last executing test programs: 16m7.264262585s ago: executing program 0 (id=4244): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x20335}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000001800)=""/200, 0xc8}, {0x0}], 0x2}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r4, &(0x7f0000000000)=[@l={0x92, 0x0, 0xb0}, @e={0xff, 0x1, 0xe, 0x8, @SEQ_NOTEON=@note=0x1b, 0xe, 0x5}], 0x10) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 16m7.145785412s ago: executing program 0 (id=4245): r0 = socket$l2tp(0x2, 0x2, 0x73) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb, 0x110, r0, 0x1e387000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000000)={0xf, {"a2e3ad21e08eeb661b5d300987f70e06d038e7ff7fc6e5539b0d650e8b089b3f353b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8041800005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) ptrace(0x10, r1) r4 = socket$unix(0x1, 0x5, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000840)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0, 0x0}, &(0x7f0000000980)=0xc) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000480)={0x0, 0x6}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r7, 0x0, 0x0) r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000009c0)='net_cls.classid\x00', 0x2, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000a00), 0x8c3, 0x218400) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB="0000000000000000ffe400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000180)={r10, 0x0, 0x0}, 0x20) lstat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, &(0x7f0000001080)=[{{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000100)="d0471a8901cdb11c535f0bee38b0a724defb4a29dfaab161164cf8d3e076237dde8221afbe6e389c979c1d7094ce8a09bf7892b127138680e87a4c7749ddd18d331c5624d71f08e53e11830f49b7cb029cdcd8d8cc570a05f443d367819002f44a6888cba480", 0x66}, {&(0x7f0000000180)="e0d6e1dd076b9edae3ae6750e36cf4356d68420ad670207f73d886406a1ee1625e98af3a9448e9d8f4faa76f1ec78f949e5a1616012833a98b4d57fea92f52af32f669dddb3167c0f774b014c407ef21357b310eb06604a31348dc6a293803d4925f365f793f40785250cd04f68a63c236399ccef57d", 0x76}, {&(0x7f0000000200)="00226fbf3ab8172784d04164b80d6d9eaf694fa230f7045ea5d3997ec1d9fc203490fc42982aeb1504852269628ac747a89be5d1d8bbb7671f4ef53cd1eb74f245cb925b9e5d2f77bfd74d790e13a905be3e8177b5d164aa346f1430e5894a677358e9f44f3828604d35e1c4ccec2b6bc181eb289b2268ac2d6d03435f61d12863024b1ce437bbd64b552b08005a9f20e5d665a9db9e291a399286b2c39db67f1355f4f434f1228d7a6ec64a061b372a1370ac61b9d5b6a4c1668472a45d3e00ac8c1387a903f6b221c79204b7f27b27bc49eceb8de35ee30e81504989", 0xdd}, {&(0x7f0000000300)="590a23a8dffd3c90fffb0bfdaa8d5ac573fd4d22d6299aae1779fac9e73c38d2458cdbbef2d38b679b6573e41846b8318b5000134d0df48f0c66b398c01267ce4af1fa857a7bca0c74966ade43cbd0a578913f823065c89cb7befc451bc58cb53dd36be50b7ef2e0178dac5992538bc45302f9c4691ae966071e1c648fac6b4cd6e6c00536e9274d14adb20a064a1d57cc5bda90bcd1e40db05f0bb12a9c3445f4c34e9c45ee81739a651dab683e5d1b5142adfc7dfa84b4aa2bcc4f86dfddc0d0a3459e45723b478acd6010bc821549313b697b741d6c6f04c34c97d839388e4eeb90b547f7e73ab40b1e5074403917d879e31e8d9e46ca", 0xf8}, {&(0x7f0000000400)="94f9025b04f261c9d1fd04c434c4eb88bce764c44f60aaee909c146aa4d20ad17c1d2a01324bb3686b043887335e520d43b2bf30327ab5aba34e8671e57db2679c17c2d205898af92f65fd3feaf8ea41e5ff8009db7e5e", 0x57}, {&(0x7f0000000480)="9bb1463e8347d1e2e6df1881e2ba778604f727d217373b869317dd8241caf549ceb52c7ce6822a3f30308be7c3c2347c81426e364882d572fc4b1bb52689f1fd3b47cd21ad2c73e3026b52e7c89d72baa7e7e992d3c96e3bf1e3dde1da942757fc55a1c290a1ef96dc30a2e7e49d4b59ad71438b", 0x74}, {&(0x7f0000000500)="6230e59bfe511bfa6faa1c6fb69ffe469a07e989a11a2fb9b39d7db9a4e587188403a4fa0f39142bd7afa414a7b74e7db146699d1a2495c7564974911f45ac58ef982240db580aa56f271efdc74a9e4b599ee4d8a5549e2282bea1e4139954d897545415a3f8152141bbdd499ae2c4b1a1f1c0ddbf8d3d54a6443993ac10b71e8f92ea8e4f75768613c4e04d6c4833cbc69f7863e6a20694ffb02cb0414980f25e3dac5215ce0591a021b30fa0cde01e77be655d6a5e00bcc8d4355192f0ca9b71f762bcdbe7d60f4271104ed4eae143e7dacb950cafac036cc847", 0xdb}, {&(0x7f0000000600)="8b6f3eb3a7e3e3264bcdd882449fa78e18e434c8a621b04cbfa0a64add6c2e6ee9344221a083a5e0a8076543137861a85c3487ce7cbc82bf5752e396f7301d69a90491b85eb5e47cabec8b97aa2d19b096b2b4b94899bd5ed55a1958233e7ac563b6bb0f62bae0c82113c2dafd1ebdeb943237cc58f2e420f64f17ab6ea9cb275b5ace6fe815130ed0133fee", 0x8c}, {&(0x7f00000006c0)="5f302d11d0e3a20133ad5c1929f59154b83239f2db099856a2abcaf3ec0e533603a4b021ea96dcef1947738ad7f8a539f5041b2f8befd90dd432a2a96954feba13c59e1c606ff8057d3a09c928541162ae1093dea7f1e01215014e433ab9b303fa8de15e43fdeb46d4163c0c825c093915cfe0c3f1b649f4c2b1209f1e0e863fab5d6e561dcb28c69e9ed1d2d0aa16b6deca9e784ba529637a41086e5b775953b199296573ad87", 0xa7}], 0x9, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {r1, r5, r6}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r8]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r9, r0, r10]}}], 0x80, 0x40}}, {{&(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000b40)="84eb02be691d11ab99adbb2243d8749be8895d88eb4713150fb377ae6c93c576d79c13bd50e7b39c02b80eef1146af5f5728363501b4249bb5017a6afca3a7b2decb189d6987656ae8bb43eff1a7d0836e9e03cbe48249bb3bc02a7e2e00a9a839fc01c139793d4614d3af85a7d6d95ca1f6b019560ab30b0bcea2ddcdf1f87b1984817db736f15cdc5f6b1a3465d2c14b7d47d1373214abd9e09c9285a41d2540c8018ff7bd31512956f07196c479b428bd3a5a10b89a225507d41ab383ddb3781ffa45dbafc9106ba903d091d6387ac9d87036abd4dc2a34c807b1954b9f0d571c7de86a79cc6900e0eebceee4f4c5ea87", 0xf2}, {&(0x7f0000000c40)="5251eeae5ece2d8060c8f1bce9a4b2035c7bc8b06d4d4908c61d30077005751a84", 0x21}], 0x2, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {r1, r11, r12}}}], 0x20, 0x20004010}}], 0x2, 0x4001) ptrace$setregset(0x4205, r1, 0x202, &(0x7f0000000040)={&(0x7f0000000d00)="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", 0x1fa}) syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x0) 16m5.766576071s ago: executing program 0 (id=4253): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 16m5.168168201s ago: executing program 0 (id=4254): syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x810, 0xffffffffffffffff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, &(0x7f0000000000)="e0", 0x1) 16m2.1121453s ago: executing program 0 (id=4262): socket$inet6(0xa, 0x3, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x420000, 0x82, 0x8}, 0x18) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000000, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x4800) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000440)={0x0, 0xc}, &(0x7f0000000480)=0x8) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x40086602, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000580)={0x1, 0x0, 0x7, &(0x7f0000000540)={0x1c, "584fc4dfae9a34fb1ffbb539b436cc843759a57bf235d2f60200"}}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000096'], 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0x9, '\x00', @p_u16=&(0x7f0000000040)}}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000000040), 0xffffffff7fffffff, 0x70002) 16m0.696569398s ago: executing program 0 (id=4265): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0xe, 0x4, 0x2a0, 0xffffffff, 0x0, 0x1e0, 0x1e0, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xffffffff, 'dvmrp0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x88, 0x1, 0xfa}, 0x0, 0x70, 0xd0, 0x1e010000}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x1, 0x3, 0x4, 0x6], 0x4, 0x5}, {0x2, [0x7, 0x4, 0x0, 0x4, 0x5, 0x2], 0x0, 0x4}}}}, {{@ip={@remote, @rand_addr=0x64010100, 0x0, 0xff, 'dummy0\x00', 'rose0\x00', {0xff}, {}, 0x21, 0x3, 0x65}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x5, 0x4}, {0x3, 0x1, 0x4}, 0x1, 0x6}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x36}, 0xffffffff, 0xffffff00, 'sit0\x00', 'lo\x00', {0xff}, {0xff}, 0x2, 0x2, 0x2}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x3, 0x2}, {0x0, 0x4, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYRES16, @ANYBLOB="887f318e60836ab46228ae6901ddbf4c74dc42e3f6c119b67036b2f6af787d03a6812a8a134fba001a30cae6c50d7a195bbfba06aa"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) 15m59.021234172s ago: executing program 32 (id=4265): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0xe, 0x4, 0x2a0, 0xffffffff, 0x0, 0x1e0, 0x1e0, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xffffffff, 'dvmrp0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x88, 0x1, 0xfa}, 0x0, 0x70, 0xd0, 0x1e010000}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x1, 0x3, 0x4, 0x6], 0x4, 0x5}, {0x2, [0x7, 0x4, 0x0, 0x4, 0x5, 0x2], 0x0, 0x4}}}}, {{@ip={@remote, @rand_addr=0x64010100, 0x0, 0xff, 'dummy0\x00', 'rose0\x00', {0xff}, {}, 0x21, 0x3, 0x65}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x5, 0x4}, {0x3, 0x1, 0x4}, 0x1, 0x6}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x36}, 0xffffffff, 0xffffff00, 'sit0\x00', 'lo\x00', {0xff}, {0xff}, 0x2, 0x2, 0x2}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x3, 0x2}, {0x0, 0x4, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYRES16, @ANYBLOB="887f318e60836ab46228ae6901ddbf4c74dc42e3f6c119b67036b2f6af787d03a6812a8a134fba001a30cae6c50d7a195bbfba06aa"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) 9m11.745754149s ago: executing program 5 (id=6135): mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @empty}, "00186371ae9b1c03"}}}}}, 0x0) 9m11.596570626s ago: executing program 5 (id=6136): openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x600083, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x12, 0x0, &(0x7f00000000c0)) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) (async) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf020000, 0x6, 0x4, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x0, '\x00', @p_u32=0x0}}) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) syz_emit_ethernet(0x249, &(0x7f0000002080)=ANY=[@ANYBLOB="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"], &(0x7f0000002300)={0x0, 0x2, [0x9e0, 0x9a4, 0x2b9, 0x5e2]}) 9m11.336209635s ago: executing program 5 (id=6137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a3100000000090001"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 9m11.093365381s ago: executing program 5 (id=6138): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="31200000000000000c0b080050333cef1e4a002b8008000100", @ANYRES32, @ANYRES8=r1], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x6, [@multicast1, @private=0x4, @private=0xa010100, @rand_addr=0x64010102, @rand_addr=0x64010100, @broadcast]}, 0x28) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r6 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000340)={0x2, @win={{0x9, 0x80, 0x4, 0x3}, 0x4, 0x9, &(0x7f0000000280)={{0x10001, 0x6, 0x9, 0x10000}, &(0x7f00000001c0)={{0x16bd, 0x1, 0xffff0000, 0x7}, &(0x7f0000000180)={{0x4177, 0x53696605, 0xffffffff, 0x9}}}}, 0x0, &(0x7f00000005c0)="a499be1a798a5c1891cd9b92bf75491ecfec44559b0e2199f724834e8704321acf966c31abf9f98396823ba523c1a674d31079fb6daabd3ec7d91726d1dc17daecc054d4448950ab2ce85841efcb8edff928bb495169f22a083bdf2590683c95019c37ba93db0ebbe51b3e5b13d6ad12d920462395489b4fdd1c7bcb27cf97f588417d51de607843c23435f978a2358b837dc64acc9636269f671c70b9a5d8ac7ca2b337083f1057ba5cce462a0a6a34d2a4f9355d874ab3b059581c30e17552c059387b2795b4a9ec82bb45a3ef18c5453aa4712c0cb1b27b63d79806f344a4f199ee34dcea32f4d700a1376554968e1ea38fa16a9f8f204d5018e35a7dd96a483ed06ba4782463888bbb9409b7d5b67c48cfb78ca803bfe57950ed6f7dff2068b9eed8555df48c74788d37876eca51ec1020dba9fb51cc3c86b82328cbb3f2e192fc723395f9effff9bf88435a9cb02d6644921a2bc01d08e994f365b26d3afe1b2801446b20ba63972b4a3838fb27b0711fffe4e49c4e86438a3456952bc69cd3c1d6f6ce0168caa45a0746976a6bffe6b26692cf94e0a64ad5cf34dba87574376a81d0760c86d8a052a0bbfc08f2843d841e56705117cc528262ea91fe2da3c2d9c096bd4670cb4f2f9b7d6bf85d7d3acf738a8db658ed9077d44eb41cb40c76f043d7d4c3b76318b1bb8133a0f0cbea71aebe45542f637de3d83d89d08ddc31858b7afcf23fb6f2e288c4b8d8576565dbd41684dcfa37f50409096e7b86134ab81f28cc9e7249f812361e2643a9b5759c243bd102079b039719a7c781210548944a1ca2ac2df5904f14c95e6f30e95ef63b8c3f435c94f97ea571f7734049eb81be1c764452eba47b5468aed03c264370c40f660518dfe6e5b24f6a53cabd1da2cbf9de6732d1c2e9aef6fd0afed616cf2f80b40dc941e2ca2ce35d72572b53bbf7f0e27bc0c8ff8bc49ac2baa19e3081bceac3a015c2b8c5e209f892098fbcf718fa642b36320bad963897a4d74ee9e56f09320d248c471b576a1561809efb8caed402d0798c238aef76833fa031d2c0bcd90dfb631e7f896b605ae01c927e2279eecf9d0e8c32c40ee2a8bda231d666e213c4afa2990f0e1369390a98b19ee00269ca2dc87df33aa8f82134c1c0b7bbe42cda7f19d62190192a63ca3442a4aa780f6ec5da073d3afc6e3d559fc595eaffe9abc3f97d0e74aa92a3c9b86eb9ca9bb4b1a2cce84f8e875d47aeef8919a20e661f3629cb3b91ebd167cf38f5141bc62203f37a906d1e6c211abc3fdadef84cc64aaaa4b98ae5117aa9efeb91d38802c47aa40cc2016b0e86800e9fbe70e5d522b00083aa5cf2f07608fcb9bcc731c5270b7e03acee02fd1b041f427baebcdcfc96b3b17abd3f032b645e40aa10bfdc3d0b9ad8c8e74e61efd481606751611e7e69e277c362f2becb1ef9b4d79c539133e694d40470204468694d6559179d78ea3fe66a600f95afa0e1d660640a96fda059347bf2c9aa8b7e629688d380126b8f1f231b59f4c7885c15d64137b0fa93b9f091e23288dd124cca53961eb45368be639e2958eb1578863fcb32d14a2164fbdbeb79eb609638636afb2f1d4a8ee11f90abdac1ec5897f6d8cdc13a4139cada05927f21de72b011141085ae91395797240a8f7d2787c634a23bc2886f2814ee7277a035099eaf6fead9d94a870e154208d6380540a6dc05f9c0578b3f2f014c6703eb2726b05a9f474423fc2d8b402c2d245dea91a152686ecfdd5f1e7ab5ba63c98473636c3601356235567a3f40904ad4dcba931332bf622cacb422485100f92aab764e268d8086c097e459583e55d3fb578cca532a3cfa72dc21512f97dd157519750da5ce4644b8244a4a79a030ad7ec1c20d2114a0e0e235835f2fe66e6098af3ee3e43d0c9bb50713f86dd4a0b454b062bbf33d6c2de6e614402e41385b712a5b1cfaf82144e2fc08382d3429ab7e8589fa73ff726d03accdfe4cf7ab4d5929cdfb9451b92b9a8e78f62665a5591e68a1b1f79c14dc495329580a48c55dff11ccb824f50489420157726f12c0b26cf4aea9b4315239a248931422c2c6e5d4bf8794c80324b3e94a702d4d96218290cf26b91182c26e7f3a3818f4ad441fa7b4ca09fec26c25aea9bb586a40ff6508820f5974e7e0f121f308de7c04ba345796dd26a19ab2cd02ea1d99f86b02007dd408693f9d957d3f7d5e161e804ad3d7a7458fc86e2e5b3cee8bdd2d2b2d90c7f0d7b411d032a58463350926b7abcb8646a8106f10e921414986e57dae4f51d85b1231a1af5c064f8da4668aa1ba3588582182ff5ba6b9923ffdb2b918811fc6d239f1cb9ad9f7a547079f35cd8e5d26714e3385f26109f6d62de06adc16ce68b21d9584f1668f6cd23f7389df55373b51f07ec34466687367087dc0c8ac638657fde130ab35cfbb134b78d66aeeac2c585444e2179b4d68c09221f5425272bf95abe02bbedcf275238caaf8289bb302b1ad996a2297d3f32dcc716f8bd24eae24dc52cf3264a8e73618e46d59b377053d8cad08e4d1baca6c7b16f3bf0d916d5dd78302a79473258d2a4d9b44d206eca5fab8c4dee4daa13babea564bad6e31c239e6e131dcfe399c0c0592e78ff6153b5344eb120695dadbdd7549b7027fa741d9bc432f7315cef56ccf377ea779fc4ea938be22351c9d34e7fca5df75b58d152274ad3c551995b3902c49962df6383be0debf12de921cef91813f667b0c1fe87f6f4826d2443e79355cc6d83dae7ea79501d2918c1c9780cbad472a94a9e79d0ce3bc2f724d4e87a836bef8241d8ee274f7da51ef17cbc44b78adff166d31b552c84454859ef936bfdf18a18fab9b8d914031e5ea7681ed19b30f9d81ba1ba463a5357fffe0271d86d6ba35e8d1607adc0148d3bca7a93fa888f62d0c206bb4e740df5b1d73025d819ed9baa4e250f4f19f87275a7dbe96bb77e3bcc762d5135f0b3b864d6414d9539f989b6a5422fccb38a94d568aa7f4f57746914c97792494c72bcb042889e3b95a7904ec591685677a56f5fc7500ec8f643a3a7f254e04b8e9d654a07499fc4a067cefb24c5dd2a4eae3dc9892082091be587627f5e710f0f2aff1b863f551f9b838ea310153c7f9ee803248148ec55fb30a1629150a91d837b12e97dcaa3be6554e01601d0209200c3f63e9048d4b3a624e3f17eaf0c7d34091b449945ed26381463b5d3cde7fe9d8baa65e7b75261629bc2f70f85eb922163198745649c060a39365d5bd0b0b2227ea9ce772482f9a469f66996f295d5c0dac7da278baf5b77ff3e5d93878c0f9c9577aa88534957f77e02b2c6478fbd41d5e631acfa14a40b4a07f70ca1483acc92ed35a4192e04bc32a6ae91879ff4e9a6b0df63ec1c0d862d1f90852d405d29dacfc85ce9404f9ad19879559b6ee096a22ea6921032a392ba90c406bca48bd7cc7ba2e41b045e7a151295de30f96b9861bbfdad12f142523a5e76d3d303a54db05b586923ed3c6426f3a6ad8422c833c1df4481709fb949731b2902564b4c9965ae74b351091378b35c3b7ed32257ecd49957c7eb81e7883f97c365026d0a5925370466584f054a2e8c1487d255def31fe8deb9cf5ab83dd02f9deef9ff4baf5a7beb40cd6146da8cd270fbd5b18efde575ce935faf165593fc48427519d54375e9b956e3c066e657f09520aedca893e1edd19a2bbf474971870d7c7f1093c060248da9bbdbbfd4f5222398b6e7829e2482eb4815e18b706f8133c49935600966e27b59f7d6948cf8fdd197406bb46b1f8c970872c15a3d267be69e54ea78e90927c6727b8bea21de8716f167e2953f903151f421b03e47f3cbb7e80dfdacf62d4724a81c5248b6bb5f27fe662c5027fa609de0f76f82d40475c94815eaaa7da321a694803995fcfd1b1d7de291c9da0ebfa5ce5325a97b47be81014c0d70f61a9e127849e49dcd1fa20711d6016c255840bd43bb77da88c8d19c39b441e4c706347a17a62545e8ef32b0ee880772c6c243e9a5f47bd6abcaa2d4511c67c252e41406176813453b49857af74ee25dde6eba730f4409f88b4a0dd45308ad6a243e57c588ec8d21d30c689683680141f6d9e779f235b1e5e90b527df459791a0137e30a0fdb1f95f576d918365a7ef63ac1310a0709435e93bb46915923500859d2ca04fa41cab8c84fe9422e1e123c5ecf3ac4c0971f873429c583b84992bf382cc5d56b12367c60eea26d4f77f2e753a70cab00b429e875c65be4454ec3462ae7b2cd772146fa647c8dcb64b6f6714c9c49b3c6d733dc409dc121ca127e799655b193c0c2a19fce8ded8cc1fab7a5d2b2184b25799c36d81b9675ea258b5f1c70a0b9e130e7dc018c7f7f206c7c85b6a64ab5eab75f7ec90408451729c4a0e86536f74aaf07f499f7f611a7836444a6ec3bebe1a94fab84d30cfa8d54594b73057310db4e494427076e85a6b8e7a07a1d1d0194d394caf2029a478082a3b09c72c53837637c9c62cb8c5e43b5d866ff77068659bee17529e1bf1b9d403fc27c248a87edc76029a69440773025cbe3ea37b45420b989143a5f4d65c14eb1e29c735ce470ac46f48c564d6e3aafdc30d3cb081dfb5cadb6dbf22266f674e7fc4e36225692e758b6e16397f334b1032e65a78ebb30488b7420e0531c204f3fdf7a6462cc2f42b155bac7a4c299bcb7be09c7a7a5c580f0e9838a35c58acf97bdc319d6b05787b252f2273384ec0675b3498d1e91a140c3cbe07755c7950b06fa38d84cef46244d4c7bd4118637b8f39eaf981af54a6058834c4878f76db4f46a5f44feb435d6470cbb26da2ed08eb08e93c3c2b6dc4318d21cf8939849f89dbea6be8724a7ca298daa24b388df98056a82d06c6b3cb34a2857159fdd7aab782b5b138d2dfe7d042cbebf6ca66a8fae1e2126a789cbf7cffb73b468a38fed9ff022320d3d40bddb6c20a2e5d0cdc280a8cc83fd5f1a3282200fdec441b7b3c9dd68c6c517e90ae2932da51a58c1757b22cd7f30295fd635fc6227f4f11684b95d013fbc890d0af153b41a22712a427b8eaeb53933534ed9f58f804b6d0c3c7befdacf9d02c80bfd61d835e7854d7da6eb54dfb4e774817028194e1b88d3af5c909afc4a95c2f84b28386e42ba7e8b8c5386729c13b67a008dea3d05eba8a62289f4613bdbb7ec00270129d54ae2255ad72c6780242dc21d1f2841acc4445beddd0f447da3e7c42f1a6e9c77c3f4b68e5454f16471dbf738e291b279dab29438eddfb9d7a71a34b7d4105d274750def02f0796ff7ec74e1888ffcba9ea0ab3db1123943772d8154bf6f2d24a0f6c678e1a0d3f439200e588cd6ebaea765371832d1b81cc34b296def4eb8c2d0807902ab9547f5d2ec6da700c84dcc0a7a90137e74748072df0c00fec80b2af3526d278a394b593dd32862f2ba3018fe3cfec351801fba9a9df9a33564bdcee861cd86d5faad2dd985f65b2d953faacedfa3579e521773657cedd38519bb1414049d6cdc23829b78ade4e7c7c189b8a7309ae6b06c7f94ebb5677dfbb458eff9fa850542c419c16f15cb8d593b146ff500a89d32de0f327e7abe0150f466bd698caba0f276a1de62ee4ab800f91b4540ccefbb0b72c91d0aa961943a4c6a348a183a632e885eabf121772c7f42c995494fc55494f64065b35551e5ac3bfd9ea7a78bb327ed4e65b13b5f0e768ef966a84080a1634c89453fb6c3a6322f22243ca1e58ec160d87fcf8e7fcbf360a8b6997b37fcb75dcd19d4b9bcb073ebbe1833b37471f690deed1c315b0bb7", 0x77}}) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) r7 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) 9m9.408167818s ago: executing program 5 (id=6147): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xd3f, 0x78bc28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x8, 0x10}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3, 0x6, 0x3, 0xc9d}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40008cc}, 0x20000814) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x20, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x8}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0)={0x3, 'pimreg\x00', {0x8}}) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r7, 0xc0745645, &(0x7f0000000040)={0x5, [0x7ff, 0x1000, 0x1, 0x3, 0x9, 0x1, 0x4, 0x10, 0x40, 0x401, 0x200, 0x9, 0xc, 0xfff9, 0x2, 0x8000, 0x9, 0x2, 0x3, 0xe90, 0xff81, 0x5, 0x87ae, 0xff, 0x7, 0xffff, 0xca, 0x10, 0xf5, 0x6, 0x8, 0x9, 0x8001, 0x5, 0x4, 0x2, 0x3ff, 0x2, 0x6, 0x9, 0x8, 0x8c6, 0x6, 0x1, 0x9, 0xf, 0x6, 0x4], 0xa}) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) r8 = syz_open_dev$mouse(&(0x7f0000000140), 0x5, 0x200) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback, 0x32, 0x1, 0xce31, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x40) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d580904"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x1, 0x4040080) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r11}, 0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r8, 0x84, 0x79, &(0x7f0000000180)={r11, 0xa3, 0x2}, 0x8) 9m5.876018543s ago: executing program 5 (id=6157): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) r1 = socket(0x1a, 0x80805, 0x1fe) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={r2, 0xc}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x55, 0x8, 0x5, 0x8000003}, 0x0) fanotify_init(0xa00, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/82, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x100000, 0xb6, &(0x7f0000000340)=""/182}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000600)={0x17}) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x59) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000277000/0x800000)=nil, 0x800000, 0x1000006, 0x11012, r4, 0x0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) socket(0x14, 0x80000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x430, 0xffffffff, 0xffffffff, 0x430, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x3f}, [0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE0={0x24}}, {{@uncond, 0x0, 0x1dc, 0x200, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x2, 0x5], 0xfffffff1, 0x1, 0x3, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @dev={0xfe, 0x80, '\x00', 0x19}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @loopback}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2d}, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x31}, @private0, @private0, @local], 0x9}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xd0}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24, '\x00', 0x7}}}}, 0x3ec) 8m50.436274863s ago: executing program 33 (id=6157): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) r1 = socket(0x1a, 0x80805, 0x1fe) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={r2, 0xc}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x55, 0x8, 0x5, 0x8000003}, 0x0) fanotify_init(0xa00, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/82, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x100000, 0xb6, &(0x7f0000000340)=""/182}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000600)={0x17}) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x59) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000277000/0x800000)=nil, 0x800000, 0x1000006, 0x11012, r4, 0x0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) socket(0x14, 0x80000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x430, 0xffffffff, 0xffffffff, 0x430, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x3f}, [0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE0={0x24}}, {{@uncond, 0x0, 0x1dc, 0x200, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x2, 0x5], 0xfffffff1, 0x1, 0x3, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @dev={0xfe, 0x80, '\x00', 0x19}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @loopback}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2d}, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x31}, @private0, @private0, @local], 0x9}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xd0}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24, '\x00', 0x7}}}}, 0x3ec) 15.724291479s ago: executing program 3 (id=8882): r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0xb02ab005034fa9eb, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x5, 0x6, 0x7, 0x7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x7, &(0x7f0000001f80)=ANY=[@ANYBLOB="18450000fbffffff000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000f5ff84"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x24}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000440), 0x0, 0x1006b, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e"], 0xfebe) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 15.586631168s ago: executing program 3 (id=8883): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newtfilter={0x888, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xf}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x858, 0x2, [@TCA_BASIC_POLICE={0x854, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x10000000, 0xe8b, 0x6, 0x3, {0x9, 0x1, 0xfff, 0xfefd, 0x6, 0xe}, {0x1, 0x2, 0x8, 0x3c0, 0xbb, 0x800}, 0x8, 0x100, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6c, 0x6, 0x6, 0x8, 0x8, 0x5, 0x0, 0x7, 0x8000, 0x3aee, 0x4, 0x4, 0x8000, 0x6, 0x69, 0x7, 0x3, 0x7, 0x0, 0x480000, 0xce0, 0xd208, 0x4, 0xc078, 0x0, 0x1, 0x8000, 0x6, 0x4, 0x7ff, 0x2, 0x4, 0x18000000, 0x5, 0x4, 0xfffffffd, 0x3, 0xfffffff8, 0x3, 0x2, 0x9, 0x400, 0xfffffff8, 0x40, 0x2, 0x2, 0xdd4, 0xb7d6, 0x4, 0x40, 0x3, 0x16d, 0x3, 0x10001, 0xf9, 0x6, 0x5, 0x9, 0x6, 0x7fffffff, 0xfffffff9, 0x7fffffff, 0x0, 0xc8c, 0x80000000, 0xfffffffa, 0x9, 0x1, 0x2, 0x0, 0x80, 0x6, 0xfffffff7, 0x1, 0x4, 0x3f5, 0x401, 0x5, 0x10001, 0xa55, 0x2, 0x0, 0x8, 0x2, 0x7fffffff, 0x2, 0x0, 0x7, 0xf4, 0x2, 0xdf9, 0x3, 0x4, 0x7b25, 0x1b, 0x5, 0x0, 0x8, 0x8001, 0xa98, 0x7, 0x8001, 0x2, 0x1000, 0x5, 0xf, 0x1, 0x4, 0xa3cd, 0xfb, 0xe6e2, 0x8, 0x80000001, 0x5, 0x6, 0xfffffffb, 0xcf4d, 0x6, 0x8000, 0x5, 0x4, 0x100, 0xfffffff8, 0x2, 0x10, 0xfe0, 0x80, 0x101, 0xc95, 0x5, 0x34, 0x4, 0x3, 0x2, 0x7, 0x6, 0x101, 0x6, 0x1, 0x4, 0x2, 0xe408, 0x6, 0x6, 0x395, 0x9, 0x3, 0x1, 0x1, 0x1e1f, 0x2, 0x0, 0x5, 0x7, 0x200, 0x7, 0x4, 0x8, 0x5, 0x9, 0xb54, 0x9, 0x180, 0x5, 0x4b6, 0x4, 0x414110a6, 0x0, 0x0, 0x8, 0xac, 0x4, 0x7fffffff, 0x2715, 0xe, 0x6, 0x8, 0x80, 0x5, 0x4, 0x1, 0x8000, 0x3, 0x3, 0x7f, 0x0, 0x25, 0xff, 0xaa8000, 0xf2ff, 0x7, 0x9, 0x7fffffff, 0x8, 0x9, 0xfffffffa, 0x9, 0x6, 0x8, 0xffffffff, 0x8, 0xfffffffd, 0x3, 0x0, 0xa, 0x40, 0x8001, 0x2, 0x9, 0x200, 0x4, 0x401, 0xff, 0x7, 0x8, 0x9, 0x6, 0xa8f9, 0x6d, 0x1, 0x1, 0x0, 0x80000001, 0xd, 0x9, 0xd31, 0x6, 0x289df43f, 0x6, 0x7fff, 0x8, 0x4, 0x5, 0xf, 0x8, 0xc, 0x3ff, 0xffffffff, 0x3, 0x8001, 0x6, 0x9, 0x9, 0x7fff, 0x8f, 0x2, 0x8000, 0x4, 0x5, 0xca, 0x6, 0x8, 0xfffffff7, 0x2, 0xc]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x85, 0xa, 0x2, 0x8, 0x0, 0x1, 0x509, 0xc0, 0x4, 0x4, 0x6, 0x3, 0x6, 0x8, 0xb647, 0x3, 0x20000000, 0x10, 0x7, 0x1, 0x4, 0xb03, 0x4, 0x2, 0x5f, 0x0, 0x3afa, 0xa8, 0x5, 0x4e24, 0xd747, 0x679b, 0x2, 0x5, 0x3ff, 0x3, 0x2e, 0x400, 0x5, 0x46f, 0x7fffffff, 0x4, 0xd4, 0xff, 0x8, 0x50, 0x4, 0x0, 0x10000, 0xffffffff, 0x7, 0x2, 0x7, 0xfffffff9, 0x5, 0x8, 0x80000001, 0x7, 0x9, 0xdf, 0x5, 0x3, 0xa41, 0x4, 0xfff, 0x80000001, 0x1, 0xe456, 0x8, 0x2, 0x4, 0x6a505143, 0x7fff, 0x9, 0xffe, 0x10000, 0x9, 0x6, 0x3, 0x5, 0xbcb6, 0xffff, 0xa, 0x9, 0x4, 0x0, 0x4, 0x9, 0x4, 0x2, 0xfffffffd, 0x5, 0x2, 0x7bcb, 0x5, 0x10001, 0xffffffff, 0x200, 0x9, 0x8, 0x8, 0x0, 0x0, 0x2, 0x2a, 0x9, 0x9, 0x8, 0x7, 0x6, 0x5, 0x5, 0x4, 0x400, 0x200000, 0x4, 0x1, 0x6, 0x7, 0x0, 0x7, 0x9, 0x8, 0x4, 0x8, 0x6, 0x1000, 0x8001, 0x7f, 0x20, 0x1, 0x656, 0x4d94, 0x2, 0x518, 0x3, 0x80, 0x0, 0x1, 0xa940, 0x3, 0xc, 0x2, 0x10, 0xffffff08, 0xb, 0x0, 0x2, 0x1, 0xe4, 0xfffffff8, 0x9, 0x2, 0x8, 0x3ff, 0xfffffff7, 0x3, 0x8, 0x1, 0x9, 0x4, 0x0, 0xffffffff, 0x7f, 0x3d08c4c7, 0x7f, 0x3, 0x4, 0x7, 0xfffffffd, 0x100, 0x7, 0x1, 0x7, 0xc, 0x2, 0x7, 0xffff, 0x5, 0xf9a, 0x1, 0x1, 0x728a0000, 0x2, 0x6, 0xe73, 0xffffffff, 0x4, 0x195, 0x1, 0x0, 0x3, 0x5a, 0x9, 0x9287, 0x3, 0xffffffc0, 0xe8b, 0x400, 0x0, 0xedd, 0x7, 0xa, 0x5, 0xff, 0x9d, 0x6, 0xb, 0xe84c, 0x0, 0xffff, 0x9ef, 0xd, 0xfffffffe, 0xefa, 0x10001, 0xfffffeff, 0x7, 0x52b, 0x8, 0x4, 0xfffffffd, 0x4, 0xc, 0x3, 0x1, 0x8, 0x78e, 0x5, 0x4, 0x400, 0x800, 0x80, 0x200000, 0x3, 0x6, 0x1, 0x7ff, 0x800, 0x10, 0xfffffff8, 0x3, 0x6, 0x10, 0x5, 0x0, 0x7, 0xb, 0x7f, 0x7ff, 0x7ff, 0x2, 0xc1d2, 0xb, 0xfffffffd]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000001}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x10}, 0x0) 15.446662111s ago: executing program 3 (id=8884): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) r3 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 9.280303359s ago: executing program 6 (id=8916): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newtfilter={0x888, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xf}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x858, 0x2, [@TCA_BASIC_POLICE={0x854, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x10000000, 0xe8b, 0x6, 0x3, {0x9, 0x1, 0xfff, 0xfefd, 0x6, 0xe}, {0x1, 0x2, 0x8, 0x3c0, 0xbb, 0x800}, 0x8, 0x100, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6c, 0x6, 0x6, 0x8, 0x8, 0x5, 0x0, 0x7, 0x8000, 0x3aee, 0x4, 0x4, 0x8000, 0x6, 0x69, 0x7, 0x3, 0x7, 0x0, 0x480000, 0xce0, 0xd208, 0x4, 0xc078, 0x0, 0x1, 0x8000, 0x6, 0x4, 0x7ff, 0x2, 0x4, 0x18000000, 0x5, 0x4, 0xfffffffd, 0x3, 0xfffffff8, 0x3, 0x2, 0x9, 0x400, 0xfffffff8, 0x40, 0x2, 0x2, 0xdd4, 0xb7d6, 0x4, 0x40, 0x3, 0x16d, 0x3, 0x10001, 0xf9, 0x6, 0x5, 0x9, 0x6, 0x7fffffff, 0xfffffff9, 0x7fffffff, 0x0, 0xc8c, 0x80000000, 0xfffffffa, 0x9, 0x1, 0x2, 0x0, 0x80, 0x6, 0xfffffff7, 0x1, 0x4, 0x3f5, 0x401, 0x5, 0x10001, 0xa55, 0x2, 0x0, 0x8, 0x2, 0x7fffffff, 0x2, 0x0, 0x7, 0xf4, 0x2, 0xdf9, 0x3, 0x4, 0x7b25, 0x1b, 0x5, 0x0, 0x8, 0x8001, 0xa98, 0x7, 0x8001, 0x2, 0x1000, 0x5, 0xf, 0x1, 0x4, 0xa3cd, 0xfb, 0xe6e2, 0x8, 0x80000001, 0x5, 0x6, 0xfffffffb, 0xcf4d, 0x6, 0x8000, 0x5, 0x4, 0x100, 0xfffffff8, 0x2, 0x10, 0xfe0, 0x80, 0x101, 0xc95, 0x5, 0x34, 0x4, 0x3, 0x2, 0x7, 0x6, 0x101, 0x6, 0x1, 0x4, 0x2, 0xe408, 0x6, 0x6, 0x395, 0x9, 0x3, 0x1, 0x1, 0x1e1f, 0x2, 0x0, 0x5, 0x7, 0x200, 0x7, 0x4, 0x8, 0x5, 0x9, 0xb54, 0x9, 0x180, 0x5, 0x4b6, 0x4, 0x414110a6, 0x0, 0x0, 0x8, 0xac, 0x4, 0x7fffffff, 0x2715, 0xe, 0x6, 0x8, 0x80, 0x5, 0x4, 0x1, 0x8000, 0x3, 0x3, 0x7f, 0x0, 0x25, 0xff, 0xaa8000, 0xffe4, 0x7, 0x9, 0x7fffffff, 0x8, 0x9, 0xfffffffa, 0x9, 0x6, 0x8, 0xffffffff, 0x8, 0xfffffffd, 0x3, 0x0, 0xa, 0x40, 0x8001, 0x2, 0x9, 0x200, 0x4, 0x401, 0xff, 0x7, 0x8, 0x9, 0x6, 0xa8f9, 0x6d, 0x1, 0x1, 0x0, 0x80000001, 0xd, 0x9, 0xd31, 0x6, 0x289df43f, 0x6, 0x7fff, 0x8, 0x4, 0x5, 0xf, 0x8, 0xc, 0x3ff, 0xffffffff, 0x3, 0x8001, 0x6, 0x9, 0x9, 0x7fff, 0x8f, 0x2, 0x8000, 0x4, 0x5, 0xca, 0x6, 0x8, 0xfffffff7, 0x2, 0xc]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x85, 0xa, 0x2, 0x8, 0x0, 0x1, 0x509, 0xc0, 0x4, 0x4, 0x6, 0x3, 0x6, 0x8, 0xb647, 0x3, 0x20000000, 0x10, 0x7, 0x1, 0x4, 0xb03, 0x4, 0x2, 0x5f, 0x0, 0x3afa, 0xa8, 0x5, 0x4e24, 0xd747, 0x679b, 0x2, 0x5, 0x3ff, 0x3, 0x2e, 0x400, 0x5, 0x46f, 0x7fffffff, 0x4, 0xd4, 0xff, 0x8, 0x50, 0x4, 0x0, 0x10000, 0xffffffff, 0x7, 0x2, 0x7, 0xfffffff9, 0x5, 0x8, 0x80000001, 0x7, 0x9, 0xdf, 0x5, 0x3, 0xa41, 0x4, 0xfff, 0x80000001, 0x1, 0xe456, 0x8, 0x2, 0x4, 0x6a505143, 0x7fff, 0x9, 0xffe, 0x10000, 0x9, 0x6, 0x3, 0x5, 0xbcb6, 0xffff, 0xa, 0x9, 0x4, 0x0, 0x4, 0x9, 0x4, 0x2, 0xfffffffd, 0x5, 0x2, 0x7bcb, 0x5, 0x10001, 0xffffffff, 0x200, 0x9, 0x8, 0x8, 0x0, 0x0, 0x2, 0x2a, 0x9, 0x9, 0x8, 0x7, 0x6, 0x5, 0x5, 0x4, 0x400, 0x200000, 0x4, 0x1, 0x6, 0x7, 0x0, 0x7, 0x9, 0x8, 0x4, 0x8, 0x6, 0x1000, 0x8001, 0x7f, 0x20, 0x1, 0x656, 0x4d94, 0x2, 0x518, 0x3, 0x80, 0x0, 0x1, 0xa940, 0x3, 0xc, 0x2, 0x10, 0xffffff08, 0xb, 0x0, 0x2, 0x1, 0xe4, 0xfffffff8, 0x9, 0x2, 0x8, 0x3ff, 0xfffffff7, 0x3, 0x8, 0x1, 0x9, 0x4, 0x0, 0xffffffff, 0x7f, 0x3d08c4c7, 0x7f, 0x3, 0x4, 0x7, 0xfffffffd, 0x100, 0x7, 0x1, 0x7, 0xc, 0x2, 0x7, 0xffff, 0x5, 0xf9a, 0x1, 0x1, 0x728a0000, 0x2, 0x6, 0xe73, 0xffffffff, 0x4, 0x195, 0x1, 0x0, 0x3, 0x5a, 0x9, 0x9287, 0x3, 0xffffffc0, 0xe8b, 0x400, 0x0, 0xedd, 0x7, 0xa, 0x5, 0xff, 0x9d, 0x6, 0xb, 0xe84c, 0x0, 0xffff, 0x9ef, 0xd, 0xfffffffe, 0xefa, 0x10001, 0xfffffeff, 0x7, 0x52b, 0x8, 0x4, 0xfffffffd, 0x4, 0xc, 0x3, 0x1, 0x8, 0x78e, 0x5, 0x4, 0x400, 0x800, 0x80, 0x200000, 0x3, 0x6, 0x1, 0x7ff, 0x800, 0x10, 0xfffffff8, 0x3, 0x6, 0x10, 0x5, 0x0, 0x7, 0xb, 0x7f, 0x7ff, 0x7ff, 0x2, 0xc1d2, 0xb, 0xfffffffd]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000001}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6.384011696s ago: executing program 6 (id=8926): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x510, 0x330, 0x9403, 0x0, 0x330, 0x2c0, 0x440, 0x3d8, 0x3d8, 0x440, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2e8, 0x330, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}, @common=@inet=@sctp={{0x148}, {[0x4e23, 0x4e20], [0x4e22, 0x4e23], [0x4, 0x6, 0x61, 0xffff, 0xbd91, 0x7f, 0x5, 0x83d, 0x1, 0xfffff000, 0x4759937f, 0x9, 0x2, 0x2, 0x5, 0x80000001, 0x10, 0x8, 0x9, 0xc, 0xfef, 0x6, 0x200, 0x8, 0x8000, 0x6, 0x630000, 0x4, 0x8, 0x7, 0x80000000, 0x1000, 0x4, 0x2, 0x80, 0x7, 0x49e, 0xfffffffb, 0x5, 0x4, 0x4, 0x401, 0xc8, 0x0, 0xcdb2, 0x4, 0x168, 0x6341, 0x7fffffff, 0x101, 0x400, 0x945, 0x7, 0x400, 0x0, 0x91, 0xec28, 0x2, 0x4, 0x6, 0x4, 0x2, 0x6, 0x2], 0x3, [{0x3, 0x1, 0x4}, {0x9, 0x40, 0x3}, {0x7, 0x0, 0x4c}, {0x0, 0x8, 0x6}], 0x1, 0x2, 0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00', {0xd403}}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0xfffffffc]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) write(r0, 0x0, 0x0) 6.207816247s ago: executing program 6 (id=8928): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0x70bd28, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@loopback}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @private1, 0xff80}}]}, 0xa0}}, 0x0) 6.047719826s ago: executing program 6 (id=8929): mprotect(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x8, 0x7fff7ffc}]}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r0, 0x40045431, 0x0) getegid() r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x4800000, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) syz_open_pts(r2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = io_uring_setup(0x2071, &(0x7f0000000040)={0x0, 0xc89f, 0x4, 0x3, 0x2a8}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16d5e99f4754fe04427f1a9f15bd90c983f2f2b181d21fec30c93b9b3d1e4792a896a61404761aa2d510bb14"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000003c0), 0x0, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000001c0)={0x2, 0x1, @multicast2}, 0xfffffffffffffe5f, 0x0, 0x4d, 0x0, 0x0, 0x40001}, 0x8000) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3.58413923s ago: executing program 1 (id=8937): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000003000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 3.476976741s ago: executing program 2 (id=8938): r0 = socket$kcm(0x2, 0x3, 0x2) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x18, {"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", 0xfffffffffffffe03}}, 0xfffffdef) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1c000000000000000097ff0008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000002800000000000000000000000700000094040007441405"], 0x48}, 0x0) 3.381382239s ago: executing program 2 (id=8939): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x68}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x6, 0xfffffffffffffffe, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x7, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4000004, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x1001ffdfd, 0xe, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x2c1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xb, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x10, 0x0, 0x10000000000, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x81, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x100000000000, 0xffffffffffffffff, 0x3, 0x7, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20000000, 0x0, 0x80]}) readahead(0xffffffffffffffff, 0x100, 0x96) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0xffc, 0x0, 0xd968d5b908ac0cde, 0x2, {0x0, 0x8}, {0x350, 0x0, 0x1}, {0xf4ef}, {0xddff, 0x4, 0xffe}, 0x1, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x4, 0x0, 0xb}) 3.311549418s ago: executing program 1 (id=8940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000003090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a3100000000090001"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.176222778s ago: executing program 3 (id=8894): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x140400, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000002940)={0x18, 0x3, 0x0, {0x8}}, 0x18) openat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000005000390400000000fe7649bb0a95753bfffbff000003e4", @ANYRES32=0x0, @ANYBLOB="80520000000000003400128008000100677265002800028004001200060003000300000008000100", @ANYRES32=r0, @ANYBLOB="06000e00000000000600020004000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000844}, 0x8880) 3.044519307s ago: executing program 1 (id=8941): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x8d4, &(0x7f00000002c0)={0x0, 0xf971, 0x80, 0x1, 0x1000001}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="b50b"], 0xe8}, 0x0, 0x24040092}) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000080)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r6 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000200)=0x1fffd, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sigaltstack(&(0x7f0000000000)={0x0, 0x0, 0xd00d1e912b045f74}, 0x0) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r8 = memfd_secret(0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r9}) 3.024107534s ago: executing program 3 (id=8942): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = landlock_create_ruleset(&(0x7f0000000100)={0xc0a9, 0x3, 0x2}, 0x18, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xb0}}, 0x360480c4) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r6 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_disconnect(r6) ioctl$VIDIOC_QUERYBUF(r7, 0xc0585609, 0x0) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) setfsgid(0xee00) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000480)={0x1, 0x0, [{0x482, 0x0, 0x2}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r2], 0x2c}}, 0x40) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62a9a3f72cc9f0ba1f848360000005e120602000000000e000a0010000000de8000001294", 0x2e}], 0x1}, 0x20000040) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r11, 0x40000007}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x10000007, &(0x7f0000000240), 0x2, 0x5}}, 0xffffffffffffff23) 2.663907675s ago: executing program 1 (id=8944): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0x4}, {0x8, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="89d037e65d49fac0931f44375830ad403f1cf3894d8e9ac82821cde35cb813381702567e6fe9f96da990d7000000000000000000000000000000f923de"], 0x0, 0x0, 0x0) syz_fuse_handle_req(r9, &(0x7f0000006180)="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", 0x2000, &(0x7f0000001ec0)={&(0x7f0000001580)={0x50, 0x0, 0x10, {0x7, 0x29, 0x9f52, 0xffffffffb5544409, 0xc0f7, 0x48c, 0x8, 0x8003, 0x0, 0x0, 0x8, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {0x1, 0x4}, [], {}, [], {0x10, 0x3}, {0x20, 0x6}}, 0x24, 0x2) close_range(r8, 0xffffffffffffffff, 0x0) r10 = socket$key(0xf, 0x3, 0x2) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="000186dd0610000340aabcaaaaaa00000000000000000000ffffac1407bbaaaaaaaaaabfff017f00baeb42caa8bb62a1b208b700"], 0x34) sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r12, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x2000018c) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) 2.585692016s ago: executing program 6 (id=8945): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2888}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8}, @IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x44}}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x9, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) (async) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x22, &(0x7f0000000600)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@audit}, {@smackfsdef={'smackfsdef', 0x3d, '-'}}, {@audit}, {@fsmagic={'fsmagic', 0x3d, 0x2c00}}, {@fsmagic={'fsmagic', 0x3d, 0xb}}]}}) (async) io_uring_setup(0x664c, &(0x7f0000000500)={0x0, 0xfffffffe, 0x8000}) r3 = accept(r0, &(0x7f0000000240)=@isdn, &(0x7f00000002c0)=0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r3], 0x80}, 0x1, 0x0, 0x0, 0x4008031}, 0x24000000) (async) socket$kcm(0x29, 0x2, 0x0) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x28, r5, 0x5, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3a7, 0x8000006f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x1000) (async) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0xa, 0x3, 0xff) recvmmsg(r7, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40010022, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) unshare(0x66000080) (async) r9 = socket$netlink(0x10, 0x3, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00'}) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) 2.259791412s ago: executing program 4 (id=8946): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000400400cc00080005000a000000140004"], 0x58}}, 0x0) 2.052269253s ago: executing program 2 (id=8947): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r0 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r0, 0x0, 0x9, 0x6a4c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x1500000000000000) 1.938985568s ago: executing program 2 (id=8948): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000340)=ANY=[@ANYBLOB="1dd9878ecefdaaaaaaaaaabb86dd6a000000009c1100fe8000000000000000000000000000aafe80000000000000000000009c0000aa4e1d4e20"], 0x0) 1.755110169s ago: executing program 4 (id=8949): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000200)={0x190, 0x640, 0x20, 0x280, 0x0, 0xcf, 0x1, 0x1, {0x0, 0x8001}, {0x0, 0x7, 0x1000000}, {0x9}, {0x29}, 0x1, 0x192, 0x8300, 0x4, 0x1, 0xffffffff, 0x0, 0xffffe000, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0x5}) 1.696089581s ago: executing program 2 (id=8950): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf250a01010200000000000000000000000020010000000000000000000000000001000000004e230202020020003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r6, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'wg0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) 1.600322443s ago: executing program 1 (id=8951): syz_usb_connect(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000099dc320d112f37e6854010203010902240001000010100904590002ff063d000905030200020500ff090582020002"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = io_uring_setup(0x6d7, &(0x7f0000000100)={0x0, 0xe869, 0x1, 0xfffffffc, 0x11f}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r4 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0x90000005}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a) r5 = io_uring_setup(0x1b7c, &(0x7f0000000000)={0x0, 0x70e6, 0x8000, 0x1002, 0x400023, 0x0, r2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r5, 0x12, 0x0, 0x1000000) r6 = io_uring_setup(0x5cf, &(0x7f0000000280)={0x0, 0x95cf, 0x112, 0x2, 0x3cd, 0x0, r2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f0000000300)=[0x8], 0x2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000080)={0x1f, 0x5, 0x5}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername(r8, &(0x7f0000000180)=@xdp, &(0x7f0000000200)=0x80) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f00000000c0)={0xa, 0x1, 0x4}) 1.547271207s ago: executing program 4 (id=8952): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x3f000000, 0x0, 0x42804}, 0x4000010) 1.104485025s ago: executing program 4 (id=8953): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000002e00090027bd7000001000000400300004001d00070011"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 953.909216ms ago: executing program 6 (id=8954): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000800)={{0x1, 0x3, 0x8, 0x1, 'syz1\x00', 0xb}, 0x3, 0x4, 0xfc9, 0xffffffffffffffff, 0x6, 0x9, 'syz1\x00', &(0x7f0000000100)=['\x00', '--*)&+\\+R\x00', '*&:&F${\x00', '@&:}&.#\x00', '/proc/timer_list\x00', '\xac].\x00'], 0x30}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073795c30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657456305f742f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x4000800) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x8, @vifc_lcl_addr=@multicast1, @loopback}, 0x10) io_submit(r7, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r6, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x14c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x5b, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x78, 0x60, "217d66d38547aa140db8a200000000"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) 864.742034ms ago: executing program 4 (id=8955): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}, 0x1, 0x0, 0x0, 0x30000000}, 0x0) 774.940003ms ago: executing program 4 (id=8956): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581908b1b6cb0c92a0b73097dd08caec62829e065703a8198092cb0b234051ef2ddbc426a5846adc5201e27334e45b77481dcf27328350380053fceb434d817c984f2a235847539f89f", @ANYBLOB="f7", @ANYRES8], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "2af3"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x84, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000100), 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100021, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) open(0x0, 0x103202, 0x20) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") 436.813839ms ago: executing program 2 (id=8957): set_mempolicy(0x3, &(0x7f0000000080)=0x1ff, 0x5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$int_in(r2, 0x5452, &(0x7f0000001080)=0x3) write(r2, &(0x7f0000000080)='g', 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e23, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8000}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}, 0x4000000) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x3, 0x6, 0x7fff, 0x1a, "ee1dd756f560f25a63b2f119c3439425ea59d8"}) open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) mlock(&(0x7f0000f66000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00008d4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000045c000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000769000/0x1000)=nil) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) ioctl$SNDCTL_TMR_TEMPO(r5, 0xc0045405, &(0x7f0000000140)) ioctl$SNDCTL_TMR_START(r5, 0x5402) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) 378.288693ms ago: executing program 3 (id=8958): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000800)={{0x1, 0x3, 0x8, 0x1, 'syz1\x00', 0xb}, 0x3, 0x4, 0xfc9, 0xffffffffffffffff, 0x6, 0x9, 'syz1\x00', &(0x7f0000000100)=['\x00', '--*)&+\\+R\x00', '*&:&F${\x00', '@&:}&.#\x00', '/proc/timer_list\x00', '\xac].\x00'], 0x30}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073795c30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657456305f742f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x4000800) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x8, @vifc_lcl_addr=@multicast1, @loopback}, 0x10) io_submit(r7, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r6, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x14c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x5b, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x78, 0x60, "217d66d38547aa140db8a200000000"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) 0s ago: executing program 1 (id=8959): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) socket(0x6, 0x809, 0x7fffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000980)={0x3, 0x0, 0x800008c9, 0x1, 0xfffffffd}) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) signalfd(r4, &(0x7f00000001c0)={[0x1]}, 0x8) write$char_usb(r4, &(0x7f0000000040)="e2", 0x918) io_uring_setup(0x6cb, &(0x7f00000000c0)={0x0, 0x87ef, 0x80, 0x1, 0x29f}) socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_io_uring_setup(0xbd9, 0x0, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) kernel console output (not intermixed with test programs): ntrol endpoint instead) [ 1472.588485][T26217] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1472.702559][ T3096] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 113 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1472.967198][T32475] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1472.975623][T31832] usb 4-1: USB disconnect, device number 109 [ 1472.981746][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 1473.005830][T32477] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 1473.039588][T32514] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1473.080339][T31832] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1473.091575][ T3096] usb 5-1: USB disconnect, device number 113 [ 1473.113524][ T3096] usblp1: removed [ 1473.274225][T32483] netlink: 'syz.4.8211': attribute type 10 has an invalid length. [ 1473.286834][T32483] veth0_vlan: left promiscuous mode [ 1473.297004][T32483] veth0_vlan: entered promiscuous mode [ 1473.307750][T32483] team0: Device veth0_vlan failed to register rx_handler [ 1474.751244][T26217] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 1474.953491][T26217] usb 4-1: not running at top speed; connect to a high speed hub [ 1474.963060][T26217] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1475.031307][T26217] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1475.233900][T26217] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1475.297903][T26217] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.364741][T26217] usb 4-1: Product: à ’ [ 1475.368919][T26217] usb 4-1: Manufacturer: á Œ [ 1475.403483][T26217] usb 4-1: SerialNumber: ฯﷷ隲䦩醽皗馴쒑Χ㵽༶跠ɸ헓젂릋锌ì­ê彷邘臲䆰푞룖緩拓滯䌣ì“éš½ç†ë‡šíŒ“ʂ㽷裫璉㕂粕⹈뛘瞅몧ç—ï€äš¯î˜ é¾œè’Šã¹¡ê‚†ï”†â‰´ëœŽâ‡žê¼†î´ˆê˜ë”°ï›êƒ•îŠ‚ꘑì„â •è¸é›Ÿá©”唜íšá£³áºÜºá»®å¢·ê´¿ê€‡í™‘ï“€é ç†›æžŠå•ƒí•ãº™ê½áªŸêœ³íœŠá¨â¥Žâ¡œæ„—༔䯓á’涟䮢á¬å–´ãŒæ›£ë”Ẻ벥ꖢ꾣⪯扚 [ 1475.436442][ C1] vkms_vblank_simulate: vblank timer overrun [ 1476.341298][T31825] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1476.546753][T31825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1476.650310][T31825] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1476.718907][T31825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.733465][T26217] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 1476.771070][T31825] usb 3-1: Product: syz [ 1476.775638][T31825] usb 3-1: Manufacturer: syz [ 1476.806367][T26217] usb 4-1: USB disconnect, device number 110 [ 1476.842009][T31825] usb 3-1: SerialNumber: syz [ 1476.888818][T31825] usb 3-1: config 0 descriptor?? [ 1477.024993][T32568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.094097][T32568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.298299][T32575] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1477.425133][T32577] binder: BINDER_SET_CONTEXT_MGR already set [ 1477.431307][T32577] binder: 32576:32577 ioctl 4018620d 2000000002c0 returned -16 [ 1477.639357][T32568] netlink: 'syz.1.8232': attribute type 10 has an invalid length. [ 1477.647620][T32568] veth0_vlan: left promiscuous mode [ 1477.655577][T32568] veth0_vlan: entered promiscuous mode [ 1477.665633][T32568] team0: Device veth0_vlan failed to register rx_handler [ 1477.697912][T32581] fuse: Unknown parameter '‰¥u9ƒVü¦cdkÌÅ;•½ZÄÊåã9§€!&ŒÁÃ' [ 1478.749997][T32603] wireguard0: entered promiscuous mode [ 1478.756041][T32603] wireguard0: entered allmulticast mode [ 1479.096250][T31832] usb 3-1: USB disconnect, device number 95 [ 1479.199438][T32606] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8244'. [ 1479.360532][T32609] vlan2: entered promiscuous mode [ 1479.625950][T32624] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8249'. [ 1480.251760][ T3096] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1480.434373][ T3096] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1480.451854][T32647] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8256'. [ 1480.462613][ T3096] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.484675][ T3096] usb 4-1: config 0 descriptor?? [ 1480.496097][ T3096] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1480.601616][T26217] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1480.700680][T32632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1480.719617][T32632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1480.762056][T26217] usb 5-1: Using ep0 maxpacket: 32 [ 1480.770898][T26217] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1480.782977][T26217] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1480.813696][T26217] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1480.824795][T26217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1480.837770][T26217] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1480.848028][T26217] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1480.880966][T26217] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1480.900471][T26217] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.932256][T26217] usb 5-1: config 0 descriptor?? [ 1480.963123][ T3096] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 1481.157399][T26217] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 114 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1481.382491][ T3096] gspca_cpia1: usb_control_msg 02, error -32 [ 1481.392195][ C0] usblp0: nonzero read bulk status received: -71 [ 1481.412661][T25498] usb 5-1: USB disconnect, device number 114 [ 1481.428718][ T3096] gspca_cpia1: usb_control_msg 02, error -71 [ 1481.438416][ T3096] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 1481.456191][ T3096] usb 4-1: USB disconnect, device number 111 [ 1481.642868][T32640] netlink: 'syz.4.8255': attribute type 10 has an invalid length. [ 1481.660768][T32640] veth0_vlan: left promiscuous mode [ 1481.692046][T32640] veth0_vlan: entered promiscuous mode [ 1481.699193][T32640] team0: Device veth0_vlan failed to register rx_handler [ 1481.758476][T32639] usblp0: removed [ 1482.358197][T32687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1482.372574][T32687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1482.392324][T32687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1482.401471][T32687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1482.661303][T26217] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1482.836120][T26217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1482.904071][T26217] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1482.921709][T26217] usb 5-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 1482.930797][T26217] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.944472][T26217] usb 5-1: config 0 descriptor?? [ 1483.256156][T32703] CUSE: DEVNAME unspecified [ 1483.412526][T26217] kye 0003:0458:5017.0038: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1483.425466][T26217] kye 0003:0458:5017.0038: unknown main item tag 0x0 [ 1483.681488][T26217] kye 0003:0458:5017.0038: unknown main item tag 0x0 [ 1483.688331][T26217] kye 0003:0458:5017.0038: unknown main item tag 0x0 [ 1483.695181][T26217] kye 0003:0458:5017.0038: unknown main item tag 0x0 [ 1483.702126][T26217] kye 0003:0458:5017.0038: unknown main item tag 0x0 [ 1483.925443][T26217] kye 0003:0458:5017.0038: hidraw0: USB HID v0.00 Device [HID 0458:5017] on usb-dummy_hcd.4-1/input0 [ 1483.941962][T26217] kye 0003:0458:5017.0038: tablet-enabling feature report not found [ 1483.953288][T26217] kye 0003:0458:5017.0038: tablet enabling failed [ 1483.976217][T26217] usb 5-1: USB disconnect, device number 115 [ 1484.075931][T32711] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8275'. [ 1484.207623][T32709] fido_id[32709]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1484.223143][T32716] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8275'. [ 1484.224575][T32711] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1484.300817][T32713] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1484.333305][T32713] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 1484.643015][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.649361][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.938853][T32733] xt_hashlimit: max too large, truncated to 1048576 [ 1485.586241][T32716] bond1 (unregistering): (slave batadv2): Releasing backup interface [ 1485.854272][T32716] bond1 (unregistering): Released all slaves [ 1486.709639][T32748] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8283'. [ 1487.022945][T32738] Cannot find set identified by id 65534 to match [ 1487.104807][T32751] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1487.581478][T31825] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1487.745780][T31825] usb 3-1: Using ep0 maxpacket: 16 [ 1487.758085][T31825] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1487.767945][T31825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.787728][T31825] usb 3-1: Product: syz [ 1487.797906][T31825] usb 3-1: Manufacturer: syz [ 1487.828622][T31825] usb 3-1: SerialNumber: syz [ 1487.859765][T31825] usb 3-1: config 0 descriptor?? [ 1487.898111][T31825] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 1488.298431][T32757] fuse: Unknown parameter '0x00000000000000040x0000000000000005' [ 1488.538977][T31825] usb 3-1: clie_3_5_startup: get interface number failed: -71 [ 1488.555645][T31825] visor 3-1:0.0: probe with driver visor failed with error -71 [ 1488.580386][T31825] usb 3-1: USB disconnect, device number 96 [ 1489.360414][ T356] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8300'. [ 1490.361837][T22053] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1490.491366][ T379] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8308'. [ 1490.654615][ T388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1490.668782][ T388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1490.678829][ T387] netlink: 'syz.3.8311': attribute type 5 has an invalid length. [ 1490.704330][ T387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8311'. [ 1490.884271][ T400] FAULT_INJECTION: forcing a failure. [ 1490.884271][ T400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1490.899706][ T400] CPU: 1 UID: 0 PID: 400 Comm: syz.3.8318 Not tainted syzkaller #0 PREEMPT(full) [ 1490.899731][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1490.899743][ T400] Call Trace: [ 1490.899751][ T400] [ 1490.899759][ T400] dump_stack_lvl+0x189/0x250 [ 1490.899786][ T400] ? lockdep_hardirqs_on+0x9c/0x150 [ 1490.899810][ T400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1490.899845][ T400] should_fail_ex+0x414/0x560 [ 1490.899874][ T400] _copy_to_user+0x31/0xb0 [ 1490.899896][ T400] simple_read_from_buffer+0xe1/0x170 [ 1490.899924][ T400] proc_fail_nth_read+0x1b3/0x220 [ 1490.899948][ T400] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1490.899971][ T400] ? rw_verify_area+0x2a6/0x4d0 [ 1490.899993][ T400] ? __lock_acquire+0xab9/0xd20 [ 1490.900008][ T400] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1490.900031][ T400] vfs_read+0x200/0xa30 [ 1490.900050][ T400] ? fdget_pos+0x247/0x320 [ 1490.900070][ T400] ? __pfx___mutex_lock+0x10/0x10 [ 1490.900088][ T400] ? __pfx_vfs_read+0x10/0x10 [ 1490.900110][ T400] ? __fget_files+0x2a/0x420 [ 1490.900129][ T400] ? __fget_files+0x3a0/0x420 [ 1490.900141][ T400] ? __fget_files+0x2a/0x420 [ 1490.900163][ T400] ksys_read+0x145/0x250 [ 1490.900188][ T400] ? __pfx_ksys_read+0x10/0x10 [ 1490.900212][ T400] ? do_syscall_64+0xbe/0xfa0 [ 1490.900238][ T400] do_syscall_64+0xfa/0xfa0 [ 1490.900259][ T400] ? lockdep_hardirqs_on+0x9c/0x150 [ 1490.900282][ T400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.900299][ T400] ? clear_bhb_loop+0x60/0xb0 [ 1490.900320][ T400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.900337][ T400] RIP: 0033:0x7f352cf8e15c [ 1490.900354][ T400] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1490.900369][ T400] RSP: 002b:00007f352dedd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1490.900387][ T400] RAX: ffffffffffffffda RBX: 00007f352d1e5fa0 RCX: 00007f352cf8e15c [ 1490.900401][ T400] RDX: 000000000000000f RSI: 00007f352dedd0a0 RDI: 0000000000000004 [ 1490.900413][ T400] RBP: 00007f352dedd090 R08: 0000000000000000 R09: 0000000000000000 [ 1490.900424][ T400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1490.900435][ T400] R13: 00007f352d1e6038 R14: 00007f352d1e5fa0 R15: 00007f352d30fa28 [ 1490.900466][ T400] [ 1490.908198][ T401] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8317'. [ 1491.612019][ T418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1491.628696][ T418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1491.958263][ T426] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1492.201647][T31825] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1492.382027][T31825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1492.401308][T31825] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1492.434137][T31825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.457287][T31825] usb 5-1: config 0 descriptor?? [ 1492.602416][ T448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8334'. [ 1492.679351][T31825] usbhid 5-1:0.0: can't add hid device: -71 [ 1492.691555][T31825] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1492.719973][T31825] usb 5-1: USB disconnect, device number 116 [ 1492.857599][ T460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1492.866861][ T460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1492.879234][ T460] fuse: Unknown parameter '0x00000000000000040x0000000000000005' [ 1493.191402][T31825] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 1493.362732][T31825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1493.376380][T31825] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 1493.387576][T31825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.418824][T31825] usb 5-1: config 0 descriptor?? [ 1493.446593][T31825] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input214 [ 1493.642856][ C0] usb 5-1: unknown answer from device [ 1493.648485][ C0] input input214: Pen battery low [ 1493.741313][T25498] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1493.819917][ T477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1493.833566][ T477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1493.852634][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1493.859900][ T5183] usb 5-1: control msg error: -71 [ 1493.859955][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1493.865441][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1493.872757][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1493.879909][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1493.887127][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1493.894376][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1493.901656][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1493.908826][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1493.916045][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1493.923290][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1493.930451][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1493.937705][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1493.944901][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1493.952147][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1493.959393][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1493.966673][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1493.973898][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1493.981106][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1493.995782][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.003204][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.010377][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.017689][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.024919][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.032119][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.039262][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.046782][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.054156][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.061339][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.068504][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.075706][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.083042][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.090246][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.097559][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.104946][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.112287][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.119522][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.126932][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.134220][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.141705][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.149066][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.156289][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.163585][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.170741][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.177925][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.185128][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.192341][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.199581][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.207481][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.215373][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.222725][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.229927][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.237283][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.244519][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.251805][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.258974][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.266246][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.273626][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.280952][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.288450][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.295685][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.302960][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.310956][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.318317][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.325627][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.333041][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.340525][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.347948][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.355245][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.362531][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.369837][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.377188][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.384578][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.392291][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.399621][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.408190][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.415590][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.422926][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.430201][T25498] usb 3-1: Using ep0 maxpacket: 32 [ 1494.430283][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.436099][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.443604][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.450953][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.458740][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.466062][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.473325][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.480545][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.487806][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.494974][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.502155][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.509301][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.516583][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.523866][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.531038][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.538311][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.545586][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.552887][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.560045][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.567244][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.574433][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.581623][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.591003][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.591230][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.598448][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.605825][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.613159][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.628202][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.635502][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.642783][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.650001][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.657376][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.664647][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.671968][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.679195][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.686550][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.693789][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.700984][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.708275][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.715940][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.723367][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.730607][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.738008][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.745433][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.752711][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.760000][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.767314][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.774573][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.781832][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.789070][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.796358][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.803598][ C0] usb 5-1: pegasus_irq - urb shutting down with status: -2 [ 1494.828897][T25498] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1494.837506][T25498] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1494.883407][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.890776][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.899582][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.908060][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.921459][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.930144][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.941194][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.948861][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.958265][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.966349][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.973961][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.981663][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.989251][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1494.997137][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.007999][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.018308][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.025659][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.032992][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.040491][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.047889][ T5183] usb 5-1: control msg error: -71 [ 1495.053027][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.060602][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.068215][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.075874][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.083312][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.090538][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.097837][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.105222][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.112505][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.119719][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.127025][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.134294][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.141532][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.148748][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.156016][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.163327][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.170547][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.177836][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.185072][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.192437][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.199647][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.206890][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.214167][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.221501][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.228717][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.235955][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.243315][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.250537][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.257825][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.265093][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.272355][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.279842][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.287461][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.294710][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.301872][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.309137][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.316338][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.323689][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.330840][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.338232][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.345463][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.352707][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.359928][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.367208][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.374407][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.381574][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.388725][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.395913][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.403600][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.410754][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.417968][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.418173][ T486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1495.425400][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.441709][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.449080][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.454590][T25498] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1495.456426][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.475092][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.479401][ T486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1495.484629][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.498773][T31825] usb 5-1: USB disconnect, device number 117 [ 1495.507065][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1495.507095][ C1] usb 5-1: pegasus_irq - usb_submit_urb failed with result -19 [ 1495.514681][T25498] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1495.514710][T25498] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1495.514735][T25498] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1495.514777][T25498] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1495.514799][T25498] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.520117][T25498] usb 3-1: config 0 descriptor?? [ 1495.932506][T31203] udevd[31203]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 1495.948558][T31203] udevd[31203]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1496.022599][T25498] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 97 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1496.184461][ C1] usblp0: nonzero read bulk status received: -71 [ 1496.191411][T31827] usb 3-1: USB disconnect, device number 97 [ 1496.271380][T31825] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1496.416329][ T469] netlink: 'syz.2.8341': attribute type 10 has an invalid length. [ 1496.424475][ T469] veth0_vlan: entered allmulticast mode [ 1496.431477][T31825] usb 5-1: Using ep0 maxpacket: 8 [ 1496.434828][ T467] usblp0: removed [ 1496.449471][T31825] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1496.476656][T31825] usb 5-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 108 [ 1496.495559][T31825] usb 5-1: config 12 interface 0 has no altsetting 0 [ 1496.506331][T31825] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1496.516107][T31825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.525040][T31825] usb 5-1: Product: syz [ 1496.529602][T31825] usb 5-1: Manufacturer: syz [ 1496.537691][T31825] usb 5-1: SerialNumber: syz [ 1496.545462][ T491] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1496.772839][T31825] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1496.781413][T31825] usb 5-1: selecting invalid altsetting 0 [ 1496.805383][T31825] usb 5-1: USB disconnect, device number 118 [ 1497.126985][ T513] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8354'. [ 1497.136479][ T513] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8354'. [ 1497.180892][ T515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1497.822883][T26219] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1498.161374][ T537] Cannot find set identified by id 65534 to match [ 1498.524030][T26219] usb 5-1: Using ep0 maxpacket: 32 [ 1498.552550][T26219] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1498.624192][T26219] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1498.651241][T26219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.673558][T26219] usb 5-1: config 0 descriptor?? [ 1498.808899][T26219] hub 5-1:0.0: bad descriptor, ignoring hub [ 1498.831309][T26219] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1499.611244][T31825] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1499.828548][T31825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1499.850707][T31825] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1499.860310][T31825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.870158][T31825] usb 4-1: Product: syz [ 1499.940404][T31825] usb 4-1: Manufacturer: syz [ 1499.958226][T31825] usb 4-1: SerialNumber: syz [ 1499.983582][T31825] usb 4-1: config 0 descriptor?? [ 1501.485460][T25498] usb 5-1: USB disconnect, device number 119 [ 1501.804208][ T590] tipc: Enabling of bearer rejected, failed to enable media [ 1502.331923][ T3096] usb 4-1: USB disconnect, device number 112 [ 1502.853575][ T602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1502.862588][ T602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.061423][T31832] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1504.111274][T25498] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1504.227210][T31832] usb 3-1: Using ep0 maxpacket: 32 [ 1504.249378][T31832] usb 3-1: config index 0 descriptor too short (expected 2210, got 1175) [ 1504.260806][T31832] usb 3-1: config 0 has an invalid interface number: 241 but max is 2 [ 1504.269669][T31832] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.280033][T25498] usb 4-1: Using ep0 maxpacket: 16 [ 1504.288446][T31832] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1504.328165][T25498] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1504.352878][T31832] usb 3-1: config 0 has no interface number 0 [ 1504.358987][T25498] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1504.374059][T31832] usb 3-1: config 0 interface 241 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1504.385363][T25498] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1504.397765][T31832] usb 3-1: config 0 interface 241 altsetting 4 has an endpoint descriptor with address 0xAE, changing to 0x8E [ 1504.409509][T25498] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1504.419573][T31832] usb 3-1: config 0 interface 241 altsetting 4 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1504.430872][T31832] usb 3-1: config 0 interface 241 altsetting 4 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1504.448342][T31832] usb 3-1: config 0 interface 241 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 1504.461955][T25498] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1504.471870][T25498] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.479966][T31832] usb 3-1: config 0 interface 241 has no altsetting 0 [ 1504.481313][T31825] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1504.486785][T25498] usb 4-1: Product: syz [ 1504.670223][T25498] usb 4-1: Manufacturer: syz [ 1504.675514][T25498] usb 4-1: SerialNumber: syz [ 1504.680304][T31832] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e0.70 [ 1504.689790][T31832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.700670][T31832] usb 3-1: Product: syz [ 1504.707866][T31832] usb 3-1: Manufacturer: syz [ 1504.714441][T31832] usb 3-1: SerialNumber: syz [ 1504.721910][T31832] usb 3-1: config 0 descriptor?? [ 1504.811313][T31825] usb 5-1: Using ep0 maxpacket: 8 [ 1504.824813][T31825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.836499][T31825] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1504.846323][T31825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.875483][T31825] usb 5-1: config 0 descriptor?? [ 1504.911345][ T616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8384'. [ 1504.953634][T31832] usb 3-1: USB disconnect, device number 98 [ 1505.534755][T25498] usb 4-1: USB disconnect, device number 113 [ 1505.573879][T31203] udevd[31203]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1506.101480][T31832] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1506.149447][ T648] xt_hashlimit: max too large, truncated to 1048576 [ 1506.504458][T31832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1506.971707][T31832] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1506.980869][T31832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.001777][T31832] usb 3-1: Product: syz [ 1507.035507][ T3096] usb 5-1: USB disconnect, device number 120 [ 1507.072126][T31832] usb 3-1: Manufacturer: syz [ 1507.088057][T31832] usb 3-1: SerialNumber: syz [ 1507.099701][ T654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1507.140386][T31832] usb 3-1: config 0 descriptor?? [ 1507.147053][ T654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1507.803850][ T666] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8401'. [ 1508.447299][ T673] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1508.810464][T31832] usb 3-1: USB disconnect, device number 99 [ 1508.892717][T26217] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1509.095088][T26217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1509.112901][T26217] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1509.122812][T26217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.132136][T26217] usb 5-1: Product: syz [ 1509.139802][T26217] usb 5-1: Manufacturer: syz [ 1509.177309][T26217] usb 5-1: SerialNumber: syz [ 1509.194787][T26217] usb 5-1: config 0 descriptor?? [ 1509.231446][T31825] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1509.239398][ T683] netlink: 'syz.2.8403': attribute type 33 has an invalid length. [ 1509.417851][T31825] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1509.432057][T31825] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1509.449491][T31825] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1509.485014][T31825] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1509.501366][T31825] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1509.511591][T31825] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1509.576411][T31825] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1509.993495][T31825] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1510.008289][T31825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.157541][T31825] usb 4-1: Product: syz [ 1510.166444][T31825] usb 4-1: Manufacturer: syz [ 1510.175628][T31825] usb 4-1: SerialNumber: syz [ 1510.208331][T31825] cdc_ncm 4-1:1.0: skipping garbage [ 1510.230591][T31825] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 1510.249468][T31825] cdc_ncm 4-1:1.0: bind() failure [ 1510.297431][ T679] delete_channel: no stack [ 1510.687643][ T681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1510.711835][ T681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1510.924455][ T3096] usb 5-1: USB disconnect, device number 121 [ 1511.160670][ T707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1511.169632][ T707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1511.206748][ T712] vlan2: entered promiscuous mode [ 1511.213320][ T712] bond0: entered promiscuous mode [ 1511.218349][ T712] bond_slave_0: entered promiscuous mode [ 1511.224318][ T712] bond_slave_1: entered promiscuous mode [ 1511.776910][T31832] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1511.917313][ T738] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1512.057118][T31832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1512.070636][T31832] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1512.082139][T31832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.123906][T31832] usb 5-1: Product: syz [ 1512.134644][T31832] usb 5-1: Manufacturer: syz [ 1512.149332][ T743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1512.306037][ T743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1512.403518][T31832] usb 5-1: SerialNumber: syz [ 1512.437978][T31832] usb 5-1: config 0 descriptor?? [ 1512.899709][T25498] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1513.293649][T25498] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1513.344300][T25498] usb 3-1: config 1 has an invalid descriptor of length 42, skipping remainder of the config [ 1513.416097][T25498] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1513.439614][T25498] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 7051, setting to 64 [ 1513.526371][T25498] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1513.536415][T25498] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1513.544498][T25498] usb 3-1: Product: syz [ 1513.548739][T25498] usb 3-1: Manufacturer: syz [ 1513.589613][T25498] cdc_wdm 3-1:1.0: skipping garbage [ 1513.606906][T25498] cdc_wdm 3-1:1.0: skipping garbage [ 1513.613903][T25498] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1513.818018][T31825] usb 3-1: USB disconnect, device number 100 [ 1514.344126][T31825] usb 5-1: USB disconnect, device number 122 [ 1515.308795][ T760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8428'. [ 1515.551286][T25498] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 1515.679756][ T779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8435'. [ 1515.690095][ T779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8435'. [ 1515.713634][T25498] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1515.722769][T25498] usb 5-1: not running at top speed; connect to a high speed hub [ 1515.734426][T25498] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1515.750439][T25498] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1515.779070][T25498] usb 5-1: string descriptor 0 read error: -22 [ 1515.785814][T25498] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1515.804736][T25498] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.825544][T25498] usb 5-1: 0:2 : does not exist [ 1516.504361][ T788] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1516.528539][ T791] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1516.672097][ T800] netlink: 'syz.2.8441': attribute type 33 has an invalid length. [ 1516.982621][ T806] use of bytesused == 0 is deprecated and will be removed in the future, [ 1516.991807][ T806] use the actual size instead. [ 1517.066535][ T805] syzkaller1: entered promiscuous mode [ 1517.076690][ T805] syzkaller1: entered allmulticast mode [ 1517.226816][ T805] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8443'. [ 1517.251884][ T805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8443'. [ 1517.278958][T25498] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1517.330723][T25498] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 1517.393070][T25498] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1517.434133][T25498] usb 5-1: USB disconnect, device number 123 [ 1518.172869][ T812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8444'. [ 1518.494203][ T833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8452'. [ 1518.542935][ T834] bond0: Removing last ns target with arp_interval on [ 1519.976621][ T871] tipc: Enabled bearer , priority 0 [ 1520.029978][ T872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1520.221502][ T872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1520.662707][ T864] tipc: Disabling bearer [ 1521.148219][ T875] ipvlan2: entered promiscuous mode [ 1521.453989][ T882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8468'. [ 1521.530100][ T887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1521.539416][ T887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1521.837513][ T894] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1522.305546][ T902] fuse: Unknown parameter '00000000000000000000' [ 1522.365457][ T327] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1522.601833][T31825] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1522.751275][T31825] usb 5-1: Using ep0 maxpacket: 32 [ 1522.770626][T31825] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1522.787381][T31825] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1522.801849][T31825] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1522.812278][T31825] usb 5-1: config 1 has no interface number 0 [ 1522.814594][ T913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8477'. [ 1522.839773][ T913] 8021q: adding VLAN 0 to HW filter on device team1 [ 1522.847402][T31825] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1522.865338][T31825] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 10229, setting to 1024 [ 1522.877170][T31825] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1522.893744][T31825] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1522.903324][T31825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.918263][ T916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8478'. [ 1522.927552][ T916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8478'. [ 1522.961901][ T902] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1522.976173][T31825] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1523.173312][ T902] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1523.182320][T31825] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1523.221349][T25498] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1523.378937][T25498] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1523.410878][T25498] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1523.443871][T25498] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1523.465153][T25498] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.467041][ T922] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8480'. [ 1523.486880][ T902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1523.506722][ T902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1523.516094][T25498] usb 3-1: Product: Ѐ [ 1523.524059][T25498] usb 3-1: Manufacturer: Ñ™ [ 1523.535563][T25498] usb 3-1: SerialNumber: syz [ 1523.551752][T31832] usb 5-1: USB disconnect, device number 124 [ 1523.560058][T31832] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1523.982998][T25498] usb 3-1: 0:2 : does not exist [ 1524.100272][T25498] usb 3-1: USB disconnect, device number 101 [ 1524.233180][ T949] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1524.616639][ T964] 8021q: VLANs not supported on vcan0 [ 1525.187934][ T976] xt_hashlimit: max too large, truncated to 1048576 [ 1526.206938][ T983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8497'. [ 1526.475607][ T995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.485064][ T995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.604322][ T997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.615169][ T997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.641212][T25498] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1526.791158][T25498] usb 5-1: Using ep0 maxpacket: 8 [ 1526.810779][T25498] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1526.821520][T25498] usb 5-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 108 [ 1526.856600][T25498] usb 5-1: config 12 interface 0 has no altsetting 0 [ 1527.001806][T25498] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1527.011557][T25498] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.036424][T25498] usb 5-1: Product: syz [ 1527.043276][T25498] usb 5-1: Manufacturer: syz [ 1527.050470][T25498] usb 5-1: SerialNumber: syz [ 1527.067376][ T989] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 1527.229972][ T1004] vlan2: entered promiscuous mode [ 1527.295761][T25498] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1527.308306][T25498] usb 5-1: selecting invalid altsetting 0 [ 1527.537031][ T1010] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1527.597905][T25498] usb 5-1: USB disconnect, device number 125 [ 1527.869434][ T1022] tipc: Enabling of bearer rejected, already enabled [ 1527.950032][ T1026] netlink: 7 bytes leftover after parsing attributes in process `syz.6.8511'. [ 1527.961049][ T1026] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8511'. [ 1528.031274][T31832] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1528.191183][T31832] usb 3-1: device descriptor read/64, error -71 [ 1528.431203][T31832] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1528.561628][T31832] usb 3-1: device descriptor read/64, error -71 [ 1528.671593][T31832] usb usb3-port1: attempt power cycle [ 1528.715084][ T1045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1528.737201][ T1045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1529.011252][T31832] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1529.031892][T31832] usb 3-1: device descriptor read/8, error -71 [ 1529.071268][ T3096] usb 5-1: new low-speed USB device number 126 using dummy_hcd [ 1529.221218][ T3096] usb 5-1: Invalid ep0 maxpacket: 16 [ 1529.271208][T31832] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1529.292218][T31832] usb 3-1: device descriptor read/8, error -71 [ 1529.351225][ T3096] usb 5-1: new low-speed USB device number 127 using dummy_hcd [ 1529.403958][T31832] usb usb3-port1: unable to enumerate USB device [ 1529.501446][ T3096] usb 5-1: Invalid ep0 maxpacket: 16 [ 1529.516355][ T3096] usb usb5-port1: attempt power cycle [ 1529.616442][ T1055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1529.626553][ T1055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1529.639594][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1529.639611][ T30] audit: type=1326 audit(1764483576.214:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1054 comm="syz.3.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352cf8f749 code=0x7ffc0000 [ 1529.671397][ T30] audit: type=1326 audit(1764483576.214:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1054 comm="syz.3.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352cf8f749 code=0x7ffc0000 [ 1529.693991][ T30] audit: type=1326 audit(1764483576.214:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1054 comm="syz.3.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f352cf8f749 code=0x7ffc0000 [ 1529.716698][ T30] audit: type=1326 audit(1764483576.214:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1054 comm="syz.3.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352cf8f749 code=0x7ffc0000 [ 1529.740428][ T30] audit: type=1326 audit(1764483576.214:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1054 comm="syz.3.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f352cf8df90 code=0x7ffc0000 [ 1529.763024][ T30] audit: type=1326 audit(1764483576.214:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1054 comm="syz.3.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352cf8f749 code=0x7ffc0000 [ 1529.785549][ T30] audit: type=1326 audit(1764483576.214:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1054 comm="syz.3.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f352cf8df90 code=0x7ffc0000 [ 1529.816434][ T30] audit: type=1326 audit(1764483576.214:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1054 comm="syz.3.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352cf8f749 code=0x7ffc0000 [ 1529.839474][ T30] audit: type=1326 audit(1764483576.214:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1054 comm="syz.3.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f352cf8f749 code=0x7ffc0000 [ 1529.863194][ T30] audit: type=1326 audit(1764483576.214:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1054 comm="syz.3.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352cf8f749 code=0x7ffc0000 [ 1529.890261][ T3096] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 1529.911802][ T3096] usb 5-1: Invalid ep0 maxpacket: 16 [ 1530.041235][ T3096] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 1530.062003][ T3096] usb 5-1: Invalid ep0 maxpacket: 16 [ 1530.074548][ T3096] usb usb5-port1: unable to enumerate USB device [ 1530.623835][ T1059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8520'. [ 1530.679599][ T1059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8520'. [ 1531.281241][T31825] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1531.522752][T31825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1531.544491][T31825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1531.568863][T31825] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1531.594549][T31825] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1531.611309][T31825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.635917][T31825] usb 3-1: config 0 descriptor?? [ 1532.176642][T31825] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1532.518801][ T1099] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1532.572217][T31825] usb 3-1: USB disconnect, device number 106 [ 1532.587844][ T1101] bond0: Removing last ns target with arp_interval on [ 1532.597513][ T1101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1533.605392][ T1111] SET target dimension over the limit! [ 1533.720516][ T1113] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8536'. [ 1533.740794][ T1113] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8536'. [ 1534.256283][ T1126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8541'. [ 1534.492127][ T1132] Cannot find set identified by id 65534 to match [ 1534.648054][ T1149] team0: Device ipip0 is of different type [ 1535.123464][ T1160] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1535.151165][ T1159] vlan2: entered promiscuous mode [ 1535.156241][ T1159] bond0: entered promiscuous mode [ 1535.165344][ T1159] bond_slave_0: entered promiscuous mode [ 1535.171592][ T1159] bond_slave_1: entered promiscuous mode [ 1535.533551][ T1167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1535.579125][ T1167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1535.759495][ T1178] netlink: 'syz.3.8554': attribute type 3 has an invalid length. [ 1536.313248][ T1188] netlink: 'syz.6.8562': attribute type 21 has an invalid length. [ 1536.416087][ T1193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1536.447211][ T1193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1536.621752][ T1197] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8565'. [ 1537.502479][ T1213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1537.511732][ T1213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1537.831234][T31832] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1537.839025][ T3096] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1537.981349][T31832] usb 3-1: device descriptor read/64, error -71 [ 1537.987752][ T3096] usb 5-1: device descriptor read/64, error -71 [ 1538.241483][T31832] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1538.249217][ T3096] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1538.287788][ T1222] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1538.391261][T31832] usb 3-1: device descriptor read/64, error -71 [ 1538.411305][ T3096] usb 5-1: device descriptor read/64, error -71 [ 1538.501527][T31832] usb usb3-port1: attempt power cycle [ 1538.522799][ T3096] usb usb5-port1: attempt power cycle [ 1538.841742][T31832] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1538.861322][ T3096] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1538.870194][T31832] usb 3-1: device descriptor read/8, error -71 [ 1538.891996][ T3096] usb 5-1: device descriptor read/8, error -71 [ 1539.131218][T31832] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1539.151223][ T3096] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1539.159437][T31832] usb 3-1: device descriptor read/8, error -71 [ 1539.183854][ T3096] usb 5-1: device descriptor read/8, error -71 [ 1539.281423][T31832] usb usb3-port1: unable to enumerate USB device [ 1539.301548][ T3096] usb usb5-port1: unable to enumerate USB device [ 1539.723944][ T1233] cgroup: fork rejected by pids controller in /syz3 [ 1539.915590][T31832] usb 2-1: USB disconnect, device number 102 [ 1539.944805][ T1275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1539.995674][ T1275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1540.374115][T13503] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1540.385233][T13503] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1540.394129][T13503] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1540.408330][T13503] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1540.416490][T13503] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1540.745035][ T1292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8584'. [ 1541.575881][ T1285] chnl_net:caif_netlink_parms(): no params data found [ 1542.161231][T31827] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1542.344250][T31827] usb 5-1: not running at top speed; connect to a high speed hub [ 1542.360407][T31827] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1542.388937][T31827] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1542.412211][T31827] usb 5-1: config 1 has no interface number 1 [ 1542.418742][T31827] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1542.432137][T31827] usb 5-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1542.455897][T31827] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1542.465436][T31827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.478125][T31827] usb 5-1: Product: syz [ 1542.482736][T31827] usb 5-1: Manufacturer: syz [ 1542.487479][T31827] usb 5-1: SerialNumber: syz [ 1542.504937][ T327] dvmrp1 (unregistering): left allmulticast mode [ 1542.528000][T23773] Bluetooth: hci3: command tx timeout [ 1542.622988][ T1332] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8595'. [ 1542.807043][ T1335] netlink: 228 bytes leftover after parsing attributes in process `syz.6.8596'. [ 1542.834753][ T1335] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8596'. [ 1542.848382][ T1335] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8596'. [ 1543.152638][ T327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1543.163333][ T327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1543.179350][ T327] bond0 (unregistering): Released all slaves [ 1543.194420][ T327] bond1 (unregistering): Released all slaves [ 1543.351405][ T327] bond2 (unregistering): Released all slaves [ 1543.506466][T31827] usb 5-1: USB disconnect, device number 8 [ 1543.567312][T31203] udevd[31203]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1543.596073][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1543.621351][ T1285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1543.628594][ T1285] bridge_slave_0: entered allmulticast mode [ 1543.637569][ T1285] bridge_slave_0: entered promiscuous mode [ 1543.645689][ T327] tipc: Disabling bearer [ 1543.650972][ T327] tipc: Disabling bearer [ 1543.664927][ T327] tipc: Left network mode [ 1543.695107][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1543.764160][ T1285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1543.781529][ T1285] bridge_slave_1: entered allmulticast mode [ 1543.794939][ T1285] bridge_slave_1: entered promiscuous mode [ 1543.820527][ T327] IPVS: stopping master sync thread 27131 ... [ 1543.906017][ T1285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1543.971013][ T1285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1544.059716][ T1345] delete_channel: no stack [ 1544.150040][ T1285] team0: Port device team_slave_0 added [ 1544.336143][ T1285] team0: Port device team_slave_1 added [ 1544.603815][T23773] Bluetooth: hci3: command tx timeout [ 1544.621475][ T1372] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1545.084801][ T1285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1545.094460][ T1285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1545.160704][ T1285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1545.220005][ T1285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1545.243547][ T1285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1545.305352][ T1285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1545.750160][ T1285] hsr_slave_0: entered promiscuous mode [ 1545.770715][ T1285] hsr_slave_1: entered promiscuous mode [ 1545.786943][ T1285] debugfs: 'hsr0' already exists in 'hsr' [ 1545.811307][ T1285] Cannot create hsr debugfs directory [ 1546.045101][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.064469][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.359474][ T327] hsr_slave_0: left promiscuous mode [ 1546.392453][ T327] hsr_slave_1: left promiscuous mode [ 1546.410176][ T1422] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1546.426859][ T327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1546.474090][ T327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1546.600488][ T327] pim6reg (unregistering): left allmulticast mode [ 1546.696388][T23773] Bluetooth: hci3: command tx timeout [ 1548.698790][ T327] team0 (unregistering): Port device team_slave_1 removed [ 1548.746845][ T327] team0 (unregistering): Port device team_slave_0 removed [ 1548.777941][T23773] Bluetooth: hci3: command tx timeout [ 1549.281850][ T1449] tc_dump_action: action bad kind [ 1549.300556][ T1452] dvmrp8: entered allmulticast mode [ 1549.460171][ T1452] dvmrp8: left allmulticast mode [ 1549.763090][ T1469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8627'. [ 1549.839984][ T1469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1549.948899][ T1469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8627'. [ 1550.036297][ T1472] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8625'. [ 1550.130919][ T1474] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1550.141727][ T1474] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1550.388332][ T1480] Cannot find set identified by id 65534 to match [ 1550.433269][ T1469] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 1550.447307][ T1469] bond1 (unregistering): Released all slaves [ 1550.515387][ T327] IPVS: stop unused estimator thread 0... [ 1550.865788][ T1490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1550.923538][ T1490] macvlan2: entered promiscuous mode [ 1550.928882][ T1490] dummy0: entered promiscuous mode [ 1550.953742][ T1285] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1550.969818][ T1285] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1551.042463][ T1285] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1551.182808][ T1285] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1551.243044][ T1504] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1551.282564][ T1513] overlayfs: missing 'lowerdir' [ 1552.221906][ T1285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1552.387742][ T1285] 8021q: adding VLAN 0 to HW filter on device team0 [ 1552.494603][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.501799][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1552.644119][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.651305][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1553.069535][ T1285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1553.099401][ T1285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1553.352812][ T1285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1553.529146][ T1285] veth0_vlan: entered promiscuous mode [ 1553.560800][ T1285] veth1_vlan: entered promiscuous mode [ 1553.654656][ T1285] veth0_macvtap: entered promiscuous mode [ 1553.694288][ T1285] veth1_macvtap: entered promiscuous mode [ 1553.790936][ T1285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1553.836842][ T1285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1553.876715][ T318] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.896358][ T318] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.914143][ T318] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.935100][ T318] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.142988][ T327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1554.166915][ T327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1554.292085][ T327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1554.320735][ T327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1554.364846][ T328] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1554.876541][ T1589] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1555.051675][T26219] usb 2-1: new low-speed USB device number 103 using dummy_hcd [ 1555.237024][T26219] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1555.249037][T26219] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1555.290739][T26219] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1555.361887][T26219] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1555.420030][T26219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1555.498901][T26219] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1555.527210][T26219] usb 2-1: string descriptor 0 read error: -22 [ 1555.574580][T26219] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1555.615056][T26219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.662563][T26219] usb 2-1: config 0 descriptor?? [ 1555.673031][ T1586] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1555.685947][T26219] hub 2-1:0.0: bad descriptor, ignoring hub [ 1555.748863][T26219] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1555.830908][T26219] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input217 [ 1556.055812][T31832] usb 2-1: USB disconnect, device number 103 [ 1556.268332][ T1614] bond0: Removing last ns target with arp_interval on [ 1556.332146][ T1614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1556.920142][ T1631] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8664'. [ 1557.247280][ T1634] Cannot find set identified by id 65534 to match [ 1557.285724][ T1636] FAULT_INJECTION: forcing a failure. [ 1557.285724][ T1636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1557.315809][ T1636] CPU: 1 UID: 0 PID: 1636 Comm: syz.6.8665 Not tainted syzkaller #0 PREEMPT(full) [ 1557.315836][ T1636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1557.315849][ T1636] Call Trace: [ 1557.315857][ T1636] [ 1557.315865][ T1636] dump_stack_lvl+0x189/0x250 [ 1557.315895][ T1636] ? __pfx____ratelimit+0x10/0x10 [ 1557.315919][ T1636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1557.315939][ T1636] ? __pfx__printk+0x10/0x10 [ 1557.315957][ T1636] ? __might_fault+0xb0/0x130 [ 1557.315991][ T1636] should_fail_ex+0x414/0x560 [ 1557.316021][ T1636] _copy_from_user+0x2d/0xb0 [ 1557.316043][ T1636] ___sys_sendmsg+0x158/0x2a0 [ 1557.316066][ T1636] ? __pfx____sys_sendmsg+0x10/0x10 [ 1557.316120][ T1636] ? __fget_files+0x2a/0x420 [ 1557.316136][ T1636] ? __fget_files+0x3a0/0x420 [ 1557.316162][ T1636] __sys_sendmmsg+0x227/0x430 [ 1557.316188][ T1636] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1557.316215][ T1636] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1557.316257][ T1636] ? ksys_write+0x22a/0x250 [ 1557.316282][ T1636] ? __pfx_ksys_write+0x10/0x10 [ 1557.316310][ T1636] __x64_sys_sendmmsg+0xa0/0xc0 [ 1557.316332][ T1636] do_syscall_64+0xfa/0xfa0 [ 1557.316354][ T1636] ? lockdep_hardirqs_on+0x9c/0x150 [ 1557.316377][ T1636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.316395][ T1636] ? clear_bhb_loop+0x60/0xb0 [ 1557.316417][ T1636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.316434][ T1636] RIP: 0033:0x7ffbcff8f749 [ 1557.316451][ T1636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1557.316467][ T1636] RSP: 002b:00007ffbd0d84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1557.316488][ T1636] RAX: ffffffffffffffda RBX: 00007ffbd01e5fa0 RCX: 00007ffbcff8f749 [ 1557.316510][ T1636] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003 [ 1557.316522][ T1636] RBP: 00007ffbd0d84090 R08: 0000000000000000 R09: 0000000000000000 [ 1557.316534][ T1636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1557.316545][ T1636] R13: 00007ffbd01e6038 R14: 00007ffbd01e5fa0 R15: 00007ffbd030fa28 [ 1557.316576][ T1636] [ 1557.559740][ T1638] netlink: 7 bytes leftover after parsing attributes in process `syz.2.8666'. [ 1557.573541][ T1638] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8666'. [ 1558.216763][ T1663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8674'. [ 1558.341539][T26219] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1558.375188][ T1667] FAULT_INJECTION: forcing a failure. [ 1558.375188][ T1667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1558.388542][ T1667] CPU: 1 UID: 0 PID: 1667 Comm: syz.4.8675 Not tainted syzkaller #0 PREEMPT(full) [ 1558.388565][ T1667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1558.388572][ T1667] Call Trace: [ 1558.388576][ T1667] [ 1558.388582][ T1667] dump_stack_lvl+0x189/0x250 [ 1558.388600][ T1667] ? __pfx____ratelimit+0x10/0x10 [ 1558.388614][ T1667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1558.388627][ T1667] ? __pfx__printk+0x10/0x10 [ 1558.388638][ T1667] ? __might_fault+0xb0/0x130 [ 1558.388658][ T1667] should_fail_ex+0x414/0x560 [ 1558.388676][ T1667] _copy_from_user+0x2d/0xb0 [ 1558.388692][ T1667] kstrtouint_from_user+0xc4/0x170 [ 1558.388704][ T1667] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1558.388724][ T1667] proc_fail_nth_write+0x88/0x200 [ 1558.388737][ T1667] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1558.388752][ T1667] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1558.388765][ T1667] vfs_write+0x27e/0xb30 [ 1558.388784][ T1667] ? __pfx_vfs_write+0x10/0x10 [ 1558.388798][ T1667] ? __fget_files+0x2a/0x420 [ 1558.388811][ T1667] ? __fget_files+0x3a0/0x420 [ 1558.388820][ T1667] ? __fget_files+0x2a/0x420 [ 1558.388834][ T1667] ksys_write+0x145/0x250 [ 1558.388848][ T1667] ? __pfx_ksys_write+0x10/0x10 [ 1558.388863][ T1667] ? do_syscall_64+0xbe/0xfa0 [ 1558.388879][ T1667] do_syscall_64+0xfa/0xfa0 [ 1558.388892][ T1667] ? lockdep_hardirqs_on+0x9c/0x150 [ 1558.388905][ T1667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.388915][ T1667] ? clear_bhb_loop+0x60/0xb0 [ 1558.388927][ T1667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.388936][ T1667] RIP: 0033:0x7f361bd8e1ff [ 1558.388947][ T1667] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1558.388956][ T1667] RSP: 002b:00007f361cc3b030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1558.388968][ T1667] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f361bd8e1ff [ 1558.388976][ T1667] RDX: 0000000000000001 RSI: 00007f361cc3b0a0 RDI: 0000000000000005 [ 1558.388982][ T1667] RBP: 00007f361cc3b090 R08: 0000000000000000 R09: 0000000000000000 [ 1558.388988][ T1667] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1558.388994][ T1667] R13: 00007f361bfe6038 R14: 00007f361bfe5fa0 R15: 00007f361c10fa28 [ 1558.389011][ T1667] [ 1558.971361][T26219] usb 2-1: Using ep0 maxpacket: 8 [ 1559.004476][T26219] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.019032][T26219] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1559.041543][T26219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1559.052609][T26219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1559.093186][ T1664] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1559.226138][T26219] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1559.279963][T26219] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1559.299426][T26219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1559.350118][T26219] usb 2-1: Product: syz [ 1559.374593][T26219] usb 2-1: Manufacturer: syz [ 1559.405049][T26219] usb 2-1: SerialNumber: syz [ 1559.435631][T26219] usb 2-1: config 0 descriptor?? [ 1559.655107][T26219] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1559.681388][T26219] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1559.701223][ T1677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8680'. [ 1559.721608][ T1677] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1559.869779][T26219] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 1559.891163][T26219] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1559.923041][T26219] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1560.063230][ T1693] netlink: 280 bytes leftover after parsing attributes in process `syz.2.8686'. [ 1560.072972][T26219] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 1560.080300][ T1695] netlink: 280 bytes leftover after parsing attributes in process `syz.2.8686'. [ 1560.115605][ T1696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8685'. [ 1560.151386][ T1696] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1560.507777][ T1708] bond0: Removing last ns target with arp_interval on [ 1560.523434][ T1708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1560.703896][T31832] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 1560.735669][ T1659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1560.750266][T31832] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1560.792183][ T1659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1560.882927][T26219] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1560.913840][T26219] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 1561.017252][ T1709] fido_id[1709]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1561.113578][T26219] usb 2-1: USB disconnect, device number 104 [ 1561.620620][ T1721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8696'. [ 1561.670656][ T1721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8696'. [ 1561.889075][ T1728] misc userio: No port type given on /dev/userio [ 1561.898998][ T1728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1561.908561][ T1728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1562.527266][ T1748] Cannot find set identified by id 65534 to match [ 1562.732801][ T1752] tipc: Started in network mode [ 1562.743791][ T1752] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1562.763151][ T1752] tipc: Enabled bearer , priority 0 [ 1562.791249][ T1751] binder: 1749:1751 ioctl c0306201 2000000001c0 returned -14 [ 1562.919141][ T1759] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8709'. [ 1562.977513][ T1762] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8709'. [ 1562.981265][ T1761] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8710'. [ 1563.012426][ T1761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8710'. [ 1563.220879][ T1774] netlink: 'syz.2.8715': attribute type 1 has an invalid length. [ 1563.335923][ T1781] netlink: 'syz.2.8717': attribute type 2 has an invalid length. [ 1563.336070][ T1781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1563.466964][ T1772] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1563.621430][T31825] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1563.781263][T31825] usb 5-1: Using ep0 maxpacket: 32 [ 1563.875505][T31825] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1563.901272][T31825] usb 5-1: no configurations [ 1563.921559][T31825] usb 5-1: can't read configurations, error -22 [ 1563.955545][T31827] tipc: Node number set to 11578026 [ 1564.374348][ T1800] netlink: 'syz.3.8724': attribute type 33 has an invalid length. [ 1564.611581][T26219] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1564.771203][T26219] usb 3-1: Using ep0 maxpacket: 16 [ 1564.788633][T26219] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1564.798092][ T1811] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8728'. [ 1564.810415][ T1811] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1564.863680][T26219] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1564.923795][T26219] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1564.924103][T26219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.940741][ T1817] Cannot find add_set index 0 as target [ 1564.993732][T26219] usb 3-1: config 0 descriptor?? [ 1565.023059][ T1816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1565.033716][ T1816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1565.059040][ T1821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1565.077159][ T1813] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8729'. [ 1565.093937][ T1821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1565.293210][ T1832] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8735'. [ 1565.683185][ T1847] libceph: resolve '0.0' (ret=-3): failed [ 1566.080074][ T1857] SET target dimension over the limit! [ 1566.130411][ T1859] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8737'. [ 1566.217947][ T1862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1566.232695][ T1862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1566.381210][T26217] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1566.601199][T26217] usb 2-1: Using ep0 maxpacket: 32 [ 1566.608172][T26217] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1566.616854][T26217] usb 2-1: config 0 has no interface number 0 [ 1566.637129][T26217] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1566.692807][T26217] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1566.702847][T26217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.711252][T26217] usb 2-1: Product: syz [ 1566.715789][T26217] usb 2-1: Manufacturer: syz [ 1566.720698][T26217] usb 2-1: SerialNumber: syz [ 1566.728546][T26217] usb 2-1: config 0 descriptor?? [ 1566.742745][T26217] smsc75xx v1.0.0 [ 1566.955425][ T1870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8746'. [ 1566.965963][ T1870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8746'. [ 1567.105105][ T1871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1567.140719][ T1871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1567.222444][ T1874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1567.250298][T26219] usbhid 3-1:0.0: can't add hid device: -71 [ 1567.267412][T26219] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1567.277336][ T1874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1567.353370][ T1871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1567.358519][T26219] usb 3-1: USB disconnect, device number 111 [ 1567.404637][ T1871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1567.468573][T26217] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1567.500197][T26217] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1567.541900][T26217] usb 2-1: USB disconnect, device number 105 [ 1567.905036][ T1894] netlink: 'syz.2.8756': attribute type 1 has an invalid length. [ 1568.048620][ T1900] input: syz0 as /devices/virtual/input/input219 [ 1568.059124][ T1898] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1568.111228][T26217] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1568.289471][ T1906] geneve2: entered promiscuous mode [ 1568.294902][ T1906] geneve2: entered allmulticast mode [ 1568.301288][T26217] usb 5-1: Using ep0 maxpacket: 32 [ 1568.333743][T26217] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1568.380008][T26217] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1568.407439][T26217] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1568.436031][T26217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1568.466357][T26217] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1568.487095][T26217] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1568.525061][T26217] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1568.557651][T26217] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.589030][T26217] usb 5-1: config 0 descriptor?? [ 1568.812815][T26217] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1569.028777][ C0] usblp0: nonzero read bulk status received: -71 [ 1569.039034][T31832] usb 5-1: USB disconnect, device number 11 [ 1569.262446][ T1892] netlink: 'syz.4.8755': attribute type 10 has an invalid length. [ 1569.323287][ T1892] veth0_vlan: left promiscuous mode [ 1569.378731][ T1892] veth0_vlan: entered promiscuous mode [ 1569.403765][ T1934] __nla_validate_parse: 1 callbacks suppressed [ 1569.403783][ T1934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8770'. [ 1569.422024][ T1892] team0: Device veth0_vlan failed to register rx_handler [ 1569.515211][ T1891] usblp0: removed [ 1569.796233][ T1951] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8773'. [ 1570.086632][ T1958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1570.147679][ T1958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1570.481408][T26217] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1570.642603][T26217] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1570.681800][T26217] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1570.776940][T26217] usb 2-1: config 220 has no interface number 2 [ 1570.796062][ T1968] netlink: 'syz.2.8782': attribute type 11 has an invalid length. [ 1570.837070][T26217] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1570.876558][T26217] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1570.938309][T26217] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1570.996634][T26217] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1571.047494][T26217] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1571.082873][T26217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.090946][T26217] usb 2-1: Product: syz [ 1571.096478][T26217] usb 2-1: Manufacturer: syz [ 1571.102025][T26217] usb 2-1: SerialNumber: syz [ 1571.466124][T26217] usb 2-1: selecting invalid altsetting 0 [ 1571.538847][T26217] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1571.608026][T13503] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1571.620884][T13503] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1571.630318][T13503] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1571.645483][T13503] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1571.653392][T13503] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1571.687563][T26217] uvcvideo 2-1:220.0: No valid video chain found. [ 1571.802246][T26217] usb 2-1: selecting invalid altsetting 0 [ 1571.856415][T26217] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1572.040388][T26217] usb 2-1: USB disconnect, device number 106 [ 1572.318972][ T1987] chnl_net:caif_netlink_parms(): no params data found [ 1572.811207][ T3096] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 1572.968306][ T3096] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1572.986949][ T3096] usb 2-1: not running at top speed; connect to a high speed hub [ 1573.007871][ T3096] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.021303][ T3096] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1573.034648][ T3096] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1573.051434][ T3096] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1573.061597][ T2012] netlink: 'syz.3.8796': attribute type 1 has an invalid length. [ 1573.069443][ T3096] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.077882][ T3096] usb 2-1: Product: syz [ 1573.085244][ T3096] usb 2-1: Manufacturer: syz [ 1573.090030][ T3096] usb 2-1: SerialNumber: syz [ 1573.195319][ T2011] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8797'. [ 1573.299746][ T1987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.307136][ T2021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1573.307672][ T2021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1573.322782][ T1987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.330711][ T1987] bridge_slave_0: entered allmulticast mode [ 1573.350041][ T1987] bridge_slave_0: entered promiscuous mode [ 1573.377375][ T3096] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1573.392952][ T3096] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1573.403886][ T1987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.421825][ T3096] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1573.422304][ T1987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.438781][ T1987] bridge_slave_1: entered allmulticast mode [ 1573.446944][ T1987] bridge_slave_1: entered promiscuous mode [ 1573.495728][ T3096] usb 2-1: USB disconnect, device number 107 [ 1573.540278][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 1573.540295][ T30] audit: type=1326 audit(1764483620.114:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2029 comm="syz.3.8803" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f352cf8f749 code=0x0 [ 1573.545944][T31203] udevd[31203]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1573.633332][ T1987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1573.648128][ T1987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1573.710251][ T1987] team0: Port device team_slave_0 added [ 1573.720393][ T1987] team0: Port device team_slave_1 added [ 1573.726489][T13503] Bluetooth: hci0: command tx timeout [ 1573.814131][ T1987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1573.822299][ T1987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1573.864787][ T1987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1573.882928][ T1987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1573.890430][ T1987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1573.917198][ T1987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1574.112241][ T1987] hsr_slave_0: entered promiscuous mode [ 1574.119047][ T1987] hsr_slave_1: entered promiscuous mode [ 1574.127246][ T1987] debugfs: 'hsr0' already exists in 'hsr' [ 1574.142420][ T1987] Cannot create hsr debugfs directory [ 1574.291545][T31825] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1574.503246][T31825] usb 3-1: Using ep0 maxpacket: 8 [ 1574.580545][T31825] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1574.759102][ T327] bridge_slave_0: left allmulticast mode [ 1574.772634][ T327] bridge_slave_0: left promiscuous mode [ 1574.779663][ T327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.928680][ T2054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8811'. [ 1575.180040][T31825] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1575.195044][ T327] dvmrp1 (unregistering): left allmulticast mode [ 1575.199403][T31825] usb 3-1: config 1 has no interface number 1 [ 1575.210338][T31825] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1575.276959][T31825] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1575.315408][T31825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.324043][T31825] usb 3-1: Product: syz [ 1575.328599][T31825] usb 3-1: Manufacturer: syz [ 1575.333525][T31825] usb 3-1: SerialNumber: syz [ 1575.752816][ T2062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1575.778090][ T2062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1575.806539][T13503] Bluetooth: hci0: command tx timeout [ 1575.842732][ T327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1575.853484][ T327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1575.863677][ T327] bond0 (unregistering): Released all slaves [ 1576.045644][ T327] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 1576.058823][ T327] bond1 (unregistering): Released all slaves [ 1576.347470][ T327] bond2 (unregistering): Released all slaves [ 1576.562774][ T327] bond3 (unregistering): (slave batadv2): Releasing active interface [ 1576.572480][ T327] bond3 (unregistering): Released all slaves [ 1576.729682][ T327] bond4 (unregistering): Released all slaves [ 1576.887351][ T327] tipc: Disabling bearer [ 1576.897128][ T327] tipc: Left network mode [ 1576.928069][ T2074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8817'. [ 1577.177216][ T2083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8820'. [ 1577.182424][ T2084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8819'. [ 1577.299272][ T2086] Cannot find add_set index 0 as target [ 1577.917818][T13503] Bluetooth: hci0: command tx timeout [ 1578.217753][ T1987] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1578.248038][ T1987] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1578.316013][ T1987] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1578.497609][ T1987] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1578.701294][ T327] hsr_slave_0: left promiscuous mode [ 1578.708846][ T327] hsr_slave_1: left promiscuous mode [ 1578.724555][ T327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1578.743568][ T327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1578.908278][ T327] pim6reg (unregistering): left allmulticast mode [ 1579.086899][ T2123] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1579.093427][ T2123] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1579.232494][ T2123] vhci_hcd vhci_hcd.0: Device attached [ 1579.421227][T26217] vhci_hcd: vhci_device speed not set [ 1579.491295][T26217] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 1579.961348][T31825] usb 3-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 1579.969949][T31825] usb 3-1: 2:1 : sample bitwidth 65 in over sample bytes 0 [ 1579.978714][T13503] Bluetooth: hci0: command tx timeout [ 1579.986327][T31825] usb 3-1: 2:1 : unsupported sample bitwidth 65 in 0 bytes [ 1580.032552][T31825] usb 3-1: USB disconnect, device number 112 [ 1580.076710][ T327] team0 (unregistering): Port device team_slave_1 removed [ 1580.139800][ T327] team0 (unregistering): Port device team_slave_0 removed [ 1580.848191][ T1987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1580.929362][ T1987] 8021q: adding VLAN 0 to HW filter on device team0 [ 1580.996657][T22053] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.003890][T22053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1581.038202][ T319] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.045451][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1581.293618][ T1987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1581.405492][ T327] IPVS: stop unused estimator thread 0... [ 1581.446351][ T1987] veth0_vlan: entered promiscuous mode [ 1581.484284][ T1987] veth1_vlan: entered promiscuous mode [ 1581.571710][ T1987] veth0_macvtap: entered promiscuous mode [ 1581.581703][T26219] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1581.611424][T31827] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1581.637374][ T1987] veth1_macvtap: entered promiscuous mode [ 1581.655829][ T1987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1581.669520][ T1987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1581.686599][ T319] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.697560][ T319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.718090][ T319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.727971][ T319] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.742194][T26219] usb 3-1: Using ep0 maxpacket: 32 [ 1581.750206][T26219] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1581.792400][ T327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.792794][T31827] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1581.815703][ T327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.847275][ T328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.856624][ T328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.903864][T26219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.960424][T31827] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1581.979978][T26219] usb 3-1: config 0 descriptor?? [ 1582.020177][T31827] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1582.050824][ T2124] vhci_hcd: connection reset by peer [ 1582.071317][T31827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1582.075436][ T327] vhci_hcd: stop threads [ 1582.095776][T31827] usb 2-1: SerialNumber: syz [ 1582.096196][ T327] vhci_hcd: release socket [ 1582.113545][ T327] vhci_hcd: disconnect device [ 1582.231703][T31828] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1582.239470][T26219] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1582.267374][T26219] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1582.281837][T26219] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1582.300605][T26219] usb 3-1: media controller created [ 1582.332075][T31827] usb 2-1: 0:2 : does not exist [ 1582.361407][T31827] usb 2-1: unit 5 not found! [ 1582.380057][T26219] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1582.381311][T31828] usb 5-1: Using ep0 maxpacket: 16 [ 1582.410553][T31828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1582.449358][T31828] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1582.479123][T31828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.514193][T31828] usb 5-1: config 0 descriptor?? [ 1582.890293][ T2199] tipc: Enabling of bearer rejected, already enabled [ 1582.943981][T31828] mcp2221 0003:04D8:00DD.003B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1582.967447][ T2202] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8848'. [ 1583.006466][ T2202] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1583.059194][ T2202] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1583.068818][ T2202] bond1: (slave batadv3): Enslaving as an active interface with an up link [ 1583.156606][ T2182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1583.187857][ T2182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1583.301135][T26219] stb0899_attach: Driver disabled by Kconfig [ 1583.307379][T26219] az6027: no front-end attached [ 1583.307379][T26219] [ 1583.323880][T26219] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1583.333393][T26219] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input220 [ 1583.366432][T26219] dvb-usb: schedule remote query interval to 400 msecs. [ 1583.379726][T26219] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1583.410856][ T2182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1583.424444][ T2182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1583.435264][ T2182] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1583.445052][ T2182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1583.523283][ T2217] input: syz1 as /devices/virtual/input/input221 [ 1583.633350][T26219] usb 3-1: USB disconnect, device number 113 [ 1583.645089][T31828] usb 5-1: USB disconnect, device number 12 [ 1583.763923][ T2225] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8855'. [ 1583.775573][ T2225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8855'. [ 1583.891964][T26219] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1584.266958][T31832] usb 2-1: USB disconnect, device number 108 [ 1584.367677][ T2237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1584.387006][ T2237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1584.563664][ T2241] binder: 2230:2241 ioctl c018620c 2000000002c0 returned -1 [ 1584.692576][T31832] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1584.748801][ T2251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1584.750661][ T2251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1584.751187][T26217] vhci_hcd: vhci_device speed not set [ 1584.764200][ T2251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1584.764504][ T2251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1585.057757][ T2258] netlink: 'syz.1.8867': attribute type 33 has an invalid length. [ 1585.057890][ T2258] tipc: Resetting bearer [ 1585.591107][ T30] audit: type=1326 audit(1764483632.144:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2269 comm="syz.3.8871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352cf8f749 code=0x7ffc0000 [ 1585.684342][ T2276] netlink: 'syz.3.8871': attribute type 13 has an invalid length. [ 1585.697010][ T2276] netlink: 'syz.3.8871': attribute type 17 has an invalid length. [ 1585.736980][ T30] audit: type=1326 audit(1764483632.144:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2269 comm="syz.3.8871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352cf8f749 code=0x7ffc0000 [ 1585.783878][ T2276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1585.799048][ T2276] 8021q: adding VLAN 0 to HW filter on device team0 [ 1585.808422][ T30] audit: type=1326 audit(1764483632.154:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2269 comm="syz.3.8871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f352cf8f749 code=0x7ffc0000 [ 1585.830772][ C1] vkms_vblank_simulate: vblank timer overrun [ 1585.844715][ T2276] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1585.865732][ T30] audit: type=1326 audit(1764483632.154:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2269 comm="syz.3.8871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352cf8f749 code=0x7ffc0000 [ 1585.891679][ T30] audit: type=1326 audit(1764483632.154:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2269 comm="syz.3.8871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352cf8f749 code=0x7ffc0000 [ 1585.913962][ C1] vkms_vblank_simulate: vblank timer overrun [ 1585.973373][ T30] audit: type=1326 audit(1764483632.154:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2269 comm="syz.3.8871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f352cf8f749 code=0x7ffc0000 [ 1585.995642][ C1] vkms_vblank_simulate: vblank timer overrun [ 1586.198488][ T30] audit: type=1326 audit(1764483632.774:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2288 comm="syz.4.8878" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79a658f749 code=0x0 [ 1586.310229][ T2293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8878'. [ 1586.380811][ T327] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1587.681525][T26219] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1587.841723][T26219] usb 3-1: device descriptor read/64, error -71 [ 1588.091260][T26219] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1588.101995][T26217] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1588.241326][T26219] usb 3-1: device descriptor read/64, error -71 [ 1588.284470][T26217] usb 5-1: Using ep0 maxpacket: 32 [ 1588.301351][T26217] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1588.321902][T26217] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1588.351138][T26217] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1588.369781][T26219] usb usb3-port1: attempt power cycle [ 1588.384706][T26217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1588.407733][T26217] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1588.441269][T26217] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1588.469873][T26217] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1588.490246][T26217] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.513603][T26217] usb 5-1: config 0 descriptor?? [ 1588.741283][T26219] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1588.762217][T26217] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1588.794237][T26219] usb 3-1: device descriptor read/8, error -71 [ 1588.985424][ C0] usblp0: nonzero read bulk status received: -71 [ 1588.992489][T31828] usb 5-1: USB disconnect, device number 13 [ 1589.002616][T23773] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1589.015955][T23773] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1589.026064][T23773] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1589.034682][T23773] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1589.045739][T23773] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1589.075630][T31832] usb 4-1: USB disconnect, device number 114 [ 1589.111232][T26219] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1589.141238][T26217] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1589.152366][T26219] usb 3-1: device descriptor read/8, error -71 [ 1589.178157][T22053] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.237800][ T2333] netlink: 'syz.4.8893': attribute type 10 has an invalid length. [ 1589.249269][ T2333] veth0_vlan: entered allmulticast mode [ 1589.265309][ T2333] veth0_vlan: left promiscuous mode [ 1589.273243][T26219] usb usb3-port1: unable to enumerate USB device [ 1589.275329][ T2333] veth0_vlan: entered promiscuous mode [ 1589.288616][ T2333] team0: Device veth0_vlan failed to register rx_handler [ 1589.311160][T26217] usb 2-1: Using ep0 maxpacket: 8 [ 1589.324211][T26217] usb 2-1: config 0 has no interfaces? [ 1589.332609][ T2332] usblp0: removed [ 1589.333486][T26217] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1589.354444][T26217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.362731][T26217] usb 2-1: Product: syz [ 1589.366917][T26217] usb 2-1: Manufacturer: syz [ 1589.372008][T26217] usb 2-1: SerialNumber: syz [ 1589.385039][T26217] usb 2-1: config 0 descriptor?? [ 1589.395425][T22053] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.462436][T22053] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.529535][T22053] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.550389][ T2339] chnl_net:caif_netlink_parms(): no params data found [ 1589.645576][ T2339] bridge0: port 1(bridge_slave_0) entered blocking state [ 1589.653243][ T2339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.656817][ T2349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1589.661554][ T2339] bridge_slave_0: entered allmulticast mode [ 1589.676011][ T2349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1589.678895][ T2339] bridge_slave_0: entered promiscuous mode [ 1589.693742][ T2339] bridge0: port 2(bridge_slave_1) entered blocking state [ 1589.708496][ T2339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.716361][ T2339] bridge_slave_1: entered allmulticast mode [ 1589.732520][ T2339] bridge_slave_1: entered promiscuous mode [ 1589.813780][ T2351] vlan2: entered promiscuous mode [ 1589.859702][ T2339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1589.897001][ T2339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1590.009741][ T2339] team0: Port device team_slave_0 added [ 1590.035678][ T2339] team0: Port device team_slave_1 added [ 1590.036858][ T2357] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8899'. [ 1590.079280][ T2357] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1590.246348][ T2364] input: syz1 as /devices/virtual/input/input222 [ 1590.876582][T22053] dvmrp1 (unregistering): left allmulticast mode [ 1590.902789][T22053] team0: Port device ipip0 removed [ 1591.082588][T23773] Bluetooth: hci4: command tx timeout [ 1591.279808][T22053] bond0 (unregistering): Released all slaves [ 1591.327117][ T2385] syz_tun: entered allmulticast mode [ 1591.344771][ T2385] syz_tun: left allmulticast mode [ 1591.357880][ T2339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1591.417966][ T2339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1591.502995][ T2339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1591.507589][ T2394] netlink: 'syz.6.8905': attribute type 1 has an invalid length. [ 1591.545128][ T2339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1591.552532][ T2339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1591.578480][ C1] vkms_vblank_simulate: vblank timer overrun [ 1591.615883][ T2339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1591.820418][ T2339] hsr_slave_0: entered promiscuous mode [ 1591.823177][ T2339] hsr_slave_1: entered promiscuous mode [ 1591.824013][ T2339] debugfs: 'hsr0' already exists in 'hsr' [ 1591.824032][ T2339] Cannot create hsr debugfs directory [ 1592.037239][T31827] usb 2-1: USB disconnect, device number 110 [ 1592.631161][T31827] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1592.861134][T31827] usb 2-1: Using ep0 maxpacket: 8 [ 1592.896108][T22053] hsr_slave_0: left promiscuous mode [ 1592.918140][T31827] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1592.929201][T22053] hsr_slave_1: left promiscuous mode [ 1592.960341][T31827] usb 2-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 108 [ 1593.073101][T31827] usb 2-1: config 12 interface 0 has no altsetting 0 [ 1593.110018][T22053] veth1_vlan: left promiscuous mode [ 1593.172367][T23773] Bluetooth: hci4: command tx timeout [ 1593.240049][T31827] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1593.303637][T31827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.349029][T31827] usb 2-1: Product: syz [ 1593.353726][T31827] usb 2-1: Manufacturer: syz [ 1593.376089][T31827] usb 2-1: SerialNumber: syz [ 1593.412865][ T2420] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1593.673706][T31827] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1593.683095][T31827] usb 2-1: selecting invalid altsetting 0 [ 1593.744921][T31827] usb 2-1: USB disconnect, device number 111 [ 1593.780778][T31456] udevd[31456]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1594.047095][T22053] pim6reg (unregistering): left allmulticast mode [ 1594.736537][ T2470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8922'. [ 1595.247754][T23773] Bluetooth: hci4: command tx timeout [ 1596.226170][ T2486] tipc: Enabling of bearer rejected, already enabled [ 1596.261376][T31832] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1596.465850][T31832] usb 5-1: Using ep0 maxpacket: 8 [ 1596.615105][T31832] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1596.693129][T31832] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1596.720757][T31832] usb 5-1: config 1 has no interface number 1 [ 1596.792235][T31832] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1596.854433][T31832] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1596.869621][T22053] IPVS: stop unused estimator thread 0... [ 1596.880489][T31832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.960402][T31832] usb 5-1: Product: syz [ 1596.975914][T31832] usb 5-1: Manufacturer: syz [ 1597.020156][T31832] usb 5-1: SerialNumber: syz [ 1597.303309][ T2339] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1597.333345][T23773] Bluetooth: hci4: command tx timeout [ 1597.386042][ T2339] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1597.396859][ T2339] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1597.408510][ T2339] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1597.753347][ T2479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1597.783191][ T2339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1597.822759][ T2479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1597.846853][ T2339] 8021q: adding VLAN 0 to HW filter on device team0 [ 1597.892348][T22053] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.899506][T22053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1597.914501][T22053] bridge0: port 2(bridge_slave_1) entered blocking state [ 1597.921633][T22053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1597.952040][ T2339] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1597.966328][ T2339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1598.029591][ T2339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1598.088635][ T2339] veth0_vlan: entered promiscuous mode [ 1598.111940][ T2339] veth1_vlan: entered promiscuous mode [ 1598.158230][ T2339] veth0_macvtap: entered promiscuous mode [ 1598.168558][ T2339] veth1_macvtap: entered promiscuous mode [ 1598.187277][ T2339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1598.208154][ T2339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1598.233668][T22053] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.243498][T22053] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.255628][T22053] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.267486][T22053] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.540292][ T326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1598.578773][ T2542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8935'. [ 1598.628339][ T326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1598.945727][ T327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1599.038967][ T327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1599.615926][T31832] usb 5-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 1599.615963][T31832] usb 5-1: 2:1 : sample bitwidth 65 in over sample bytes 0 [ 1599.615985][T31832] usb 5-1: 2:1 : unsupported sample bitwidth 65 in 0 bytes [ 1599.657872][T31832] usb 5-1: USB disconnect, device number 14 [ 1599.673231][ T3096] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1599.760130][T31203] udevd[31203]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1599.824810][ T3096] usb 4-1: Using ep0 maxpacket: 32 [ 1599.894757][ T3096] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1599.905363][ T3096] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1599.913348][ T2579] syzkaller0: entered promiscuous mode [ 1599.919424][ T2579] syzkaller0: entered allmulticast mode [ 1599.929019][ T3096] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1599.970215][ T3096] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1600.001973][ T3096] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1600.023013][ T2581] fuse: Bad value for 'group_id' [ 1600.027985][ T2581] fuse: Bad value for 'group_id' [ 1600.035834][ T3096] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1600.090139][ T3096] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1600.173151][ T2586] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1600.183783][ T3096] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.197562][ T2586] bond2 (unregistering): Released all slaves [ 1600.209138][ T3096] usb 4-1: config 0 descriptor?? [ 1600.453714][ T3096] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 115 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1600.663987][ C0] usblp0: nonzero read bulk status received: -71 [ 1600.672018][ T3096] usb 4-1: USB disconnect, device number 115 [ 1600.947364][ T2569] netlink: 'syz.3.8942': attribute type 10 has an invalid length. [ 1601.015391][ T2569] veth0_vlan: entered allmulticast mode [ 1601.131318][T26217] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1601.185397][ T2569] veth0_vlan: left promiscuous mode [ 1601.229661][ T2569] veth0_vlan: entered promiscuous mode [ 1601.273223][ T2569] team0: Device veth0_vlan failed to register rx_handler [ 1601.291669][T26217] usb 2-1: Using ep0 maxpacket: 32 [ 1601.300390][T26217] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1601.310745][T26217] usb 2-1: config 0 has no interface number 0 [ 1601.345872][ T2567] usblp0: removed [ 1601.354906][T26217] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 1601.364593][T26217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.372959][T26217] usb 2-1: Product: syz [ 1601.377267][T26217] usb 2-1: Manufacturer: syz [ 1601.382706][T26217] usb 2-1: SerialNumber: syz [ 1601.390881][T26217] usb 2-1: config 0 descriptor?? [ 1601.416909][T26217] hub 2-1:0.89: bad descriptor, ignoring hub [ 1601.437319][T26217] hub 2-1:0.89: probe with driver hub failed with error -5 [ 1601.455633][T26217] option 2-1:0.89: GSM modem (1-port) converter detected [ 1601.485794][T26217] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 1601.842099][T25498] usb 2-1: USB disconnect, device number 112 [ 1601.901193][T31832] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1601.981901][T25498] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 1602.019991][T25498] option 2-1:0.89: device disconnected [ 1602.124340][T31832] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1602.154112][T31832] usb 5-1: config 1 has an invalid descriptor of length 42, skipping remainder of the config [ 1602.194867][T31832] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1602.242514][T31832] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 7051, setting to 64 [ 1602.321949][T31832] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1602.391441][T31832] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1602.435194][T31832] usb 5-1: Product: syz [ 1602.480671][T31832] usb 5-1: Manufacturer: syz [ 1602.488675][ T2661] dvmrp1: entered allmulticast mode [ 1602.567500][T31832] cdc_wdm 5-1:1.0: skipping garbage [ 1602.606526][T31832] cdc_wdm 5-1:1.0: skipping garbage [ 1602.656661][T31832] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1602.787313][ T2666] [ 1602.789674][ T2666] ===================================================== [ 1602.796591][ T2666] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1602.804055][ T2666] syzkaller #0 Not tainted [ 1602.808544][ T2666] ----------------------------------------------------- [ 1602.815515][ T2666] syz.2.8957/2666 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1602.823161][ T2666] ffff8880782fa750 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1602.831865][ T2666] [ 1602.831865][ T2666] and this task is already holding: [ 1602.839238][ T2666] ffff88805f899468 (&tty->flow.lock){....}-{3:3}, at: start_tty+0x20/0x70 [ 1602.847767][ T2666] which would create a new lock dependency: [ 1602.853745][ T2666] (&tty->flow.lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1602.861507][ T2666] [ 1602.861507][ T2666] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1602.870948][ T2666] (kbd_event_lock){..-.}-{3:3} [ 1602.870971][ T2666] [ 1602.870971][ T2666] ... which became SOFTIRQ-irq-safe at: [ 1602.883494][ T2666] lock_acquire+0x120/0x360 [ 1602.888079][ T2666] _raw_spin_lock+0x2e/0x40 [ 1602.892665][ T2666] kbd_event+0xd2/0x3f70 [ 1602.896999][ T2666] input_handle_events_default+0xd4/0x1a0 [ 1602.902890][ T2666] input_pass_values+0x288/0x890 [ 1602.907925][ T2666] input_event_dispose+0x3e5/0x6b0 [ 1602.913248][ T2666] input_event+0x89/0xe0 [ 1602.917586][ T2666] hidinput_hid_event+0x145e/0x1dd0 [ 1602.922862][ T2666] hid_process_event+0x4be/0x620 [ 1602.927888][ T2666] hid_report_raw_event+0xe91/0x16d0 [ 1602.933246][ T2666] hid_input_report+0x43e/0x520 [ 1602.938166][ T2666] hid_irq_in+0x47e/0x6d0 [ 1602.942563][ T2666] __usb_hcd_giveback_urb+0x376/0x540 [ 1602.948009][ T2666] dummy_timer+0x85f/0x44c0 [ 1602.952685][ T2666] __hrtimer_run_queues+0x52c/0xc60 [ 1602.957951][ T2666] hrtimer_run_softirq+0x187/0x2b0 [ 1602.963217][ T2666] handle_softirqs+0x286/0x870 [ 1602.968053][ T2666] __irq_exit_rcu+0xca/0x1f0 [ 1602.972709][ T2666] irq_exit_rcu+0x9/0x30 [ 1602.977020][ T2666] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1602.982810][ T2666] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1602.988874][ T2666] lock_is_held_type+0x137/0x190 [ 1602.993883][ T2666] __schedule+0x290/0x4cc0 [ 1602.998368][ T2666] preempt_schedule_common+0x83/0xd0 [ 1603.003729][ T2666] preempt_schedule+0xae/0xc0 [ 1603.008483][ T2666] preempt_schedule_thunk+0x16/0x30 [ 1603.013759][ T2666] _raw_spin_unlock+0x3f/0x50 [ 1603.018510][ T2666] copy_pmd_range+0x7630/0x7f00 [ 1603.023441][ T2666] copy_page_range+0xc14/0x1270 [ 1603.028362][ T2666] dup_mmap+0xf4c/0x1b10 [ 1603.032673][ T2666] copy_mm+0x13c/0x4b0 [ 1603.036813][ T2666] copy_process+0x1706/0x3c00 [ 1603.041559][ T2666] kernel_clone+0x21e/0x840 [ 1603.046157][ T2666] __x64_sys_clone+0x18b/0x1e0 [ 1603.051003][ T2666] do_syscall_64+0xfa/0xfa0 [ 1603.055594][ T2666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.061558][ T2666] [ 1603.061558][ T2666] to a SOFTIRQ-irq-unsafe lock: [ 1603.068558][ T2666] (tasklist_lock){.+.+}-{3:3} [ 1603.068580][ T2666] [ 1603.068580][ T2666] ... which became SOFTIRQ-irq-unsafe at: [ 1603.081181][ T2666] ... [ 1603.081193][ T2666] lock_acquire+0x120/0x360 [ 1603.088332][ T2666] _raw_read_lock+0x36/0x50 [ 1603.092911][ T2666] __do_wait+0xde/0x740 [ 1603.097157][ T2666] do_wait+0x1f8/0x510 [ 1603.101295][ T2666] kernel_wait+0xab/0x170 [ 1603.105691][ T2666] call_usermodehelper_exec_work+0xbe/0x230 [ 1603.111668][ T2666] process_scheduled_works+0xae1/0x17b0 [ 1603.117280][ T2666] worker_thread+0x8a0/0xda0 [ 1603.121949][ T2666] kthread+0x711/0x8a0 [ 1603.126084][ T2666] ret_from_fork+0x4bc/0x870 [ 1603.130827][ T2666] ret_from_fork_asm+0x1a/0x30 [ 1603.135656][ T2666] [ 1603.135656][ T2666] other info that might help us debug this: [ 1603.135656][ T2666] [ 1603.145883][ T2666] Chain exists of: [ 1603.145883][ T2666] kbd_event_lock --> &tty->flow.lock --> tasklist_lock [ 1603.145883][ T2666] [ 1603.158653][ T2666] Possible interrupt unsafe locking scenario: [ 1603.158653][ T2666] [ 1603.166979][ T2666] CPU0 CPU1 [ 1603.172333][ T2666] ---- ---- [ 1603.177858][ T2666] lock(tasklist_lock); [ 1603.182087][ T2666] local_irq_disable(); [ 1603.188828][ T2666] lock(kbd_event_lock); [ 1603.195661][ T2666] lock(&tty->flow.lock); [ 1603.202580][ T2666] [ 1603.206020][ T2666] lock(kbd_event_lock); [ 1603.210608][ T2666] [ 1603.210608][ T2666] *** DEADLOCK *** [ 1603.210608][ T2666] [ 1603.218756][ T2666] 6 locks held by syz.2.8957/2666: [ 1603.223855][ T2666] #0: ffff88805f8990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1603.233681][ T2666] #1: ffff88805f8992e8 (&tty->termios_rwsem/1){++++}-{4:4}, at: tty_set_termios+0x138/0x17e0 [ 1603.243946][ T2666] #2: ffff88805f8990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 1603.253242][ T2666] #3: ffff88805f899468 (&tty->flow.lock){....}-{3:3}, at: start_tty+0x20/0x70 [ 1603.262188][ T2666] #4: ffff88805f8990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 1603.271487][ T2666] #5: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1603.280612][ T2666] [ 1603.280612][ T2666] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1603.291000][ T2666] -> (kbd_event_lock){..-.}-{3:3} { [ 1603.296293][ T2666] IN-SOFTIRQ-W at: [ 1603.300391][ T2666] lock_acquire+0x120/0x360 [ 1603.306879][ T2666] _raw_spin_lock+0x2e/0x40 [ 1603.313294][ T2666] kbd_event+0xd2/0x3f70 [ 1603.319417][ T2666] input_handle_events_default+0xd4/0x1a0 [ 1603.326956][ T2666] input_pass_values+0x288/0x890 [ 1603.333707][ T2666] input_event_dispose+0x3e5/0x6b0 [ 1603.340650][ T2666] input_event+0x89/0xe0 [ 1603.346711][ T2666] hidinput_hid_event+0x145e/0x1dd0 [ 1603.353739][ T2666] hid_process_event+0x4be/0x620 [ 1603.360500][ T2666] hid_report_raw_event+0xe91/0x16d0 [ 1603.367626][ T2666] hid_input_report+0x43e/0x520 [ 1603.374288][ T2666] hid_irq_in+0x47e/0x6d0 [ 1603.380428][ T2666] __usb_hcd_giveback_urb+0x376/0x540 [ 1603.387608][ T2666] dummy_timer+0x85f/0x44c0 [ 1603.393915][ T2666] __hrtimer_run_queues+0x52c/0xc60 [ 1603.400946][ T2666] hrtimer_run_softirq+0x187/0x2b0 [ 1603.407868][ T2666] handle_softirqs+0x286/0x870 [ 1603.414439][ T2666] __irq_exit_rcu+0xca/0x1f0 [ 1603.420830][ T2666] irq_exit_rcu+0x9/0x30 [ 1603.426875][ T2666] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1603.434339][ T2666] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1603.442131][ T2666] lock_is_held_type+0x137/0x190 [ 1603.448889][ T2666] __schedule+0x290/0x4cc0 [ 1603.455124][ T2666] preempt_schedule_common+0x83/0xd0 [ 1603.462222][ T2666] preempt_schedule+0xae/0xc0 [ 1603.468714][ T2666] preempt_schedule_thunk+0x16/0x30 [ 1603.475720][ T2666] _raw_spin_unlock+0x3f/0x50 [ 1603.482201][ T2666] copy_pmd_range+0x7630/0x7f00 [ 1603.488867][ T2666] copy_page_range+0xc14/0x1270 [ 1603.495536][ T2666] dup_mmap+0xf4c/0x1b10 [ 1603.501602][ T2666] copy_mm+0x13c/0x4b0 [ 1603.507481][ T2666] copy_process+0x1706/0x3c00 [ 1603.513962][ T2666] kernel_clone+0x21e/0x840 [ 1603.520272][ T2666] __x64_sys_clone+0x18b/0x1e0 [ 1603.526845][ T2666] do_syscall_64+0xfa/0xfa0 [ 1603.533155][ T2666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.540861][ T2666] INITIAL USE at: [ 1603.544821][ T2666] lock_acquire+0x120/0x360 [ 1603.551057][ T2666] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1603.557983][ T2666] vt_reset_unicode+0x2b/0x160 [ 1603.564490][ T2666] reset_vc+0x68/0x1b0 [ 1603.570290][ T2666] vc_init+0x70/0x4a0 [ 1603.575993][ T2666] con_init+0x385/0x9c0 [ 1603.581879][ T2666] console_init+0x10e/0x430 [ 1603.588108][ T2666] start_kernel+0x254/0x410 [ 1603.594346][ T2666] x86_64_start_reservations+0x24/0x30 [ 1603.601556][ T2666] x86_64_start_kernel+0x143/0x1c0 [ 1603.608397][ T2666] common_startup_64+0x13e/0x147 [ 1603.615059][ T2666] } [ 1603.617623][ T2666] ... key at: [] kbd_event_lock+0x18/0xa0 [ 1603.625506][ T2666] -> (&tty->flow.lock){....}-{3:3} { [ 1603.630869][ T2666] INITIAL USE at: [ 1603.634740][ T2666] lock_acquire+0x120/0x360 [ 1603.640782][ T2666] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1603.647527][ T2666] start_tty+0x20/0x70 [ 1603.653140][ T2666] n_tty_set_termios+0xa7c/0x1090 [ 1603.659705][ T2666] tty_set_termios+0xda4/0x17e0 [ 1603.666096][ T2666] set_termios+0x516/0x6c0 [ 1603.672061][ T2666] tty_mode_ioctl+0x47e/0x740 [ 1603.678286][ T2666] tty_ioctl+0x9c6/0xde0 [ 1603.684075][ T2666] __se_sys_ioctl+0xfc/0x170 [ 1603.690214][ T2666] do_syscall_64+0xfa/0xfa0 [ 1603.696280][ T2666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.703721][ T2666] } [ 1603.706200][ T2666] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 1603.714855][ T2666] ... acquired at: [ 1603.718636][ T2666] lock_acquire+0x120/0x360 [ 1603.723305][ T2666] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1603.728744][ T2666] stop_tty+0x2f/0x150 [ 1603.732965][ T2666] kbd_event+0x2b72/0x3f70 [ 1603.737536][ T2666] input_handle_events_default+0xd4/0x1a0 [ 1603.743412][ T2666] input_pass_values+0x288/0x890 [ 1603.748512][ T2666] input_event_dispose+0x330/0x6b0 [ 1603.753772][ T2666] input_inject_event+0x1dd/0x340 [ 1603.758943][ T2666] evdev_write+0x2fc/0x480 [ 1603.763515][ T2666] vfs_write+0x27e/0xb30 [ 1603.767914][ T2666] ksys_write+0x145/0x250 [ 1603.772399][ T2666] do_syscall_64+0xfa/0xfa0 [ 1603.777062][ T2666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.783115][ T2666] [ 1603.785418][ T2666] [ 1603.785418][ T2666] the dependencies between the lock to be acquired [ 1603.785424][ T2666] and SOFTIRQ-irq-unsafe lock: [ 1603.798996][ T2666] -> (tasklist_lock){.+.+}-{3:3} { [ 1603.804282][ T2666] HARDIRQ-ON-R at: [ 1603.808413][ T2666] lock_acquire+0x120/0x360 [ 1603.814891][ T2666] _raw_read_lock+0x36/0x50 [ 1603.821377][ T2666] __do_wait+0xde/0x740 [ 1603.827520][ T2666] do_wait+0x1f8/0x510 [ 1603.833574][ T2666] kernel_wait+0xab/0x170 [ 1603.839892][ T2666] call_usermodehelper_exec_work+0xbe/0x230 [ 1603.847784][ T2666] process_scheduled_works+0xae1/0x17b0 [ 1603.855400][ T2666] worker_thread+0x8a0/0xda0 [ 1603.861967][ T2666] kthread+0x711/0x8a0 [ 1603.868013][ T2666] ret_from_fork+0x4bc/0x870 [ 1603.874582][ T2666] ret_from_fork_asm+0x1a/0x30 [ 1603.881334][ T2666] SOFTIRQ-ON-R at: [ 1603.885469][ T2666] lock_acquire+0x120/0x360 [ 1603.891951][ T2666] _raw_read_lock+0x36/0x50 [ 1603.898530][ T2666] __do_wait+0xde/0x740 [ 1603.904671][ T2666] do_wait+0x1f8/0x510 [ 1603.910725][ T2666] kernel_wait+0xab/0x170 [ 1603.917036][ T2666] call_usermodehelper_exec_work+0xbe/0x230 [ 1603.924913][ T2666] process_scheduled_works+0xae1/0x17b0 [ 1603.932447][ T2666] worker_thread+0x8a0/0xda0 [ 1603.939022][ T2666] kthread+0x711/0x8a0 [ 1603.945079][ T2666] ret_from_fork+0x4bc/0x870 [ 1603.951649][ T2666] ret_from_fork_asm+0x1a/0x30 [ 1603.958403][ T2666] INITIAL USE at: [ 1603.962454][ T2666] lock_acquire+0x120/0x360 [ 1603.968855][ T2666] _raw_write_lock_irq+0xa2/0xf0 [ 1603.975697][ T2666] copy_process+0x224f/0x3c00 [ 1603.982301][ T2666] kernel_clone+0x21e/0x840 [ 1603.988703][ T2666] user_mode_thread+0xdd/0x140 [ 1603.995364][ T2666] rest_init+0x23/0x300 [ 1604.001503][ T2666] start_kernel+0x3ae/0x410 [ 1604.007903][ T2666] x86_64_start_reservations+0x24/0x30 [ 1604.015518][ T2666] x86_64_start_kernel+0x143/0x1c0 [ 1604.022616][ T2666] common_startup_64+0x13e/0x147 [ 1604.029448][ T2666] INITIAL READ USE at: [ 1604.033954][ T2666] lock_acquire+0x120/0x360 [ 1604.040873][ T2666] _raw_read_lock+0x36/0x50 [ 1604.047708][ T2666] __do_wait+0xde/0x740 [ 1604.054200][ T2666] do_wait+0x1f8/0x510 [ 1604.060593][ T2666] kernel_wait+0xab/0x170 [ 1604.067246][ T2666] call_usermodehelper_exec_work+0xbe/0x230 [ 1604.075475][ T2666] process_scheduled_works+0xae1/0x17b0 [ 1604.083348][ T2666] worker_thread+0x8a0/0xda0 [ 1604.090262][ T2666] kthread+0x711/0x8a0 [ 1604.096656][ T2666] ret_from_fork+0x4bc/0x870 [ 1604.103571][ T2666] ret_from_fork_asm+0x1a/0x30 [ 1604.110657][ T2666] } [ 1604.113307][ T2666] ... key at: [] tasklist_lock+0x18/0x40 [ 1604.121185][ T2666] ... acquired at: [ 1604.125138][ T2666] lock_acquire+0x120/0x360 [ 1604.129919][ T2666] _raw_read_lock+0x36/0x50 [ 1604.134590][ T2666] send_sigurg+0x12b/0x420 [ 1604.139175][ T2666] sk_send_sigurg+0x6c/0x2e0 [ 1604.143929][ T2666] queue_oob+0x420/0x4f0 [ 1604.148340][ T2666] unix_stream_sendmsg+0xc3f/0xdf0 [ 1604.153701][ T2666] __sock_sendmsg+0x21c/0x270 [ 1604.158547][ T2666] ____sys_sendmsg+0x52d/0x830 [ 1604.163469][ T2666] ___sys_sendmsg+0x21f/0x2a0 [ 1604.168320][ T2666] __sys_sendmmsg+0x227/0x430 [ 1604.173237][ T2666] __x64_sys_sendmmsg+0xa0/0xc0 [ 1604.178243][ T2666] do_syscall_64+0xfa/0xfa0 [ 1604.182904][ T2666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.188948][ T2666] [ 1604.191270][ T2666] -> (&f_owner->lock){....}-{3:3} { [ 1604.196541][ T2666] INITIAL USE at: [ 1604.200498][ T2666] lock_acquire+0x120/0x360 [ 1604.206722][ T2666] _raw_write_lock_irq+0xa2/0xf0 [ 1604.213382][ T2666] __f_setown+0x67/0x370 [ 1604.219347][ T2666] do_fcntl+0x15ff/0x1910 [ 1604.225424][ T2666] __se_sys_fcntl+0xc8/0x150 [ 1604.231743][ T2666] do_syscall_64+0xfa/0xfa0 [ 1604.237966][ T2666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.245590][ T2666] INITIAL READ USE at: [ 1604.249986][ T2666] lock_acquire+0x120/0x360 [ 1604.256640][ T2666] _raw_read_lock_irqsave+0xaf/0x100 [ 1604.264080][ T2666] send_sigio+0x38/0x370 [ 1604.270497][ T2666] kill_fasync+0x24d/0x4d0 [ 1604.277060][ T2666] sock_wake_async+0x137/0x160 [ 1604.284015][ T2666] sk_wake_async+0x184/0x280 [ 1604.290762][ T2666] unix_release_sock+0x78c/0xd50 [ 1604.298379][ T2666] unix_release+0x92/0xd0 [ 1604.304867][ T2666] sock_close+0xc3/0x240 [ 1604.311269][ T2666] __fput+0x44c/0xa70 [ 1604.317415][ T2666] task_work_run+0x1d4/0x260 [ 1604.324178][ T2666] exit_to_user_mode_loop+0xe9/0x130 [ 1604.331658][ T2666] do_syscall_64+0x2bd/0xfa0 [ 1604.338412][ T2666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.346476][ T2666] } [ 1604.349047][ T2666] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1604.357970][ T2666] ... acquired at: [ 1604.361845][ T2666] lock_acquire+0x120/0x360 [ 1604.366588][ T2666] _raw_read_lock_irqsave+0xaf/0x100 [ 1604.372027][ T2666] send_sigio+0x38/0x370 [ 1604.376422][ T2666] kill_fasync+0x24d/0x4d0 [ 1604.380988][ T2666] sock_wake_async+0x137/0x160 [ 1604.385996][ T2666] sk_wake_async+0x184/0x280 [ 1604.390747][ T2666] unix_release_sock+0x78c/0xd50 [ 1604.395840][ T2666] unix_release+0x92/0xd0 [ 1604.400321][ T2666] sock_close+0xc3/0x240 [ 1604.404717][ T2666] __fput+0x44c/0xa70 [ 1604.408853][ T2666] task_work_run+0x1d4/0x260 [ 1604.413598][ T2666] exit_to_user_mode_loop+0xe9/0x130 [ 1604.419033][ T2666] do_syscall_64+0x2bd/0xfa0 [ 1604.423776][ T2666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.429837][ T2666] [ 1604.432163][ T2666] -> (&new->fa_lock){....}-{3:3} { [ 1604.437265][ T2666] INITIAL USE at: [ 1604.441142][ T2666] lock_acquire+0x120/0x360 [ 1604.447203][ T2666] _raw_write_lock_irq+0xa2/0xf0 [ 1604.453696][ T2666] fasync_remove_entry+0xf1/0x1c0 [ 1604.460277][ T2666] sock_fasync+0x85/0xf0 [ 1604.466067][ T2666] __fput+0x8a2/0xa70 [ 1604.471617][ T2666] task_work_run+0x1d4/0x260 [ 1604.477761][ T2666] do_exit+0x6b5/0x2300 [ 1604.483468][ T2666] do_group_exit+0x21c/0x2d0 [ 1604.489609][ T2666] get_signal+0x1285/0x1340 [ 1604.495671][ T2666] arch_do_signal_or_restart+0xa0/0x790 [ 1604.502768][ T2666] exit_to_user_mode_loop+0x72/0x130 [ 1604.509597][ T2666] do_syscall_64+0x2bd/0xfa0 [ 1604.515733][ T2666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.523169][ T2666] INITIAL READ USE at: [ 1604.527479][ T2666] lock_acquire+0x120/0x360 [ 1604.533957][ T2666] _raw_read_lock_irqsave+0xaf/0x100 [ 1604.541236][ T2666] kill_fasync+0x199/0x4d0 [ 1604.547654][ T2666] sock_wake_async+0x137/0x160 [ 1604.554399][ T2666] sk_wake_async+0x184/0x280 [ 1604.560971][ T2666] unix_release_sock+0x78c/0xd50 [ 1604.567892][ T2666] unix_release+0x92/0xd0 [ 1604.574213][ T2666] sock_close+0xc3/0x240 [ 1604.580442][ T2666] __fput+0x44c/0xa70 [ 1604.586406][ T2666] task_work_run+0x1d4/0x260 [ 1604.592996][ T2666] exit_to_user_mode_loop+0xe9/0x130 [ 1604.600271][ T2666] do_syscall_64+0x2bd/0xfa0 [ 1604.606838][ T2666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.614702][ T2666] } [ 1604.617179][ T2666] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1604.625835][ T2666] ... acquired at: [ 1604.629613][ T2666] lock_acquire+0x120/0x360 [ 1604.634271][ T2666] _raw_read_lock_irqsave+0xaf/0x100 [ 1604.639720][ T2666] kill_fasync+0x199/0x4d0 [ 1604.644303][ T2666] __start_tty+0x18c/0x220 [ 1604.648878][ T2666] start_tty+0x2b/0x70 [ 1604.653100][ T2666] n_tty_set_termios+0xa7c/0x1090 [ 1604.658366][ T2666] tty_set_termios+0xda4/0x17e0 [ 1604.663371][ T2666] set_termios+0x516/0x6c0 [ 1604.667944][ T2666] tty_mode_ioctl+0x47e/0x740 [ 1604.672777][ T2666] tty_ioctl+0x9c6/0xde0 [ 1604.677172][ T2666] __se_sys_ioctl+0xfc/0x170 [ 1604.681916][ T2666] do_syscall_64+0xfa/0xfa0 [ 1604.686659][ T2666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.692703][ T2666] [ 1604.695004][ T2666] [ 1604.695004][ T2666] stack backtrace: [ 1604.700869][ T2666] CPU: 1 UID: 0 PID: 2666 Comm: syz.2.8957 Not tainted syzkaller #0 PREEMPT(full) [ 1604.700882][ T2666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1604.700889][ T2666] Call Trace: [ 1604.700894][ T2666] [ 1604.700899][ T2666] dump_stack_lvl+0x189/0x250 [ 1604.700916][ T2666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1604.700929][ T2666] ? __pfx__printk+0x10/0x10 [ 1604.700941][ T2666] validate_chain+0x1f05/0x2140 [ 1604.700957][ T2666] __lock_acquire+0xab9/0xd20 [ 1604.700968][ T2666] ? kill_fasync+0x199/0x4d0 [ 1604.700980][ T2666] lock_acquire+0x120/0x360 [ 1604.700989][ T2666] ? kill_fasync+0x199/0x4d0 [ 1604.701002][ T2666] _raw_read_lock_irqsave+0xaf/0x100 [ 1604.701017][ T2666] ? kill_fasync+0x199/0x4d0 [ 1604.701027][ T2666] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1604.701048][ T2666] kill_fasync+0x199/0x4d0 [ 1604.701065][ T2666] ? kill_fasync+0x53/0x4d0 [ 1604.701084][ T2666] ? __pfx_n_tty_write_wakeup+0x10/0x10 [ 1604.701098][ T2666] __start_tty+0x18c/0x220 [ 1604.701111][ T2666] start_tty+0x2b/0x70 [ 1604.701123][ T2666] n_tty_set_termios+0xa7c/0x1090 [ 1604.701135][ T2666] ? __pfx_n_tty_set_termios+0x10/0x10 [ 1604.701145][ T2666] tty_set_termios+0xda4/0x17e0 [ 1604.701159][ T2666] ? __pfx_tty_set_termios+0x10/0x10 [ 1604.701173][ T2666] set_termios+0x516/0x6c0 [ 1604.701186][ T2666] ? __pfx_set_termios+0x10/0x10 [ 1604.701198][ T2666] ? tty_ldisc_ref_wait+0x25/0x70 [ 1604.701220][ T2666] tty_mode_ioctl+0x47e/0x740 [ 1604.701232][ T2666] ? __pfx_tty_mode_ioctl+0x10/0x10 [ 1604.701243][ T2666] ? tty_ldisc_ref_wait+0x25/0x70 [ 1604.701256][ T2666] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1604.701270][ T2666] ? n_tty_ioctl_helper+0x8e/0x340 [ 1604.701283][ T2666] ? __pfx_n_tty_ioctl+0x10/0x10 [ 1604.701292][ T2666] tty_ioctl+0x9c6/0xde0 [ 1604.701306][ T2666] ? __pfx_tty_ioctl+0x10/0x10 [ 1604.701319][ T2666] __se_sys_ioctl+0xfc/0x170 [ 1604.701332][ T2666] do_syscall_64+0xfa/0xfa0 [ 1604.701347][ T2666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.701356][ T2666] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1604.701367][ T2666] ? clear_bhb_loop+0x60/0xb0 [ 1604.701377][ T2666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.701387][ T2666] RIP: 0033:0x7fa2cbd8f749 [ 1604.701399][ T2666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1604.701409][ T2666] RSP: 002b:00007fa2cccbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1604.701421][ T2666] RAX: ffffffffffffffda RBX: 00007fa2cbfe6090 RCX: 00007fa2cbd8f749 [ 1604.701429][ T2666] RDX: 0000200000000140 RSI: 0000000000005402 RDI: 0000000000000004 [ 1604.701436][ T2666] RBP: 00007fa2cbe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1604.701443][ T2666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1604.701449][ T2666] R13: 00007fa2cbfe6128 R14: 00007fa2cbfe6090 R15: 00007fa2cc10fa28 [ 1604.701460][ T2666] [ 1605.271951][T31827] usb 5-1: USB disconnect, device number 15 [ 1607.492773][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.499113][ T1301] ieee802154 phy1 wpan1: encryption failed: -22