async, rerun: 64) r13 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r14, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fddbdf2506000000080009000200000008001700", @ANYRES32=r2, @ANYBLOB="050007f803000000060003000900000006001b004e240000050012000800000400001a000e20000006001d0000020000"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x9) (async) bind$alg(r13, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c357825577583a5fde8a3427cc42f7d63c6cf", 0x40) (async) close(r12) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r15, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5dc}], 0x1}, 0x4) 4.502634536s ago: executing program 6 (id=5658): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x700) 4.367001897s ago: executing program 8 (id=5659): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'ipvlan0\x00', 0x0}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$fuse(0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x40020) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x80000, 0x0) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 4.222814074s ago: executing program 9 (id=5661): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0xfffefffc, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_PHYS_PORT_ID={0x17, 0x22, "8f1c00420bac1583da251f05f8d318348305a1"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) memfd_create(0x0, 0x3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x79c19548, 0x80840) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, &(0x7f0000000040)) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.955212974s ago: executing program 6 (id=5662): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0xe3f8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x51, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109023f00010000000009046900000e01000007240107090300092402010703010b7e0524060001052400f8070d240f01feab00000c00f18680e28ac184c5e17a3452cfafc0320d06241af7f8082ddfd884ef3582e19dce011252ae82f92cf0a9c784855f2f427bd56cfa52ab40c72f80d6bf5f6bd5c477852711f1d086d71a46ebe29221cfeed966ce38328e78314fa33294102e59042194ce16732e3e040f"], 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=r1, @ANYRES64=r0]}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x5c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) r3 = socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYRESHEX=r5, @ANYRES64=r2, @ANYBLOB="0844032996033e96b900b106d755ac99b6a15d01f900e3c9000000000000000000fdb3a332e947f035e7ff1dd31c07f22a530d6e47a2290a620f46a397549151d79b76ec076b6be4af5bf320b285b2d61229ab69de"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r7 = io_uring_setup(0x756c, &(0x7f0000000180)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) syz_usb_connect$cdc_ecm(0x2, 0x60, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x1, 0xb, 0xd0, 0x5, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x5, {{0xa, 0x24, 0x6, 0x0, 0x0, "88942517a0"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x125, 0x9, 0x3, 0xff}, [@obex={0x5, 0x24, 0x15, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0xd3c97a4df11207f8, 0x0, 0x80, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x20, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0x3, 0x3}}}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0xf8, 0x2, 0x81, 0x20, 0x1e}, 0xbf, &(0x7f0000000680)={0x5, 0xf, 0xbf, 0x2, [@ptm_cap={0x3}, @generic={0xb7, 0x10, 0x4, "4d488b4f783d491a2780fe099595a241341f62f85ba02211369a791fca214b351b4c293b7398ee4478f748e07c30c28d28617eeb3e01b50cd66df64dc0122430759bd0f1315c81d145bf11eba33a5121ebda9e88ebb214102172f44a88c00c66af6648c1c9e5f89bf50aade2e83c260c2a37f7c8fa9b8b89f0603ef752283d4c074795d5ba5b91c4a3019bd9d5c63f7294543e10cbaac048c3c39c1d9b05e3ce796b0e15a8e3e87652545b72fc319c5f42fda638"}]}, 0x3, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x47b}}, {0xe5, &(0x7f0000000780)=@string={0xe5, 0x3, "09701f519e45add98dce4daba3f48584605de7f9efaae6101282a68e6abc98ac33c6883e7843f86086d4aa1c80e040b30bb3cd06b71d954d2e74cb10702889031b6f336108b5e609b369bf48264ab606c9e8c33a41fc89666db940505f25e2e47d0434c75a471581904e171f7a381a622b082078bb1c524c17e7050533cc2c9c9a3a1f9885e4bb9f10bd721032b4bfd9394260853336b4fd048f57d614fd53420e6bd59a16108f51f7665f7298b6e1bb6211cf836f0df61019dafb6b8dd7433a9a208c97b1fdca8f307c30c153ca7a20539c029e2abd66456088e4993122bcd3774cfe"}}]}) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x1}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000002700)={0x3, 0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/264, 0x108}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/88, 0x58}], 0x0}, 0x20) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="ac1e0101f0ff0104006dc60006000000e0000001e00006010a010100640101611c711af205b7e1523ddefc0064010100ffffffff"], 0x28) 3.648170854s ago: executing program 8 (id=5664): r0 = dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0xfffffffffffffe63, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_io_uring_setup(0x10e, &(0x7f00000003c0)={0x0, 0x8d2dc, 0x0, 0x1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000940)=ANY=[@ANYBLOB="24000000c5c629759705e2808718a7983e42cbd3d870152977252c7fc201862e47c44e9973c26c0fba81a811628ae3e4dd5458d021d71ea5e3d48444fe99cf4bdd0600000099b688489b0231317a33", @ANYRES16=r8, @ANYBLOB="010025bd7000fcdbdf253f00000008000300", @ANYRES32=r6, @ANYBLOB="08005e800000010042ad7aafe75a578056dac095563677db510b2052e2c5450521426222f7bbd2bb9fec850efaba2058a03049501b86f971dc1b7357e0719707cd5c0feafb5da2f70c79be3b4d1cd770aad2da10f5b930a98423e5df7d8c88b872742c013de88424e4454bb568b56f3169a00d15684e5570fa11f4d868df663064f59ba402ab94bbda71d7d361a404c5ed73d7aefe6a2c3efae9ec"], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x4044000) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f00001b2000/0x1000)=nil, 0x1000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000380), 0x0, 0x96, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000480), &(0x7f0000000500), 0x8, 0x1b, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000880)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000a80)=@newqdisc={0x10c, 0x24, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x7, 0xd}, {0x5, 0xfff1}, {0xffe0}}, [@q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x13}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x22}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3990}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfffc}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x804}, 0x20000040) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0xfffffffffffffc82) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 2.829869908s ago: executing program 9 (id=5666): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) unshare(0x28020480) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000003c0)={0x1, @win={{0x10001, 0x5, 0xc, 0x4}, 0x5, 0x0, 0x0, 0x400, 0x0, 0xff}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x500, 0x0, 0x32315842}}) 2.573953216s ago: executing program 9 (id=5667): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000210001002cbd7000fddbdf250a800004ff000000040001f8130001"], 0x38}, 0x1, 0x0, 0x0, 0x4000841}, 0x20040000) r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x74, 0x89, 0x2c, 0x8, 0x41e, 0x4051, 0xac66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x32, 0x2, 0x2, 0x43, 0x45, 0x2c, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x7af, 0x0, 0x0, 0x80}}]}}]}}]}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @quota={{0xa}, @void}}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x108}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000003640), 0x40401, 0x0) write$binfmt_script(r4, &(0x7f0000003680)={'#! ', './file0', [], 0xa, "724344d2f601ea573d9bd883de14fd58f65a0353ea31ce771b7bbffdbc168b9fcf144c7e141dc40c5301b7289d4af37ae84fd915a7dde98b0a54ded0d3f3b38d831c9e5427c88b726ffd0c0820651c85714a6fc45346543162c07bfd2d607997dd7ba75c7419f7044cf7ab584e4a6cc44179aaaf454c6989b4ef2207346716d087a8f00177e191971690273becc730ee87d490df37f58842a3b07623aad084a321bd135ad79c446b26ae71f9e0da980fe6a1503253901c703ce958aac3c95a22d9aa8ce51424ad86ee1f526cf2b0908dc743b26a234f2079e58915d2ba0eac603120608186e921763ce660bfd07d67532799437c896ca37d9d73eee701061ec55b315d8b2d10debb08b6f06ea02abb2f6fb045f75d519e595324a58355104f03e78dac0698a890bd7f04786c5db8b6b15a8783dd38cdcb626663efa64dd6963b434512f8ddc96e8b71a035bc6170e38a3230b32fe8ea37d6c5f2fc9608bfdb077fb3c33d8421fe74c4c4cb4309ddc10e811835b2ed856f35ccff016e244827365f3e12033c48fe5c89c19fda6b433a3bc21fece86ebaf5674290e9e0995375de64fab6de4a1b3d18d289bd479ef210a24fa5c8b08b1aba4858841dcfde4e31184133d758a31315785b849022fc703fd2b2d2cef7da8a27beab2b78a8e197b496f7f2fa89115f480bd3d1d4512625d1154709c0b3f734018849affada44e9e28c97811b939b78b10ce76c84890c5423672ddb453b9dde9aeedb4fee4eb960ed8282d036dfa9bcbe0841312eeb34dd60fc18ce3ec270acdc9e4d54360835641767af539f8d46cc39c4315144d1d2cede08c6dd92bf23f55a12d3539b517c61c655ce7603a931d24175719d75daaa0518d2618306ae6e53981af083c28859947c9023cd964acfb192c33683279fb917c310853854bae125d408b1689172ce1fd1be58617313b0fa2d65644e980945b5d8e629d4be0a249e4da0d94d86eaa8188aee1df6013dc9831e073f03dd6c1a4a137392ebe21ca50c9dc9677d8cc5891240c67ba3d445d96c213d4fd367646f11853b6b88d1317e9aa2ebbb49f47f21aac8f3d25a63974f3c9f2737baa8dbb5ddf9c92ee8b36f23b8e8edf53f1747536677fd12b9c059604b64880e2ebbe1ff4aeeb4c5353a5a2ec935a4915603e8f9e13e911d784fc4ac92231985ae1307859db83e01f3cf29faea49d737203945d8f194393a2368bfd002b163c8c3c23b7b38913505146d60fbd02b94991721caeaf908ff5f0e8a9e57ff11181e68f01f411046d618a6abcf189b14f827262a75754f530656983131834fb145a9e624f3e3b1a903ef0b915bfde8d1f25760e5a1c821bd5899ec11422b23121164a5908fc869270c0653a8eec339b8ea06417201b4418072b1a5ef1f65a368278b0758f708c44e02e5688b42ffced364ce38b300b7e5f0ea3521671c4cbcb3747478909372324d17999b0aefb20a84f8ac5589862ae6f63afc0640568238314372856213b8923929cfe0b09ae4870a0fb486d79c78b3e1e5a7bfbe4cba76d4087566a82a0dcbf6859ade2c47f9ad1b6cc8808957f0682950bf1d866ba1abf73044bba9459afc58c114805f069d6af18cb3b6127b9b69bb13063cf3161cbad86dc6c70255a84bf621cd9ed0fa4b339d5e6c557125835877f529b834f19b525f46496bf7fd43535819e3e8585427dd6184984438a155a906787af2b5c32e3f5d4290cc3b90a7e1f41fdba09b8096c43d0394272dea2444fa4ad99c9e78a055fdee6e2ee02b19785206ab065fd04539ab1a901d792616d982a664587b3c3d2c3338b36642f9b690cb19bef42b8cba995c8cc2fa6339acfc206b0e9ad8d472d011c4fb89c1a3d13d598926df23e663200298c1fe4beb26f858b5cda3258a0605c559e21beb47aefdef4c6e79f13de75c6190526ae5c9d5d6bfc9e0fe757b8399d55227715b3e34ea325838738caa238999ec705b03fcac11f96b7bd5d9bf5101f2ffbb6f9711c6891e8049409721e0515e69c4c9b0fc36e7dd149a1d637d8d6f4d230d7f5cf6c33c9679e8f9e12edce529966682b1cfeed78d933d4ca82857d9412a485b7fb3d9e6df0c8ce752b1935ad4f659b197268aafe0542d653ff27fa7dc5c6b84466efa6a1b12f1846cb614b44d241598a3567b6d7ea89fdc38e220f67f5500b4105cd7c0dd72b2f5b479240e1f8a9998080b1b74e86505cf3657b0cdaac131528a2ba2d30826beb7899b0e2abb18056d8b76e551b00b2e15fe8889cb488d9f1af653b074fb3e1d59e62558da6a9392961ca32c9ee8256dd5953df99ad1d508e3fe57fb22ee5864ebed2885089181a7b0f785242b242e5e79ca0fe255cd0b72d26fbc8fe63bc84b2b6fbd475c11a786920c10c4a76fc540078d5198b55ad4cf6cf3bec82d6d78f2c6655c2aa8db15a496d74d5fed8c56966f6483dad3156e5210c84bcb4799a1139d5345924866f4e15ad71b1d94fae6497ffe6f6b6bc79abe5c06407181d1aef2fd608b261d0648b1dcaacac6726045ca2576070873fb978f0c95e7a9d4866291f7315fc0827a179938566606de39576468b8e2b88250af57d429afec0f93c405a14fcd1bedd03fe85e3daf709c1de2c35c2f29f10c192947e699a4ee38585b118de644c235e5d8aa19410d2d331a5f97999523528b121dfad58fd333f7b7a61999624fd7552693d06c1caa541c8dfcf33dbf60f897cc8c0b6954c9c37eb44b0e815f2d2fe5ed8f0abdbe95b4e79b086c71b576c30db6f3c271d9bb0eb4f3de3e324474aefa45ad3eb536c89488f64d766841e9f500fa0286ffd40c379145c5c92219870c74c086ca560d745cc5b21476ec5da54785482164796c9da53b154327e0a1dfc1cad58b646e593d284e956bcc557bedfa744013c80ed36d065dec493eac5453ec320a611a41dc84bf3667c4af3920893801acc27319ec2f4ce6eac53fb7194c3c8d78aa60effab35fcd63c02a4593cf74f74a3cc42ecd371a8cae0e672f1343de3e302ec2ea3c14116de1f8384970073a418ae68dbb7619cd0aa5cc554b13ba317116abb602e0ab471c5cbd7650f0121c821658e65b97be7d5c424cb37cd9ce8bb4afd2fa96df3a1b738ae2610d09e9f877728da900116e09b025b96152970e512da0498adf140559f6d960b3d3703e0f7fcf4e903c0c32eb83e05b386490c7f18681a2b37e85f9375cc0a33e9332fcdcda80325839129c5a978dfe40e6aaa401582cceb4708931441501564bb4313a941c9ea4f7572d216a96c7883131b2a696d689e4aa9f5c335a93b482b8a22f2e2602a05c71e28ca8cb58d87a61027fb2d29ff68d1d4a350ac447cc34453d2785b70427370767306b35307b56be8ad0baec7a40fc196ff894aa7ad17934dd371bb7d9d6c03b58d2e6e998cf72ef6aa93089b559241fe3217df707620a350e2ecb3c82216e80dfb1cdbadae1625ec61d0b00edc2ffb7230a075a9b3f06a9e3a5cadaa4def6b8933bce7273cf9c704851cc1ede501da7ea0d3fa12410bc53f776e999634a9b1e1ab348fd119cf2fa152347933513a0baade6614e797fd398f8c5895ebe128c0b08474978eba7ce249ec062e1ca698af017cec784f6a0fa70f65d6db1b74cef408d2b97e537f33f888f29e034d9c9dc5a2d20c2a961e33ef1721aa7a691d910e47fab93c59f587da5d22a3ba3e7886ab37f57e96d7e6d4f67bea7c7381ac05a0789e8da46d98af314e71ce84f8d8f8ba660a459bacb9b48ac3978cb2e2d8e080bedddfff296c410258831244dc13bf00218dc911d505d7eac0ff3e2323678cc3d0c126e63e2cda1c24e5a6b59b52d815e7a93109a1e9b0ba8f29591034a29872d845b259309aaa636bc2784090bd3a1e1f5a84c3b546b07e6e04f8c0da8c5ddd91e03db4a47f1650866b1a85bb00f019effc5fa6559cf1342ea2740caaa8ef9fc516b64bd90c5334f72c6503e0e900d23eb4263bc03ce08dc2e87b9da5458138a0285d878aab0024d0704ae9a5201d7cf5593858dbe98a713f8cd385f04275a19665f0c458abc1ca382390c2e28338c8f6a79e3f085439611d7ce07162319e1a3c61bb280fb7cad361163a82064e874cb90ba2cf0472fd5a84621b005ed3287e3d3820fef8253cc795edf0fa1b81238a867203792a6197db354b75826ee1eadd38ec0a7e9f5cbbf802cc2c58129c496177316d7b52f1613dfe9d3126f80ec35e98ee6c8411674599679ad820b434743f6261905a06583de846dd8de5ddfcc0ff9b3db91e50ac65b728f11d94166cde4c0fb9bfbe2ac5126743632ed2b7c1e8fe14fcc80d547bc2ed95ff6282d8caa451c0759c600fd976f17f53ca1f51d0549a05eb9b5d68b9f3e502dfba5982a7200fe984127fd886703f9c3f19e12e5ee1ff1829d90972ab092bd3640616e72a4e10700c7ae85c45e5515680b98ca41b43f94d7b3f2ce98546835d239b0d280ae0af8728d9fa921f5eca3937e15606d542802f7289f64e387b865d126558aceca8cb504952c71d2c0443f940585a07ac8f7b853fbe6d7ea23bf4fde905a3faf59d12c2a772e255645327e27f3fae04283cb1fff4e5cb040232bfafbd2239ffe0c93968ee7a193dc5e20920f44dbaf9a4b5230d3260b9c6475a966b59126a098cfce27d544f9e24389736b6672430fba330bf0d269feddb04e1475cea18ba258fe7c0a7460679e705264216ff0f9725713d7ca772cedd0aaa3cd2c3e7945acc8bee63f49aaf4094293851fa0b9084e5d074b1e02738b6eeeee6f69aa6b4d4e22e68c1eb67d03ea673df27de5760a0cfc6ca1337365853f4bf8aec7dcb84aa65b4ed72ad73a70f59da03197bc8b13042b93380c7e4b054a592343f4a84219676144237d957cb55efd8a9bb0330a8659b129e3f31511dab72eef63c679a134aed30758613137eb6b1b8135961ee5a77e5890fc9847dcf829a2047b44e1d0135fc8b74f5cda2c3ea3e015cb711cacd810d186f066189ed623e7a9d87e721ee594c1d3f3b9500bb8b1b6e129fd1e0db814be45a25ce77c2eeead020a9f2e2cf36cd3504b7e06aa1f2ef4c32dfe49e1110b8f8de70bf03da17e13cae9ddcef1fc3cba9a0afee37dcc525488283b041dd72579d8b79a1bda90ffd09e06153079fb6f1c42c746b9fd5638c01562a69b9896ca6db1c7dcea36534aa6951752740da496b64288a88c3a6583d6bb0fa4047dad67aba4ee35e48c11fb94dbf15e9262233e762b92d14da5498eb15d1d06e54654ff558035a61b2514e00e9047d1f09579f8fe9331e4bbc3969f158304cbd2116b7562139b2f15230683c083b607d0ceb8272c63896f25e7851a1f8fa80fc3f63080b3f1b946847a91212b987a9d977237a7da5e3bf5fc450fa9e32ce86d84f8be605cb88b47b536e2a3d57531078e784d676d9072cdd415a28534e0803293280c36f09f704bcc635a5f511fbd29d16c800f18222376f291d17edc335cf822aaa097880ccadd24ef1a31c8fdefddcc2abe6ff447ff8cde14bcd48943096c877488b6a227329ab0b7db0686d58a3048273aefc8eabb3c3d52d5c49d0bb686436d7ffbaa8e0c00d4790b0f26a4e74e1d4a2a762592e337e0d995538f1afa91189ab18145c24a9444d914387c20c7c772329576e6e29feb231f107b1d010e2c48faa175649fc7a4494102e297c44be1831cb8c6c33a3d73698519a324f11b7392e4d3e4bb656f07bb2b31df3d62835151dd5e92c4d76f4ec33ad88facc649aea81dcce9d0be515006d7fd3d9947f2610eb9a69267"}, 0x1001) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000180)={0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="400288000000880b5b6545942b36cbda67ba0202941865fc1cccde491d35dbd8ceebbdca0aaffb8abef22e9732ffc6ab9bb4e56301239c6fb34dd3d401e4391081b41f9e3bf893e4447c62db8979cfe11568cfd92016e988d101edd2454755f2f2e36805a7df88e87b73fc312ac6906fdc23a048b1e2b65a6f1f7a839764fc59ba64af76ce4a297ca703a1a5f9123058eb854a27bbbedbef794f24212983"], &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x10, &(0x7f0000000200)={0x0, 0x17, 0x3, "b36fd5"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x1c, &(0x7f0000000480)={0x0, 0x31, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000400)={0x18, 0x0, {0x3, @broadcast, 'geneve1\x00'}}, 0x1e) r8 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x20, 0x9, [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x7, 0x1, 0x1, 0xf8, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x4, 0x7, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x8, 0xd}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0xb, 0x9, 0xe9, 0xf7, 0x6}, 0x27, &(0x7f00000000c0)={0x5, 0xf, 0x27, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0xa, 0x3, 0x7fffffb, 0xf000, 0x4, [0xffc0e7, 0x7, 0xff00c0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0x6, 0x3}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x40f}}, {0xcc, &(0x7f0000000500)=@string={0xcc, 0x3, "e63b5a7a86d87792acde20aa286ec98fb439bae741491b53a4d74b9c94b1ad8040146d5404ff815a1b00e5dff34a0c9b358bd1578ca0dcaf1a7caf83741e77c5c8e95ad5bdd949bb1ddecabeca0ac305ce1f2af16d4436f710530767461b084a95da063e0e3549fa9d366c4cdb2a809f5189a16a7aa9833f4c67df16ffbba2922dc4adefd732202ee0f08fbd9fa8d49d90fd2a3255fe01b43d31f4c77bc190fc112b000d5335a7dbb9cb507252ab00630852bdc5b3aa71573b1dd92d41ec25c4668799eaae9fa79b1470"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x500a}}]}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r5) syz_usb_control_io$printer(r8, &(0x7f0000000ac0)={0xc, &(0x7f0000000940)={0x0, 0x3, 0x8e, {0x8e, 0xf, "8e8165b9999a162a5d5a6805067a876cb5f5d81685868e122aa840571bb2198b4f3bf265f8c32d3edadc83afa12ad69dd5b1e62d1d0685fee411a1154b1b35a11a42d59a83ba5a6b15a29b4f11d7c93b131701cdf53a1824bea77af7c1c237b3227a16ba8e661d1292f6e01734f12748a3ac06fd7a78c1a9ba97b54d67d2fc2fa363b8d23ff3775c4f9c15f1"}}, &(0x7f0000000a00)={0x0, 0x3, 0xae, @string={0xae, 0x3, "9656800e7ba2093658f8e6023b8eaebf2540371c0bca50a2a805442eb2bf16dcc2b5322dc7f5959e7b256a976acd559a47a96378228a4386f130af7aba70cd331445d96eedf99ae200710f482a0be045cfa1fc00329df6d5e4989d25b0528261a73fc2be2fb5c9302068ba4974ff01cb9e2be9b8d98ebf2182c6928b05c9ef1ee3bcad34c74f5377330fe8b3ac5835ef243c45c60a5eb94382f5861922f998cd3883712bb5e37500d33f56c2"}}}, &(0x7f0000000d80)={0x1c, &(0x7f0000000b00)={0x40, 0x15, 0xaa, "6b40bd1ea90ff1e76156dabed435b23fcdbb58ad83e9baffab22ca3f44e9b13f2b44aced85a7335bc9b7d708e3f445d2e664bdd8d7268a95df741a641f472c1cb1fc79d7a7ce4d012f3830f30a39bd5a8a260bf34456e5a0ad16960ff8dd013bb9a55245e6a7700db2a24cd66f0fdec19f8df1133ba58728f471da195b9584fecf2192a27342a8f8e06027c7fab250f3134087911e1a3f502471e4bbad69202ebc257174b189f766d633"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x90}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000cc0)={0x20, 0x0, 0x65, {0x63, "1f5de46d39068c8b083a210070bf1a96a06fe556acc60f45113f761a7de8e42dd30dcd15284cd26a43087da302864a96b4c4f61c3e90c94778a84f178df5d1042b35efcb4c503d96796074800499ce7658fd6928cece3e8363a88cfd8bb43527d93b2c"}}, &(0x7f0000000c40)={0x20, 0x1, 0x1}, &(0x7f0000000d40)={0x20, 0x0, 0x1, 0x3}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x44}}, 0x4040c01) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000380)={0x40, 0x11, 0x67, "419aa297764f4d51025f5b09b786809e37438c34bb52d47f7f9fa996d595f61fdab50000db9621b205025610c3603c274a586dc62f695992074a0ee9d5086d4e097c874e9150af50c4d6e39da8e069a04780170f3f4ea8b24a00a82399ed0b92f12d0000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000ec0)={0xc, &(0x7f0000000dc0)={0x40, 0xd, 0xb3, {0xb3, 0x30, "0544901ade592c05349248515217bbac4152085b9a4dd38f5a4a9524c63a23f5114c20b8d1d43d89ef9ec3736dc8cc5ca135d62bc43542b68743d0e9e8309d19392000ea9e2c72cfa9fc57faffc4f55a46819b6f3dafc3ddec517721ce171ee89f29baf22ea83db3936c5cbd6be597b5e9a6033026d5348b3c7c624b9a8c81187cf9f312797f5840a8b6c7b1c3d34d36ee805dab43f6b04b451b295623dfdb551f802d70b560e8563d1c38d9f56d1c7367"}}, &(0x7f0000000e80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}}, &(0x7f0000001080)={0x18, &(0x7f0000000f00)={0x40, 0xa, 0x55, "0340261c9509e4033318edb2fa319770db5002e7450f8de785fc29958acb60799f4601cf6806b5285df183cb6b501656d9fe0765f3e254557d3dd9273dccc574d694a6157bbfdffe880e70c0cb9e28b35f36592108"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001000)={0xc0, 0x5, 0x5, "3b2fc90720"}, &(0x7f0000001040)={0x40, 0x5, 0x4, "fcff8e02"}}) 2.428472517s ago: executing program 5 (id=5668): r0 = openat$vnet(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000040)=""/37, 0x25, &(0x7f0000000080)=""/196, 0x3, 0x4}}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r2, 0x80045113, &(0x7f0000000280)) r3 = openat$null(0xffffff9c, &(0x7f00000002c0), 0x40, 0x0) move_mount(r3, &(0x7f0000000300)='./file0\x00', r2, &(0x7f0000000340)='./file0\x00', 0x316) r4 = open_tree(r2, &(0x7f0000000380)='./file0/file0\x00', 0x101) ioctl$SNDCTL_TMR_METRONOME(r4, 0x40045407) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f00000003c0)) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000400)=r2) r5 = semget(0x0, 0x3, 0x380) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000440)=[0x400, 0x40, 0x2, 0x3, 0x8001]) pread64(r3, &(0x7f0000000480)=""/188, 0xbc, 0xb) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f0000000540)) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000740)) openat$adsp1(0xffffff9c, &(0x7f0000000780), 0x200, 0x0) clock_gettime(0x0, &(0x7f00000007c0)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000800)={{0x77359400}, {r6, r7/1000+10000}}, &(0x7f0000000840)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10010, r0, 0x6ff85000) socket$kcm(0x29, 0x8, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e05411, &(0x7f0000000880)) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) r8 = openat$dlm_control(0xffffff9c, &(0x7f0000000940), 0x40100, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000ac0)={&(0x7f0000000980), 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xf, 0x7, 0x1, 0x0, "b30a581b51a1818c9592db"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x98}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x4004800) connect$inet6(r8, &(0x7f0000000b00)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c) pwritev2(r8, &(0x7f0000001d00)=[{&(0x7f0000000b40)="49c0efb40ff48afb66725007227c4299cceeadc621c83e5ce3cc693e7b25f65e107c8562d818bd15ba0a91da7be864c81fd4cfd14654cb66c8cf179d0217eb389c61af1d2e4cd06e1242c3c2ecb0c94fe03a172f317ed0f4921b1a138dd2020a5464e417fb148964ea949610aba6e5cec4d05aa22d889a0917e42d323f3ef6e17b9400e9dbc28ce9181fecad0699a9b311553c00ae746e83b95153e458629aa6f3b3eb2aecbaf8b0dcaf024ec0d3f590fa80b9", 0xb3}, {&(0x7f0000000c00)="244ac465a500b3da8330b525653462fbeb028b374237f9fa4298318022191b002247d95158e9dcabea939506d45c379295edfc5477a03b4b0b9ad24a6c59d2b50e270aa38d06af6ed51ffd9998c6", 0x4e}, {&(0x7f0000000c80)="9ab939e1aeb8b7d878da5b03e1b0990fd945cb4eecc5d1212ab0ed9a1e5b0063f2010f0f0f8a83c8e6e455d7aa3334f98ad367a9e3fe96d1c9f85daac8798c036c8e58f1172f3c4280b747c99b65ad728e1e", 0x52}, {&(0x7f0000000d00)="168a0b8fd74a162ccb9e82fbe7f1adafd412fdda0da30c631737415aea12bbdd973faaba282fe675c27d30816b5ad3f3374e86166222bba4655c8a4b0c508c8d38e88fa8e4d53626c8481cf98ea42ac9f9762f47d13aa166cfc100953219de05e70b664bc2c866cd9cd2e80d09a9700457038e8d89d17707b5ee917ddef4ebac1c5392c33b40c023fe0ea04dc387f10e48ddf853d8d3455fb2770c69d5cef08031cb62140e33ba3aa9cefc69616a20a4c6043554d72049fa4d75d73546e568d407c923dd7e176b3dc6709343095d887c1943ab2ddbe723d43e15cb4953a56ee5bfedfb769e04249c0c1e0620066a0fd3cd29a2c1ee21c0819fe5061c2ce36fa790b0ef8b41a7fbd88fefa8d8006e9b70e95923d77e841038f409fb65c7502f29d5cb710e569206e47bd44dfb647bec36c5fb07c98ff7002cca8de3f95082f8d50b23862378113feaf036ca9d8dcf12783d02376fe3fc0468a4993cae14a8b7b79cfc8184abb5519d7b5826eb2ac82989acccda2b1b1d6b935536dbfff236dbb0434ee509228aba52c941d7a99dcaa1f146c607a41877416e976d925a9f176b4a71e284ec06c4fd311aaa27e919d81cb054265c5c95c8ced588ce18c0cf066bd37f4935eb793d54abf63978626c891d61ce4961555da131863ee8b86d946247642704d64134b0445b67d302c79dcb45a931ca87cdc00a5ef6521a4511c39470be41a249a05b87e72b14f180c0560e92285e6929cae64588ac719fc9eea34f5b61420b83d3c519a36c3958fbfd75d65fb9ac9eb256632e3d3919755f21630e5eeacc97c5002739bf7ab8cdf97251419a27124da43e6a41ada59763c4e931da3c290349920ebaf928d006269424a0c2588cca9ad68e27b81969d5bcb311fde5a6c1c95686025b01922d1186b7465ac62a13feca64482cdd2e20af548ce3fa2a57dad9d56eec794f9e09b6b46620fec9e065c0a12a5527a82accf31b405a02f8dd03bbbb721e25fc956ba771dc226a3f0bc2d70dd7bebcf144099a87b6565657353ab5610d9d961dc42f95df367bf486708f422057af147a0ff6d2743dd8958d4b767593df96017b4408c54e84a77ce33836c277f721c0a48235a1eb27c6a6bee299f18246a7e252834f1d05e2d34c2ccb75a4ee395fbbe9ede18104a14fa2e3bc1fa7a714505b87cb49582095668b72e12c146f58b321e8bb5f5fbfe92655c1e82ad802d9e5e5651a3c95403bc558cd4b268226201193ca321dd9028c5c74cfeb2e583ba82d212e9c953d22b8178ce91b6cbcd02015f95c2e5cbbf57f08c9529c353685eddd5a6cc71f567af119b30da395dd114551e87eb842a3f3637bc9b6817d614125d50b7846a6251a066b222c818acf96e68d3c908feba18370ce5846ef4f11bd17fa4977440e4a71315420f8497c00bd052615d78c5c9d2739d59260d0e272c70c5e7311ab2aa1fa5d56b0b23e9f9dd1f0755ecf51cdd6de0f54aee7b7b780f763715e1550786e194e934fc420b1e353d7a34813d9c137d57377359391f3797a2f6d0fff4455b583cb3f1ae78dedea2e75d55bb97e1d649d3259fafc3023cf5e0fb33a0913cf50e07f3f34e7ea479301ccc02b6e128bdc5e2fdf14b42e8d3206fae62a36366c76d5ff0233d48998cc0a910b5b5e68b50a9d441b26ebd4e80381d1474fb9d6e629b467d149637aaf83dac3571f07115f821b6323f4f036a6de6f1fff4b114ebe693717033e21434b1737d04d8d24e11b62d82b0350c9ed4be05698418ecebda17159c9cb958359ee19760543d77797f362d7552c7e78d222526ea97f75b3e143100448389f73c690839c1d33069edd9f45e1545f4e8eb6fa5a0ff01571f43bf93eb2007993b9aa8ec557b61f62a31fea00256fa5eb85fed513f0f16ec10d436ea16e5167fda623d413d02a43e71ff617c9f25c61cc665e0280c9c47650a0c2446ce845ae3d3332f39ac67fd058bc3eb5bb77a726fe1781dbc9daa8ae12afbd3091be327b0bdf29d37b6b65b6cf1818b8701724a1e6eff3303fe15bec9327a8c0d69f03cf8e0817e9585c35f22f0a1836a613dbbc93328e52b15cc0a9bd3944a6a0bee1bcf03f17b8ccff81b3ca7d2f28c1f6938cd22a4f9b87c065f17b2ab91f3d1bf0b8ed6c35aa1b006c929ebd2a7896f161931e31b8907306535faf9f97ee6d54f10939210eaf3498bf92fe2df58437747f11ef20f027d2a97228ac4c4402ba4b4d778bd0188690419d2ca501dfdc7caf8159c08309bc4cdc51ff96a6b16a5c3179909d3402ff92181606454e6ae096db44e3c8ce88959b202e9d559349971226490c140a05fcd4713f2346a16e98227b3cf396f4eab3eafe38dee5a835adce090bf7ea1ec9652fa17ef1c1ec71f5050436670f9dd3a34eaad975b6146dcd3c3c563e8973ddde5eb5b6b7a611450d5e08f8fdccbe2be648671070fb43da6916265210a47d7922537d1deb17cfc42005cf9df5701fcd49bfc6e5abea01e9a5fdc0f9c6615cc21ca618cbc150e3e0c4bc823616a3c255382cec48bc4b74a4542dfdc3abf698e03c6a375e7267c1ff1a0ad077e5f96fc7ed1f54980aa34cec5fbb4f77be32336b085fa2f7004d8e67a7dbe64f9e40791bf9dc28832cfb63a25136457a17dc1a712332512029772e9a1441b25ef8087057546d3c988cb926917ae4de13e3578e5f0c32b854353c33338f796786989bca04600cc586b017819aac4b22f5d0ad4083b00aa11d9b81059335d33eaff77de8f4dc55200f3fff055a1264566c340d3271e67378eec195ac2c37bf989e23a4e7765ea8232b07576856b1f5a3b63631feb1c6adc738692d3af895e1be4c5128265943fcfc2c2f9bd50055df374aa9d599f248b5257db5c402b95abd2261dfb6558c02fd01055fe8f9a3b663c051c41ebbabad9561df78c764aa4a6709ba56dd84eb92992be01bacac679fd8eb8d6825112894eca0076288d375ad564fdb4ae882cff2c8c494722a07aea5c2cb9e3c0a752337fa49ba21e926dc384398d8984995aae52a86b1d0c90e1c076832bb971917208bec2dce96baafaac8ef64ef030347b631b5a4e100828036eedac6de1168b45095a1a9f12cb1f75e165bcd7cb554b7fccf8c5ca0b441326fef674dce4d2b7fe887f56c26558d69e5f0eda83a340296c70c06a2154355de443e5d09a5b22eaae44acfe74772a9c501782d32974c2a1cb29cc4e5a51d1262e8c79fedb5376ff18b88e57aeeee1c0ccb0559169f5946a83c41f38e9a33c932cff6971361eb539333eab7b4b9ac712e0602be5cbe1e834aa1f315a6d1dbbba1cdc171ba195fd356a73e10b616f8eb70cd6d6f75e0fd88f25ae75ad24cf1647179736e4f163da6ab9e750b9485e5560acb6b27f9e142fe60ae4f24420506958d7a0a360643cf3129d1151c88f81991c92826d8e018b506e1043fe0843872e3a60f6618662322366e4f15d4aca42e8fe92811d429641f8b84ad2dbd25d5ed8f5349955cd6e558d0c5da2f21ac8617e3dc46b1a2c545d7bd83d356c38df9e07b1fe4cacf018b91c362a2fac45ad85276896ebda5e3a1407d330bf01055975ff443724d9b2203448daeccbd3de2802623a597bb054ee4321f64cde0a8f5baedf3761e2f5cc64aac8cb78fb0b9e1502fdff6698f8e353606d2c9f2db0ee3bc1014c7dffca57592ef1c35114fbb4d0ffe15b437af7fbe0b41852c99a33a3ce6b2cdebc6aca4b91fb6977b3a0f0cd78810f41ecc3695d02ecd9232ad9c7711f36edefac12f2b79be00fdaa0d44b004bbcd6a40d7e113f15c20541cbc6a40fca4a5c5f969011165483dc62f75f0e0e7e7c146585465b5f3b10ba5056118da691fcf363e8febdc73666f95aebca7767846be136c8c8c2d356f2eed7aab04b5d27c5026ffe3afe35d5c5feedd0fbf839224b39025e8d32ebf048ed97993589ea65b5ad2ac77488484f50af4cec8ad9901824956525ace1a17d857fb8a7d5819de97c2599295ff08d49c10b107ebc34dcf4a4857d9670cd797fa4d4354c49553cf25a50e2334c69833e864b1b614c1c2555565d616400c2e3cc2bd0bcfd2d634616b2161fd7cd69c35f57b3310b47e1e292b02be99f120c24313655fd3bc2d9ea70b5243c4146349f6bb8260c51d645130bd649ce4fc808ce997414a9f9e23ea82df776e3802499c2d502f76fb5bcc2157f590159266d877f263d12f2117d0c32cd94b33bfcbc3b4cb3158b6437b6dac5f4e76da02a9b7e4beb564cf43fde1ea7c7fdc4b8d76c2927005a058be8fc78daeeb0e194f26bc8ffb126341f21def44bc04085a9f8c003a52e23bfd298f680443d4eb44fbbe4b72e8a3808ea2fc85d26eef129da0e7b7a4ff6fa81dd6ba9e05a0f67a9e9f4337c44eab5993855eaf5046b0c5673ba3370e6229beafe54e89f02b219b2f7ce1daaa39746597bca624175ab449a94963db2f3181506bd78c10b8b5878ec6f8b98125806815df00f15d73d9161f79ddc84ee60df09f1dee84750fefd7ea48ac53a29880fd8e4b53a02c480d41d22c7ce0a2f51fd8b4775cee5970f981f42ba6e78107a76fd65c109f96090709c37cdc3f0b9196a9fa4c6a3123a84b3dcd69fff56193e398c38b64e0f37e9fce2c709b32d430a2beb30edd88aee5a549e91d236f8ab3ef9059bd1429cfc43153b10782503821d739d992b6e3fed72b7d4a61af0541f4ec5d87415e4169d124120b29d3e69abed957382e4b4973fe192d027e292c15ec132e5d22c8da6f7182f11c7a824f279421ae9a37a345e14175f941eb500fd2f612f10337433eec2f4c85f448a6c5655e9f4369335f69402699a40b9c03177ef307887ddbe930a6ee5078e0215cf7c256c190191dcac43f2dbe226ef8e0e9a0e6e15a34f3e184d7453495e60e7c73ecd680e5ae44601463819d7218e86c880fdfb8dce383493223badc1ae2f2a77d83b6fc22a2e7118fbebf340ac75c6efd014fa5fc08cd0897cfcbb39e80927d623f584e65f988a8c931243c046a116d1bbebdc8e40953ad007231c41cb8221f6c0cb8041f075518e04b26b9c169436e5bc72a84a969faa987a72ab077b10a2d72b90d254414cbbccceec9209aec0ed28aca58743d277c2c2c33ef7df57890f5ecbf85f2b4861bb28f681d5d910a6ca03ede23a784ef8d55938a9e467d54e077504a24d84eee2cc6ab422f0437c9ef06f1384d0220d20b2fe53cae15ab41ab84bbbb7e63b0a55395873646e5ca16806493bc11011b249f7b791585de838aaa9c17f7030f9f0919416a740366cfc463ef571d254ae67c6aeb852cbe36e71b614c47b840600847bb0f59ead9426ae1dbab29a3041e1102a3d86e0398d65383a525bce40f404519f7527ea6bfa39ee62de520fbbf55dcb14d29d5113f650e30e6f20f11dd957d5b654206716cb3b9485f09a174b327da7b18f5afea532f7d3e45827aed5ed47ef5d32bcd2ff3687ee1b0ff8e059da6e8cf79abaf4a8d974d0b8840a6bb6d17284c0504db11d83967139c007fa0ae164b719a45815499710e998dbcd85fb65c8017a670536ab61c90de03e5b94437825f8f4d6e2f7d67420f619dd5a1b011a53a4e1d54a2e355db182a6bd899a8cfacc0d36e2e04f9b937014499cf8b28debf9c53c7e45dbb8a7f1f6fdab96e0e0af412d74c572e99c1885a186a2955b5bd69b419dcd32bacc56342841f79ca3bc0c9dee330ebb5483a51238c3dd36e7f6594382ecd67189cc1ba444c648ec5a2c5697439fb7b29c3da5489ac63a0d1f67ca4032112618d57afb17ef79c6f01eec9ba7900a59766c1", 0x1000}], 0x4, 0x5, 0x80, 0xe) semctl$IPC_RMID(r5, 0x0, 0x0) ioctl$BLKGETDISKSEQ(r4, 0x80081280, &(0x7f0000001d40)) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40046607, &(0x7f0000001d80)=0x8) 2.374057393s ago: executing program 8 (id=5669): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48014) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x9000) rmdir(&(0x7f0000000000)='./file0\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4ea0, 0x2, @empty, 0x6}, 0x1c) close(0xffffffffffffffff) 2.23437159s ago: executing program 1 (id=5670): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0xc000, @remote}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f00000000c0)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRESDEC=r0, @ANYBLOB="1546010000000000140012800b0001006d6163736563000044fe028008000500", @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r7, 0x20, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000091}, 0xaf495bed7bb89179) 2.227150116s ago: executing program 5 (id=5671): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0xb, 0x32a, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) syz_fuse_handle_req(r0, &(0x7f00000042c0)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x8, 0x0, 0x0, {0x5, 0x0, 0x8, 0x80000001, 0x40000000000003, 0x2, 0x9eb, 0x35741061, 0x0, 0x8000, 0x9e7, 0xffffffffffffffff, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_emit_ethernet(0xae, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x78, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x20}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0xffff, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "020000000400000126000400"}, {0x18, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x3}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e00030000000300000005000700080000008e"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x20, [0x8000, 0x6, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x42, 0x7f, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x0, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x5, 0x7fff, 0x7, 0x80000000, 0xa72, 0xffffffff, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0xffffffff, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf7, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x1, 0x40009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x7, 0x800000d, 0x88da, 0x2007, 0x4000000d, 0x1, 0xfe000000, 0x10002, 0x1, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0xa, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x4, 0x8, 0x86, 0x3, 0x0, 0x3e7, 0x2, 0x5, 0x200, 0x8, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x8, 0x80000000, 0x3, 0x4e0a, 0x7, 0x1000, 0x0, 0x7, 0x5, 0x3, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2eb, 0x2, 0x25], [0x9, 0x259, 0x7, 0xb, 0x3, 0x83, 0x4, 0x80000006, 0x0, 0x1005, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0x10001, 0x1, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14b, 0x3, 0x6, 0x5, 0x3, 0x7fffffff, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x17a, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x4, 0x30b1d693, 0x1ce, 0xc, 0x800004, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000880)={0x7ff, 0x9, 0x2, 0xfffffff7, 0x8, 0x0, [{0x3ff, 0x2, 0x6, '\x00', 0x2}, {0xc, 0x3, 0x7, '\x00', 0x1}, {0x10, 0x10, 0xfffffffffffffff7, '\x00', 0x1001}, {0x6, 0x1, 0x1, '\x00', 0x1a8a}, {0x40000000000000, 0x3, 0xef, '\x00', 0x72e187995f875fe}, {0x8, 0xab, 0x5, '\x00', 0x2200}, {0x129, 0xf, 0x0, '\x00', 0x300}, {0x4, 0x5, 0xb, '\x00', 0x110c}]}) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x800) shutdown(0xffffffffffffffff, 0x1) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.830769558s ago: executing program 5 (id=5672): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010000304020000000000000000000400", @ANYRES16=r0, @ANYRES64=r0], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20008044) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010000304020000000000000000000400", @ANYRES16=r0, @ANYRES64=r0], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20008044) 1.687047311s ago: executing program 5 (id=5673): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mq_unlink(&(0x7f0000000200)='./binderfs/binder0\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, 0x0) 1.39336097s ago: executing program 8 (id=5674): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) io_setup(0x5, &(0x7f0000001380)=0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) write$tun(r4, &(0x7f0000000100)=ANY=[], 0x32) r5 = dup3(r2, r1, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {0x0, r8, 0xa00}}, 0x18) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) 1.236895833s ago: executing program 1 (id=5675): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)={0x20, 0x3, 0x2, '~K'}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) pipe2$watch_queue(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x9d) (async, rerun: 64) keyctl$set_timeout(0xf, r4, 0x96d7) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 64) statx(0xffffffffffffff9c, 0x0, 0x4000, 0xcc8, 0x0) (async, rerun: 64) r5 = socket(0x18, 0x1, 0x0) r6 = syz_io_uring_setup(0x834, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x0, 0x0}) (async) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000027c0)={0x18, &(0x7f0000002600)=ANY=[@ANYBLOB="201814"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2b, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x66, 0x0, 0x2, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x22}}}}}}}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) 568.924121ms ago: executing program 6 (id=5676): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000020a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10) 422.301124ms ago: executing program 5 (id=5677): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) unshare(0x28020480) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000003c0)={0x1, @win={{0x10001, 0x5, 0xc, 0x4}, 0x5, 0x0, 0x0, 0x400, &(0x7f00000002c0), 0xff}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x500, 0x0, 0x32315842}}) 398.76332ms ago: executing program 6 (id=5678): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000240)=@get={0x1, &(0x7f0000000140)=""/160, 0x8}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000ee80)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x3c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}]}], {0x14}}, 0x64}}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) remap_file_pages(&(0x7f000013e000/0x3000)=nil, 0x3000, 0x0, 0x21, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000063c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x2c, 0x0, r6}, {0xa81a, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x1}, {0x0, 0x4000000000000000, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@private2, 0x0, 0x4}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 362.689503ms ago: executing program 5 (id=5679): socket$inet_sctp(0x2, 0x1, 0x84) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$dlm_monitor(0xffffff9c, &(0x7f00000001c0), 0x20a00, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00'}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x2, &(0x7f0000000340)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x20}, @exit], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000a0a01010600000000000000000000005d60f4d520e3e7aff985df539c22e18c85501dbee2a8b54400686c1068afa95882cd2ac1f6996795cd8faced8cc725a4662488ee2c390a24121d328a83ea06d44ae0c13029d3d6db3a0b5c0fad9e133a78c8dcd654d545d244010afa6c5759a83d7f28e0133299c514399d6dcab2b74ba13c0258236b9802d33e9942628f3125fd3efd2ea215d02fd03ea70948b7db1a2ed02fe0d07869f0ba7998a8d35b7a0eb2e8e35c7ac411997ce7e9af307f2b686aa436683134d59736"], 0x14}}, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, 0x0) io_uring_enter(r5, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setxattr$trusted_overlay_origin(0x0, 0x0, &(0x7f0000000200), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r9, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) 246.399406ms ago: executing program 8 (id=5680): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000406d0493c2000000000001090224000100000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002207000000a9f307f2da59cd"], 0x0}, 0x0) 245.830691ms ago: executing program 1 (id=5681): r0 = openat$vnet(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000040)=""/37, 0x25, &(0x7f0000000080)=""/196, 0x3, 0x4}}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r2, 0x80045113, &(0x7f0000000280)) r3 = openat$null(0xffffff9c, &(0x7f00000002c0), 0x40, 0x0) move_mount(r3, &(0x7f0000000300)='./file0\x00', r2, &(0x7f0000000340)='./file0\x00', 0x316) r4 = open_tree(r2, &(0x7f0000000380)='./file0/file0\x00', 0x101) ioctl$SNDCTL_TMR_METRONOME(r4, 0x40045407) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f00000003c0)) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000400)=r2) r5 = semget(0x0, 0x3, 0x380) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000440)=[0x400, 0x40, 0x2, 0x6, 0x8001]) pread64(r3, &(0x7f0000000480)=""/188, 0xbc, 0xb) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f0000000540)) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000740)) openat$adsp1(0xffffff9c, &(0x7f0000000780), 0x200, 0x0) clock_gettime(0x0, &(0x7f00000007c0)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000800)={{0x77359400}, {r6, r7/1000+10000}}, &(0x7f0000000840)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10010, r0, 0x6ff85000) socket$kcm(0x29, 0x8, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e05411, &(0x7f0000000880)) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) r8 = openat$dlm_control(0xffffff9c, &(0x7f0000000940), 0x40100, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000ac0)={&(0x7f0000000980), 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xf, 0x7, 0x1, 0x0, "b30a581b51a1818c9592db"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x98}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x4004800) connect$inet6(r8, &(0x7f0000000b00)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c) pwritev2(r8, &(0x7f0000001d00)=[{&(0x7f0000000b40)="49c0efb40ff48afb66725007227c4299cceeadc621c83e5ce3cc693e7b25f65e107c8562d818bd15ba0a91da7be864c81fd4cfd14654cb66c8cf179d0217eb389c61af1d2e4cd06e1242c3c2ecb0c94fe03a172f317ed0f4921b1a138dd2020a5464e417fb148964ea949610aba6e5cec4d05aa22d889a0917e42d323f3ef6e17b9400e9dbc28ce9181fecad0699a9b311553c00ae746e83b95153e458629aa6f3b3eb2aecbaf8b0dcaf024ec0d3f590fa80b9", 0xb3}, {&(0x7f0000000c00)="244ac465a500b3da8330b525653462fbeb028b374237f9fa4298318022191b002247d95158e9dcabea939506d45c379295edfc5477a03b4b0b9ad24a6c59d2b50e270aa38d06af6ed51ffd9998c6", 0x4e}, {&(0x7f0000000c80)="9ab939e1aeb8b7d878da5b03e1b0990fd945cb4eecc5d1212ab0ed9a1e5b0063f2010f0f0f8a83c8e6e455d7aa3334f98ad367a9e3fe96d1c9f85daac8798c036c8e58f1172f3c4280b747c99b65ad728e1e", 0x52}, {&(0x7f0000000d00)="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", 0x1000}], 0x4, 0x5, 0x80, 0xe) semctl$IPC_RMID(r5, 0x0, 0x0) ioctl$BLKGETDISKSEQ(r4, 0x80081280, &(0x7f0000001d40)) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40046607, &(0x7f0000001d80)=0x8) 119.272537ms ago: executing program 1 (id=5682): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xfffc, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x29, 0x80, 0x0, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x7, 0x7fffffff}}]}}}]}, 0x60}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 0s ago: executing program 9 (id=5683): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xa, 0x2002) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0x0, 0x800, 'syz0\x00'}, 0x5, 0x3, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) kernel console output (not intermixed with test programs): 73.867283][T16090] usb 10-1: device descriptor read/64, error -71 [ 1273.977054][T16090] usb usb10-port1: attempt power cycle [ 1274.035956][ T5901] ir_toy 9-1:0.144: required endpoints not found [ 1274.077191][ T5901] usb 9-1: USB disconnect, device number 78 [ 1274.252556][T24326] netdevsim netdevsim6: Direct firmware load for . [ 1274.252556][T24326] failed with error -2 [ 1274.265474][T24326] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1274.265474][T24326] [ 1274.305227][ T5901] usb 2-1: USB disconnect, device number 3 [ 1274.306039][ C1] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 1274.311421][T24325] ldusb 2-1:0.55: Couldn't submit interrupt_out_urb -19 [ 1274.346908][T16090] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1274.366690][ T5901] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1274.397509][T16090] usb 10-1: device descriptor read/8, error -71 [ 1274.646726][T16090] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1274.680403][T16090] usb 10-1: device descriptor read/8, error -71 [ 1274.762313][ T5913] usbhid 6-1:0.0: can't add hid device: -71 [ 1274.780009][ T5913] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1274.801853][T16090] usb usb10-port1: unable to enumerate USB device [ 1274.832636][ T5913] usb 6-1: USB disconnect, device number 78 [ 1274.907892][ T5901] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 1275.076718][ T5901] usb 9-1: Using ep0 maxpacket: 32 [ 1275.091013][ T5901] usb 9-1: config 211 has an invalid interface number: 98 but max is 0 [ 1275.107950][ T5901] usb 9-1: config 211 has no interface number 0 [ 1275.121547][ T5901] usb 9-1: config 211 interface 98 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 1275.146014][ T5901] usb 9-1: config 211 interface 98 has no altsetting 0 [ 1275.165487][ T5901] usb 9-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 1275.186692][ T5901] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.204720][ T5901] usb 9-1: Product: syz [ 1275.213868][ T5901] usb 9-1: Manufacturer: syz [ 1275.229627][ T5901] usb 9-1: SerialNumber: syz [ 1275.247379][T24331] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1275.410518][T24344] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1275.480733][T24331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.494972][T24331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1275.515101][ T5901] mct_u232 9-1:211.98: MCT U232 converter detected [ 1275.542405][ T5901] mct_u232 ttyUSB0: expected endpoint missing [ 1275.568904][ T5901] usb 9-1: USB disconnect, device number 79 [ 1275.581771][ T5901] mct_u232 9-1:211.98: device disconnected [ 1275.726099][T24353] bond2: option resend_igmp: invalid value (18446744073709494083) [ 1275.747164][T24353] bond2: option resend_igmp: allowed values 0 - 255 [ 1275.763627][T24353] bond2 (unregistering): Released all slaves [ 1275.846633][T16090] usb 7-1: new full-speed USB device number 67 using dummy_hcd [ 1275.855644][T24357] dlm: no locking on control device [ 1276.017528][T16090] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.036910][T16090] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1276.074473][T16090] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1276.116614][T20855] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1276.125741][T16090] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.172409][T16090] usb 7-1: config 0 descriptor?? [ 1276.279026][T20855] usb 6-1: config 171 has an invalid interface number: 109 but max is 0 [ 1276.292506][T20855] usb 6-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.313471][T20855] usb 6-1: config 171 has no interface number 0 [ 1276.330611][T20855] usb 6-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1276.361909][T20855] usb 6-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 27904, setting to 64 [ 1276.383747][T20855] usb 6-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1276.415421][T20855] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1276.446333][T16090] usb 7-1: USB disconnect, device number 67 [ 1276.467682][T20855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.493350][T20855] usb 6-1: Product: syz [ 1276.503531][T20855] usb 6-1: Manufacturer: syz [ 1276.515172][T20855] usb 6-1: SerialNumber: syz [ 1276.543142][T24357] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1276.696641][T22908] usb 10-1: new full-speed USB device number 50 using dummy_hcd [ 1276.826665][ T5901] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 1276.856587][T16090] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1276.986827][ T5901] usb 9-1: Using ep0 maxpacket: 8 [ 1277.019102][ T5901] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1277.032969][T16090] usb 2-1: Using ep0 maxpacket: 8 [ 1277.046072][ T5901] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1277.079979][T16090] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1277.091807][T22908] usb 10-1: config 0 has no interfaces? [ 1277.101693][ T5901] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1277.128326][T22908] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1277.138513][T22908] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.139430][T16090] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1277.155238][T22908] usb 10-1: Product: syz [ 1277.163437][T22908] usb 10-1: Manufacturer: syz [ 1277.173456][ T5901] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1277.175441][T22908] usb 10-1: SerialNumber: syz [ 1277.236041][ T5901] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1277.245260][T16090] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1277.278500][T22908] usb 10-1: config 0 descriptor?? [ 1277.283114][ T5901] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.295015][T16090] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1277.370877][T16090] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1277.448405][T16090] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.584909][ T5901] usb 9-1: GET_CAPABILITIES returned 0 [ 1277.608395][ T5901] usbtmc 9-1:16.0: can't read capabilities [ 1277.616908][T20855] ath6kl: Failed to submit usb control message: -110 [ 1277.634651][T20855] ath6kl: unable to send the bmi data to the device: -110 [ 1277.645874][T24357] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.653260][T24357] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.670625][T20855] ath6kl: Unable to send get target info: -110 [ 1277.686781][T20855] ath6kl: Failed to init ath6kl core: -110 [ 1277.750939][T20855] ath6kl_usb 6-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 1277.754481][T16090] usb 2-1: GET_CAPABILITIES returned 0 [ 1277.836414][T16090] usbtmc 2-1:16.0: can't read capabilities [ 1277.896936][T24385] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5291'. [ 1278.167145][T24388] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5292'. [ 1278.301952][T24392] netlink: 'syz.6.5294': attribute type 10 has an invalid length. [ 1278.564337][T24357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1278.619957][T24357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1279.103623][T24357] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 1279.154868][T24385] gre0: left promiscuous mode [ 1279.160806][T24388] gre0: left promiscuous mode [ 1279.176338][T22909] usb 6-1: USB disconnect, device number 79 [ 1279.182912][ T5931] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.210930][ T5931] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.234921][ T5931] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.245993][ T5931] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.897432][T22909] usb 10-1: USB disconnect, device number 50 [ 1280.236935][T16090] usb 9-1: USB disconnect, device number 80 [ 1280.249492][T22909] usb 2-1: USB disconnect, device number 4 [ 1280.329445][T24402] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1280.349117][T24402] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1280.365391][T24402] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1280.378448][T24402] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1280.393258][T24402] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1280.400384][T24402] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1280.410680][T24402] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1280.417227][T24402] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1280.427107][T24402] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1280.433589][T24402] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1280.470518][T24415] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5300'. [ 1280.529785][T24416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5302'. [ 1280.686663][T20855] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1280.694965][T22909] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1280.796641][T24381] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 1280.836774][T22909] usb 10-1: device descriptor read/64, error -71 [ 1280.868663][T20855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1280.879758][T20855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1280.889836][T20855] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1280.903177][T20855] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1280.912288][T20855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.922527][T20855] usb 7-1: config 0 descriptor?? [ 1280.959363][T24381] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.970539][T24381] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1280.979954][T24381] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1280.989275][T24381] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.000810][T24381] usb 6-1: config 0 descriptor?? [ 1281.010337][T24381] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1281.017088][T24381] dvb-usb: bulk message failed: -22 (3/0) [ 1281.027491][T24381] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1281.036892][T24381] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1281.044047][T24381] usb 6-1: media controller created [ 1281.051583][T24381] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1281.065631][T24381] dvb-usb: bulk message failed: -22 (6/0) [ 1281.080057][T24381] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1281.087411][T22909] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1281.099971][T24381] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input106 [ 1281.113973][T24381] dvb-usb: schedule remote query interval to 150 msecs. [ 1281.121928][T24381] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1281.226815][T22909] usb 10-1: device descriptor read/64, error -71 [ 1281.252289][T24381] usb 6-1: USB disconnect, device number 80 [ 1281.313282][T24381] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1281.347034][T22909] usb usb10-port1: attempt power cycle [ 1281.382211][T24422] dlm: no locking on control device [ 1281.393932][T20855] plantronics 0003:047F:FFFF.0059: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1281.616667][T19874] Bluetooth: hci5: command 0x0406 tx timeout [ 1281.656671][ T5901] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1281.718747][T22909] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1281.734507][T24381] usb 7-1: USB disconnect, device number 68 [ 1281.747376][T22909] usb 10-1: device descriptor read/8, error -71 [ 1281.820094][ T5901] usb 2-1: config 171 has an invalid interface number: 109 but max is 0 [ 1281.831128][ T5901] usb 2-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.842606][ T5901] usb 2-1: config 171 has no interface number 0 [ 1281.849084][ T5901] usb 2-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1281.876231][ T5901] usb 2-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 27904, setting to 64 [ 1281.888452][ T5901] usb 2-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1281.905052][ T5901] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1281.919373][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.927954][ T5901] usb 2-1: Product: syz [ 1281.932335][ T5901] usb 2-1: Manufacturer: syz [ 1281.939078][ T5901] usb 2-1: SerialNumber: syz [ 1281.946915][T24422] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1282.006647][T22909] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1282.028636][T22909] usb 10-1: device descriptor read/8, error -71 [ 1282.138743][T22909] usb usb10-port1: unable to enumerate USB device [ 1282.159091][ T5901] ath6kl: Failed to submit usb control message: -71 [ 1282.165730][ T5901] ath6kl: unable to send the bmi data to the device: -71 [ 1282.176305][ T5901] ath6kl: Unable to send get target info: -71 [ 1282.194469][ T5901] ath6kl: Failed to init ath6kl core: -71 [ 1282.201741][ T5901] ath6kl_usb 2-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 1282.216179][ T5901] usb 2-1: USB disconnect, device number 5 [ 1282.227387][T21401] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1282.386774][T21401] usb 6-1: Using ep0 maxpacket: 8 [ 1282.394749][T21401] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1282.405815][T21401] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1282.416952][T19874] Bluetooth: hci3: command 0x0406 tx timeout [ 1282.423008][T19874] Bluetooth: hci1: command 0x0406 tx timeout [ 1282.427919][T24450] Bluetooth: hci4: command 0x0406 tx timeout [ 1282.430255][T21401] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1282.453600][T21401] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1282.467497][T21401] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1282.479216][T21401] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.498110][T14101] Bluetooth: hci0: command 0x0406 tx timeout [ 1282.694226][T21401] usb 6-1: GET_CAPABILITIES returned 0 [ 1282.702545][T21401] usbtmc 6-1:16.0: can't read capabilities [ 1282.813965][T24459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5315'. [ 1282.906807][T24444] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5311'. [ 1282.916149][T24444] gre0: left promiscuous mode [ 1283.634214][T24478] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1283.640753][T24478] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1283.651837][T24478] vhci_hcd vhci_hcd.0: Device attached [ 1283.659772][T24478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5322'. [ 1283.669259][T24479] vhci_hcd: cannot find a urb of seqnum 6 max seqnum 3 [ 1283.690796][ T61] vhci_hcd vhci_hcd.1: stop threads [ 1283.696752][T14101] Bluetooth: hci5: command 0x0406 tx timeout [ 1283.716440][ T61] vhci_hcd vhci_hcd.1: release socket [ 1283.727588][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 1283.737522][T21401] usb 7-1: new full-speed USB device number 69 using dummy_hcd [ 1283.900068][T21401] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.918873][T21401] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1283.944607][T21401] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1283.966629][T21401] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.989749][T21401] usb 7-1: config 0 descriptor?? [ 1284.004290][T21401] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1284.022927][T21401] dvb-usb: bulk message failed: -22 (3/0) [ 1284.043031][T21401] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1284.069901][T21401] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1284.085707][T21401] usb 7-1: media controller created [ 1284.098652][T21401] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1284.131051][T21401] dvb-usb: bulk message failed: -22 (6/0) [ 1284.145804][T21401] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1284.164818][T21401] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input107 [ 1284.201806][T21401] dvb-usb: schedule remote query interval to 150 msecs. [ 1284.234069][T21401] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1284.262830][T21401] usb 7-1: USB disconnect, device number 69 [ 1284.295309][T24488] dlm: no locking on control device [ 1284.305773][T21401] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1284.497381][T24451] Bluetooth: hci3: command 0x0406 tx timeout [ 1284.498493][T24450] Bluetooth: hci4: command 0x0406 tx timeout [ 1284.503463][T14101] Bluetooth: hci1: command 0x0406 tx timeout [ 1284.576639][T24451] Bluetooth: hci0: command 0x0406 tx timeout [ 1284.582952][ T5901] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1284.750148][ T5901] usb 2-1: config 171 has an invalid interface number: 109 but max is 0 [ 1284.776819][ T5901] usb 2-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.818689][ T5901] usb 2-1: config 171 has no interface number 0 [ 1284.841243][ T5901] usb 2-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1284.865661][ T5901] usb 2-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 27904, setting to 64 [ 1284.883445][ T5901] usb 2-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1284.915395][ T5901] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1284.927141][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.937849][ T5901] usb 2-1: Product: syz [ 1284.942466][ T5901] usb 2-1: Manufacturer: syz [ 1284.947929][ T5901] usb 2-1: SerialNumber: syz [ 1284.962909][T24488] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1284.982603][T24381] usb 6-1: USB disconnect, device number 81 [ 1285.180323][ T5901] ath6kl: Failed to submit usb control message: -71 [ 1285.189410][ T5901] ath6kl: unable to send the bmi data to the device: -71 [ 1285.196825][ T5901] ath6kl: Unable to send get target info: -71 [ 1285.204365][ T5901] ath6kl: Failed to init ath6kl core: -71 [ 1285.269225][ T5901] ath6kl_usb 2-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 1285.354116][ T5901] usb 2-1: USB disconnect, device number 6 [ 1285.418544][T24508] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5332'. [ 1285.676735][T24514] kernel profiling enabled (shift: 63) [ 1285.682466][T24514] profiling shift: 63 too large [ 1286.046664][T20855] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1286.116616][ T5901] usb 7-1: new full-speed USB device number 70 using dummy_hcd [ 1286.226716][T20855] usb 2-1: Using ep0 maxpacket: 32 [ 1286.251464][T20855] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1286.280594][T20855] usb 2-1: config 0 has no interface number 0 [ 1286.301887][T20855] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=80.01 [ 1286.324510][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1286.358357][ T5901] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1286.367624][T20855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.373755][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.399922][T20855] usb 2-1: Product: syz [ 1286.404139][T20855] usb 2-1: Manufacturer: syz [ 1286.404945][ T5901] usb 7-1: config 0 descriptor?? [ 1286.425067][T20855] usb 2-1: SerialNumber: syz [ 1286.430116][T24520] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1286.448574][T20855] usb 2-1: config 0 descriptor?? [ 1286.474085][T20855] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1286.484929][T20855] usb 2-1: selecting invalid altsetting 1 [ 1286.491493][T20855] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1286.510452][T20855] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1286.522304][T20855] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1286.532335][T20855] usb 2-1: media controller created [ 1286.568783][T20855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1286.606643][T24381] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 1286.672046][T20855] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1286.680811][T20855] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1286.691730][T20855] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1286.739210][T20855] usb 2-1: USB disconnect, device number 7 [ 1286.770616][T24381] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.796570][T24381] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1286.805548][T24381] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1286.836404][T24381] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.847325][T24381] usb 6-1: config 0 descriptor?? [ 1286.856330][T24381] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1286.863794][ T5901] elan 0003:04F3:0755.005A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 1286.866988][T24381] dvb-usb: bulk message failed: -22 (3/0) [ 1286.892820][T24381] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1286.907116][T24381] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1286.914251][T24381] usb 6-1: media controller created [ 1286.938086][T24381] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1286.960423][T24381] dvb-usb: bulk message failed: -22 (6/0) [ 1286.966291][T24381] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1286.983691][T24381] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input108 [ 1287.000757][T24381] dvb-usb: schedule remote query interval to 150 msecs. [ 1287.006872][T16090] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 1287.008034][T24381] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1287.065190][T24520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.075936][T24520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1287.086358][T24520] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5336'. [ 1287.096985][ T5901] usb 6-1: USB disconnect, device number 82 [ 1287.101771][T24520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.112459][T24520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1287.148188][ T5901] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1287.166568][T16090] usb 9-1: Using ep0 maxpacket: 8 [ 1287.181606][T16090] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1287.206682][T16090] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1287.249228][T16090] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1287.275720][T16090] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1287.310100][T16090] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1287.321792][T16090] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.348464][T24381] usb 7-1: USB disconnect, device number 70 [ 1287.556625][T16090] usb 9-1: GET_CAPABILITIES returned 0 [ 1287.572622][T24539] netlink: 436 bytes leftover after parsing attributes in process `syz.1.5341'. [ 1287.576637][T16090] usbtmc 9-1:16.0: can't read capabilities [ 1287.768501][T24528] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5339'. [ 1288.035429][T24550] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5345'. [ 1288.337099][T16090] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1288.496779][T16090] usb 7-1: Using ep0 maxpacket: 32 [ 1288.510377][T16090] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1288.527226][T16090] usb 7-1: config 0 has no interface number 0 [ 1288.548016][T16090] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=80.01 [ 1288.563766][T16090] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.573048][T16090] usb 7-1: Product: syz [ 1288.578251][T16090] usb 7-1: Manufacturer: syz [ 1288.582985][T16090] usb 7-1: SerialNumber: syz [ 1288.593452][T16090] usb 7-1: config 0 descriptor?? [ 1288.606282][T16090] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1288.615988][T16090] usb 7-1: selecting invalid altsetting 1 [ 1288.622115][T16090] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1288.674700][T16090] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1288.687094][T16090] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1288.696098][T16090] usb 7-1: media controller created [ 1288.771923][T16090] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1288.837912][T16090] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1288.859276][T16090] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1288.868578][T16090] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1288.910496][T16090] usb 7-1: USB disconnect, device number 71 [ 1289.048863][T24381] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1289.219968][T24381] usb 2-1: not running at top speed; connect to a high speed hub [ 1289.232481][T24381] usb 2-1: config 240 has an invalid interface number: 50 but max is 0 [ 1289.252464][T24381] usb 2-1: config 240 has no interface number 0 [ 1289.265719][T24381] usb 2-1: config 240 interface 50 altsetting 8 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1289.284044][T24381] usb 2-1: config 240 interface 50 altsetting 8 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1289.288088][T24565] netlink: 'syz.9.5351': attribute type 10 has an invalid length. [ 1289.296370][T24381] usb 2-1: config 240 interface 50 has no altsetting 0 [ 1289.303455][T24565] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5351'. [ 1289.313244][T24381] usb 2-1: New USB device found, idVendor=1b80, idProduct=e39a, bcdDevice=ba.9d [ 1289.321474][T24565] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1289.335747][T24565] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1289.343453][T24381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.344703][T24565] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1289.351964][T24381] usb 2-1: Product: syz [ 1289.363064][T24381] usb 2-1: Manufacturer: К [ 1289.363800][T24565] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1289.368022][T24381] usb 2-1: SerialNumber: syz [ 1289.375371][T24565] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1289.389324][T24565] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1289.407495][T24558] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1289.686099][T16090] usb 9-1: USB disconnect, device number 81 [ 1289.756628][ T5901] usb 7-1: new full-speed USB device number 72 using dummy_hcd [ 1289.928906][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1289.947133][ T5901] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1289.968985][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.993014][ T5901] usb 7-1: config 0 descriptor?? [ 1290.018063][T24570] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1290.107516][ T5823] usb 2-1: USB disconnect, device number 8 [ 1290.469208][ T5901] elan 0003:04F3:0755.005B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 1290.526750][T24577] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5355'. [ 1290.578855][ T30] audit: type=1326 audit(1765745039.473:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24588 comm="syz.5.5359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 1290.648913][ T30] audit: type=1326 audit(1765745039.473:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24588 comm="syz.5.5359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 1290.698727][T24570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1290.737025][T24570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1290.772960][ T30] audit: type=1326 audit(1765745039.473:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24588 comm="syz.5.5359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 1290.882177][T24596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1290.891481][T24597] dlm: no locking on control device [ 1290.908267][ T30] audit: type=1326 audit(1765745039.473:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24588 comm="syz.5.5359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 1290.962477][T24570] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5353'. [ 1290.971621][ T30] audit: type=1326 audit(1765745039.503:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24588 comm="syz.5.5359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=246 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 1290.972822][T24596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1291.004051][T24599] dlm: no locking on control device [ 1291.083520][ T30] audit: type=1326 audit(1765745039.523:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24588 comm="syz.5.5359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 1291.119600][ T30] audit: type=1326 audit(1765745039.533:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24588 comm="syz.5.5359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 1291.159022][ T30] audit: type=1326 audit(1765745039.533:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24588 comm="syz.5.5359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 1291.192053][ T30] audit: type=1326 audit(1765745039.533:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24588 comm="syz.5.5359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 1291.214808][ T30] audit: type=1326 audit(1765745039.533:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24588 comm="syz.5.5359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 1291.246612][T24381] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1291.269014][T22909] usb 7-1: USB disconnect, device number 72 [ 1291.316654][ T5901] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1291.423769][T24381] usb 2-1: config 171 has an invalid interface number: 109 but max is 0 [ 1291.433463][T24381] usb 2-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.445796][T24381] usb 2-1: config 171 has no interface number 0 [ 1291.452328][T24381] usb 2-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1291.469081][T24381] usb 2-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 16384, setting to 64 [ 1291.479276][ T5901] usb 6-1: config 171 has an invalid interface number: 109 but max is 0 [ 1291.481371][T24381] usb 2-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1291.494614][ T5901] usb 6-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.512604][T24381] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1291.512635][T24381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.512654][T24381] usb 2-1: Product: syz [ 1291.512669][T24381] usb 2-1: Manufacturer: syz [ 1291.512686][T24381] usb 2-1: SerialNumber: syz [ 1291.544877][ T5901] usb 6-1: config 171 has no interface number 0 [ 1291.551439][ T5901] usb 6-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1291.565750][ T5901] usb 6-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 27904, setting to 64 [ 1291.579005][T24597] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1291.581268][ T5901] usb 6-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1291.603841][ T5901] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1291.613184][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.621568][ T5901] usb 6-1: Product: syz [ 1291.625814][ T5901] usb 6-1: Manufacturer: syz [ 1291.630604][ T5901] usb 6-1: SerialNumber: syz [ 1291.642980][T24599] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 1291.816616][T22909] usb 7-1: new full-speed USB device number 73 using dummy_hcd [ 1291.863350][ T5901] ath6kl: Failed to submit usb control message: -71 [ 1291.872851][ T5901] ath6kl: unable to send the bmi data to the device: -71 [ 1291.880496][ T5901] ath6kl: Unable to send get target info: -71 [ 1291.901181][ T5901] ath6kl: Failed to init ath6kl core: -71 [ 1291.909413][ T5901] ath6kl_usb 6-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 1291.941331][ T5901] usb 6-1: USB disconnect, device number 83 [ 1291.987570][T22909] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.017601][T22909] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1292.047352][T22909] usb 7-1: New USB device found, idVendor=1d76, idProduct=0101, bcdDevice= 0.00 [ 1292.066652][T22909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1292.066654][ T5823] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1292.066683][T22909] usb 7-1: SerialNumber: syz [ 1292.110858][T22909] usb 7-1: invalid UAC_HEADER (v1) [ 1292.144720][T22909] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1292.192375][T22271] udevd[22271]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1292.226569][ T5823] usb 10-1: Using ep0 maxpacket: 8 [ 1292.233670][ T5823] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1292.249097][ T5823] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1292.268756][ T5823] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1292.279031][ T5823] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1292.292333][ T5823] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1292.302705][ T5823] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.364692][T24604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1292.374707][T24604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1292.391311][T16090] usb 7-1: USB disconnect, device number 73 [ 1292.516809][ T5901] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 1292.529885][ T5823] usb 10-1: GET_CAPABILITIES returned 0 [ 1292.535548][ T5823] usbtmc 10-1:16.0: can't read capabilities [ 1292.657009][T24381] ath6kl: Failed to submit usb control message: -110 [ 1292.664913][T24381] ath6kl: unable to send the bmi data to the device: -110 [ 1292.674714][T24381] ath6kl: Unable to send get target info: -110 [ 1292.676590][ T5901] usb 9-1: device descriptor read/64, error -71 [ 1292.698976][T24381] ath6kl: Failed to init ath6kl core: -110 [ 1292.707898][T24381] ath6kl_usb 2-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 1292.743164][T24610] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5364'. [ 1292.926686][ T5901] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 1293.067011][ T5901] usb 9-1: device descriptor read/64, error -71 [ 1293.186973][ T5901] usb usb9-port1: attempt power cycle [ 1293.291455][T24626] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5368'. [ 1293.546695][ T5901] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 1293.578504][ T5901] usb 9-1: device descriptor read/8, error -71 [ 1293.758655][T24381] usb 2-1: USB disconnect, device number 9 [ 1293.806719][ T5823] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1293.827155][ T5901] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 1293.861033][ T5901] usb 9-1: device descriptor read/8, error -71 [ 1293.869652][T24633] tipc: Cannot configure node identity twice [ 1293.956619][ T5823] usb 7-1: Using ep0 maxpacket: 32 [ 1293.964464][ T5823] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1293.973105][ T5823] usb 7-1: config 0 has no interface number 0 [ 1293.983056][ T5823] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=80.01 [ 1293.993884][ T5823] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.002773][ T5901] usb usb9-port1: unable to enumerate USB device [ 1294.009437][ T5823] usb 7-1: Product: syz [ 1294.014535][ T5823] usb 7-1: Manufacturer: syz [ 1294.022776][ T5823] usb 7-1: SerialNumber: syz [ 1294.032129][ T5823] usb 7-1: config 0 descriptor?? [ 1294.045649][ T5823] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1294.055077][ T5823] usb 7-1: selecting invalid altsetting 1 [ 1294.061239][ T5823] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1294.072269][ T5823] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1294.083404][ T5823] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1294.093866][ T5823] usb 7-1: media controller created [ 1294.109631][ T5823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1294.236671][T24381] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1294.260613][ T5823] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1294.270440][ T5823] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1294.281095][ T5823] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1294.351263][ T5823] usb 7-1: USB disconnect, device number 74 [ 1294.420563][T24381] usb 2-1: Using ep0 maxpacket: 16 [ 1294.803650][T22909] usb 10-1: USB disconnect, device number 55 [ 1295.244949][T24653] binder: 24652:24653 ioctl 808c563d 0 returned -22 [ 1295.886415][T24671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1296.646649][T22909] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1296.676663][ T5903] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 1296.836710][T22909] usb 6-1: Using ep0 maxpacket: 8 [ 1296.841825][ T5903] usb 9-1: Using ep0 maxpacket: 32 [ 1296.855561][T22909] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1296.876413][ T5903] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1296.893824][T22909] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1296.914290][ T5903] usb 9-1: config 0 has no interface number 0 [ 1296.933189][T22909] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1296.956819][ T5903] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=80.01 [ 1296.969043][ T5903] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.977904][T24381] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1296.986077][T22909] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1297.001993][ T5903] usb 9-1: Product: syz [ 1297.006396][ T5903] usb 9-1: Manufacturer: syz [ 1297.014884][T24381] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1297.023306][T22909] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1297.032761][ T5903] usb 9-1: SerialNumber: syz [ 1297.039463][T24381] usb 2-1: can't read configurations, error -71 [ 1297.054739][T22909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.065627][ T5903] usb 9-1: config 0 descriptor?? [ 1297.078223][ T5903] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1297.088647][ T5903] usb 9-1: selecting invalid altsetting 1 [ 1297.099454][ T5903] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1297.116940][ T5903] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1297.148099][ T5903] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1297.211592][ T5903] usb 9-1: media controller created [ 1297.261608][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1297.278423][T24690] wg1: entered promiscuous mode [ 1297.283568][T24690] wg1: entered allmulticast mode [ 1297.337427][T22909] usb 6-1: GET_CAPABILITIES returned 0 [ 1297.358191][T22909] usbtmc 6-1:16.0: can't read capabilities [ 1297.376590][ T5901] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1297.376647][ T5903] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1297.407510][ T5903] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1297.415615][ T5903] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1297.523887][ T5903] usb 9-1: USB disconnect, device number 86 [ 1297.553087][T24678] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5385'. [ 1297.586850][ T5901] usb 7-1: Using ep0 maxpacket: 16 [ 1297.602205][ T5901] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1297.636967][ T5901] usb 7-1: config 0 has no interface number 0 [ 1297.660601][ T5901] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1297.710037][ T5901] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1297.719371][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1297.727814][ T5901] usb 7-1: Product: syz [ 1297.732323][ T5901] usb 7-1: SerialNumber: syz [ 1297.745279][ T5901] usb 7-1: config 0 descriptor?? [ 1297.763588][ T5901] usbhid 7-1:0.8: couldn't find an input interrupt endpoint [ 1297.921646][T24699] binder: 24698:24699 ioctl 808c563d 0 returned -22 [ 1299.071692][T24726] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1299.081082][T24727] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1299.389234][ T5901] usb 6-1: USB disconnect, device number 84 [ 1300.016670][ T5901] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1300.095315][T24744] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 1300.101856][T24744] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1300.117699][T24744] vhci_hcd vhci_hcd.0: Device attached [ 1300.119650][T24749] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5403'. [ 1300.135913][T24745] vhci_hcd: connection closed [ 1300.136167][ T3732] vhci_hcd vhci_hcd.9: stop threads [ 1300.138766][ T5903] usb 7-1: USB disconnect, device number 75 [ 1300.142147][ T3732] vhci_hcd vhci_hcd.9: release socket [ 1300.160659][ T3732] vhci_hcd vhci_hcd.9: disconnect device [ 1300.176962][ T5901] usb 6-1: Using ep0 maxpacket: 16 [ 1300.357008][T22909] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1300.430161][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.436935][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.452883][T24755] wg1: entered promiscuous mode [ 1300.457889][T24755] wg1: entered allmulticast mode [ 1300.506547][T22909] usb 2-1: Using ep0 maxpacket: 32 [ 1300.506729][ T5823] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 1300.528037][T22909] usb 2-1: config 211 has an invalid interface number: 98 but max is 0 [ 1300.544045][T22909] usb 2-1: config 211 has no interface number 0 [ 1300.557917][T22909] usb 2-1: config 211 interface 98 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 1300.582132][T22909] usb 2-1: config 211 interface 98 has no altsetting 0 [ 1300.603268][T22909] usb 2-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 1300.613081][T22909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.621205][T22909] usb 2-1: Product: syz [ 1300.625678][T22909] usb 2-1: Manufacturer: syz [ 1300.630414][T22909] usb 2-1: SerialNumber: syz [ 1300.642136][T24748] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1300.676810][ T5823] usb 9-1: Using ep0 maxpacket: 32 [ 1300.692529][ T5823] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1300.705398][ T5823] usb 9-1: config 0 has no interface number 0 [ 1300.724921][ T5823] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=80.01 [ 1300.741224][ T5823] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.751918][ T5823] usb 9-1: Product: syz [ 1300.756845][ T5823] usb 9-1: Manufacturer: syz [ 1300.765718][ T5823] usb 9-1: SerialNumber: syz [ 1300.794961][ T5823] usb 9-1: config 0 descriptor?? [ 1300.809760][ T5823] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1300.822625][ T5823] usb 9-1: selecting invalid altsetting 1 [ 1300.839431][ T5823] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1300.862344][ T5823] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1300.874141][ T5823] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1300.883599][ T5823] usb 9-1: media controller created [ 1300.891503][T24757] binder: 24756:24757 ioctl 808c563d 0 returned -22 [ 1300.920000][T22909] mct_u232 2-1:211.98: MCT U232 converter detected [ 1300.940293][T22909] mct_u232 ttyUSB0: expected endpoint missing [ 1300.963049][T22909] usb 2-1: USB disconnect, device number 12 [ 1300.971866][ T5823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1301.006306][T22909] mct_u232 2-1:211.98: device disconnected [ 1301.087865][ T5823] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1301.111936][ T5823] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1301.138215][ T5823] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1301.236933][ T5823] usb 9-1: USB disconnect, device number 87 [ 1302.086784][ T5823] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 1302.137147][T16090] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1302.264791][ T5823] usb 9-1: Using ep0 maxpacket: 8 [ 1302.287461][T16090] usb 10-1: device descriptor read/64, error -71 [ 1302.303625][ T5823] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1302.365432][ T5823] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1302.394556][ T5823] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1302.428457][ T5823] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1302.441893][ T5823] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1302.451282][ T5823] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.556655][T16090] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 1302.623309][ T5901] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1302.696831][T16090] usb 10-1: device descriptor read/64, error -71 [ 1302.716802][ T5901] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1302.730260][ T5823] usb 9-1: GET_CAPABILITIES returned 0 [ 1302.736861][ T5901] usb 6-1: can't read configurations, error -71 [ 1302.743504][ T5823] usbtmc 9-1:16.0: can't read capabilities [ 1302.837013][T16090] usb usb10-port1: attempt power cycle [ 1302.943590][T24770] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5410'. [ 1303.186860][T16090] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 1303.208084][T16090] usb 10-1: device descriptor read/8, error -71 [ 1303.364243][T24787] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5416'. [ 1303.404307][T24789] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 1303.410853][T24789] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1303.425673][T24789] vhci_hcd vhci_hcd.0: Device attached [ 1303.445517][T24790] vhci_hcd: cannot find a urb of seqnum 6 max seqnum 0 [ 1303.445612][T24789] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5417'. [ 1303.456759][T16090] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 1303.478057][ T1038] vhci_hcd vhci_hcd.5: stop threads [ 1303.483525][ T1038] vhci_hcd vhci_hcd.5: release socket [ 1303.491837][ T1038] vhci_hcd vhci_hcd.5: disconnect device [ 1303.507554][T16090] usb 10-1: device descriptor read/8, error -71 [ 1303.628419][T16090] usb usb10-port1: unable to enumerate USB device [ 1304.555003][T24806] QAT: Device 64 not found [ 1304.578227][T24806] QAT: Invalid ioctl -1072667448 [ 1304.793663][ T5901] usb 9-1: USB disconnect, device number 88 [ 1304.841703][T16090] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1305.026738][T16090] usb 7-1: Using ep0 maxpacket: 8 [ 1305.063655][T16090] usb 7-1: config 8 has an invalid interface number: 8 but max is 1 [ 1305.112648][T16090] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.185720][T16090] usb 7-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 1305.242167][T16090] usb 7-1: config 8 has no interface number 0 [ 1305.266690][T16090] usb 7-1: config 8 interface 8 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1305.315998][T16090] usb 7-1: config 8 interface 8 has no altsetting 0 [ 1305.370361][T16090] usb 7-1: language id specifier not provided by device, defaulting to English [ 1305.456227][T16090] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=31.8b [ 1305.496828][T16090] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.513922][T16090] usb 7-1: Manufacturer: ы [ 1305.526709][T16090] usb 7-1: SerialNumber: 몐꧶螒㖈쵀缼䆎즪狸 [ 1305.753072][T24806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.773655][T24806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1305.840655][T16090] dm9601 7-1:8.8: probe with driver dm9601 failed with error -22 [ 1305.877431][T16090] sr9700 7-1:8.8: probe with driver sr9700 failed with error -22 [ 1306.003897][T16090] usb 7-1: USB disconnect, device number 76 [ 1306.146612][T22909] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 1306.160084][T24828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5428'. [ 1306.316564][T22909] usb 9-1: Using ep0 maxpacket: 16 [ 1306.325125][T22909] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 1306.340230][T22909] usb 9-1: config 0 has no interface number 0 [ 1306.370766][T22909] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1306.403042][T22909] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1306.432532][T22909] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1306.449558][T22909] usb 9-1: Product: syz [ 1306.458684][T22909] usb 9-1: SerialNumber: syz [ 1306.471508][T22909] usb 9-1: config 0 descriptor?? [ 1306.490615][T22909] usbhid 9-1:0.8: couldn't find an input interrupt endpoint [ 1306.625515][T24833] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5430'. [ 1307.327012][T16090] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1307.476628][T16090] usb 2-1: Using ep0 maxpacket: 32 [ 1307.484394][T16090] usb 2-1: config 211 has an invalid interface number: 98 but max is 0 [ 1307.503198][T16090] usb 2-1: config 211 has no interface number 0 [ 1307.516144][T16090] usb 2-1: config 211 interface 98 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 1307.540845][T16090] usb 2-1: config 211 interface 98 has no altsetting 0 [ 1307.558876][T16090] usb 2-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 1307.568605][T16090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.577629][T16090] usb 2-1: Product: syz [ 1307.582168][T16090] usb 2-1: Manufacturer: syz [ 1307.587575][T16090] usb 2-1: SerialNumber: syz [ 1307.598057][T24836] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1307.646648][T22909] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1307.812829][T24836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.836767][T22909] usb 7-1: Using ep0 maxpacket: 8 [ 1307.848481][T24836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.864671][T22909] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1307.906794][T22909] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1307.918852][T16090] mct_u232 2-1:211.98: MCT U232 converter detected [ 1307.942010][T22909] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1307.955975][T22909] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1307.972370][T16090] mct_u232 ttyUSB0: expected endpoint missing [ 1307.986646][T22909] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1307.995933][T22909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.007624][T16090] usb 2-1: USB disconnect, device number 13 [ 1308.053475][T16090] mct_u232 2-1:211.98: device disconnected [ 1308.252640][T22909] usb 7-1: GET_CAPABILITIES returned 0 [ 1308.273569][T22909] usbtmc 7-1:16.0: can't read capabilities [ 1308.533453][T16090] usb 9-1: USB disconnect, device number 89 [ 1308.560633][T24859] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5435'. [ 1308.822216][T24869] FAULT_INJECTION: forcing a failure. [ 1308.822216][T24869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1308.854569][T24869] CPU: 1 UID: 0 PID: 24869 Comm: syz.1.5443 Tainted: G L syzkaller #0 PREEMPT(full) [ 1308.854603][T24869] Tainted: [L]=SOFTLOCKUP [ 1308.854611][T24869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1308.854623][T24869] Call Trace: [ 1308.854632][T24869] [ 1308.854641][T24869] dump_stack_lvl+0x189/0x250 [ 1308.854671][T24869] ? __pfx____ratelimit+0x10/0x10 [ 1308.854702][T24869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1308.854726][T24869] ? __pfx__printk+0x10/0x10 [ 1308.854755][T24869] ? __might_fault+0xb0/0x130 [ 1308.854795][T24869] should_fail_ex+0x414/0x560 [ 1308.854829][T24869] _copy_from_iter+0x1cd/0x1630 [ 1308.854851][T24869] ? __build_skb_around+0x22d/0x3c0 [ 1308.854875][T24869] ? __pfx__copy_from_iter+0x10/0x10 [ 1308.854891][T24869] ? __alloc_skb+0x2f1/0x430 [ 1308.854911][T24869] ? __pfx___alloc_skb+0x10/0x10 [ 1308.854933][T24869] ? netlink_sendmsg+0x642/0xb30 [ 1308.854955][T24869] ? skb_put+0x11b/0x210 [ 1308.854980][T24869] netlink_sendmsg+0x6b2/0xb30 [ 1308.855023][T24869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1308.855049][T24869] ? __import_iovec+0x5d4/0x7f0 [ 1308.855069][T24869] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1308.855094][T24869] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1308.855111][T24869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1308.855132][T24869] __sock_sendmsg+0x21c/0x270 [ 1308.855162][T24869] ____sys_sendmsg+0x505/0x820 [ 1308.855189][T24869] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1308.855216][T24869] ? kstrtouint+0x6e/0xe0 [ 1308.855249][T24869] ___sys_sendmsg+0x21f/0x2a0 [ 1308.855270][T24869] ? __pfx____sys_sendmsg+0x10/0x10 [ 1308.855297][T24869] ? rcu_read_lock_any_held+0xb3/0x120 [ 1308.855346][T24869] ? __fget_files+0x2a/0x420 [ 1308.855369][T24869] ? __fget_files+0x3a0/0x420 [ 1308.855402][T24869] __sys_sendmsg+0x164/0x220 [ 1308.855428][T24869] ? __pfx___sys_sendmsg+0x10/0x10 [ 1308.855458][T24869] ? __pfx_ksys_write+0x10/0x10 [ 1308.855478][T24869] ? __do_fast_syscall_32+0xbe/0x590 [ 1308.855504][T24869] __do_fast_syscall_32+0x1f7/0x590 [ 1308.855525][T24869] ? rcu_is_watching+0x15/0xb0 [ 1308.855549][T24869] ? do_fast_syscall_32+0x34/0x80 [ 1308.855572][T24869] do_fast_syscall_32+0x34/0x80 [ 1308.855591][T24869] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1308.855611][T24869] RIP: 0023:0xf70ad539 [ 1308.855627][T24869] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1308.855641][T24869] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1308.855659][T24869] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1308.855669][T24869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1308.855679][T24869] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1308.855688][T24869] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1308.855698][T24869] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1308.855718][T24869] [ 1309.240607][T24879] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5445'. [ 1309.566662][ T5901] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 1309.698268][ T5901] usb 9-1: device descriptor read/64, error -71 [ 1309.936693][ T5901] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 1310.076663][ T5901] usb 9-1: device descriptor read/64, error -71 [ 1310.206806][ T5901] usb usb9-port1: attempt power cycle [ 1310.360960][T24894] tipc: Cannot configure node identity twice [ 1310.383204][T22909] usb 7-1: USB disconnect, device number 77 [ 1310.492671][T24897] FAULT_INJECTION: forcing a failure. [ 1310.492671][T24897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1310.557340][T24897] CPU: 0 UID: 0 PID: 24897 Comm: syz.6.5452 Tainted: G L syzkaller #0 PREEMPT(full) [ 1310.557382][T24897] Tainted: [L]=SOFTLOCKUP [ 1310.557389][T24897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1310.557401][T24897] Call Trace: [ 1310.557410][T24897] [ 1310.557418][T24897] dump_stack_lvl+0x189/0x250 [ 1310.557436][T24897] ? __pfx____ratelimit+0x10/0x10 [ 1310.557453][T24897] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1310.557465][T24897] ? __pfx__printk+0x10/0x10 [ 1310.557485][T24897] should_fail_ex+0x414/0x560 [ 1310.557504][T24897] _copy_to_user+0x31/0xb0 [ 1310.557518][T24897] simple_read_from_buffer+0xe1/0x170 [ 1310.557534][T24897] proc_fail_nth_read+0x1b3/0x220 [ 1310.557548][T24897] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1310.557560][T24897] ? rw_verify_area+0x2a6/0x4d0 [ 1310.557576][T24897] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1310.557588][T24897] vfs_read+0x200/0xa30 [ 1310.557602][T24897] ? __pfx_vfs_read+0x10/0x10 [ 1310.557616][T24897] ? __pfx_aa_sk_perm+0x10/0x10 [ 1310.557629][T24897] ? do_sock_setsockopt+0x185/0x1b0 [ 1310.557645][T24897] ksys_read+0x145/0x250 [ 1310.557656][T24897] ? __pfx_ksys_read+0x10/0x10 [ 1310.557668][T24897] ? __do_fast_syscall_32+0xbe/0x590 [ 1310.557682][T24897] __do_fast_syscall_32+0x1f7/0x590 [ 1310.557694][T24897] ? rcu_is_watching+0x15/0xb0 [ 1310.557706][T24897] ? do_fast_syscall_32+0x34/0x80 [ 1310.557720][T24897] do_fast_syscall_32+0x34/0x80 [ 1310.557732][T24897] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1310.557745][T24897] RIP: 0023:0xf7f41539 [ 1310.557756][T24897] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1310.557766][T24897] RSP: 002b:00000000f5436590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1310.557778][T24897] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5436620 [ 1310.557786][T24897] RDX: 000000000000000f RSI: 00000000f73d6ff4 RDI: 0000000000000000 [ 1310.557793][T24897] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1310.557799][T24897] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1310.557805][T24897] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1310.557820][T24897] [ 1310.676592][T15900] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1310.831887][ T5901] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 1311.036604][T15900] usb 2-1: Using ep0 maxpacket: 16 [ 1311.918989][ T5901] usb 9-1: device descriptor read/8, error -71 [ 1312.379961][T24914] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5457'. [ 1312.436776][ T5901] usb 9-1: new high-speed USB device number 93 using dummy_hcd [ 1312.478441][ T5901] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1312.508207][ T5901] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.536340][ T5901] usb 9-1: Product: syz [ 1312.548481][ T5901] usb 9-1: Manufacturer: syz [ 1312.558486][ T5901] usb 9-1: SerialNumber: syz [ 1313.039172][T24922] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5460'. [ 1313.049303][ T5901] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1313.062562][ T5901] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1313.391387][T15900] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1313.407931][T15900] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1313.415577][T15900] usb 2-1: can't read configurations, error -71 [ 1313.693443][T24930] syzkaller0: entered promiscuous mode [ 1313.700278][T24930] syzkaller0: entered allmulticast mode [ 1313.796634][T15900] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 1313.959423][T15900] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1313.969126][T15900] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1313.977394][T15900] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1313.986401][T15900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1313.996369][T15900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1314.007172][T15900] usb 2-1: language id specifier not provided by device, defaulting to English [ 1314.024561][T15900] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1314.033849][T15900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.043596][T15900] usb 2-1: Manufacturer: 牢 [ 1314.051714][T15900] usb 2-1: config 0 descriptor?? [ 1314.059433][T15900] hub 2-1:0.0: bad descriptor, ignoring hub [ 1314.065541][T15900] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1314.080487][T15900] input: 牢 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input109 [ 1314.172451][T24938] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 1314.179021][T24938] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1314.192050][T24938] vhci_hcd vhci_hcd.0: Device attached [ 1314.199759][T24939] vhci_hcd: cannot find a urb of seqnum 6 max seqnum 0 [ 1314.207087][T24938] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5466'. [ 1314.216575][ T5947] vhci_hcd vhci_hcd.9: stop threads [ 1314.223520][ T5947] vhci_hcd vhci_hcd.9: release socket [ 1314.229042][ T5947] vhci_hcd vhci_hcd.9: disconnect device [ 1314.370802][T24941] netlink: 'syz.1.5462': attribute type 5 has an invalid length. [ 1314.702781][ T5901] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 1314.729438][ T5901] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1314.743702][ T5901] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1314.757967][ T5901] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1314.769631][ T5901] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1314.807005][ T5901] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 1314.881413][ T5901] usb 9-1: USB disconnect, device number 93 [ 1315.450506][T24960] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5471'. [ 1315.456755][T16090] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1315.636571][T16090] usb 6-1: Using ep0 maxpacket: 32 [ 1315.653432][T16090] usb 6-1: config 211 has an invalid interface number: 98 but max is 0 [ 1315.676628][T16090] usb 6-1: config 211 has no interface number 0 [ 1315.683083][T16090] usb 6-1: config 211 interface 98 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 1315.706954][T16090] usb 6-1: config 211 interface 98 has no altsetting 0 [ 1315.728459][T16090] usb 6-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 1315.744531][T16090] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.755062][T16090] usb 6-1: Product: syz [ 1315.760941][T16090] usb 6-1: Manufacturer: syz [ 1315.765580][T16090] usb 6-1: SerialNumber: syz [ 1315.775677][T24957] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1315.983884][T24969] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5474'. [ 1316.016175][T24957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.031310][T24957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.064577][T16090] mct_u232 6-1:211.98: MCT U232 converter detected [ 1316.083288][T16090] mct_u232 ttyUSB0: expected endpoint missing [ 1316.109566][T16090] usb 6-1: USB disconnect, device number 87 [ 1316.135876][T16090] mct_u232 6-1:211.98: device disconnected [ 1316.490069][T16090] usb 2-1: USB disconnect, device number 15 [ 1316.952013][T24982] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1316.958563][T24982] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1316.993330][T24988] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5478'. [ 1317.008100][T24982] vhci_hcd vhci_hcd.0: Device attached [ 1317.030131][T24986] vhci_hcd: connection closed [ 1317.030525][ T5947] vhci_hcd vhci_hcd.6: stop threads [ 1317.043507][ T5947] vhci_hcd vhci_hcd.6: release socket [ 1317.055136][ T5947] vhci_hcd vhci_hcd.6: disconnect device [ 1317.658633][T24995] binder: 24994:24995 ioctl 808c563d 0 returned -22 [ 1317.898312][T25002] netlink: 'syz.9.5481': attribute type 9 has an invalid length. [ 1317.952150][T25002] netlink: 'syz.9.5481': attribute type 11 has an invalid length. [ 1318.021512][T25002] netlink: 'syz.9.5481': attribute type 12 has an invalid length. [ 1318.107201][T25002] netlink: 210020 bytes leftover after parsing attributes in process `syz.9.5481'. [ 1318.144692][T25005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5485'. [ 1318.182775][T25002] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5481'. [ 1318.804259][T25015] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5488'. [ 1318.836641][T22909] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1318.915231][T25020] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1318.921782][T25020] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1318.931963][T25020] vhci_hcd vhci_hcd.0: Device attached [ 1318.945630][T25021] vhci_hcd: cannot find a urb of seqnum 6 max seqnum 1 [ 1318.945838][T25020] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5490'. [ 1318.962010][ T3804] vhci_hcd vhci_hcd.6: stop threads [ 1318.981885][ T3804] vhci_hcd vhci_hcd.6: release socket [ 1318.992288][ T3804] vhci_hcd vhci_hcd.6: disconnect device [ 1319.006403][T22909] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.030841][T22909] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1319.043319][T22909] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1319.081852][T22909] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1319.098025][T22909] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1319.109247][T22909] usb 6-1: Manufacturer: syz [ 1319.124168][T22909] usb 6-1: config 0 descriptor?? [ 1319.135661][T22909] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1319.709971][T25031] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1319.716541][T25031] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1319.728739][T25031] vhci_hcd vhci_hcd.0: Device attached [ 1319.735712][T25034] vhci_hcd: cannot find a urb of seqnum 6 max seqnum 3 [ 1319.744518][ T61] vhci_hcd vhci_hcd.1: stop threads [ 1319.752774][T25031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5494'. [ 1319.761712][ T61] vhci_hcd vhci_hcd.1: release socket [ 1319.761741][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 1319.818753][T25038] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1319.837376][T25038] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1319.846041][T25038] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1319.855366][T25038] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1319.867334][T25038] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1319.965649][T25045] binder: 25044:25045 ioctl 808c563d 0 returned -22 [ 1320.297930][T25054] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5500'. [ 1320.786569][ T5901] usb 9-1: new full-speed USB device number 94 using dummy_hcd [ 1320.949103][ T5901] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1320.963763][ T5901] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1320.973649][ T5901] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.986753][ T5901] usb 9-1: config 0 descriptor?? [ 1320.993690][T25060] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1321.012911][T25068] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5504'. [ 1321.191916][T16090] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1321.348799][T16090] usb 7-1: config 0 has an invalid descriptor of length 177, skipping remainder of the config [ 1321.362702][T16090] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1321.377137][T16090] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1321.386737][T16090] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.397369][T25076] syzkaller0: entered promiscuous mode [ 1321.403261][T25076] syzkaller0: entered allmulticast mode [ 1321.431538][T16090] usb 7-1: config 0 descriptor?? [ 1321.451085][ T5901] elan 0003:04F3:0755.005C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 1321.469321][T16090] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1321.641421][T15900] usb 6-1: USB disconnect, device number 88 [ 1321.660190][T25060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.724321][T25060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.759619][T25060] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5502'. [ 1321.806844][T25060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.835025][T25060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.858643][T14101] Bluetooth: hci1: command 0x0406 tx timeout [ 1321.866261][T24451] Bluetooth: hci3: command 0x0406 tx timeout [ 1321.872425][T24451] Bluetooth: hci4: command 0x0406 tx timeout [ 1321.878525][T14101] Bluetooth: hci5: command 0x0406 tx timeout [ 1321.937186][T24451] Bluetooth: hci0: command 0x0406 tx timeout [ 1321.944626][T16090] usb 9-1: USB disconnect, device number 94 [ 1322.116704][T15900] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 1322.153747][T25088] binder: 25087:25088 ioctl 808c563d 0 returned -22 [ 1322.290223][T15900] usb 10-1: Using ep0 maxpacket: 16 [ 1322.406645][T16090] usb 9-1: new high-speed USB device number 95 using dummy_hcd [ 1322.576597][T16090] usb 9-1: Using ep0 maxpacket: 32 [ 1322.594999][T16090] usb 9-1: config 211 has an invalid interface number: 98 but max is 0 [ 1322.612827][T16090] usb 9-1: config 211 has no interface number 0 [ 1322.619796][T16090] usb 9-1: config 211 interface 98 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 1322.630003][T16090] usb 9-1: config 211 interface 98 has no altsetting 0 [ 1322.640585][T16090] usb 9-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 1322.655255][T16090] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.675625][T16090] usb 9-1: Product: syz [ 1322.680595][T16090] usb 9-1: Manufacturer: syz [ 1322.692899][T16090] usb 9-1: SerialNumber: syz [ 1322.737452][T25086] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1322.991816][T25086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.007711][T25086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.032401][T16090] mct_u232 9-1:211.98: MCT U232 converter detected [ 1323.069666][T16090] mct_u232 ttyUSB0: expected endpoint missing [ 1323.113135][T16090] usb 9-1: USB disconnect, device number 95 [ 1323.137996][T16090] mct_u232 9-1:211.98: device disconnected [ 1323.166256][T25102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5515'. [ 1323.325891][T25104] xt_CT: No such helper "snmp" [ 1323.753906][T25112] pim6reg: entered allmulticast mode [ 1323.852872][T22909] usb 7-1: USB disconnect, device number 78 [ 1323.983859][T25114] syzkaller0: entered promiscuous mode [ 1323.993648][T25114] syzkaller0: entered allmulticast mode [ 1324.079915][T25119] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5520'. [ 1324.267007][T16090] usb 9-1: new full-speed USB device number 96 using dummy_hcd [ 1324.439739][T16090] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1324.466678][T16090] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1324.475800][T16090] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.505665][T16090] usb 9-1: config 0 descriptor?? [ 1324.517499][T25118] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1324.626710][ T5901] usb 6-1: new full-speed USB device number 89 using dummy_hcd [ 1324.790714][ T5901] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.817726][ T5901] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1324.847153][ T5901] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1324.858966][T15900] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1324.867838][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.879522][T15900] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1324.908496][ T5901] usb 6-1: config 0 descriptor?? [ 1324.913994][T15900] usb 10-1: can't read configurations, error -71 [ 1324.928916][ T5901] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1324.935658][ T5901] dvb-usb: bulk message failed: -22 (3/0) [ 1324.964657][T16090] elan 0003:04F3:0755.005D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 1324.987614][ T5901] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1325.004454][ T5901] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1325.046927][ T5901] usb 6-1: media controller created [ 1325.053862][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1325.107156][ T5901] dvb-usb: bulk message failed: -22 (6/0) [ 1325.113026][ T5901] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1325.151882][T25118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1325.163960][ T5901] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input110 [ 1325.191133][T25118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1325.216222][T25118] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5521'. [ 1325.229489][ T5901] dvb-usb: schedule remote query interval to 150 msecs. [ 1325.257345][ T5901] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1325.285964][ T5901] usb 6-1: USB disconnect, device number 89 [ 1325.327882][T25145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1325.419505][T25145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1325.524929][ T5901] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1325.696654][T16090] usb 7-1: new full-speed USB device number 79 using dummy_hcd [ 1326.007935][ T5823] usb 9-1: USB disconnect, device number 96 [ 1326.206806][ T5901] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1326.277006][T16090] usb 7-1: config 0 has no interfaces? [ 1326.386654][ T5901] usb 6-1: Using ep0 maxpacket: 16 [ 1326.401766][ T5901] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.417532][T25160] dlm: no locking on control device [ 1326.422059][ T5901] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1326.437743][ T5901] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1326.454041][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.487742][ T5901] usb 6-1: Product: syz [ 1326.496278][ T5901] usb 6-1: Manufacturer: syz [ 1326.502711][ T5901] usb 6-1: SerialNumber: syz [ 1326.706701][T21401] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 1326.765159][ T5901] usb 6-1: 0:2 : does not exist [ 1326.786062][ T5901] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1326.827756][ T5901] usb 6-1: USB disconnect, device number 90 [ 1326.861171][T16090] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1326.875575][T22271] udevd[22271]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1326.892249][T16090] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.903902][T16090] usb 7-1: Product: syz [ 1326.910552][T16090] usb 7-1: Manufacturer: syz [ 1326.923977][T16090] usb 7-1: SerialNumber: syz [ 1326.937218][T21401] usb 9-1: config 171 has an invalid interface number: 109 but max is 0 [ 1326.955523][T16090] usb 7-1: config 0 descriptor?? [ 1326.965594][T21401] usb 9-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.979999][T21401] usb 9-1: config 171 has no interface number 0 [ 1326.987205][T21401] usb 9-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1327.000473][T21401] usb 9-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 27904, setting to 64 [ 1327.012229][T21401] usb 9-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1327.036413][T21401] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1327.046922][T21401] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.061921][T21401] usb 9-1: Product: syz [ 1327.066132][T21401] usb 9-1: Manufacturer: syz [ 1327.071850][T21401] usb 9-1: SerialNumber: syz [ 1327.087244][T25160] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1327.117394][T25163] tipc: Cannot configure node identity twice [ 1327.356655][T16090] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1327.367817][T25169] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5537'. [ 1327.463906][T21401] ath6kl: Failed to submit usb control message: -71 [ 1327.478682][T21401] ath6kl: unable to send the bmi data to the device: -71 [ 1327.486082][T21401] ath6kl: Unable to send get target info: -71 [ 1327.504150][T21401] ath6kl: Failed to init ath6kl core: -71 [ 1327.515942][T21401] ath6kl_usb 9-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 1327.539547][T16090] usb 2-1: Using ep0 maxpacket: 16 [ 1327.558810][T21401] usb 9-1: USB disconnect, device number 97 [ 1328.076667][T21401] usb 6-1: new full-speed USB device number 91 using dummy_hcd [ 1328.548367][T15900] usb 9-1: new full-speed USB device number 98 using dummy_hcd [ 1328.730082][T15900] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1328.775086][T15900] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1328.805428][T15900] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.825582][T25198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5548'. [ 1328.848143][T15900] usb 9-1: config 0 descriptor?? [ 1328.871709][T25198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5548'. [ 1328.881040][T25187] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1328.996747][ T5901] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 1329.134573][ T5903] usb 7-1: USB disconnect, device number 79 [ 1329.173703][ T5901] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1329.197336][ T5901] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.205506][ T5901] usb 10-1: Product: syz [ 1329.218583][ T5901] usb 10-1: Manufacturer: syz [ 1329.223350][ T5901] usb 10-1: SerialNumber: syz [ 1329.232203][ T5901] usb 10-1: config 0 descriptor?? [ 1329.232333][T25201] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5549'. [ 1329.269794][T24381] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 1329.298638][T24381] hid-generic 0000:0000:0000.005E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1329.337118][T15900] elan 0003:04F3:0755.005F: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 1329.540631][T25187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.557712][T25187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.571302][T25187] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5543'. [ 1329.584033][T25206] netlink: 'syz.9.5547': attribute type 12 has an invalid length. [ 1329.649546][T25207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.671350][T25207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.928931][T21401] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1329.966714][T16090] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1329.992283][T16090] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1330.018008][T16090] usb 2-1: can't read configurations, error -71 [ 1330.101248][T15900] usb 9-1: USB disconnect, device number 98 [ 1330.137097][T21401] usb 7-1: Using ep0 maxpacket: 16 [ 1330.154772][T21401] usb 7-1: config index 0 descriptor too short (expected 4495, got 71) [ 1330.179272][T21401] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1330.200234][T21401] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.216822][T25218] dlm: no locking on control device [ 1330.242894][T21401] usb 7-1: config 0 has no interface number 0 [ 1330.269242][T25219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5552'. [ 1330.273529][T21401] usb 7-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 1330.316938][T21401] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.335291][T21401] usb 7-1: Product: syz [ 1330.347391][T21401] usb 7-1: Manufacturer: syz [ 1330.370420][T21401] usb 7-1: SerialNumber: syz [ 1330.399463][T21401] usb 7-1: config 0 descriptor?? [ 1330.424775][T21401] uvcvideo 7-1:0.105: probe with driver uvcvideo failed with error -22 [ 1330.476762][ T5823] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1330.581772][T25226] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5555'. [ 1330.640505][ T5823] usb 6-1: config 171 has an invalid interface number: 109 but max is 0 [ 1330.651397][ T5823] usb 6-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.665946][ T5823] usb 6-1: config 171 has no interface number 0 [ 1330.673766][ T5823] usb 6-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1330.684715][ T5823] usb 6-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 27904, setting to 64 [ 1330.696351][ T5823] usb 6-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1330.714760][ T5823] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1330.724723][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.733120][ T5823] usb 6-1: Product: syz [ 1330.738855][ T5823] usb 6-1: Manufacturer: syz [ 1330.743636][ T5823] usb 6-1: SerialNumber: syz [ 1330.754850][T25218] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1330.977447][ T5901] usb 10-1: Firmware version (0.0) predates our first public release. [ 1330.986244][ T5903] usb 9-1: new full-speed USB device number 99 using dummy_hcd [ 1330.989555][ T5901] usb 10-1: Please update to version 0.2 or newer [ 1331.000697][ T5823] ath6kl: Failed to submit usb control message: -71 [ 1331.008160][ T5823] ath6kl: unable to send the bmi data to the device: -71 [ 1331.020111][ T5823] ath6kl: Unable to send get target info: -71 [ 1331.041874][ T5823] ath6kl: Failed to init ath6kl core: -71 [ 1331.063664][ T5823] ath6kl_usb 6-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 1331.116183][ T5823] usb 6-1: USB disconnect, device number 92 [ 1331.168896][ T5903] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.179245][ T5903] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1331.189801][ T5903] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1331.205168][ T5903] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.215574][ T5903] usb 9-1: config 0 descriptor?? [ 1331.225896][ T5903] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1331.232680][ T5903] dvb-usb: bulk message failed: -22 (3/0) [ 1331.240713][ T5903] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1331.250087][ T5903] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1331.257745][ T5903] usb 9-1: media controller created [ 1331.264086][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1331.280273][ T5903] dvb-usb: bulk message failed: -22 (6/0) [ 1331.290937][ T5903] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1331.300161][ T5903] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input112 [ 1331.320032][ T5903] dvb-usb: schedule remote query interval to 150 msecs. [ 1331.327214][ T5903] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1331.367136][ T5901] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1331.380579][ T5903] usb 7-1: USB disconnect, device number 80 [ 1331.450150][T15900] usb 9-1: USB disconnect, device number 99 [ 1331.484699][T15900] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1331.517631][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 1331.543007][ T5901] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1331.570098][ T5901] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1331.604824][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1331.622664][ T5901] usb 2-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 1331.640039][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.658846][ T5901] usb 2-1: config 0 descriptor?? [ 1331.805295][ T5823] usb 10-1: USB disconnect, device number 62 [ 1332.100528][ T5901] lenovo 0003:17EF:60B5.0060: hidraw0: USB HID v0.09 Device [HID 17ef:60b5] on usb-dummy_hcd.1-1/input0 [ 1332.386885][T21401] usb 9-1: new full-speed USB device number 100 using dummy_hcd [ 1332.428236][T25253] macvlan1: entered promiscuous mode [ 1332.444763][T25253] ipvlan0: entered promiscuous mode [ 1332.466646][ T5823] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 1332.481268][T25253] ipvlan0: left promiscuous mode [ 1332.527782][T25253] macvlan1: left promiscuous mode [ 1332.572592][T21401] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1332.605704][T21401] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1332.626733][ T5823] usb 10-1: Using ep0 maxpacket: 16 [ 1332.632502][T15900] usb 2-1: USB disconnect, device number 18 [ 1332.633138][T21401] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.666977][T21401] usb 9-1: config 0 descriptor?? [ 1332.677884][T25250] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1332.950288][T25268] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5568'. [ 1333.109770][T21401] elan 0003:04F3:0755.0061: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 1333.207157][T16090] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1333.310185][T25250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.320487][T25250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.332016][T25250] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5563'. [ 1333.342778][T25275] dlm: no locking on control device [ 1333.377359][T16090] usb 6-1: Using ep0 maxpacket: 16 [ 1333.393048][T16090] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1333.407099][T25277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.412667][T16090] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1333.423317][T16090] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1333.428889][T25277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.434069][T16090] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.454165][T16090] usb 6-1: config 0 descriptor?? [ 1333.516000][T15900] usb 9-1: USB disconnect, device number 100 [ 1333.586662][ T5901] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1333.774607][ T5901] usb 2-1: config 171 has an invalid interface number: 109 but max is 0 [ 1333.803768][ T5901] usb 2-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.826259][ T5901] usb 2-1: config 171 has no interface number 0 [ 1333.842977][ T5901] usb 2-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1333.858278][ T5901] usb 2-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 27904, setting to 64 [ 1333.870585][ T5901] usb 2-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1333.900458][ T5901] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1333.913136][T16090] nzxt-smart2 0003:1E71:2009.0062: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 1333.925035][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.933677][ T5901] usb 2-1: Product: syz [ 1333.938375][ T5901] usb 2-1: Manufacturer: syz [ 1333.943043][ T5901] usb 2-1: SerialNumber: syz [ 1333.968858][T25275] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1334.228605][ T5901] ath6kl: Failed to submit usb control message: -71 [ 1334.240769][ T5901] ath6kl: unable to send the bmi data to the device: -71 [ 1334.251542][ T5901] ath6kl: Unable to send get target info: -71 [ 1334.265288][ T5901] ath6kl: Failed to init ath6kl core: -71 [ 1334.299406][ T5901] ath6kl_usb 2-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 1334.362629][ T5901] usb 2-1: USB disconnect, device number 19 [ 1334.762277][T25300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5569'. [ 1334.800000][T25303] netlink: 5 bytes leftover after parsing attributes in process `syz.6.5580'. [ 1334.891013][T25308] syzkaller0: entered promiscuous mode [ 1334.907808][T25308] syzkaller0: entered allmulticast mode [ 1334.998350][ T5823] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1335.038825][ T5823] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1335.054522][ T5823] usb 10-1: can't read configurations, error -71 [ 1335.153444][T25314] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5583'. [ 1335.446584][T24381] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1335.607413][T24381] usb 2-1: Using ep0 maxpacket: 8 [ 1335.624019][T24381] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 1335.645014][T24381] usb 2-1: can't read configurations, error -22 [ 1335.786746][T24381] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1335.938196][T24381] usb 2-1: Using ep0 maxpacket: 8 [ 1335.957675][T24381] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 1335.965644][T24381] usb 2-1: can't read configurations, error -22 [ 1335.993313][ T5903] usb 6-1: USB disconnect, device number 93 [ 1336.004873][T24381] usb usb2-port1: attempt power cycle [ 1336.010823][T25335] dlm: no locking on control device [ 1336.048363][T16090] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1336.216635][T16090] usb 7-1: Using ep0 maxpacket: 32 [ 1336.223376][T16090] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1336.231732][T16090] usb 7-1: config 0 has no interface number 0 [ 1336.238118][T16090] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1336.249685][T16090] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1336.260563][T16090] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.269120][T16090] usb 7-1: Product: syz [ 1336.273301][T16090] usb 7-1: Manufacturer: syz [ 1336.278028][T16090] usb 7-1: SerialNumber: syz [ 1336.284365][T16090] usb 7-1: config 0 descriptor?? [ 1336.296072][T16090] smsc75xx v1.0.0 [ 1336.307289][T22909] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 1336.367566][T24381] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1336.387272][T24381] usb 2-1: Using ep0 maxpacket: 8 [ 1336.394225][T24381] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 1336.402716][T24381] usb 2-1: can't read configurations, error -22 [ 1336.458189][T22909] usb 10-1: config 171 has an invalid interface number: 109 but max is 0 [ 1336.466881][ T5903] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1336.474598][T22909] usb 10-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.488477][T22909] usb 10-1: config 171 has no interface number 0 [ 1336.506094][T22909] usb 10-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1336.522191][T22909] usb 10-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 27904, setting to 64 [ 1336.535364][T22909] usb 10-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1336.552767][T24381] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1336.565022][T22909] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1336.581494][T22909] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.590327][T22909] usb 10-1: Product: syz [ 1336.595062][T24381] usb 2-1: Using ep0 maxpacket: 8 [ 1336.600581][T22909] usb 10-1: Manufacturer: syz [ 1336.605917][T22909] usb 10-1: SerialNumber: syz [ 1336.611505][T25343] syzkaller0: entered promiscuous mode [ 1336.617437][T25343] syzkaller0: entered allmulticast mode [ 1336.623461][T24381] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 1336.635084][T25335] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1336.640513][T24381] usb 2-1: can't read configurations, error -22 [ 1336.665533][T24381] usb usb2-port1: unable to enumerate USB device [ 1336.672353][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 1336.871950][T22909] ath6kl: Failed to submit usb control message: -71 [ 1336.895586][T22909] ath6kl: unable to send the bmi data to the device: -71 [ 1336.905786][T16090] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1336.921081][T22909] ath6kl: Unable to send get target info: -71 [ 1336.955544][T22909] ath6kl: Failed to init ath6kl core: -71 [ 1336.961436][T16090] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1336.972917][T16090] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1337.016427][T22909] ath6kl_usb 10-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 1337.025420][T16090] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1337.035521][T16090] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1337.046451][T16090] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1337.060953][T16090] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -61 [ 1337.075569][T22909] usb 10-1: USB disconnect, device number 65 [ 1337.185119][T20855] usb 7-1: USB disconnect, device number 81 [ 1337.759232][T25357] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5598'. [ 1338.181303][T25365] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5601'. [ 1338.613423][T25378] syzkaller0: entered promiscuous mode [ 1338.626737][T25378] syzkaller0: entered allmulticast mode [ 1338.697335][T16090] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1338.876588][T16090] usb 2-1: Using ep0 maxpacket: 8 [ 1338.958360][T16090] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1338.969148][T16090] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1338.984844][T16090] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1339.000122][T16090] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1339.030779][T16090] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1339.055805][T16090] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.245254][ T5903] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1339.282029][ T5903] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1339.307311][T16090] usb 2-1: GET_CAPABILITIES returned 0 [ 1339.316732][T16090] usbtmc 2-1:16.0: can't read capabilities [ 1339.318167][ T5903] usb 6-1: can't read configurations, error -71 [ 1339.446654][T20855] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 1339.549253][T25376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5604'. [ 1339.630122][T20855] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1339.639229][T20855] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1339.649615][T20855] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1339.659087][T20855] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1339.670359][T20855] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1339.684923][T20855] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1339.753720][T20855] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1339.777099][T20855] usb 10-1: Product: syz [ 1339.799015][T20855] usb 10-1: Manufacturer: syz [ 1339.822396][T25396] dlm: no locking on control device [ 1339.833725][T20855] cdc_wdm 10-1:1.0: skipping garbage [ 1339.865075][T20855] cdc_wdm 10-1:1.0: skipping garbage [ 1339.894658][T20855] cdc_wdm 10-1:1.0: cdc-wdm1: USB WDM device [ 1339.922987][T20855] cdc_wdm 10-1:1.0: Unknown control protocol [ 1340.106740][T24381] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1340.165817][T16090] usb 10-1: USB disconnect, device number 66 [ 1340.289763][T24381] usb 7-1: config 171 has an invalid interface number: 109 but max is 0 [ 1340.306831][T24381] usb 7-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.317267][T24381] usb 7-1: config 171 has no interface number 0 [ 1340.323647][T24381] usb 7-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1340.336158][T24381] usb 7-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 27904, setting to 64 [ 1340.350730][T24381] usb 7-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1340.379164][T24381] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1340.412008][T24381] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.432394][T24381] usb 7-1: Product: syz [ 1340.441279][T24381] usb 7-1: Manufacturer: syz [ 1340.451261][T24381] usb 7-1: SerialNumber: syz [ 1340.472239][T25396] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1340.646578][ T5903] usb 9-1: new high-speed USB device number 101 using dummy_hcd [ 1340.781402][T24381] ath6kl: Failed to submit usb control message: -71 [ 1340.804447][T24381] ath6kl: unable to send the bmi data to the device: -71 [ 1340.811700][ T5903] usb 9-1: Using ep0 maxpacket: 16 [ 1340.829381][ T5903] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1340.841894][T24381] ath6kl: Unable to send get target info: -71 [ 1340.859166][ T5903] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.868560][T24381] ath6kl: Failed to init ath6kl core: -71 [ 1340.905743][ T5903] usb 9-1: Product: syz [ 1340.911085][T24381] ath6kl_usb 7-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 1340.925206][ T5903] usb 9-1: Manufacturer: syz [ 1340.930033][ T5903] usb 9-1: SerialNumber: syz [ 1340.968056][T24381] usb 7-1: USB disconnect, device number 82 [ 1340.980076][ T5903] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1341.008339][ T5903] r8152-cfgselector 9-1: config 0 descriptor?? [ 1341.247481][T25400] QAT: Device 6 not found [ 1341.264708][ T5903] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1341.274339][ T5903] r8152-cfgselector 9-1: bad CDC descriptors [ 1341.477718][ T5903] usb 2-1: USB disconnect, device number 24 [ 1341.600204][T16090] r8152-cfgselector 9-1: USB disconnect, device number 101 [ 1341.631799][T25418] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5617'. [ 1341.756791][T24381] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1341.920715][T24381] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1341.936686][T24381] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.944707][T24381] usb 7-1: Product: syz [ 1341.960615][T24381] usb 7-1: Manufacturer: syz [ 1341.975642][T24381] usb 7-1: SerialNumber: syz [ 1342.407446][T24381] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1342.466593][T24381] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1344.208885][T25451] dlm: no locking on control device [ 1344.344685][T25415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.355194][T25415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.365966][T24381] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 1344.380519][T24381] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1344.392923][T24381] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1344.405104][T24381] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1344.415075][T24381] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1344.426322][T24381] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1344.459617][T24381] usb 7-1: USB disconnect, device number 83 [ 1344.461832][ T5823] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1344.640161][ T5823] usb 2-1: config 171 has an invalid interface number: 109 but max is 0 [ 1344.648936][ T5823] usb 2-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.665130][ T5823] usb 2-1: config 171 has no interface number 0 [ 1344.671659][ T5823] usb 2-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1344.682408][ T5823] usb 2-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 27904, setting to 64 [ 1344.695573][ T5823] usb 2-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1344.731455][ T5823] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1344.753710][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.758418][T25463] input: syz1 as /devices/virtual/input/input115 [ 1344.802388][ T5823] usb 2-1: Product: syz [ 1344.832450][ T5823] usb 2-1: Manufacturer: syz [ 1344.857178][ T5823] usb 2-1: SerialNumber: syz [ 1344.901030][T25451] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1345.071812][T25472] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5631'. [ 1345.161647][T25463] gretap1: entered allmulticast mode [ 1345.385674][T25476] fuse: Bad value for 'rootmode' [ 1345.401649][ T5823] ath6kl: Failed to submit usb control message: -71 [ 1345.426859][ T5823] ath6kl: unable to send the bmi data to the device: -71 [ 1345.440698][ T5823] ath6kl: Unable to send get target info: -71 [ 1345.463154][ T5823] ath6kl: Failed to init ath6kl core: -71 [ 1345.470705][ T5823] ath6kl_usb 2-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 1345.521951][ T5823] usb 2-1: USB disconnect, device number 25 [ 1346.287037][T24451] Bluetooth: hci3: hardware error 0x04 [ 1346.296703][T14101] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1346.396624][T16090] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1346.556561][T16090] usb 2-1: Using ep0 maxpacket: 8 [ 1346.573371][T16090] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1346.592672][T16090] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1346.602626][T16090] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 5152, setting to 1024 [ 1346.614144][T16090] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1346.624436][T16090] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1346.642266][T16090] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=60.23 [ 1346.652667][T16090] usb 2-1: New USB device strings: Mfr=255, Product=246, SerialNumber=0 [ 1346.662036][T16090] usb 2-1: Product: syz [ 1346.666234][T16090] usb 2-1: Manufacturer: syz [ 1346.666668][ T5903] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1346.847228][T25504] syzkaller0: entered promiscuous mode [ 1346.853146][T25504] syzkaller0: entered allmulticast mode [ 1346.878863][ T5903] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1346.885607][T16090] usb 2-1: GET_CAPABILITIES returned 0 [ 1346.894962][T16090] usbtmc 2-1:16.0: can't read capabilities [ 1346.913219][ T5903] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1346.934077][ T5903] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1346.954949][ T5903] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1346.986694][ T5903] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1347.007123][T24381] usb 6-1: new full-speed USB device number 96 using dummy_hcd [ 1347.039285][ T5903] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1347.066847][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1347.085150][ T5903] usb 7-1: Product: syz [ 1347.095269][ T5903] usb 7-1: Manufacturer: syz [ 1347.116529][ T5903] cdc_wdm 7-1:1.0: skipping garbage [ 1347.121880][ T5903] cdc_wdm 7-1:1.0: skipping garbage [ 1347.131788][ T5903] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 1347.137828][ T5903] cdc_wdm 7-1:1.0: Unknown control protocol [ 1347.180240][T24381] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1347.194795][T24381] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1347.206272][T24381] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.228714][T24381] usb 6-1: config 0 descriptor?? [ 1347.240822][T25502] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1347.325921][T15900] usb 7-1: USB disconnect, device number 84 [ 1347.338247][T25513] dlm: no locking on control device [ 1347.517005][ T5903] usb 10-1: new full-speed USB device number 67 using dummy_hcd [ 1347.586641][T16090] usb 9-1: new high-speed USB device number 102 using dummy_hcd [ 1347.660681][T24381] elan 0003:04F3:0755.0063: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1347.699962][ T5903] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1347.708898][ T5903] usb 10-1: not running at top speed; connect to a high speed hub [ 1347.718351][ T5903] usb 10-1: config 2 has an invalid interface number: 212 but max is 1 [ 1347.730540][ T5903] usb 10-1: config 2 has an invalid interface number: 226 but max is 1 [ 1347.739347][ T5903] usb 10-1: config 2 has no interface number 0 [ 1347.740881][T16090] usb 9-1: config 171 has an invalid interface number: 109 but max is 0 [ 1347.745615][ T5903] usb 10-1: config 2 has no interface number 1 [ 1347.760582][ T5903] usb 10-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1347.762264][T16090] usb 9-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.772813][ T5903] usb 10-1: config 2 interface 212 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1347.792473][T16090] usb 9-1: config 171 has no interface number 0 [ 1347.803838][ T5903] usb 10-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1347.807688][T16090] usb 9-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1347.815616][ T5903] usb 10-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 1347.831387][T16090] usb 9-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 27904, setting to 64 [ 1347.837184][ T5903] usb 10-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1347.851221][T16090] usb 9-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1347.871453][ T5903] usb 10-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1347.871487][ T5903] usb 10-1: config 2 interface 212 has no altsetting 0 [ 1347.878334][ T5903] usb 10-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1347.907959][T25502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1347.918494][T25502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1347.925967][ T5903] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.934642][ T5903] usb 10-1: Product: syz [ 1347.940460][ T5903] usb 10-1: Manufacturer: syz [ 1347.945568][ T5903] usb 10-1: SerialNumber: syz [ 1347.950995][T25502] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5641'. [ 1347.958615][T16090] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1347.970541][T16090] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.986405][T16090] usb 9-1: Product: syz [ 1347.991308][T16090] usb 9-1: Manufacturer: syz [ 1347.996451][T16090] usb 9-1: SerialNumber: syz [ 1348.013145][T25513] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1348.041024][T25518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.052235][T25518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.227045][ T5823] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1348.244154][T16090] ath6kl: Failed to submit usb control message: -71 [ 1348.255158][T16090] ath6kl: unable to send the bmi data to the device: -71 [ 1348.263591][T16090] ath6kl: Unable to send get target info: -71 [ 1348.284698][T16090] ath6kl: Failed to init ath6kl core: -71 [ 1348.293687][T16090] ath6kl_usb 9-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 1348.329192][T16090] usb 9-1: USB disconnect, device number 102 [ 1348.337275][T24451] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1348.396572][ T5823] usb 7-1: Using ep0 maxpacket: 16 [ 1348.403672][ T5823] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1348.425792][ T5823] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1348.437657][ T5823] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1348.447607][ T5823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.462239][ T5823] usb 7-1: config 0 descriptor?? [ 1348.504143][T24381] usb 6-1: USB disconnect, device number 96 [ 1348.884446][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1348.884464][ T30] audit: type=1326 audit(1765745097.773:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.6.5646" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 1348.933339][ T30] audit: type=1326 audit(1765745097.813:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.6.5646" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 1348.956336][ T30] audit: type=1326 audit(1765745097.813:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.6.5646" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 1348.986215][ T30] audit: type=1326 audit(1765745097.813:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.6.5646" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 1349.012036][ T30] audit: type=1326 audit(1765745097.813:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.6.5646" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 1349.035406][T24451] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 1349.039721][ T30] audit: type=1326 audit(1765745097.813:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.6.5646" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 1349.071611][ T30] audit: type=1326 audit(1765745097.813:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.6.5646" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 1349.106791][ T30] audit: type=1326 audit(1765745097.813:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.6.5646" exe="/root/syz-executor" sig=0 arch=40000003 syscall=433 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 1349.156060][ T5823] usbhid 7-1:0.0: can't add hid device: -32 [ 1349.166743][ T5823] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 1349.208999][ T30] audit: type=1326 audit(1765745097.813:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.6.5646" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 1349.213917][ T5823] usb 7-1: USB disconnect, device number 85 [ 1349.231872][ T30] audit: type=1326 audit(1765745097.813:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.6.5646" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 1349.248287][ T5901] usb 2-1: USB disconnect, device number 26 [ 1349.704223][T25544] syzkaller0: entered promiscuous mode [ 1349.710558][T25544] syzkaller0: entered allmulticast mode [ 1349.766718][ T5901] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1349.920164][ T5901] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.930797][ T5901] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1349.940661][ T5901] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1349.950493][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.966172][ T5901] usb 2-1: config 0 descriptor?? [ 1350.328184][ T5903] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:2.226/input/input116 [ 1350.374943][ C1] xpad 10-1:2.226: xpad_irq_in - usb_submit_urb failed with result -1 [ 1350.397028][ T5903] usb 10-1: USB disconnect, device number 67 [ 1350.516858][T25560] FAULT_INJECTION: forcing a failure. [ 1350.516858][T25560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1350.558010][T25560] CPU: 1 UID: 0 PID: 25560 Comm: syz.5.5660 Tainted: G L syzkaller #0 PREEMPT(full) [ 1350.558045][T25560] Tainted: [L]=SOFTLOCKUP [ 1350.558053][T25560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1350.558066][T25560] Call Trace: [ 1350.558076][T25560] [ 1350.558086][T25560] dump_stack_lvl+0x189/0x250 [ 1350.558118][T25560] ? __pfx____ratelimit+0x10/0x10 [ 1350.558152][T25560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1350.558177][T25560] ? __pfx__printk+0x10/0x10 [ 1350.558205][T25560] ? __might_fault+0xb0/0x130 [ 1350.558243][T25560] should_fail_ex+0x414/0x560 [ 1350.558276][T25560] _copy_from_user+0x2d/0xb0 [ 1350.558299][T25560] ucma_write+0x158/0x2e0 [ 1350.558323][T25560] ? __pfx_ucma_write+0x10/0x10 [ 1350.558342][T25560] ? security_file_permission+0x75/0x290 [ 1350.558363][T25560] ? rw_verify_area+0x255/0x4d0 [ 1350.558395][T25560] vfs_writev+0x4b6/0x960 [ 1350.558420][T25560] ? vfs_write+0x956/0xb30 [ 1350.558440][T25560] ? __pfx_ucma_write+0x10/0x10 [ 1350.558465][T25560] ? __pfx_vfs_writev+0x10/0x10 [ 1350.558504][T25560] ? __fget_files+0x2a/0x420 [ 1350.558534][T25560] ? __fget_files+0x3a0/0x420 [ 1350.558558][T25560] ? __fget_files+0x2a/0x420 [ 1350.558591][T25560] do_writev+0x14d/0x2d0 [ 1350.558619][T25560] ? __pfx_do_writev+0x10/0x10 [ 1350.558647][T25560] ? __do_fast_syscall_32+0xbe/0x590 [ 1350.558674][T25560] __do_fast_syscall_32+0x1f7/0x590 [ 1350.558697][T25560] ? rcu_is_watching+0x15/0xb0 [ 1350.558721][T25560] ? do_fast_syscall_32+0x34/0x80 [ 1350.558749][T25560] do_fast_syscall_32+0x34/0x80 [ 1350.558772][T25560] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1350.558802][T25560] RIP: 0023:0xf7f87539 [ 1350.558821][T25560] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1350.558840][T25560] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 1350.558864][T25560] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 1350.558879][T25560] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 1350.558892][T25560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1350.558905][T25560] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1350.558919][T25560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1350.558956][T25560] [ 1351.018509][T25571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5663'. [ 1351.186612][T16090] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1351.336898][T16090] usb 7-1: Using ep0 maxpacket: 16 [ 1351.346005][T16090] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1351.360522][T16090] usb 7-1: config 0 has an invalid descriptor of length 226, skipping remainder of the config [ 1351.386262][T16090] usb 7-1: config 0 has no interface number 0 [ 1351.407441][T16090] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1351.420364][T16090] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.440741][T16090] usb 7-1: Product: syz [ 1351.450518][T16090] usb 7-1: Manufacturer: syz [ 1351.460718][T16090] usb 7-1: SerialNumber: syz [ 1351.483908][T16090] usb 7-1: config 0 descriptor?? [ 1352.504000][ T5823] usb 2-1: USB disconnect, device number 27 [ 1352.541584][T25591] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5662'. [ 1352.554726][ T5901] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 1352.649858][T25591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.692528][T25591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.739356][T25599] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5670'. [ 1352.756586][ T5901] usb 10-1: Using ep0 maxpacket: 32 [ 1352.784980][ T5901] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 1352.800590][T25598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5671'. [ 1352.810935][ T5901] usb 10-1: config 0 has no interface number 0 [ 1352.825783][ T5901] usb 10-1: config 0 interface 12 has no altsetting 0 [ 1352.867996][ T5901] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1352.922109][ T5901] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.960429][ T5901] usb 10-1: Product: syz [ 1352.990364][ T5901] usb 10-1: Manufacturer: syz [ 1353.002205][ T5901] usb 10-1: SerialNumber: syz [ 1353.012579][ T5901] usb 10-1: config 0 descriptor?? [ 1353.023389][T25604] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5672'. [ 1353.023390][T25603] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5672'. [ 1353.255581][T25584] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5667'. [ 1353.282771][T25584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.332771][T25584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.575200][T25608] syz.5.5673 (25608): drop_caches: 2 [ 1353.786654][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1353.885738][T16090] uvcvideo 7-1:0.105: probe with driver uvcvideo failed with error -22 [ 1353.920591][T16090] usb 7-1: USB disconnect, device number 86 [ 1353.937617][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1353.962856][ T9] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1353.995524][ T9] usb 2-1: config 0 has no interface number 0 [ 1354.023673][ T9] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1354.062896][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1354.084389][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.103276][ T9] usb 2-1: Product: syz [ 1354.116263][ T9] usb 2-1: Manufacturer: syz [ 1354.129137][ T9] usb 2-1: SerialNumber: syz [ 1354.150568][ T9] usb 2-1: config 0 descriptor?? [ 1354.164862][T25614] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1354.194069][ T5901] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1354.222078][ T5901] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 1354.242635][ T5901] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1354.267843][ T5901] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 1354.308197][ T5901] usb 10-1: USB disconnect, device number 68 [ 1354.390309][T25614] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1354.474838][ T9] asix 2-1:0.188: probe with driver asix failed with error -71 [ 1354.500799][ T9] usb 2-1: USB disconnect, device number 28 [ 1354.788052][T24381] usb 9-1: new high-speed USB device number 103 using dummy_hcd [ 1354.829878][T25637] [ 1354.832239][T25637] ===================================================== [ 1354.839162][T25637] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1354.846640][T25637] syzkaller #0 Tainted: G L [ 1354.852606][T25637] ----------------------------------------------------- [ 1354.859520][T25637] syz.9.5683/25637 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1354.867221][T25637] ffff8880581619f0 (&new->fa_lock){...-}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1354.875911][T25637] [ 1354.875911][T25637] and this task is already holding: [ 1354.883266][T25637] ffff88801b71b028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1354.892996][T25637] which would create a new lock dependency: [ 1354.898870][T25637] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){...-}-{3:3} [ 1354.906951][T25637] [ 1354.906951][T25637] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1354.916385][T25637] (&dev->event_lock#2){..-.}-{3:3} [ 1354.916410][T25637] [ 1354.916410][T25637] ... which became SOFTIRQ-irq-safe at: [ 1354.929304][T25637] lock_acquire+0x117/0x340 [ 1354.933880][T25637] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1354.939149][T25637] input_event+0x76/0xe0 [ 1354.943483][T25637] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 1354.949191][T25637] __usb_hcd_giveback_urb+0x376/0x540 [ 1354.954647][T25637] dummy_timer+0x85f/0x45b0 [ 1354.959238][T25637] __hrtimer_run_queues+0x51c/0xc30 [ 1354.964517][T25637] hrtimer_run_softirq+0x187/0x2b0 [ 1354.969709][T25637] handle_softirqs+0x27d/0x850 [ 1354.974549][T25637] __irq_exit_rcu+0xca/0x1f0 [ 1354.979212][T25637] irq_exit_rcu+0x9/0x30 [ 1354.983527][T25637] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1354.989230][T25637] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1354.995279][T25637] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1355.001069][T25637] dummy_urb_enqueue+0x58a/0x780 [ 1355.006082][T25637] usb_hcd_submit_urb+0x328/0x1b80 [ 1355.011265][T25637] atp_open+0x63/0xc0 [ 1355.015321][T25637] input_open_device+0x1d3/0x390 [ 1355.020346][T25637] mousedev_open_device+0xcc/0x150 [ 1355.025531][T25637] mousedev_open+0x2ef/0x4a0 [ 1355.030195][T25637] chrdev_open+0x4cc/0x5e0 [ 1355.034682][T25637] do_dentry_open+0x7ce/0x1420 [ 1355.039515][T25637] vfs_open+0x3b/0x340 [ 1355.043657][T25637] path_openat+0x340e/0x3dd0 [ 1355.048316][T25637] do_filp_open+0x1fa/0x410 [ 1355.052903][T25637] do_sys_openat2+0x121/0x200 [ 1355.057663][T25637] __x64_sys_openat+0x138/0x170 [ 1355.062610][T25637] do_syscall_64+0xfa/0xf80 [ 1355.067184][T25637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.073147][T25637] [ 1355.073147][T25637] to a SOFTIRQ-irq-unsafe lock: [ 1355.080149][T25637] (tasklist_lock){.+.+}-{3:3} [ 1355.080171][T25637] [ 1355.080171][T25637] ... which became SOFTIRQ-irq-unsafe at: [ 1355.092764][T25637] ... [ 1355.092773][T25637] lock_acquire+0x117/0x340 [ 1355.099907][T25637] _raw_read_lock+0x36/0x50 [ 1355.104485][T25637] __do_wait+0xde/0x740 [ 1355.108711][T25637] do_wait+0x1e8/0x4f0 [ 1355.112857][T25637] kernel_wait+0xab/0x170 [ 1355.117257][T25637] call_usermodehelper_exec_work+0xbe/0x230 [ 1355.123226][T25637] process_scheduled_works+0xad1/0x1770 [ 1355.128842][T25637] worker_thread+0x8a0/0xda0 [ 1355.133502][T25637] kthread+0x711/0x8a0 [ 1355.137646][T25637] ret_from_fork+0x599/0xb30 [ 1355.142306][T25637] ret_from_fork_asm+0x1a/0x30 [ 1355.147144][T25637] [ 1355.147144][T25637] other info that might help us debug this: [ 1355.147144][T25637] [ 1355.157355][T25637] Chain exists of: [ 1355.157355][T25637] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1355.157355][T25637] [ 1355.170898][T25637] Possible interrupt unsafe locking scenario: [ 1355.170898][T25637] [ 1355.179217][T25637] CPU0 CPU1 [ 1355.184564][T25637] ---- ---- [ 1355.189909][T25637] lock(tasklist_lock); [ 1355.194136][T25637] local_irq_disable(); [ 1355.200871][T25637] lock(&dev->event_lock#2); [ 1355.208058][T25637] lock(&client->buffer_lock); [ 1355.215411][T25637] [ 1355.218853][T25637] lock(&dev->event_lock#2); [ 1355.223695][T25637] [ 1355.223695][T25637] *** DEADLOCK *** [ 1355.223695][T25637] [ 1355.231823][T25637] 7 locks held by syz.9.5683/25637: [ 1355.236999][T25637] #0: ffff88823beba118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1355.246116][T25637] #1: ffff88801c7cb230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1355.256192][T25637] #2: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1355.265832][T25637] #3: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1355.275385][T25637] #4: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1355.284502][T25637] #5: ffff88801b71b028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1355.294663][T25637] #6: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1355.303694][T25637] [ 1355.303694][T25637] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1355.314080][T25637] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1355.319713][T25637] IN-SOFTIRQ-W at: [ 1355.323759][T25637] lock_acquire+0x117/0x340 [ 1355.330067][T25637] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1355.337073][T25637] input_event+0x76/0xe0 [ 1355.343131][T25637] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 1355.350571][T25637] __usb_hcd_giveback_urb+0x376/0x540 [ 1355.357760][T25637] dummy_timer+0x85f/0x45b0 [ 1355.364096][T25637] __hrtimer_run_queues+0x51c/0xc30 [ 1355.371103][T25637] hrtimer_run_softirq+0x187/0x2b0 [ 1355.378119][T25637] handle_softirqs+0x27d/0x850 [ 1355.384724][T25637] __irq_exit_rcu+0xca/0x1f0 [ 1355.391127][T25637] irq_exit_rcu+0x9/0x30 [ 1355.397178][T25637] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1355.404616][T25637] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1355.412404][T25637] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1355.419939][T25637] dummy_urb_enqueue+0x58a/0x780 [ 1355.426688][T25637] usb_hcd_submit_urb+0x328/0x1b80 [ 1355.433608][T25637] atp_open+0x63/0xc0 [ 1355.439398][T25637] input_open_device+0x1d3/0x390 [ 1355.446144][T25637] mousedev_open_device+0xcc/0x150 [ 1355.453081][T25637] mousedev_open+0x2ef/0x4a0 [ 1355.459489][T25637] chrdev_open+0x4cc/0x5e0 [ 1355.465716][T25637] do_dentry_open+0x7ce/0x1420 [ 1355.472287][T25637] vfs_open+0x3b/0x340 [ 1355.478165][T25637] path_openat+0x340e/0x3dd0 [ 1355.484571][T25637] do_filp_open+0x1fa/0x410 [ 1355.490880][T25637] do_sys_openat2+0x121/0x200 [ 1355.497371][T25637] __x64_sys_openat+0x138/0x170 [ 1355.504030][T25637] do_syscall_64+0xfa/0xf80 [ 1355.510339][T25637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.518037][T25637] INITIAL USE at: [ 1355.521998][T25637] lock_acquire+0x117/0x340 [ 1355.528219][T25637] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1355.535136][T25637] input_inject_event+0xa5/0x340 [ 1355.541791][T25637] kbd_led_trigger_activate+0xbc/0x100 [ 1355.548971][T25637] led_trigger_set+0x52d/0x950 [ 1355.555450][T25637] led_trigger_set_default+0x260/0x2a0 [ 1355.562626][T25637] led_classdev_register_ext+0x73d/0x960 [ 1355.569980][T25637] input_leds_connect+0x517/0x790 [ 1355.576727][T25637] input_register_device+0xd00/0x1170 [ 1355.583823][T25637] atkbd_connect+0x73b/0xa50 [ 1355.590130][T25637] serio_driver_probe+0x82/0xd0 [ 1355.596706][T25637] really_probe+0x26d/0xad0 [ 1355.602944][T25637] __driver_probe_device+0x18c/0x320 [ 1355.609947][T25637] driver_probe_device+0x4f/0x240 [ 1355.616688][T25637] __driver_attach+0x349/0x650 [ 1355.623170][T25637] bus_for_each_dev+0x233/0x2b0 [ 1355.629737][T25637] serio_handle_event+0x1f9/0x8d0 [ 1355.636478][T25637] process_scheduled_works+0xad1/0x1770 [ 1355.643772][T25637] worker_thread+0x8a0/0xda0 [ 1355.650080][T25637] kthread+0x711/0x8a0 [ 1355.655867][T25637] ret_from_fork+0x599/0xb30 [ 1355.662169][T25637] ret_from_fork_asm+0x1a/0x30 [ 1355.668656][T25637] } [ 1355.671219][T25637] ... key at: [] input_allocate_device.__key.6+0x0/0x20 [ 1355.680310][T25637] -> (&client->buffer_lock){....}-{3:3} { [ 1355.686021][T25637] INITIAL USE at: [ 1355.689891][T25637] lock_acquire+0x117/0x340 [ 1355.695935][T25637] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1355.702679][T25637] evdev_ioctl_handler+0x1969/0x1f10 [ 1355.709512][T25637] __ia32_compat_sys_ioctl+0x543/0x840 [ 1355.716521][T25637] __do_fast_syscall_32+0x1f7/0x590 [ 1355.723280][T25637] do_fast_syscall_32+0x34/0x80 [ 1355.729678][T25637] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1355.737552][T25637] } [ 1355.740031][T25637] ... key at: [] evdev_open.__key.26+0x0/0x20 [ 1355.748160][T25637] ... acquired at: [ 1355.751943][T25637] _raw_spin_lock+0x2e/0x40 [ 1355.756608][T25637] evdev_pass_values+0xb9/0xbd0 [ 1355.761623][T25637] evdev_events+0x1e6/0x340 [ 1355.766276][T25637] input_pass_values+0x288/0x890 [ 1355.771365][T25637] input_event_dispose+0x330/0x6b0 [ 1355.776632][T25637] input_event+0x89/0xe0 [ 1355.781040][T25637] rc_keydown+0x62/0x1e0 [ 1355.785441][T25637] su3000_rc_query+0x17d/0x1f0 [ 1355.790355][T25637] dvb_usb_read_remote_control+0xb4/0x1a0 [ 1355.796231][T25637] process_scheduled_works+0xad1/0x1770 [ 1355.801928][T25637] worker_thread+0x8a0/0xda0 [ 1355.806672][T25637] kthread+0x711/0x8a0 [ 1355.810897][T25637] ret_from_fork+0x599/0xb30 [ 1355.815636][T25637] ret_from_fork_asm+0x1a/0x30 [ 1355.820556][T25637] [ 1355.822863][T25637] [ 1355.822863][T25637] the dependencies between the lock to be acquired [ 1355.822870][T25637] and SOFTIRQ-irq-unsafe lock: [ 1355.836339][T25637] -> (tasklist_lock){.+.+}-{3:3} { [ 1355.841617][T25637] HARDIRQ-ON-R at: [ 1355.845749][T25637] lock_acquire+0x117/0x340 [ 1355.852227][T25637] _raw_read_lock+0x36/0x50 [ 1355.858715][T25637] __do_wait+0xde/0x740 [ 1355.864850][T25637] do_wait+0x1e8/0x4f0 [ 1355.870896][T25637] kernel_wait+0xab/0x170 [ 1355.877208][T25637] call_usermodehelper_exec_work+0xbe/0x230 [ 1355.885083][T25637] process_scheduled_works+0xad1/0x1770 [ 1355.892604][T25637] worker_thread+0x8a0/0xda0 [ 1355.899173][T25637] kthread+0x711/0x8a0 [ 1355.905221][T25637] ret_from_fork+0x599/0xb30 [ 1355.911788][T25637] ret_from_fork_asm+0x1a/0x30 [ 1355.918532][T25637] SOFTIRQ-ON-R at: [ 1355.922663][T25637] lock_acquire+0x117/0x340 [ 1355.929143][T25637] _raw_read_lock+0x36/0x50 [ 1355.935626][T25637] __do_wait+0xde/0x740 [ 1355.941761][T25637] do_wait+0x1e8/0x4f0 [ 1355.947811][T25637] kernel_wait+0xab/0x170 [ 1355.954118][T25637] call_usermodehelper_exec_work+0xbe/0x230 [ 1355.961987][T25637] process_scheduled_works+0xad1/0x1770 [ 1355.969511][T25637] worker_thread+0x8a0/0xda0 [ 1355.976082][T25637] kthread+0x711/0x8a0 [ 1355.982129][T25637] ret_from_fork+0x599/0xb30 [ 1355.988694][T25637] ret_from_fork_asm+0x1a/0x30 [ 1355.995525][T25637] INITIAL USE at: [ 1355.999572][T25637] lock_acquire+0x117/0x340 [ 1356.005964][T25637] _raw_write_lock_irq+0xa2/0xf0 [ 1356.012789][T25637] copy_process+0x2185/0x3950 [ 1356.019358][T25637] kernel_clone+0x21e/0x820 [ 1356.025759][T25637] user_mode_thread+0xdd/0x140 [ 1356.032413][T25637] rest_init+0x23/0x300 [ 1356.038462][T25637] start_kernel+0x3a7/0x400 [ 1356.044860][T25637] x86_64_start_reservations+0x24/0x30 [ 1356.052211][T25637] x86_64_start_kernel+0x143/0x1c0 [ 1356.059215][T25637] common_startup_64+0x13e/0x147 [ 1356.066047][T25637] INITIAL READ USE at: [ 1356.070527][T25637] lock_acquire+0x117/0x340 [ 1356.077353][T25637] _raw_read_lock+0x36/0x50 [ 1356.084187][T25637] __do_wait+0xde/0x740 [ 1356.090669][T25637] do_wait+0x1e8/0x4f0 [ 1356.097070][T25637] kernel_wait+0xab/0x170 [ 1356.103750][T25637] call_usermodehelper_exec_work+0xbe/0x230 [ 1356.111971][T25637] process_scheduled_works+0xad1/0x1770 [ 1356.119840][T25637] worker_thread+0x8a0/0xda0 [ 1356.126754][T25637] kthread+0x711/0x8a0 [ 1356.133152][T25637] ret_from_fork+0x599/0xb30 [ 1356.140068][T25637] ret_from_fork_asm+0x1a/0x30 [ 1356.147159][T25637] } [ 1356.149812][T25637] ... key at: [] tasklist_lock+0x18/0x40 [ 1356.157682][T25637] ... acquired at: [ 1356.161635][T25637] _raw_read_lock+0x36/0x50 [ 1356.166295][T25637] send_sigurg+0x12b/0x420 [ 1356.170868][T25637] sk_send_sigurg+0x6c/0x2e0 [ 1356.175614][T25637] queue_oob+0x420/0x4f0 [ 1356.180005][T25637] unix_stream_sendmsg+0xc32/0xde0 [ 1356.185270][T25637] __sock_sendmsg+0x21c/0x270 [ 1356.190106][T25637] ____sys_sendmsg+0x505/0x820 [ 1356.195024][T25637] ___sys_sendmsg+0x21f/0x2a0 [ 1356.199864][T25637] __sys_sendmsg+0x164/0x220 [ 1356.204603][T25637] __do_fast_syscall_32+0x1f7/0x590 [ 1356.209949][T25637] do_fast_syscall_32+0x34/0x80 [ 1356.214952][T25637] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1356.221432][T25637] [ 1356.223737][T25637] -> (&f_owner->lock){....}-{3:3} { [ 1356.229008][T25637] INITIAL USE at: [ 1356.232964][T25637] lock_acquire+0x117/0x340 [ 1356.239181][T25637] _raw_write_lock_irq+0xa2/0xf0 [ 1356.245834][T25637] __f_setown+0x67/0x370 [ 1356.251793][T25637] generic_setlease+0xe1e/0x1280 [ 1356.258448][T25637] do_fcntl_add_lease+0x34d/0x460 [ 1356.265188][T25637] fcntl_setlease+0x123/0x180 [ 1356.271579][T25637] do_fcntl+0x867/0x1a50 [ 1356.277543][T25637] do_compat_fcntl64+0x477/0x720 [ 1356.284201][T25637] __do_fast_syscall_32+0x1f7/0x590 [ 1356.291113][T25637] do_fast_syscall_32+0x34/0x80 [ 1356.297696][T25637] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1356.305743][T25637] INITIAL READ USE at: [ 1356.310137][T25637] lock_acquire+0x117/0x340 [ 1356.316805][T25637] _raw_read_lock_irqsave+0xaf/0x100 [ 1356.324267][T25637] send_sigio+0x38/0x370 [ 1356.330667][T25637] kill_fasync+0x24d/0x4d0 [ 1356.337247][T25637] lease_break_callback+0x26/0x30 [ 1356.344429][T25637] __break_lease+0x730/0x1620 [ 1356.351260][T25637] do_dentry_open+0x73a/0x1420 [ 1356.358177][T25637] vfs_open+0x3b/0x340 [ 1356.364396][T25637] path_openat+0x340e/0x3dd0 [ 1356.371133][T25637] do_filp_open+0x1fa/0x410 [ 1356.377789][T25637] do_sys_openat2+0x121/0x200 [ 1356.384620][T25637] __ia32_compat_sys_openat+0x131/0x160 [ 1356.392319][T25637] __do_fast_syscall_32+0x1f7/0x590 [ 1356.399670][T25637] do_fast_syscall_32+0x34/0x80 [ 1356.406688][T25637] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1356.415166][T25637] } [ 1356.417731][T25637] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1356.426649][T25637] ... acquired at: [ 1356.430517][T25637] _raw_read_lock_irqsave+0xaf/0x100 [ 1356.435961][T25637] send_sigio+0x38/0x370 [ 1356.440362][T25637] kill_fasync+0x24d/0x4d0 [ 1356.444932][T25637] lease_break_callback+0x26/0x30 [ 1356.450108][T25637] __break_lease+0x730/0x1620 [ 1356.454935][T25637] do_dentry_open+0x73a/0x1420 [ 1356.459851][T25637] vfs_open+0x3b/0x340 [ 1356.464072][T25637] path_openat+0x340e/0x3dd0 [ 1356.468809][T25637] do_filp_open+0x1fa/0x410 [ 1356.473464][T25637] do_sys_openat2+0x121/0x200 [ 1356.478305][T25637] __ia32_compat_sys_openat+0x131/0x160 [ 1356.484006][T25637] __do_fast_syscall_32+0x1f7/0x590 [ 1356.489374][T25637] do_fast_syscall_32+0x34/0x80 [ 1356.494378][T25637] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1356.500856][T25637] [ 1356.503155][T25637] -> (&new->fa_lock){...-}-{3:3} { [ 1356.508258][T25637] IN-SOFTIRQ-R at: [ 1356.512218][T25637] lock_acquire+0x117/0x340 [ 1356.518354][T25637] _raw_read_lock_irqsave+0xaf/0x100 [ 1356.525272][T25637] kill_fasync+0x199/0x4d0 [ 1356.531319][T25637] sock_wake_async+0x137/0x160 [ 1356.537717][T25637] sock_def_readable+0x3c1/0x530 [ 1356.544288][T25637] packet_rcv+0x11e1/0x1730 [ 1356.550421][T25637] dev_queue_xmit_nit+0xa3d/0xad0 [ 1356.557077][T25637] dev_hard_start_xmit+0x1c1/0x800 [ 1356.563822][T25637] __dev_queue_xmit+0x1493/0x3140 [ 1356.570476][T25637] ip6_finish_output2+0xfb3/0x1480 [ 1356.577223][T25637] ip6_output+0x340/0x550 [ 1356.583193][T25637] udp_tunnel6_xmit_skb+0x68d/0xb30 [ 1356.590024][T25637] tipc_udp_xmit+0x4f2/0xb60 [ 1356.596244][T25637] tipc_udp_send_msg+0x27f/0x3f0 [ 1356.602810][T25637] tipc_bearer_xmit_skb+0x2b3/0x400 [ 1356.609644][T25637] tipc_disc_timeout+0x580/0x6d0 [ 1356.616221][T25637] call_timer_fn+0x16e/0x590 [ 1356.622448][T25637] __run_timer_base+0x61a/0x860 [ 1356.628931][T25637] run_timer_softirq+0xb7/0x180 [ 1356.635408][T25637] handle_softirqs+0x27d/0x850 [ 1356.641801][T25637] __irq_exit_rcu+0xca/0x1f0 [ 1356.648022][T25637] irq_exit_rcu+0x9/0x30 [ 1356.653893][T25637] sysvec_apic_timer_interrupt+0x57/0xc0 [ 1356.661154][T25637] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1356.668764][T25637] INITIAL USE at: [ 1356.672637][T25637] lock_acquire+0x117/0x340 [ 1356.678680][T25637] _raw_write_lock_irq+0xa2/0xf0 [ 1356.685158][T25637] fasync_remove_entry+0xf1/0x1c0 [ 1356.691730][T25637] lease_modify+0x1ca/0x3c0 [ 1356.697775][T25637] locks_remove_file+0x4bf/0xea0 [ 1356.704257][T25637] __fput+0x3ab/0xa70 [ 1356.709783][T25637] task_work_run+0x1d4/0x260 [ 1356.715919][T25637] exit_to_user_mode_loop+0xff/0x4f0 [ 1356.722744][T25637] __do_fast_syscall_32+0x3b4/0x590 [ 1356.729486][T25637] do_fast_syscall_32+0x34/0x80 [ 1356.735879][T25637] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1356.743754][T25637] INITIAL READ USE at: [ 1356.748066][T25637] lock_acquire+0x117/0x340 [ 1356.754570][T25637] _raw_read_lock_irqsave+0xaf/0x100 [ 1356.761838][T25637] kill_fasync+0x199/0x4d0 [ 1356.769211][T25637] sock_wake_async+0x137/0x160 [ 1356.775973][T25637] af_alg_wmem_wakeup+0x3c0/0x440 [ 1356.783010][T25637] aead_recvmsg+0x1340/0x13b0 [ 1356.789692][T25637] sock_recvmsg+0x22c/0x270 [ 1356.796185][T25637] sock_read_iter+0x231/0x2f0 [ 1356.802852][T25637] vfs_read+0x55a/0xa30 [ 1356.808990][T25637] ksys_read+0x145/0x250 [ 1356.815213][T25637] __do_fast_syscall_32+0x1f7/0x590 [ 1356.822396][T25637] do_fast_syscall_32+0x34/0x80 [ 1356.829227][T25637] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1356.837534][T25637] } [ 1356.840013][T25637] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1356.848670][T25637] ... acquired at: [ 1356.852455][T25637] _raw_read_lock_irqsave+0xaf/0x100 [ 1356.857898][T25637] kill_fasync+0x199/0x4d0 [ 1356.862476][T25637] evdev_pass_values+0x627/0xbd0 [ 1356.867564][T25637] evdev_events+0x1e6/0x340 [ 1356.872219][T25637] input_pass_values+0x288/0x890 [ 1356.877308][T25637] input_event_dispose+0x330/0x6b0 [ 1356.882574][T25637] input_inject_event+0x1dd/0x340 [ 1356.887755][T25637] evdev_write+0x2fc/0x480 [ 1356.892324][T25637] vfs_write+0x27e/0xb30 [ 1356.896716][T25637] ksys_write+0x145/0x250 [ 1356.901197][T25637] __do_fast_syscall_32+0x1f7/0x590 [ 1356.906550][T25637] do_fast_syscall_32+0x34/0x80 [ 1356.911566][T25637] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1356.918061][T25637] [ 1356.920364][T25637] [ 1356.920364][T25637] stack backtrace: [ 1356.926233][T25637] CPU: 1 UID: 0 PID: 25637 Comm: syz.9.5683 Tainted: G L syzkaller #0 PREEMPT(full) [ 1356.926251][T25637] Tainted: [L]=SOFTLOCKUP [ 1356.926255][T25637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1356.926262][T25637] Call Trace: [ 1356.926270][T25637] [ 1356.926276][T25637] dump_stack_lvl+0x189/0x250 [ 1356.926292][T25637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1356.926304][T25637] ? __pfx__printk+0x10/0x10 [ 1356.926321][T25637] __lock_acquire+0x2a95/0x2cf0 [ 1356.926337][T25637] ? kill_fasync+0x199/0x4d0 [ 1356.926352][T25637] lock_acquire+0x117/0x340 [ 1356.926362][T25637] ? kill_fasync+0x199/0x4d0 [ 1356.926379][T25637] _raw_read_lock_irqsave+0xaf/0x100 [ 1356.926395][T25637] ? kill_fasync+0x199/0x4d0 [ 1356.926409][T25637] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1356.926424][T25637] ? do_raw_spin_lock+0x121/0x290 [ 1356.926440][T25637] kill_fasync+0x199/0x4d0 [ 1356.926454][T25637] ? kill_fasync+0x53/0x4d0 [ 1356.926469][T25637] evdev_pass_values+0x627/0xbd0 [ 1356.926488][T25637] ? evdev_pass_values+0x5c1/0xbd0 [ 1356.926507][T25637] evdev_events+0x1e6/0x340 [ 1356.926523][T25637] ? evdev_events+0x79/0x340 [ 1356.926538][T25637] ? input_pass_values+0x8d/0x890 [ 1356.926553][T25637] input_pass_values+0x288/0x890 [ 1356.926571][T25637] ? input_handle_event+0x70c/0xf30 [ 1356.926594][T25637] input_event_dispose+0x330/0x6b0 [ 1356.926619][T25637] input_inject_event+0x1dd/0x340 [ 1356.926643][T25637] ? input_inject_event+0xb6/0x340 [ 1356.926666][T25637] evdev_write+0x2fc/0x480 [ 1356.926678][T25637] ? __pfx_evdev_write+0x10/0x10 [ 1356.926688][T25637] ? bpf_lsm_file_permission+0x9/0x20 [ 1356.926700][T25637] ? security_file_permission+0x75/0x290 [ 1356.926710][T25637] ? rw_verify_area+0x255/0x4d0 [ 1356.926726][T25637] ? __pfx_evdev_write+0x10/0x10 [ 1356.926736][T25637] vfs_write+0x27e/0xb30 [ 1356.926747][T25637] ? __pfx_vfs_write+0x10/0x10 [ 1356.926757][T25637] ? __fget_files+0x2a/0x420 [ 1356.926770][T25637] ? __fget_files+0x2a/0x420 [ 1356.926781][T25637] ? __fget_files+0x3a0/0x420 [ 1356.926793][T25637] ? __fget_files+0x2a/0x420 [ 1356.926806][T25637] ksys_write+0x145/0x250 [ 1356.926816][T25637] ? __pfx_ksys_write+0x10/0x10 [ 1356.926826][T25637] ? __do_fast_syscall_32+0xbe/0x590 [ 1356.926839][T25637] __do_fast_syscall_32+0x1f7/0x590 [ 1356.926851][T25637] ? rcu_is_watching+0x15/0xb0 [ 1356.926863][T25637] ? do_fast_syscall_32+0x34/0x80 [ 1356.926875][T25637] do_fast_syscall_32+0x34/0x80 [ 1356.926886][T25637] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1356.926899][T25637] RIP: 0023:0xf70ad539 [ 1356.926910][T25637] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1356.926920][T25637] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1356.926932][T25637] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 1356.926940][T25637] RDX: 0000000000000037 RSI: 0000000000000000 RDI: 0000000000000000 [ 1356.926947][T25637] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1356.926953][T25637] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1356.926960][T25637] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1356.926969][T25637] [ 1357.493635][T24381] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.503779][T24381] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1357.512814][T24381] usb 9-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1357.521889][T24381] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.562305][T24381] usb 9-1: config 0 descriptor?? [ 1357.604234][T24381] usb 9-1: can't set config #0, error -71 [ 1357.625321][T24381] usb 9-1: USB disconnect, device number 103 [ 1361.858652][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.865033][ T1302] ieee802154 phy1 wpan1: encryption failed: -22