last executing test programs: 22m0.11184344s ago: executing program 32 (id=557): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0xa, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000cc0)={0x2020, 0x0, 0x0}, 0x2020) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'system.', 'fuse\x00'}, 0x0, 0x0, 0x2) write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18, 0x0, r1, {0x7}}, 0x18) setxattr$incfs_metadata(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x2) umount2(&(0x7f0000000500)='./file0\x00', 0x2) r2 = socket$rxrpc(0x21, 0x2, 0x2) poll(&(0x7f0000000000)=[{r2, 0x2002}, {r2, 0x2020}], 0x2, 0x7f) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000009c0), 0x4) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17m48.484889171s ago: executing program 33 (id=1564): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) keyctl$restrict_keyring(0xa, 0xfffffffffffffffc, &(0x7f0000000300)='id_legacy\x00', &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00\x00A\xbd\x98\x88\xf8\xc8\xa1#\xc5\xae\xe2\x17\xde\x8f2\x90') 16m48.972389418s ago: executing program 34 (id=1795): pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000300)="e8924d7e487f87896c4757aeac19473cb480701164015d0b71178d32752d9afc8d86a35708a45844dd13b4a91c932e5cc6671f86c2cc98e91b2cc185a069b3cfc27d68a58d383322f7c78ce72003f9db394340b322bcd796ed8d42f90b9c6bb21014f5f56396bf6afc540031f78f24b0426d366725b93f7bd7bbd97c3e2e1df4ebb39ff6757ea7794953a8b54d3e56fb58bf3c03c02a7e7a9f151d239446bb43e919728f341f7620513c606a402b90aeb874478b626c938bed60583d65495bb7fd0e974ea836de981fb59ca40208469d75f9ff33f398d02e7f", 0xd9}, {&(0x7f0000000400)="77a467d61f69e6301abc3317cffc3eb95d38516b9811aec0d73991936e6fe0bea9a8efe850eb78387c198cdca42cb710c653c68b6f091755d400a75c90e535138b239be3a835749427583f14a1186f5c7be375634f181feaf4", 0x59}], 0x2, 0x7, 0x7, 0x4) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000007f00e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) 15m50.175024766s ago: executing program 1 (id=2036): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x30, 0x64, 0x36, 0x32, 0x36, 0x61, 0x38, 0x38], 0x2d, [0x62, 0x30, 0xdb484615a1ffe4d6, 0x34], 0x2d, [0x38, 0x64, 0x36, 0x36], 0x2d, [0x63, 0x36, 0x6, 0x65], 0x2d, [0x33, 0x35, 0x35, 0x32, 0x0, 0x66, 0x38, 0x33]}}}]}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r1, {0x7, 0x8, 0x2000000, 0x238d117e6f1c1b5b, 0x401, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002140), 0x802, 0x0) write$UHID_INPUT(r2, &(0x7f0000002900)={0x8, {"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", 0x1000}}, 0x1006) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_DEL_MFC(r3, 0x0, 0xcd, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15m49.786439784s ago: executing program 1 (id=2038): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000201fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000500000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB='\aw-W'], 0x158}}, 0x0) 15m49.665108623s ago: executing program 1 (id=2040): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="500000000206050000000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a00000015000300686173683a69702c706f72742c6e6574"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(0x0, 0x77, 0x101301) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x40040, 0xd2, 0xf}, 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc00000000000000000000000000de00060004404e1f0000050007008400000006000540", @ANYBLOB="4d2a5ac1c9b0a8af59646c8b268a7dcec7d0e542a7c553909c9c2f24c35aa92c99b621e1378b7cb1e8c1ddcb9e"], 0x74}, 0x1, 0x0, 0x0, 0x10008803}, 0x0) 15m49.371130034s ago: executing program 1 (id=2042): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) open_tree(r1, &(0x7f0000000080)='.\x00', 0x9001) socket(0x2, 0xa, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) sysfs$2(0x2, 0x817fff, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r6, r6, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 15m49.188631424s ago: executing program 1 (id=2044): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000700)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a39c431b946709e6037c510714f1652be4c2fbbe83264bdc70ab5363f50f8a4b9c28b4f6ff6b184a86a50bf670b4344f303c8fc7e0265c2f33fa185b02943f60d377698e93b59bad5e1a1263a97f", 0xf2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="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", 0x1ea}, {&(0x7f0000001b00)="1791613d45501cb6a8d8eaeb96ee68b2d8daad34b8c528b97ead9f051e427e309b714d3d12d8d401ee42a68183b0e95a5b22ea526737b16783f6d819d82b492bf64f5475d1e1f435a4fd5de8795db130dc9a9e82dae807b69f57202e694041d85a70a98ed38e10b116d2249a8746d54c19d053605f35cb085edc1b1df8f487d1e1835a9037d94fdb5777403217fb9cd018ee14185b10e413a1095995d7", 0x9d}], 0x2}}], 0x2, 0x2090) 15m48.693488122s ago: executing program 1 (id=2049): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x630801, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000100)={0x0, 0x18000}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x2, 0x2, 0x0, 0x800043fffffffffd}) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents64(r5, &(0x7f0000000000)=""/90, 0x5a) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 15m48.30447329s ago: executing program 35 (id=2049): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x630801, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000100)={0x0, 0x18000}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x2, 0x2, 0x0, 0x800043fffffffffd}) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents64(r5, &(0x7f0000000000)=""/90, 0x5a) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 12m2.772747499s ago: executing program 7 (id=2989): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) 12m0.908107096s ago: executing program 7 (id=2995): openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000680)={0x2, 'virt_wifi0\x00', {0xff}, 0x2f97}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000002000010000000000fcdbdf250a805f00000000031a00030014000200fc020000000000000000000000000001080017004e234e231400010020010000000000000000000000000001a4c42b01ab074afa174282d70aac6e59a46cf0d08b9535cba053165c969be9b1a9be48f3619e22cd926e14e2bdbd0dbc3388c54343ff6e8d0f8c81"], 0x4c}}, 0x40000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x22000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc931e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r8, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r7, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r9, 0x0, 0x1004000, 0x0, 0x0}) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f00000002c0)={0x800}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x60, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}]}, @NFT_MSG_DELOBJ={0xc4, 0x14, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x98, 0x8, "2a568c5c06f3dfe356c1595f2c6ce1a090b9dd3bf4f5373298041c836d6a6b52c8cec2b80c4ce251873ee7f5cf1a7417dc0eae7e340bb059560dd943dac8ee64fcfa0223a0e8e112066adf0c268195b2013c2dc9fdc108478d563729a88ee5e27b91fe0d34f55a1ba1e7d235dc3f748cf76580e8edf4a29f1bfd30f907c3456fe916e05f7499cfd3154fda1fea9cf619bac723d5"}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0xa}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x184}, 0x1, 0x0, 0x0, 0x4048041}, 0x8000) 11m59.496577317s ago: executing program 7 (id=2997): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff9, 0x100a99e, 0x10}) r4 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x100000001, 0x54300) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r3, 0x7aa, &(0x7f0000000080)={{@my=0x0, 0x2}, 0x100, 0x4}) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xda0}]}) ioctl$KVM_GET_TSC_KHZ_cpu(r2, 0xaea3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000200)={0x0, 0xfffffffe, 0x100, 0xffff}, 0x10) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket(0x22, 0x4, 0x2) setrlimit(0xf, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r9 = socket(0x2b, 0x80801, 0x1) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e23, 0xab, @loopback, 0x1}, 0x1c) setsockopt$inet_tcp_int(r9, 0x6, 0x22, &(0x7f0000000000), 0x3e) r10 = dup(r5) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000280)={r10, 0x7, 0x3}) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r9) 11m58.405373906s ago: executing program 7 (id=3000): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket(0x1d, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000010100000003000000060001004e230000050002000a000000"], 0x24}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'netdevsim0\x00', 0x4000}) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f00000003c0)={0x0, 'syzkaller1\x00', {0x4}}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x337) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="5caacb91a3b1bba04dc32f77f825000126bd7000fddbdf250200000008000b00", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r7 = socket(0x2, 0x2, 0x0) bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) setsockopt$RXRPC_SECURITY_KEYRING(r7, 0x110, 0x2, &(0x7f0000000000)='\xbb\xbb\xbb\xbb\xbb\xbb', 0x6) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x24342e, 0x0, 0x0, 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) mount_setattr(r10, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) setsockopt(0xffffffffffffffff, 0xfffffffc, 0xffff, &(0x7f00000001c0)="7c3864373ea282e6df669af7f76ed49ba8bbd6319e47d801ac2de336135a1252243ebc6527772e8afb54a094c79be26f5e06a8ce69321ab6b6cec139a2ac844bc27a14bb09af0b566a8f9ef06b41958391355246c5d5d4951c51ca0d10df7d71bda4fe3d469abc2603c0ffb99f2df34ed650222234fa0deeeacc532048e95dbab79c034ebf42752f5471e0d3f5a8098d6e94a4b14e63fcbac4447efbf1d7dbba1d52770612aad2013a3abbf79703854238dec6182a2b562d56c42fe60c1377abf868466b44e3e6066bbe5724e9fc3bca3069526e2450a602e2df3282e1061e626fe827e31e670f", 0xe7) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYRES64=r4, @ANYRES16=0x0], 0x0) syz_emit_ethernet(0x112, &(0x7f0000000680)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0xdc, 0x6, 0x0, @local, @local, {[@routing={0x3a, 0x6, 0x2, 0x3, 0x0, [@mcast1, @dev={0xfe, 0x80, '\x00', 0x2f}, @dev={0xfe, 0x80, '\x00', 0x34}]}, @routing={0x87, 0x10, 0x0, 0x9, 0x0, [@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @local, @dev={0xfe, 0x80, '\x00', 0x22}, @local, @private1, @dev={0xfe, 0x80, '\x00', 0x15}]}, @fragment={0x87, 0x0, 0x1, 0x1, 0x0, 0x2, 0x65}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x1}}}}}}}, 0x0) 11m56.353659924s ago: executing program 7 (id=3005): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) migrate_pages(0x0, 0x7f, 0x0, &(0x7f0000000040)=0x1) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x810, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000080)={0x40, 0x19, 0x2, {0x2, 0x21}}, 0x0, 0x0, 0x0}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x240, 0x2f8, 0xffffffff, 0x2f8, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'bond0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000140)) write$P9_RGETLOCK(r2, 0x0, 0x1f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000800000000000000000b7080000000000007b8af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800eaff840000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2}, 0x94) 11m55.348730514s ago: executing program 7 (id=3011): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000004400)={0x1d, 0x20, &(0x7f0000001e80)=ANY=[@ANYBLOB="18000000070000000000000003000000185a000001000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018200000", @ANYRES32, @ANYBLOB="000000000500ea008520000003000000b7080000000000007b8af8ff00000000b70800000a0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018000000ac0a000000000000fdffffff9500000000000000"], &(0x7f0000000640)='GPL\x00', 0x1, 0x1000, &(0x7f00000032c0)=""/4096, 0x0, 0x20, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0xa, 0x7, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000004340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000004380)=[{0x0, 0x2, 0x7, 0x2}, {0x4, 0x4, 0xb, 0x9}, {0x0, 0x5, 0xa, 0x2}, {0x5, 0x3, 0x8, 0x2}, {0x3, 0x4, 0xc, 0xa}]}, 0x94) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000580)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, &(0x7f0000000340), &(0x7f0000000040)) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="110000005200010004000000000000001c"], 0x28}}, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/120, 0x78}], 0x1, 0x67, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x1, 0x9, 0x3007, 0x0, 0xd, 0x1, 0x3, 0x6}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 11m54.162169514s ago: executing program 36 (id=3011): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000004400)={0x1d, 0x20, &(0x7f0000001e80)=ANY=[@ANYBLOB="18000000070000000000000003000000185a000001000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018200000", @ANYRES32, @ANYBLOB="000000000500ea008520000003000000b7080000000000007b8af8ff00000000b70800000a0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018000000ac0a000000000000fdffffff9500000000000000"], &(0x7f0000000640)='GPL\x00', 0x1, 0x1000, &(0x7f00000032c0)=""/4096, 0x0, 0x20, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0xa, 0x7, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000004340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000004380)=[{0x0, 0x2, 0x7, 0x2}, {0x4, 0x4, 0xb, 0x9}, {0x0, 0x5, 0xa, 0x2}, {0x5, 0x3, 0x8, 0x2}, {0x3, 0x4, 0xc, 0xa}]}, 0x94) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000580)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, &(0x7f0000000340), &(0x7f0000000040)) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="110000005200010004000000000000001c"], 0x28}}, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/120, 0x78}], 0x1, 0x67, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x1, 0x9, 0x3007, 0x0, 0xd, 0x1, 0x3, 0x6}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 8m35.920126009s ago: executing program 2 (id=3850): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00003c8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000180)="c4e3195ee600b80f000000ba000000000f30c4c1782eef0ff601919136f30f07db08f30f1eeb361fddc9c4c1f911dd", 0x2f}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000400000000000000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00004fb000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000240)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa0006c0f2c900f285473f61366b9800000c06635004000000f300f20e06635800000000f22e0f30fa6c8", 0x46}], 0x1, 0x0, 0x0, 0x62) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r11, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x40000099, 0x0, 0x5}]}) ioctl$KVM_GET_MSR_INDEX_LIST(r8, 0x4018aee3, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 8m35.14764217s ago: executing program 2 (id=3852): unshare(0x26000400) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffffe, 0x2000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) (async) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xd, 0x4, @thr={0x0, 0x0}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18380000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r1, @ANYBLOB="0000000002000000b703000008000000850000006900000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18380000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r1, @ANYBLOB="0000000002000000b703000008000000850000006900000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@local}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8001, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000004880)=[{{&(0x7f0000002180)={0xa, 0x4e21, 0x8, @local, 0xc}, 0x1c, 0x0}}], 0x1, 0x240880d1) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000040)) (async) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000040)) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) setrlimit(0x9, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r5, 0x8921, &(0x7f0000000180)={'syzkaller0\x00'}) 8m34.864202405s ago: executing program 2 (id=3853): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) (async, rerun: 32) r3 = accept4(r2, 0x0, 0x0, 0x0) (rerun: 32) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x8000) read$alg(r3, &(0x7f0000000000)=""/35, 0x23) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x440c5) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x20) (async) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3fd, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000080)={0x0, 0x5, 0x3011, 0x1}) write$dsp(r1, &(0x7f0000000040)="b5", 0x1) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000580)=0x10) 8m34.520020991s ago: executing program 2 (id=3856): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$vcsu(0x0, 0x1, 0x18000) syz_open_procfs(0x0, &(0x7f0000000480)='uid_map\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xda01}) ioctl$int_in(r0, 0x5452, &(0x7f00000002c0)=0x7) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r5, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 8m33.544794216s ago: executing program 2 (id=3860): connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000780)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x3, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) setitimer(0x2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r3, r3, 0x0) accept4(r0, 0x0, 0x0, 0x0) unshare(0x62040200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x30a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2a, 0x40, 0xf2, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0x88b}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x30, 0x6, 0x6}}}}}]}}]}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x8, 0x2, @multicast1}]}, 0x2c}}, 0x0) 8m31.916002806s ago: executing program 2 (id=3867): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r2, &(0x7f0000001b40)={0x2020}, 0x205c) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) r3 = dup(r0) write$UHID_INPUT(r3, &(0x7f0000000000)={0x7, {"a2e3ad21ed0d52f91b5d330987f70e06d038e7ff7fc6e5539b0d47078b089b3907356d090890e0878f0e1ac6e7049b334a959b669a240d5d67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07670936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70fe98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf1a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e470dea05918b41243513f000800000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3e3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14d9fdb8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a19000000000000006f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69b15c9f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d44400009a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc01008cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c16c02ed4b5d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaab1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106d26658b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6b14effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c110000a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b51028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6815d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3f3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51090840517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4e004a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6ce1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c817e9177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d543902113c4c859465c3c115c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc248850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafcc009fc074bb6b68a1f0c4649820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948998cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2fd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5dc4ff8f0104000000000000df72279fdb0d2b9e936e5a983c12fded79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d3700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa6e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9f07b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e3ebb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3fec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4cddd5d0fc5a752f9000", 0x1000}}, 0x1006) 8m31.539854499s ago: executing program 37 (id=3867): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r2, &(0x7f0000001b40)={0x2020}, 0x205c) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) r3 = dup(r0) write$UHID_INPUT(r3, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) 5m55.774285893s ago: executing program 9 (id=4520): pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000300)="e8924d7e487f87896c4757aeac19473cb480701164015d0b71178d32752d9afc8d86a35708a45844dd13b4a91c932e5cc6671f86c2cc98e91b2cc185a069b3cfc27d68a58d383322f7c78ce72003f9db394340b322bcd796ed8d42f90b9c6bb21014f5f56396bf6afc540031f78f24b0426d366725b93f7bd7bbd97c3e2e1df4ebb39ff6757ea7794953a8b54d3e56fb58bf3c03c02a7e7a9f151d239446bb43e919728f341f7620513c606a402b90aeb874478b626c938bed60583d65495bb7fd0e974ea836de981fb59ca40208469d75f9ff33f398d02e7f", 0xd9}, {&(0x7f0000000400)="77a467d61f69e6301abc3317cffc3eb95d38516b9811aec0d73991936e6fe0bea9a8efe850eb78387c198cdca42cb710c653c68b6f091755d400a75c90e535138b239be3a835749427583f14a1186f5c7be375634f181feaf4", 0x59}], 0x2, 0x7, 0x7, 0x4) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd00000000000000007f0000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) 5m55.599776789s ago: executing program 9 (id=4521): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000003c0)={0x4, @pix_mp={0x8, 0xfffffff7, 0x32314d54, 0x7, 0x5, [{0x3, 0x9}, {0x10000, 0x6}, {0x80000000, 0xfffffffc}, {0x8, 0xa09a}, {0x7, 0x1}, {0xcb, 0x2}, {0x7, 0x6}, {0x2, 0x4}], 0x2, 0x11, 0x4, 0x1}}) (async) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00031e0000000403"], &(0x7f00000002c0)={0x0, 0xf, 0x82, {0x5, 0xf, 0x82, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x6, 0x7, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1, 0xd8, 0xfff4}, @generic={0x6c, 0x10, 0x3, "288baa2af1283279f2102f96fe5bd2a102e210686284d3ec03d07c5a6c0c715a36e93f82bb1c3533d684a7426a14b40824a084b31760a1a700334fc1a4043dcb04a0cb83ba6e0f5a194d6e88e6f0b9fb1030d1cbd8cf1d920077e88ae2e172ccf1ee1947201fecff11"}]}}, 0x0, 0x0}, 0x0) (async, rerun: 32) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f0000000380)=0x6e) (rerun: 32) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a0104000000008823909d0a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc140000000c0a010100000000000000000a000006140000001100010000000000000000000100000a"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='attr/fscreate\x00') (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x4000000000000001, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_clone3(0x0, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) syz_emit_ethernet(0x60, &(0x7f00000003c0)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x2a, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4}]}}}}}}, 0x0) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) (rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xce4, r7}, 0x38) (async, rerun: 64) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 64) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) (async, rerun: 32) openat(r9, &(0x7f0000000140)='./file0\x00', 0x80102, 0x120) (rerun: 32) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) 5m53.48693503s ago: executing program 9 (id=4527): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x3, 0x300) dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) dup(r3) open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc00000019000100ff01000000000000e0000002000000000000000000000000ac14140800000000000000000000000000000400000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000ffffff7f0000000000000000000000000200000000000000000000000000000000000000000000030900000000000000ffffffffffffffff00000000000000000000000000000000000000000000000001000002000000004400050020010000000000000000000000000000000000023c0000000a000000fc0100000000000000000000000000000000000004020000000000000900000000400000"], 0xfc}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x810) 5m52.949556305s ago: executing program 9 (id=4533): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001b40)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904020000ff4f9b000904b000003a3846000904"], 0x0) pselect6(0x40, &(0x7f0000000680)={0x4, 0x7, 0x5ee2, 0x0, 0x2, 0x9, 0x9, 0x4}, &(0x7f00000006c0)={0xcf5, 0xa64, 0xf, 0x2, 0x3, 0x94eb, 0xfff, 0x1}, &(0x7f0000000700)={0x10001, 0xf, 0x39c5, 0x3, 0xb, 0x8000000000, 0x7, 0x10001}, &(0x7f0000000740)={0x77359400}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x6b8000000000000]}, 0x8}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f00000008c0)={0x14, &(0x7f0000000800)={0x20, 0x25, 0x3f, {0x3f, 0x8, "9a36d99b2199f0552fd0eba9d320f9ff15732c64d947ce498b1a5fdc62874666f267ed8cf98ddf60673e0c579431a332aad966dd390ee994679669cf15"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}}, &(0x7f0000000b40)={0x34, &(0x7f0000000900)={0x20, 0x30, 0xb9, "0bdcb839b25869a097bf19a8d5772af6a17347a083c5bf556a5b96512847d31edf606c752ac56f076443cf211e49a37776e3e2983e60bed945a86a630a4259b6f30c30a880d665339f12bc9a7efcaa9507e47c0e6ee115229de0c1a3aa7e03c551c831134a6003e4ac310a2fa8cf3e27cff24638a7f376af4f5c63e004048ba58dbf5c1301c0e5730b83ba3c9d48df5c991e6aa079e8dbdc2618ebcfc8461a4bb59c505e3f9ba85db5f387d622ef44fa80429a2c7e75e81ad1"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000a80)={0xc0, 0xa1, 0x4, 0x10000}, &(0x7f0000000ac0)={0x40, 0xa0, 0x4, 0x3}, &(0x7f0000000b00)={0xc0, 0xa2, 0x2f, "28aa4a2633ce53b92aef013013c0f53e4eff54a6b57be5709c1e06f648c9e5dd415f1a306d718d44332ef47043a69b"}}) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1012802, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000040)={{{@in=@private=0xa010101, @in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x4e22, 0x0, 0x4, 0x8, 0x2}, {0x4, 0x0, 0x18}, {0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0x1, 0x0, 0x4}, {{@in=@broadcast, 0xfffffffd, 0x32}, 0xa, @in6=@private0, 0xfffffffd, 0x4, 0x0, 0x0, 0x3}}, 0xe8) close(r5) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000000)={0x0, 0x9, 0x74, {0x74, 0x23, "42e09dca0e1a95d6b8719b854e9b21c47807450af52562aca466e776b851f1c101b83eecfeedde3f834cc725052f3d072b0b6b562f5cb1d4ad7f664644cf8c9f308a32a1893090c4f2b9a5277f285d0e5db954ddc1b41ff3447f684c48180ccb5cbf56b124e08fb827d1f951030dc224421d"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc04}}, &(0x7f00000000c0)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x2b, 0x3, 0x1, 0x3e}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x18, 0x9, 0x5, "ab72cd1b", "cee414be"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x18, 0xc9, 0x3, 0xa, 0xab, 0xa}}}, &(0x7f00000005c0)={0x84, &(0x7f00000001c0)={0x20, 0x30, 0x2, "a165"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000240)={0x0, 0x8, 0x1}, &(0x7f0000000280)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f00000002c0)={0x20, 0x0, 0x8, {0x20, 0x80, [0x11]}}, &(0x7f0000000300)={0x40, 0x7, 0x2, 0xbe94}, &(0x7f0000000340)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000380)={0x40, 0xb, 0x2, "1e01"}, &(0x7f00000003c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000400)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000440)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000480)={0x40, 0x19, 0x2, '3('}, &(0x7f00000004c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000500)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000540)={0x40, 0x1e, 0x1, 0xfa}, &(0x7f0000000580)={0x40, 0x21, 0x1, 0x9}}) 5m48.181334291s ago: executing program 9 (id=4550): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x0, 0xe, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0x2, 0x4, 0x20000000009, 0x2, 0x1fd, 0x8, 0x0, 0xf7, 0x5, 0x5, 0x2, 0x501, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x101, 0x100, 0x8000000000000001, 0xfffffffffffffff9, 0x3, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x6, 0xfffffffffffffffb, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8d, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa7, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x2, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0x3, 0x80000000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x9, 0x4, 0xa, 0x40000001, 0x9, 0x2, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xffff, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[], 0x4c}}, 0x0) 5m47.865890601s ago: executing program 9 (id=4554): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r4 = fcntl$dupfd(r2, 0x406, r2) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f00000002c0)={&(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0, 0x3a}) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmmsg$alg(r1, &(0x7f0000001600)=[{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000000)="e346b4b9c1d1964bca6617219af5535585862a11c1dc50b7e56caf6050d23d5bf009a70f141c595004a216f40013ae63650d2913377a43e240f0f1fe8e75cd9a3151a67eeab5a9a50a5388cfdc314188d2a6964d6cc0007b2567f98b6d65c1b1149ecc1f6d2e9578c53734bfd449b10a00fed22b156fda3e604afa8c054f8e96168ef4618952e028bb", 0x89}], 0x1, 0x0, 0x0, 0x20008000}], 0x1, 0x40840) (async) sendmmsg$alg(r1, &(0x7f0000001600)=[{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000000)="e346b4b9c1d1964bca6617219af5535585862a11c1dc50b7e56caf6050d23d5bf009a70f141c595004a216f40013ae63650d2913377a43e240f0f1fe8e75cd9a3151a67eeab5a9a50a5388cfdc314188d2a6964d6cc0007b2567f98b6d65c1b1149ecc1f6d2e9578c53734bfd449b10a00fed22b156fda3e604afa8c054f8e96168ef4618952e028bb", 0x89}], 0x1, 0x0, 0x0, 0x20008000}], 0x1, 0x40840) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d04000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a00"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5m32.461404978s ago: executing program 38 (id=4554): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r4 = fcntl$dupfd(r2, 0x406, r2) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f00000002c0)={&(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0, 0x3a}) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmmsg$alg(r1, &(0x7f0000001600)=[{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000000)="e346b4b9c1d1964bca6617219af5535585862a11c1dc50b7e56caf6050d23d5bf009a70f141c595004a216f40013ae63650d2913377a43e240f0f1fe8e75cd9a3151a67eeab5a9a50a5388cfdc314188d2a6964d6cc0007b2567f98b6d65c1b1149ecc1f6d2e9578c53734bfd449b10a00fed22b156fda3e604afa8c054f8e96168ef4618952e028bb", 0x89}], 0x1, 0x0, 0x0, 0x20008000}], 0x1, 0x40840) (async) sendmmsg$alg(r1, &(0x7f0000001600)=[{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000000)="e346b4b9c1d1964bca6617219af5535585862a11c1dc50b7e56caf6050d23d5bf009a70f141c595004a216f40013ae63650d2913377a43e240f0f1fe8e75cd9a3151a67eeab5a9a50a5388cfdc314188d2a6964d6cc0007b2567f98b6d65c1b1149ecc1f6d2e9578c53734bfd449b10a00fed22b156fda3e604afa8c054f8e96168ef4618952e028bb", 0x89}], 0x1, 0x0, 0x0, 0x20008000}], 0x1, 0x40840) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d04000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a00"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4m11.493042942s ago: executing program 0 (id=4973): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r5 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r5) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r6, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 4m8.454811201s ago: executing program 0 (id=4994): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f00000000c0)=0xfffffadc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0xce20, 0x0, @empty, 0xce52}, 0x1c) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r4, 0x4) listen(r3, 0x80) r5 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f0000001340)={0x2, "1f77d80d899773c7f5a2aa56931e9e6b17ec74c549329fa85f5d0d1958bf3461e52bd287be8cd9fa2d637ab0f635a199ccc56d88dd0a7c26c124e2e01c4ebda3", {0x3, 0x400}}) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) listen(r5, 0x3a5) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000080), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000001400)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x90, 0x0, [{@initdev}, {@dev}, {}, {@empty}, {@initdev}, {@remote}, {@multicast2}, {@remote}, {@multicast1}]}}) setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, 0x0, 0x0) preadv(r0, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x50, 0x205) process_mrelease(r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0xa, 0x0, 0x3e7, 0x47, '\x00', 0x1}, 0x4, 0x10000000, 0xfffffffc, r7, 0x2, 0x3d274950, 'syz0\x00', &(0x7f0000000100)=['/dev\x02\x00\x00\x00\x00\x00\x15\x00C#D#p\x00', '+$\x00'], 0x15}) 4m8.296913339s ago: executing program 0 (id=4996): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000060a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffdf0000000000000000000000000000000010000000000000020000000000000000000000000000000000000000000000000c0015005b07350081"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) 4m8.275094758s ago: executing program 0 (id=4997): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000080)={0x80fd}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) 4m7.404675005s ago: executing program 0 (id=5004): syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r5 = dup2(r4, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fallocate(r5, 0x0, 0x8000000005, 0x100000101) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xff, 0x1c}, 0xc) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x612000, 0x10c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 4m7.365829263s ago: executing program 0 (id=5005): socket$kcm(0x2, 0x1000000000000002, 0x0) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4b684) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x25, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xd231c4f959adc008) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000900)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0xa, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}], 0x1, 0x4000844) shutdown(r3, 0x1) (async) shutdown(r3, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0c3}, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x3}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) 4m7.051750081s ago: executing program 39 (id=5005): socket$kcm(0x2, 0x1000000000000002, 0x0) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4b684) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x25, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xd231c4f959adc008) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000900)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0xa, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}], 0x1, 0x4000844) shutdown(r3, 0x1) (async) shutdown(r3, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0c3}, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x3}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) 7.912378526s ago: executing program 4 (id=6144): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) close_range(0xffffffffffffffff, r0, 0x2) (async) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, r3, 0x209, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x4890) 7.69338825s ago: executing program 4 (id=6146): madvise(&(0x7f0000583000/0x3000)=nil, 0x3000, 0x14) (async) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x35c3, 0x1000, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) (async) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) dup(r1) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000080)={0x28, 0x6, 0x0, 0x0, &(0x7f0000581000/0x4000)=nil, 0x4000, 0x80000001}) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 7.530117202s ago: executing program 4 (id=6147): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x424042, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0xc17a) mmap$snddsp_control(&(0x7f0000007000/0x2000)=nil, 0x1000, 0x0, 0x10, r1, 0x83000000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0xadaf, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', r1}, 0x18) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000cc0)={0xc, @pix_mp={0x2, 0xc, 0xe81d3c1801bdb4cf, 0x8, 0x0, [{0x8000, 0x81}, {0x25, 0xb}, {0x8, 0x3}, {0x3, 0x2f3fff4a}, {0x7, 0x6}, {0xffffffff, 0x1}, {0xe4, 0xf}, {0x4, 0x8}], 0x0, 0x7, 0x8, 0x2, 0x6}}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000240)={0x0, 0x1, 0x6, @multicast}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) 7.28143241s ago: executing program 4 (id=6150): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000021c0)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [{0x8, 0x4}], {0x10, 0x1}}, 0x2c, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8000000000000000, &(0x7f0000006680)) socket$inet_sctp(0x2, 0x1, 0x84) timer_gettime(0x0, 0x0) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) shutdown(r3, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) preadv(r3, &(0x7f00000016c0), 0x0, 0x187, 0x7) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x29) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) pidfd_send_signal(r5, 0x3e, &(0x7f0000000080)={0x3e, 0x8000, 0x80}, 0x0) fsopen(0x0, 0x0) syz_open_dev$vivid(0x0, 0x3, 0x2) 5.84012743s ago: executing program 6 (id=6156): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xaf}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x8000005, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x1, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 5.740856853s ago: executing program 6 (id=6157): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc7020000080000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000004c0)={'bond_slave_1\x00', &(0x7f0000000300)=@ethtool_ts_info}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_open_dev$video4linux(&(0x7f0000000340), 0xffff, 0x500) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r5, @ANYBLOB="05", @ANYRES32=r4, @ANYRES16=r5], 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r6, 0x0, 0x0) poll(&(0x7f0000000940)=[{r6, 0x20}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000240)={0x80, 0x4, 0x14a, 0x0, 0x0, 0x4000002}) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, &(0x7f0000000000)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, r7, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r7, 0x8004500b, &(0x7f00000001c0)=0xff) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e36599023622}) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="a2aaaaaaaaaaaaaaaaaa1e1f53b0e55345d404d5f4aabb2af5c3873def4ac80601fe800000000000000000000000005043fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020000907800001e020000"], 0x0) 4.546346009s ago: executing program 8 (id=6162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000020301020000000000000000050000030800010000000025080003020000004964502e8c55b8acea7589c2c1d2f2b127ae456443d0b3beeb4ed7dc4c2d81bc6fae877122ad8b17e59d3dce4ee5ae46ac0fb345ac687d813afee336480860ee029c60144e8e087c7dee14badf385d872f9f3c58d199f653103c14ceb270fdaaa63b4100491adec525c2774c30fbe469b60c96f16bf0"], 0x30}, 0x1, 0x0, 0x0, 0x405c885}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305839, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x2000000000000, 0xfcc3}) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 4.448296223s ago: executing program 8 (id=6163): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) process_madvise(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000017c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="161cc7dda8db1354435e6886b5603f55ab0333cfe78b430a2a5312157e04252c08f5f8ea7c505f893c2ee695034946debda722e2d8a27ccecd465e121749cea4e136544228d3c7a4aaad", 0x4a}], 0x1, 0x0, 0x0, 0x44870}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/5, 0x5}, {&(0x7f0000000180)=""/68, 0x44}], 0x2}, 0x40002140) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x1758}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000340)={r2, 0x1, 0x0, 0x1ff, 0xfff, 0x3}, 0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0xf0, 0x10, 0x413, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x0, 0x7, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xfe}, {0x1000000000000800, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x80, 0x8, 0xffffffffffffffff}, {0xf6, 0x1, 0x1}, 0x0, 0x0, 0x2, 0x1, 0x1}}, 0xf0}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x24, 0x10, 0xffffff1f, 0x470bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x111c4, 0x22}, [@IFLA_PHYS_PORT_ID={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0) 4.447998254s ago: executing program 8 (id=6164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000619b3b4063070120af9c0000000109021b0002000000000904b60000ff81ca000904"], 0x0) 4.241637924s ago: executing program 6 (id=6165): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e20, 0x4006, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}}, 0x0, 0x0, 0x16, 0x0, "024c08f6beaae211e04128017b8f9720fc434ce01e58499892b786263c721a4dd042fac0c78d10b9206d1cf9577ea4d8b709afd0a6d76f775344852e83a4fab66ac4883fbf7d17e0d8245a4aa8714ae3"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000180)={@in6={{0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}}, 0x0, 0x0, 0x0, 0x0, "effe7cad2de6bf631c12a221bdf61457764ad8a9a8107f46685c05636259b0cf52c12bc6803211423850d156923ea61746f1f02bad0561ba8fed2cd972974564dd4cbd4094f0432aed65c6b592b0c62c"}, 0xd8) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) 4.089082568s ago: executing program 4 (id=6167): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000004c0)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x82040, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="bc020000180001000000000000000000020000000000022900000000550015000500000098021680940201"], 0x2bc}}, 0x0) 4.020673262s ago: executing program 6 (id=6168): socket$nl_route(0x10, 0x3, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='pids.max\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket(0x40000000015, 0x5, 0x0) fsopen(0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0xe82e, 0x100) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x3a23, &(0x7f0000000300)={0x0, 0xd159, 0x0, 0x2, 0xc8}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x118, &(0x7f0000000280)=0x7, 0x0, 0x4) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r6, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r7, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r9, 0x2f000000}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='O', 0x1}, {&(0x7f00000000c0)="e32836a379fe6856228f9c09a1d91e4b76d4687f1a6fba258efde431682a9a73e2da1f0394e282372bdf485eb872afede1204f6f0be0d94550aeb3", 0x3b}], 0x2}}], 0x1, 0x0) 3.216889948s ago: executing program 8 (id=6170): syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r5 = dup2(r4, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fallocate(r5, 0x0, 0x8000000005, 0x100000101) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xff, 0x1c}, 0xc) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x612000, 0x10c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 2.972831105s ago: executing program 3 (id=6171): syz_open_dev$evdev(&(0x7f00000002c0), 0xc000, 0x142) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/60, 0x3c, 0x7984e2f8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000080), 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x4, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}]}]}, 0x3c}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000140)={0x57, 0x0, 0x0, {0x1, 0x1}, {0x80, 0x1}}) pselect6(0x40, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x7, 0x8, 0x0, 0x0, 0x2b}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x200000004, 0x7}, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c56096c590001040d007000fadb107c0844b9c9", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c000280050016"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x8040) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) 2.818939409s ago: executing program 6 (id=6172): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x3c, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b160000000000000000020000084c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000000800054000000017080006400000008908000240000000020900010073797a30000000000900020073797a3200"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2020}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0x5) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f00000000c0)=0x58, 0x5) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @remote}], 0x10) r9 = socket$kcm(0x10, 0x2, 0x4) socket(0x11, 0x800000003, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r10 = dup(r6) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)={0x294, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x330}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8a}]}, @TIPC_NLA_NODE={0x118, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xfc, 0x3, "4c1b78fb6fd5ab537b42c7bad20675470df756d4e5d635f3fc9223e831efd611e1c26e00cddb35a78f8b8d751174279a7ee4819fa6897edc52bfad3fdfbf5ee703a316445e455fa89fd6f8adb170b4a6d4961fddedf6011db92d7a19a038db63fe41496e2649fc2e64b8d04fd69f9f6ae9896e719a3f7e86844e15a555a5036b72c6d9f45a2b2848498d5664774e292990258c3540623fc1bab2dafaa4db52f8a4fb7366517c16e04dee742c84e54b6495c570e838ec72329b35b38dee515f4ee7de7b350cb92c17a9961ad528f8a1c964b85e58718d4e1989c902b9db14448ec95e117839787351b563406a5953b643c20831201863d639"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfd}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x97}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2e}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4d5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb13}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x40000020}, 0x20004004) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r10, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000400)={0x28, 0x6, r11, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000003c0)}) 2.621462518s ago: executing program 4 (id=6173): pipe(&(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000, &(0x7f00000015c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,default_permissions,blksize=0x0000000000000000,blksize=0x0000000000001a00,euid<', @ANYRESDEC=0x0, @ANYBLOB=',rootcontext=unconfined_u,fowner>', @ANYRESDEC=0xee01, @ANYBLOB, @ANYRESDEC=0xee00, @ANYBLOB=',context=root,rootcontext=sysadm_u,context=sysadm_u,dont_measure,subj_type=(:(}*,uid<', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x1, 0x0, &(0x7f0000000540)="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") r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000001540)='./file0\x00', r0, &(0x7f0000001580)='./file1\x00', 0x5) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x200, 0x7) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200, 0xa0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r2 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0xd, {{0x5}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0xfffffffe, 0x80, 0x4c3, 0x5}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x30, 0x7, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x40, 0xf7}}}}}]}}]}}, 0x0) 2.020087688s ago: executing program 3 (id=6174): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x4880) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000000000008900000008000300", @ANYRES32, @ANYBLOB="18001d81"], 0x34}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000280)=0x0) syz_open_procfs(r3, &(0x7f0000000300)='net/ip6_mr_cache\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000ffdbdf250c0000000a00060008020000000000000800090005ac0f000800090005ac0f000a00060008021100d82b0000"], 0x3c}, 0x1, 0x0, 0x0, 0x2008044}, 0x48055) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/psched\x00') sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)={0x4bc, 0x0, 0x5, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [{{0x254, 0x1, {{0x1, 0x1}, 0x40, 0x0, 0x7fff, 0x1, 0x25, 'syz1\x00', "12f4c25317d64314edbcee79ecc556968174826accb6e11087141f0f0b6d2c87", "03b00e63a2b1f9ddc8709691f599a437375ded7de977af1f1a98b8891f68ea9c", [{0xfffa, 0x6, {0x1, 0x2d24}}, {0x3, 0x100, {0x0, 0x7}}, {0x0, 0xfda3, {0x1, 0x8}}, {0x100, 0x3, {0x1, 0x3}}, {0x8, 0x1380, {0x0, 0x9}}, {0x1, 0xb1fe, {0x3, 0x80000001}}, {0x5, 0x4, {0x1, 0x4de}}, {0xb, 0x1, {0x2}}, {0x2, 0x1, {0x1, 0x7}}, {0xf, 0xd80e, {0x0, 0x4}}, {0x0, 0x7ff, {0x0, 0x6a5}}, {0x0, 0x7fff, {0x0, 0x401}}, {0x100, 0x5, {0x3, 0x5}}, {0xe, 0x8, {0x0, 0x1}}, {0x10, 0xf6a, {0x2, 0x4}}, {0x5, 0xc5, {0x3, 0x7}}, {0x7b65, 0x80, {0x2, 0x9}}, {0xf44, 0x1, {0x1, 0xb03}}, {0x0, 0xa748, {0x1, 0xd}}, {0xa, 0x80, {0x3, 0x8}}, {0x9, 0x79c8, {0x0, 0x84}}, {0x38, 0x81, {0x0, 0x1}}, {0x1, 0x5cd, {0x2, 0x7ff}}, {0x551a, 0xe, {0x3, 0x8}}, {0xfff, 0x9, {0x3, 0x3}}, {0x5, 0x10, {0x0, 0x2}}, {0x10, 0xe, {0x0, 0x2}}, {0x1ff, 0x8, {0x1, 0x5}}, {0x26, 0x5, {0x1, 0x7}}, {0x0, 0x5, {0x2, 0x15a}}, {0x6, 0x7927, {0x2, 0xdbc}}, {0xfff1, 0xfb2a, {0x3, 0xfffffff6}}, {0x6, 0x9, {0x1, 0x3}}, {0x6, 0x10, {0x2, 0x2}}, {0x4, 0x1, {0x1, 0x2}}, {0x8, 0x17, {0x0, 0x6}}, {0xd, 0x5, {0x2, 0x22d}}, {0x8000, 0x2, {0x0, 0x1}}, {0x1, 0x1ff, {0x0, 0x6}}, {0x81, 0xfff, {0x1, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0x7, 0x8, 0x2, 0xad, 0x12, 'syz1\x00', "3dd23f450f9fee3d4fa70b8b879a4ffc94f20f903b7eacb713f2a1ddaece042d", "c525a6da8175ce097da84573985651e3ba7a7afd3cc34d03b2fbf291938ec5d5", [{0x3, 0x7ff, {0x3, 0x9}}, {0x3, 0x4, {0x2, 0x5}}, {0xff80, 0xe, {0x0, 0x7}}, {0x6, 0x1fe9, {0x2, 0x4}}, {0x8, 0x2, {0x3, 0x1}}, {0x400, 0x0, {0x1, 0x53}}, {0xfe8, 0x3, {0x1, 0x446}}, {0x200, 0x2, {0x3, 0x6}}, {0x3, 0x4, {0x3, 0x3}}, {0x7, 0x9f75, {0x0, 0x3}}, {0xfffa, 0x2, {0x3, 0x7}}, {0xb, 0x3, {0x2, 0x7}}, {0x101, 0x9, {0x1, 0x6c32}}, {0x7, 0x6, {0x1, 0x5e3}}, {0x2475, 0x9, {0x2, 0x75}}, {0x1, 0x6, {0x0, 0x2}}, {0x7, 0x3, {0x0, 0xfffffff1}}, {0x0, 0x81, {0x1, 0x9}}, {0x3, 0x7, {0x2, 0x200}}, {0x7, 0x7, {0x2, 0xffff}}, {0x2, 0x1, {0x0, 0xd3a}}, {0x200, 0x4, {0x0, 0x9}}, {0x5, 0x8, {0x2, 0x3}}, {0xc2, 0xfffa, {0x2, 0x9}}, {0x2, 0x101, {0x1, 0x11ec6678}}, {0x4, 0x7fff, {0x2, 0x9}}, {0x6, 0xad1f, {0x1, 0x1ff}}, {0x3, 0x3, {0x2}}, {0xe7c7, 0x3, {0x1, 0x1}}, {0x7fff, 0x7f, {0x3, 0x8}}, {0x6, 0x5, {0x2, 0x8}}, {0x8, 0x1, {0x3, 0x5}}, {0xfd1, 0x5, {0x2, 0x401}}, {0x8, 0x101, {0x2, 0x7}}, {0x0, 0x1}, {0x62, 0x1, {0x5, 0x2}}, {0x6, 0xca4f, {0x0, 0x5}}, {0x1, 0x100, {0x2, 0xa}}, {0x3, 0x7, {0x1, 0x1}}, {0x5, 0xb9, {0x1, 0x5}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x1, 0x6}, {0xff}, 0x0, 0x1, 0x3}}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffff1d8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x1, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd, 0x0, 0x0, 0x1000, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x7ff, 0x0, 0x0, 0x7, 0x4, 0x7, 0x0, 0x3, 0x2, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0xffffffff, 0x3c, 0x0, 0x0, 0x4, 0x1000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xa97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0xfffffffc, 0x400000, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffd, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x1000, 0x0, 0x0, 0x200, 0x0, 0x0, 0x2, 0xb484, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x2dfd, 0x0, 0x0, 0x0, 0x4, 0x7, 0x72, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x40000000, 0xfffffffb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf20, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x1000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x9, 0x0, 0x0, 0xd79, 0x0, 0xa, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x4, 0x0, 0x4000, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ff, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) 1.961231825s ago: executing program 8 (id=6175): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x7, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000100, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x4, 0xc0800000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0xb], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd70000400000005000000080009000200000008000c000300000008000b00000000000600010011000000"], 0x34}}, 0x20) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r9, {0x2, 0x0, @multicast2}, 0x8000004}}, 0x2e) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x80028}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0xfffffffffffffffe, 0x1, 0x48}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000000030002"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r11 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r11, &(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYRESOCT=r2], 0x58) close(r11) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1.877218973s ago: executing program 3 (id=6176): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000140)={0x28, 0x14, 0x105, 0x70bd26, 0x25dfdb7b, {0x28, 0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "4ae292ffa4a8a192e237f54ddc"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4081}, 0x40) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="f26106dc48bafd6418e07421640e0edd053389c867771577037abcda0a966fc1814ee9d93f77769f8b023fe6c4d55d497535cdec7a993b5a5fceb07ebd84f64398e79a743b3da744782a281fe6ad36c60292eedd3279dbf5734c892bd14e285a6d2b6827b71efc47e1dd4eea38df80193b541180bc2df86d938e284e8d5e94487242", 0x82, 0x4000000, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 1.753997384s ago: executing program 6 (id=6178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffffc, 0x3f3}, {0x6, 0x24, 0x1a, 0x0, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x0, 0x20}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000280)={0x84, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x78, 0x0, 0x1, 0x201, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x2, 0x3, 0xc3, 0x3, 0x6]}]}, 0x78}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) 1.678736301s ago: executing program 3 (id=6179): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x10}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r11 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0xfffffffffffffe8f, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff}, {0xb, 0xffe1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x8020) 1.572725275s ago: executing program 3 (id=6180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) r1 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000240)=[{}, {0x0, 0x80000000}, {0x0, 0x80000000, 0x0, {0x0}}, {0x0, 0x80000000, 0x0, {0x0}}, {}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000800)={{r2, r3, 0x1, [0xffffffff, 0xb]}, {r4, r5, 0x4, [0x20008, 0xe7]}, 0x2, [0x93e, 0x7fffffff]}) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000040a0101"], 0x14}}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'X\x00\b\x00'}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058560f, &(0x7f0000000a40)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "68ab0498"}, 0x0, 0x1, {0x0}}) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.304861145s ago: executing program 3 (id=6182): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) 637.38549ms ago: executing program 5 (id=6183): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000120000000800080000000100080009000000000018000180"], 0x4c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f000000d0c0)=ANY=[], 0xa1b4}, 0x1, 0x0, 0x0, 0x80}, 0x8090) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @fib={{0x8}, @void}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0xf001, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x3, 0xfffff038}, {0x6, 0x1}]}, 0x34) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) 583.899005ms ago: executing program 5 (id=6184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, &(0x7f0000000000)) (async, rerun: 64) r2 = socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$netlink(0x10, 0x3, 0x4) (async) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (async) getsockopt$inet6_buf(r2, 0x29, 0x45, 0x0, &(0x7f0000000000)=0x1e) (async, rerun: 32) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@local, 0x80000000, 0x0, 0x0, 0x8, 0x3, 0xe}, 0x20) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4ea0}]}]}]}, 0x7c}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000000)=0x8, 0x4) 476.811741ms ago: executing program 8 (id=6185): syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r5 = dup2(r4, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fallocate(r5, 0x0, 0x8000000005, 0x100000101) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xff, 0x1c}, 0xc) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x612000, 0x10c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 476.456612ms ago: executing program 5 (id=6186): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x17f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) splice(r3, 0x0, r0, 0x0, 0x20000000000002, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x806, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 417.195789ms ago: executing program 5 (id=6187): r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x76, 0x101301) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x3, 0x3, 0x5) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000440)=@urb_type_iso={0x0, {0x1, 0x1}, 0x3ff, 0x2, 0x0, 0x0, 0x2c, 0xa8b, 0x1, 0x1, 0xfffffffb, 0x0, [{0x7, 0x9d3, 0x1}]}) 307.113921ms ago: executing program 5 (id=6188): socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x80, 0x10, 0x437, 0xfffffffe, 0x25df5bff, {0x0, 0x0, 0x0, r2, 0x5f501}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x54, 0x2, 0x0, 0x1, [@IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x5}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x1}, @IFLA_HSR_PROTOCOL={0x5}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x8}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x3286}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x81}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x11}, 0x40814) (async) r3 = msgget$private(0x0, 0x3b) msgctl$IPC_SET(r3, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff}) (async) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)) (async) socket$packet(0x11, 0x3, 0x300) (async) r5 = socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, 0x0, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffc8, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0x2f, &(0x7f0000000380)={&(0x7f0000000140)={0x6c, 0x0, 0xc, 0x70bd2b, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4042811}, 0x44004) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0xfffffffe, 0xc, 0x6, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtclass={0x2c, 0x28, 0x300, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xa, 0xc}, {0x1ffc5, 0xe}, {0x7, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0xd, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 0s ago: executing program 5 (id=6189): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB='@'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r3, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x1068) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x2}, @mss={0x2, 0x1}, @window={0x3, 0x8, 0x6}, @timestamp, @sack_perm, @window={0x3, 0x1, 0x5}], 0x8) sendto$inet(r8, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r8, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0) sendto(r8, &(0x7f0000000200)="0429235cc63e10a744cc693c844b32fac29d3786a9c6a6f9b6191f2628325948492183ae7c76852f1513f0731bedd1d123d945e7466bdb331f2405d52b6885c258", 0x41, 0x0, 0x0, 0x0) r9 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r9, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000000), 0x3, r6, 0xeeeeeeee}) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000000)={0x800, 0x3, 0x3, 0x988, 0x5, 0x74c7}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000300)={0x9, r10, r6}) sendto$packet(r0, &(0x7f0000000040)="dbe104b35716e67da422221d3286", 0xe, 0x20000814, &(0x7f0000000100)={0x11, 0x6, r1, 0x1, 0x5, 0x6, @local}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc, 0xd}, {0xfff3, 0x8}, {0xb}}}, 0x24}}, 0x20040000) kernel console output (not intermixed with test programs): 6 [ 1440.280325][T29741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1440.292095][ T39] usb usb9-port1: unable to enumerate USB device [ 1440.358701][T29741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1440.378213][T29741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1440.490490][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 1441.610215][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1441.610232][ T30] audit: type=1326 audit(1767519446.172:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29767 comm="syz.3.5832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eb98f749 code=0x7ffc0000 [ 1441.640470][ T30] audit: type=1326 audit(1767519446.212:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29767 comm="syz.3.5832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7ff6eb98f749 code=0x7ffc0000 [ 1441.667781][ T30] audit: type=1326 audit(1767519446.232:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29767 comm="syz.3.5832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eb98f749 code=0x7ffc0000 [ 1441.691675][ T30] audit: type=1326 audit(1767519446.262:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29767 comm="syz.3.5832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff6eb98f749 code=0x7ffc0000 [ 1441.730629][ T30] audit: type=1326 audit(1767519446.292:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29767 comm="syz.3.5832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eb98f749 code=0x7ffc0000 [ 1441.755063][ T30] audit: type=1326 audit(1767519446.322:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29767 comm="syz.3.5832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff6eb98f749 code=0x7ffc0000 [ 1441.783408][ T30] audit: type=1326 audit(1767519446.342:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29767 comm="syz.3.5832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eb98f749 code=0x7ffc0000 [ 1441.807375][ T30] audit: type=1326 audit(1767519446.372:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29767 comm="syz.3.5832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff6eb98f749 code=0x7ffc0000 [ 1441.843091][ T30] audit: type=1326 audit(1767519446.402:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29767 comm="syz.3.5832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6eb98f749 code=0x7ffc0000 [ 1441.892645][ T30] audit: type=1326 audit(1767519446.452:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29767 comm="syz.3.5832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff6eb98f749 code=0x7ffc0000 [ 1441.971135][T29774] qrtr: Invalid version 43 [ 1442.140622][T12376] IPVS: starting estimator thread 0... [ 1442.185837][T29780] program syz.8.5834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1442.235560][T29781] IPVS: using max 29 ests per chain, 69600 per kthread [ 1442.826642][T29788] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5836'. [ 1443.043287][T29788] bond3: option resend_igmp: invalid value (511) [ 1443.093167][T29788] bond3: option resend_igmp: allowed values 0 - 255 [ 1443.154518][T29788] bond3 (unregistering): Released all slaves [ 1443.227942][T29796] openvswitch: netlink: Message has 16 unknown bytes. [ 1443.665672][ T130] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1443.858867][ T130] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.890946][ T130] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1443.984728][ T130] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1444.018560][ T130] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.049530][ T130] usb 4-1: Product: syz [ 1444.065496][ T130] usb 4-1: Manufacturer: syz [ 1444.074171][ T130] usb 4-1: SerialNumber: syz [ 1444.092930][ T130] usb 4-1: config 0 descriptor?? [ 1444.225659][ T10] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 1444.410100][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 1444.430365][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1444.458948][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1444.491491][T29807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1444.501560][ T10] usb 9-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1444.534163][T29807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1444.563903][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.619599][ T10] usb 9-1: config 0 descriptor?? [ 1444.792072][ T130] usb 4-1: USB disconnect, device number 25 [ 1444.843307][T29805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1444.860536][T29805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1445.102302][ T10] kye 0003:0458:5016.0066: control desc unexpectedly large [ 1445.148149][ T10] input: HID 0458:5016 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5016.0066/input/input153 [ 1445.252424][ T10] input: HID 0458:5016 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5016.0066/input/input154 [ 1445.377692][ T10] kye 0003:0458:5016.0066: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.8-1/input0 [ 1445.945596][ T39] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1446.105822][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 1446.123326][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1446.139240][ T39] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 1446.153826][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1446.186839][ T39] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 1446.198718][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.210785][ T39] usb 4-1: Product: syz [ 1446.215032][ T39] usb 4-1: Manufacturer: syz [ 1446.226800][ T39] usb 4-1: SerialNumber: syz [ 1446.235302][ T39] usb 4-1: config 0 descriptor?? [ 1446.241921][ C0] kye 0003:0458:5016.0066: usb_submit_urb(ctrl) failed: -1 [ 1446.266118][ T39] radioshark 4-1:0.0: Invalid radioSHARK device [ 1446.288833][ T39] radioshark 4-1:0.0: probe with driver radioshark failed with error -22 [ 1446.338913][ T39] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1446.431555][T29845] syzkaller0: entered promiscuous mode [ 1446.450760][T29845] syzkaller0: entered allmulticast mode [ 1446.565370][T29839] netlink: 'syz.3.5849': attribute type 21 has an invalid length. [ 1446.605606][T29839] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5849'. [ 1446.660022][T29839] netlink: 'syz.3.5849': attribute type 4 has an invalid length. [ 1446.688363][T29839] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5849'. [ 1446.934825][T29853] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1446.941382][T29853] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1446.954027][T29853] vhci_hcd vhci_hcd.0: Device attached [ 1447.018905][ T10] usb 9-1: USB disconnect, device number 90 [ 1447.057871][ T130] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 1447.137694][T29854] vhci_hcd: connection closed [ 1447.137887][T29115] vhci_hcd vhci_hcd.6: stop threads [ 1447.165938][T22521] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1447.184550][T29115] vhci_hcd vhci_hcd.6: release socket [ 1447.218667][T29115] vhci_hcd vhci_hcd.6: disconnect device [ 1447.245907][T22521] usb 45-1: new low-speed USB device number 4 using vhci_hcd [ 1447.262036][ T130] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 1447.295815][T22521] usb 45-1: enqueue for inactive port 0 [ 1447.305545][ T130] usb 5-1: config 0 has no interface number 0 [ 1447.330973][ T130] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1447.356687][ T130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.361061][T29863] Cannot find add_set index 0 as target [ 1447.392045][ T130] usb 5-1: Product: syz [ 1447.399549][T22521] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1447.406579][ T130] usb 5-1: Manufacturer: syz [ 1447.438829][ T130] usb 5-1: SerialNumber: syz [ 1447.450221][ T130] usb 5-1: config 0 descriptor?? [ 1447.677164][T24613] raw-gadget.0 gadget.5: failed to queue disconnect event [ 1447.705502][T12376] usb 9-1: new full-speed USB device number 91 using dummy_hcd [ 1447.750169][ T130] usb 5-1: Firmware version (0.0) predates our first public release. [ 1447.792015][ T130] usb 5-1: Please update to version 0.2 or newer [ 1447.898289][T12376] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1447.913109][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1447.931511][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1447.935893][T12376] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1447.950838][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1447.973327][T12376] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1447.973344][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1447.992096][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1448.010452][T12376] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.049620][T29864] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1448.075604][T29864] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1448.092138][T12376] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1448.181835][T19751] tipc: Resetting bearer [ 1448.262202][T19751] tipc: Disabling bearer [ 1448.291796][ T39] usb 9-1: USB disconnect, device number 91 [ 1448.400024][ T130] usb 5-1: USB disconnect, device number 12 [ 1448.513956][ T6147] usb 4-1: USB disconnect, device number 26 [ 1448.547323][T12376] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1448.693160][T29877] chnl_net:caif_netlink_parms(): no params data found [ 1448.730641][T12376] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.752848][T12376] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1448.769381][T12376] usb 7-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1448.785213][T12376] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.799252][T12376] usb 7-1: Product: syz [ 1448.805013][T12376] usb 7-1: Manufacturer: syz [ 1448.815890][T12376] usb 7-1: SerialNumber: syz [ 1448.826311][T12376] usb 7-1: config 0 descriptor?? [ 1448.858902][T29877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.865575][ T130] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1448.873789][T29877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.882558][T29877] bridge_slave_0: entered allmulticast mode [ 1448.890739][T29877] bridge_slave_0: entered promiscuous mode [ 1448.900043][T29877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.907306][T29877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.914525][T29877] bridge_slave_1: entered allmulticast mode [ 1448.923436][T29877] bridge_slave_1: entered promiscuous mode [ 1449.025579][ T130] usb 5-1: Using ep0 maxpacket: 16 [ 1449.029690][T29877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1449.032808][ T130] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1449.044936][T29877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1449.056414][T22521] usb 7-1: USB disconnect, device number 99 [ 1449.074971][ T130] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1449.091516][ T130] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1449.102234][ T130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.112965][ T130] usb 5-1: Product: syz [ 1449.119264][ T130] usb 5-1: Manufacturer: syz [ 1449.125082][ T130] usb 5-1: SerialNumber: syz [ 1449.182478][T29877] team0: Port device team_slave_0 added [ 1449.200966][T29877] team0: Port device team_slave_1 added [ 1449.303043][T29877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1449.319927][T29877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1449.353144][T29877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1449.378181][T29877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1449.378417][ T130] usb 5-1: 0:2 : does not exist [ 1449.410614][ T130] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1449.411632][T29877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1449.476958][ T130] usb 5-1: USB disconnect, device number 13 [ 1449.536449][T29877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1449.560503][ T6404] udevd[6404]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1449.636445][ T10] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 1449.816333][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 1449.840538][ T10] usb 9-1: config 0 has no interfaces? [ 1449.860086][ T10] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1449.886827][ T10] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1449.903849][ T10] usb 9-1: Manufacturer: syz [ 1449.923354][ T10] usb 9-1: config 0 descriptor?? [ 1450.089794][ T5838] Bluetooth: hci2: command tx timeout [ 1450.108410][T29877] hsr_slave_0: entered promiscuous mode [ 1450.115153][T29877] hsr_slave_1: entered promiscuous mode [ 1450.121888][T29877] debugfs: 'hsr0' already exists in 'hsr' [ 1450.127949][T29877] Cannot create hsr debugfs directory [ 1450.450443][T29903] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5866'. [ 1451.190994][T29877] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1451.242047][T29877] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1451.479478][T29877] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1451.500568][T29877] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1451.947735][T24731] bond0: (slave syz_tun): Releasing backup interface [ 1451.985623][T29932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5874'. [ 1452.091345][T29877] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1452.114316][T29877] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1452.166089][ T5838] Bluetooth: hci2: command tx timeout [ 1452.210593][T29877] `: Port device netdevsim0 removed [ 1452.218928][T29877] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1452.229803][T29877] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1452.365802][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1452.515584][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1452.523599][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1452.535737][ T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1452.544923][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.556132][ T10] usb 4-1: config 0 descriptor?? [ 1452.970581][ T10] mcp2221 0003:04D8:00DD.0067: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1453.132440][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1453.132458][ T30] audit: type=1326 audit(1767519457.692:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29940 comm="syz.4.5877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1453.164716][ T30] audit: type=1326 audit(1767519457.692:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29940 comm="syz.4.5877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1453.197153][T12376] usb 4-1: USB disconnect, device number 27 [ 1453.240171][ T30] audit: type=1326 audit(1767519457.732:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29940 comm="syz.4.5877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1453.286658][ T30] audit: type=1326 audit(1767519457.752:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29940 comm="syz.4.5877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1453.312063][T29941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5877'. [ 1453.344599][ T130] usb 9-1: USB disconnect, device number 92 [ 1453.350106][ T30] audit: type=1326 audit(1767519457.752:3903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29940 comm="syz.4.5877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1453.397849][ T30] audit: type=1326 audit(1767519457.762:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29940 comm="syz.4.5877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1453.427529][ T30] audit: type=1326 audit(1767519457.802:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29940 comm="syz.4.5877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1453.459326][ T30] audit: type=1326 audit(1767519457.802:3906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29940 comm="syz.4.5877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1453.482740][ T30] audit: type=1326 audit(1767519457.842:3907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29940 comm="syz.4.5877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1453.505949][ T30] audit: type=1326 audit(1767519457.852:3908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29940 comm="syz.4.5877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1453.535290][T29944] veth4: entered promiscuous mode [ 1453.555109][T29944] veth4: entered allmulticast mode [ 1453.774681][T29950] sit1: entered allmulticast mode [ 1453.817729][T29952] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5881'. [ 1453.880129][ T130] usb 9-1: new full-speed USB device number 93 using dummy_hcd [ 1453.921129][T19982] bridge_slave_1: left allmulticast mode [ 1453.953138][T19982] bridge_slave_1: left promiscuous mode [ 1453.985708][T19982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.006625][T19982] bridge_slave_0: left allmulticast mode [ 1454.012329][T19982] bridge_slave_0: left promiscuous mode [ 1454.041355][T19982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.055291][ T130] usb 9-1: config 0 has an invalid descriptor of length 239, skipping remainder of the config [ 1454.090075][ T130] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1454.139216][ T130] usb 9-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ca.e6 [ 1454.178616][ T130] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.229837][ T130] usb 9-1: Product: syz [ 1454.243925][ T130] usb 9-1: Manufacturer: syz [ 1454.257515][ T5838] Bluetooth: hci2: command tx timeout [ 1454.266529][ T130] usb 9-1: SerialNumber: syz [ 1454.286357][ T130] usb 9-1: config 0 descriptor?? [ 1454.548451][T19982] bond0 (unregistering): (slave ip6gretap2): Releasing backup interface [ 1454.618003][ T130] usb 9-1: USB disconnect, device number 93 [ 1455.307293][T19982] tipc: Disabling bearer [ 1455.365791][ T130] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1455.400139][T19982] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1455.529344][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1455.539613][ T130] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1455.551515][ T130] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1455.574332][ T130] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1455.596826][ T130] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 1455.626102][ T130] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.655376][ T130] usb 5-1: config 0 descriptor?? [ 1455.716307][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1455.727925][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1455.755991][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1455.795525][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1455.846354][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1455.875617][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.906784][T29974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1455.929601][ T10] usb 4-1: config 0 descriptor?? [ 1455.943461][T29974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1456.008670][T29975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1456.037865][T29975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1456.060499][ T130] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0068/input/input155 [ 1456.095985][T29975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1456.128233][T29975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1456.176057][T29975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1456.192524][ T130] sony 0003:054C:03D5.0068: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 1456.223679][T29975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1456.264397][T29975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1456.293896][T29975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1456.328853][ T5838] Bluetooth: hci2: command tx timeout [ 1456.450035][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0069/input/input156 [ 1456.493606][ T10] microsoft 0003:045E:07DA.0069: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1456.521744][T19982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1456.543607][T19982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1456.559440][T19982] bond0 (unregistering): Released all slaves [ 1456.768794][ T10] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1457.071517][ T914] usb 4-1: USB disconnect, device number 28 [ 1457.214321][T19982] bond1 (unregistering): Released all slaves [ 1457.489270][T19982] bond2 (unregistering): Released all slaves [ 1457.939581][T19982] bond3 (unregistering): (slave veth3): Releasing active interface [ 1457.970809][T19982] bond3 (unregistering): Released all slaves [ 1458.178757][ T9] usb 5-1: USB disconnect, device number 14 [ 1458.768138][ T914] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1458.942965][T19982] bond4 (unregistering): (slave veth5): Releasing active interface [ 1458.960127][T19982] dummy0: entered promiscuous mode [ 1458.967638][ T914] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.982359][ T914] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1459.007476][T19982] bond4 (unregistering): (slave dummy0): Releasing active interface [ 1459.016622][ T914] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1459.026500][ T914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.035195][ T914] usb 5-1: Product: syz [ 1459.040902][ T914] usb 5-1: Manufacturer: syz [ 1459.046296][ T914] usb 5-1: SerialNumber: syz [ 1459.059403][T19982] bond4 (unregistering): Released all slaves [ 1459.098153][T19982] bond5 (unregistering): Released all slaves [ 1459.282515][T29991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.294198][T29991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.303797][T29994] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 3, id = 0 [ 1459.316923][ T914] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1459.329722][T19982] tipc: Left network mode [ 1459.347177][ T914] usb 5-1: USB disconnect, device number 15 [ 1459.495229][T29998] veth0: entered promiscuous mode [ 1459.502947][T29998] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 1459.530833][T29991] netlink: 360 bytes leftover after parsing attributes in process `syz.4.5890'. [ 1459.561042][T29877] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1459.612490][ T914] hid_parser_main: 8 callbacks suppressed [ 1459.612509][ T914] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 1459.683552][ T914] hid-generic 0000:0000:0000.006A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1459.760818][T29877] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1459.825545][T12376] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1459.838922][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1459.838938][ T30] audit: type=1400 audit(1767519464.402:3916): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A61616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616106 pid=30012 comm="syz.8.5895" [ 1459.933991][T29877] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1459.955594][T12376] usb 5-1: device descriptor read/64, error -71 [ 1459.969060][T29877] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1460.195523][T12376] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1460.220973][T29877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1460.252621][T29877] 8021q: adding VLAN 0 to HW filter on device team0 [ 1460.325850][T12376] usb 5-1: device descriptor read/64, error -71 [ 1460.389711][T19981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1460.396877][T19981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1460.445969][T12376] usb usb5-port1: attempt power cycle [ 1460.486534][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.493760][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1460.518196][T30032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5898'. [ 1460.569041][T19982] hsr_slave_0: left promiscuous mode [ 1460.589885][T19982] hsr_slave_1: left promiscuous mode [ 1460.611948][T19982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1460.806019][T12376] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1460.826245][T12376] usb 5-1: device descriptor read/8, error -71 [ 1461.115887][T12376] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1461.167065][T12376] usb 5-1: device descriptor read/8, error -71 [ 1461.287179][T12376] usb usb5-port1: unable to enumerate USB device [ 1461.345859][T24854] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 1461.412381][T30043] netlink: 'syz.8.5902': attribute type 7 has an invalid length. [ 1461.537165][T24854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1461.575486][T24854] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1461.607393][T24854] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1461.665615][T24854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.721684][T24854] usb 4-1: config 0 descriptor?? [ 1461.751287][T30041] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1461.982949][T30041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1461.997964][T30041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1462.009758][T19982] ` (unregistering): Port device team_slave_1 removed [ 1462.026877][T24854] usbhid 4-1:0.0: can't add hid device: -71 [ 1462.038075][T24854] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1462.054143][T24854] usb 4-1: USB disconnect, device number 29 [ 1462.220541][T19982] ` (unregistering): Port device team_slave_0 removed [ 1462.585490][T24854] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1462.775620][T24854] usb 4-1: Using ep0 maxpacket: 32 [ 1462.813176][T24854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 1462.840869][T24854] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1462.873961][T24854] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1462.884690][T24854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.923751][T24854] usb 4-1: config 0 descriptor?? [ 1463.352953][T24854] hid-rmi 0003:06CB:81A7.006B: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.3-1/input0 [ 1463.575035][T30068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.593441][T30068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.748175][ T10] usb 4-1: USB disconnect, device number 30 [ 1463.946277][T29877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1464.013883][T29877] veth0_vlan: entered promiscuous mode [ 1464.052249][T29877] veth1_vlan: entered promiscuous mode [ 1464.101310][T29877] veth0_macvtap: entered promiscuous mode [ 1464.125056][T29877] veth1_macvtap: entered promiscuous mode [ 1464.177264][T29877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1464.204545][T29877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1464.227210][T19981] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.254721][T19981] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.284832][T19981] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.344250][T19981] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.418807][ T6054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1464.438689][ T6054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1464.529684][T29113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1464.551253][T29113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1465.148576][T30112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.184763][T30112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.206234][T24854] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1465.375513][T24854] usb 7-1: Using ep0 maxpacket: 8 [ 1465.380808][ T9] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 1465.405585][T24854] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1465.431537][T24854] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1465.465495][T24854] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1465.507218][T24854] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1465.527000][T24854] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1465.568399][T24854] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1465.568459][ T9] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1465.641521][T24854] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1465.650637][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.653494][ T9] usb 9-1: config 0 descriptor?? [ 1465.706704][T24854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.708639][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1465.764696][T24854] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 1466.033996][T19982] IPVS: stop unused estimator thread 0... [ 1466.203783][T30123] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5917'. [ 1466.927595][ T9] usb 9-1: USB disconnect, device number 94 [ 1467.347813][T30135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5923'. [ 1467.505723][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1467.628996][T30145] netlink: get zone limit has 8 unknown bytes [ 1467.678725][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 11: 129, using maximum allowed: 30 [ 1467.721109][ T9] usb 4-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1467.770693][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1467.795052][ T9] usb 4-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 1467.830097][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.917284][ T9] usb 4-1: config 0 descriptor?? [ 1468.136822][T30139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.145591][T24854] usb 9-1: new high-speed USB device number 95 using dummy_hcd [ 1468.153328][ T914] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1468.183369][ T10] usb 7-1: USB disconnect, device number 101 [ 1468.185745][T30139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.328993][T24854] usb 9-1: too many configurations: 98, using maximum allowed: 8 [ 1468.337706][ T914] usb 6-1: Using ep0 maxpacket: 32 [ 1468.344833][ T914] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1468.355538][T24854] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 1468.363477][T24854] usb 9-1: can't read configurations, error -22 [ 1468.371936][ T914] usb 6-1: config 0 has no interface number 0 [ 1468.380333][ T914] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1468.393675][ T914] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1468.407597][ T914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.416097][ T914] usb 6-1: Product: syz [ 1468.434609][ T9] aquacomputer_d5next 0003:0C70:F001.006C: unknown main item tag 0x0 [ 1468.453224][ T914] usb 6-1: Manufacturer: syz [ 1468.463744][ T9] aquacomputer_d5next 0003:0C70:F001.006C: unknown main item tag 0x0 [ 1468.490154][ T9] aquacomputer_d5next 0003:0C70:F001.006C: unknown main item tag 0x0 [ 1468.497389][ T914] usb 6-1: SerialNumber: syz [ 1468.514794][ T9] aquacomputer_d5next 0003:0C70:F001.006C: unknown main item tag 0x0 [ 1468.516056][T24854] usb 9-1: new high-speed USB device number 96 using dummy_hcd [ 1468.541721][ T9] aquacomputer_d5next 0003:0C70:F001.006C: unknown main item tag 0x0 [ 1468.554703][ T9] aquacomputer_d5next 0003:0C70:F001.006C: unknown main item tag 0x0 [ 1468.555709][ T914] usb 6-1: config 0 descriptor?? [ 1468.607570][ T9] aquacomputer_d5next 0003:0C70:F001.006C: hidraw0: USB HID v0.00 Device [HID 0c70:f001] on usb-dummy_hcd.3-1/input0 [ 1468.616498][ T914] smsc75xx v1.0.0 [ 1468.732997][T30163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5933'. [ 1468.743223][T24854] usb 9-1: too many configurations: 98, using maximum allowed: 8 [ 1468.770393][T24854] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 1468.804897][ T9] usb 4-1: USB disconnect, device number 31 [ 1468.829775][T24854] usb 9-1: can't read configurations, error -22 [ 1468.844343][T24854] usb usb9-port1: attempt power cycle [ 1469.186230][T24854] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 1469.224721][T24854] usb 9-1: too many configurations: 98, using maximum allowed: 8 [ 1469.233179][ T914] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1469.274670][ T914] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1469.291118][T24854] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 1469.303195][T24854] usb 9-1: can't read configurations, error -22 [ 1469.467888][T24854] usb 9-1: new high-speed USB device number 98 using dummy_hcd [ 1469.501633][ T30] audit: type=1326 audit(1767519474.062:3917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30175 comm="syz.4.5938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1469.528448][ T30] audit: type=1326 audit(1767519474.092:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30175 comm="syz.4.5938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1469.553176][T24854] usb 9-1: too many configurations: 98, using maximum allowed: 8 [ 1469.565799][ T30] audit: type=1326 audit(1767519474.092:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30175 comm="syz.4.5938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1469.589908][T24854] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 1469.603598][T24854] usb 9-1: can't read configurations, error -22 [ 1469.612436][T24854] usb usb9-port1: unable to enumerate USB device [ 1469.626000][ T30] audit: type=1326 audit(1767519474.092:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30175 comm="syz.4.5938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1469.725743][ T9] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 1469.893507][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.906536][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1469.917935][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1469.929615][ T9] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1469.938732][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.955617][T30174] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1469.974905][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 1469.985738][ T9] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1469.994518][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 1470.002893][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 1470.024020][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1470.033371][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 1470.045148][T30191] xt_policy: output policy not valid in PREROUTING and INPUT [ 1470.199124][T30193] xt_hashlimit: max too large, truncated to 1048576 [ 1470.219148][T30193] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1470.642496][T30201] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5944'. [ 1470.747355][T30202] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5944'. [ 1470.817739][T30203] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5944'. [ 1470.865085][T30152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.868290][T30204] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5944'. [ 1470.883400][T30152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.920180][T30174] usb 4-1: reset full-speed USB device number 32 using dummy_hcd [ 1470.928225][ T914] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1470.954861][ T914] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1470.977170][ T914] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1470.988099][ T914] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 1471.043023][ T914] usb 6-1: USB disconnect, device number 26 [ 1471.144010][T30196] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1471.183425][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1471.190041][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1471.196337][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1471.202919][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1471.209243][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1471.215850][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1471.222106][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1471.228682][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1471.234914][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1471.241498][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1471.248173][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1471.254762][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1471.261518][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1471.268108][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1471.274357][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1471.280942][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1471.287268][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1471.293868][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1471.300143][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1471.306748][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1471.361258][T30211] fuse: Bad value for 'fd' [ 1471.489256][T30201] team0 (unregistering): Port device team_slave_0 removed [ 1471.501871][T30201] team0 (unregistering): Port device team_slave_1 removed [ 1471.534008][T30205] @ÿ: renamed from veth0_vlan (while UP) [ 1471.540387][T22521] usb 4-1: USB disconnect, device number 32 [ 1471.745735][T24854] usb 9-1: new high-speed USB device number 99 using dummy_hcd [ 1471.905532][T24854] usb 9-1: Using ep0 maxpacket: 8 [ 1471.915614][ T914] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1471.926664][T24854] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1471.938850][T24854] usb 9-1: config 8 has an invalid interface number: 37 but max is 0 [ 1471.947295][T24854] usb 9-1: config 8 has an invalid descriptor of length 39, skipping remainder of the config [ 1471.960661][T24854] usb 9-1: config 8 has no interface number 0 [ 1471.967228][T24854] usb 9-1: config 8 interface 37 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1471.981542][T24854] usb 9-1: config 8 interface 37 has no altsetting 0 [ 1471.991633][T24854] usb 9-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=76.e4 [ 1472.002595][T24854] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.019300][T24854] usb 9-1: Product: syz [ 1472.024740][T24854] usb 9-1: Manufacturer: syz [ 1472.030191][T24854] usb 9-1: SerialNumber: syz [ 1472.075996][ T914] usb 7-1: device descriptor read/64, error -71 [ 1472.082348][ T39] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1472.245847][ T39] usb 6-1: Using ep0 maxpacket: 16 [ 1472.260702][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1472.275341][ T39] usb 6-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 1472.285239][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.298796][ T39] usb 6-1: config 0 descriptor?? [ 1472.325838][ T914] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1472.515721][ T914] usb 7-1: device descriptor read/64, error -71 [ 1472.630754][ T914] usb usb7-port1: attempt power cycle [ 1472.764635][ T39] aquacomputer_d5next 0003:0C70:F003.006D: item fetching failed at offset 4/5 [ 1472.778770][ T39] aquacomputer_d5next 0003:0C70:F003.006D: probe with driver aquacomputer_d5next failed with error -22 [ 1472.827844][ T39] usb 6-1: USB disconnect, device number 27 [ 1473.006872][ T914] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1473.049794][ T914] usb 7-1: device descriptor read/8, error -71 [ 1473.306095][ T914] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1473.336240][ T914] usb 7-1: device descriptor read/8, error -71 [ 1473.457246][ T914] usb usb7-port1: unable to enumerate USB device [ 1473.543434][ T30] audit: type=1326 audit(1767519478.102:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30246 comm="syz.4.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1473.617219][ T30] audit: type=1326 audit(1767519478.112:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30246 comm="syz.4.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1473.664141][ T30] audit: type=1326 audit(1767519478.112:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30246 comm="syz.4.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1473.704143][T30238] ip6gre1: entered allmulticast mode [ 1473.732872][ T30] audit: type=1326 audit(1767519478.112:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30246 comm="syz.4.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1473.770161][ T30] audit: type=1326 audit(1767519478.112:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30246 comm="syz.4.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1473.829857][ T30] audit: type=1326 audit(1767519478.112:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30246 comm="syz.4.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1474.202964][T24854] usb 9-1: USB disconnect, device number 99 [ 1474.277507][ T6404] udevd[6404]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:8.37/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1474.498702][T30271] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5959'. [ 1474.779926][T22521] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1474.975687][T22521] usb 4-1: device descriptor read/64, error -71 [ 1475.125602][ T130] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1475.245524][T22521] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1475.305778][ T130] usb 7-1: Using ep0 maxpacket: 8 [ 1475.322236][ T130] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1475.363470][ T130] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1475.395578][T22521] usb 4-1: device descriptor read/64, error -71 [ 1475.404605][ T130] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1475.435237][ T130] usb 7-1: Product: syz [ 1475.454597][ T130] usb 7-1: Manufacturer: syz [ 1475.473221][ T130] usb 7-1: SerialNumber: syz [ 1475.526594][T22521] usb usb4-port1: attempt power cycle [ 1475.716155][ T130] usb 7-1: Handspring Visor / Palm OS: No valid connect info available [ 1475.740182][ T130] usb 7-1: Handspring Visor / Palm OS: port 109, is for unknown use [ 1475.759431][ T130] usb 7-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 1475.801992][ T130] usb 7-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1475.885682][T22521] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1475.927783][ T130] usb 7-1: palm_os_3_probe - error -71 getting bytes available request [ 1475.966328][T22521] usb 4-1: device descriptor read/8, error -71 [ 1475.989600][ T130] visor 7-1:1.0: Handspring Visor / Palm OS converter detected [ 1476.045179][ T130] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1476.109121][ T130] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1476.138258][ T130] usb 7-1: USB disconnect, device number 106 [ 1476.175818][ T130] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1476.196858][T30295] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5968'. [ 1476.206971][T22521] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1476.226266][ T130] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1476.240474][T22521] usb 4-1: device descriptor read/8, error -71 [ 1476.257222][ T130] visor 7-1:1.0: device disconnected [ 1476.359624][T22521] usb usb4-port1: unable to enumerate USB device [ 1476.396105][ T9] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 1476.557373][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.585529][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1476.638711][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1476.672782][ T9] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1476.732612][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.747493][ T130] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 1476.777197][T30293] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1476.805187][ T9] hub 6-1:1.0: bad descriptor, ignoring hub [ 1476.825380][ T9] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1476.843742][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 1476.854153][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 1476.860697][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1476.871592][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 1476.915588][ T130] usb 7-1: Using ep0 maxpacket: 16 [ 1476.923093][ T130] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1476.934783][ T130] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1476.945103][ T130] usb 7-1: New USB device found, idVendor=056e, idProduct=019b, bcdDevice= 0.00 [ 1476.956591][ T130] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.967893][ T130] usb 7-1: config 0 descriptor?? [ 1477.025685][T22521] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1477.184117][T30301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.192929][T22521] usb 5-1: Using ep0 maxpacket: 16 [ 1477.203689][T22521] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1477.216305][T30301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.224465][T22521] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1477.280471][T22521] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1477.305543][T22521] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.313861][T22521] usb 5-1: Product: syz [ 1477.318441][T22521] usb 5-1: Manufacturer: syz [ 1477.323106][T22521] usb 5-1: SerialNumber: syz [ 1477.652947][ T130] usbhid 7-1:0.0: can't add hid device: -71 [ 1477.667392][ T130] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1477.706473][T30293] usb 6-1: reset full-speed USB device number 28 using dummy_hcd [ 1477.751783][ T130] usb 7-1: USB disconnect, device number 107 [ 1477.754410][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1477.754430][ T30] audit: type=1326 audit(1767519482.312:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30307 comm="syz.8.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1477.838182][T22521] usb 5-1: cannot find UAC_HEADER [ 1477.841621][ T30] audit: type=1326 audit(1767519482.362:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30307 comm="syz.8.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1477.927169][T22521] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1477.937289][ T30] audit: type=1326 audit(1767519482.502:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30307 comm="syz.8.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1477.967430][T30306] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 1478.028209][T22521] usb 5-1: USB disconnect, device number 20 [ 1478.041041][ T30] audit: type=1326 audit(1767519482.502:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30307 comm="syz.8.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1478.060233][ T6404] udevd[6404]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1478.103615][ T30] audit: type=1326 audit(1767519482.502:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30307 comm="syz.8.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1478.130649][ T30] audit: type=1326 audit(1767519482.602:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30307 comm="syz.8.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1478.203084][ T30] audit: type=1326 audit(1767519482.652:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30307 comm="syz.8.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1478.285359][ T30] audit: type=1326 audit(1767519482.662:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30307 comm="syz.8.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1478.338708][ T914] usb 6-1: USB disconnect, device number 28 [ 1478.657830][T30329] vlan2: entered allmulticast mode [ 1478.674563][T30329] bridge0: port 3(vlan2) entered blocking state [ 1478.705216][T30329] bridge0: port 3(vlan2) entered disabled state [ 1478.735434][T30333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5980'. [ 1478.747013][T30329] vlan2: entered promiscuous mode [ 1479.196216][T22521] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1479.403239][T22521] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1479.439677][T22521] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.498215][T22521] usb 5-1: Product: syz [ 1479.512770][T22521] usb 5-1: Manufacturer: syz [ 1479.527695][T22521] usb 5-1: SerialNumber: syz [ 1479.555009][T30349] netlink: 'syz.6.5984': attribute type 13 has an invalid length. [ 1479.967176][T22521] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1480.094142][T22521] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1480.138404][T22521] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1480.487364][T22521] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1480.507210][T22521] usb 5-1: USB disconnect, device number 21 [ 1481.129416][ T5838] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1481.141147][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1481.141167][ T5838] Tainted: [L]=SOFTLOCKUP [ 1481.141171][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1481.141179][ T5838] Workqueue: hci0 hci_rx_work [ 1481.141197][ T5838] Call Trace: [ 1481.141203][ T5838] [ 1481.141209][ T5838] dump_stack_lvl+0xe8/0x150 [ 1481.141225][ T5838] sysfs_create_dir_ns+0x259/0x280 [ 1481.141238][ T5838] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1481.141250][ T5838] ? do_raw_spin_unlock+0x122/0x240 [ 1481.141266][ T5838] kobject_add_internal+0x6ab/0xcc0 [ 1481.141283][ T5838] kobject_add+0x155/0x220 [ 1481.141297][ T5838] ? __pfx_kobject_add+0x10/0x10 [ 1481.141309][ T5838] ? _raw_spin_unlock+0x28/0x50 [ 1481.141324][ T5838] ? get_device_parent+0x366/0x3a0 [ 1481.141337][ T5838] device_add+0x408/0xb80 [ 1481.141349][ T5838] hci_conn_add_sysfs+0xd5/0x210 [ 1481.141361][ T5838] le_conn_complete_evt+0xf1d/0x1420 [ 1481.141380][ T5838] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1481.141391][ T5838] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1481.141401][ T5838] ? __asan_memcpy+0x40/0x70 [ 1481.141413][ T5838] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1481.141423][ T5838] ? skb_pull_data+0xfb/0x200 [ 1481.141438][ T5838] hci_le_enh_conn_complete_evt+0x189/0x4a0 [ 1481.141452][ T5838] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1481.141466][ T5838] hci_event_packet+0x78f/0x1260 [ 1481.141478][ T5838] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1481.141492][ T5838] ? __pfx_hci_event_packet+0x10/0x10 [ 1481.141505][ T5838] ? kcov_remote_start+0x49b/0x7a0 [ 1481.141519][ T5838] ? hci_send_to_monitor+0xe2/0x590 [ 1481.141533][ T5838] hci_rx_work+0x3ee/0x1060 [ 1481.141548][ T5838] ? process_scheduled_works+0x9ef/0x1770 [ 1481.141559][ T5838] process_scheduled_works+0xad1/0x1770 [ 1481.141583][ T5838] ? __pfx_process_scheduled_works+0x10/0x10 [ 1481.141592][ T5838] ? do_raw_spin_lock+0x121/0x290 [ 1481.141612][ T5838] worker_thread+0x8a0/0xda0 [ 1481.141635][ T5838] kthread+0x711/0x8a0 [ 1481.141648][ T5838] ? __pfx_worker_thread+0x10/0x10 [ 1481.141658][ T5838] ? __pfx_kthread+0x10/0x10 [ 1481.141671][ T5838] ? _raw_spin_unlock_irq+0x23/0x50 [ 1481.141684][ T5838] ? __pfx_kthread+0x10/0x10 [ 1481.141696][ T5838] ret_from_fork+0x510/0xa50 [ 1481.141708][ T5838] ? __pfx_ret_from_fork+0x10/0x10 [ 1481.141716][ T5838] ? __switch_to+0xc9e/0x1480 [ 1481.141731][ T5838] ? __pfx_kthread+0x10/0x10 [ 1481.141743][ T5838] ret_from_fork_asm+0x1a/0x30 [ 1481.141764][ T5838] [ 1481.141786][ T5838] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1481.403229][ T5838] Bluetooth: hci0: failed to register connection device [ 1481.718254][T30371] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5991'. [ 1482.005493][T22521] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1482.045310][T12376] usb 9-1: new full-speed USB device number 100 using dummy_hcd [ 1482.085705][ T914] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1482.157832][T22521] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1482.184459][T22521] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.226542][T22521] usb 4-1: config 0 descriptor?? [ 1482.238514][T12376] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.253567][ T914] usb 5-1: device descriptor read/64, error -71 [ 1482.266941][T12376] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1482.281328][T12376] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1482.284422][T22521] cp210x 4-1:0.0: cp210x converter detected [ 1482.314667][T12376] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1482.336308][T12376] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.364820][T30372] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1482.378266][T12376] hub 9-1:1.0: bad descriptor, ignoring hub [ 1482.394606][T12376] hub 9-1:1.0: probe with driver hub failed with error -5 [ 1482.415224][T12376] cdc_wdm 9-1:1.0: skipping garbage [ 1482.433354][T12376] cdc_wdm 9-1:1.0: skipping garbage [ 1482.450348][T12376] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1482.467396][T12376] cdc_wdm 9-1:1.0: Unknown control protocol [ 1482.515507][ T914] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1482.655568][ T914] usb 5-1: device descriptor read/64, error -71 [ 1482.666634][T22521] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1482.683657][T22521] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 1482.692152][T22521] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1482.713729][T22521] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1482.737817][T22521] usb 4-1: USB disconnect, device number 37 [ 1482.754796][T22521] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1482.767012][T22521] cp210x 4-1:0.0: device disconnected [ 1482.794586][ T914] usb usb5-port1: attempt power cycle [ 1482.987410][T30372] usb 9-1: reset full-speed USB device number 100 using dummy_hcd [ 1483.145621][ T914] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1483.159717][T30388] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1483.166248][ T914] usb 5-1: device descriptor read/8, error -71 [ 1483.167038][T22521] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 1483.177908][ C1] wdm_int_callback: 113 callbacks suppressed [ 1483.177930][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1483.193143][ C1] wdm_int_callback: 113 callbacks suppressed [ 1483.193157][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1483.205209][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 1483.315963][ T10] usb 7-1: new full-speed USB device number 108 using dummy_hcd [ 1483.347418][T22521] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.359788][T22521] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1483.369376][T22521] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1483.381776][T22521] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1483.391700][T22521] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.405672][ T914] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1483.411071][T30390] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1483.431728][T22521] hub 6-1:1.0: bad descriptor, ignoring hub [ 1483.436636][ T914] usb 5-1: device descriptor read/8, error -71 [ 1483.443511][T22521] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1483.452399][T22521] cdc_wdm 6-1:1.0: skipping garbage [ 1483.457938][T22521] cdc_wdm 6-1:1.0: skipping garbage [ 1483.469623][T22521] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 1483.485894][ T10] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.487127][T24854] usb 9-1: USB disconnect, device number 100 [ 1483.498545][T22521] cdc_wdm 6-1:1.0: Unknown control protocol [ 1483.510851][ T10] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1483.521032][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.540689][ T10] usb 7-1: Product: syz [ 1483.547553][ T914] usb usb5-port1: unable to enumerate USB device [ 1483.550840][ T10] usb 7-1: Manufacturer: syz [ 1483.565432][ T10] usb 7-1: SerialNumber: syz [ 1483.584947][ T10] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1483.786263][T22521] usb 6-1: USB disconnect, device number 29 [ 1483.803948][ T10] usb 7-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1483.869780][ T10] usb 7-1: USB disconnect, device number 108 [ 1484.022015][T30411] tipc: Enabled bearer , priority 0 [ 1484.030548][T30411] syzkaller0: entered promiscuous mode [ 1484.036947][T30411] syzkaller0: entered allmulticast mode [ 1484.064412][T30411] tipc: Resetting bearer [ 1484.145557][T22521] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1484.315509][ T10] usb 9-1: new high-speed USB device number 101 using dummy_hcd [ 1484.326518][T22521] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1484.350085][T22521] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1484.365481][T22521] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1484.377035][T22521] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1484.386263][T22521] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.402989][T30390] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1484.416738][T22521] hub 6-1:1.0: bad descriptor, ignoring hub [ 1484.423083][T22521] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1484.430901][T22521] cdc_wdm 6-1:1.0: skipping garbage [ 1484.436504][T22521] cdc_wdm 6-1:1.0: skipping garbage [ 1484.443032][T22521] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1484.456134][T22521] cdc_wdm 6-1:1.0: Unknown control protocol [ 1484.468590][T30420] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6005'. [ 1484.486086][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 1484.491224][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.491276][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.549188][ T10] usb 9-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 1484.584544][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.600425][ T10] usb 9-1: Product: syz [ 1484.604786][ T10] usb 9-1: Manufacturer: syz [ 1484.609821][ T10] usb 9-1: SerialNumber: syz [ 1484.619518][ T10] usb 9-1: config 0 descriptor?? [ 1484.642850][T30422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.658187][ T10] go7007 9-1:0.0: probe with driver go7007 failed with error -12 [ 1484.669093][T30422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.759542][T22521] usb 6-1: USB disconnect, device number 30 [ 1484.838762][ T914] usb 9-1: USB disconnect, device number 101 [ 1484.888157][ T10] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 1485.057856][ T10] usb 7-1: config 0 has an invalid interface number: 92 but max is 0 [ 1485.068295][ T10] usb 7-1: config 0 has no interface number 0 [ 1485.074798][ T10] usb 7-1: too many endpoints for config 0 interface 92 altsetting 69: 240, using maximum allowed: 30 [ 1485.088204][T22521] tipc: Node number set to 1095930814 [ 1485.117110][ T10] usb 7-1: config 0 interface 92 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 240 [ 1485.151077][ T10] usb 7-1: config 0 interface 92 has no altsetting 0 [ 1485.159201][ T10] usb 7-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1485.174375][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.203115][ T10] usb 7-1: config 0 descriptor?? [ 1485.500118][T30435] Cannot find del_set index 4 as target [ 1485.585631][T22521] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 1485.740291][T22521] usb 6-1: device descriptor read/64, error -71 [ 1485.755586][T24854] usb 9-1: new full-speed USB device number 102 using dummy_hcd [ 1485.930995][T24854] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.959207][T24854] usb 9-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 1485.998223][T24854] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.005568][T22521] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 1486.025870][T24854] usb 9-1: Product: syz [ 1486.032068][T24854] usb 9-1: Manufacturer: syz [ 1486.045810][T24854] usb 9-1: SerialNumber: syz [ 1486.065370][T24854] usb 9-1: config 0 descriptor?? [ 1486.081340][T24854] cdc_phonet 9-1:0.0: probe with driver cdc_phonet failed with error -22 [ 1486.135548][T22521] usb 6-1: device descriptor read/64, error -71 [ 1486.179829][ T10] hackrf 7-1:0.92: usb_control_msg() failed -71 request 0e [ 1486.195509][ T10] hackrf 7-1:0.92: Could not detect board [ 1486.201461][ T10] hackrf 7-1:0.92: probe with driver hackrf failed with error -71 [ 1486.212397][ T10] usb 7-1: USB disconnect, device number 109 [ 1486.228423][T12376] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1486.246245][T22521] usb usb6-port1: attempt power cycle [ 1486.280565][ T39] usb 9-1: USB disconnect, device number 102 [ 1486.345490][T24854] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1486.400094][T12376] usb 5-1: Using ep0 maxpacket: 16 [ 1486.408234][T12376] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1486.420935][T12376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1486.437433][T12376] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1486.446853][T12376] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.454889][T12376] usb 5-1: Product: syz [ 1486.460026][T12376] usb 5-1: Manufacturer: syz [ 1486.464646][T12376] usb 5-1: SerialNumber: syz [ 1486.473105][T12376] usb 5-1: config 0 descriptor?? [ 1486.480714][T12376] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1486.490129][T12376] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1486.497577][T24854] usb 4-1: Using ep0 maxpacket: 16 [ 1486.505794][T24854] usb 4-1: config index 0 descriptor too short (expected 61458, got 18) [ 1486.514244][T24854] usb 4-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 1486.525257][T24854] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 255 [ 1486.534526][T24854] usb 4-1: config 0 has no interface number 0 [ 1486.541764][T24854] usb 4-1: too many endpoints for config 0 interface 1 altsetting 118: 194, using maximum allowed: 30 [ 1486.552931][T24854] usb 4-1: config 0 interface 1 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 194 [ 1486.568408][T24854] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1486.578761][T24854] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1486.585552][T22521] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 1486.587897][T24854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.604676][T24854] usb 4-1: Product: syz [ 1486.608929][T24854] usb 4-1: Manufacturer: syz [ 1486.613532][T24854] usb 4-1: SerialNumber: syz [ 1486.616227][T22521] usb 6-1: device descriptor read/8, error -71 [ 1486.623227][T24854] usb 4-1: config 0 descriptor?? [ 1486.695521][ T10] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 1486.842409][T24854] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1486.855503][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1486.861171][T22521] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 1486.874583][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1486.885228][ T10] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 64 [ 1486.905706][T22521] usb 6-1: device descriptor read/8, error -71 [ 1486.915548][ T10] usb 7-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1486.928506][ T10] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1486.945604][ T10] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1486.970550][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.984077][ T10] usb 7-1: Product: syz [ 1486.988573][ T10] usb 7-1: Manufacturer: syz [ 1486.993528][ T10] usb 7-1: SerialNumber: syz [ 1487.006145][T30449] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1487.022093][T22521] usb usb6-port1: unable to enumerate USB device [ 1487.088162][T12376] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1487.095197][T12376] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1487.254366][ T10] usb 7-1: USB disconnect, device number 110 [ 1487.271787][T24854] gspca_spca1528: reg_w err -71 [ 1487.315889][T24854] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 1487.334057][T24854] usb 4-1: USB disconnect, device number 38 [ 1487.725695][T12376] em28xx 5-1:0.0: AC97 command still being executed: not handled properly! [ 1487.739311][T12376] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1487.843557][T30456] netlink: 'syz.6.6017': attribute type 7 has an invalid length. [ 1487.903916][T30461] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6018'. [ 1487.916896][T30461] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6018'. [ 1487.927681][T30461] netlink: 'syz.3.6018': attribute type 23 has an invalid length. [ 1487.937523][T12376] em28xx 5-1:0.0: AC97 command still being executed: not handled properly! [ 1487.946558][T12376] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1488.121494][T30441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1488.157911][T30441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1488.189738][T12376] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1488.214072][T12376] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1488.230703][T12376] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1488.247715][T12376] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1488.275873][T12376] usb 5-1: USB disconnect, device number 26 [ 1488.428994][T30473] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6021'. [ 1489.092286][T30485] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6024'. [ 1489.184110][T30488] netlink: 'syz.4.6024': attribute type 4 has an invalid length. [ 1489.254375][T30492] netlink: 'syz.4.6024': attribute type 4 has an invalid length. [ 1489.856037][T24854] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1489.865531][T12376] usb 7-1: new low-speed USB device number 111 using dummy_hcd [ 1490.138599][T12376] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1490.189983][T24854] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1490.215546][T12376] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1490.224526][T24854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1490.246439][T12376] usb 7-1: string descriptor 0 read error: -22 [ 1490.252758][T12376] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1490.272192][T24854] usb 4-1: config 0 descriptor?? [ 1490.340791][T24854] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1490.378647][T12376] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.462809][T12376] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1490.526891][T30510] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6030'. [ 1490.662841][T12376] usb 7-1: USB disconnect, device number 111 [ 1490.705622][ T39] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1490.960709][ T39] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1491.015694][ T39] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1491.045537][ T914] usb 9-1: new high-speed USB device number 103 using dummy_hcd [ 1491.058342][ T39] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1491.087257][ T39] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1491.120728][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.160443][T30496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1491.193753][T30496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1491.204656][ T39] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1491.214593][T24854] gspca_stv06xx: I2C: Read error writing address: -71 [ 1491.236604][ T914] usb 9-1: Using ep0 maxpacket: 32 [ 1491.243742][ T914] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1491.260582][T24854] usb 4-1: USB disconnect, device number 39 [ 1491.285780][ T914] usb 9-1: config 7 has an invalid interface number: 187 but max is 0 [ 1491.343749][ T914] usb 9-1: config 7 has no interface number 0 [ 1491.399823][ T39] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1491.409127][ T914] usb 9-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1491.458183][T30517] netlink: 'syz.6.6032': attribute type 30 has an invalid length. [ 1491.477766][ T914] usb 9-1: config 7 interface 187 has no altsetting 0 [ 1491.539424][ T914] usb 9-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1491.569542][ T914] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.596600][ T914] usb 9-1: Product: syz [ 1491.608130][ T914] usb 9-1: Manufacturer: syz [ 1491.653056][ T914] usb 9-1: SerialNumber: syz [ 1491.900385][ T914] usb 9-1: Cannot retrieve CPort count: -32 [ 1491.902522][T30527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6036'. [ 1491.942915][T30527] veth1_macvtap: left promiscuous mode [ 1491.948882][ T914] usb 9-1: Cannot retrieve CPort count: -32 [ 1491.955157][ T914] es2_ap_driver 9-1:7.187: probe with driver es2_ap_driver failed with error -32 [ 1492.024617][ T914] usb 9-1: USB disconnect, device number 103 [ 1492.104384][T30511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1492.133568][T30511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1492.184318][ T30] audit: type=1326 audit(1767519496.742:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30505 comm="syz.4.6029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1492.218681][ T30] audit: type=1326 audit(1767519496.772:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30505 comm="syz.4.6029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f401f98df90 code=0x7ffc0000 [ 1492.247350][ T30] audit: type=1326 audit(1767519496.802:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30505 comm="syz.4.6029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f401f98f34b code=0x7ffc0000 [ 1492.318589][ T30] audit: type=1326 audit(1767519496.872:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30505 comm="syz.4.6029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f401f98f34b code=0x7ffc0000 [ 1492.345591][T24854] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 1492.355040][T30511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1492.394675][T30511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1492.450467][ T30] audit: type=1326 audit(1767519497.012:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30505 comm="syz.4.6029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1492.480409][ T30] audit: type=1326 audit(1767519497.032:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30505 comm="syz.4.6029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1492.529555][T24854] usb 7-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 1492.541501][T24854] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1492.555526][ T30] audit: type=1326 audit(1767519497.032:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30505 comm="syz.4.6029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1492.587563][ T914] usb 5-1: USB disconnect, device number 27 [ 1492.605274][T22521] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 1492.614302][T24854] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1492.648075][T24854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1492.666502][T24854] usb 7-1: SerialNumber: syz [ 1492.673048][ T30] audit: type=1326 audit(1767519497.102:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30505 comm="syz.4.6029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1492.685849][T22521] hid-generic 0000:0000:0000.006E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1492.786192][ T30] audit: type=1326 audit(1767519497.322:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30505 comm="syz.4.6029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1492.859220][ T30] audit: type=1326 audit(1767519497.422:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30505 comm="syz.4.6029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1492.958214][T24854] usb 7-1: 0:2 : does not exist [ 1492.969248][T24854] usb 7-1: unit 5 not found! [ 1493.016440][T24854] usb 7-1: USB disconnect, device number 112 [ 1493.091117][ T6404] udevd[6404]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1493.747990][T30572] fuse: Bad value for 'user_id' [ 1493.752947][T30572] fuse: Bad value for 'user_id' [ 1494.305546][T24854] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 1494.475487][T24854] usb 7-1: Using ep0 maxpacket: 8 [ 1494.484685][T24854] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1494.495256][T24854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.510107][T24854] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1494.517545][T24854] pvrusb2: ********** [ 1494.521639][T24854] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1494.531988][T24854] pvrusb2: Important functionality might not be entirely working. [ 1494.556896][T24854] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1494.577771][T24854] pvrusb2: ********** [ 1494.685319][T30609] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6057'. [ 1494.699451][T30609] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6057'. [ 1494.710326][T30597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1494.719112][ T2345] pvrusb2: Invalid write control endpoint [ 1494.735735][T30597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.856987][ T2345] pvrusb2: Invalid write control endpoint [ 1494.874933][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1494.891095][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1494.902371][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1494.913228][ T2345] pvrusb2: Device being rendered inoperable [ 1494.920308][ T914] usb 7-1: USB disconnect, device number 113 [ 1494.938415][ T2345] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1494.945839][T24854] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1494.966269][ T2345] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1494.989468][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1495.002744][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1495.023441][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1495.115475][T24854] usb 6-1: Using ep0 maxpacket: 32 [ 1495.125863][T24854] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1495.140037][T24854] usb 6-1: config 0 has no interface number 0 [ 1495.151156][T24854] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1495.161334][T24854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.169752][T24854] usb 6-1: Product: syz [ 1495.174204][T24854] usb 6-1: Manufacturer: syz [ 1495.180536][T24854] usb 6-1: SerialNumber: syz [ 1495.191578][T24854] usb 6-1: config 0 descriptor?? [ 1495.208338][T24854] smsc95xx v2.0.0 [ 1495.224298][T30619] fuse: Bad value for 'fd' [ 1495.694378][T24854] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1495.706162][T24854] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1495.740691][T30631] netlink: 'syz.4.6063': attribute type 11 has an invalid length. [ 1495.898701][T30637] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6064'. [ 1496.532444][T24854] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1496.565034][T24854] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 1496.674521][T30655] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1496.905815][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1497.065843][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1497.096881][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1497.132455][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1497.152089][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1497.166098][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1497.181786][T30680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6079'. [ 1497.201656][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.222838][T30680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6079'. [ 1497.235723][ T9] usb 5-1: config 0 descriptor?? [ 1497.699795][ T9] microsoft 0003:045E:07DA.006F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1497.722269][ T9] microsoft 0003:045E:07DA.006F: no inputs found [ 1497.741179][ T9] microsoft 0003:045E:07DA.006F: could not initialize ff, continuing anyway [ 1497.771171][ T914] usb 6-1: USB disconnect, device number 35 [ 1497.809071][T30681] geneve2: entered allmulticast mode [ 1497.861455][T24854] usb 5-1: USB disconnect, device number 28 [ 1497.919222][T30689] fido_id[30689]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1498.431668][ T9] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 1498.589561][T30705] syzkaller0: entered promiscuous mode [ 1498.602154][T30705] syzkaller0: entered allmulticast mode [ 1498.615785][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1498.624273][T30705] tipc: Started in network mode [ 1498.635145][T30705] tipc: Node identity , cluster identity 4711 [ 1498.642244][ T9] usb 7-1: too many configurations: 98, using maximum allowed: 8 [ 1498.642282][T30705] tipc: Failed to obtain node identity [ 1498.665030][ T9] usb 7-1: config 6 has no interfaces? [ 1498.679849][ T30] audit: type=1800 audit(1767519503.242:3953): pid=30702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6084" name="file0" dev="fuse" ino=2 res=0 errno=0 [ 1498.684911][ T9] usb 7-1: config 6 has no interfaces? [ 1498.707597][T30705] tipc: Enabling of bearer rejected, failed to enable media [ 1498.758936][ T9] usb 7-1: config 6 has no interfaces? [ 1498.771917][ T9] usb 7-1: config 6 has no interfaces? [ 1498.783458][ T9] usb 7-1: config 6 has no interfaces? [ 1498.799746][ T9] usb 7-1: config 6 has no interfaces? [ 1498.807289][ T9] usb 7-1: config 6 has no interfaces? [ 1498.814908][ T9] usb 7-1: config 6 has no interfaces? [ 1498.830331][ T9] usb 7-1: string descriptor 0 read error: -71 [ 1498.855017][ T9] usb 7-1: New USB device found, idVendor=09c0, idProduct=0200, bcdDevice=58.3c [ 1498.884674][T30712] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1498.895198][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=154 [ 1498.910773][T30712] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1498.933896][T30712] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1498.940661][ T9] usb 7-1: rejected 8 configurations due to insufficient available bus power [ 1498.956775][T30712] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1498.964264][ T9] usb 7-1: no configuration chosen from 8 choices [ 1498.994234][T30712] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1499.000999][ T9] usb 7-1: USB disconnect, device number 114 [ 1499.020351][T30712] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1499.038984][T30712] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1499.094236][T30712] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1499.122668][T30712] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1499.233984][T30712] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1499.265717][T30712] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1499.342082][T30712] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1499.372272][T30726] netlink: 'syz.3.6091': attribute type 10 has an invalid length. [ 1499.464626][T30725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6091'. [ 1499.624822][T30726] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.632209][T30726] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.645517][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1499.713648][T30726] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.720915][T30726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1499.728511][T30726] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.735709][T30726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1499.883877][T30726] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1499.905736][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1499.928971][ T9] usb 5-1: config 0 has no interfaces? [ 1499.938891][T30725] bridge_slave_1: left allmulticast mode [ 1499.944582][T30725] bridge_slave_1: left promiscuous mode [ 1499.961270][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1499.990669][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1500.000221][ T9] usb 5-1: Manufacturer: syz [ 1500.008805][T30725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.028507][ T9] usb 5-1: config 0 descriptor?? [ 1500.053415][T30725] bridge_slave_0: left allmulticast mode [ 1500.075560][T22521] usb 9-1: new high-speed USB device number 104 using dummy_hcd [ 1500.084247][T30725] bridge_slave_0: left promiscuous mode [ 1500.087932][T30724] [U]  [ 1500.107461][T30725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.167653][T30725] bond0: (slave bridge0): Releasing backup interface [ 1500.247357][T22521] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1500.270401][T22521] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1500.283013][T22521] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1500.295212][T22521] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1500.306939][T30732] lo: Caught tx_queue_len zero misconfig [ 1500.329104][T22521] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1500.354772][T22521] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1500.375508][T22521] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1500.383610][T22521] usb 9-1: Product: syz [ 1500.395585][T22521] usb 9-1: Manufacturer: syz [ 1500.426894][T27568] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1500.435981][T22521] cdc_wdm 9-1:1.0: skipping garbage [ 1500.450407][T22521] cdc_wdm 9-1:1.0: skipping garbage [ 1500.476389][T22521] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1500.488939][T22521] cdc_wdm 9-1:1.0: Unknown control protocol [ 1500.615562][T27568] usb 6-1: Using ep0 maxpacket: 8 [ 1500.642711][T27568] usb 6-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 1500.734365][T27568] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.844558][T27568] usb 6-1: Product: syz [ 1500.893202][T27568] usb 6-1: Manufacturer: syz [ 1500.910122][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 1500.929262][T27568] usb 6-1: SerialNumber: syz [ 1500.965561][T30755] Bluetooth: hci1: command 0x0406 tx timeout [ 1500.987937][T27568] usb 6-1: config 0 descriptor?? [ 1501.019684][T27568] option 6-1:0.0: GSM modem (1-port) converter detected [ 1501.046996][T30755] Bluetooth: hci0: command 0x0406 tx timeout [ 1501.125923][T30755] Bluetooth: hci3: command 0x0406 tx timeout [ 1501.295599][T30755] Bluetooth: hci2: command 0x0c1a tx timeout [ 1501.393682][T27568] usb 6-1: USB disconnect, device number 36 [ 1501.430456][T27568] option 6-1:0.0: device disconnected [ 1501.644565][ T9] usb 9-1: USB disconnect, device number 104 [ 1501.815620][T30765] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6099'. [ 1502.595509][T27568] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1502.665492][T24854] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 1502.765522][T27568] usb 6-1: Using ep0 maxpacket: 32 [ 1502.776912][T27568] usb 6-1: config index 0 descriptor too short (expected 1776, got 18) [ 1502.788537][T27568] usb 6-1: config 163 has too many interfaces: 195, using maximum allowed: 32 [ 1502.797669][T27568] usb 6-1: config 163 has an invalid descriptor of length 166, skipping remainder of the config [ 1502.814062][T27568] usb 6-1: config 163 has 0 interfaces, different from the descriptor's value: 195 [ 1502.825507][T24854] usb 7-1: Using ep0 maxpacket: 8 [ 1502.858753][T24854] usb 7-1: config 9 has an invalid interface number: 47 but max is 0 [ 1502.868480][T27568] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1502.887908][T24854] usb 7-1: config 9 has no interface number 0 [ 1502.904266][T27568] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.912626][T12376] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1502.943273][T24854] usb 7-1: New USB device found, idVendor=12d1, idProduct=140e, bcdDevice= 0.00 [ 1502.953711][T24854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.965719][T30755] Bluetooth: hci5: command 0x0406 tx timeout [ 1502.993545][T24854] usb 7-1: Product: syz [ 1503.005952][T24854] usb 7-1: Manufacturer: syz [ 1503.034273][T24854] usb 7-1: SerialNumber: syz [ 1503.046142][T24738] Bluetooth: hci1: command 0x0406 tx timeout [ 1503.121789][ T9] usb 5-1: USB disconnect, device number 29 [ 1503.127808][T30755] Bluetooth: hci0: command 0x0406 tx timeout [ 1503.205638][T30755] Bluetooth: hci3: command 0x0406 tx timeout [ 1503.280031][T27568] usb 6-1: string descriptor 0 read error: -71 [ 1503.305874][T27568] usb 6-1: USB disconnect, device number 37 [ 1503.375546][T30755] Bluetooth: hci2: command 0x0c1a tx timeout [ 1503.454378][T30798] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6108'. [ 1503.631095][T30802] vlan0: entered promiscuous mode [ 1503.950761][T30814] binder: 30813:30814 ioctl c0306201 200000000080 returned -14 [ 1503.975480][T27568] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 1504.026445][T30814] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6115'. [ 1504.051330][T30781] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.6104'. [ 1504.127252][T24854] usb-storage 7-1:9.47: USB Mass Storage device detected [ 1504.164290][T27568] usb 5-1: config 0 has an invalid descriptor of length 197, skipping remainder of the config [ 1504.164339][T27568] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1504.164378][T27568] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1504.164400][T27568] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.169152][T27568] usb 5-1: config 0 descriptor?? [ 1504.220970][T27568] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1504.222483][T24854] usb 7-1: USB disconnect, device number 115 [ 1504.648957][ T9] usb 5-1: USB disconnect, device number 30 [ 1505.216024][T30755] Bluetooth: hci0: command 0x0406 tx timeout [ 1505.445654][T30755] Bluetooth: hci2: command 0x0c1a tx timeout [ 1505.644547][T30858] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6123'. [ 1505.720578][ T30] audit: type=1326 audit(1767519510.272:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30860 comm="syz.4.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1505.829550][ T30] audit: type=1326 audit(1767519510.272:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30860 comm="syz.4.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1505.940535][ T30] audit: type=1326 audit(1767519510.272:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30860 comm="syz.4.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1506.032499][ T30] audit: type=1326 audit(1767519510.272:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30860 comm="syz.4.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1506.135543][T12376] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1506.144168][ T30] audit: type=1326 audit(1767519510.272:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30860 comm="syz.4.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1506.254145][ T30] audit: type=1326 audit(1767519510.282:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30860 comm="syz.4.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1506.320046][ T30] audit: type=1326 audit(1767519510.282:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30860 comm="syz.4.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1506.357353][T12376] usb 5-1: config 0 has an invalid descriptor of length 165, skipping remainder of the config [ 1506.394175][T12376] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1506.437841][ T30] audit: type=1326 audit(1767519510.282:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30860 comm="syz.4.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1506.511893][ T30] audit: type=1326 audit(1767519510.282:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30860 comm="syz.4.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1506.549876][T12376] usb 5-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1506.559252][ T30] audit: type=1326 audit(1767519510.282:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30860 comm="syz.4.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f98f749 code=0x7ffc0000 [ 1506.631170][T12376] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.663681][T12376] usb 5-1: Product: syz [ 1506.689486][T12376] usb 5-1: Manufacturer: syz [ 1506.703816][T12376] usb 5-1: SerialNumber: syz [ 1506.753147][T12376] usb 5-1: config 0 descriptor?? [ 1506.865603][T22521] usb 9-1: new high-speed USB device number 105 using dummy_hcd [ 1507.015699][T12376] usb 5-1: USB disconnect, device number 31 [ 1507.025512][T22521] usb 9-1: Using ep0 maxpacket: 32 [ 1507.032940][T22521] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1507.051470][T22521] usb 9-1: config 0 has no interface number 0 [ 1507.068853][T22521] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1507.102617][T22521] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.120972][T22521] usb 9-1: Product: syz [ 1507.131076][T22521] usb 9-1: Manufacturer: syz [ 1507.147076][T22521] usb 9-1: SerialNumber: syz [ 1507.176805][T22521] usb 9-1: config 0 descriptor?? [ 1507.193842][T22521] smsc95xx v2.0.0 [ 1507.456920][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1507.620301][T22521] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1507.631835][T22521] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1507.642835][ T9] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1507.651638][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1507.663753][ T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1507.673155][ T9] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1507.683421][ T9] usb 4-1: Manufacturer: syz [ 1507.705810][ T9] usb 4-1: config 0 descriptor?? [ 1507.775589][ T9] rc_core: IR keymap rc-hauppauge not found [ 1507.781577][ T9] Registered IR keymap rc-empty [ 1507.788513][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1507.803068][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input159 [ 1507.920735][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 1507.941125][ T9] usb 4-1: USB disconnect, device number 41 [ 1508.427722][T30890] tipc: Enabled bearer , priority 0 [ 1508.464612][T30891] tipc: Resetting bearer [ 1508.473664][T30890] tipc: Enabling of bearer rejected, already enabled [ 1508.518559][T30891] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6135'. [ 1508.529263][T30890] tipc: Enabling of bearer rejected, already enabled [ 1508.580289][T30890] tipc: Enabling of bearer rejected, already enabled [ 1508.582046][T30891] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6135'. [ 1508.623341][T30890] tipc: Enabling of bearer rejected, already enabled [ 1508.651232][T30890] tipc: Enabling of bearer rejected, already enabled [ 1508.678504][T30891] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6135'. [ 1508.699652][T30891] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6135'. [ 1508.723571][T30890] tipc: Enabling of bearer rejected, already enabled [ 1508.743022][T30891] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6135'. [ 1508.763577][T30890] tipc: Enabling of bearer rejected, already enabled [ 1508.772729][T30891] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6135'. [ 1508.789275][T30891] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6135'. [ 1508.804004][T30890] tipc: Enabling of bearer rejected, already enabled [ 1508.814603][T30891] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6135'. [ 1508.834571][T30891] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6135'. [ 1508.844523][T30890] tipc: Enabling of bearer rejected, already enabled [ 1508.844547][T30891] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6135'. [ 1508.860448][T30899] netlink: 'syz.3.6138': attribute type 11 has an invalid length. [ 1508.872735][T30890] tipc: Enabling of bearer rejected, already enabled [ 1508.898891][T30890] tipc: Enabling of bearer rejected, already enabled [ 1508.917203][T30890] tipc: Enabling of bearer rejected, already enabled [ 1508.946998][T30890] tipc: Enabling of bearer rejected, already enabled [ 1508.959490][T30890] tipc: Enabling of bearer rejected, already enabled [ 1508.971495][T30890] tipc: Enabling of bearer rejected, already enabled [ 1508.983654][T30890] tipc: Enabling of bearer rejected, already enabled [ 1509.002185][T30890] tipc: Enabling of bearer rejected, already enabled [ 1509.014704][T30890] tipc: Enabling of bearer rejected, already enabled [ 1509.036096][T30890] tipc: Enabling of bearer rejected, already enabled [ 1509.062584][T30890] tipc: Enabling of bearer rejected, already enabled [ 1509.081772][T30890] tipc: Enabling of bearer rejected, already enabled [ 1509.100947][T30890] tipc: Enabling of bearer rejected, already enabled [ 1509.122270][T30890] tipc: Enabling of bearer rejected, already enabled [ 1509.143895][T30890] tipc: Enabling of bearer rejected, already enabled [ 1509.167443][T30890] tipc: Enabling of bearer rejected, already enabled [ 1509.185879][T30890] tipc: Enabling of bearer rejected, already enabled [ 1509.194547][T30890] tipc: Enabling of bearer rejected, already enabled [ 1509.224211][T30890] tipc: Enabling of bearer rejected, already enabled [ 1509.250103][T30889] tipc: Disabling bearer [ 1510.045727][T12376] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1510.225613][T12376] usb 6-1: Using ep0 maxpacket: 8 [ 1510.246252][T12376] usb 6-1: config index 0 descriptor too short (expected 30482, got 18) [ 1510.281935][T12376] usb 6-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 1510.305475][T12376] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 1510.327450][T12376] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 1510.350239][T12376] usb 6-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 1510.350331][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1510.387535][T12376] usb 6-1: Product: syz [ 1510.401977][T12376] usb 6-1: Manufacturer: syz [ 1510.419373][T12376] usb 6-1: config 0 descriptor?? [ 1510.445343][T12376] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1510.469928][T12376] usb 6-1: Detected FT2232C/D [ 1510.476003][T22521] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1510.535824][T22521] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 1510.570964][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1510.588558][T22521] usb 9-1: USB disconnect, device number 105 [ 1510.605465][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1510.632608][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 1510.667913][T30917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1510.686461][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.707875][ T10] usb 4-1: config 0 descriptor?? [ 1510.714119][T30917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1510.758838][T12376] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1510.800173][T12376] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1510.829288][T12376] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1510.870329][T12376] usb 6-1: USB disconnect, device number 38 [ 1510.917337][T12376] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1510.963241][T12376] ftdi_sio 6-1:0.0: device disconnected [ 1511.085485][T24854] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 1511.170239][T30929] vlan0: entered allmulticast mode [ 1511.204179][T30929] bridge_slave_0: entered allmulticast mode [ 1511.265832][T24854] usb 7-1: Using ep0 maxpacket: 8 [ 1511.312676][T24854] usb 7-1: config 0 has an invalid interface number: 246 but max is 0 [ 1511.352495][T24854] usb 7-1: config 0 has no interface number 0 [ 1511.419001][T24854] usb 7-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1511.444074][T24854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.505522][T24854] usb 7-1: Product: syz [ 1511.509896][T24854] usb 7-1: Manufacturer: syz [ 1511.524712][T24854] usb 7-1: SerialNumber: syz [ 1511.546983][T24854] usb 7-1: config 0 descriptor?? [ 1511.582007][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 1511.582367][ T30] audit: type=1326 audit(1767519516.142:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30935 comm="syz.8.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1511.739831][ T30] audit: type=1326 audit(1767519516.142:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30935 comm="syz.8.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1511.894822][ T30] audit: type=1326 audit(1767519516.152:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30935 comm="syz.8.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1511.926892][T27568] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1511.973575][T24854] msi2500 7-1:0.246: Registered as swradio24 [ 1511.982312][T24854] msi2500 7-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 1511.982359][ T30] audit: type=1326 audit(1767519516.152:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30935 comm="syz.8.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1512.074071][ T30] audit: type=1326 audit(1767519516.152:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30935 comm="syz.8.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1512.135045][ T30] audit: type=1326 audit(1767519516.152:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30935 comm="syz.8.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1512.160153][T24854] usb 7-1: USB disconnect, device number 116 [ 1512.212570][T27568] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.254087][ T30] audit: type=1326 audit(1767519516.152:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30935 comm="syz.8.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1512.254891][T27568] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1512.385023][ T30] audit: type=1326 audit(1767519516.152:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30935 comm="syz.8.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1512.395520][T27568] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1512.459562][T27568] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.510276][ T30] audit: type=1326 audit(1767519516.152:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30935 comm="syz.8.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1512.598763][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 1512.612690][ T30] audit: type=1326 audit(1767519516.152:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30935 comm="syz.8.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1512.651047][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1512.678285][ T10] usb 4-1: USB disconnect, device number 42 [ 1512.800639][T30943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1512.828180][T30943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1513.115564][T27568] usb 9-1: new high-speed USB device number 106 using dummy_hcd [ 1513.137731][ T914] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 1513.290599][T27568] usb 9-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1513.299838][T27568] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.308514][T27568] usb 9-1: Product: syz [ 1513.313245][T27568] usb 9-1: Manufacturer: syz [ 1513.318482][T27568] usb 9-1: SerialNumber: syz [ 1513.323170][ T914] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1513.336495][T27568] usb 9-1: config 0 descriptor?? [ 1513.344322][ T914] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1513.356387][T27568] hub 9-1:0.0: bad descriptor, ignoring hub [ 1513.362333][T27568] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1513.372444][ T914] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1513.382388][T27568] f81232 9-1:0.0: f81534a converter detected [ 1513.388485][ T914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1513.397762][ T914] usb 7-1: SerialNumber: syz [ 1513.495517][T24854] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1513.552076][T27568] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1513.559504][T27568] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1513.596871][T27568] usb 9-1: USB disconnect, device number 106 [ 1513.608314][T27568] f81232 9-1:0.0: device disconnected [ 1513.645694][T24854] usb 4-1: Using ep0 maxpacket: 16 [ 1513.659435][T24854] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 1513.673579][T24854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.688814][T24854] usb 4-1: Product: syz [ 1513.693111][T24854] usb 4-1: Manufacturer: syz [ 1513.698750][T24854] usb 4-1: SerialNumber: syz [ 1513.710280][T24854] usb 4-1: config 0 descriptor?? [ 1513.724808][T24854] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1513.736011][T24854] usb 4-1: Detected FT232B [ 1513.794892][T30975] binder: 30973:30975 ioctl c0306201 200000000640 returned -22 [ 1513.880930][ T914] usb 7-1: 0:2 : does not exist [ 1513.886350][ T914] usb 7-1: unit 5: unexpected type 0x09 [ 1513.905756][ T914] usb 7-1: USB disconnect, device number 117 [ 1513.923991][T24854] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1513.936110][T24854] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1513.950781][T24854] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1513.961452][ T6257] udevd[6257]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1513.969199][T24854] usb 4-1: USB disconnect, device number 43 [ 1514.002724][T24854] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1514.021352][T24854] ftdi_sio 4-1:0.0: device disconnected [ 1514.087303][ T10] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1514.128617][T30979] __nla_validate_parse: 101 callbacks suppressed [ 1514.128630][T30979] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6162'. [ 1514.248005][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1514.261053][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1514.272370][ T10] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1514.281940][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.290190][ T10] usb 6-1: Product: syz [ 1514.294482][ T10] usb 6-1: Manufacturer: syz [ 1514.299133][ T10] usb 6-1: SerialNumber: syz [ 1514.305748][ T10] usb 6-1: config 0 descriptor?? [ 1514.315850][ T10] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1514.328853][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1514.338778][ T10] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1514.347731][ T10] usb 6-1: media controller created [ 1514.363892][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1514.415133][ T10] DVB: Unable to find symbol tda10046_attach() [ 1514.421811][ T10] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1514.437633][ T10] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1514.445570][T24854] usb 9-1: new high-speed USB device number 107 using dummy_hcd [ 1514.507930][T27568] usb 5-1: USB disconnect, device number 32 [ 1514.617739][T24854] usb 9-1: config 0 has an invalid interface number: 182 but max is 1 [ 1514.634101][T30989] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6166'. [ 1514.643797][T24854] usb 9-1: config 0 has no interface number 1 [ 1514.654471][T24854] usb 9-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 1514.666406][T24854] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.679218][T24854] usb 9-1: config 0 descriptor?? [ 1514.890914][T24854] usb 9-1: USB disconnect, device number 107 [ 1514.915573][T27568] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1515.085853][T27568] usb 5-1: Using ep0 maxpacket: 16 [ 1515.095991][T27568] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1515.109395][T27568] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1515.124089][T27568] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1515.134936][T27568] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.143343][T27568] usb 5-1: Product: syz [ 1515.148557][T27568] usb 5-1: Manufacturer: syz [ 1515.155584][T27568] usb 5-1: SerialNumber: syz [ 1515.167813][T27568] usb 5-1: config 0 descriptor?? [ 1515.180406][T27568] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1515.190368][T27568] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1515.447164][T27568] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1515.460002][T27568] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1515.906859][T27568] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1515.928250][T27568] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1515.997269][T27568] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1516.024234][T27568] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1516.053767][T27568] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1516.081283][T27568] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1516.119874][T27568] usb 5-1: USB disconnect, device number 33 [ 1516.622220][T27568] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 1516.696211][T31022] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 1516.789074][ T10] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1516.804718][T31024] input: syz0 as /devices/virtual/input/input160 [ 1516.817680][T27568] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1516.823551][ T10] usb 6-1: USB disconnect, device number 39 [ 1516.865189][T27568] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1516.908705][T27568] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1516.951483][T27568] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1516.981527][T27568] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.007258][T31020] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1517.022745][T31033] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6179'. [ 1517.034345][T27568] hub 5-1:1.0: bad descriptor, ignoring hub [ 1517.048911][T27568] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1517.061509][T27568] cdc_wdm 5-1:1.0: skipping garbage [ 1517.066994][T27568] cdc_wdm 5-1:1.0: skipping garbage [ 1517.085588][ T5913] usb 9-1: new high-speed USB device number 108 using dummy_hcd [ 1517.086608][T27568] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1517.108789][T27568] cdc_wdm 5-1:1.0: Unknown control protocol [ 1517.225594][ T10] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 1517.245768][ T5913] usb 9-1: Using ep0 maxpacket: 16 [ 1517.262341][ T5913] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1517.298172][ T5913] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1517.316967][ T5913] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.343783][ T5913] usb 9-1: config 0 descriptor?? [ 1517.356830][ T5913] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input161 [ 1517.397025][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1517.414644][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1517.429826][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.438286][ T10] usb 7-1: Product: syz [ 1517.442465][ T10] usb 7-1: Manufacturer: syz [ 1517.448086][ T10] usb 7-1: SerialNumber: syz [ 1517.556345][ T5186] bcm5974 9-1:0.0: could not read from device [ 1517.567474][ T5186] bcm5974 9-1:0.0: could not read from device [ 1517.573114][ T5913] usb 9-1: USB disconnect, device number 108 [ 1517.581143][ T5186] bcm5974 9-1:0.0: could not read from device [ 1517.648437][T12376] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1517.805528][T12376] usb 4-1: Using ep0 maxpacket: 16 [ 1517.812274][T12376] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1517.824213][T12376] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1517.834372][T12376] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.844723][T12376] usb 4-1: config 0 descriptor?? [ 1517.940721][T31020] usb 5-1: reset full-speed USB device number 34 using dummy_hcd [ 1518.122528][T31039] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1518.140574][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1518.147215][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1518.153860][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1518.160483][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1518.268364][T12376] mcp2221 0003:04D8:00DD.0070: unknown main item tag 0x0 [ 1518.276365][T31054] usb usb8: usbfs: process 31054 (syz.5.6187) did not claim interface 0 before use [ 1518.286500][T12376] mcp2221 0003:04D8:00DD.0070: unknown main item tag 0x0 [ 1518.293584][T12376] mcp2221 0003:04D8:00DD.0070: unknown main item tag 0x0 [ 1518.304766][T12376] mcp2221 0003:04D8:00DD.0070: unknown main item tag 0x0 [ 1518.325488][T12376] mcp2221 0003:04D8:00DD.0070: unknown main item tag 0x0 [ 1518.351724][T12376] mcp2221 0003:04D8:00DD.0070: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1518.372089][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1518.372106][ T30] audit: type=1326 audit(1767519522.932:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31048 comm="syz.8.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1518.411347][ T30] audit: type=1326 audit(1767519522.962:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31048 comm="syz.8.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1518.472771][ T10] cdc_ncm 7-1:1.0: bind() failure [ 1518.489121][ T30] audit: type=1326 audit(1767519523.042:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31048 comm="syz.8.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1518.536799][ T30] audit: type=1326 audit(1767519523.042:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31048 comm="syz.8.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1518.571436][ T30] audit: type=1326 audit(1767519523.042:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31048 comm="syz.8.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1518.595699][T12376] usb 5-1: USB disconnect, device number 34 [ 1518.643174][ T30] audit: type=1326 audit(1767519523.072:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31048 comm="syz.8.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1518.671672][ T30] audit: type=1326 audit(1767519523.092:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31048 comm="syz.8.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1518.710492][ T130] usb 4-1: USB disconnect, device number 44 [ 1518.729849][ T10] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1518.741717][T31062] [ 1518.744062][T31062] ===================================================== [ 1518.751030][T31062] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1518.758572][T31062] syzkaller #0 Tainted: G L [ 1518.764535][T31062] ----------------------------------------------------- [ 1518.771450][T31062] syz.5.6189/31062 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1518.779154][T31062] ffff888076602de0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1518.787855][T31062] [ 1518.787855][T31062] and this task is already holding: [ 1518.795199][T31062] ffff88805e975028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1518.804932][T31062] which would create a new lock dependency: [ 1518.810808][T31062] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1518.818894][T31062] [ 1518.818894][T31062] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1518.828333][T31062] (&client->buffer_lock){..-.}-{3:3} [ 1518.828357][T31062] [ 1518.828357][T31062] ... which became SOFTIRQ-irq-safe at: [ 1518.841389][T31062] lock_acquire+0x107/0x340 [ 1518.845970][T31062] _raw_spin_lock+0x2e/0x40 [ 1518.850550][T31062] evdev_pass_values+0xb9/0xbd0 [ 1518.855470][T31062] evdev_events+0x1e6/0x340 [ 1518.860044][T31062] input_pass_values+0x288/0x890 [ 1518.865054][T31062] input_event_dispose+0x3e5/0x6b0 [ 1518.870240][T31062] input_event+0x89/0xe0 [ 1518.874558][T31062] hidinput_hid_event+0x145e/0x1e50 [ 1518.879829][T31062] hid_process_event+0x4be/0x620 [ 1518.884850][T31062] hid_report_raw_event+0xe91/0x1720 [ 1518.890208][T31062] hid_input_report+0x44b/0x580 [ 1518.895135][T31062] hid_irq_in+0x47e/0x6d0 [ 1518.899538][T31062] __usb_hcd_giveback_urb+0x376/0x540 [ 1518.904986][T31062] dummy_timer+0x85f/0x45b0 [ 1518.909564][T31062] __hrtimer_run_queues+0x51c/0xc30 [ 1518.914839][T31062] hrtimer_run_softirq+0x187/0x2b0 [ 1518.920023][T31062] handle_softirqs+0x22b/0x7c0 [ 1518.924859][T31062] __irq_exit_rcu+0x60/0x150 [ 1518.929518][T31062] irq_exit_rcu+0x9/0x30 [ 1518.933832][T31062] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1518.939533][T31062] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1518.945583][T31062] pv_native_safe_halt+0x13/0x20 [ 1518.950586][T31062] default_idle+0x13/0x20 [ 1518.954991][T31062] default_idle_call+0x73/0xb0 [ 1518.959830][T31062] do_idle+0x1be/0x4d0 [ 1518.963971][T31062] cpu_startup_entry+0x44/0x60 [ 1518.968809][T31062] rest_init+0x2de/0x300 [ 1518.973128][T31062] start_kernel+0x381/0x3d0 [ 1518.977697][T31062] x86_64_start_reservations+0x24/0x30 [ 1518.983232][T31062] x86_64_start_kernel+0x143/0x1c0 [ 1518.988416][T31062] common_startup_64+0x13e/0x147 [ 1518.993430][T31062] [ 1518.993430][T31062] to a SOFTIRQ-irq-unsafe lock: [ 1519.000450][T31062] (tasklist_lock){.+.+}-{3:3} [ 1519.000474][T31062] [ 1519.000474][T31062] ... which became SOFTIRQ-irq-unsafe at: [ 1519.013077][T31062] ... [ 1519.013084][T31062] lock_acquire+0x107/0x340 [ 1519.020219][T31062] _raw_read_lock+0x36/0x50 [ 1519.024802][T31062] __do_wait+0xde/0x740 [ 1519.029032][T31062] do_wait+0x1e8/0x4f0 [ 1519.033181][T31062] kernel_wait+0xab/0x170 [ 1519.037581][T31062] call_usermodehelper_exec_work+0xbe/0x230 [ 1519.043545][T31062] process_scheduled_works+0xad1/0x1770 [ 1519.049173][T31062] worker_thread+0x8a0/0xda0 [ 1519.053836][T31062] kthread+0x711/0x8a0 [ 1519.057980][T31062] ret_from_fork+0x510/0xa50 [ 1519.062651][T31062] ret_from_fork_asm+0x1a/0x30 [ 1519.067494][T31062] [ 1519.067494][T31062] other info that might help us debug this: [ 1519.067494][T31062] [ 1519.077710][T31062] Chain exists of: [ 1519.077710][T31062] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 1519.077710][T31062] [ 1519.090829][T31062] Possible interrupt unsafe locking scenario: [ 1519.090829][T31062] [ 1519.099145][T31062] CPU0 CPU1 [ 1519.104500][T31062] ---- ---- [ 1519.109847][T31062] lock(tasklist_lock); [ 1519.114085][T31062] local_irq_disable(); [ 1519.120824][T31062] lock(&client->buffer_lock); [ 1519.128183][T31062] lock(&new->fa_lock); [ 1519.134973][T31062] [ 1519.138422][T31062] lock(&client->buffer_lock); [ 1519.143442][T31062] [ 1519.143442][T31062] *** DEADLOCK *** [ 1519.143442][T31062] [ 1519.151581][T31062] 7 locks held by syz.5.6189/31062: [ 1519.156760][T31062] #0: ffff88823be8e118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1519.165897][T31062] #1: ffff888144a8f230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1519.175994][T31062] #2: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1519.185645][T31062] #3: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1519.195214][T31062] #4: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1519.204344][T31062] #5: ffff88805e975028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1519.214601][T31062] #6: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1519.223644][T31062] [ 1519.223644][T31062] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1519.234033][T31062] -> (&client->buffer_lock){..-.}-{3:3} { [ 1519.239757][T31062] IN-SOFTIRQ-W at: [ 1519.243722][T31062] lock_acquire+0x107/0x340 [ 1519.249865][T31062] _raw_spin_lock+0x2e/0x40 [ 1519.256006][T31062] evdev_pass_values+0xb9/0xbd0 [ 1519.262497][T31062] evdev_events+0x1e6/0x340 [ 1519.268645][T31062] input_pass_values+0x288/0x890 [ 1519.275305][T31062] input_event_dispose+0x3e5/0x6b0 [ 1519.282059][T31062] input_event+0x89/0xe0 [ 1519.287942][T31062] hidinput_hid_event+0x145e/0x1e50 [ 1519.294778][T31062] hid_process_event+0x4be/0x620 [ 1519.301353][T31062] hid_report_raw_event+0xe91/0x1720 [ 1519.308277][T31062] hid_input_report+0x44b/0x580 [ 1519.314764][T31062] hid_irq_in+0x47e/0x6d0 [ 1519.320727][T31062] __usb_hcd_giveback_urb+0x376/0x540 [ 1519.327747][T31062] dummy_timer+0x85f/0x45b0 [ 1519.333890][T31062] __hrtimer_run_queues+0x51c/0xc30 [ 1519.340726][T31062] hrtimer_run_softirq+0x187/0x2b0 [ 1519.347474][T31062] handle_softirqs+0x22b/0x7c0 [ 1519.353874][T31062] __irq_exit_rcu+0x60/0x150 [ 1519.360095][T31062] irq_exit_rcu+0x9/0x30 [ 1519.365974][T31062] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1519.373240][T31062] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1519.380860][T31062] pv_native_safe_halt+0x13/0x20 [ 1519.387438][T31062] default_idle+0x13/0x20 [ 1519.393407][T31062] default_idle_call+0x73/0xb0 [ 1519.399820][T31062] do_idle+0x1be/0x4d0 [ 1519.405528][T31062] cpu_startup_entry+0x44/0x60 [ 1519.411929][T31062] rest_init+0x2de/0x300 [ 1519.417816][T31062] start_kernel+0x381/0x3d0 [ 1519.423968][T31062] x86_64_start_reservations+0x24/0x30 [ 1519.431066][T31062] x86_64_start_kernel+0x143/0x1c0 [ 1519.437831][T31062] common_startup_64+0x13e/0x147 [ 1519.444408][T31062] INITIAL USE at: [ 1519.448286][T31062] lock_acquire+0x107/0x340 [ 1519.454334][T31062] _raw_spin_lock_irq+0x3d/0x50 [ 1519.460740][T31062] evdev_read+0x370/0xca0 [ 1519.466635][T31062] vfs_read+0x200/0xa30 [ 1519.472377][T31062] ksys_read+0x145/0x250 [ 1519.478170][T31062] do_syscall_64+0xec/0xf80 [ 1519.484223][T31062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.491662][T31062] } [ 1519.494142][T31062] ... key at: [] evdev_open.__key.26+0x0/0x20 [ 1519.502283][T31062] [ 1519.502283][T31062] the dependencies between the lock to be acquired [ 1519.502292][T31062] and SOFTIRQ-irq-unsafe lock: [ 1519.515862][T31062] -> (tasklist_lock){.+.+}-{3:3} { [ 1519.521246][T31062] HARDIRQ-ON-R at: [ 1519.525400][T31062] lock_acquire+0x107/0x340 [ 1519.531905][T31062] _raw_read_lock+0x36/0x50 [ 1519.538404][T31062] __do_wait+0xde/0x740 [ 1519.544550][T31062] do_wait+0x1e8/0x4f0 [ 1519.550606][T31062] kernel_wait+0xab/0x170 [ 1519.556927][T31062] call_usermodehelper_exec_work+0xbe/0x230 [ 1519.564799][T31062] process_scheduled_works+0xad1/0x1770 [ 1519.572326][T31062] worker_thread+0x8a0/0xda0 [ 1519.578902][T31062] kthread+0x711/0x8a0 [ 1519.584966][T31062] ret_from_fork+0x510/0xa50 [ 1519.591572][T31062] ret_from_fork_asm+0x1a/0x30 [ 1519.598331][T31062] SOFTIRQ-ON-R at: [ 1519.602495][T31062] lock_acquire+0x107/0x340 [ 1519.608981][T31062] _raw_read_lock+0x36/0x50 [ 1519.615477][T31062] __do_wait+0xde/0x740 [ 1519.621624][T31062] do_wait+0x1e8/0x4f0 [ 1519.627679][T31062] kernel_wait+0xab/0x170 [ 1519.634005][T31062] call_usermodehelper_exec_work+0xbe/0x230 [ 1519.641879][T31062] process_scheduled_works+0xad1/0x1770 [ 1519.649418][T31062] worker_thread+0x8a0/0xda0 [ 1519.656008][T31062] kthread+0x711/0x8a0 [ 1519.662073][T31062] ret_from_fork+0x510/0xa50 [ 1519.668650][T31062] ret_from_fork_asm+0x1a/0x30 [ 1519.675409][T31062] INITIAL USE at: [ 1519.679470][T31062] lock_acquire+0x107/0x340 [ 1519.685874][T31062] _raw_write_lock_irq+0x3d/0x50 [ 1519.692716][T31062] copy_process+0x2185/0x3950 [ 1519.699292][T31062] kernel_clone+0x21e/0x820 [ 1519.705692][T31062] user_mode_thread+0xdd/0x140 [ 1519.712364][T31062] rest_init+0x23/0x300 [ 1519.718420][T31062] start_kernel+0x381/0x3d0 [ 1519.724817][T31062] x86_64_start_reservations+0x24/0x30 [ 1519.732174][T31062] x86_64_start_kernel+0x143/0x1c0 [ 1519.739180][T31062] common_startup_64+0x13e/0x147 [ 1519.746016][T31062] INITIAL READ USE at: [ 1519.750507][T31062] lock_acquire+0x107/0x340 [ 1519.757340][T31062] _raw_read_lock+0x36/0x50 [ 1519.764180][T31062] __do_wait+0xde/0x740 [ 1519.770668][T31062] do_wait+0x1e8/0x4f0 [ 1519.777072][T31062] kernel_wait+0xab/0x170 [ 1519.783739][T31062] call_usermodehelper_exec_work+0xbe/0x230 [ 1519.791968][T31062] process_scheduled_works+0xad1/0x1770 [ 1519.799847][T31062] worker_thread+0x8a0/0xda0 [ 1519.806771][T31062] kthread+0x711/0x8a0 [ 1519.813173][T31062] ret_from_fork+0x510/0xa50 [ 1519.820088][T31062] ret_from_fork_asm+0x1a/0x30 [ 1519.827185][T31062] } [ 1519.829847][T31062] ... key at: [] tasklist_lock+0x18/0x40 [ 1519.837725][T31062] ... acquired at: [ 1519.841685][T31062] _raw_read_lock+0x36/0x50 [ 1519.846354][T31062] send_sigio+0x101/0x370 [ 1519.850843][T31062] dnotify_handle_event+0x169/0x440 [ 1519.856196][T31062] fsnotify+0x180b/0x1ab0 [ 1519.860687][T31062] path_openat+0x1aa1/0x3dd0 [ 1519.865432][T31062] do_filp_open+0x1fa/0x410 [ 1519.870095][T31062] do_sys_openat2+0x121/0x200 [ 1519.874932][T31062] __x64_sys_openat+0x138/0x170 [ 1519.879943][T31062] do_syscall_64+0xec/0xf80 [ 1519.884605][T31062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.890660][T31062] [ 1519.892967][T31062] -> (&f_owner->lock){....}-{3:3} { [ 1519.898255][T31062] INITIAL USE at: [ 1519.902314][T31062] lock_acquire+0x107/0x340 [ 1519.908535][T31062] _raw_write_lock_irq+0x3d/0x50 [ 1519.915197][T31062] __f_setown+0x67/0x370 [ 1519.921162][T31062] fcntl_dirnotify+0x3fa/0x6a0 [ 1519.927650][T31062] do_fcntl+0x745/0x1a50 [ 1519.933619][T31062] __se_sys_fcntl+0xc8/0x150 [ 1519.939937][T31062] do_syscall_64+0xec/0xf80 [ 1519.946161][T31062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.953773][T31062] INITIAL READ USE at: [ 1519.958176][T31062] lock_acquire+0x107/0x340 [ 1519.964835][T31062] _raw_read_lock_irqsave+0x48/0x60 [ 1519.972198][T31062] send_sigio+0x38/0x370 [ 1519.978602][T31062] dnotify_handle_event+0x169/0x440 [ 1519.985955][T31062] fsnotify+0x180b/0x1ab0 [ 1519.992447][T31062] path_openat+0x1aa1/0x3dd0 [ 1519.999198][T31062] do_filp_open+0x1fa/0x410 [ 1520.005858][T31062] do_sys_openat2+0x121/0x200 [ 1520.012693][T31062] __x64_sys_openat+0x138/0x170 [ 1520.019702][T31062] do_syscall_64+0xec/0xf80 [ 1520.026363][T31062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.034500][T31062] } [ 1520.037072][T31062] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1520.045995][T31062] ... acquired at: [ 1520.049866][T31062] _raw_read_lock_irqsave+0x48/0x60 [ 1520.055224][T31062] send_sigio+0x38/0x370 [ 1520.059632][T31062] kill_fasync+0x24d/0x4d0 [ 1520.064213][T31062] fsnotify_insert_event+0x32b/0x410 [ 1520.069747][T31062] inotify_handle_inode_event+0x40e/0x640 [ 1520.075621][T31062] inotify_ignored_and_remove_idr+0x29/0x70 [ 1520.081670][T31062] fsnotify_destroy_marks+0x155/0x330 [ 1520.087200][T31062] dentry_unlink_inode+0x2c2/0x3f0 [ 1520.092477][T31062] vfs_rmdir+0x261/0x660 [ 1520.096877][T31062] do_rmdir+0x27f/0x4a0 [ 1520.101189][T31062] __x64_sys_rmdir+0x47/0x50 [ 1520.105935][T31062] do_syscall_64+0xec/0xf80 [ 1520.110598][T31062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.116648][T31062] [ 1520.118955][T31062] -> (&new->fa_lock){....}-{3:3} { [ 1520.124070][T31062] INITIAL USE at: [ 1520.127946][T31062] lock_acquire+0x107/0x340 [ 1520.133999][T31062] _raw_write_lock_irq+0x3d/0x50 [ 1520.140488][T31062] fasync_remove_entry+0xf1/0x1c0 [ 1520.147071][T31062] fsnotify_fasync+0x49/0x70 [ 1520.153213][T31062] __fput+0x8a2/0xa70 [ 1520.158757][T31062] task_work_run+0x1d4/0x260 [ 1520.164906][T31062] do_exit+0x694/0x22f0 [ 1520.170625][T31062] do_group_exit+0x21c/0x2d0 [ 1520.176778][T31062] get_signal+0x1285/0x1340 [ 1520.182836][T31062] arch_do_signal_or_restart+0x9a/0x7a0 [ 1520.189943][T31062] exit_to_user_mode_loop+0x87/0x4e0 [ 1520.196781][T31062] do_syscall_64+0x2b7/0xf80 [ 1520.202928][T31062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.210373][T31062] INITIAL READ USE at: [ 1520.214695][T31062] lock_acquire+0x107/0x340 [ 1520.221182][T31062] _raw_read_lock_irqsave+0x48/0x60 [ 1520.228371][T31062] kill_fasync+0x199/0x4d0 [ 1520.234775][T31062] fsnotify_insert_event+0x32b/0x410 [ 1520.242133][T31062] inotify_handle_inode_event+0x40e/0x640 [ 1520.249836][T31062] inotify_ignored_and_remove_idr+0x29/0x70 [ 1520.257711][T31062] fsnotify_destroy_marks+0x155/0x330 [ 1520.265066][T31062] dentry_unlink_inode+0x2c2/0x3f0 [ 1520.272163][T31062] vfs_rmdir+0x261/0x660 [ 1520.278389][T31062] do_rmdir+0x27f/0x4a0 [ 1520.284550][T31062] __x64_sys_rmdir+0x47/0x50 [ 1520.291125][T31062] do_syscall_64+0xec/0xf80 [ 1520.297615][T31062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.305493][T31062] } [ 1520.307975][T31062] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1520.316640][T31062] ... acquired at: [ 1520.320428][T31062] _raw_read_lock_irqsave+0x48/0x60 [ 1520.325795][T31062] kill_fasync+0x199/0x4d0 [ 1520.330385][T31062] evdev_pass_values+0x627/0xbd0 [ 1520.335483][T31062] evdev_events+0x1e6/0x340 [ 1520.340230][T31062] input_pass_values+0x288/0x890 [ 1520.345322][T31062] input_event_dispose+0x330/0x6b0 [ 1520.350595][T31062] input_inject_event+0x1dd/0x340 [ 1520.355779][T31062] evdev_write+0x2fc/0x480 [ 1520.360352][T31062] vfs_write+0x27e/0xb30 [ 1520.364747][T31062] ksys_write+0x145/0x250 [ 1520.369237][T31062] do_syscall_64+0xec/0xf80 [ 1520.373896][T31062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.379954][T31062] [ 1520.382258][T31062] [ 1520.382258][T31062] stack backtrace: [ 1520.388128][T31062] CPU: 0 UID: 0 PID: 31062 Comm: syz.5.6189 Tainted: G L syzkaller #0 PREEMPT(full) [ 1520.388150][T31062] Tainted: [L]=SOFTLOCKUP [ 1520.388155][T31062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1520.388166][T31062] Call Trace: [ 1520.388174][T31062] [ 1520.388182][T31062] dump_stack_lvl+0xe8/0x150 [ 1520.388201][T31062] __lock_acquire+0x2a95/0x2cf0 [ 1520.388223][T31062] ? kill_fasync+0x199/0x4d0 [ 1520.388244][T31062] lock_acquire+0x107/0x340 [ 1520.388257][T31062] ? kill_fasync+0x199/0x4d0 [ 1520.388277][T31062] ? do_raw_spin_lock+0x121/0x290 [ 1520.388296][T31062] ? evdev_pass_values+0xb9/0xbd0 [ 1520.388312][T31062] _raw_read_lock_irqsave+0x48/0x60 [ 1520.388335][T31062] ? kill_fasync+0x199/0x4d0 [ 1520.388353][T31062] kill_fasync+0x199/0x4d0 [ 1520.388372][T31062] ? kill_fasync+0x53/0x4d0 [ 1520.388392][T31062] evdev_pass_values+0x627/0xbd0 [ 1520.388407][T31062] ? evdev_pass_values+0x5a1/0xbd0 [ 1520.388424][T31062] evdev_events+0x1e6/0x340 [ 1520.388436][T31062] ? evdev_events+0x79/0x340 [ 1520.388449][T31062] ? input_pass_values+0x8d/0x890 [ 1520.388462][T31062] input_pass_values+0x288/0x890 [ 1520.388477][T31062] ? input_handle_event+0x70c/0xf30 [ 1520.388496][T31062] input_event_dispose+0x330/0x6b0 [ 1520.388516][T31062] input_inject_event+0x1dd/0x340 [ 1520.388534][T31062] ? input_inject_event+0xb6/0x340 [ 1520.388552][T31062] evdev_write+0x2fc/0x480 [ 1520.388568][T31062] ? __pfx_evdev_write+0x10/0x10 [ 1520.388588][T31062] ? bpf_lsm_file_permission+0x9/0x20 [ 1520.388603][T31062] ? security_file_permission+0x75/0x290 [ 1520.388619][T31062] ? rw_verify_area+0x255/0x4d0 [ 1520.388632][T31062] ? __pfx_evdev_write+0x10/0x10 [ 1520.388646][T31062] vfs_write+0x27e/0xb30 [ 1520.388662][T31062] ? __pfx_vfs_write+0x10/0x10 [ 1520.388675][T31062] ? __fget_files+0x2a/0x420 [ 1520.388693][T31062] ? __fget_files+0x2a/0x420 [ 1520.388709][T31062] ? __fget_files+0x3a0/0x420 [ 1520.388724][T31062] ? __fget_files+0x2a/0x420 [ 1520.388743][T31062] ksys_write+0x145/0x250 [ 1520.388757][T31062] ? __pfx_ksys_write+0x10/0x10 [ 1520.388773][T31062] do_syscall_64+0xec/0xf80 [ 1520.388788][T31062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.388802][T31062] ? trace_irq_disable+0x37/0x100 [ 1520.388820][T31062] ? clear_bhb_loop+0x60/0xb0 [ 1520.388835][T31062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.388850][T31062] RIP: 0033:0x7f76a718f749 [ 1520.388864][T31062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1520.388877][T31062] RSP: 002b:00007f76a8023038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1520.388893][T31062] RAX: ffffffffffffffda RBX: 00007f76a73e5fa0 RCX: 00007f76a718f749 [ 1520.388905][T31062] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000006 [ 1520.388915][T31062] RBP: 00007f76a7213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1520.388924][T31062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1520.388934][T31062] R13: 00007f76a73e6038 R14: 00007f76a73e5fa0 R15: 00007f76a750fa28 [ 1520.388951][T31062] [ 1520.688787][ T30] audit: type=1326 audit(1767519523.092:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31048 comm="syz.8.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1520.691941][ T9] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1520.711602][ T30] audit: type=1326 audit(1767519523.102:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31048 comm="syz.8.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1520.711640][ T30] audit: type=1326 audit(1767519523.232:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31048 comm="syz.8.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe52f8f749 code=0x7ffc0000 [ 1520.762914][ T10] cdc_ncm 7-1:1.1: bind() failure [ 1520.841371][ T9] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 1520.855754][ T10] usb 7-1: USB disconnect, device number 118 [ 1520.863379][T30755] Bluetooth: hci5: command 0x0406 tx timeout [ 1520.899846][T31062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6189'. [ 1522.965591][ T9] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1522.965748][T30755] Bluetooth: hci1: command 0x0406 tx timeout [ 1522.971733][ T9] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1525.045789][T30755] Bluetooth: hci0: command 0x0406 tx timeout [ 1525.051846][ T9] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1525.059389][ T9] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1527.125633][T30755] Bluetooth: hci3: command 0x0406 tx timeout [ 1527.132568][ T9] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1527.140645][ T9] Bluetooth: hci3: Error when powering off device on rfkill (-110)