last executing test programs: 6m59.355099621s ago: executing program 3 (id=1160): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100"], 0x48}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={r2, 0x8ff, 0x30}, &(0x7f0000000080)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) sendfile(r4, r3, 0x0, 0x8) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) syz_usb_connect(0x2, 0xdb8, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x8b, 0x7c, 0x2a, 0x10, 0x3f0, 0x2a76, 0xb8a5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda6, 0x3, 0xb, 0x1, 0x40, 0x51, "", [{{0x9, 0x4, 0x1f, 0xa, 0xc, 0xff, 0x5d, 0x1, 0xfe, [], [{{0x9, 0x5, 0x1, 0xc, 0x10, 0x10, 0x8, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x5}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0xd8}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x9, 0x7, 0x8b}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0xf9, 0x5}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x2, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x1000}, @generic={0x16, 0x1, "205d8a9791ea6dfeeee986d2de2a5f9359dfd036"}]}}, {{0x9, 0x5, 0xe, 0xb, 0x10, 0x1, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0x200}, @generic={0xbe, 0x21, "4ea533a7164bf400b0e0152c6bf8e326a53a3b63fda89061e313a5fa04f87b4540bab80c0308fe75a007f98d79be19317a41add219d1b96e5833ba3d717ed3a46618ceca9ccd0e11920aa98b20b9d6b6fb71e964fa53556de5bb1898dbd63423cc68d0eddd5348f3e32e15cf6d73f24ed539c3e9e522d67bd4fb8587d057c0c2ee7f8955e94c84f75ffa5986be0d3cdfd4d7de33c936b2e948fd95bd572829e40f407697cced09018e218d750558a1799c1c3972ffcb12a0e0b8f75e"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0xbb, 0x1, 0x8, [@generic={0xaf, 0x22, "cee24d22415d0493b92baf3e43e103208780e16d23a667cb9323c7d5565f3ae5b17cf97a13675848bcad260881f93a221269b6f41c7fbfe1022d12161323b64a44fc148594e316d84a29df3258356546dc08aa1c86f6fa78309df5a20a1c28950c4f1610572411378be7ac89d4d731d8de934b6249437d42d6a69763aaa0da8ea6015bfcf989c39112233aecc8a06004c3771cad75fd0ae787735dd6c571a5a53d15f5d48b71f250bed37a9be1"}, @generic={0x4c, 0xc, "6099ff768da228f5b2eaa400d44872f75aa44215821988dc345678d1477222f134a97de2369e28da35946866e7f5a26ce69daf55d8c0e145dfae4b90bc3e93815d52aff583d5fc3c8a07"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x6, 0xfc, 0x3, [@generic={0xde, 0x23, "9c9b3c4b4b9ef7046de733e0f7cccf1e7ae7649a3936731b417fe851301cefdc4c6cc7ccf46b0c8f44f11ca8952f58fb6cdbb00879c08057ab9ad1865b0014c0a719ba53ac2c34ebcf4a2ab75d7e6193d5aa0ba566dea60e5bf9c989bd807e113b62ae3e442d22ebd3035b8ec77fc9e16559a58aeba7a4b71e3ee443e6a0be7c8320b67373aaee8000d794dfa320e6eae70ea644e04b837810ec19b522951f312394e135722b0a2019c2e2cc68e516e93942c64dc88afd2e1af45e105822e1a2354f7639288dabf8060c9bcc836aa22ad0dbc5426171aadb5f903906"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x6}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x3, 0x1, 0x24, [@generic={0x3d, 0xb, "75f990189b664eeb2c56ee637e86c63b23fabaafd9af59d8d718b14a5c51debc594021fc27eba3e19639ef429b388f596412a51ead38b49c32ec2f"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf7, 0x2}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x6, 0x7, 0x8, [@generic={0x2e, 0x16, "bb6236d084e976744a8ac2a968980a16b0eba348e3230bf3bd74af6ffdfb3e33b77c6c323002e4c44b8d0128"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x81, 0x3c, 0x9, [@generic={0x6a, 0xa, "0109cecc7d4172c17f98ff5c4db7921f442576410e680d04f6c12e38877805cb3f4c77ff45f41d6ab0010cce6cd4f17096658d114ae611876a766ec502c7fc68d1a29a3f4be9b0625cee33848204fe400516cfa85e3412cce0384e30370209ce5beeae86e759c077"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x3, 0xfc, 0x3, [@generic={0xbf, 0x7, "43bce3f406a2316c2d744372824b9b613ecc4cfe2e24209aab35a1cd24d6da2cd59f261e8fbc413107e7b91702b67ce28d7c1ebbfccf4a9e825181535dc3dd208e182d4dc2513bd64344a707e49996227a8d2acb6e81cb0c1363cd41ab1c8c9933a5a6de522a3b23f04ccb8bbdb7308491cb76ff267b5fd3991e1e071dc02b0f2f01e063ac216159ab67a6a5a12d021698541190f631fd2c351955106df9a310eb580f5acbaeda3454ea44d21c345fef9eb15aec21a308f2299fc6e4ff"}]}}]}}, {{0x9, 0x4, 0xbc, 0x1b, 0xd, 0xc0, 0x42, 0x8b, 0x9, [], [{{0x9, 0x5, 0x1, 0xd, 0x200, 0x3, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xb, 0xfffd}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x2, 0x80, 0x7f, [@generic={0x33, 0xd, "236b9a90a3b3cb94b01c41767d022d1c4f3ed8b25f603632512db96bd2bc22ef906a1dce1950b54119bbb0afcb62e7ce35"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0xb1, 0x5, 0x6, [@generic={0x7b, 0x22, "d057a7a6d95d1e9935469a39d6db84322697c8872d6fe54176b26e1c731626bdc1a63a1c0f5bfb0e0d27b994efab36c0a2ef7a49136520da56b12fa42c777f90d4ea8c8917b05903b9ce92a6b670bb04c79e142ae7a63c58f4019566c8ae1dbce67b1ea2051f996361a4e65357cd5aa8d8cee93be4bb1020af"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x200, 0x0, 0x2, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x400}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x7, 0x4, 0x5c, [@generic={0x42, 0x2, "457ae4cb8dab75c3b0040633faef3b8f9841eeb4fbebe3e6df8689f73786f4541b89325d3e9fba6e47bec4017a7d27363eba944fc059bd8585f8952af28d20a0"}, @generic={0x6f, 0x3, "8a73f34013c37065a757a790458a650a3249fc7f751b584d6f9e5249ae0e72c6d9c78c809fd99eb9ba6a0a0959c10e8167d391300a589193504ed8d83c3c91312b44b3709c0ee0229ce76ee83ae1f42598e04a4c444d11ef3177885210d0c0f1be397e880212ffd275fbd64cd2"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x40, 0x3, 0xe, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x6}]}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0x6, 0x6, 0xe}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x7, 0x3, 0x8}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x9, 0xb, 0x7, [@generic={0xec, 0x2, "9de9c2c7e26e5fe37075fefb03fac24642cbf8532f85932a6542b8195d2f1530a42d8e34c1a75cd25f4515bafeace34daba8253e9ad4094b06537a0df9b48d891b1b88036ba812448be9433a713705225d6665b5721ea82fe3e26b8e49dde9b73648b6fe201a9480036822947e22c0feb36a840658354af84bedd04dba478bb0bca6ef7dabbb793c4cc1a7335bea6769b12b1a3b51be9272e9dc7a6b46222b2df0488c4cb99f374809c3ab49816b9e8ade4bed282d1f129493f18741e24d6f47961170276b70ef277b722e5cdea0c43ca157d728191ae085f102db1a8776c17c6c3ac007cd97e6746879"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x20, 0x72, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb0, 0xc}]}}, {{0x9, 0x5, 0x6, 0xd47c946474d53c0, 0x3ff, 0x7a, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9c, 0x8000}, @generic={0x5b, 0x30, "4397ba696c01106f3bcf9c2a9342fe368b126a32be2e916dde828af1ac289cf00da5b1601fe50d9b6b90fd98dc5701d92258a2e3586b11c697d93be7654e75605987b4143a4ace297bc48bf4c0fb447c68132aface041a07be"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0xff, 0x0, 0x8, [@generic={0x1d, 0x2, "68866bfdb84267bb49ad3e6d96224b29652a06e6a07633e8aceffa"}]}}, {{0x9, 0x5, 0x6, 0x1c, 0x200, 0x2, 0x7, 0x90, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x7}, @generic={0x101, 0x23, "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"}]}}]}}, {{0x9, 0x4, 0xc9, 0x4, 0xf, 0xb4, 0xa6, 0x44, 0x1c, [@hid_hid={0x9, 0x21, 0x1000, 0x8, 0x1, {0x22, 0xf17}}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "8b"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x4000, 0xc746, 0x6d}, {0x6, 0x24, 0x1a, 0x4a, 0x5}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x8, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x6, 0x4}]}], [{{0x9, 0x5, 0x0, 0x8, 0x8, 0x5, 0x10, 0x7, [@generic={0xbf, 0x24, "ec0c59ba7a89701f4e2bda8db4969272d2b7b6ee6e07ea1dca54d7473023642f422d777d55e38d96bbaba6f0b1698188906ee63bb13f5d52df41941d95fb18f4acb3a6bf48187a172136ecdbf122d990524f93d3c7fbc59e71e80cad90132b54d25c51ddf10d712d036ddbc7b3eeecc29d054de36a4074c3a44b623e08ff1ec5e91c9ba17f63517abdcdcb29f350e49eed2ecbbd18f563b5496a09b517b660e6d413d28856639c1bf99ab934294c6e75c4a662936a1c8f83558fe59ed5"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x6}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x7f, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xff15}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x8, 0x7f, 0x4}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x7f, 0x2, 0x28}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0xb, 0x3, 0xd}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x45, 0x3, 0x4}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0xfa, 0x7, 0x4, [@generic={0xfc, 0xc, "63128043be41ae96ae018fc669b0da85dfef9f2f798fe7dd8a535adab8f4460f8212ee240bb781228c75d2a6498b70cc60b7657e760a65aae7be80836d4f714bbb577080a2a6f4de941970eb0fa5bba9bdd507a490d03cfb8da99ad49f952a13da0f2800831a17e30e412eab37feda257a257a9fb649f44d8ca618c23c584e918128131e0e91d82947cbaa7545fc0e76a9433f2dda2b26219820136f13e645945fbbed2ed5564ce10572b35d9ac045dea8b0cdfdcd5310459b58c649e79d128383e0480c5b09dbff10da8c67973d25706933c019481e3ceee98a0e19d64f434af2f263e5b9a34bcf0dbd9a6624dc50686bfc7415762da1e9aead"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x33, 0xf, 0x8, [@generic={0x2a, 0xf, "8518f84ca001f39f953d42f668085e1499e600a9b767387f4ea4281b7c58481427324327b8b2b054"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0x7, 0xc, 0x34, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0xa}, @generic={0xeb, 0x23, "b7a9359b17cb3eec671e95bfe8a0aa4c0e6f996cdd5fbb4818ba1bbb383cfc78c3b55b8c639b8a777b19285917edbb5d82e1d157f0c1afdd0eb3d3110d53faa8c784fed411e68ddbcce8c9b6242811ff45fad5496c98a73fbb265f63dd45d1294165fa29033213d86e803fc60a415d857de0c04d1d06a572f3209d18b8b0bd0651b07693b0f502abf09da04eb8484abada024f35d4173ea45a71bb3c5824e1e90cd84ea00fa4ddf886e9e9b4c66267d86beedfa1716ddcda0485c93d6c62c1d2b7d6cb2a99b6715e0b5a73771ddff99bbba7cc230ff4d915c2d4ff34771856f096edbdd49b836250d4"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x0, 0xfa, 0x3}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x3, 0x0, 0x7}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x4, 0xb1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x1}]}}, {{0x9, 0x5, 0xd, 0x4, 0x40, 0x2, 0xf, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x8}]}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0xe2, 0x8, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x9}, @generic={0x7f, 0x7, "d9b4dcbe60be29b9f7de271c8b8d505670df8f74ec49efa75f8634b71294a5743839d9529d6dbefc583441ab6667a9664559b9b6305babe3cfb4cc12fb0cc2de3c4e1d666bdc608653121bbb787b535c9d396cb5ba0d09f7a772dc36d2690586827ea686d8c4f06a266e4b0c30aea805c06ed8f5f6b3ee4261cf0a3c7c"}]}}, {{0x9, 0x5, 0xf, 0x12, 0x20, 0x74, 0x6, 0x7}}]}}]}}]}}, &(0x7f0000001500)={0xa, &(0x7f0000001100)={0xa, 0x6, 0x200, 0x81, 0x3, 0x0, 0x40, 0x5}, 0x36, &(0x7f0000001140)={0x5, 0xf, 0x36, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x41, 0x53, 0x3, 0x6, 0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x7, 0x4}, @ssp_cap={0x1c, 0x10, 0xa, 0x10, 0x4, 0x1, 0xf, 0x9, [0xc000, 0xcf, 0x0, 0x3f0f]}]}, 0x9, [{0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x40e}}, {0x85, &(0x7f0000001280)=@string={0x85, 0x3, "0cf969074cbcba69f6f20e1fe260f1aa717945fadae41655a3cf497924a1e937a17481ef9acf915c2867e81e6590b6cbd105cdf731afdf240d6ee6837ae1466a4a4100ae159e88aaa102c758ff47e6a56829f4d3a35357d1d1dffa03e8437c54802d2e5feec19c2497196bbccca225772e37cb75c35f7cc685f5518e6abc3f21720d6c"}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x416}}, {0x90, &(0x7f0000001380)=@string={0x90, 0x3, "b8fe3fce3009188fe093b161d6ef71568a87dffe1be68073b51b5562a129a211dd255b070bb95f46209353335bf03cec568c3385372754bdadff2ba2f538221ba992e0aa4652d9c7a7858f8699ed8bf7d6d8c0d9d65915210bd198407e2d2c59bb36039cf11ea60b5a51d8f1fb28c428e98aa495e4a982501b5e991b3dc2c226f0518109529e49f82321135d3867"}}, {0x62, &(0x7f0000001440)=@string={0x62, 0x3, "5548f9c7eddf2217820c98978b0dc69828c8940b55470cb08404228b1a4ac4d5c9ad3fd46881492a94f1652901b90b5bb5686ff922ce3653a6c33530f53d9994aa8ac3dde0cf5204adecd539dadaf50c6834b7b91e4618839e85b79bf93bc567"}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x2c05}}]}) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000982001f000000fe0000000000000008000f00fd000000", 0x24) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6m56.331532206s ago: executing program 3 (id=1173): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYRESHEX=r0], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, 0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010015be4c385af31d4911"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x40000) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x28048000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffff9c, &(0x7f0000000300), 0x400c01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x3}, r6}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r6, 0x2000007}}, 0x10) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000500000000000900020073797a3000000000100003006269746d61703a706f7274002400078006000540000000000600044000000001080008400000000008000640000003ff05000100070000000500040000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x2000c085}, 0x40) rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, 0x0, 0x0, 0x8) ioctl$SNDCTL_SEQ_SYNC(r8, 0x5101) 6m54.648592579s ago: executing program 3 (id=1179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x40}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x2, 0x408000) write$binfmt_script(r3, &(0x7f0000000300)={'#! ', './file0', [], 0xa, "f8523b7c3281fb10a51af33b50c234c68a82381263fb2c27aa4d24459bf0f6de24b9977e0f049223d4cdf8a740f4e9e4bc0f72315323110f0549aec64ee05deeb440e2197ce2a9e9b938352b2b9633918c090f7fb5f99b0f339b"}, 0x65) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x8, "", [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3f7, 0x0, 0xb4, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x40, 0x21, 0x28, {0x28, 0x3, "1552cb74d97b9b812ac04b61a7494c309a07045bbab5d26eb120057115f906a1d2837b64c82f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000d40)={0x84, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a0000000000159b59f0a5af7d4b57fd"], &(0x7f0000000980)={0x0, 0xa, 0x1, 0x9}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000b00)={0x40, 0xb, 0x2, "edf0"}, &(0x7f0000000b40)={0x40, 0xf, 0x2, 0x800}, &(0x7f0000000b80)={0x40, 0x13, 0x6, @random="4f305b4a44d3"}, &(0x7f0000000bc0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000c00)={0x40, 0x19, 0x2, "2612"}, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x30, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x6}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x5}, {0xfffffffd, 0x6}]}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 6m51.505150191s ago: executing program 3 (id=1192): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/kexec_crash_size', 0x40901, 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="05000000050000000000000000000300030000000000010000000000344a0bdf58c746a7b3d94c4ed2bdb98506dd1e06dc7d8d655425df663b7f598920dbd89646cd6e746c8253aaaace068f33ff73e0f8f6485d39bd9fa957ce8fbe323c24a3a6eb86b679179f98bc8d67fdf6e7a6d436e918d746f1ec53ad2a83cb625c81c7c05e1f19a9b47d41847a64d439d0f80357b9cf3b625a7ab3c2d9a1765bf53c10ef8d1897c1723de63ec0d5b74d9609c6db670a2b3196264a766368a9f98219231882d8a86156323c8d16f60cbc2d678c08412a63e22777f3cad1fbf21071d8151832251b4f9a1f0db528f5d4a03b31936f0b297f410423bf1be5f29e605c38fd8f21973001125689cd664c1e8bb4fb3f0887f978a50dadc45c333e80be1a7cc5ca1cd04a00c53a169fb0e712f35dc9f7e21c30e276cb34492ce3442db93c0b3acb9fa088a8d739fc8f88fce2925404d0ae2cbe1226"], &(0x7f0000001080), 0x1600) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRESHEX=0x0], 0x118) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = epoll_create1(0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = dup3(r7, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x57}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xff5, &(0x7f0000001840)=""/4085}, 0x94) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) r10 = syz_open_pts(r9, 0x0) r11 = dup(r10) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000000c0)=0x3) r12 = ioctl$KVM_CREATE_GUEST_MEMFD(r11, 0xc040aed4, &(0x7f0000000100)={0x8000000400000001, 0x9}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r12, 0x0) r13 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r13, 0x0) preadv(r13, &(0x7f0000001400)=[{0x0, 0x63}], 0x1, 0x7fff, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) timer_create(0x0, 0x0, 0x0) 6m50.398676394s ago: executing program 3 (id=1195): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000c003472d7f8b737c665829b1000000000000000000af00"/60], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 6m50.084216458s ago: executing program 3 (id=1198): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x2d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8004, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) timer_create(0x6, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={&(0x7f00000003c0)="14e2ffc97ca77764ef01ce88cede80cf37f4fadc5b7863b2613c1df41698ec3eb5f5412d20d58191821ed7affebb7c32d72cb2a2297efb1e365173d9a66c", &(0x7f0000000440)="ecd241384cf3bef91b48884994dda853381d7b7ffff7d1b8e3f0ab7125fe2ff7a58f3eec9250165a82eb9fcf5c53852a940f595bed0efd2a8de03b8e71f0c2af186e8b938ff7"}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x242c3) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000000)={0x4, 0x3, 0x2}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={0x0}}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62040200) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x31, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800000000f8ff00000a0000000000000004000400"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 6m49.515314456s ago: executing program 32 (id=1198): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x2d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8004, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) timer_create(0x6, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={&(0x7f00000003c0)="14e2ffc97ca77764ef01ce88cede80cf37f4fadc5b7863b2613c1df41698ec3eb5f5412d20d58191821ed7affebb7c32d72cb2a2297efb1e365173d9a66c", &(0x7f0000000440)="ecd241384cf3bef91b48884994dda853381d7b7ffff7d1b8e3f0ab7125fe2ff7a58f3eec9250165a82eb9fcf5c53852a940f595bed0efd2a8de03b8e71f0c2af186e8b938ff7"}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x242c3) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000000)={0x4, 0x3, 0x2}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={0x0}}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62040200) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x31, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800000000f8ff00000a0000000000000004000400"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 7.558056961s ago: executing program 4 (id=3431): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040c215042200000000000109022400010000000009040000020304000009210000000122050009058103"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4d, 0x0, &(0x7f00000000c0)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000100)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) file_setattr(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x180, 0xfffffffc, 0x81, 0xfffffffc, 0x1010400}, 0x18, 0x1000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0xa, &(0x7f0000000000)=0x2, 0x4) sendto$packet(r0, &(0x7f0000000000)="114353012008ba00000037510800", 0xe, 0x4008015, &(0x7f00000000c0)={0x11, 0xe5, r2, 0x1, 0x7}, 0x14) 7.098420416s ago: executing program 1 (id=3433): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) sendmmsg$sock(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)=@in={0x2, 0x4e24, @broadcast}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[@txtime={{0x14, 0x1, 0x3d, 0x21}}, @txtime={{0x14, 0x1, 0x3d, 0x9}}, @mark={{0x10, 0x1, 0x24, 0x7}}], 0x38}}], 0x1, 0x200088d0) 6.807765765s ago: executing program 1 (id=3434): timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200), 0x0, r0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000ec0)={0x18, 0x0, {0x1, @random="34c2f584311b", 'vxcan1\x00'}}, 0x1e) syz_usb_connect$uac3(0x3, 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000040f80600b040000102030109026e000301ffc010080b0002010130070904000000010130000a2401100a000700000009040100000102300009040101010102300009050109200040d4040a252500000000010100090402000001023000090402010123023000090582091002fa0a020a252500040000050900"], 0x0) r2 = openat$vim2m(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000200)={0x1, 0x2, 0x10, "b6847e31a3cf2a82e7ffb5ec50e97eb9648b9f4452ab62d541e0579ca2ddbe00", 0x38414761}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x58, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x3, 0x2, 0xffffffff, 0xe661, 0x4, 0x3, 0x3, 0x8, 0x4c74, 0x9, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x80000008, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fff, 0x7b, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0x312, 0x74, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x403, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfff, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0x4, 0x48c93690, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7ff7, 0x0, 0x1, 0x2, 0xd, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x20000009, 0x4, 0x6d01, 0x4, 0x38, 0x800003, 0x200, 0x1000, 0x3, 0x5, 0x87c, 0x1002, 0x8, 0x7, 0x953a, 0x5, 0x7f, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a3ed, 0x4, 0x25], [0x6, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x4, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x2, 0x0, 0x2, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x6, 0x400, 0x10000, 0x3, 0xfffff801, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0xa26, 0x5, 0x7, 0x28, 0x30b1d693, 0x1000, 0xf43, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) connect$unix(r3, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0x541b, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400", @ANYRES16=0x0, @ANYBLOB="07000300000000"], 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x80000074}]}) r8 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r8, 0x0) r9 = socket(0x1e, 0x4, 0x20000000) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r9, &(0x7f0000000640)={&(0x7f0000000300)=@name={0x1e, 0x2, 0x1, {{}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xc0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000040)) 5.883137215s ago: executing program 2 (id=3438): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x0, 0x2000000, 0x0}) 5.845195111s ago: executing program 4 (id=3439): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519dc00fb1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x12) ppoll(&(0x7f0000000280)=[{r2}], 0x1, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000002000)={0x18, 0x1, 0x0, {0x3}}, 0x18) 5.279681223s ago: executing program 0 (id=3441): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x5, &(0x7f0000000000)) r0 = openat$vim2m(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000080)={0x1, @sliced={0x313f, [0x5, 0x9, 0xff, 0xffff, 0x1, 0x2, 0x2, 0x2, 0x0, 0x6, 0x0, 0xfff8, 0x1ff, 0x5, 0x0, 0xf5, 0x8, 0x3ff, 0xc000, 0x6c7e, 0x9, 0x0, 0xcfae, 0x8, 0x10, 0x8001, 0x7, 0x2, 0xc5, 0x3, 0x6, 0xa, 0xc93, 0x1, 0x4, 0x7ff, 0x4, 0x10, 0x2, 0xd95, 0x8001, 0x6, 0x9, 0x6, 0x7f, 0x9, 0xb, 0x9], 0x4}}) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) (async) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000240)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r5 = openat$pfkey(0xffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x5c}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x10}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x12b, 0x11}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x54}, 0x1, 0x0, 0x0, 0x200048c5}, 0x20000800) (async) sendmsg$can_j1939(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xff}, 0x18, &(0x7f0000000500)={&(0x7f0000000480)="31f01e82fd03d39bc3e68762b8f55df6352debde69df57443ea945c1e2908818492f548139b279271dc5ae527760956ce7f76790085fa9f1cf31397b3c34f06d9c0f7b9b36bb723d4a5ee0302c81fc9754d3fa0798d0d391e472ba09db", 0x5d}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) fstat(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x5, &(0x7f0000000680)=[0xee01, r6, 0xffffffffffffffff, 0xffffffffffffffff, r7]) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x0, 0x2, 0x1010, r5, 0x0) openat$kvm(0xffffff9c, &(0x7f00000006c0), 0x105080, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x101, 0x8, &(0x7f0000000700)) (async) execve(&(0x7f0000000740)='./file0\x00', &(0x7f00000007c0)={[&(0x7f0000000780)='}([!)\'\xd5.:@!,\x00']}, &(0x7f0000000a00)={[&(0x7f0000000800)='nl80211\x00', &(0x7f0000000840)='\x00', &(0x7f0000000880)='!\'\\:,\x00', &(0x7f00000008c0)='\x00', &(0x7f0000000900)='/dev/kvm\x00', &(0x7f0000000940)='$\x00', &(0x7f0000000980)='nl80211\x00', &(0x7f00000009c0)='#\x00']}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r5) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000b40)={'syztnl0\x00', &(0x7f0000000ac0)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x6, 0x3, 0x17, @remote, @dev={0xfe, 0x80, '\x00', 0x23}, 0x1, 0x8000, 0x89, 0x2000000}}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000c80)={'ip_vti0\x00', &(0x7f0000000bc0)={'erspan0\x00', 0x0, 0xdca998e642da1b31, 0x1, 0xa, 0x7, {{0x24, 0x4, 0x2, 0x19, 0x90, 0x65, 0x0, 0x5, 0x29, 0x0, @loopback, @loopback, {[@rr={0x7, 0xb, 0xe4, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x7, 0x9, "408400a9f3a3b5"}, @lsrr={0x83, 0x1b, 0xe2, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @broadcast, @empty, @broadcast]}, @generic={0x94, 0x10, "3680373b87e4bc10d08cd0bda449"}, @lsrr={0x83, 0x1f, 0xed, [@private=0xa010101, @remote, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @broadcast, @broadcast]}, @lsrr={0x83, 0xb, 0xca, [@broadcast, @remote]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0xdc, [@dev={0xac, 0x14, 0x14, 0x18}, @local, @private=0xa010101]}]}}}}}) (async) getpeername$packet(r5, &(0x7f0000000cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000d00)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000d40)={'batadv_slave_1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000e40)={'syztnl1\x00', &(0x7f0000000d80)={'erspan0\x00', 0x0, 0x7, 0x10, 0xfffffffd, 0x2, {{0x24, 0x4, 0x3, 0x0, 0x90, 0x68, 0x0, 0x8, 0x4, 0x0, @empty, @remote, {[@ssrr={0x89, 0x13, 0x73, [@multicast1, @dev={0xac, 0x14, 0x14, 0x42}, @local, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x44, 0xfb, 0x1, 0x6, [{@rand_addr=0x64010100, 0x1c0000}, {@remote, 0xa1}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x5}, {@private=0xa010100, 0x1dc6}, {@multicast2, 0xfffffff9}, {@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x5}, {@private=0xa010101, 0x3ff}]}, @lsrr={0x83, 0xf, 0x26, [@rand_addr=0x64010100, @broadcast, @multicast2]}, @rr={0x7, 0x13, 0x78, [@private=0xa010100, @remote, @broadcast, @multicast1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000e80)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000f80)={'syztnl0\x00', &(0x7f0000000f00)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0xff, 0x7, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x40, 0xffffffff, 0x1}}) getsockname$packet(r5, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001000)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001040)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000001200)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001080)={0x130, r8, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x2}, 0x801) 5.23228648s ago: executing program 0 (id=3442): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x8}, 0x0) prlimit64(r0, 0xa, &(0x7f0000000040)={0xfffffffc, 0x101}, 0x0) epoll_create(0x401) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x3ff) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) 5.144490912s ago: executing program 0 (id=3443): socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_usb_connect(0x2, 0x43, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a3233910eba658744d2d010203010902310001080010000904df0003080662ff09250c0220000606030905071000020102070424"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x38044153}, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5d3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x400}, @CTA_TUPLE_ORIG={0x9c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x8, 0x2, @empty}}}]}, @CTA_LABELS={0x4}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}, @CTA_LABELS_MASK={0x18, 0x17, [0x3, 0x2, 0x671b, 0xffff, 0x7]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040400) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x400000000010, 0x3, 0x0) unshare(0x20000400) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) socket(0x27, 0xa, 0x8) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x80000, {0x7, 0x0, 0x0, r3, 0x80, 0x72}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) 5.052478747s ago: executing program 1 (id=3444): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) fsync(r0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$sock_buf(r2, 0x1, 0x6b4e1c1017bef5ac, &(0x7f0000000380)=""/226, &(0x7f0000000500)=0xe2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = socket(0x2b, 0x1, 0x0) syz_io_uring_setup(0x2993, &(0x7f0000000480)={0x0, 0xfad6, 0x20000, 0x3, 0x320}, 0x0, &(0x7f0000000100), &(0x7f0000000000)) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00", 0x21}], 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES8=r6], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000c4bb082ea960c46891a576b8e03946295b4ef25929526ccf5dce0bb54c528e933d6a3af047892e9e93982279f1f643f006ad2a7793c8cb845ec63442f8bac967a57cbf94e6cb9c7f78fe72714dfb8437cab085ed913d6d687d2f2cbaa5022ef72ae1a0ffd94cc5f4d2a7694b73236847ac61a2a93ef20b2b8169ee888296dc3e6d36e1bb905d2b9934f65fd0edab31531464728878ac9cc8c1d0133e9609653e4e6b5700"/231, @ANYRES32, @ANYBLOB="0000000000000000b7080000b7ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000851000000200000085100000060000008520000003000000bf98000000000000b5080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbb0900000086dd6003000000182c00fe8000000000000000bbfe8000"/47], 0x0) r8 = syz_open_procfs(0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r8, 0x5646, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.862415905s ago: executing program 2 (id=3445): r0 = socket$can_bcm(0x1d, 0x2, 0x2) dup2(r0, r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000041000701feffffff00000000017c0000040042c01400018010000400cab1893a20b8d2a93521800a0c00c4211f675d028008000400e0000002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r7, 0x29, 0x49, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000093, 0x0, 0x1}]}) ioprio_set$pid(0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0xe2000, 0x0) preadv2(r9, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1f) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, &(0x7f0000000740)={0x10, 0x0, 0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB="05000000020801000000000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000800d00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x80}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) mknodat$loop(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x4498, 0x1) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0xff}, 0x7}, 0x1c) 4.776108214s ago: executing program 4 (id=3446): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, 0x0, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000300)={0x28, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, 0x0, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, 0x0, 0x3, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000600000002000000ffff000005"], 0x48) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x98000, 0x0) fcntl$notify(r3, 0x402, 0x17) r4 = syz_open_procfs(0x0, &(0x7f0000005200)='net/if_inet6\x00') read$FUSE(r4, &(0x7f00000004c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000300000000000000004000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000a3f06b4951b3e6b1be34495fe0d2790f1351a59090ad4def707b68a7a0d850df43ba8122d56a55df180acdb184932615217eee0999ad39cdc3062ac085054efd542440943fb7ac89d4459d9d8a32eb7c3a878198e22c19c7aba5bc779bfeaaec03f03c2a4e10cabd11d2fa1f76cfb04b4b399e25b3e28979f9becf37f160ebe8a79998"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0x1103, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={&(0x7f0000000180)="3dce2f262acad284329299cf64b06727f7ddc9f27fc5c7c30a969351a67c28c4b632c022ab480cf4bc8a9688b3e4a4e6308aa4d6732dd830831b4710afe4e98613", &(0x7f0000000200)=""/123, &(0x7f0000000780)="b79cd6bf62fdecc01b110dcbbd136ff06c55c3f277eb12a92068da71290e081adf2b2ee21a02cfd5d867dd2f1aabd42f0ae3c79eeb0a33bb77cafc09436feaafd22f8cca801a095808377435fc3a415c9c32b5e89fafaa567b59aa8b33c942b728a813456df179b2b7e47ecc8946eb14346c46e4825c5ffc20586302effcc73afea4536b6f7a137e", &(0x7f0000000980)="bd0ded6fc3351a667bd314de87c35b68e55e37c4e6edfa895a8e3fe49c06b8a75dbd533a7b1bb71d193edbaead4b5cd0efa1152c852782f12e106073daaafc64c9751d830a42fe1bec0baf8b2a56a3e92b8d861737ef22c326985a9ae4ac564f60bc39eb852f40c26c8bee0383f39378704eef8c82215b624367563b5462a78598f8cfb70ef9170d26a785826a5cb37fae2c8945a34b34debc6b59be3dd0c9caa8", 0x5, r2}, 0x38) openat$userio(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c61e000000000000000100000000e01f00000000000000ff0200000000000000000000000000010100c204"], 0x0) 4.444473415s ago: executing program 4 (id=3448): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100"], 0x48}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={r2, 0x8ff, 0x30}, &(0x7f0000000080)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) sendfile(r4, r3, 0x0, 0x8) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) syz_usb_connect(0x2, 0xccd, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x8b, 0x7c, 0x2a, 0x10, 0x3f0, 0x2a76, 0xb8a5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcbb, 0x3, 0xb, 0x1, 0x40, 0x51, "", [{{0x9, 0x4, 0x1f, 0xa, 0xb, 0xff, 0x5d, 0x1, 0xfe, [], [{{0x9, 0x5, 0x1, 0xc, 0x10, 0x10, 0x8, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x5}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0xd8}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x9, 0x7, 0x8b}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0xf9, 0x5}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x2, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x1000}, @generic={0x16, 0x1, "205d8a9791ea6dfeeee986d2de2a5f9359dfd036"}]}}, {{0x9, 0x5, 0xe, 0xb, 0x10, 0x1, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0x200}, @generic={0xbe, 0x21, "4ea533a7164bf400b0e0152c6bf8e326a53a3b63fda89061e313a5fa04f87b4540bab80c0308fe75a007f98d79be19317a41add219d1b96e5833ba3d717ed3a46618ceca9ccd0e11920aa98b20b9d6b6fb71e964fa53556de5bb1898dbd63423cc68d0eddd5348f3e32e15cf6d73f24ed539c3e9e522d67bd4fb8587d057c0c2ee7f8955e94c84f75ffa5986be0d3cdfd4d7de33c936b2e948fd95bd572829e40f407697cced09018e218d750558a1799c1c3972ffcb12a0e0b8f75e"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0xbb, 0x1, 0x8, [@generic={0xaf, 0x22, "cee24d22415d0493b92baf3e43e103208780e16d23a667cb9323c7d5565f3ae5b17cf97a13675848bcad260881f93a221269b6f41c7fbfe1022d12161323b64a44fc148594e316d84a29df3258356546dc08aa1c86f6fa78309df5a20a1c28950c4f1610572411378be7ac89d4d731d8de934b6249437d42d6a69763aaa0da8ea6015bfcf989c39112233aecc8a06004c3771cad75fd0ae787735dd6c571a5a53d15f5d48b71f250bed37a9be1"}, @generic={0x4c, 0xc, "6099ff768da228f5b2eaa400d44872f75aa44215821988dc345678d1477222f134a97de2369e28da35946866e7f5a26ce69daf55d8c0e145dfae4b90bc3e93815d52aff583d5fc3c8a07"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x3, 0x1, 0x24, [@generic={0x3d, 0xb, "75f990189b664eeb2c56ee637e86c63b23fabaafd9af59d8d718b14a5c51debc594021fc27eba3e19639ef429b388f596412a51ead38b49c32ec2f"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf7, 0x2}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x6, 0x7, 0x8, [@generic={0x2e, 0x16, "bb6236d084e976744a8ac2a968980a16b0eba348e3230bf3bd74af6ffdfb3e33b77c6c323002e4c44b8d0128"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x81, 0x3c, 0x9, [@generic={0x6a, 0xa, "0109cecc7d4172c17f98ff5c4db7921f442576410e680d04f6c12e38877805cb3f4c77ff45f41d6ab0010cce6cd4f17096658d114ae611876a766ec502c7fc68d1a29a3f4be9b0625cee33848204fe400516cfa85e3412cce0384e30370209ce5beeae86e759c077"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x3, 0xfc, 0x3, [@generic={0xc2, 0x7, "43bce3f406a2316c2d744372824b9b613ecc4cfe2e24209aab35a1cd24d6da2cd59f261e8fbc413107e7b91702b67ce28d7c1ebbfccf4a9e825181535dc3dd208e182d4dc2513bd64344a707e49996227a8d2acb6e81cb0c1363cd41ab1c8c9933a5a6de522a3b23f04ccb8bbdb7308491cb76ff267b5fd3991e1e071dc02b0f2f01e063ac216159ab67a6a5a12d021698541190f631fd2c351955106df9a310eb580f5acbaeda3454ea44d21c345fef9eb15aec21a308f2299fc6e4ff2b55a7"}]}}]}}, {{0x9, 0x4, 0xbc, 0x1b, 0xd, 0xc0, 0x42, 0x8b, 0x9, [], [{{0x9, 0x5, 0x1, 0xd, 0x200, 0x3, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xb, 0xfffd}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x2, 0x80, 0x7f, [@generic={0x33, 0xd, "236b9a90a3b3cb94b01c41767d022d1c4f3ed8b25f603632512db96bd2bc22ef906a1dce1950b54119bbb0afcb62e7ce35"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0xb1, 0x5, 0x6, [@generic={0x7b, 0x22, "d057a7a6d95d1e9935469a39d6db84322697c8872d6fe54176b26e1c731626bdc1a63a1c0f5bfb0e0d27b994efab36c0a2ef7a49136520da56b12fa42c777f90d4ea8c8917b05903b9ce92a6b670bb04c79e142ae7a63c58f4019566c8ae1dbce67b1ea2051f996361a4e65357cd5aa8d8cee93be4bb1020af"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x200, 0x0, 0x2, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x400}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x7, 0x4, 0x5c, [@generic={0x42, 0x2, "457ae4cb8dab75c3b0040633faef3b8f9841eeb4fbebe3e6df8689f73786f4541b89325d3e9fba6e47bec4017a7d27363eba944fc059bd8585f8952af28d20a0"}, @generic={0x6f, 0x3, "8a73f34013c37065a757a790458a650a3249fc7f751b584d6f9e5249ae0e72c6d9c78c809fd99eb9ba6a0a0959c10e8167d391300a589193504ed8d83c3c91312b44b3709c0ee0229ce76ee83ae1f42598e04a4c444d11ef3177885210d0c0f1be397e880212ffd275fbd64cd2"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x40, 0x3, 0xe, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x6}]}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0x6, 0x6, 0xe}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x7, 0x3, 0x8}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x9, 0xb, 0x7, [@generic={0xec, 0x2, "9de9c2c7e26e5fe37075fefb03fac24642cbf8532f85932a6542b8195d2f1530a42d8e34c1a75cd25f4515bafeace34daba8253e9ad4094b06537a0df9b48d891b1b88036ba812448be9433a713705225d6665b5721ea82fe3e26b8e49dde9b73648b6fe201a9480036822947e22c0feb36a840658354af84bedd04dba478bb0bca6ef7dabbb793c4cc1a7335bea6769b12b1a3b51be9272e9dc7a6b46222b2df0488c4cb99f374809c3ab49816b9e8ade4bed282d1f129493f18741e24d6f47961170276b70ef277b722e5cdea0c43ca157d728191ae085f102db1a8776c17c6c3ac007cd97e6746879"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x20, 0x72, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb0, 0xc}]}}, {{0x9, 0x5, 0x6, 0xd47c946474d53c0, 0x3ff, 0x7a, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9c, 0x8000}, @generic={0x5b, 0x30, "4397ba696c01106f3bcf9c2a9342fe368b126a32be2e916dde828af1ac289cf00da5b1601fe50d9b6b90fd98dc5701d92258a2e3586b11c697d93be7654e75605987b4143a4ace297bc48bf4c0fb447c68132aface041a07be"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0xff, 0x0, 0x8, [@generic={0x1d, 0x2, "68866bfdb84267bb49ad3e6d96224b29652a06e6a07633e8aceffa"}]}}, {{0x9, 0x5, 0x6, 0x1c, 0x200, 0x2, 0x7, 0x90, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x7}, @generic={0x101, 0x23, "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"}]}}]}}, {{0x9, 0x4, 0xc9, 0x4, 0xf, 0xb4, 0xa6, 0x44, 0x1c, [@hid_hid={0x9, 0x21, 0x1000, 0x8, 0x1, {0x22, 0xf17}}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "8b"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x4000, 0xc746, 0x6d}, {0x6, 0x24, 0x1a, 0x4a, 0x5}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x8, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x6, 0x4}]}], [{{0x9, 0x5, 0x0, 0x8, 0x8, 0x5, 0x10, 0x7, [@generic={0xbf, 0x24, "ec0c59ba7a89701f4e2bda8db4969272d2b7b6ee6e07ea1dca54d7473023642f422d777d55e38d96bbaba6f0b1698188906ee63bb13f5d52df41941d95fb18f4acb3a6bf48187a172136ecdbf122d990524f93d3c7fbc59e71e80cad90132b54d25c51ddf10d712d036ddbc7b3eeecc29d054de36a4074c3a44b623e08ff1ec5e91c9ba17f63517abdcdcb29f350e49eed2ecbbd18f563b5496a09b517b660e6d413d28856639c1bf99ab934294c6e75c4a662936a1c8f83558fe59ed5"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x6}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x7f, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xff15}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x8, 0x7f, 0x4}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x7f, 0x2, 0x28}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0xb, 0x3, 0xd}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x45, 0x3, 0x4}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0xfa, 0x7, 0x4, [@generic={0xfc, 0xc, "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"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x33, 0xf, 0x8, [@generic={0x2a, 0xf, "8518f84ca001f39f953d42f668085e1499e600a9b767387f4ea4281b7c58481427324327b8b2b054"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0x7, 0xc, 0x34, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0xa}, @generic={0xeb, 0x23, "b7a9359b17cb3eec671e95bfe8a0aa4c0e6f996cdd5fbb4818ba1bbb383cfc78c3b55b8c639b8a777b19285917edbb5d82e1d157f0c1afdd0eb3d3110d53faa8c784fed411e68ddbcce8c9b6242811ff45fad5496c98a73fbb265f63dd45d1294165fa29033213d86e803fc60a415d857de0c04d1d06a572f3209d18b8b0bd0651b07693b0f502abf09da04eb8484abada024f35d4173ea45a71bb3c5824e1e90cd84ea00fa4ddf886e9e9b4c66267d86beedfa1716ddcda0485c93d6c62c1d2b7d6cb2a99b6715e0b5a73771ddff99bbba7cc230ff4d915c2d4ff34771856f096edbdd49b836250d4"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x0, 0xfa, 0x3}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x3, 0x0, 0x7}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x4, 0xb1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x1}]}}, {{0x9, 0x5, 0xd, 0x4, 0x40, 0x2, 0xf, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x8}]}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0xe2, 0x8, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x9}, @generic={0x7f, 0x7, "d9b4dcbe60be29b9f7de271c8b8d505670df8f74ec49efa75f8634b71294a5743839d9529d6dbefc583441ab6667a9664559b9b6305babe3cfb4cc12fb0cc2de3c4e1d666bdc608653121bbb787b535c9d396cb5ba0d09f7a772dc36d2690586827ea686d8c4f06a266e4b0c30aea805c06ed8f5f6b3ee4261cf0a3c7c"}]}}, {{0x9, 0x5, 0xf, 0x12, 0x20, 0x74, 0x6, 0x7}}]}}]}}]}}, &(0x7f0000001500)={0xa, &(0x7f0000001100)={0xa, 0x6, 0x200, 0x81, 0x3, 0x0, 0x40, 0x5}, 0x36, &(0x7f0000001140)={0x5, 0xf, 0x36, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x41, 0x53, 0x3, 0x6, 0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x7, 0x4}, @ssp_cap={0x1c, 0x10, 0xa, 0x10, 0x4, 0x1, 0xf, 0x9, [0xc000, 0xcf, 0x0, 0x3f0f]}]}, 0x9, [{0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x40e}}, {0x85, &(0x7f0000001280)=@string={0x85, 0x3, "0cf969074cbcba69f6f20e1fe260f1aa717945fadae41655a3cf497924a1e937a17481ef9acf915c2867e81e6590b6cbd105cdf731afdf240d6ee6837ae1466a4a4100ae159e88aaa102c758ff47e6a56829f4d3a35357d1d1dffa03e8437c54802d2e5feec19c2497196bbccca225772e37cb75c35f7cc685f5518e6abc3f21720d6c"}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x416}}, {0x90, &(0x7f0000001380)=@string={0x90, 0x3, "b8fe3fce3009188fe093b161d6ef71568a87dffe1be68073b51b5562a129a211dd255b070bb95f46209353335bf03cec568c3385372754bdadff2ba2f538221ba992e0aa4652d9c7a7858f8699ed8bf7d6d8c0d9d65915210bd198407e2d2c59bb36039cf11ea60b5a51d8f1fb28c428e98aa495e4a982501b5e991b3dc2c226f0518109529e49f82321135d3867"}}, {0x62, &(0x7f0000001440)=@string={0x62, 0x3, "5548f9c7eddf2217820c98978b0dc69828c8940b55470cb08404228b1a4ac4d5c9ad3fd46881492a94f1652901b90b5bb5686ff922ce3653a6c33530f53d9994aa8ac3dde0cf5204adecd539dadaf50c6834b7b91e4618839e85b79bf93bc567"}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x2c05}}]}) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000982001f000000fe0000000000000008000f00fd000000", 0x24) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.455166601s ago: executing program 0 (id=3449): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) ioctl$LOOP_CLR_FD(r3, 0x4c01) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r9, 0x403c6f2b, &(0x7f0000000380)={0x23f0, {"771c2e01f8ffffffffffee00", "000900000000000200", "00000000150800"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r9, 0x40000000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x294, r8, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x25d, 0xe, {{{}, {}, @broadcast, @device_a, @initial, {0x0, 0xa}}, 0x0, @default, 0x8010, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x49}}, @void, [{0xdd, 0x80, "649204308dd22d42286c76e001f3730ec1d9e940d72305dbb6ca01dc6600d9ae89ef107803255510a0ea40d23d2008a0b4f94c438d88315f9526ec1d532f865e64f0a1419330dcad73c59b811b7be93a11245c9faa4219a0b16bf96f8dd59b7c0a3392e7ed383e28b1009c57d0bbab7252a1c8ecde89542c37fe48973eca892c"}, {0xdd, 0xbf, "02672aa456dc8b3cc16638a492dcc29ea06bc3dc9dccd9b0abdadc5ed67c1899bd49e744eebe6b119dc6089e7d3716907454383d73e6827c2d27bbff0ab9c343f9bcb5c15fa24e09da4b41d018778cf4aabea0bea4b2da0d3d3b9f61918c10a77a5ceade3cd6c4f7ad151a6ec7543ba763bf7194f3c1801a77d20bc5cfa4a6239c35046f52b8314c0bb29106285f0bc0bec3bfcf1dce93cf249a135bccbc13579de2484d742e798ee5a94e6fa8dd1ecae755ccb67fa3824b5dadbc07a9818f"}, {0xdd, 0xda, "74def62e75d9bacaa432d0c219451c1fce14e879ec3523732517aa148fdfd69a7373b6fd13da151b106f7812982cdd1a0a090d86633b8877c7f4566e758939aa7c6eb96c206f52e4ce18d30f0848eb2ab1ba8fa048c1e5e71b226517ce739dff5bc5027a1a8a8d33d4a31e2a5ed7c1b4c05a4d425ec6c528a23431a486d0870b1b38b6a2d1b17dadfe31abc74946aa2081913da952ad90d08de7fda728bfd99289e07cff0ea686e76bfce30de6c198d07cce37daf19c1ef1323599b08a90f4f7771313ec5b84a75f97871a4f9df9ac74921d858eb1aac8768c63"}]}}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x294}}, 0x20000014) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000525bd7000fedbdf251d00000008000300", @ANYRES32=r10, @ANYBLOB="0c0099000000001589ab635ea141de1300000036f1bfd4978cf50a46a4db51cc57b0769c9341815c31d17ca13064455930047e0b7c3a7f4086efa2b5dbf6d048971e751360e9616c3e0d44cf1ef48f70176e4ae079bf519a4de9852212d9a223850d92be6adfd02415664973b2f0ecdb9bb3fe47147da20ee4998f859e9c18320a66fdb9efbe2c4424e235b029e9382d3b918a9fd20a79b9130867b43aee9709ce6aaa30efd81a8a5f3c02787b6ac3694a099153cff98a4889a528d24664457f9a60d002006f6e89682c5e752a83fc5ca51d2b7f19b390243d4dbe600a3ba933cd7778b689ccfb30eb"], 0x28}, 0x1, 0x0, 0x0, 0x400c4}, 0x0) r11 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x1) fchdir(r12) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r13, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xffffffff}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESOCT=r10, @ANYBLOB="01002cbd7000fbdbdf250f00000008000300", @ANYRES32=r5, @ANYBLOB="05003700000000e407003c000300000079a87f68a950bbb916c1dcdc03df583ec2826a2c7dc4b14adb1c065f2e543cc9dc61d056f3e80b4ddfb59681d41486d36c72ae1060476fb5eb69f04737c4d76ec8e61314c87520c3bf45c82a9c6f26ad55b0ba8063454100"/114], 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000b80)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x7a, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000000)) 3.187461879s ago: executing program 5 (id=3450): set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4c850) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x24000806) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0186404, &(0x7f0000000000)={&(0x7f00008cc000/0x4000)=nil}) landlock_create_ruleset(&(0x7f0000000240)={0x2001}, 0x18, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x80108906, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000}]}]}, 0x13c}}, 0x4040000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r4, 0x1100, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 2.896810097s ago: executing program 2 (id=3451): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x0, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x36, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x65, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000600)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "42b6f79eb265b5824e857af864c58803d13c052f671a2ae1f76bf1da5cc727376ed546011b61539773c15f7e54ddbb21d67e1662214422745234909a6d75d284", 0x36}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000940), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x65, 0x66, 0x30, 0x30, 0x63, 0x38, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 2.475414138s ago: executing program 1 (id=3452): vmsplice(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000280)="e0e46a0175ba8913a291c178916322339c589a6bab53874f25120f496d0251a5a96e82f50e26973f076a3e3ff79843886be4d60af9b4dc35a1d0f2e54ad32b48e7e17ab297d4f1db4e115afd64d700855a", 0x51}], 0x1, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0xa, 0x0) (async) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1abe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x14, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9, 0x21, 0x0, 0x5}}}, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRESDEC], 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000340)=0x3) (async) write$tun(r2, &(0x7f0000001ec0)={@val={0x8, 0x800}, @val={0x7, 0x80, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x2, 0x100, @void}}}}}, 0x2e) timer_create(0x6, 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) openat$uhid(0xffffff9c, 0x0, 0x802, 0x0) sync() sync() sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x4, 0x200ac5) (async) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000080)={0x7516, 0x34325241, 0x3, @stepwise={0x6, 0xeb, 0x8, 0x1, 0x5, 0x5}}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0x0, 0x7ffffdbd}]}) (async) munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) syz_usb_control_io$uac1(r1, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) (async) syz_usb_connect$uac1(0x5, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="120150020000003b65c8093f4000010203010902a100030103607d0904000000010100000a240102004b000201020924030600030303000c2402f076b85a0924030201030501000c240202050406090200804f0c2402050404040ef4ff081c090401000001020000090401010101020000090501092000023c080725010c049ab109040200000102000009040201010102000009058209000200010507250100090800a142c67cb3356e8e5b6e975a37c539d162fe1749908abf"], &(0x7f00000000c0)={0x0, 0x0, 0xfffffe86, 0x0}) 2.422728538s ago: executing program 2 (id=3453): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000000340)={&(0x7f00000002c0)=[{0x0, 0x40, 0xfffffffffffffc01, 0x1, 0x285}, {0x7fff, 0x1, 0xf, 0x8, 0x10}, {0x1ff, 0x7f, 0x3ff, 0x3, 0xc}], 0x3, 0x28, 0x1ff, 0x7e38}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x44, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x98, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x6b, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x8, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x4, 0x6, {0xb3, 0x2, 0xd, 0x1ff}}, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x2ff, 0x1, 0x7, 0x0, {0xa600000000000002, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xe5, 0x2, 0x2a, 0x7}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}], @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008851}, 0x20000014) 2.231542596s ago: executing program 2 (id=3454): timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200), 0x0, r0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000ec0)={0x18, 0x0, {0x1, @random="34c2f584311b", 'vxcan1\x00'}}, 0x1e) syz_usb_connect$uac3(0x3, 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000040f80600b040000102030109026e000301ffc010080b0002010130070904000000010130000a2401100a000700000009040100000102300009040101010102300009050109200040d4040a252500000000010100090402000001023000090402010123023000090582091002fa0a020a252500040000050900"], 0x0) r2 = openat$vim2m(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000200)={0x1, 0x2, 0x10, "b6847e31a3cf2a82e7ffb5ec50e97eb9648b9f4452ab62d541e0579ca2ddbe00", 0x38414761}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x58, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x3, 0x2, 0xffffffff, 0xe661, 0x4, 0x3, 0x3, 0x8, 0x4c74, 0x9, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x80000008, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fff, 0x7b, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0x312, 0x74, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x403, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfff, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0x4, 0x48c93690, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7ff7, 0x0, 0x1, 0x2, 0xd, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x20000009, 0x4, 0x6d01, 0x4, 0x38, 0x800003, 0x200, 0x1000, 0x3, 0x5, 0x87c, 0x1002, 0x8, 0x7, 0x953a, 0x5, 0x7f, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a3ed, 0x4, 0x25], [0x6, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x4, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x2, 0x0, 0x2, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x6, 0x400, 0x10000, 0x3, 0xfffff801, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0xa26, 0x5, 0x7, 0x28, 0x30b1d693, 0x1000, 0xf43, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) connect$unix(r3, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0x541b, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400", @ANYRES16=0x0, @ANYBLOB="07000300000000"], 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x80000074}]}) r8 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r8, 0x0) r9 = socket(0x1e, 0x4, 0x20000000) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r9, &(0x7f0000000640)={&(0x7f0000000300)=@name={0x1e, 0x2, 0x1, {{}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xc0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000040)) 2.127690743s ago: executing program 5 (id=3455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000e0000001000000000000000000000000e0000002000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000004d46c000000ffffffff000000000000000000000000000000000000000092010000000000003affffffffffffff00000000000000001c250800000000000200000000000000f8ffffffffffffff7c232e0e00000000090000000000000000000000000000001f00000002000000feffffffffffffff02000000fcffffffff0f00002abd700004350000020001ff00000000480003006465666c61746500"/236], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x100bf28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0xfffff805}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ipvlan0\x00', 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x200009, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c814}, 0x0) sendto$inet6(r1, 0x0, 0x3d, 0x4088010, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000400a20000000000a81030000000000000000010000000900010073797a30000000002c000000030afe010000000000000000010000000900030073797a30000000000900010073797a300000000a00000000060a010400000000000000000100000008000b400000003000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140fa9e0ac2bbebe943bdfd846d2ffd11d812a90865460000000000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x800) 2.104274212s ago: executing program 4 (id=3456): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519dc00fb1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x12) ppoll(&(0x7f0000000280)=[{r2}], 0x1, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000002000)={0x18, 0x1, 0x0, {0x3}}, 0x18) 1.580111487s ago: executing program 5 (id=3457): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x8) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x6) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x7) landlock_restrict_self(r0, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f045}) ppoll(&(0x7f00000000c0)=[{r2, 0x9f712fd3135d63af}], 0x1, 0x0, 0x0, 0x0) 1.466170102s ago: executing program 1 (id=3458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000080)=@attr_riscv64=@attr_addr={0x0, 0x1, @aplic, 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x1, 0xfffffffa, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x4d5e, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) sendto(r4, &(0x7f0000000280)="ff650d8e167648196964b14cc49f82e5088b0ca0551713bac0a1e79319b4baf76117116c855d63568ff95b4fcccc50745d9d418e1fc6390c3ac29cc1133e", 0x3e, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) r5 = syz_open_pts(r3, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x109) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000100)={0x50, 0x0, r7, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x1, 0x3, 0x9, 0x0, 0x2, 0x0, {0x2, 0x96e, 0x8, 0x2, 0x4, 0x0, 0x0, 0x16a, 0x0, 0x6000, 0xd3, r8, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x2, 0x0) r9 = dup3(r5, r3, 0x0) ioctl$TIOCSSOFTCAR(r9, 0x541a, &(0x7f0000000000)=0x7f) 1.145322802s ago: executing program 4 (id=3459): socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_usb_connect(0x2, 0x43, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a3233910eba658744d2d010203010902310001080010000904df0003080662ff09250c0220000606030905071000020102070424"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x38044153}, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, 0x0, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5d3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x400}, @CTA_TUPLE_ORIG={0x9c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x8, 0x2, @empty}}}]}, @CTA_LABELS={0x4}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}, @CTA_LABELS_MASK={0x18, 0x17, [0x3, 0x2, 0x671b, 0xffff, 0x7]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040400) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x400000000010, 0x3, 0x0) unshare(0x20000400) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) socket(0x27, 0xa, 0x8) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x80000, {0x7, 0x0, 0x0, r3, 0x80, 0x72}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) 671.876586ms ago: executing program 5 (id=3460): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/softnet_stat\x00') lseek(r3, 0x1000000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f00000001c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x18}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x81, 0x59d7, 0xfffffffc, 0x5}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="030300000000000000001100000008000300", @ANYRES32=r4], 0x1c}}, 0x0) 647.381182ms ago: executing program 2 (id=3461): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000080)=0xf8d, 0x4) r3 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x5, 0x206140) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) futex(0x0, 0x271aa6121c3ce27c, 0x4, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r4, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200c005}, 0x4000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r5], 0x20}}, 0x0) syz_usb_connect$midi(0x3, 0x31, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x582, 0x2f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x8, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0xe, 0x3, 0x200, 0x7, 0x2, 0xfd, {0x4}}}]}}}}}]}}, 0x0) 643.670811ms ago: executing program 1 (id=3462): socket$kcm(0x10, 0x2, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/test/cgroup.procs\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x40a180, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffffff, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x102) landlock_create_ruleset(&(0x7f0000000000)={0x40, 0x1, 0x3}, 0x18, 0x1) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921"], 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000000c0)={0xb}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x67c, 0x6, 0xf3b8, 0xfdfffffffffffffe, 0x1000, 0x400, 0x4002004c4, 0xfffffffffffffffb, 0x0, 0x97, 0xe, 0x0, 0x3, 0x4, 0x0, 0x8], 0xeeee8000, 0x402}) ioctl$KVM_RUN(r5, 0xae80, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x5ada985dea50982f) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r9 = getpid() syz_pidfd_open(r9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1902) 511.170823ms ago: executing program 5 (id=3463): r0 = socket(0x15, 0x5, 0x0) connect$can_j1939(r0, &(0x7f0000000040)={0xa, 0x0, 0xffffc0fe, {}, 0xff}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = epoll_create(0xf) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000)={0x30000001}) epoll_pwait(r6, &(0x7f0000000080)=[{}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x40000106, 0x0, 0xffffffffffffffff}, {0x6a7, 0x0, 0x9}]}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000104000004020000000000000000efda513cb0a7e205909d060608fc09cd98f639c7200bb33c7ed8fde0d803ca55860c66811b8d1a73585c3fe39f13f8b79d9160ff30db6f0ee32ce6b36cc20dbd", @ANYRES32=0x0, @ANYBLOB="0300060000000000140012800c0001006d6163766c616e00b1fc028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x44}}, 0x0) 333.90936ms ago: executing program 5 (id=3464): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_clone(0xc510c080, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x0, 0x3, 0x1000, {0x0, 0x2, 0x0, 0x0, 0x5}, {0x2, 0x0, 0xff, 0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffff7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x73251c587dd540e9}}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/exec\x00') r8 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r8, &(0x7f0000000100)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r8, 0xfffff377) copy_file_range(r7, 0x0, r7, &(0x7f00000000c0)=0xffffffffffffff80, 0x9, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r4, r6, 0x16, 0x0, @void}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xc, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, r3, 0x0, 0x1}, 0x50) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1c}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1015}, 0x1}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000140)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x9a}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 264.471758ms ago: executing program 0 (id=3465): set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4c850) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x24000806) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0186404, &(0x7f0000000000)={&(0x7f00008cc000/0x4000)=nil}) landlock_create_ruleset(&(0x7f0000000240)={0x2001}, 0x18, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x80108906, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c01000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000004300000000000000000000000000000000000000000000000000000084000500ac1414aa000000000000000000000000000000202b00000000000000ffffffff00000000000000000000000000000000004000000000000000000000000000007f000001000000000000000000000000000001006c00000000000000ac1414aa00348adaedcad888235efe46a8492d0000000000000000000000004000000000"], 0x13c}}, 0x4040000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 0s ago: executing program 0 (id=3466): socket$alg(0x26, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/vlan0\x00') preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000140)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x6a) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x80000) r8 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r8, &(0x7f0000000440)={0xc, &(0x7f0000000300)={0x20, 0x7, 0xe3, {0xe3, 0x6, "d9f956a1f05692b3ee9defceb0fcd3e3cc847baa32218c8cbf02047e8156a10e578f22bb008b123100204c2163c61bb99712b5ecdaffdaa3c32c1ba950208ac96cf65a0647f3bb0a689193a32f2ad3a92c3901f64f026d85a078a661fd8ed7244dcb866b17f42341d5c98353fe5c379b2678c3531e1be19c06b733128c2e4f8b19847f7bbc5bd8522b63b2615f5174cd24c68d030e74fced4ba719e0614952c3cad922cce0d8eefb817df44468662e5f624866e70450aa3a2ab455a2a15ef88c7ebbfa8fbdeb69845638a67cd847905628a900bb285b81d52afa7edf21dd8d5200"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x10, &(0x7f00000004c0)={0x0, 0x1, 0x32, "d4a2c6af9efed60db19e8df4dd4c4ad5f01e4ced4cc48fe4586434918aa8137e60f80ddb8b6167a9da305a50e41e57e82383"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0xeb}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x80a, 0x7, 0x4, 0x7, 0x5, 0x3, 0x7, 0x47, 0x14, 0x9, 0x7e4, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r8, 0x0, 0x0) setsockopt$inet_buf(r7, 0x0, 0x2c, &(0x7f0000000ac0)="22eab05e59691a27dfe58d01e1d229c2df6c57854b7ea81d3504930929c69edb05bf99d6086a8fdb1f8f3eb6ec3bfed56a0a765815e0cb4aa89957466c2956f466192983e0b2c79f7214672ec52eb9c81cec8b06c7ec4125fee11459ea5068525283a9a6195f93a9f529e84dee46141645912914d497c10df2c772dcd513b9d4081d2aa37afedcde8edc7d5d53494f980303835b9003488fab", 0x99) syz_usb_control_io$uac2(r8, &(0x7f0000000740)={0xc, &(0x7f00000005c0)={0x40, 0x21, 0xb5, {0xb5, 0x12, "1474c12391bada92a7a736e52dc436f039acd1b743167d37963747bed90b3b9135893ed74480a134bd8d7a55c64789ddf525d8361889043b0352e736286e7b734d5578faa3c2f00802d9ab2863f711876412938b59d7afc1e7fb7e27ccfdd9a8e7812e27a0e9b1e23dd38a4928b36f564474bdfbabd119bdd882f272b0097ce6c7714b2df4585e8bbf7461e0b395a4ee0475f0dd8a73ad41c7f9a5eb55a100958289c760b0f1918178fef70be396459ad3435f"}}, &(0x7f0000000b80)=ANY=[@ANYBLOB="00038a0000008a032eeb87e4b642997f3208a61268ce022e621f7fb61e43c7d8b5d44947a541702724bd3244004a79f8f97eb3ec13b81db41507f83646d5aeca34c7b62cab9167a93b9d71e08dbd2c8285fc72e57408cc9d59abf5fc593d9d227809ed6e17c482106d459606314d6176370ac40c5a4b3d5b61dd9f8c186092440bb365beaec677290da5"]}, &(0x7f00000009c0)={0x24, &(0x7f0000000780)={0x0, 0xe, 0x46, "798f063cb94cd301eab5ab126a6b00000000e431914b9581a8da1c47877424139d0d9d2610a6f26aed814fcaecfb59de3926843d38cb72e1f5cba8b0b336deebd7144213e619"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x3}, 0x0, &(0x7f0000000880)={0x20, 0x81, 0x1, 'X'}, &(0x7f00000008c0)={0x20, 0x82, 0x3, "90ca80"}, &(0x7f0000000900)=ANY=[], &(0x7f0000000940)={0x20, 0x84, 0x1, '\x00'}, &(0x7f0000000980)={0x20, 0x85, 0x3, "35bf9b"}}) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) r9 = dup3(r4, r5, 0x80000) r10 = dup(r9) read(r10, 0x0, 0x0) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) kernel console output (not intermixed with test programs): 16128]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 727.171371][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 727.248201][ T5762] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 727.284624][ T5762] usb 3-1: USB disconnect, device number 81 [ 727.358774][ T5791] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 727.533712][T13564] IPVS: stop unused estimator thread 0... [ 727.552491][ T5791] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 727.580008][ T5791] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 727.614738][ T5791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 727.643087][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 727.649127][ T5791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 727.649185][ T5791] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 727.649235][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.683402][ T5791] usb 1-1: config 0 descriptor?? [ 727.698723][ T7636] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 727.707426][T16130] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 727.889629][ T7636] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 727.913102][ T7636] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 727.933779][ T7636] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 727.971219][ T7636] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.033424][ T7636] usb 2-1: config 0 descriptor?? [ 728.185013][ T5791] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 728.345160][T16149] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3235'. [ 728.397170][T16162] fuse: Bad value for 'fd' [ 728.445952][T15966] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 728.471794][ T7636] usbhid 2-1:0.0: can't add hid device: -71 [ 728.497569][T15966] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 728.505788][ T7636] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 728.551593][T15966] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 728.577044][ T7636] usb 2-1: USB disconnect, device number 123 [ 728.623073][T15966] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 728.656278][T15966] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 728.726860][T15966] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 728.761261][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 728.897887][T15966] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 728.909841][ T30] audit: type=1800 audit(1787309016.298:1640): pid=16170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3238" name="memory.events" dev="tmpfs" ino=125 res=0 errno=0 [ 728.990679][T15966] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 729.159126][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 729.159973][ T4929] Bluetooth: hci3: command 0x0c1a tx timeout [ 729.238761][ T4929] Bluetooth: hci2: command 0x0c1a tx timeout [ 729.630154][T15966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.711059][T15966] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.752451][T13564] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.759702][T13564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.811934][T13564] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.819193][T13564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.984024][T15966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.238135][T15966] veth0_vlan: entered promiscuous mode [ 730.258325][T16197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.271080][ T5791] usb 1-1: USB disconnect, device number 17 [ 730.291041][T16200] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 730.302150][T15966] veth1_vlan: entered promiscuous mode [ 730.411867][T15966] veth0_macvtap: entered promiscuous mode [ 730.433245][T15966] veth1_macvtap: entered promiscuous mode [ 730.507768][T15966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.548738][ T24] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 730.561924][T15966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.637232][ T1155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.690452][T13569] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.712294][ T24] usb 3-1: device descriptor read/64, error -71 [ 730.735353][T13569] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.746082][ T5673] usb 6-1: new full-speed USB device number 90 using dummy_hcd [ 730.783285][T13570] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.808876][ T5709] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 730.839523][ T4929] Bluetooth: hci5: command 0x0c1a tx timeout [ 730.913646][T13569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.931001][T13569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.941784][ T5673] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 730.966032][ T5673] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 730.989194][ T5673] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 731.002888][ T24] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 731.010828][ T5709] usb 2-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00 [ 731.033192][ T5673] usb 6-1: config 0 interface 0 has no altsetting 0 [ 731.041965][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.050941][T13572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.057113][ T5673] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 731.072404][ T5709] usb 2-1: config 0 descriptor?? [ 731.080824][ T5673] usb 6-1: Product: syz [ 731.084405][T13572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.099379][ T5673] usb 6-1: Manufacturer: syz [ 731.114671][ T5673] usb 6-1: SerialNumber: syz [ 731.134177][ T5673] usb 6-1: config 0 descriptor?? [ 731.159077][ T24] usb 3-1: device descriptor read/64, error -71 [ 731.204564][ T5673] usb 6-1: selecting invalid altsetting 0 [ 731.239016][ T4929] Bluetooth: hci3: command 0x0c1a tx timeout [ 731.239615][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 731.310433][ T24] usb usb3-port1: attempt power cycle [ 731.318903][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 731.380175][T16202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.394717][T16202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.460986][T16224] fuse: Bad value for 'fd' [ 731.482833][ T5673] usb 6-1: USB disconnect, device number 90 [ 731.549217][ T7636] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 731.593026][ T5771] udevd[5771]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 731.688806][ T24] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 731.719716][ T24] usb 3-1: device descriptor read/8, error -71 [ 731.720862][ T7636] usb 5-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d [ 731.768140][ T7636] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 731.791884][ T7636] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 731.823320][ T7636] usb 5-1: config 8 has no interface number 0 [ 731.836535][ T7636] usb 5-1: config 8 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 731.876150][ T7636] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.894336][ T7636] usb 5-1: Product: syz [ 731.898762][ T7636] usb 5-1: Manufacturer: syz [ 731.904586][ T7636] usb 5-1: SerialNumber: syz [ 731.989174][ T24] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 732.019411][ T24] usb 3-1: device descriptor read/8, error -71 [ 732.139921][ T24] usb usb3-port1: unable to enumerate USB device [ 732.693301][ T7636] usb 5-1: USB disconnect, device number 16 [ 733.422296][ T5709] usbhid 2-1:0.0: can't add hid device: -71 [ 733.438929][ T5709] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 733.478131][ T5709] usb 2-1: USB disconnect, device number 124 [ 733.908829][ T5791] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 734.069896][ T5791] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 734.082987][ T5791] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 734.097661][ T5791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 734.109175][ T5709] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 734.116899][ T5791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 734.128454][ T5791] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 734.142642][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.159496][ T5791] usb 1-1: config 0 descriptor?? [ 734.170909][T16249] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 734.288770][ T5709] usb 6-1: Using ep0 maxpacket: 16 [ 734.294650][ T5709] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 734.305938][ T5709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.317135][ T5709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.327065][ T5709] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 734.341425][ T5709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.353916][ T5709] usb 6-1: config 0 descriptor?? [ 734.500121][ T5762] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 734.561694][T16267] fuse: Bad value for 'fd' [ 734.623385][ T5791] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 734.669950][ T5762] usb 2-1: Using ep0 maxpacket: 32 [ 734.693347][ T5762] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 734.704179][ T5762] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 734.719958][ T5762] usb 2-1: config 0 has no interface number 0 [ 734.735267][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.748740][ T5762] usb 2-1: Product: syz [ 734.755549][ T5762] usb 2-1: Manufacturer: syz [ 734.765701][ T5762] usb 2-1: SerialNumber: syz [ 734.786653][ T5762] usb 2-1: config 0 descriptor?? [ 734.858111][ T5709] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0034/input/input50 [ 734.948800][ T5709] microsoft 0003:045E:07DA.0034: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 735.248018][ T5762] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 735.292615][ T5762] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 735.320162][ T5709] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 735.479987][ T5709] usb 3-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d [ 735.501654][ T5709] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 735.520717][ T5709] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 735.535859][ T5709] usb 3-1: config 8 has no interface number 0 [ 735.552470][ T5709] usb 3-1: config 8 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 735.572640][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.583774][ T5709] usb 3-1: Product: syz [ 735.588939][ T5709] usb 3-1: Manufacturer: syz [ 735.593733][ T5709] usb 3-1: SerialNumber: syz [ 735.606726][T16276] loop5: detected capacity change from 0 to 4095 [ 735.645750][ T5628] buffer_io_error: 9 callbacks suppressed [ 735.645774][ T5628] Buffer I/O error on dev loop5, logical block 511, async page read [ 735.773290][ T7639] usb 6-1: USB disconnect, device number 91 [ 735.872577][T16276] Buffer I/O error on dev loop5, logical block 511, async page read [ 736.032571][ T5628] Buffer I/O error on dev loop5, logical block 511, async page read [ 736.142537][T16280] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3262'. [ 736.451893][ T5709] usb 3-1: USB disconnect, device number 86 [ 736.690410][ T8082] usb 1-1: USB disconnect, device number 18 [ 736.918713][ T5709] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 737.080553][ T5709] usb 3-1: Using ep0 maxpacket: 16 [ 737.092892][ T5709] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 737.115046][ T5709] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.130908][ T5709] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 737.144557][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.167813][ T5709] usb 3-1: config 0 descriptor?? [ 737.174722][ T8082] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 737.197075][ T5709] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 737.338754][ T5791] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 737.357163][ T5762] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -61 [ 737.358896][ T8082] usb 1-1: Using ep0 maxpacket: 16 [ 737.375011][ T5762] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 737.383913][ T8082] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 737.402021][ T8082] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.431700][ T5709] usb 3-1: USB disconnect, device number 87 [ 737.438285][ T8082] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 737.452772][ T8082] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.486093][ T8082] usb 1-1: config 0 descriptor?? [ 737.493750][ T5791] usb 6-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 737.526985][ T5791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.538300][ T8082] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 737.550411][ T5791] usb 6-1: Product: syz [ 737.556504][ T5791] usb 6-1: Manufacturer: syz [ 737.564037][ T5791] usb 6-1: SerialNumber: syz [ 737.578099][ T5791] usb 6-1: config 0 descriptor?? [ 737.615836][ T52] Bluetooth: hci1: urb ffff888052c40300 submission failed (2) [ 737.718458][T16287] FAULT_INJECTION: forcing a failure. [ 737.718458][T16287] name failslab, interval 1, probability 0, space 9, times 0 [ 737.733073][T16287] CPU: 0 UID: 0 PID: 16287 Comm: syz.0.3265 Tainted: G L syzkaller #0 PREEMPT(full) [ 737.733110][T16287] Tainted: [L]=SOFTLOCKUP [ 737.733119][T16287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 737.733133][T16287] Call Trace: [ 737.733142][T16287] [ 737.733152][T16287] dump_stack_lvl+0xe8/0x150 [ 737.733190][T16287] should_fail_ex+0x410/0x560 [ 737.733225][T16287] should_failslab+0xa8/0x100 [ 737.733261][T16287] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 737.733289][T16287] ? xfrm_state_alloc+0x24/0x2f0 [ 737.733318][T16287] ? xfrm_state_alloc+0x24/0x2f0 [ 737.733354][T16287] xfrm_state_alloc+0x24/0x2f0 [ 737.733385][T16287] xfrm_state_find+0x3b65/0x5f90 [ 737.733426][T16287] ? __pfx_fib6_node_lookup+0x10/0x10 [ 737.733460][T16287] ? xfrm_state_find+0x1f2/0x5f90 [ 737.733498][T16287] ? __pfx_xfrm_state_find+0x10/0x10 [ 737.733537][T16287] ? __rt6_find_exception_rcu+0x13b/0x4e0 [ 737.733578][T16287] xfrm_resolve_and_create_bundle+0x7f3/0x3070 [ 737.733635][T16287] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 737.733660][T16287] ? __lock_acquire+0x683/0x2cf0 [ 737.733704][T16287] ? xfrm_sk_policy_lookup+0x91/0x720 [ 737.733746][T16287] ? xfrm_sk_policy_lookup+0x6db/0x720 [ 737.733783][T16287] ? xfrm_expand_policies+0x489/0x740 [ 737.733814][T16287] xfrm_lookup_with_ifid+0x2a6/0x1b40 [ 737.733848][T16287] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 737.733872][T16287] ? ip6_datagram_dst_update+0x4f7/0xcd0 [ 737.734033][T16287] xfrm_lookup_route+0x3c/0x1c0 [ 737.734060][T16287] ? ip6_datagram_dst_update+0x4f7/0xcd0 [ 737.734085][T16287] ip6_datagram_dst_update+0x729/0xcd0 [ 737.734118][T16287] __ip6_datagram_connect+0xb82/0x10e0 [ 737.734155][T16287] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 737.734182][T16287] ? ip6_datagram_connect_v6_only+0x56/0xa0 [ 737.734211][T16287] ? __local_bh_enable_ip+0xd6/0x140 [ 737.734243][T16287] ip6_datagram_connect_v6_only+0x63/0xa0 [ 737.734272][T16287] __sys_connect+0x316/0x450 [ 737.734304][T16287] ? __pfx___sys_connect+0x10/0x10 [ 737.734355][T16287] __ia32_sys_connect+0x7a/0x90 [ 737.734384][T16287] __do_fast_syscall_32+0x27a/0x6a0 [ 737.734416][T16287] ? do_fast_syscall_32+0x33/0x70 [ 737.734441][T16287] ? asm_int80_emulation+0x1a/0x20 [ 737.734463][T16287] ? do_int80_emulation+0x299/0x500 [ 737.734487][T16287] ? trace_irq_disable+0x3b/0x140 [ 737.734523][T16287] do_fast_syscall_32+0x33/0x70 [ 737.734549][T16287] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 737.734577][T16287] RIP: 0023:0xf7fe80ec [ 737.734598][T16287] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 737.734618][T16287] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 737.734642][T16287] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 737.734658][T16287] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 737.734671][T16287] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 737.734685][T16287] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 737.734699][T16287] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 737.734732][T16287] [ 737.736125][ T7639] usb 1-1: USB disconnect, device number 19 [ 738.091677][ T5709] usb 6-1: USB disconnect, device number 92 [ 738.270538][T16299] netlink: 'syz.2.3269': attribute type 26 has an invalid length. [ 738.278527][T16299] netlink: 64899 bytes leftover after parsing attributes in process `syz.2.3269'. [ 738.357876][T16302] FAULT_INJECTION: forcing a failure. [ 738.357876][T16302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.385528][T16302] CPU: 0 UID: 0 PID: 16302 Comm: syz.2.3270 Tainted: G L syzkaller #0 PREEMPT(full) [ 738.385567][T16302] Tainted: [L]=SOFTLOCKUP [ 738.385576][T16302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 738.385594][T16302] Call Trace: [ 738.385603][T16302] [ 738.385613][T16302] dump_stack_lvl+0xe8/0x150 [ 738.385653][T16302] should_fail_ex+0x410/0x560 [ 738.385688][T16302] _copy_from_iter+0x1d3/0x1660 [ 738.385717][T16302] ? trace_kmem_cache_alloc+0x29/0xe0 [ 738.385747][T16302] ? kmem_cache_alloc_noprof+0x30c/0x5f0 [ 738.385772][T16302] ? kmem_cache_alloc_noprof+0x152/0x5f0 [ 738.385796][T16302] ? __build_skb+0x62/0x440 [ 738.385822][T16302] ? __build_skb+0x62/0x440 [ 738.385847][T16302] ? __pfx__copy_from_iter+0x10/0x10 [ 738.385880][T16302] ? __build_skb+0x2a2/0x440 [ 738.385908][T16302] ? netlink_sendmsg+0x650/0xb40 [ 738.385942][T16302] ? skb_put+0x112/0x210 [ 738.385973][T16302] netlink_sendmsg+0x6c0/0xb40 [ 738.386016][T16302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.386054][T16302] ? aa_sock_msg_perm+0xf6/0x1c0 [ 738.386090][T16302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.386122][T16302] sock_sendmsg_nosec+0x13a/0x180 [ 738.386149][T16302] sock_write_iter+0x2de/0x3e0 [ 738.386185][T16302] ? __pfx_sock_write_iter+0x10/0x10 [ 738.386229][T16302] ? bpf_lsm_file_permission+0x9/0x20 [ 738.386253][T16302] ? security_file_permission+0x75/0x260 [ 738.386286][T16302] vfs_write+0x612/0xba0 [ 738.386329][T16302] ? __pfx_vfs_write+0x10/0x10 [ 738.386383][T16302] ? __fget_files+0x2a/0x420 [ 738.386423][T16302] ksys_write+0x150/0x270 [ 738.386460][T16302] ? __pfx_ksys_write+0x10/0x10 [ 738.386504][T16302] __do_fast_syscall_32+0x27a/0x6a0 [ 738.386532][T16302] ? do_fast_syscall_32+0x33/0x70 [ 738.386557][T16302] ? asm_int80_emulation+0x1a/0x20 [ 738.386579][T16302] ? do_int80_emulation+0x299/0x500 [ 738.386603][T16302] ? trace_irq_disable+0x3b/0x140 [ 738.386638][T16302] do_fast_syscall_32+0x33/0x70 [ 738.386664][T16302] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 738.386691][T16302] RIP: 0023:0xf7f440ec [ 738.386712][T16302] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 738.386733][T16302] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 738.386758][T16302] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 738.386774][T16302] RDX: 000000000000fe33 RSI: 0000000000000000 RDI: 0000000000000000 [ 738.386788][T16302] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 738.386802][T16302] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 738.386816][T16302] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 738.386847][T16302] [ 738.803145][T16308] fuse: Bad value for 'fd' [ 738.999590][ T5709] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 739.115784][ T5791] usb 2-1: USB disconnect, device number 125 [ 739.159612][ T5709] usb 5-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d [ 739.185404][ T5709] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 739.197973][ T5709] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 739.227665][ T5709] usb 5-1: config 8 has no interface number 0 [ 739.240304][ T5709] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 739.262886][ T5709] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 739.312286][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.334808][ T5709] usb 5-1: Product: syz [ 739.347700][ T5709] usb 5-1: Manufacturer: syz [ 739.356112][ T5709] usb 5-1: SerialNumber: syz [ 739.383726][ T30] audit: type=1326 audit(1787309026.788:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16327 comm="syz.5.3281" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 739.462122][ T30] audit: type=1326 audit(1787309026.788:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16327 comm="syz.5.3281" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 739.508790][ T30] audit: type=1326 audit(1787309026.788:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16327 comm="syz.5.3281" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 739.563025][ T30] audit: type=1326 audit(1787309026.788:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16327 comm="syz.5.3281" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 739.618842][ T30] audit: type=1326 audit(1787309026.788:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16327 comm="syz.5.3281" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 739.668703][ T30] audit: type=1326 audit(1787309026.818:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16327 comm="syz.5.3281" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 739.712902][ T7639] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 739.723334][ T30] audit: type=1326 audit(1787309026.818:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16327 comm="syz.5.3281" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 739.778868][ T30] audit: type=1326 audit(1787309026.818:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16327 comm="syz.5.3281" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 739.828755][ T30] audit: type=1326 audit(1787309026.828:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16327 comm="syz.5.3281" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 739.885638][ T30] audit: type=1326 audit(1787309026.828:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16327 comm="syz.5.3281" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 739.919915][ T7639] usb 6-1: Using ep0 maxpacket: 16 [ 739.931635][ T7639] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 739.956920][ T7639] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.975983][ T7639] usb 6-1: Product: syz [ 739.984687][ T7639] usb 6-1: Manufacturer: syz [ 739.998704][ T7639] usb 6-1: SerialNumber: syz [ 740.006912][ T7639] usb 6-1: config 0 descriptor?? [ 740.035928][ T7639] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 740.057517][ T7639] usb 6-1: Detected FT-X [ 740.095707][ T24] hid_parser_main: 28 callbacks suppressed [ 740.095848][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 740.141651][ T24] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 740.171340][ T5709] usb 5-1: USB disconnect, device number 17 [ 740.180207][ T5762] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 740.368853][ T5791] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 740.370733][ T5762] usb 3-1: Using ep0 maxpacket: 16 [ 740.383055][ T5762] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 740.399156][ T5762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.407795][ T5762] usb 3-1: Product: syz [ 740.412474][ T5762] usb 3-1: Manufacturer: syz [ 740.417176][ T5762] usb 3-1: SerialNumber: syz [ 740.513453][ T7639] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 740.530626][ T5791] usb 2-1: Using ep0 maxpacket: 16 [ 740.537760][ T7639] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 740.541682][ T5791] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 740.557575][ T5791] usb 2-1: config index 0 descriptor too short (expected 539, got 27) [ 740.571495][ T7639] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 740.584626][ T5791] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 740.593012][ T5709] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 740.602022][ T5791] usb 2-1: config 0 has no interface number 0 [ 740.610083][ T5791] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 740.622021][ T5791] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 740.633316][ T7639] usb 6-1: USB disconnect, device number 93 [ 740.656729][ T5791] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 740.681818][ T5791] usb 2-1: Product: syz [ 740.686154][ T5791] usb 2-1: SerialNumber: syz [ 740.695050][ T5791] usb 2-1: config 0 descriptor?? [ 740.722300][ T7639] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 740.725923][ T5791] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 740.758961][ T5709] usb 5-1: Using ep0 maxpacket: 16 [ 740.766888][ T5709] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 740.788023][ T5762] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 740.798225][ T7639] ftdi_sio 6-1:0.0: device disconnected [ 740.799582][ T5709] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.822392][ T5709] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 740.846044][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.872903][ T5709] usb 5-1: config 0 descriptor?? [ 740.905036][ T5709] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 740.936722][ T5791] usb 2-1: USB disconnect, device number 126 [ 741.037600][ T5762] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 741.059012][ T5762] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 741.075302][ T5762] usb 3-1: media controller created [ 741.137323][ T5762] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 741.289113][ T5762] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 741.570721][ T5762] usb 3-1: USB disconnect, device number 88 [ 742.006622][ T5791] usb 5-1: USB disconnect, device number 18 [ 742.081239][T16358] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3290'. [ 742.178325][T16358] syzkaller1: entered promiscuous mode [ 742.206401][T16358] syzkaller1: entered allmulticast mode [ 742.310843][T16365] fuse: Bad value for 'fd' [ 742.498951][ T5762] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 742.588743][ T7635] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 742.650856][ T5762] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 742.663124][ T5762] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.674255][ T5762] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.684688][ T5762] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 742.697721][ T5762] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.710831][ T5762] usb 6-1: config 0 descriptor?? [ 742.739726][ T7635] usb 3-1: Using ep0 maxpacket: 8 [ 742.745824][ T7635] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 742.760464][ T7635] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.769258][ T7635] usb 3-1: Product: syz [ 742.773580][ T7635] usb 3-1: Manufacturer: syz [ 742.778267][ T7635] usb 3-1: SerialNumber: syz [ 742.790244][ T7635] usb 3-1: config 0 descriptor?? [ 742.888732][ T7639] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 743.002959][ T7635] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 743.059600][ T7639] usb 5-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d [ 743.091043][ T7639] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 743.102014][ T7639] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 743.113050][ T7639] usb 5-1: config 8 has no interface number 0 [ 743.121492][ T7639] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 743.132297][ T7639] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 743.159411][ T5762] plantronics 0003:047F:FFFF.0036: reserved main item tag 0xd [ 743.168209][ T5762] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 743.178503][ T7639] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.187085][ T7639] usb 5-1: Product: syz [ 743.192031][ T5762] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 743.200269][ T7639] usb 5-1: Manufacturer: syz [ 743.206683][ T7639] usb 5-1: SerialNumber: syz [ 743.231059][ T5762] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 743.528530][T16390] [U] IG"[\ETȍƈoG 3,& [ 743.534337][T16390] [U] x/D+:}Yu)GX˚īG.^ [ 743.540371][T16390] [U] I3:4a{.Iq!'hัF1k̇3M\Ee7z6NGX05S~Jbj4,^Ｑad=?K\LZ6%I%!8.M{t*g}#jd#B>B 7,R5҃CflʿN(fq zw%2ONUt݂7}DV=\ZSαbBuUE2(9TNM=`ZWJ)|hi$-5S [ 743.566648][T16390] [U] DV8[B:;3d_) [ 743.571415][T16390] [U] qJKhiWHF,4E&KX^ ^V7Gc( [ 743.579167][T16390] [U] M8x]bY_v-; |O)qKVt [ 743.585185][T16390] [U] _v$p|^&=],M/!av+;2hX-> [ 743.592653][T16390] [U] 2G\}-F ׍3ڎC?<9gڱgyqТc~,vym`9O^S0vT`c87{bI<ʸ^2lՏP)%$ [ 743.604504][T16390] [U] %P [ 743.607390][T16390] [U] >hmbdZE%?Nj?lvS!HUiC%h#^gycD-9Y [ 743.616355][T16390] [U] eRR}@}h'0&S -rcN?dC:),d9܂~/f|(LŮH۬ѡO H--EQ֊$}9AɁVuй?'Q2r [ 747.045001][T16473] dump_stack_lvl+0xe8/0x150 [ 747.045041][T16473] should_fail_ex+0x410/0x560 [ 747.045077][T16473] should_failslab+0xa8/0x100 [ 747.045115][T16473] kmem_cache_alloc_node_noprof+0xb3/0x620 [ 747.045145][T16473] ? local_lock_release+0x9c/0x160 [ 747.045179][T16473] ? __alloc_skb+0x1db/0x7a0 [ 747.045207][T16473] ? __alloc_skb+0x1db/0x7a0 [ 747.045242][T16473] __alloc_skb+0x1db/0x7a0 [ 747.045286][T16473] netlink_ack+0x136/0xb30 [ 747.045321][T16473] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 747.045360][T16473] ? __lock_acquire+0x683/0x2cf0 [ 747.045417][T16473] netlink_rcv_skb+0x2a4/0x4a0 [ 747.045458][T16473] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 747.045492][T16473] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 747.045544][T16473] ? netlink_deliver_tap+0x2e/0x1b0 [ 747.045583][T16473] ? netlink_deliver_tap+0x2e/0x1b0 [ 747.045628][T16473] netlink_unicast+0x7bd/0x940 [ 747.045675][T16473] netlink_sendmsg+0x813/0xb40 [ 747.045714][T16473] ? __pfx_process_measurement+0x10/0x10 [ 747.045751][T16473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 747.045794][T16473] ? aa_sock_msg_perm+0xf6/0x1c0 [ 747.045834][T16473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 747.045873][T16473] sock_sendmsg_nosec+0x13a/0x180 [ 747.045905][T16473] ____sys_sendmsg+0x54e/0x850 [ 747.045948][T16473] ? __pfx_____sys_sendmsg+0x10/0x10 [ 747.046012][T16473] ___sys_sendmsg+0x2a5/0x360 [ 747.046049][T16473] ? __lock_acquire+0x683/0x2cf0 [ 747.046093][T16473] ? __pfx____sys_sendmsg+0x10/0x10 [ 747.046135][T16473] ? kstrtoull+0x12f/0x1d0 [ 747.046195][T16473] ? __fget_files+0x2a/0x420 [ 747.046232][T16473] ? __fget_files+0x3a2/0x420 [ 747.046282][T16473] __sys_sendmmsg+0x2de/0x4d0 [ 747.046326][T16473] ? __pfx___sys_sendmmsg+0x10/0x10 [ 747.046398][T16473] ? fput+0xa0/0xd0 [ 747.046431][T16473] ? ksys_write+0x242/0x270 [ 747.046480][T16473] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 747.046527][T16473] __do_fast_syscall_32+0x27a/0x6a0 [ 747.046558][T16473] ? do_fast_syscall_32+0x33/0x70 [ 747.046586][T16473] ? asm_int80_emulation+0x1a/0x20 [ 747.046612][T16473] ? do_int80_emulation+0x299/0x500 [ 747.046641][T16473] ? trace_irq_disable+0x3b/0x140 [ 747.046683][T16473] do_fast_syscall_32+0x33/0x70 [ 747.046713][T16473] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 747.046746][T16473] RIP: 0023:0xf705f0ec [ 747.046770][T16473] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 747.046792][T16473] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 747.046821][T16473] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 747.046840][T16473] RDX: 00000000000001f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 747.046856][T16473] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 747.046872][T16473] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 747.046887][T16473] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 747.046923][T16473] [ 747.248672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 747.403745][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.420192][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.524822][ T5708] usb 5-1: USB disconnect, device number 20 [ 747.563822][T16476] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3322'. [ 747.657737][T16480] FAULT_INJECTION: forcing a failure. [ 747.657737][T16480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 747.673860][T16480] CPU: 1 UID: 0 PID: 16480 Comm: syz.4.3324 Tainted: G L syzkaller #0 PREEMPT(full) [ 747.673897][T16480] Tainted: [L]=SOFTLOCKUP [ 747.673906][T16480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 747.673919][T16480] Call Trace: [ 747.673928][T16480] [ 747.673938][T16480] dump_stack_lvl+0xe8/0x150 [ 747.673990][T16480] should_fail_ex+0x410/0x560 [ 747.674021][T16480] _copy_from_iter+0x1d3/0x1660 [ 747.674049][T16480] ? kmem_cache_alloc_node_noprof+0x101/0x620 [ 747.674077][T16480] ? rcu_is_watching+0x16/0xb0 [ 747.674101][T16480] ? trace_kmem_cache_alloc+0x29/0xe0 [ 747.674128][T16480] ? kmem_cache_alloc_node_noprof+0x3bc/0x620 [ 747.674153][T16480] ? __pfx__copy_from_iter+0x10/0x10 [ 747.674180][T16480] ? __alloc_skb+0x27a/0x7a0 [ 747.674206][T16480] ? __alloc_skb+0x27a/0x7a0 [ 747.674238][T16480] ? netlink_sendmsg+0x650/0xb40 [ 747.674269][T16480] ? skb_put+0x112/0x210 [ 747.674299][T16480] netlink_sendmsg+0x6c0/0xb40 [ 747.674342][T16480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 747.674378][T16480] ? aa_sock_msg_perm+0xf6/0x1c0 [ 747.674415][T16480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 747.674448][T16480] sock_sendmsg_nosec+0x13a/0x180 [ 747.674474][T16480] ____sys_sendmsg+0x54e/0x850 [ 747.674510][T16480] ? __pfx_____sys_sendmsg+0x10/0x10 [ 747.674557][T16480] ___sys_sendmsg+0x2a5/0x360 [ 747.674588][T16480] ? __lock_acquire+0x683/0x2cf0 [ 747.674625][T16480] ? __pfx____sys_sendmsg+0x10/0x10 [ 747.674656][T16480] ? get_pid_task+0x20/0x1f0 [ 747.674689][T16480] ? get_pid_task+0x20/0x1f0 [ 747.674719][T16480] ? get_pid_task+0x20/0x1f0 [ 747.674781][T16480] ? __fget_files+0x2a/0x420 [ 747.674813][T16480] ? __fget_files+0x3a2/0x420 [ 747.674855][T16480] __sys_sendmsg+0x177/0x240 [ 747.674889][T16480] ? __pfx___sys_sendmsg+0x10/0x10 [ 747.674940][T16480] __do_fast_syscall_32+0x27a/0x6a0 [ 747.674977][T16480] ? do_fast_syscall_32+0x33/0x70 [ 747.675002][T16480] ? asm_int80_emulation+0x1a/0x20 [ 747.675025][T16480] ? do_int80_emulation+0x299/0x500 [ 747.675050][T16480] ? trace_irq_disable+0x3b/0x140 [ 747.675085][T16480] do_fast_syscall_32+0x33/0x70 [ 747.675111][T16480] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 747.675140][T16480] RIP: 0023:0xf7f280ec [ 747.675161][T16480] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 747.675180][T16480] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 747.675205][T16480] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 747.675222][T16480] RDX: 00000000040408c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 747.675236][T16480] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 747.675249][T16480] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 747.675262][T16480] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 747.675293][T16480] [ 747.990834][ T5709] usb 3-1: USB disconnect, device number 90 [ 748.045192][T16483] fuse: Invalid rootmode [ 748.098719][ T7635] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 748.235362][T16489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.273372][ T7635] usb 6-1: Using ep0 maxpacket: 8 [ 748.281086][ T7635] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 748.302119][ T7635] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 748.315418][ T7635] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 748.329181][ T7635] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 748.339769][ T7635] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 748.353145][ T7635] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.458839][ T5709] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 748.608663][ T5709] usb 3-1: Using ep0 maxpacket: 32 [ 748.615111][ T5709] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 748.626891][ T5709] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 748.635928][ T5709] usb 3-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config [ 748.647428][ T5709] usb 3-1: config 0 has no interface number 0 [ 748.655511][ T5709] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 748.666274][ T5709] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 748.678149][ T5709] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 748.691074][ T5709] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 748.702474][ T5762] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 748.711353][ T5709] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 748.722821][ T5709] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 748.736108][ T5709] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 107, changing to 10 [ 748.747856][ T5709] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid maxpacket 25209, setting to 1024 [ 748.760704][ T5709] usb 3-1: config 0 interface 239 has no altsetting 0 [ 748.778250][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.787092][ T5709] usb 3-1: Product: syz [ 748.792348][ T5709] usb 3-1: Manufacturer: syz [ 748.797329][ T5709] usb 3-1: SerialNumber: syz [ 748.805653][ T5709] usb 3-1: config 0 descriptor?? [ 748.816517][T16486] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 748.826827][T16486] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 748.869110][ T5762] usb 5-1: Using ep0 maxpacket: 8 [ 748.876500][ T5762] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 748.891312][ T5762] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 748.904335][ T5762] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 748.917324][ T5762] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 748.928261][ T5762] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 748.940192][ T5762] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 748.950984][ T5762] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.967760][ T5762] usb 5-1: config 0 descriptor?? [ 748.994441][T16496] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 749.205149][ T5762] usb 3-1: USB disconnect, device number 91 [ 749.216093][ T52] Bluetooth: hci1: BCM: Reset failed (-71) [ 749.233274][T16496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.255464][T16496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.272226][T16496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.301147][T16496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.352179][T16496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.389392][T16496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.400292][T16496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.460427][T16496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.472094][T16496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.483656][T16496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.543627][T16506] FAULT_INJECTION: forcing a failure. [ 749.543627][T16506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.561005][T16506] CPU: 0 UID: 0 PID: 16506 Comm: syz.0.3333 Tainted: G L syzkaller #0 PREEMPT(full) [ 749.561046][T16506] Tainted: [L]=SOFTLOCKUP [ 749.561055][T16506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 749.561069][T16506] Call Trace: [ 749.561078][T16506] [ 749.561088][T16506] dump_stack_lvl+0xe8/0x150 [ 749.561128][T16506] should_fail_ex+0x410/0x560 [ 749.561163][T16506] _copy_to_user+0x31/0xb0 [ 749.561200][T16506] simple_read_from_buffer+0xe1/0x170 [ 749.561239][T16506] proc_fail_nth_read+0x1bb/0x230 [ 749.561266][T16506] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 749.561292][T16506] ? rw_verify_area+0x24a/0x4c0 [ 749.561329][T16506] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 749.561351][T16506] vfs_read+0x213/0xa80 [ 749.561391][T16506] ? __pfx___mutex_lock+0x10/0x10 [ 749.561417][T16506] ? __pfx_vfs_read+0x10/0x10 [ 749.561452][T16506] ? __fget_files+0x2a/0x420 [ 749.561490][T16506] ? __fget_files+0x3a2/0x420 [ 749.561521][T16506] ? __fget_files+0x2a/0x420 [ 749.561562][T16506] ksys_read+0x150/0x270 [ 749.561598][T16506] ? __pfx_ksys_read+0x10/0x10 [ 749.561638][T16506] ? asm_int80_emulation+0x1a/0x20 [ 749.561666][T16506] do_int80_emulation+0x198/0x500 [ 749.561693][T16506] ? asm_int80_emulation+0x1a/0x20 [ 749.561714][T16506] ? clear_bhb_loop+0x70/0xc0 [ 749.561738][T16506] ? clear_bhb_loop+0x70/0xc0 [ 749.561767][T16506] asm_int80_emulation+0x1a/0x20 [ 749.561790][T16506] RIP: 0023:0xf71e74eb [ 749.561811][T16506] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 749.561838][T16506] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 749.561863][T16506] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f54a65d0 [ 749.561879][T16506] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 749.561893][T16506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 749.561907][T16506] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 749.561942][T16506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 749.561975][T16506] [ 749.767944][ T5708] usb 5-1: USB disconnect, device number 21 [ 749.833084][ T4929] Bluetooth: hci6: Opcode 0x0c03 failed: -19 [ 750.057221][T16514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3337'. [ 750.108697][ T5762] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 750.186049][T16516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3338'. [ 750.241744][T16518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3339'. [ 750.251900][ T5709] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 750.289477][ T5762] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 750.300249][ T5762] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 750.312621][ T5762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 750.325540][ T5762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 750.337511][ T5762] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 750.350990][ T5762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.367413][ T5762] usb 2-1: config 0 descriptor?? [ 750.389588][T16508] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 750.421841][ T5709] usb 3-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d [ 750.432880][ T5709] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 750.443016][ T5709] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 750.456308][ T5709] usb 3-1: config 8 has no interface number 0 [ 750.464362][ T5709] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 750.467880][T16523] fuse: Invalid rootmode [ 750.478155][ T5709] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 750.496785][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.505308][ T5709] usb 3-1: Product: syz [ 750.509961][ T5709] usb 3-1: Manufacturer: syz [ 750.515291][ T7635] usb 6-1: usb_control_msg returned -71 [ 750.525056][ T7635] usbtmc 6-1:16.0: can't read capabilities [ 750.537796][ T5709] usb 3-1: SerialNumber: syz [ 750.547829][ T7635] usb 6-1: USB disconnect, device number 95 [ 750.816919][ T5762] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 751.060842][ T7635] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 751.219738][ T7635] usb 6-1: Using ep0 maxpacket: 8 [ 751.225808][ T7635] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 751.240021][ T7635] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 751.260294][ T7635] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 751.272815][ T7635] usb 6-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 751.288693][ T7635] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 751.318429][ T7635] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 751.341921][ T7635] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 751.367001][ T7635] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.410288][ T5709] usb 3-1: USB disconnect, device number 92 [ 751.497294][T16538] input: syz0 as /devices/virtual/input/input53 [ 751.649393][ T7635] usb 6-1: GET_CAPABILITIES returned 0 [ 751.655494][ T7635] usbtmc 6-1:16.0: can't read capabilities [ 751.913826][ T7635] usb 6-1: USB disconnect, device number 96 [ 752.291392][T16558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3350'. [ 752.564209][T16567] fuse: Invalid rootmode [ 752.676095][T16574] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3354'. [ 752.695217][T16574] gtp1: entered promiscuous mode [ 752.700619][T16574] gtp1: entered allmulticast mode [ 752.865748][ T5709] usb 2-1: USB disconnect, device number 2 [ 753.028911][ T7635] usb 6-1: new full-speed USB device number 97 using dummy_hcd [ 753.097537][T16582] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3356'. [ 753.210150][ T7635] usb 6-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d [ 753.223905][ T7635] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 753.234978][ T7635] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 753.246283][ T7635] usb 6-1: config 8 has no interface number 0 [ 753.253203][ T7635] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 753.266577][ T7635] usb 6-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 753.283934][ T7635] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.294132][ T7635] usb 6-1: Product: syz [ 753.299992][ T7635] usb 6-1: Manufacturer: syz [ 753.305204][ T7635] usb 6-1: SerialNumber: syz [ 753.653516][ T30] kauditd_printk_skb: 98 callbacks suppressed [ 753.653538][ T30] audit: type=1326 audit(1787309041.058:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.0.3359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe80ec code=0x7ffc0000 [ 753.706419][T16591] netlink: 'syz.0.3359': attribute type 1 has an invalid length. [ 753.730273][T16592] fuse: Bad value for 'fd' [ 753.746069][ T30] audit: type=1326 audit(1787309041.058:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.0.3359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe80ec code=0x7ffc0000 [ 753.840410][T16591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 753.865901][ T30] audit: type=1326 audit(1787309041.098:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.0.3359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=122 compat=1 ip=0xf7fe80ec code=0x7ffc0000 [ 753.895213][T16594] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 753.946304][T16594] bond1: (slave batadv1): making interface the new active one [ 753.966667][ T30] audit: type=1326 audit(1787309041.098:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.0.3359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe80ec code=0x7ffc0000 [ 754.027485][ T30] audit: type=1326 audit(1787309041.098:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.0.3359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe80ec code=0x7ffc0000 [ 754.062835][T16594] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 754.119207][ T30] audit: type=1326 audit(1787309041.098:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.0.3359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=367 compat=1 ip=0xf7fe80ec code=0x7ffc0000 [ 754.229159][ T30] audit: type=1326 audit(1787309041.098:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.0.3359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe80ec code=0x7ffc0000 [ 754.311053][ T7635] usb 6-1: USB disconnect, device number 97 [ 754.334871][ T30] audit: type=1326 audit(1787309041.108:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.0.3359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fe80ec code=0x7ffc0000 [ 754.401752][ T30] audit: type=1326 audit(1787309041.258:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.0.3359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe80ec code=0x7ffc0000 [ 754.445491][T16604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3365'. [ 754.495285][ T30] audit: type=1326 audit(1787309041.258:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.0.3359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe80ec code=0x7ffc0000 [ 754.580023][T16611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.595217][T16611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.818808][ T7636] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 754.853981][ T1155] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.868859][ T7635] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 755.011701][ T7636] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 755.031325][ T7635] usb 6-1: device descriptor read/64, error -71 [ 755.043893][ T7636] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 755.082876][ T7636] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 755.134823][ T1155] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.147345][ T7636] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 755.182301][ T7636] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 755.219447][ T7636] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.256748][ T7636] usb 2-1: config 0 descriptor?? [ 755.271418][T16610] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 755.407822][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 755.432448][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 755.441824][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 755.451643][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 755.460350][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 755.490034][ T1155] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.585857][T16624] veth1_to_batadv: entered promiscuous mode [ 755.693987][ T1155] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.740487][ T7636] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 755.831854][T16631] syzkaller0: entered promiscuous mode [ 755.837609][T16631] syzkaller0: entered allmulticast mode [ 756.009307][ T7635] usb 6-1: new full-speed USB device number 99 using dummy_hcd [ 756.083314][T16637] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3375'. [ 756.199164][ T7635] usb 6-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d [ 756.236100][ T7635] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 756.244575][ T7635] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 756.270283][ T7635] usb 6-1: config 8 has no interface number 0 [ 756.308873][ T7635] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 756.320371][ T7635] usb 6-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 756.371438][ T7635] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.380140][ T7635] usb 6-1: Product: syz [ 756.385687][ T7635] usb 6-1: Manufacturer: syz [ 756.398795][ T7635] usb 6-1: SerialNumber: syz [ 756.904264][T16640] sctp: [Deprecated]: syz.0.3376 (pid 16640) Use of int in max_burst socket option. [ 756.904264][T16640] Use struct sctp_assoc_value instead [ 757.185391][ T5709] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 757.341450][ T5709] usb 1-1: not running at top speed; connect to a high speed hub [ 757.349766][ T5709] usb 1-1: New USB device found, idVendor=03f0, idProduct=2a76, bcdDevice=b8.a5 [ 757.361234][ T5709] usb 1-1: config 11 has an invalid interface number: 31 but max is 2 [ 757.371033][ T5709] usb 1-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 757.381393][ T5709] usb 1-1: config 11 has an invalid interface number: 188 but max is 2 [ 757.390304][ T5709] usb 1-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 757.401447][ T5709] usb 1-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 757.410503][ T5709] usb 1-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 757.419591][ T5709] usb 1-1: config 11 has an invalid descriptor of length 1, skipping remainder of the config [ 757.430218][ T5709] usb 1-1: config 11 has 2 interfaces, different from the descriptor's value: 3 [ 757.440858][ T5709] usb 1-1: config 11 has no interface number 0 [ 757.447348][ T5709] usb 1-1: config 11 has no interface number 1 [ 757.454196][ T5709] usb 1-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 757.465656][ T5709] usb 1-1: config 11 interface 31 altsetting 10 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 757.490945][ T5709] usb 1-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x5, skipping [ 757.502459][ T5709] usb 1-1: config 11 interface 31 altsetting 10 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 757.514852][ T5709] usb 1-1: config 11 interface 31 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 757.526411][ T5709] usb 1-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xB, skipping [ 757.537695][ T5709] usb 1-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xE, skipping [ 757.549130][ T5709] usb 1-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x1, skipping [ 757.560745][ T5709] usb 1-1: config 11 interface 188 altsetting 27 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 757.572454][ T5709] usb 1-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x5, skipping [ 757.583775][ T5709] usb 1-1: config 11 interface 188 altsetting 27 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 757.622428][ T52] Bluetooth: hci1: command tx timeout [ 757.656133][ T5709] usb 1-1: config 11 interface 188 altsetting 27 has an invalid descriptor for endpoint zero, skipping [ 757.668865][ T5709] usb 1-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xA, skipping [ 757.681033][ T5709] usb 1-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xB, skipping [ 757.692234][ T5709] usb 1-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 757.703524][ T5709] usb 1-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xC, skipping [ 757.714657][ T5709] usb 1-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 757.725992][ T5709] usb 1-1: config 11 interface 31 has no altsetting 0 [ 757.732962][ T5709] usb 1-1: config 11 interface 188 has no altsetting 0 [ 757.743255][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.752835][ T5709] usb 1-1: Product: 㰁 [ 757.757090][ T5709] usb 1-1: Manufacturer: Ч [ 757.762331][ T5709] usb 1-1: SerialNumber: Ў [ 758.044630][T16641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3376'. [ 758.053694][T16641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3376'. [ 758.081525][T16642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3376'. [ 758.091433][T16642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3376'. [ 758.179230][ T24] usb 2-1: USB disconnect, device number 3 [ 758.471851][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3378'. [ 758.858956][ T7627] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 759.029060][ T7627] usb 2-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.00 [ 759.041785][ T7627] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.063500][ T7627] usb 2-1: config 0 descriptor?? [ 759.496866][ T7627] asus 0003:0B05:1866.003A: unknown main item tag 0x0 [ 759.507188][ T7627] asus 0003:0B05:1866.003A: unknown main item tag 0x0 [ 759.514653][ T7627] asus 0003:0B05:1866.003A: unknown main item tag 0x0 [ 759.522117][ T7627] asus 0003:0B05:1866.003A: unknown main item tag 0x0 [ 759.531065][ T7627] asus 0003:0B05:1866.003A: unknown main item tag 0x0 [ 759.538471][ T7627] asus 0003:0B05:1866.003A: unknown main item tag 0x0 [ 759.545770][ T7627] asus 0003:0B05:1866.003A: unknown main item tag 0x0 [ 759.553539][ T7627] asus 0003:0B05:1866.003A: unknown main item tag 0x0 [ 759.572148][ T7627] asus 0003:0B05:1866.003A: hidraw0: USB HID vef.fd Device [HID 0b05:1866] on usb-dummy_hcd.1-1/input0 [ 759.727996][ T52] Bluetooth: hci1: command tx timeout [ 761.597982][ T24] usb 6-1: USB disconnect, device number 99 [ 761.668481][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3380'. [ 761.706784][T16652] netlink: 'syz.2.3380': attribute type 30 has an invalid length. [ 761.775289][ T5708] usb 2-1: USB disconnect, device number 4 [ 761.791115][T13565] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.806645][ T52] Bluetooth: hci1: command tx timeout [ 761.845326][ T5709] usb 1-1: USB disconnect, device number 20 [ 762.088808][ T7636] usb 6-1: new low-speed USB device number 100 using dummy_hcd [ 762.130066][T13567] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 762.218887][ T5708] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 762.229425][T13567] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 762.260539][ T1155] bridge_slave_1: left allmulticast mode [ 762.266888][ T1155] bridge_slave_1: left promiscuous mode [ 762.273577][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.286050][ T7636] usb 6-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 762.303239][ T7636] usb 6-1: config 0 has an invalid interface number: 244 but max is 0 [ 762.314297][ T1155] bridge_slave_0: left allmulticast mode [ 762.321450][ T7636] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.331784][ T1155] bridge_slave_0: left promiscuous mode [ 762.338073][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.346003][ T7636] usb 6-1: config 0 has no interface number 0 [ 762.356481][ T7636] usb 6-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 762.375913][ T7636] usb 6-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 762.388730][ T5708] usb 2-1: Using ep0 maxpacket: 32 [ 762.416755][ T7636] usb 6-1: config 0 interface 244 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 8 [ 762.422005][ T5708] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 762.441597][ T5709] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 762.449461][ T7636] usb 6-1: config 0 interface 244 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 8 [ 762.474270][ T7636] usb 6-1: config 0 interface 244 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt [ 762.489927][ T5708] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 762.498055][ T7636] usb 6-1: config 0 interface 244 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 762.498089][ T7636] usb 6-1: config 0 interface 244 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 15 [ 762.542687][ T7636] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.580345][ T5708] usb 2-1: config 0 has no interface number 0 [ 762.590160][ T7636] usb 6-1: config 0 descriptor?? [ 762.622619][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.630915][T16657] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 762.631259][ T5709] usb 3-1: Using ep0 maxpacket: 8 [ 762.657097][ T5708] usb 2-1: Product: syz [ 762.669397][ T5708] usb 2-1: Manufacturer: syz [ 762.674229][ T5708] usb 2-1: SerialNumber: syz [ 762.680429][ T5709] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 762.702038][ T5709] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 762.712578][ T5708] usb 2-1: config 0 descriptor?? [ 762.718643][ T5709] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 762.767190][ T5709] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 762.817694][ T5709] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 762.879059][ T5709] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 762.900247][ T7636] usb 6-1: string descriptor 0 read error: -71 [ 762.932939][ T7636] cypress_m8 6-1:0.244: DeLorme Earthmate USB converter detected [ 762.995103][ T7636] earthmate ttyUSB0: required endpoint is missing [ 763.002627][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.070637][ T7636] usb 6-1: USB disconnect, device number 100 [ 763.117883][ T7636] cypress_m8 6-1:0.244: device disconnected [ 763.185836][ T5708] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 763.215966][ T5708] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 763.239254][ T5709] usb 3-1: usb_control_msg returned -32 [ 763.255302][ T5709] usbtmc 3-1:16.0: can't read capabilities [ 763.346024][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.371617][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.399937][ T1155] bond0 (unregistering): Released all slaves [ 763.509642][T13567] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.791556][T16677] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 763.836408][ T8082] usb 3-1: USB disconnect, device number 93 [ 763.879194][ T52] Bluetooth: hci1: command tx timeout [ 764.067019][ T30] audit: type=1326 audit(1787309051.468:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16679 comm="syz.5.3384" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705f0ec code=0x0 [ 764.261304][ T1155] hsr_slave_0: left promiscuous mode [ 764.271895][T16689] FAULT_INJECTION: forcing a failure. [ 764.271895][T16689] name failslab, interval 1, probability 0, space 9, times 0 [ 764.287980][ T1155] hsr_slave_1: left promiscuous mode [ 764.288294][T16689] CPU: 1 UID: 0 PID: 16689 Comm: syz.0.3385 Tainted: G L syzkaller #0 PREEMPT(full) [ 764.288383][T16689] Tainted: [L]=SOFTLOCKUP [ 764.288405][T16689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 764.288439][T16689] Call Trace: [ 764.288470][T16689] [ 764.288494][T16689] dump_stack_lvl+0xe8/0x150 [ 764.288601][T16689] should_fail_ex+0x410/0x560 [ 764.288699][T16689] should_failslab+0xa8/0x100 [ 764.288801][T16689] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 764.288878][T16689] ? __kernfs_new_node+0xe6/0x980 [ 764.288991][T16689] ? __kernfs_new_node+0xe6/0x980 [ 764.289076][T16689] __kernfs_new_node+0xe6/0x980 [ 764.289150][T16689] ? __pfx___kernfs_new_node+0x10/0x10 [ 764.289193][T16689] ? kernfs_root+0x1c/0x230 [ 764.289274][T16689] ? kernfs_root+0x1c/0x230 [ 764.289337][T16689] ? kernfs_root+0x1c/0x230 [ 764.289382][T16689] ? kernfs_root+0x1c/0x230 [ 764.289456][T16689] kernfs_new_node+0xea/0x140 [ 764.289541][T16689] __kernfs_create_file+0x4b/0x2e0 [ 764.289660][T16689] sysfs_add_file_mode_ns+0x237/0x300 [ 764.289773][T16689] internal_create_group+0x679/0x1180 [ 764.289871][T16689] ? __pfx_internal_create_group+0x10/0x10 [ 764.289944][T16689] ? up_write+0x19d/0x4a0 [ 764.290030][T16689] sysfs_create_groups+0x59/0x120 [ 764.290096][T16689] device_add_attrs+0x12c/0x600 [ 764.290317][T16689] ? __pfx_device_add_attrs+0x10/0x10 [ 764.290384][T16689] ? kobject_put+0x50f/0x550 [ 764.290522][T16689] ? device_add_class_symlinks+0x21f/0x240 [ 764.290608][T16689] device_add+0x488/0xb80 [ 764.290684][T16689] input_register_device+0x9d7/0x1150 [ 764.290828][T16689] uinput_create_device+0x53e/0x690 [ 764.291020][T16689] uinput_ioctl_handler+0x433/0x15a0 [ 764.291125][T16689] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 764.291242][T16689] ? __fget_files+0x2a/0x420 [ 764.291356][T16689] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 764.291435][T16689] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 764.291501][T16689] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 764.291584][T16689] ? __fget_files+0x3a2/0x420 [ 764.291681][T16689] ? fput+0xa0/0xd0 [ 764.291758][T16689] ? ksys_write+0x242/0x270 [ 764.291883][T16689] __do_fast_syscall_32+0x27a/0x6a0 [ 764.291952][T16689] ? do_fast_syscall_32+0x33/0x70 [ 764.292017][T16689] ? asm_int80_emulation+0x1a/0x20 [ 764.292080][T16689] ? do_int80_emulation+0x299/0x500 [ 764.292156][T16689] do_fast_syscall_32+0x33/0x70 [ 764.292222][T16689] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 764.292316][T16689] RIP: 0023:0xf7fe80ec [ 764.292385][T16689] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 764.292438][T16689] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 764.292494][T16689] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005501 [ 764.292537][T16689] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 764.292578][T16689] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 764.292611][T16689] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 764.292645][T16689] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 764.292730][T16689] [ 764.671315][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 764.699005][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.725049][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.742840][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.813142][ T1155] veth1_macvtap: left promiscuous mode [ 764.819322][ T1155] veth0_macvtap: left promiscuous mode [ 764.825076][ T1155] veth1_vlan: left promiscuous mode [ 764.832424][ T1155] veth0_vlan: left promiscuous mode [ 764.926029][ T5708] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -61 [ 764.948028][ T5708] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 764.983826][T16697] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3386'. [ 765.028721][ T7636] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 765.204063][ T7636] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 765.222189][ T7636] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 765.247136][ T7636] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 765.273558][ T7636] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 765.301076][ T7636] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 765.333532][ T7636] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.368161][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 765.376216][ T7636] usb 6-1: config 0 descriptor?? [ 765.384649][T16695] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 765.415897][ T1155] team0 (unregistering): Port device team_slave_0 removed [ 765.656700][ T5708] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 765.677300][ T5708] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 765.728451][ T5708] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 765.770975][T16701] loop9: detected capacity change from 0 to 7 [ 765.893573][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5 [ 765.903115][T16701] Buffer I/O error on dev loop9, logical block 0, async page read [ 765.991981][T16701] Buffer I/O error on dev loop9, logical block 0, async page read [ 766.037990][T16703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3389'. [ 766.044080][T16701] Buffer I/O error on dev loop9, logical block 0, async page read [ 766.061923][T16701] Buffer I/O error on dev loop9, logical block 0, async page read [ 766.119559][T16701] Buffer I/O error on dev loop9, logical block 0, async page read [ 766.131463][ T5762] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 766.141658][T16701] Buffer I/O error on dev loop9, logical block 0, async page read [ 766.154235][T16701] Buffer I/O error on dev loop9, logical block 0, async page read [ 766.161314][T16703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3389'. [ 766.172612][T16701] ldm_validate_partition_table(): Disk read failed. [ 766.197717][T16701] Buffer I/O error on dev loop9, logical block 0, async page read [ 766.203826][T16702] fido_id[16702]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 766.233690][T16701] Buffer I/O error on dev loop9, logical block 0, async page read [ 766.248104][T16703] netlink: 'syz.0.3389': attribute type 18 has an invalid length. [ 766.264948][T16701] Buffer I/O error on dev loop9, logical block 0, async page read [ 766.320201][T16701] Dev loop9: unable to read RDB block 0 [ 766.327204][T16701] loop9: unable to read partition table [ 766.348235][T16708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.370134][T16701] loop9: partition table beyond EOD, truncated [ 766.401020][T16701] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 766.401020][T16701] ) failed (rc=-5) [ 766.425183][T16708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.812431][ T7627] usb 2-1: USB disconnect, device number 5 [ 766.925940][T16629] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.974966][T16629] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.996003][T16629] bridge_slave_0: entered allmulticast mode [ 767.011545][T16718] sctp: [Deprecated]: syz.1.3391 (pid 16718) Use of int in max_burst socket option. [ 767.011545][T16718] Use struct sctp_assoc_value instead [ 767.040862][T16629] bridge_slave_0: entered promiscuous mode [ 767.115137][T16629] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.149849][T16629] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.173157][T16629] bridge_slave_1: entered allmulticast mode [ 767.194121][T16629] bridge_slave_1: entered promiscuous mode [ 767.325325][T16716] syzkaller0: entered promiscuous mode [ 767.357052][T16716] syzkaller0: entered allmulticast mode [ 767.431101][ T5708] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 767.592001][ T5708] usb 2-1: not running at top speed; connect to a high speed hub [ 767.609966][ T5708] usb 2-1: New USB device found, idVendor=03f0, idProduct=2a76, bcdDevice=b8.a5 [ 767.637327][ T5708] usb 2-1: config 11 has an invalid interface number: 31 but max is 2 [ 767.650467][ T5708] usb 2-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 767.687603][ T5708] usb 2-1: config 11 has an invalid interface number: 188 but max is 2 [ 767.710607][ T5708] usb 2-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 767.737941][ T5708] usb 2-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 767.760783][ T5708] usb 2-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 767.785659][ T5708] usb 2-1: config 11 has an invalid descriptor of length 1, skipping remainder of the config [ 767.818307][ T5708] usb 2-1: config 11 has 2 interfaces, different from the descriptor's value: 3 [ 767.855343][ T5708] usb 2-1: config 11 has no interface number 0 [ 767.881683][ T5708] usb 2-1: config 11 has no interface number 1 [ 767.897600][ T5708] usb 2-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 767.927491][ T5708] usb 2-1: config 11 interface 31 altsetting 10 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 767.968849][ T5708] usb 2-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x5, skipping [ 767.998378][ T5708] usb 2-1: config 11 interface 31 altsetting 10 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 768.057401][ T5708] usb 2-1: config 11 interface 31 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 768.108634][ T5708] usb 2-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xB, skipping [ 768.125810][ T5708] usb 2-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xE, skipping [ 768.138284][ T5708] usb 2-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x1, skipping [ 768.151177][ T5708] usb 2-1: config 11 interface 188 altsetting 27 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 768.201250][ T5708] usb 2-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x5, skipping [ 768.243989][ T5708] usb 2-1: config 11 interface 188 altsetting 27 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 768.278040][ T5708] usb 2-1: config 11 interface 188 altsetting 27 has an invalid descriptor for endpoint zero, skipping [ 768.285593][ T7636] usbhid 6-1:0.0: can't add hid device: -71 [ 768.289635][ T5708] usb 2-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xA, skipping [ 768.315395][ T7636] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 768.335162][ T5708] usb 2-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xB, skipping [ 768.348358][ T7636] usb 6-1: USB disconnect, device number 101 [ 768.370664][ T5708] usb 2-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 768.391102][ T5708] usb 2-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xC, skipping [ 768.402350][ T5708] usb 2-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 768.440703][ T5708] usb 2-1: config 11 interface 31 has no altsetting 0 [ 768.465996][ T5708] usb 2-1: config 11 interface 188 has no altsetting 0 [ 768.510155][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.518445][ T5708] usb 2-1: Product: 㰁 [ 768.522864][ T5708] usb 2-1: Manufacturer: Ч [ 768.527452][ T5708] usb 2-1: SerialNumber: Ў [ 768.809836][T16722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3391'. [ 768.821280][T16722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3391'. [ 768.869670][T16739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3391'. [ 768.905616][T16739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3391'. [ 769.440680][T16747] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3394'. [ 772.955217][ T5275] 8021q: adding VLAN 0 to HW filter on device eth6 [ 772.989149][T13565] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.104823][T16629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.160001][ T5708] usb 2-1: USB disconnect, device number 6 [ 773.166882][T16629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.237205][T16759] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3399'. [ 773.330892][T16629] team0: Port device team_slave_0 added [ 773.338840][T13564] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.354615][T16629] team0: Port device team_slave_1 added [ 773.473896][T16629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.504040][T16629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.567754][T16771] input: syz0 as /devices/virtual/input/input56 [ 773.582114][T16629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.664597][T16629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.689377][T16629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.771369][T16629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.836469][T16773] tipc: Started in network mode [ 773.874013][T16773] tipc: Node identity 2000004, cluster identity 4711 [ 773.930658][T16773] tipc: Node number set to 33554436 [ 774.216203][T16629] hsr_slave_0: entered promiscuous mode [ 774.252647][T16629] hsr_slave_1: entered promiscuous mode [ 774.274290][T16629] debugfs: 'hsr0' already exists in 'hsr' [ 774.305284][T16629] Cannot create hsr debugfs directory [ 774.569114][ T1155] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.838489][T16791] PKCS8: Unsupported PKCS#8 version [ 774.908637][ T7627] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 775.071064][ T7627] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 775.131027][ T1155] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.141176][ T7627] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 775.183818][ T7627] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 775.227167][ T7627] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 775.273790][ T7627] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 775.320712][ T7627] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.362158][ T7627] usb 2-1: config 0 descriptor?? [ 775.376005][T16788] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 775.647226][T16804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3408'. [ 775.748197][T16808] sctp: [Deprecated]: syz.5.3409 (pid 16808) Use of int in max_burst socket option. [ 775.748197][T16808] Use struct sctp_assoc_value instead [ 775.948707][ T5709] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 776.069637][ T5762] usb 6-1: new full-speed USB device number 102 using dummy_hcd [ 776.128820][ T5709] usb 1-1: Using ep0 maxpacket: 8 [ 776.137933][ T5709] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 776.189451][ T5709] usb 1-1: config 0 interface 0 has no altsetting 0 [ 776.211576][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.246859][ T5709] usb 1-1: config 0 descriptor?? [ 776.263991][ T5762] usb 6-1: not running at top speed; connect to a high speed hub [ 776.286204][ T5762] usb 6-1: New USB device found, idVendor=03f0, idProduct=2a76, bcdDevice=b8.a5 [ 776.324138][ T5762] usb 6-1: config 11 has an invalid interface number: 31 but max is 2 [ 776.345448][ T5762] usb 6-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 776.385969][ T5762] usb 6-1: config 11 has an invalid interface number: 188 but max is 2 [ 776.414038][ T5762] usb 6-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 776.440251][ T5762] usb 6-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 776.475597][ T5762] usb 6-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 776.526432][ T5762] usb 6-1: config 11 has an invalid descriptor of length 1, skipping remainder of the config [ 776.567721][ T5762] usb 6-1: config 11 has 2 interfaces, different from the descriptor's value: 3 [ 776.592139][ T5762] usb 6-1: config 11 has no interface number 0 [ 776.620554][ T5762] usb 6-1: config 11 has no interface number 1 [ 776.640247][ T5762] usb 6-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 776.680266][ T5762] usb 6-1: config 11 interface 31 altsetting 10 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 776.713826][ T5762] usb 6-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x5, skipping [ 776.730342][ T5709] logitech 0003:046D:C298.003C: ignoring exceeding usage max [ 776.763352][ T5762] usb 6-1: config 11 interface 31 altsetting 10 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 776.776253][ T5709] logitech 0003:046D:C298.003C: item fetching failed at offset 35/36 [ 776.801835][ T5762] usb 6-1: config 11 interface 31 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 776.813568][ T5709] logitech 0003:046D:C298.003C: parse failed [ 776.813683][ T5709] logitech 0003:046D:C298.003C: probe with driver logitech failed with error -22 [ 776.896780][ T5762] usb 6-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xB, skipping [ 776.939296][ T8082] usb 1-1: USB disconnect, device number 22 [ 776.948411][ T5762] usb 6-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xE, skipping [ 776.984960][ T5762] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x1, skipping [ 777.053763][ T5762] usb 6-1: config 11 interface 188 altsetting 27 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 777.087985][ T5762] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x5, skipping [ 777.138445][ T5762] usb 6-1: config 11 interface 188 altsetting 27 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 777.179490][ T5762] usb 6-1: config 11 interface 188 altsetting 27 has an invalid descriptor for endpoint zero, skipping [ 777.210404][ T5762] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xA, skipping [ 777.243709][ T5762] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xB, skipping [ 777.272378][ T5762] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 777.310517][ T5762] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xC, skipping [ 777.340367][ T5762] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 777.366462][ T5762] usb 6-1: config 11 interface 31 has no altsetting 0 [ 777.396049][T16629] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 777.403109][ T5762] usb 6-1: config 11 interface 188 has no altsetting 0 [ 777.414705][ T5762] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.430734][ T5762] usb 6-1: Product: 㰁 [ 777.447611][T16629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 777.447628][ T5762] usb 6-1: Manufacturer: Ч [ 777.472660][T16629] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 777.476774][ T5762] usb 6-1: SerialNumber: Ў [ 777.552300][T16629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 777.582146][T16629] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 777.611250][T16629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 777.626991][T16629] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 777.653908][ T7627] usbhid 2-1:0.0: can't add hid device: -71 [ 777.684646][ T7627] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 777.700544][T16629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 777.719851][T16830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3412'. [ 777.732322][ T7627] usb 2-1: USB disconnect, device number 7 [ 777.740379][T16808] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3409'. [ 777.773411][T16808] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3409'. [ 777.792140][T16840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3409'. [ 777.810392][T16840] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3409'. [ 777.844273][T16833] input: syz1 as /devices/virtual/input/input57 [ 777.946018][ T5762] usb 6-1: USB disconnect, device number 102 [ 778.115982][T16629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.173267][T16629] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.192827][T13569] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.200064][T13569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.233174][T13569] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.240505][T13569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.379126][ T7635] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 778.493368][T16629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.540049][ T7635] usb 1-1: Using ep0 maxpacket: 8 [ 778.562670][ T7635] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 778.641268][ T7635] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.661699][ T7635] usb 1-1: Product: syz [ 778.677530][ T7635] usb 1-1: Manufacturer: syz [ 778.701375][ T7635] usb 1-1: SerialNumber: syz [ 778.740053][ T7635] usb 1-1: config 0 descriptor?? [ 778.751365][T16629] veth0_vlan: entered promiscuous mode [ 778.811462][T16629] veth1_vlan: entered promiscuous mode [ 778.917401][T16629] veth0_macvtap: entered promiscuous mode [ 778.959911][T16629] veth1_macvtap: entered promiscuous mode [ 778.975006][ T7635] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 779.065354][T16629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 779.186533][T16629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 779.257389][ T5709] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 779.280560][T13569] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.298032][ T5709] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 779.317919][T13569] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.370773][T13569] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.418114][T13569] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.681061][ T7635] usb write operation failed. (-71) [ 779.747332][ T7635] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 779.793096][ T7635] dvbdev: DVB: registering new adapter (Terratec H7) [ 779.826640][ T7635] usb 1-1: media controller created [ 779.839176][ T7635] usb read operation failed. (-71) [ 779.846660][ T7635] usb write operation failed. (-71) [ 779.932278][ T7635] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 779.968457][ T7635] usb 1-1: USB disconnect, device number 23 [ 780.073034][T13572] IPVS: starting estimator thread 0... [ 780.136860][T16891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3422'. [ 780.150747][T13572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.178288][T13572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.209975][T16888] IPVS: using max 28 ests per chain, 67200 per kthread [ 780.253644][T16897] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 780.450534][T13567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.472420][T13567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.669736][ T5709] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 780.687271][T16910] fuse: Bad value for 'rootmode' [ 780.850838][ T5709] usb 1-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d [ 780.882853][ T5709] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 780.911785][ T5709] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 780.961585][ T5709] usb 1-1: config 8 has no interface number 0 [ 780.989526][T16921] sctp: [Deprecated]: syz.2.3426 (pid 16921) Use of int in max_burst socket option. [ 780.989526][T16921] Use struct sctp_assoc_value instead [ 781.007314][ T5709] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 781.066171][ T5709] usb 1-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 781.127289][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.154300][ T5709] usb 1-1: Product: syz [ 781.186491][ T5709] usb 1-1: Manufacturer: syz [ 781.216239][ T5709] usb 1-1: SerialNumber: syz [ 781.478805][ T7627] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 781.539607][ T5708] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 781.650153][ T8082] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 781.663189][ T7627] usb 3-1: not running at top speed; connect to a high speed hub [ 781.681106][ T7627] usb 3-1: New USB device found, idVendor=03f0, idProduct=2a76, bcdDevice=b8.a5 [ 781.701388][ T7627] usb 3-1: config 11 has an invalid interface number: 31 but max is 2 [ 781.718023][ T7627] usb 3-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 781.730080][ T5708] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 781.747258][ T7627] usb 3-1: config 11 has an invalid interface number: 188 but max is 2 [ 781.758308][ T7627] usb 3-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 781.767637][ T7627] usb 3-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 781.773489][ T5708] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 781.789927][ T5708] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 781.802976][ T7627] usb 3-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 781.806319][ T5708] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 781.826318][ T5708] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 781.837012][ T7627] usb 3-1: config 11 has an invalid descriptor of length 1, skipping remainder of the config [ 781.858925][ T5708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.875671][ T8082] usb 2-1: unable to get BOS descriptor or descriptor too short [ 781.884010][ T8082] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 781.895406][ T7627] usb 3-1: config 11 has 2 interfaces, different from the descriptor's value: 3 [ 781.906607][ T5708] usb 6-1: config 0 descriptor?? [ 781.923865][ T8082] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 781.930157][ T7627] usb 3-1: config 11 has no interface number 0 [ 781.943734][T16933] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 781.951735][ T8082] usb 2-1: can't read configurations, error -71 [ 781.954978][ T7627] usb 3-1: config 11 has no interface number 1 [ 781.989209][ T7627] usb 3-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 782.004844][ T7627] usb 3-1: config 11 interface 31 altsetting 10 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 782.022374][ T7627] usb 3-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x5, skipping [ 782.033573][ T7627] usb 3-1: config 11 interface 31 altsetting 10 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 782.045727][ T7627] usb 3-1: config 11 interface 31 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 782.057092][ T7627] usb 3-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xB, skipping [ 782.071892][ T7627] usb 3-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xE, skipping [ 782.098726][ T7627] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x1, skipping [ 782.122232][ T7627] usb 3-1: config 11 interface 188 altsetting 27 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 782.150390][ T7627] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x5, skipping [ 782.173688][ T7627] usb 3-1: config 11 interface 188 altsetting 27 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 782.208367][ T5709] usb 1-1: USB disconnect, device number 24 [ 782.213530][ T7627] usb 3-1: config 11 interface 188 altsetting 27 has an invalid descriptor for endpoint zero, skipping [ 782.251657][ T7627] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xA, skipping [ 782.272124][ T7627] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xB, skipping [ 782.296748][ T7627] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 782.318268][ T7627] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xC, skipping [ 782.344252][ T7627] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 782.368682][ T7627] usb 3-1: config 11 interface 31 has no altsetting 0 [ 782.378720][ T5791] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 782.379829][ T7627] usb 3-1: config 11 interface 188 has no altsetting 0 [ 782.415758][ T7627] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.433136][ T7627] usb 3-1: Product: 㰁 [ 782.443806][ T7627] usb 3-1: Manufacturer: Ч [ 782.464993][ T7627] usb 3-1: SerialNumber: Ў [ 782.549706][ T5791] usb 5-1: New USB device found, idVendor=15c2, idProduct=2204, bcdDevice= 0.00 [ 782.590815][ T5791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.632242][ T5791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.660782][ T5791] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 782.703867][ T5791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.752400][T16928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3426'. [ 782.776513][ T5791] usb 5-1: config 0 descriptor?? [ 782.807430][T16921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3426'. [ 782.888777][T16928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3426'. [ 782.906456][T16921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3426'. [ 783.000944][T16965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3435'. [ 783.055632][ T5791] usbhid 5-1:0.0: can't add hid device: -71 [ 783.059447][ T7627] usb 3-1: USB disconnect, device number 94 [ 783.083142][ T5791] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 783.160907][ T5791] usb 5-1: USB disconnect, device number 22 [ 783.219126][ T5762] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 783.391728][ T5762] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 783.410208][ T5762] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 783.431912][ T5762] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 783.458358][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.468586][ T5762] usb 2-1: Product: syz [ 783.476866][ T5762] usb 2-1: Manufacturer: syz [ 783.492097][ T5762] usb 2-1: SerialNumber: syz [ 783.876543][T16980] fuse: Bad value for 'rootmode' [ 783.988688][ T5762] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 784.085203][ T5762] usb 2-1: USB disconnect, device number 10 [ 784.096026][ T5708] usbhid 6-1:0.0: can't add hid device: -71 [ 784.107577][ T5708] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 784.149856][ T5708] usb 6-1: USB disconnect, device number 103 [ 784.161889][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 784.658696][ T5708] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 784.829754][ T5708] usb 1-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d [ 784.859680][T17000] openvswitch: netlink: Flow actions attr not present in new flow. [ 784.885637][ T5708] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 784.923477][ T5708] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 784.967225][ T5708] usb 1-1: config 8 has no interface number 0 [ 784.995121][ T5708] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 785.034631][ T5708] usb 1-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 785.097846][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.123447][ T5708] usb 1-1: Product: syz [ 785.128630][ T7635] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 785.139523][ T5708] usb 1-1: Manufacturer: syz [ 785.146009][ T5708] usb 1-1: SerialNumber: syz [ 785.198740][ T24] usb 6-1: new full-speed USB device number 104 using dummy_hcd [ 785.233277][T17008] sctp: [Deprecated]: syz.4.3448 (pid 17008) Use of int in max_burst socket option. [ 785.233277][T17008] Use struct sctp_assoc_value instead [ 785.299370][ T7635] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 785.320538][ T7635] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.331779][ T7635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.362789][ T7635] usb 3-1: config 0 descriptor?? [ 785.372924][ T24] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 785.405936][ T7635] pwc: Askey VC010 type 2 USB webcam detected. [ 785.407895][ T24] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 785.438110][ T24] usb 6-1: Product: syz [ 785.448873][ T24] usb 6-1: SerialNumber: syz [ 785.474273][ T24] usb 6-1: config 0 descriptor?? [ 785.488435][ T24] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 785.528740][ T8082] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 785.540164][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 785.577196][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 785.701800][ T8082] usb 5-1: not running at top speed; connect to a high speed hub [ 785.713507][ T8082] usb 5-1: New USB device found, idVendor=03f0, idProduct=2a76, bcdDevice=b8.a5 [ 785.728956][ T24] usb 6-1: USB disconnect, device number 104 [ 785.745400][ T8082] usb 5-1: config 11 has an invalid interface number: 31 but max is 2 [ 785.768751][ T8082] usb 5-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 785.785234][ T8082] usb 5-1: config 11 has an invalid interface number: 188 but max is 2 [ 785.794191][ T8082] usb 5-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 785.809311][ T8082] usb 5-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 785.819100][ T8082] usb 5-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 785.828077][ T8082] usb 5-1: config 11 has an invalid descriptor of length 1, skipping remainder of the config [ 785.840828][ T8082] usb 5-1: config 11 has 2 interfaces, different from the descriptor's value: 3 [ 785.856147][ T7635] pwc: recv_control_msg error -32 req 02 val 2b00 [ 785.856706][ T8082] usb 5-1: config 11 has no interface number 0 [ 785.872013][ T8082] usb 5-1: config 11 has no interface number 1 [ 785.879656][ T8082] usb 5-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 785.896004][ T7635] pwc: recv_control_msg error -32 req 02 val 2700 [ 785.902799][ T8082] usb 5-1: config 11 interface 31 altsetting 10 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 785.902840][ T8082] usb 5-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x5, skipping [ 785.902869][ T8082] usb 5-1: config 11 interface 31 altsetting 10 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 785.902898][ T8082] usb 5-1: config 11 interface 31 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 785.902952][ T8082] usb 5-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xB, skipping [ 785.902980][ T8082] usb 5-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xE, skipping [ 785.903027][ T8082] usb 5-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x1, skipping [ 785.903055][ T8082] usb 5-1: config 11 interface 188 altsetting 27 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 786.003560][ T8082] usb 5-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x5, skipping [ 786.024405][ T8082] usb 5-1: config 11 interface 188 altsetting 27 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 786.035849][ T8082] usb 5-1: config 11 interface 188 altsetting 27 has an invalid descriptor for endpoint zero, skipping [ 786.078760][ T8082] usb 5-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xA, skipping [ 786.102461][ T7635] pwc: recv_control_msg error -71 req 02 val 2c00 [ 786.120750][ T7635] pwc: recv_control_msg error -71 req 04 val 1000 [ 786.148349][ T5708] usb 1-1: USB disconnect, device number 25 [ 786.158029][ T8082] usb 5-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xB, skipping [ 786.159013][ T7635] pwc: recv_control_msg error -71 req 04 val 1300 [ 786.195199][ T8082] usb 5-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 786.220832][ T7635] pwc: recv_control_msg error -71 req 04 val 1400 [ 786.241275][ T7635] pwc: recv_control_msg error -71 req 02 val 2000 [ 786.242201][ T8082] usb 5-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xC, skipping [ 786.267645][ T8082] usb 5-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 786.269591][ T7635] pwc: recv_control_msg error -71 req 02 val 2100 [ 786.283536][ T8082] usb 5-1: config 11 interface 31 has no altsetting 0 [ 786.309096][T17010] loop6: detected capacity change from 0 to 2640 [ 786.329434][ T8082] usb 5-1: config 11 interface 188 has no altsetting 0 [ 786.342345][ T5628] buffer_io_error: 9 callbacks suppressed [ 786.342386][ T5628] Buffer I/O error on dev loop6, logical block 0, async page read [ 786.360912][ T8082] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.372570][ T8082] usb 5-1: Product: 㰁 [ 786.374360][ T7635] pwc: recv_control_msg error -71 req 04 val 1500 [ 786.389042][T17010] Buffer I/O error on dev loop6, logical block 0, async page read [ 786.397213][ T8082] usb 5-1: Manufacturer: Ч [ 786.404438][ T8082] usb 5-1: SerialNumber: Ў [ 786.412942][ T5628] Buffer I/O error on dev loop6, logical block 0, async page read [ 786.451233][T17010] Buffer I/O error on dev loop6, logical block 0, async page read [ 786.468430][T17010] Buffer I/O error on dev loop6, logical block 0, async page read [ 786.505436][ T7635] pwc: recv_control_msg error -71 req 02 val 2500 [ 786.512583][ T5628] Buffer I/O error on dev loop6, logical block 0, async page read [ 786.526585][T17012] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 786.540845][ T5628] Buffer I/O error on dev loop6, logical block 0, async page read [ 786.554206][T17012] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 786.565382][ T7635] pwc: recv_control_msg error -71 req 02 val 2400 [ 786.567989][ T5628] Buffer I/O error on dev loop6, logical block 0, async page read [ 786.589214][T17010] Buffer I/O error on dev loop6, logical block 0, async page read [ 786.599901][T17010] Buffer I/O error on dev loop6, logical block 0, async page read [ 786.607965][T17010] ldm_validate_partition_table(): Disk read failed. [ 786.622707][ T7635] pwc: recv_control_msg error -71 req 02 val 2600 [ 786.657161][ T7635] pwc: recv_control_msg error -71 req 02 val 2900 [ 786.667892][T17010] Dev loop6: unable to read RDB block 0 [ 786.674765][T17008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3448'. [ 786.705019][T17008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3448'. [ 786.708983][ T7635] pwc: recv_control_msg error -71 req 02 val 2800 [ 786.728581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 786.737886][T17010] loop6: unable to read partition table [ 786.756425][T17016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3448'. [ 786.766361][T17010] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 786.781581][ T7635] pwc: recv_control_msg error -71 req 04 val 1100 [ 786.838908][T13564] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.840171][ T7635] pwc: recv_control_msg error -71 req 04 val 1200 [ 786.854472][T13564] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.863871][T17016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3448'. [ 786.875183][T13564] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.887383][ T5708] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 786.928907][T13564] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.950418][ T8082] usb 5-1: USB disconnect, device number 23 [ 787.024831][ T7635] pwc: Registered as video103. [ 787.031113][ T5708] usb 1-1: device descriptor read/64, error -71 [ 787.085787][ T7635] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input58 [ 787.154456][ T7635] usb 3-1: USB disconnect, device number 95 [ 787.288766][ T5708] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 787.334165][T17015] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3450'. [ 787.429867][ T5708] usb 1-1: device descriptor read/64, error -71 [ 787.495332][T17031] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3455'. [ 787.509077][ T5762] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 787.524279][T17031] netlink: 'syz.5.3455': attribute type 16 has an invalid length. [ 787.532901][T17031] netlink: 'syz.5.3455': attribute type 17 has an invalid length. [ 787.542421][T17033] fuse: Bad value for 'rootmode' [ 787.552235][ T5708] usb usb1-port1: attempt power cycle [ 787.578768][T17031] bridge0: port 3(syz_tun) entered blocking state [ 787.585558][T17031] bridge0: port 3(syz_tun) entered forwarding state [ 787.597403][T17031] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.648222][T17031] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 787.661232][T17031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 787.680293][T17031] veth1_macvtap: left promiscuous mode [ 787.687208][T17031] veth0_macvtap: left promiscuous mode [ 787.694260][T17031] veth0_macvtap: entered promiscuous mode [ 787.700386][ T5762] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 787.704431][T17031] veth1_macvtap: entered promiscuous mode [ 787.715762][ T5762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 787.731474][ T5762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.734906][T17031] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 787.739800][ T7635] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 787.756762][T17031] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 787.760137][ T5762] usb 2-1: config 0 descriptor?? [ 787.776709][T17031] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 787.785618][T17031] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 787.792651][T17025] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 787.817108][T17031] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 787.852082][T13572] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.859454][T13572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.882396][T13572] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.889708][T13572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.900684][ T7635] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 787.911518][ T5708] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 787.919239][ T7635] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 787.930735][ T7635] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 787.946451][ T7635] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.955140][ T7635] usb 3-1: Product: syz [ 787.973367][ T7635] usb 3-1: Manufacturer: syz [ 787.981779][ T7635] usb 3-1: SerialNumber: syz [ 787.992461][ T5708] usb 1-1: device descriptor read/8, error -71 [ 788.048861][T13564] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.059363][T13572] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.065755][ T5762] usbhid 2-1:0.0: can't add hid device: -71 [ 788.075216][ T5762] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 788.091684][T13572] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.094351][ T5762] usb 2-1: USB disconnect, device number 11 [ 788.113079][T13572] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.238753][ T5708] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 788.271921][ T5708] usb 1-1: device descriptor read/8, error -71 [ 788.380898][ T7635] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 788.389787][ T5708] usb usb1-port1: unable to enumerate USB device [ 788.512855][ T7635] usb 3-1: USB disconnect, device number 96 [ 788.768658][ T5762] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 788.929490][ T5762] usb 5-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d [ 788.954544][ T5762] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 788.971325][ T5762] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 789.002359][ T5762] usb 5-1: config 8 has no interface number 0 [ 789.019967][ T5762] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 789.040567][ T5762] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 789.069915][ T5762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.084255][ T5762] usb 5-1: Product: syz [ 789.096665][ T5762] usb 5-1: Manufacturer: syz [ 789.109963][ T5762] usb 5-1: SerialNumber: syz [ 789.155903][T17054] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3463'. [ 789.296558][T17056] netlink: 'syz.5.3464': attribute type 4 has an invalid length. [ 789.336664][T17056] netlink: 'syz.5.3464': attribute type 4 has an invalid length. [ 789.361813][ T7635] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 789.369702][ T7639] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 789.501245][T17059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3465'. [ 789.550171][ T7639] usb 2-1: Using ep0 maxpacket: 16 [ 789.555520][ T7635] usb 3-1: Using ep0 maxpacket: 8 [ 789.567207][ T7635] usb 3-1: New USB device found, idVendor=0582, idProduct=002f, bcdDevice= 0.40 [ 789.576782][ T7639] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 789.590286][ T7639] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.602565][ T7639] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 789.617898][ T7635] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.627664][ T7635] usb 3-1: Product: syz [ 789.632307][ T7635] usb 3-1: Manufacturer: syz [ 789.637257][ T7639] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.656125][ T7635] usb 3-1: SerialNumber: syz [ 789.687912][ T7639] usb 2-1: config 0 descriptor?? [ 789.710820][ T7639] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 789.754921][T17063] [ 789.757321][T17063] ====================================================== [ 789.764455][T17063] WARNING: possible circular locking dependency detected [ 789.771542][T17063] syzkaller #0 Tainted: G L [ 789.777546][T17063] ------------------------------------------------------ [ 789.784650][T17063] syz.0.3466/17063 is trying to acquire lock: [ 789.790740][T17063] ffffffff8ec67520 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 789.800386][T17063] [ 789.800386][T17063] but task is already holding lock: [ 789.807775][T17063] ffff888026efbbc0 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xa3/0xd80 [ 789.816954][T17063] [ 789.816954][T17063] which lock already depends on the new lock. [ 789.816954][T17063] [ 789.827383][T17063] [ 789.827383][T17063] the existing dependency chain (in reverse order) is: [ 789.836470][T17063] [ 789.836470][T17063] -> #3 (&q->blkcg_mutex){+.+.}-{4:4}: [ 789.844193][T17063] __mutex_lock+0x19d/0x1550 [ 789.849344][T17063] blkcg_activate_policy+0x1cb/0x8e0 [ 789.855345][T17063] blk_throtl_init+0x2f7/0x420 [ 789.860661][T17063] tg_set_conf+0x1db/0x4e0 [ 789.865630][T17063] cgroup_file_write+0x331/0x8f0 [ 789.871144][T17063] kernfs_fop_write_iter+0x3a4/0x540 [ 789.877003][T17063] vfs_write+0x612/0xba0 [ 789.881804][T17063] ksys_write+0x150/0x270 [ 789.886692][T17063] __do_fast_syscall_32+0x27a/0x6a0 [ 789.892447][T17063] do_fast_syscall_32+0x33/0x70 [ 789.897844][T17063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 789.904741][T17063] [ 789.904741][T17063] -> #2 (&q->q_usage_counter(io)#17){++++}-{0:0}: [ 789.913380][T17063] blk_alloc_queue+0x544/0x690 [ 789.918801][T17063] __blk_mq_alloc_disk+0x194/0x390 [ 789.924535][T17063] loop_add+0x480/0xb40 [ 789.929306][T17063] loop_init+0xd7/0x160 [ 789.934052][T17063] do_one_initcall+0x250/0x870 [ 789.939369][T17063] do_initcall_level+0x10a/0x1a0 [ 789.944893][T17063] do_initcalls+0x59/0xa0 [ 789.949780][T17063] kernel_init_freeable+0x29d/0x3e0 [ 789.955534][T17063] kernel_init+0x22/0x1d0 [ 789.960414][T17063] ret_from_fork+0x514/0xb70 [ 789.965569][T17063] ret_from_fork_asm+0x1a/0x30 [ 789.970920][T17063] [ 789.970920][T17063] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 789.978191][T17063] fs_reclaim_acquire+0x71/0x100 [ 789.983718][T17063] prepare_alloc_pages+0x15b/0x650 [ 789.989408][T17063] __alloc_frozen_pages_noprof+0x12f/0x380 [ 789.995786][T17063] __alloc_pages_noprof+0x10/0x100 [ 790.001466][T17063] pcpu_populate_chunk+0x181/0xb30 [ 790.007142][T17063] pcpu_alloc_noprof+0xbca/0x1900 [ 790.012719][T17063] bpf_map_alloc_percpu+0x65/0x180 [ 790.018380][T17063] array_map_alloc+0x377/0x710 [ 790.023739][T17063] map_create+0xf3d/0x1b70 [ 790.028804][T17063] __sys_bpf+0xaea/0xd90 [ 790.033601][T17063] __ia32_sys_bpf+0xba/0xd0 [ 790.038659][T17063] __do_fast_syscall_32+0x27a/0x6a0 [ 790.044413][T17063] do_fast_syscall_32+0x33/0x70 [ 790.049815][T17063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 790.056786][T17063] [ 790.056786][T17063] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 790.064552][T17063] __lock_acquire+0x1520/0x2cf0 [ 790.069973][T17063] lock_acquire+0x106/0x350 [ 790.075032][T17063] __mutex_lock+0x19d/0x1550 [ 790.080263][T17063] pcpu_alloc_noprof+0x231/0x1900 [ 790.085839][T17063] percpu_ref_init+0x42/0x350 [ 790.091074][T17063] blkg_alloc+0xee/0x8f0 [ 790.095897][T17063] blkg_conf_prep+0x60b/0xd80 [ 790.101122][T17063] tg_set_conf+0x20b/0x4e0 [ 790.106110][T17063] cgroup_file_write+0x331/0x8f0 [ 790.111603][T17063] kernfs_fop_write_iter+0x3a4/0x540 [ 790.117439][T17063] vfs_write+0x612/0xba0 [ 790.122258][T17063] ksys_write+0x150/0x270 [ 790.127145][T17063] __do_fast_syscall_32+0x27a/0x6a0 [ 790.132895][T17063] do_fast_syscall_32+0x33/0x70 [ 790.138290][T17063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 790.145174][T17063] [ 790.145174][T17063] other info that might help us debug this: [ 790.145174][T17063] [ 790.155424][T17063] Chain exists of: [ 790.155424][T17063] pcpu_alloc_mutex --> &q->q_usage_counter(io)#17 --> &q->blkcg_mutex [ 790.155424][T17063] [ 790.169549][T17063] Possible unsafe locking scenario: [ 790.169549][T17063] [ 790.177098][T17063] CPU0 CPU1 [ 790.182485][T17063] ---- ---- [ 790.187892][T17063] lock(&q->blkcg_mutex); [ 790.192332][T17063] lock(&q->q_usage_counter(io)#17); [ 790.200254][T17063] lock(&q->blkcg_mutex); [ 790.207213][T17063] lock(pcpu_alloc_mutex); [ 790.211749][T17063] [ 790.211749][T17063] *** DEADLOCK *** [ 790.211749][T17063] [ 790.219988][T17063] locks held by syz.0.3466/17063: 6, last CPU#1: [ 790.226413][T17063] #0: ffff888078043970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 790.235540][T17063] #1: ffff88807fff8460 (sb_writers#10){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 790.244569][T17063] #2: ffff888078012c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 790.254359][T17063] #3: ffff8880585594b8 (kn->active#86){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 790.264424][T17063] #4: ffff888026efba40 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x2a8/0x3c0 [ 790.274566][T17063] #5: ffff888026efbbc0 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xa3/0xd80 [ 790.284094][T17063] [ 790.284094][T17063] stack backtrace: [ 790.290036][T17063] CPU: 1 UID: 0 PID: 17063 Comm: syz.0.3466 Tainted: G L syzkaller #0 PREEMPT(full) [ 790.290065][T17063] Tainted: [L]=SOFTLOCKUP [ 790.290072][T17063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 790.290085][T17063] Call Trace: [ 790.290095][T17063] [ 790.290105][T17063] dump_stack_lvl+0xe8/0x150 [ 790.290134][T17063] print_circular_bug+0x2e1/0x300 [ 790.290159][T17063] check_noncircular+0x12e/0x150 [ 790.290184][T17063] __lock_acquire+0x1520/0x2cf0 [ 790.290221][T17063] ? preempt_schedule_thunk+0x16/0x40 [ 790.290242][T17063] ? preempt_schedule_common+0x7f/0xd0 [ 790.290272][T17063] ? preempt_schedule_thunk+0x16/0x40 [ 790.290294][T17063] ? pcpu_alloc_noprof+0x231/0x1900 [ 790.290319][T17063] lock_acquire+0x106/0x350 [ 790.290344][T17063] ? pcpu_alloc_noprof+0x231/0x1900 [ 790.290371][T17063] __mutex_lock+0x19d/0x1550 [ 790.290389][T17063] ? pcpu_alloc_noprof+0x231/0x1900 [ 790.290408][T17063] ? __do_fast_syscall_32+0x27a/0x6a0 [ 790.290430][T17063] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 790.290461][T17063] ? pcpu_alloc_noprof+0x231/0x1900 [ 790.290481][T17063] ? __pfx___mutex_lock+0x10/0x10 [ 790.290509][T17063] pcpu_alloc_noprof+0x231/0x1900 [ 790.290530][T17063] ? __kasan_kmalloc+0x93/0xb0 [ 790.290555][T17063] ? __kmalloc_cache_node_noprof+0x3d2/0x630 [ 790.290583][T17063] ? __kmalloc_cache_node_noprof+0x1f4/0x630 [ 790.290611][T17063] ? __pfx_blkg_release+0x10/0x10 [ 790.290638][T17063] percpu_ref_init+0x42/0x350 [ 790.290661][T17063] blkg_alloc+0xee/0x8f0 [ 790.290683][T17063] ? _raw_spin_unlock_irq+0x23/0x50 [ 790.290716][T17063] blkg_conf_prep+0x60b/0xd80 [ 790.290747][T17063] tg_set_conf+0x20b/0x4e0 [ 790.290765][T17063] ? kernfs_root+0x1c/0x230 [ 790.290784][T17063] ? __pfx_tg_set_conf+0x10/0x10 [ 790.290803][T17063] ? kernfs_root+0x1c/0x230 [ 790.290818][T17063] ? kernfs_root+0x1c/0x230 [ 790.290833][T17063] ? kernfs_root+0x1c/0x230 [ 790.290853][T17063] ? kernfs_root+0x1ea/0x230 [ 790.290873][T17063] ? __pfx_tg_set_conf_u64+0x10/0x10 [ 790.290891][T17063] cgroup_file_write+0x331/0x8f0 [ 790.290913][T17063] ? kernfs_fop_write_iter+0x22b/0x540 [ 790.290937][T17063] ? __pfx_cgroup_file_write+0x10/0x10 [ 790.290959][T17063] ? __kmalloc_noprof+0x39a/0x720 [ 790.290980][T17063] ? vfs_write+0x22b/0xba0 [ 790.291006][T17063] ? __kmalloc_noprof+0x1af/0x720 [ 790.291030][T17063] ? __pfx_cgroup_file_write+0x10/0x10 [ 790.291051][T17063] kernfs_fop_write_iter+0x3a4/0x540 [ 790.291076][T17063] vfs_write+0x612/0xba0 [ 790.291106][T17063] ? __pfx_vfs_write+0x10/0x10 [ 790.291137][T17063] ? __fget_files+0x2a/0x420 [ 790.291166][T17063] ksys_write+0x150/0x270 [ 790.291194][T17063] ? __pfx_ksys_write+0x10/0x10 [ 790.291233][T17063] __do_fast_syscall_32+0x27a/0x6a0 [ 790.291254][T17063] ? do_fast_syscall_32+0x33/0x70 [ 790.291273][T17063] ? irqentry_exit+0x10f/0x910 [ 790.291292][T17063] do_fast_syscall_32+0x33/0x70 [ 790.291312][T17063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 790.291334][T17063] RIP: 0023:0xf7fe80ec [ 790.291351][T17063] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 790.291366][T17063] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 790.291385][T17063] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800000c0 [ 790.291398][T17063] RDX: 000000000000006a RSI: 0000000000000000 RDI: 0000000000000000 [ 790.291409][T17063] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 790.291420][T17063] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 790.291431][T17063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 790.291449][T17063] [ 790.406844][ T7635] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 790.668466][ T7635] usb 3-1: invalid MIDI in EP 0 [ 790.679239][ T5762] usb 5-1: USB disconnect, device number 24 [ 790.718611][ T7636] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 790.729856][ T7627] usb 2-1: USB disconnect, device number 12 [ 790.766863][ T7635] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 790.778905][ T7635] usb 3-1: USB disconnect, device number 97 [ 790.806785][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 790.870635][ T7636] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 790.880739][ T7636] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 790.888237][ T7636] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 790.899280][ T7636] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 790.911617][ T7636] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 790.924863][ T7636] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 790.937288][ T7636] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 790.944864][ T7636] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 790.976413][ T7636] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 790.992633][ T7636] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 791.004102][ T7636] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 791.019362][ T7636] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 791.026882][ T7636] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 791.037936][ T7636] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 791.050531][ T7636] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 791.061848][ T7636] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 791.075630][ T7636] usb 1-1: string descriptor 0 read error: -22 [ 791.082209][ T7636] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.105752][ T7636] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 791.318133][T17063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.327078][T17063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.341926][ T5708] usb 1-1: USB disconnect, device number 30