last executing test programs: 4m6.500584122s ago: executing program 0 (id=1392): r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x23, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff}, 0x80) r5 = add_key$user(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000340)="eee8d8791d702dd9d30672e3cb2d1630e7c2937d377dd0b4083f41f08494cdb4ac47ca08a341b98de19d1c8bf89a2e7a0abb5a5af41f3322ba019a1af1cef76739ec6ea379e6c43795c997f7f001341531cbb81ef2ad3ea89bb7c8446855af6fdea8ea5ba6e63e7aa4f473ab", 0x6c, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffa, 0x3) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xdc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$SEM_STAT_ANY(0x0, 0x3, 0x14, 0x0) close(r7) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, 0x0, 0x40488cc) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x11, 0x803, 'nq\x00', 0x1, 0x0, 0x40}, 0x2c) r9 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x33, @private=0xa010101, 0x4e21, 0x3, 'dh\x00', 0x2a, 0x81, 0x1b}, {@multicast1, 0x4e23, 0x10000, 0x1cb, 0x12d60, 0x12d5c}}, 0x44) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4m3.048375443s ago: executing program 0 (id=1403): socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000003c0)=0x560, 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000020c0)=ANY=[@ANYBLOB="1201010200000010f3044d0740000102030109022d"], 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000002100)=ANY=[], &(0x7f0000002440)={0xa, &(0x7f0000002240)={0xa, 0x6, 0x201, 0x6, 0x1, 0x2, 0x10, 0xd}, 0x5, &(0x7f0000002280)={0x5, 0xf, 0x5}, 0x2, [{0x0, 0x0}, {0xb, &(0x7f0000002400)=@string={0xb, 0x3, "c422d81f7246c032ff"}}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r4, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x48000) r6 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r6, &(0x7f0000000100)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r8, 0x1, 0x0, 0x0, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "dfa5ef", 0x8, 0x2f, 0x0, @empty, @mcast2, {[], {0x0, 0x6558, 0x8}}}}}}, 0x0) r10 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r10, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r10, &(0x7f00000010c0)=""/4096, 0x1000) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x44) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) 3m59.444009592s ago: executing program 0 (id=1414): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) inotify_init() write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003d0000000e0001006e6574021d48ef696d0000000f0002006e657464657673696d300000c88882003c6c325f64726f7073000000000500870000000000"], 0x4c}}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000003bc0)={'\x00', 0xbe4f, 0x0, 0x7, 0x9, 0xed8}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x0, 0x0, 0x201}, 0x48) (async) sendmsg$nl_route(r0, 0x0, 0x24040040) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000070a010300000000000000000a00400109"], 0x2c}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 3m57.666308501s ago: executing program 0 (id=1420): mkdir(0x0, 0x180) (async) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x2) pread64(0xffffffffffffffff, 0x0, 0x0, 0x40009) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="00800500000b03000700479400340064000005069078856b9226ac14141f0707baac141421000000000000000000000000000000000100004e2200004e23"], 0x3e) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) (async) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (async) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x2f) (async) sendmmsg$unix(r7, &(0x7f00000049c0)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000200)="399655875fe24b48587d3e21fb5ac11cb9bcc8c4c4749caeaff9dc535ed0bf6a5eb51ead07cbc9fd394af7763d368d3b84e3695c0d906e9ad2139f244f40a4578667a54c0a18931d4222588687aaa8b8bf812d553a94a9250bbfe74a33e2ba6a853334917db51e341d828c803c5209ec84413c76d90852d81c28c074dded0dec30ab6e2761eaa8214c1e927d9f22fed876c7b59737598eafb191b156262e94b4fdd90a3c168985651513aed3a5a8c225b47a2e5a7c9880b5", 0xb8}, {&(0x7f0000002000)="b39cec5dc9e083374f8a06ed961ae1afe4d7a1b0132c14140475f40172c1b410fb0147c6289e86ec3a71958ab59fb854f63adb40ec309fa7e7f8eb2a25c6101889cd9d337d2709c36e685861d8e053096f59e15db88b1a222f7ceff53e350273e0448c4954e4e4b6afd5f4448bd38cc92b6d284dd308cfaeb6ebadf1a5b8235dd40b0818ba54a577ae71cd1a383df601f30e9b146e7bda91d0db43e63633193a8a92e21ab094308ce49f4b7af47e2e7bdc607bd157c52fac55a96d909dd7efac16924780acbcad92282410c64735fa71d01a3788e32ad5fb0662dc6f69f2b661bd40000000000000", 0x79}, {&(0x7f0000000480)="6b4bf542ff8b855b6c14ac7294f85e3e23b620ec56062c731e7bd11d2a211dcf418e17567243b697cb9b74de", 0x2c}, {&(0x7f0000000580)="469ac84318fe66dbec1fc828c6bf4ce677baccffa108f8d0cbe9be9f944e59c9fa81b3e3542a27f38e42bf32ce11e23448340175fd59a2a6e16c922d02fe4855818d858b45103bea68f2d8c4bb03e8479c9c4441c56b32c0e4e9b6048c0664d264412c193a6c5b6aa32be1c7311639208372b7730a6321705776d2d6d95c73d68e70f4f459b05f649edb70988938602dce6a3fcf35a86f96b05014171ec13189a18b54338ba260044df8d5f0f5b60e4832fe0a4b75f1d861eee976a33981181b3b1e1f41b405dc182eb2e784702339b4972c1d8bebe83764e8c48f13ea2bfced698f", 0xe2}, {&(0x7f00000006c0)="d71eb1a637d32848c8d8d170878384cab5c701e4acb5d0597d0d6c6528becc3952cc04d250886338a2c59a90f694a49776ce25464ad5e7d6cd8a16e3b005c476df3f860b50cd27fba2dec764cd955208a46acc4b14a9657ed82a75528b565afc85034b5ea1edc0833c92f27a8d4c6cd579f3f655ed250d5539b9077bba1ed0c201bd3cad692af37b650fb7ab806aed8e17596856d3d74fee9301e241cf9049f1aa852048cd3d876d10b502854002a54a7fdff4189bb57ad59fc2e593e47deea3db5132bc65ca42719b59b13ff3bbcee6288ebecd2e7b0d3f7fbdfcdf4ddfba304c9289741bfe8ba8af76198efcd32f3cb6", 0xf1}, {&(0x7f00000004c0)="cc39d4bfe28f9c8c717f9820769dd61c3cbac9ee2b182c8d107644f61cfce5c2bec1a1c67b4600da33f6ebdd2b8ea855ee1b0eb2b635998788573bbb2e91010745", 0x41}], 0x6, &(0x7f0000000840)=[@rights={{0x6c, 0x1, 0x1, [r7, r0, r5, r2, r5, 0xffffffffffffffff, r2]}}], 0x30, 0x8800}}, {{&(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000000a00)="15cb11811fd88d43d1646a3b55e0161d16ebcca21f30c248b9c0d8bbd189256b08bf41d42f09385f64be17b60be8aa1606a560d0c8491643458ea39450678cdbfb4085b56637900bcb47b6866a47e6f15f707ebde75e81d8254359d59b351c736a5649d66dbef36b0df63a429231eaaef5ad24799f406e96c1e91e52bde9ff47f1d7e71b86058982f12ce09c1beb7fb165c20c1f105e07cc41b541900c4e263053d98b1fb4b9b8e14302e657204ade97afb657d4c479fee57f6bddb58d7d92cc925590cad171b7a7c90c419847bfb4eec9a1f129368ed69cd29152d03fea654122606f0bc4bb47ce3a971fe2b30ad2c648450894c570a46e9f", 0xf9}, {&(0x7f0000000940)="10b58aa09740449d0c5b2275acdcff99440dea9f5c4e6ed61cb0cf21e768db39619b2aec04ecb957b803e0c70c2f9f1842dddaf3930462209b93d7cdb16d63828257fc547b847e8a461ad46d9e4113a6dfaf087a9c7e7d18a7e1c4dc77a1c1aa7dbf350cfeb5aa37c56218a0a9e8441711", 0x71}, {&(0x7f0000000b00)="66e5bc588e193f5d599c0e94aae905c1fde441255be110fee0b294a37206b63dcf5fe89d1e0b458b283cacbf903386342c3a62ce04a44284bae49092c2c9b3f172c574e4d1f4ad", 0x47}, {&(0x7f0000000b80)="2a7515ee7859a5ee3515d0a3c6dda0afb86f3f029990573a0406e4606d8ad706c28e3b888bedc2898380", 0x2a}, {&(0x7f0000000bc0)}, {&(0x7f0000000c00)="07f0a65c27200b118b873852cbbe1330b31cc775c993670ec14e94a0a49b5a7ce3c51a65a3a6af4af67a3694e479b1670a919b4b531b6c4dd065809bf7758b8144ddda13aaa12f14c40b0f3933860fd03103b335fed7334ff8623e87aec44f5b7c33606e1ee31b0b247484fcfa771b6b814f41f6a81d46ae009cf034249641e2dd168a93dd4cf8cb57ca6887aad26082a416a137b5a706a8b9eb62c678a31c70521a7c55ff0b675eb4096f7225558d8346e40bffe2b17d55144fd4ae1711d3dec317077725e6a5abf8492d867c68c814ba2cc8de3c1e48bc9be2a3c45fbb6aea6cbda6ff9c6d07c968d5553e3a88c7be017559", 0xf3}, {&(0x7f0000000d00)="683f568a0b6de25fb7b7a2dd79ba39f1afcfa894dfcd8f410b7683133fcd8c7afa96304041f0340fc0fa87d366a50d7849bfe286c89386230638327043ac3136fb3f15c8ebed3cad85f2ff51504f3a1dbc5e7706f45637ca06de5183c84055cd019e2089c656086d1d2eb3e40e85fc461c3be3bdd3e3f64d7c86cd8de8eb0eb62360a831cfa672a6541b04", 0x8b}, {&(0x7f0000000dc0)="96056bb5841c4cc0560cfe1d1b3eb1b57fe239b12310cd484eb701009ae6f47b2a48ab68c8557e39942a107f", 0x2c}, {&(0x7f0000000e00)="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", 0x1000}], 0x9, &(0x7f0000002100)=[@cred={{0x1c}}], 0x20, 0x3cc8519d9f5ca04b}}, {{&(0x7f0000002140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004580)=[{&(0x7f00000021c0)="79e9bb8b992dcdbd0a32655df18cedee", 0x10}, {&(0x7f0000002200)="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", 0x1000}, {&(0x7f0000003200)="3d9783a12ad180e0ab7851424ee395640ac5f96ddafea7cebe5c967b272640444816379ba1bb991cda26d9e73661f8d1131a6628d06b2eba9b8d277c84698dd516fcd95bd51d23e6fb644427a8bb1d581fa8ebeb8170ddad8e7e5c572da0c95aefcb04752802d1d79174cb81645495326786c41fb1cc66b12df71c15d2a04fe38224e989415c44", 0x87}, {&(0x7f00000032c0)="b37f4a651a94a6290aaf7aedc716bf23af9f1eb506a32172e1478d33f27fa3201c8d2820c4747a52db9a10", 0x2b}, {&(0x7f0000003300)="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", 0x1000}, {&(0x7f0000001ec0)="77817372c98ce8d0da400e15882fd53aea3a4bcadc03b06785e90d601f8ce28e39bc85412a27a4542076947b88c86ddd0dfd6cc8a03664cc87936ca2ffe89ae6569cee76087dcc96417df202ce1bcf04000020114dce0000", 0x45}, {&(0x7f0000004380)="a4746ac1e291e29b6a4d948d5b930057c6774659ae4a4dd3d3b565573dae9bae0091265821cc82a043a8cb3adc506ac10f54d6ca286e25e08fc9ccc420fbe63c2682dca3320996985e4a5961712d51ac6ab5353459c9ebfd84798038347dc91e64a7dcb709fdb53569d3858e759b1e7681086d026a6c21d4e7bdc2a4944040e82950cec587eb8b9410cbdf1275455947267e002855027f8511f96bb0bc187d5f8ebe2e023031b78a30c9fc9abb1ac79d0fe01474e421538e04a154c25bcef0d9aa2238cf7d998b4ea16c479f986d4aa22be34f31762cd475b2a4074629eca4bfca101b5d667bcad9949085df5ee8d38d0d8f2997deddf95170", 0xf9}, {&(0x7f0000004480)="4bf98fb8fb7717fb21d6e268e11838eb41a4f940162e52963aa337048a3322b4a352aa2edf50aa4e4a2b52a4713d7db71d0b599f7b1f339d23fed72e3259c44cffa10e08092713a86fe620e88f366dbb9f42e0cb6b1ad5e166bcc43261ef241966030f40a8eb0186edeb3f0b5a97e86323c6444cfabe8a0af1836e8c52bdbe0c6f4eb19298e7454715b113da76d34318978864c4db8718ca3847992ba888f640d931a3f4ce378ddcb35bceb7172f022c89d57b447157b09dd178ecb9570ef7e34b2dd32b9974c51d91b53e0ec55a9061f2e233c613b1175130ebf00ff9a6d7e8c7e85ab2cbe6ddcbe2c03d41e5a7bce8da0108c260ef74", 0xf7}], 0x8, &(0x7f0000001f40)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r5, @ANYRES8=r3, @ANYRESDEC=r4, @ANYRES32=r0, @ANYRES32, @ANYBLOB="7f687047e08fcd41f3597c4e91cf1715d9edd7ddaeacba2ad2a4c67ac4a37bac26b66d9b013748d752a899361be15017661d73fbba90c3acdb680a165a6efd"], 0x50, 0x4004}}, {{0x0, 0x0, &(0x7f0000004940)=[{&(0x7f0000004700)="4eba39164610ee3a0d5eb8f469c0fee6706e6ab481519941cab4055141357d63c12b4bb09f0f48edcd7a79c61e752dec05c27de7eb084319ffee32909543cfc4e6d3745e24cf94e50efa3899c68c1fa9e82bde7a7e353cfa99be795f3093f91f2f5bccf92dcbcd0e6efddff1f88bebafb4bcaa9e8da481a5691078297452c7b012df7633e1a51dcb1008f9016e7c240cd5a77f00e08cae299144775575fb51285f344bd00b929ce080033553eaf96e313fa4818b7e4ef8a774ed62b0faf7b3f0b2d3ddbba1349b3d8b4a777562ad74d633", 0xd1}, {&(0x7f0000004800)="ff1709db1fa8069424e0e2f627706b574fbf06d3d081dcbbf974c56d235e54a05e67d55ce0afb15ea60e423bf002e166cd99ffc512ef669d2f872f6a206848db6cf5cfa3fa0ee48a80036fb191024977bc902a0e87ce1915246581f17ebd0bee0cb39a14181cb82dd830e29ff1e8df14b2bdd1c81c042dbc95a95d6b665755f0490ecaf3f0a4cd5ae26aa7f8b2bf7968f781e12663b9d424f19952208b7159ab4c67a66a304f5ebec46992092a13e94e17dac32b46d5322fdf0c4abbc52dc86cda06bba1", 0xc4}, {&(0x7f0000004900)="8828f37d3051460b9446eccf9e1cd2dcc39b7a3c8e1e29fff603a68f558a13d2d47aa70e5614ae0ec67d9e3014fe0371", 0x30}], 0x3, &(0x7f0000004980)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}], 0x38, 0x4000}}], 0x4, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x19c5498e, 0x103902) (async) r8 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r8, 0x7a98, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) connect$inet(r11, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private=0xa010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r11, &(0x7f0000000140), 0x56e, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000340)={0x6}) (async) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) 3m56.620584735s ago: executing program 0 (id=1425): socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000003c0)=0x560, 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000020c0)=ANY=[@ANYBLOB="1201010200000010f3044d0740000102030109022d"], 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000002100)=ANY=[], &(0x7f0000002440)={0xa, &(0x7f0000002240)={0xa, 0x6, 0x201, 0x6, 0x1, 0x2, 0x10, 0xd}, 0x5, &(0x7f0000002280)={0x5, 0xf, 0x5}, 0x2, [{0x0, 0x0}, {0xb, &(0x7f0000002400)=@string={0xb, 0x3, "c422d81f7246c032ff"}}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r4, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x48000) r6 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r6, &(0x7f0000000100)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, r8, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "dfa5ef", 0x8, 0x2f, 0x0, @empty, @mcast2, {[], {0x0, 0x6558, 0x8}}}}}}, 0x0) r10 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r10, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r10, &(0x7f00000010c0)=""/4096, 0x1000) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x44) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) 3m53.428001439s ago: executing program 0 (id=1435): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd2c, 0xfffffffd, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @multicast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e21, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f00000001c0)={0x1, 0x5000, 0x2b, 0x1, 0x6}) (async) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000003700)={'ip6gre0\x00', &(0x7f0000003680)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x4, 0x2, 0x11, @mcast1, @mcast1, 0x7, 0x8007, 0x4, 0x2}}) (async) syz_usb_disconnect(r7) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) (async) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000180), 0x180001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x840, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x810, 0x2, [@TCA_ROUTE4_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0xffffffff, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x169, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x4, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x3, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x2, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x0, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x0, 0x0, 0x100, 0x100, 0x205f800, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb3, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0xb, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x401, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x7, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x8, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0xfffffffd, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8004, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0x9, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x9, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x6, 0x80000000, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x3, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000800) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1d8, 0x178, 0x178, 0x1d8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa3851200a44a3d28da04828d1768c081f126a6bc527"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238) syz_usb_ep_write(r7, 0x81, 0xfffffffffffffdca, &(0x7f0000000080)="c0") (async) readv(r9, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/99, 0x63}, {0x0}], 0x2) 3m38.201699056s ago: executing program 32 (id=1435): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd2c, 0xfffffffd, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @multicast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e21, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f00000001c0)={0x1, 0x5000, 0x2b, 0x1, 0x6}) (async) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000003700)={'ip6gre0\x00', &(0x7f0000003680)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x4, 0x2, 0x11, @mcast1, @mcast1, 0x7, 0x8007, 0x4, 0x2}}) (async) syz_usb_disconnect(r7) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) (async) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000180), 0x180001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x840, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x810, 0x2, [@TCA_ROUTE4_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0xffffffff, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x169, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x4, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x3, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x2, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x0, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x0, 0x0, 0x100, 0x100, 0x205f800, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb3, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0xb, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x401, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x7, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x8, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0xfffffffd, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8004, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0x9, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x9, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x6, 0x80000000, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x3, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000800) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1d8, 0x178, 0x178, 0x1d8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa3851200a44a3d28da04828d1768c081f126a6bc527"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238) syz_usb_ep_write(r7, 0x81, 0xfffffffffffffdca, &(0x7f0000000080)="c0") (async) readv(r9, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/99, 0x63}, {0x0}], 0x2) 2m21.264552191s ago: executing program 2 (id=1829): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) open(0x0, 0x400141042, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000007f000000f00e000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)="b9", &(0x7f0000000ec0)="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", 0x402, r2}, 0x38) 2m19.534806307s ago: executing program 2 (id=1835): r0 = fsopen(&(0x7f00000000c0)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async) r1 = socket$igmp6(0xa, 0x3, 0x3a) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={r2, 0x1, 0xa00}) (async) inotify_init() (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) epoll_create1(0x0) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000080)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @local}, 0x2c, {0x2, 0x4e21, @empty}, 'gre0\x00'}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$rxrpc(0x21, 0x2, 0x2) (async) r7 = syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x960400, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xa00}}, {@max_read={'max_read', 0x3d, 0x9}}, {@max_read={'max_read', 0x3d, 0x40}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x4}}, {@blksize={'blksize', 0x3d, 0x1200}}, {@blksize={'blksize', 0x3d, 0x1400}}, {@default_permissions}, {@default_permissions}, {@allow_other}], [{@fowner_eq}, {@smackfsfloor={'smackfsfloor', 0x3d, '\','}}, {@dont_hash}]}}, 0x1, 0x0, &(0x7f0000000280)="36f07f6ac64a870e70141c4722240ed2241b21e71952ab300866f322dbec054e65f2c1a7f104c9a02fee215c41241d287cf8ed4ffd55c3bdf11aae8022769aea65e4755c8ad6fd770b69281a44d8a702a84b8299c2fc02c9c4c09dcc24f1032578d1c9a1be0f5ebe730065563f8aac5bd369216beb5d869d22901bc4e016b2a5bb250ecb3d1feb277ad5e9a8d49b68e7c86c860b8abfeb1cb1ea45c5f1137f253a29659083b9c824") mkdirat(r7, &(0x7f0000000380)='./file0\x00', 0x100) (async) bind$rxrpc(r6, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r6, &(0x7f0000000100)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x24) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000200)={{0xa, 0x0, 0x101, @empty, 0x18000}, {0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x3}, 0x4}, 0x0, {[0x6, 0x200, 0x1, 0xcd7, 0x0, 0xffffffff, 0x5de052e6, 0x200000]}}, 0x5c) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x8, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_MAP={0x24, 0xe, {0x7fff, 0xffffffffffffffff, 0x7, 0x6e, 0x9, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 2m18.486700367s ago: executing program 2 (id=1839): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000cba100005000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 2m18.277079152s ago: executing program 2 (id=1842): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newqdisc={0x50, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xb9}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xf}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xfffffff8}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x50}}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) getsockname$packet(r4, 0x0, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000100)="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", 0x223}], 0x1) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) unlink(0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x78bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {0x0, 0xfff1}, {0x7, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x24041080) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x205) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r12, &(0x7f0000005180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d40)=ANY=[@ANYBLOB="100000000000000049486d6700000000102000000093bdc4690085a600000000"], 0x20}}], 0x2, 0x40840) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=@newtaction={0x760, 0x30, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{0x74c, 0x1, [@m_bpf={0x1b0, 0x6, 0x0, 0x0, {{0x8}, {0x9c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x7, 0x4, 0xfffffc00, 0xac9}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_FD={0x8, 0x5, r12}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x4, 0x6, 0xf, 0x6}}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x6, 0xc, 0x2, 0x6}, {0x22, 0x3, 0xf7}, {0x2, 0xd9, 0x9, 0x1bc20000}, {0x4, 0x5, 0x40, 0xd}, {0x4, 0x5, 0x7, 0x2}, {0x2, 0x80, 0x2, 0x4}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}]}, {0xee, 0x6, "26d74e1fa3d33608d316d79f8912dd501abd99f13065ec345040200416c1a7df7566e92ca05de6b700c65b907546a29682d881274224b2297cf34f8c45de36226ec0840cc74095f099926795a25b1c33a5c4886aa312bc1d18a49698cc1f55eac53ee24b888aaf820fca64e978b39859a0849f4d7d20f24bbe6b80e9f550fbbae7ae1e691b7ca68c691db0635ca607877da2a609f1f59c3637f76c97dac8625779d219164be935e490f31f6a617aee05b6b54ec9d23671cb2a0dffdf073a574f2355d0a5f11169cb2f176a02b2847a8a4dbdbb917f2d74ad107cda4d5b2c791b4678bb20ba1653d927bf"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x12c, 0x6, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xa}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x4, 0x0, 0x5, 0x6}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}]}, {0xc0, 0x6, "158e23b59ebff48ebb56208adfdd168fff62e8e1f8814db329d9f8ed69e92fdb9e8d79a1d1f0c17643e4dd3a3ad1fc9ed85cb0ac744655a7d72a6e177450ce7859c387af8a1491cf0c68bb8324023b99652163e09918ce082eed58ecc97c8be633dcccd0002b38b8565cf8d3b4c4e9ed20a5450741b6f57bf615d7023a40cf76d30f3349b83cbd6ed9b8aeb375a17f28a53ec887cb7b42e4f49428525f04f1634f351c0f4ad8b8e6d2bfa7970caf43b5c77e546ee1bdbbaf02e8f43b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0x124, 0x17, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x4, 0x5, 0xffff0001}, @multicast2, @private=0xa010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5b36, 0x5, 0x7, 0xfffffffb, 0x8}, @multicast2, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fffffff, 0x8, 0x4, 0x6, 0x8}, @rand_addr=0x64010102, @loopback, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfff, 0x5, 0x20000000, 0x7, 0x8}, @multicast2, @dev={0xac, 0x14, 0x14, 0x2c}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0xc022, 0x3, 0xcc10, 0x3}, @multicast2, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff3789, 0x2, 0x5, 0x5, 0x40}, @rand_addr=0x64010101, @broadcast, 0xff000000}}]}, {0x9, 0x6, "9b0e71323e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0xbc, 0xd, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x80000}, @TCA_CT_LABELS_MASK={0x14, 0x8, "53a96a89710298a1a96e7807d8f15fd6"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x4}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}, @TCA_CT_ACTION={0x6}, @TCA_CT_MARK={0x8, 0x5, 0x3}]}, {0x57, 0x6, "206d291160646d914c7e78eebcb8c2435984a90d4beac7f19407c977bc8b8899b9d03f471f22ee8db455830825528ac16a68d4763e0aaa2be614592c0f0a04a2eb605447e2365036f698c1519fc1fb639aef22"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x150, 0x1a, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x700}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0x4, 0x2, 0x800000, 0x3}, 0x6}}, @TCA_SKBMOD_DMAC={0xa}]}, {0xe4, 0x6, "a31727c6e118c65a1e1407b7ba2a03f9c20564b3469e66d7a87359e802529b1350fc23efe2174bb83b37594644534ebc021ec1f0e837d2cbf51955f075408ce005b2a5268c7ab869e488f30e816143c011cc60b10ecac02f0bc5102af082b8866d8d92be0ff5972434e7bd58f10365c500f420f844191c861ac50dce6f39bcefafeb65f8df923908722c54d7e98aa0db3c4b75d1964793dce7b6a2b7326d0ac75294366be1e4e97938b4248bd8791d5b2bf109acb0590cf040807da5a6121fb04b7810bb1d926a4ad10a8476baa79776c73c2e62986e9dffa05cb0cb76a6bc69"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_simple={0x13c, 0x12, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '@'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x7, 0x3, 0xfffffff9, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1002, 0x2, 0x6, 0x7, 0x7f}}]}, {0xd7, 0x6, "93b66c97d7d52165aa13d9764e812d882361f5e5956aaf6fcba2d27583c6c84a2fdfb13aa6bcff899a295e96c497f7a002e59d41221f55780831cf2d1fed113caa0d044eacd93e28931255d6725b7a76c78e705fe02033d378f143b070b0147233ee9b73112c9a3d0d627349a6cf30677d8785c2b61b6648797fa4fd1a8f7a5d93f8cb0f1e64b2ce6435c0f2fb72c6da41ab8cf72a2f604a52cd2850e4973fb7aebf361aff064746516748de36d9b5826825387f5dc0bb8e8bb0f51c14c216032437550672dddb24bb6136031874a45eea17f8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x760}, 0x1, 0x0, 0x0, 0xc053}, 0x48000) 2m16.891159172s ago: executing program 2 (id=1847): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x9}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0xd733043595a52279}, "a8e0930a1a884884", "74743275e5fc20c3ab14916504a8ca92", '\x00', "3e6a808941a488cc"}, 0x28) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4, 0x0, @loopback, 0x5}, 0x1c) splice(r0, &(0x7f0000000240)=0x4, r1, &(0x7f0000000300)=0x7, 0x8001, 0x1) sendmmsg$inet(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="c0a0df7b8772d05074243833eedd20ee91533fac02ab4378b20eb0e81a385169eed05c52f339123c317fb57b3b00ba485fa28d753f1cf3a57ae11a47c63ab049ffdbba805820ab83689ba036dc3d6fb3522d8958713f2227505e1198273569d8ee596b378d88010c65e4eee4e7c52dbe8533fd", 0x73}, {&(0x7f0000000200)="4fc0c5974b780fa3210110b5a4e0b497e960c5b4476c845a6620d693925be7ff57091e40adbe0d6b", 0x28}, {&(0x7f00000002c0)="03c684a6e0f05ff26df0e6e613a706030e9e6cc7c61b0dfd61322c21478c9de4eff205c37610ac40f94d", 0x2a}], 0x3}}], 0x1, 0x480e0) shutdown(r1, 0x1) mmap$qrtrtun(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x2010, r0, 0x401) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000026c0)={0x14, 0x10, 0x21, 0x70bd29, 0x0, {0x3}}, 0x14}}, 0x0) r4 = userfaultfd(0x80001) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000100)={0xffffffffffffffee, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{0xec81}], 0x1, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="30000000020305000000000000000000050000080900020000000008020000000800010003000018080004400000001417e63f96ab0d9f99216ddbf59d9848b97cfea7c2cc0c572604d78a04e17ea682d04a2ad78384f802fe640eec4846ae2e5f8f6957f5d2b440fa2d8eb1460d3ab589f7dae7d7973ebbee8badff609c85d4ca0cd45c87fb67ab1b3eff03575a637745d7e7b4bf31ecc7364495e6b75d3b9dcf5d3c8eae7cc75457ecc07216d5da7c4d48c2ad7880b43c695ac97b4fb2716236ddd2d997cea6716b62a6db5c01debb18e7fd24b9"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) 2m15.780816445s ago: executing program 2 (id=1849): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a0b04000000000000000002000000140000001100010000099b00000000000000000a"], 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x41624800ab113288, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, 0x0, 0x0) close(0xffffffffffffffff) syz_emit_ethernet(0x3a, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES64=r1, @ANYRES64, @ANYRESDEC=0x0], 0x0) syz_clone3(&(0x7f0000000300)={0x24000080, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m15.142439323s ago: executing program 33 (id=1849): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a0b04000000000000000002000000140000001100010000099b00000000000000000a"], 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x41624800ab113288, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, 0x0, 0x0) close(0xffffffffffffffff) syz_emit_ethernet(0x3a, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES64=r1, @ANYRES64, @ANYRESDEC=0x0], 0x0) syz_clone3(&(0x7f0000000300)={0x24000080, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m14.879534116s ago: executing program 1 (id=2072): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x403, 0x97c1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='fd\x00') getdents(r1, 0xffffffffffffffff, 0x5a) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='rpcgss_svc_seqno_low\x00', r1, 0x0, 0x3}, 0x18) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000007001e0007000000040000"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, 0x0, 0x0, 0x4, &(0x7f00000000c0)={{0x0}, {0x0, 0x0}}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r4, @ANYRESHEX=r0, @ANYRESDEC, @ANYRESOCT, @ANYRES8=r3, @ANYRESOCT=r5, @ANYRES16=r3]) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES64=r6], 0x0) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xc92480, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) syz_fuse_handle_req(r6, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) fallocate(r8, 0x20, 0x6, 0x33) unshare(0x8040480) r9 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000000)={0x2, @vbi={0x0, 0x590, 0x10001, 0x166110c, [0x0, 0x7f], [0x3, 0x2], 0x1}}) r10 = socket(0x1e, 0x1, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r11, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r11, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x2e, 0xff, 0xf}, 0x2c) bind$inet(r10, &(0x7f0000000000)={0x1e, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 1m13.531238345s ago: executing program 1 (id=2080): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0x1ff, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f2, 0x100, 0x42, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x400c0}, 0x24000000) syz_usb_disconnect(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}]}]}, 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x400000, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb29}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008081}, 0x840) r4 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5432, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="10") 7.302340241s ago: executing program 1 (id=2094): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1000000001, 0x0, 0x1, 0x0) (async, rerun: 64) sendmsg(r2, 0x0, 0x20040010) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async, rerun: 64) bpf$OBJ_GET_PROG(0x7, 0x0, 0xfffffffffffffd4a) (async, rerun: 64) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000040)=0x78, 0x4) (async) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e20, 0x3, @private2, 0x6}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0xfffffff8, 0x18, &(0x7f0000000080)=""/24, 0x41000, 0x64, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000640)=[r3], 0x0, 0x10, 0x40a7}, 0x94) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x920, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r5 = fsopen(0x0, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/packet\x00') (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) readlinkat(r6, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/4, 0x4) (async) fsmount(r5, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r7, r7, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) 7.30221924s ago: executing program 6 (id=2095): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000cba10000e10000000701eafff8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 7.22091632s ago: executing program 6 (id=2098): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) syz_usb_connect$cdc_ecm(0x4, 0x7f, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x1, 0x1, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x34, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x9, 0x24, 0x6, 0x0, 0x0, "f89d1c04"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7, 0x0, 0x7}, [@country_functional={0xc, 0x24, 0x7, 0xf, 0x0, [0x5, 0x1, 0x4]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x81}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x4, 0x1}, @mbim={0xc, 0x24, 0x1b, 0xb, 0x2, 0x81, 0xc, 0x0, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x0, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0xb}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x6, 0x8, 0x0, 0x8, 0x7}, 0x76, &(0x7f0000000240)={0x5, 0xf, 0x76, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x1, 0x1, 0x8c}, @generic={0x51, 0x10, 0x1, "dca224d7029d7f90130280e89e55afd1ee87dfc30c7ad76f01853c1ff119e13bba6236de772240eee5c7867027c489e85129945e1ccbd91c924bc58765635629f67fff3d3b36f41814855ff6ff16"}, @ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0xe, 0x7, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x2, 0x8, 0xff8f}]}, 0x2, [{0xd9, &(0x7f00000002c0)=@string={0xd9, 0x3, "f91b60dd092820075d5f96e2044558c22df4b90ff3d5a250412200c38456bdbd7d05767bf634fd8b206f2b3b3e4a475cf4b383fbd93bcd7dcfe307bddf3a7aeabc0682c4ced1f77ca2fff69341e22d0366aa788d8d10e30d7d5e1977faf33b28b9990123b24ac7121f06c6af6c5c6a7a937f551958c52dc70d701c9916cc41155fa700767e990a154e85c7d8ddc6efb8a8691f28abe26432ed21078cfa58e3ee6d111400a49e4096cb75655bf6b32bbe455e5b4ca7c1189360f64c1ecaf2c899a16ff7d36aad3b8fd67d74190587206a6bcbe8d36ac723"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3e}}]}) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x7aba, 0x100, 0x22, 0x352}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) (async) syz_usb_connect$cdc_ecm(0x4, 0x7f, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x1, 0x1, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x34, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x9, 0x24, 0x6, 0x0, 0x0, "f89d1c04"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7, 0x0, 0x7}, [@country_functional={0xc, 0x24, 0x7, 0xf, 0x0, [0x5, 0x1, 0x4]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x81}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x4, 0x1}, @mbim={0xc, 0x24, 0x1b, 0xb, 0x2, 0x81, 0xc, 0x0, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x0, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0xb}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x6, 0x8, 0x0, 0x8, 0x7}, 0x76, &(0x7f0000000240)={0x5, 0xf, 0x76, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x1, 0x1, 0x8c}, @generic={0x51, 0x10, 0x1, "dca224d7029d7f90130280e89e55afd1ee87dfc30c7ad76f01853c1ff119e13bba6236de772240eee5c7867027c489e85129945e1ccbd91c924bc58765635629f67fff3d3b36f41814855ff6ff16"}, @ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0xe, 0x7, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x2, 0x8, 0xff8f}]}, 0x2, [{0xd9, &(0x7f00000002c0)=@string={0xd9, 0x3, "f91b60dd092820075d5f96e2044558c22df4b90ff3d5a250412200c38456bdbd7d05767bf634fd8b206f2b3b3e4a475cf4b383fbd93bcd7dcfe307bddf3a7aeabc0682c4ced1f77ca2fff69341e22d0366aa788d8d10e30d7d5e1977faf33b28b9990123b24ac7121f06c6af6c5c6a7a937f551958c52dc70d701c9916cc41155fa700767e990a154e85c7d8ddc6efb8a8691f28abe26432ed21078cfa58e3ee6d111400a49e4096cb75655bf6b32bbe455e5b4ca7c1189360f64c1ecaf2c899a16ff7d36aad3b8fd67d74190587206a6bcbe8d36ac723"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3e}}]}) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) (async) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x7aba, 0x100, 0x22, 0x352}, &(0x7f0000000080), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_disconnect(r0) (async) 6.94447751s ago: executing program 5 (id=2101): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000200)=0x8001100) writev(r1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msgget$private(0x0, 0x442) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) close_range(r0, 0xffffffffffffffff, 0x0) 6.443135668s ago: executing program 5 (id=2103): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000400)=ANY=[@ANYBLOB="020000000600000000800000f23f701cf10000000092c6e83072c5da52b4e28e22db97fb2cfa5b1551ef22036aecf7efbfb715245b13a7b6acf65534180a78ec8412508df0d0325e662c622dfba3c42836ffc2134a7eb34e54f2922891f53e7986af174f1d80ff6a7df81c791bc6fdf94ca69f1b084999d665d7a234d89a6c115ba872c1045da67491b5fff61fb7eaa7ba58b4864161244ba874379ff6f58247161314f1e86651663e9960e28cdfb4212eea3b6e704dd4649a3e67a082c59a8d1a3e195b215a5c", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES8=r1, @ANYBLOB="01000040010000000f000000060200004a4faa7920a000ad"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) (async) sendmsg$can_bcm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000400)=ANY=[@ANYBLOB="020000000600000000800000f23f701cf10000000092c6e83072c5da52b4e28e22db97fb2cfa5b1551ef22036aecf7efbfb715245b13a7b6acf65534180a78ec8412508df0d0325e662c622dfba3c42836ffc2134a7eb34e54f2922891f53e7986af174f1d80ff6a7df81c791bc6fdf94ca69f1b084999d665d7a234d89a6c115ba872c1045da67491b5fff61fb7eaa7ba58b4864161244ba874379ff6f58247161314f1e86651663e9960e28cdfb4212eea3b6e704dd4649a3e67a082c59a8d1a3e195b215a5c", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES8=r1, @ANYBLOB="01000040010000000f000000060200004a4faa7920a000ad"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) sendmsg$can_bcm(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=ANY=[@ANYBLOB="01000000290b0000ffffffff00004100", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0100004001"], 0x80}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x80000) r4 = socket$netlink(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f00000001c0)=0x2010, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000090a01040000bc7a000000000a001004090001008b797a31000000000d0002"], 0x54}, 0x1, 0x0, 0x0, 0x40040d1}, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000090a01040000bc7a000000000a001004090001008b797a31000000000d0002"], 0x54}, 0x1, 0x0, 0x0, 0x40040d1}, 0x40) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x400000a, 0x50032, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0xc0, &(0x7f0000000000)=0x3, 0x0, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000000090108000000000000000000000001080005400000001c0900010073797a31796a00000c0004800800014000005677"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) io_getevents(r3, 0x6d, 0x3, &(0x7f0000000300)=[{}, {}, {}], &(0x7f0000000100)={0x77359400}) (async) io_getevents(r3, 0x6d, 0x3, &(0x7f0000000300)=[{}, {}, {}], &(0x7f0000000100)={0x77359400}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001300010029bd7000fbdbdf2500000000", @ANYRES32=r10, @ANYBLOB="86ee01000904000005001100010000002c002b800800"], 0x54}}, 0x24008844) (async) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001300010029bd7000fbdbdf2500000000", @ANYRES32=r10, @ANYBLOB="86ee01000904000005001100010000002c002b800800"], 0x54}}, 0x24008844) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.377364707s ago: executing program 1 (id=2104): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) dup(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00000000010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="8735ab831010654d80188357c79f5f8418fddb4779bc74491114b9e879c832605137ceadb7168c62397ae86246664156332311882feffe59efa370e49175265a"], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="2cce"], 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.444565966s ago: executing program 6 (id=2105): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usbip_server_init(0x1) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0xd99}], 0x1, 0x102, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) 5.443745952s ago: executing program 5 (id=2106): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x100, @remote}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000000c0)=ANY=[], 0x190) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x10, r5) ptrace$peeksig(0x4209, r5, &(0x7f0000000700)={0x7, 0x0, 0x1}, &(0x7f0000000440)=[{}]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=@newqdisc={0xf8, 0x24, 0x300, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xc}, {0x10, 0xfff2}}, [@TCA_STAB={0xbc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xb6, 0x3, 0x7, 0x0, 0x0, 0x5380000, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x3e, 0x80, 0x3, 0x1, 0x1, 0x1, 0x1ff, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0xd, 0x40, 0x3ff, 0x2, 0x0, 0x7fff, 0x1000}}, {0x4}}, {{0x1c, 0x1, {0xb, 0x3, 0x9f3, 0x1, 0x2, 0x4, 0xffffff00, 0x3}}, {0xa, 0x2, [0x0, 0x5, 0x2]}}, {{0x1c, 0x1, {0x7, 0x7, 0xe9e, 0x400, 0x1, 0x7, 0x6, 0x3}}, {0xa, 0x2, [0x9, 0x8c, 0x7]}}]}, @TCA_RATE={0x6, 0x5, {0x9}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffe}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) sched_setscheduler(r5, 0x6, &(0x7f0000000040)=0xb) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000b6bd489bb2daf2", @ANYRES16=r4, @ANYRESOCT=0x0], 0x18}}, 0x8040) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000001040)=@filter={'filter\x00', 0xe, 0x4, 0x530, 0xffffffff, 0x460, 0xd8, 0x2e0, 0xffffffff, 0xffffffff, 0x460, 0x460, 0x460, 0xffffffff, 0x8000000, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xf7ff, 0x1, 0x1}, {0x3, 0x5, 0x4}, 0x5, 0x4}}}, {{@ipv6={@mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffffff, 0xff, 0xff], [0xff, 0x0, 0x0, 0xffffffff], 'veth0_to_team\x00', 'ip_vti0\x00', {0xff}, {}, 0x4, 0x7, 0x4}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x8, [0x6, 0x9], 0x1, 0x2, 0x3, [@dev={0xfe, 0x80, '\x00', 0x3b}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @dev={0xfe, 0x80, '\x00', 0x1c}, @loopback, @remote], 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0xff, 0x5, 0x9, 0x40, 0xe7fd, @private1, @loopback, @dev={0xfe, 0x80, '\x00', 0x25}, [0xffffff00, 0x0, 0x0, 0xff000000], [0xff000000, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xff000000, 0xffffff00, 0xffffffff], 0x60, 0x80}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3, {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffdd) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000004c0)={0x1, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e20, @local}}}, 0x108) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x5, r10, 0x11, r7}, 0x10) 5.111400634s ago: executing program 3 (id=2107): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5019, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0xa8, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x26, 0x42, 0xf1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 32) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000900)={0x54, 0x12, 0x1, 0x70bd25, 0x25dfdbff, {0x2, 0x8c, 0x3, 0x2, {0x4e20, 0x4e20, [0x6, 0x5, 0x2, 0x60000000], [0x1, 0x6e33, 0x1, 0x19], 0x0, [0x794, 0x79f]}, 0x5de, 0xfffffffb}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x48000) (async) syz_open_dev$audion(&(0x7f0000000040), 0x6, 0x40) (async) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="09310b00006b7573806dcb84d1a606443b20d404000b23047d7e6fcbec72cd94"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.872818619s ago: executing program 6 (id=2112): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x48d, 0xce50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x3, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x22, 0x7, {0x7, 0x22, "3d910bb0d9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1, 0x0, 0x7f}}}}}]}}]}}, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000140)=@overlay={0x5, 0x1, 0x4, 0x4000, 0x1, {}, {0x3, 0x0, 0x7, 0x7, 0x4, 0xff, "e1066e43"}, 0x80000001, 0x3, {}, 0x9}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000000)={0x20, 0x25, 0x5, {0x5, 0x6, '\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.872145793s ago: executing program 5 (id=2113): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000007f000000f00e000009"], 0x48) unshare(0x20000400) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000ec0), 0x402, r0}, 0x38) (fail_nth: 1) 3.416161656s ago: executing program 4 (id=2115): socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000fe830400"]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000021aee3dece8055f60000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000040000000000000000000200000000000000000000000000000000000000100000300000000440005000a010101000000000000000000000000000004d62b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000021aee3dece8055f60000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000040000000000000000000200000000000000000000000000000000000000100000300000000440005000a010101000000000000000000000000000004d62b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003a80)={&(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x8890) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, 0x0) (async) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000480)=ANY=[@ANYBLOB="73000000000002f78004"]) (async) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000480)=ANY=[@ANYBLOB="73000000000002f78004"]) openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x22882, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000200)={0x2, 0x2, 0x5, &(0x7f0000000180)={0x17, "41806b396ec632bd8a3535855e0c4aa69df036e26fbcc1ea8596651049da18e9d8"}}) syz_io_uring_setup(0x1eae, &(0x7f0000000040)={0x0, 0xec25, 0x400, 0x41, 0x40000331}, 0x0, 0x0) (async) syz_io_uring_setup(0x1eae, &(0x7f0000000040)={0x0, 0xec25, 0x400, 0x41, 0x40000331}, 0x0, 0x0) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000000)=0xffff0018) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000000)=0xffff0018) unshare(0x28040680) (async) unshare(0x28040680) socket$rds(0x15, 0x5, 0x0) r9 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0x129202, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r9, 0xc0045006, &(0x7f0000000000)=0xd) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f00000000c0)=0x2000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r9, 0xcc8c8000) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r9, 0xcc8c8000) write$binfmt_elf32(r9, 0x0, 0x4cd) pselect6(0x40, &(0x7f00000001c0)={0x1ff, 0x3, 0x27, 0xaf0, 0x71, 0x1, 0x100000001, 0xffffffffffffff42}, 0x0, 0x0, 0x0, 0x0) 3.35244614s ago: executing program 5 (id=2116): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x6, 0x4018810) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000500000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x2, 0x2) (async) mbind(&(0x7f0000500000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x2, 0x2) remap_file_pages(&(0x7f0000931000/0x2000)=nil, 0x2000, 0x3000000, 0xbe, 0x10000) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x19, 0x4, @thr={0x0, 0x0}}) mq_notify(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@deltfilter={0x44, 0x2d, 0x200, 0x70bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r1, {0x6}, {0x6, 0xb}, {0x2, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x100}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x8, 0x80}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x240088d0}, 0x8840) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, &(0x7f00000000c0)=0x400, 0x4) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, &(0x7f00000000c0)=0x400, 0x4) mremap(&(0x7f000071c000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000718000/0x4000)=nil) (async) mremap(&(0x7f000071c000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000718000/0x4000)=nil) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000200)={&(0x7f00001f2000/0x3000)=nil, 0x8, 0x4, 0x4}) syz_open_dev$mouse(&(0x7f0000000080), 0x7fff, 0x800) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="07abbeeccaac3000004cd807"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="07abbeeccaac3000004cd807"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x800) (async) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x800) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x77ffff3b}, {0x1, 0x10, 0x8, 0x8}, {0x18, 0x6, 0xd, 0x4}]}) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x77ffff3b}, {0x1, 0x10, 0x8, 0x8}, {0x18, 0x6, 0xd, 0x4}]}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0xfffffff9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0xfffffff9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000080)={r6, 0x800, 0xe840}, 0x8) close_range(r3, 0xffffffffffffffff, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000596000/0x4000)=nil, 0x4000, 0x2000001, 0x0, 0x800) 3.108949295s ago: executing program 4 (id=2117): r0 = inotify_init() r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x4, 0x0, 0x3, {0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, 0xc0000}}}, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r4) r6 = add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="0000000000000002ff690000000000010000001800000006000200861f4104bfeacdd5a9007d16dcdc2850b5", 0x2c, r5) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) pipe2(&(0x7f0000000040)={0x0, 0x0}, 0x80000) r10 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x8, 0x0, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r8, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r13 = socket(0x1e, 0x80004, 0x0) r14 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="64f2acf275663c5f25b17a4ccd2bf8d96e9773e0006f8c35", 0x18, r6) keyctl$get_keyring_id(0x0, r14, 0x0) setsockopt$packet_tx_ring(r13, 0x10f, 0x36, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r15 = inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) syz_usb_connect(0x6, 0x2d, &(0x7f0000000080)=ANY=[@ANYRESHEX=r15], 0x0) 2.548850516s ago: executing program 4 (id=2118): getpriority(0x3, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) (async) unshare(0x2c020400) (async) r0 = msgget$private(0x0, 0x722) msgsnd(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="bf878250"], 0x8, 0x800) (async) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x1b, r2, 0x1, 0xfc, 0x6, @local}, 0x14) (async) bind$packet(r1, &(0x7f0000000000)={0x11, 0x10, r2, 0x1, 0x8, 0x6, @broadcast}, 0x14) msgrcv(0x0, 0x0, 0x0, 0xffffff7f00000000, 0x2000) (async) fsopen(&(0x7f0000000040)='afs\x00', 0x0) (async) msgctl$IPC_INFO(r0, 0x3, &(0x7f00000009c0)=""/4096) (async) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async) r4 = socket(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20040894) sendmsg$tipc(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="9957df", 0x3}], 0x1, &(0x7f0000000e00)="3edba1943de67dc125b2a0ad9fd0b7be", 0x10, 0x20000000}, 0x6004000) (async) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x810, r3, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mprotect(&(0x7f000013f000/0x1000)=nil, 0x1000, 0x8) 2.456791262s ago: executing program 4 (id=2119): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x6) mremap(&(0x7f0000d20000/0x2000)=nil, 0x2000, 0x3000, 0xc, &(0x7f0000e67000/0x3000)=nil) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000004880)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/83, 0x53}], 0x1}, 0x800}, {{&(0x7f0000000400)=@hci, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/213, 0xd5}, {&(0x7f0000000580)=""/96, 0x60}, {&(0x7f0000000600)=""/248, 0xf8}], 0x3, &(0x7f00000007c0)=""/108, 0x6c}, 0x62}, {{&(0x7f0000000840)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000008c0)=""/162, 0xa2}, 0xf322}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/105, 0x69}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/66, 0x42}, {&(0x7f0000000a80)=""/232, 0xe8}, {&(0x7f0000000b80)=""/79, 0x4f}], 0x5, &(0x7f0000000c80)=""/34, 0x22}, 0xc}, {{&(0x7f0000000cc0)=@hci, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000d40)=""/108, 0x6c}, {&(0x7f0000000dc0)=""/216, 0xd8}, {&(0x7f0000000ec0)=""/169, 0xa9}, {&(0x7f0000000f80)=""/29, 0x1d}], 0x4, &(0x7f0000001000)=""/9, 0x9}, 0x70e}, {{&(0x7f0000001040)=@xdp, 0x80, &(0x7f0000004700)=[{&(0x7f00000010c0)=""/142, 0x8e}, {&(0x7f0000001180)=""/145, 0x91}, {&(0x7f0000001240)=""/140, 0x8c}, {&(0x7f0000001300)=""/181, 0xb5}, {&(0x7f00000013c0)=""/83, 0x53}, {&(0x7f0000001440)=""/71, 0x47}, {&(0x7f00000014c0)=""/240, 0xf0}, {&(0x7f00000015c0)=""/112, 0x70}, {&(0x7f0000001640)=""/108, 0x6c}], 0x9, &(0x7f00000047c0)=""/144, 0x90}, 0x4}], 0x6, 0xe3f531ba1972e9a2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0xb9aa, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) io_setup(0x7ff, &(0x7f0000000140)=0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) io_submit(r4, 0x1, &(0x7f00000014c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) r6 = io_uring_setup(0x1694, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffe}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 2.125550408s ago: executing program 1 (id=2120): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r0, 0x40045431, &(0x7f0000000000)) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f00008e0000/0x4000)=nil, 0x4000, 0x40000}) (async, rerun: 32) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000575c820490d00702f260102030109021200010000008309040000000e01"], 0x0) (async, rerun: 32) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x181000, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000000c0)={@local, 0x1}) 1.950527522s ago: executing program 6 (id=2121): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="8000b2000a000a00cc4f37b8aa1c0000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmmsg$unix(r4, &(0x7f00000009c0)=[{{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0x20048100}}], 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f00000001c0)=0x1fe80000, 0x4) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.950225611s ago: executing program 3 (id=2122): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$alg(0x26, 0x5, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) r3 = eventfd(0x0) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) unshare(0x20000000) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r5 = syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) (async) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) syz_clone3(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r5, r5], 0x2}, 0x58) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r8, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x2}) (async) r9 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7}) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r3) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffc, 0x0, 0x3, 0x6c4ba45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x80000, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x9d8, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) 1.780726495s ago: executing program 6 (id=2123): socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'erspan0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x35, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) chdir(&(0x7f0000000540)='./cgroup\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0xffe9) open(&(0x7f0000000080)='./file0\x00', 0x80bc1, 0x108) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="576332f56236be7cfa73a36e5e436485a425bc1b921f22ca2d2a337eadf8319fe6a960f0f3b068e86c81441ebd2df73b1face8317ea70caa41f5e55b8523aabbbcdf1da83f227ae1208115de48e2a3fb3d4e4fd419b77a9b8c34a78300e6faa7a8362f89116b85ec1441bd2a13b9cce2ccfc334aba8b9cf61e3061b4b6f93b6ee030ce3a7e5f386f60059793878ca0df7398efba666be33efb40dfcf4a30d81e151d4e9bb23b8440047b2d849f7582e803", 0xb1}, {&(0x7f0000000480)="7540d8d901cb197301018595109be3b8ac14f3059416511cb78798420e7d084d41e734b66c98e3c9aa439b165519a6c55a3c86993e31ad1e667453deeed34482f1bf0d167c1d96209b7a374155a9f136133042ae77c8f58b6baa259d7fd86fe401723eae2826cd9111d7ccba45724c3ed6ef156a7200ef9dfe0399771f6ba6e21b3566efdd19d5d0923261f97c9c6798628817a9c585c1769ffe3f5e03180d30c1a12f3426fb06215cdad006b8d1b0259864de5e393e5032185430d8e114b0b9449ee7fc45158fce125bcce91e39be6adaefe096c433c5dc24f27cba1feb", 0xde}, {&(0x7f0000000680)="6125358b15cfd1b7424c9e026a766ce3b8a4d5bbf0f78ee9c3b094e0c9d272479e798bf977e94be9f42cef87292cbd0c9be18fc48fb0f00fd841aa51a584228890bba345d617e165c3fac9723e53765adc8c13fe93245e4a7e08c5645773b400c755e91dc0af29f46715267afb7947afc0addf510da112fa8b654757a5020f411ed2656909a86fdc6c9ea745882e029f4cefe31858b1facf0c08ea2c59f629dc17b7c3658802215a6f05a9f1", 0xac}, {&(0x7f00000003c0)="49f417814105a46aac87547e8a344dfb0996ec95076a3d12e699218ca98f4bffcfad38993d93bb646043", 0x2a}, {&(0x7f0000000780)="f318b45a3d8aed513e90235d54300a6373f775e36a58ca0f53e3ddcd8b8dccb6a2fc05b6d6f9ecba74e748a991ffbf264467e94b4622db20df0382c1ff1ca8dc6a9f6e05a36e6261f8b9e13e1b8753dd636e8f239d1de3b3f326ef84075a654a454e9f764f190397daee88879aafaa6b81a213802075e23b5dae233523677cbb255ff674afad254ed56fead3035b7bfc225c3d6b235d04d21e516562b0f5f513a7", 0xa1}, {&(0x7f0000000840)="4df37d3624c065eee5f80b7203eb165997617c9d9c98453a7b12458794916e34c2306f321a10e2a52e4651755b7c3b327ba4e778b3c2325b25a00c7909bb00c4c11383282420d9d19c646d545bc67f5d031389fc9fcdc529905ea64d202e493f2eb151a66d555d94946942bcc350f28561f55b9d77d7f402bc8d6f5a958c4ca6bc4c6d7bc99782c5c9d1a35c84b557d29ff533aa244ed6284055338502695a6605660d5763c464a8f68b3178ae21", 0xae}], 0x6, &(0x7f0000000900)=[{0x88, 0x10a, 0x9, "4a6c4c313fb87ee7b5253ac5691001d14e962f43cc66d6432f54e68969165e3f5b5b917b552b721a675ee63edfd8693e949c8a23f03e22eb79c4304c77e701ef9f5b6ddb463087b577861f18bb4ccdb5a43c9bd0acd5c7eff67ed38113ce3706ac84fe777ba0ef077eacdeb6189fe51beef770fe0cdc08b8"}, {0x78, 0x10e, 0x96, "441ca7fddda290dae91e8b290f9a642b066eb2b552ce05ee55be7847bcf07d1d8c31ae790e11969960a62268cb112e53fad6f0e76016d4d57bbf3c33ac20281251fa8c6a47e0bc92230f46f92c58c0d540bd3e8d721f33440919485bd7aa80bfeebf34fc9ee837"}, {0x50, 0x112, 0x24, "99030750f6ddb8744a9be51ac55291b7179d901b69d68583c345dcc2770692fa6ae1a83efb8145a8330b90c65fa083e333a66f67ff3adf520dea91"}, {0x28, 0x116, 0x5, "b118faf3db121fc5d85fc9e5065a1bc379a2874f98"}, {0x10, 0x3a, 0x40}, {0x28, 0x116, 0x24, "18b8c31bbf03e8598596534166b293f904e0"}, {0x58, 0x10e, 0xb, "319c6bae61c5cfef1b1ff11a4066b9f04611f5705cb9113068ef7583e8dd15a12d6dee5ef5f6532579cf788e88ece806fe56d31bc8d122993a3d29a26d850ff8fdb605edc5d0709d"}], 0x208}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x34}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000861a1820830447370200010203010902120001000000000904d9"], 0x0) 1.452354112s ago: executing program 4 (id=2124): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) (async) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async) statfs(&(0x7f0000001040)='./file0\x00', &(0x7f0000001080)=""/67) (async) geteuid() (async) r1 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff3460f1ec9f081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) (async) rt_sigsuspend(&(0x7f0000000000), 0x8) (async) tkill(r1, 0x16) (async) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001100), 0x400000, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0xa30000, 0x1, 0x1, r2, 0x0, &(0x7f0000001140)={0xa20933, 0x9, '\x00', @ptr=0x3ff}}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80800) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="0e00b71dec3900001b"]) 1.008592608s ago: executing program 3 (id=2125): r0 = dup(0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40008300}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@gettaction={0x118, 0x32, 0x100, 0x70bd26, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6ff48b26}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x77}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5921104}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x399e}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8040}, 0x20000005) r1 = accept4(r0, &(0x7f0000000200)=@alg, &(0x7f0000000280)=0x80, 0x80000) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000002c0)={0x0, 0x8000000000000000, 0x4}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000006c0)={0xa, 0x3, {0x2, @usage=0x10, 0x0, 0x9, 0xe5, 0xfff, 0x1ff, 0x3, 0x54, @usage=0xf, 0x9, 0x0, [0xe, 0x2, 0x0, 0x8, 0xaa, 0x800]}, {0xfffffffffffffffe, @struct={0x0, 0x400}, 0x0, 0x9, 0x8, 0x3, 0x9, 0x9, 0x10, @usage, 0xc, 0x9, [0x0, 0xa, 0x8, 0x0, 0x3, 0xfffffffffffffff8]}, {0x3, @usage=0xfffffffffffffffc, 0x0, 0x0, 0x4a08cc97, 0x1, 0x80, 0x2, 0x26, @struct={0x401, 0x8}, 0x7f, 0xd65, [0x5, 0xd, 0x64e2, 0x81, 0x1, 0xd]}, {0x61bd, 0xfffffffffffffff9}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000ac0)={0x1, 0x6, {0x101, @struct={0x2, 0x10001}, 0x0, 0x1, 0x3, 0xa4, 0xc55, 0x4000, 0x22c, @usage=0x6, 0xdd0, 0x80, [0x5, 0x3, 0x0, 0x4, 0x60, 0x2]}, {0x5, @struct={0x5, 0xe76}, r2, 0x80, 0x5, 0x7, 0x7ff, 0x7, 0x0, @usage=0x6, 0x3ff, 0xc, [0x8000000000000000, 0x5, 0x4, 0x8, 0x7]}, {0x7fffffff, @struct={0x9, 0xff}, r3, 0x3, 0xa, 0x5, 0x5, 0x6, 0x40, @struct={0x101, 0x4}, 0xfffff6a0, 0x5, [0x1, 0x8, 0xe, 0x1, 0x40, 0x9]}, {0x7, 0x1, 0x3}}) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r5 = userfaultfd(0x0) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) r6 = syz_open_dev$I2C(&(0x7f0000001000), 0x2756, 0x40040) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000001080)={0x0, 0x5, 0x3, &(0x7f0000001040)={0x4, "ac004a252d21a73dfb5a15b57556e6d2be97a37d8612cdbbfe04229b1a6d740271"}}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x2c, 0x0, 0x2, 0x5, 0x0, 0x0, {0xda1b342882ff7ebe, 0x0, 0x6}, [@CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}]}, 0x2c}}, 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000011c0)={0x0, 0x7fffffff}, &(0x7f0000001200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000001240)={r7, 0x4}, 0x8) write$nbd(r1, &(0x7f0000001280)={0x67446698, 0x1, 0x3, 0x3, 0x1, "845fb027ae7045552b5e7a954d28854d470ed93d3732900e6bbf61e3fcaef45e5bff9fc0cbde2917e1a0f9746aab70437afb4b1ca07a5c81649d5387c382915460413b67b57b6cfbe3eb4b8b6d4fd495f00de1530d3642beb908a7206b0de471d2f2076f96"}, 0x75) copy_file_range(r4, &(0x7f0000001300)=0xb766, r5, &(0x7f0000001340)=0x7, 0x7ff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000013c0)={0x3, &(0x7f0000001380)=[{0x4, 0x7, 0x5a, 0x71}, {0x8, 0x10, 0x42, 0x4}, {0x1ff, 0xf8, 0x2, 0xe8db}]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001500)={&(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001440)=[0x0, 0x0, 0x0], &(0x7f0000001480)=[0x0, 0x0], &(0x7f00000014c0)=[0x0, 0x0], 0x7, 0x3, 0x2, 0x2}) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000001540), &(0x7f0000001580)=0x40) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000015c0)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r8, 0x4004f506, &(0x7f0000001600)) fsopen(&(0x7f0000001640)='ecryptfs\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001680)={0x10002, 0x0, 0x1, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000016c0)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r9, 0x84, 0x8, &(0x7f0000001700), &(0x7f0000001740)=0x4) sendmsg$nl_route_sched(r0, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)=@gettaction={0x28, 0x32, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008800}, 0x44001) 874.93561ms ago: executing program 3 (id=2126): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500030000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e00000004fcff", 0x58}], 0x1) dup(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001000090c000000000000000000008000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028004001200060018000030000005001700000000000500160002000000"], 0x54}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0xfffffffd, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') getdents64(r4, &(0x7f0000003f80)=""/4101, 0x1005) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) 715.155523ms ago: executing program 3 (id=2127): rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x36, &(0x7f0000000140)={0x5, 0xffffffff, 0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rt_tgsigqueueinfo(r1, r0, 0x1b, &(0x7f0000000280)={0xc, 0x0, 0x4}) tkill(r0, 0x21) 619.40726ms ago: executing program 3 (id=2128): mmap(&(0x7f00007df000/0x2000)=nil, 0x2000, 0x3000008, 0x30, 0xffffffffffffffff, 0xfdbd9000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@private2={0xfc, 0x2, '\x00', 0xfd}, 0x5, 0x0, 0x1, 0x1}, 0x14) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) 478.488858ms ago: executing program 4 (id=2129): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x201, &(0x7f0000000080)={&(0x7f0000001480)=""/4088, 0xff8}) syz_open_procfs(r1, &(0x7f0000000000)='comm\x00') r2 = syz_io_uring_setup(0x10cf, &(0x7f0000000340)={0x0, 0x6bf6, 0x400, 0x6, 0x20c}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1401, 0x400, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}}, 0x0) recvmsg(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}, {&(0x7f0000001280)=""/211, 0xd3}], 0x2}, 0x10002) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1000}) listen(r0, 0x2930764) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 457.182027ms ago: executing program 1 (id=2130): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000e40)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {@in=@dev, 0x0, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x0, 0xd0e}, {0x0, 0x4000000}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b40)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="ef4fd0a17bc81fd642c5", 0xa}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="5fef4ecf", 0x4}], 0x1}}], 0x3, 0x48800) shutdown(r0, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000e40)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {@in=@dev, 0x0, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x0, 0xd0e}, {0x0, 0x4000000}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b40)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="ef4fd0a17bc81fd642c5", 0xa}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="5fef4ecf", 0x4}], 0x1}}], 0x3, 0x48800) (async) shutdown(r0, 0x2) (async) 0s ago: executing program 5 (id=2131): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x4002) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n [ 722.689356][ T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 722.718988][T12395] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 722.743558][T12856] loop2: detected capacity change from 0 to 7 [ 722.794836][T12856] loop2: [ 722.808830][T12856] loop2: partition table partially beyond EOD, truncated [ 722.878659][T12395] usb 4-1: device descriptor read/64, error -71 [ 722.999158][T12395] usb usb4-port1: attempt power cycle [ 723.180404][ T5148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 723.194724][ T5148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 723.205022][ T5148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 723.214434][ T5148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 723.225955][ T5148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 723.381431][T12395] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 723.409214][T12395] usb 4-1: device descriptor read/8, error -71 [ 723.659577][T12395] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 723.709208][T12395] usb 4-1: device descriptor read/8, error -71 [ 723.839402][T12395] usb usb4-port1: unable to enumerate USB device [ 723.914128][ T7262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.929863][ T7262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.942174][ T7262] bond0 (unregistering): Released all slaves [ 723.960778][ T7262] bond1 (unregistering): Released all slaves [ 723.974231][ T7262] bond2 (unregistering): Released all slaves [ 723.986763][T12862] 8021q: VLANs not supported on wg0 [ 724.149117][ T7262] tipc: Disabling bearer [ 724.169497][ T7262] tipc: Disabling bearer [ 724.196444][ T7262] tipc: Left network mode [ 724.302405][T12891] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 724.578791][ T24] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 724.804721][ T24] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 724.823509][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.864722][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 724.886489][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.913300][ T24] usb 5-1: Product: syz [ 724.937961][ T24] usb 5-1: Manufacturer: syz [ 724.947191][ T24] usb 5-1: SerialNumber: syz [ 724.979052][ T24] usb 5-1: config 0 descriptor?? [ 724.992057][ T7262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.100701][ T7262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.112667][ T24] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 725.120790][ T7262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.129082][ T7262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.136428][ T24] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 725.188807][ T7262] veth1_macvtap: left promiscuous mode [ 725.194534][ T7262] veth0_macvtap: left promiscuous mode [ 725.200760][ T7262] veth1_vlan: left promiscuous mode [ 725.206244][ T7262] veth0_vlan: left promiscuous mode [ 725.299449][ T5148] Bluetooth: hci0: command tx timeout [ 725.348976][ T24] usb 5-1: USB disconnect, device number 98 [ 725.381909][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 725.391761][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 726.258799][T12396] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 726.410846][T12396] usb 6-1: Using ep0 maxpacket: 8 [ 726.420697][T12396] usb 6-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 726.433993][ T24] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 726.444057][T12396] usb 6-1: config 1 interface 0 has no altsetting 0 [ 726.460580][T12396] usb 6-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.40 [ 726.480246][T12396] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.488346][T12396] usb 6-1: Product: ã [ 726.488997][ T7262] team0 (unregistering): Port device team_slave_1 removed [ 726.493220][T12396] usb 6-1: Manufacturer: ⛟ [ 726.547674][ T7262] team0 (unregistering): Port device team_slave_0 removed [ 726.547687][T12396] usb 6-1: SerialNumber: Ј [ 726.602374][ T24] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 726.618898][ T24] usb 5-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 726.627813][ T24] usb 5-1: Product: syz [ 726.633470][ T24] usb 5-1: Manufacturer: syz [ 726.638091][ T24] usb 5-1: SerialNumber: syz [ 726.657322][ T24] usb 5-1: config 0 descriptor?? [ 726.793312][T12925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.804151][T12925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.827091][T12396] usbhid 6-1:1.0: can't add hid device: -71 [ 726.834228][T12396] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 726.853169][T12396] usb 6-1: USB disconnect, device number 27 [ 727.215224][T12872] chnl_net:caif_netlink_parms(): no params data found [ 727.379118][ T5148] Bluetooth: hci0: command tx timeout [ 727.499018][ T24] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 727.518495][ T24] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 727.562390][ T24] asix 5-1:0.0: probe with driver asix failed with error -71 [ 727.673549][ T24] usb 5-1: USB disconnect, device number 99 [ 727.711990][T12872] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.722206][T12872] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.731815][T12872] bridge_slave_0: entered allmulticast mode [ 727.740575][T12872] bridge_slave_0: entered promiscuous mode [ 727.754301][T12872] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.761987][T12872] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.848264][T12872] bridge_slave_1: entered allmulticast mode [ 727.901396][T12395] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 727.925376][T12951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1868'. [ 727.935031][T12951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1868'. [ 728.013027][T12872] bridge_slave_1: entered promiscuous mode [ 728.086238][T12872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.106566][T12872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.194678][ T7262] IPVS: stop unused estimator thread 0... [ 728.202070][T12395] usb 6-1: unable to get BOS descriptor or descriptor too short [ 728.217724][T12395] usb 6-1: config 1 has an invalid interface number: 43 but max is 1 [ 728.242601][T12395] usb 6-1: config 1 has no interface number 1 [ 728.258020][T12395] usb 6-1: config 1 interface 0 altsetting 247 endpoint 0x4 has invalid maxpacket 600, setting to 64 [ 728.331836][T12395] usb 6-1: config 1 interface 0 has no altsetting 0 [ 728.353964][T12395] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=f6.75 [ 728.364092][T12872] team0: Port device team_slave_0 added [ 728.394223][T12872] team0: Port device team_slave_1 added [ 728.428223][T12395] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.446838][T12395] usb 6-1: Product: syz [ 728.456925][T12395] usb 6-1: Manufacturer: syz [ 728.467044][T12395] usb 6-1: SerialNumber: syz [ 728.636179][T12872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.686621][T12872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.752212][T12943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.769065][T12943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.858885][T12395] gspca_main: spca501-2.14.0 probing 0000:0000 [ 728.865863][T12872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.888543][T12395] gspca_spca501: reg write: error -71 [ 728.898495][T12411] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 728.914464][T12395] spca501 6-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 728.944160][T12872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.963613][T12395] spca501 6-1:1.0: probe with driver spca501 failed with error -22 [ 728.983355][T12872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.019137][T12395] usb 6-1: USB disconnect, device number 28 [ 729.044104][T12872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.113715][T12411] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 256 [ 729.124467][T12411] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.136622][T12411] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 729.154620][T12872] hsr_slave_0: entered promiscuous mode [ 729.173821][T12872] hsr_slave_1: entered promiscuous mode [ 729.192355][T12872] debugfs: 'hsr0' already exists in 'hsr' [ 729.199404][T12411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.208476][T12872] Cannot create hsr debugfs directory [ 729.219715][T10333] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 729.366929][T12961] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 729.393923][T12411] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 729.459234][T10333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.469420][T10333] usb 4-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 729.478593][ T5148] Bluetooth: hci0: command tx timeout [ 729.498695][T10333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.519137][T10333] usb 4-1: config 0 descriptor?? [ 729.536042][T12411] usb 5-1: invalid MIDI out EP 0 [ 729.775070][T12411] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 729.959704][T10333] usb 4-1: string descriptor 0 read error: -71 [ 729.988217][T10333] uclogic 0003:5543:0081.0017: failed retrieving string descriptor #200: -71 [ 730.017570][T10333] uclogic 0003:5543:0081.0017: failed retrieving pen parameters: -71 [ 730.062749][T10333] uclogic 0003:5543:0081.0017: failed probing pen v2 parameters: -71 [ 730.094190][T10333] uclogic 0003:5543:0081.0017: failed probing parameters: -71 [ 730.139752][T10333] uclogic 0003:5543:0081.0017: probe with driver uclogic failed with error -71 [ 730.195800][T10333] usb 4-1: USB disconnect, device number 105 [ 730.281799][T12872] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 730.319669][T12872] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 730.347328][T12872] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 730.362895][T12872] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 730.509929][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 730.509946][ T30] audit: type=1326 audit(1761204750.333:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12989 comm="syz.3.1875" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc6ea38efc9 code=0x0 [ 730.664844][ T30] audit: type=1326 audit(1761204750.333:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12989 comm="syz.3.1875" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc6ea38efc9 code=0x0 [ 730.762681][T12872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.926662][T12872] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.942207][ T7262] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.949384][ T7262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.016270][ T7262] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.023592][ T7262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.059486][T12411] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 731.148746][T12393] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 731.212399][T12411] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 731.223069][T12411] usb 6-1: config 0 has no interface number 0 [ 731.232897][T12411] usb 6-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 731.260216][T12411] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 731.282787][T12872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.290069][T12411] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 731.310507][T12393] usb 4-1: Using ep0 maxpacket: 32 [ 731.311743][T12411] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 731.332770][T12393] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 731.344249][T12411] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.345069][T12393] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 731.384038][T12393] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 731.394456][T12411] usb 6-1: config 0 descriptor?? [ 731.407576][T12393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 731.428058][T12393] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 731.443331][T12872] veth0_vlan: entered promiscuous mode [ 731.466034][T12393] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 731.494913][T12411] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input66 [ 731.513797][T12872] veth1_vlan: entered promiscuous mode [ 731.548732][ T5148] Bluetooth: hci0: command tx timeout [ 731.558238][T12393] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 731.595837][T12393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.672351][T12396] usb 5-1: USB disconnect, device number 100 [ 731.725161][T12393] usb 4-1: config 0 descriptor?? [ 731.741550][T12872] veth0_macvtap: entered promiscuous mode [ 731.774007][T12872] veth1_macvtap: entered promiscuous mode [ 731.921238][T12872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.952543][T12393] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 106 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 731.987727][T12872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.067928][ T9791] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.091799][ T9791] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.120064][ T9791] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.157141][ T9791] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.263363][T12396] usb 4-1: USB disconnect, device number 106 [ 732.326265][ T7263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.353947][T12396] usblp0: removed [ 732.375893][ T7263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.452426][ T7263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.474029][ T7263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.682813][T13030] tipc: Enabling of bearer rejected, media not registered [ 732.843531][T13034] netlink: 'syz.4.1882': attribute type 12 has an invalid length. [ 732.928605][T12396] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 733.100293][T12396] usb 2-1: config 0 has no interfaces? [ 733.115352][T12396] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 733.137996][T12396] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.165492][T12396] usb 2-1: config 0 descriptor?? [ 733.172292][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1882'. [ 733.325728][T13038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1882'. [ 733.507325][T12393] usb 2-1: USB disconnect, device number 119 [ 733.628536][T12396] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 733.778639][ T5881] usb 6-1: USB disconnect, device number 29 [ 733.785438][T12396] usb 7-1: device descriptor read/64, error -71 [ 734.038633][T12396] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 734.188910][T12396] usb 7-1: device descriptor read/64, error -71 [ 734.330864][T12396] usb usb7-port1: attempt power cycle [ 734.778726][T12396] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 734.829121][T12396] usb 7-1: device descriptor read/8, error -71 [ 735.083408][ T5881] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 735.090034][T12396] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 735.146968][T13071] netlink: 'syz.4.1893': attribute type 1 has an invalid length. [ 735.149666][T12396] usb 7-1: device descriptor read/8, error -71 [ 735.161585][T13071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 735.279014][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 735.293154][T12396] usb usb7-port1: unable to enumerate USB device [ 735.301318][ T5881] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 735.311821][ T5881] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 735.328535][ T5881] usb 4-1: config 0 interface 0 has no altsetting 0 [ 735.387950][ T5881] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 735.408469][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.434393][ T5881] usb 4-1: Product: syz [ 735.445134][ T5881] usb 4-1: Manufacturer: syz [ 735.468820][ T5881] usb 4-1: SerialNumber: syz [ 735.484991][ T5881] usb 4-1: config 0 descriptor?? [ 735.707641][T13068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.716465][T13068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.731082][ T5881] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input67 [ 735.791053][ T24] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 735.798770][T12396] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 735.858763][T12411] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 735.928492][ T24] usb 5-1: device descriptor read/64, error -71 [ 735.929610][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1892'. [ 735.950320][ T5881] usb 4-1: USB disconnect, device number 107 [ 735.960095][T12396] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 735.971214][T12396] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.980083][T12396] usb 2-1: Product: syz [ 735.984350][T12396] usb 2-1: Manufacturer: syz [ 735.989025][T12396] usb 2-1: SerialNumber: syz [ 736.027931][T12411] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.040695][T12411] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 736.053824][T12411] usb 6-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 736.063018][T12411] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.074062][T12411] usb 6-1: config 0 descriptor?? [ 736.168509][ T24] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 736.298608][ T24] usb 5-1: device descriptor read/64, error -71 [ 736.409929][ T24] usb usb5-port1: attempt power cycle [ 736.516483][T12411] megaworld 0003:07B5:0312.0018: ignoring exceeding usage max [ 736.613040][T12396] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 736.614407][T12411] megaworld 0003:07B5:0312.0018: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.5-1/input0 [ 736.644567][T12411] megaworld 0003:07B5:0312.0018: no inputs found [ 736.739824][T12396] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 736.762154][T12396] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 736.778773][ T24] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 736.811587][T12396] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 736.831058][ T24] usb 5-1: device descriptor read/8, error -71 [ 737.109102][ T24] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 737.158013][ T24] usb 5-1: device descriptor read/8, error -71 [ 737.273406][ T24] usb usb5-port1: unable to enumerate USB device [ 737.315441][T13101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.327299][T13101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.679201][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 737.698285][T13107] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 737.737405][T12412] usb 2-1: USB disconnect, device number 120 [ 737.841943][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.872933][ T24] usb 7-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 737.899081][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.920784][ T24] usb 7-1: config 0 descriptor?? [ 738.136735][T13104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.150274][T13118] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 738.179964][T13104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.292847][T12396] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 738.364427][T12412] usb 6-1: USB disconnect, device number 30 [ 738.466380][T12396] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 738.482854][T12396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.515421][T12396] usb 4-1: Product: syz [ 738.521996][T12396] usb 4-1: Manufacturer: syz [ 738.536518][T12396] usb 4-1: SerialNumber: syz [ 738.612571][ T24] usb 7-1: string descriptor 0 read error: -71 [ 738.635832][ T24] uclogic 0003:5543:006E.0019: failed retrieving string descriptor #200: -71 [ 738.688533][ T24] uclogic 0003:5543:006E.0019: failed retrieving pen parameters: -71 [ 738.696654][ T24] uclogic 0003:5543:006E.0019: failed probing pen v2 parameters: -71 [ 738.778079][ T24] uclogic 0003:5543:006E.0019: failed probing parameters: -71 [ 738.824938][ T24] uclogic 0003:5543:006E.0019: probe with driver uclogic failed with error -71 [ 738.883136][ T24] usb 7-1: USB disconnect, device number 6 [ 739.310334][T13115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.331227][T13115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.691119][T10333] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 740.188499][T10333] usb 7-1: Using ep0 maxpacket: 16 [ 740.197623][T10333] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 740.209970][T10333] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 740.222041][T10333] usb 7-1: config 0 interface 0 has no altsetting 0 [ 740.232268][T10333] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 740.243461][T10333] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.251937][T10333] usb 7-1: Product: syz [ 740.256414][T10333] usb 7-1: Manufacturer: syz [ 740.264133][T10333] usb 7-1: SerialNumber: syz [ 740.270886][T13145] netlink: 'syz.5.1908': attribute type 1 has an invalid length. [ 740.281228][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1908'. [ 740.335280][T13145] gretap1: entered promiscuous mode [ 740.368615][T10333] usb 7-1: config 0 descriptor?? [ 740.421207][T13143] macvlan2: entered promiscuous mode [ 740.426725][T13143] macvlan2: entered allmulticast mode [ 740.596558][T13131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.633490][T13131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.661892][T10333] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input68 [ 740.994528][T13131] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1912'. [ 741.086601][T10333] usb 7-1: USB disconnect, device number 7 [ 741.102046][ T9760] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 741.115419][T12396] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 741.184917][T12396] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 741.412261][T12396] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 741.448683][T12396] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 742.147229][T12396] usb 4-1: USB disconnect, device number 108 [ 742.431684][T13174] fuse: Bad value for 'fd' [ 742.509627][T13176] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1921'. [ 742.768906][ T5910] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 742.949249][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 742.970955][ T5910] usb 5-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 743.030439][ T5910] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 743.048793][T12411] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 743.125021][ T5910] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 743.193753][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.198528][T12411] usb 4-1: device descriptor read/64, error -71 [ 743.209888][ T5910] usb 5-1: Product: syz [ 743.218183][ T5910] usb 5-1: Manufacturer: syz [ 743.305377][ T5910] usb 5-1: SerialNumber: syz [ 743.335655][ T5910] usb 5-1: config 0 descriptor?? [ 743.418645][T12412] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 743.470624][T12411] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 743.531083][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 743.569431][T12412] usb 6-1: Using ep0 maxpacket: 32 [ 743.576013][T12412] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 743.599745][T12412] usb 6-1: config 0 has no interface number 0 [ 743.601352][T13176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.615448][T12411] usb 4-1: device descriptor read/64, error -71 [ 743.617987][T13176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.621958][T12412] usb 6-1: config 0 interface 12 has no altsetting 0 [ 743.639971][T12412] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 743.649146][T12412] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.657347][T12412] usb 6-1: Product: syz [ 743.675662][T12412] usb 6-1: Manufacturer: syz [ 743.681549][T12412] usb 6-1: SerialNumber: syz [ 743.696305][T12412] usb 6-1: config 0 descriptor?? [ 743.718470][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 743.732570][ T24] usb 7-1: config 0 has an invalid interface number: 49 but max is 1 [ 743.741542][T12411] usb usb4-port1: attempt power cycle [ 743.751288][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 743.762548][ T24] usb 7-1: config 0 has no interface number 0 [ 743.784545][ T24] usb 7-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 743.795420][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.809456][ T24] usb 7-1: config 0 descriptor?? [ 744.040879][T13198] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 744.098871][T12411] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 744.119247][T12411] usb 4-1: device descriptor read/8, error -71 [ 744.198928][ T24] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 744.428521][T12411] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 744.450545][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 744.462938][T12411] usb 4-1: device descriptor read/8, error -71 [ 744.469383][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 744.502567][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 744.541830][ T24] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 744.589980][T12411] usb usb4-port1: unable to enumerate USB device [ 744.601411][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.648032][ T24] usb 2-1: Product: syz [ 744.667373][ T24] usb 2-1: Manufacturer: syz [ 744.692133][ T24] usb 2-1: SerialNumber: syz [ 744.736232][ T24] usb 2-1: config 0 descriptor?? [ 744.808622][T13214] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 744.815969][T13214] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 744.830930][ T24] usb 2-1: ucan: probing device on interface #0 [ 745.001249][T13196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.012334][T13196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.026107][T12412] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 745.037857][T12412] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 745.052743][T12412] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 745.061805][T12412] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 745.083796][T12412] usb 6-1: USB disconnect, device number 31 [ 745.309321][ T24] usb 2-1: ucan: failed to retrieve device info [ 745.326413][ T24] usb 2-1: ucan: probe failed; try to update the device firmware [ 745.345333][ T24] usb 2-1: USB disconnect, device number 121 [ 746.014617][ T1556] usb 5-1: USB disconnect, device number 105 [ 746.362076][ T24] usb 7-1: USB disconnect, device number 8 [ 746.408521][T12396] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 746.458017][T10333] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 746.479311][ T5910] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 746.514743][T10333] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 746.538498][T12396] usb 2-1: device descriptor read/64, error -71 [ 746.768503][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 746.780299][ T5910] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 746.798467][ T5910] usb 4-1: config 8 has no interface number 0 [ 746.804738][ T5910] usb 4-1: config 8 interface 39 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 521 [ 746.828803][ T5910] usb 4-1: config 8 interface 39 has no altsetting 0 [ 746.842406][ T5910] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 746.858589][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.868502][T12396] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 746.886532][ T5910] usb 4-1: Product: syz [ 746.891405][ T5910] usb 4-1: Manufacturer: syz [ 746.908083][ T5910] usb 4-1: SerialNumber: syz [ 746.922808][T13268] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 746.963647][T13273] hid-generic 0000:0000:0000.001A: pid 13273 passed too short report [ 746.974503][T13273] netlink: 'syz.6.1936': attribute type 1 has an invalid length. [ 747.008495][T12396] usb 2-1: device descriptor read/64, error -71 [ 747.041394][T13273] bond1 (unregistering): Released all slaves [ 747.092087][T13282] netlink: 'syz.5.1937': attribute type 1 has an invalid length. [ 747.092874][T13283] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1936'. [ 747.112031][T13282] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1937'. [ 747.124448][T12396] usb usb2-port1: attempt power cycle [ 747.168036][T13282] bond3 (unregistering): Released all slaves [ 747.223630][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.240032][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.488465][T12396] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 747.509127][T12396] usb 2-1: device descriptor read/8, error -71 [ 747.578899][ T30] audit: type=1326 audit(1761204767.403:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13292 comm="syz.6.1941" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb00d98efc9 code=0x0 [ 747.686017][T13302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.695323][T13302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.704422][T13302] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1944'. [ 747.705283][T13303] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1944'. [ 747.714308][T13302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1944'. [ 747.733826][T13303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1944'. [ 747.768587][T12396] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 747.778479][ T1556] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 747.800479][T12396] usb 2-1: device descriptor read/8, error -71 [ 747.913424][T12396] usb usb2-port1: unable to enumerate USB device [ 747.928588][T10333] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 747.962244][ T1556] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 747.971831][ T1556] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.980356][ T1556] usb 6-1: Product: syz [ 747.984924][ T1556] usb 6-1: Manufacturer: syz [ 747.992194][ T1556] usb 6-1: SerialNumber: syz [ 748.010088][ T1556] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 748.031104][T12396] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 748.108584][T10333] usb 5-1: Using ep0 maxpacket: 16 [ 748.116864][T10333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.130376][T10333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.142003][T10333] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 748.151732][T10333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.170771][T10333] usb 5-1: config 0 descriptor?? [ 748.254704][T13294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.272208][T13294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.294891][T13294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.304398][T13294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.629962][ T5909] usb 6-1: USB disconnect, device number 32 [ 748.788520][ T1556] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 748.944801][ T1556] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 748.953860][ T1556] usb 7-1: config 179 has no interface number 0 [ 748.960945][ T1556] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 748.975122][ T1556] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 748.985820][ T1556] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 748.998111][ T1556] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 749.010723][ T1556] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 749.027060][ T5910] ipheth 4-1:8.39: Unable to find endpoints [ 749.033720][ T1556] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 749.051479][ T5910] usb 4-1: USB disconnect, device number 113 [ 749.057917][ T1556] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.070059][T12396] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 749.079690][T12396] ath9k_htc: Failed to initialize the device [ 749.093568][ T5909] usb 6-1: ath9k_htc: USB layer deinitialized [ 749.111269][T13306] raw-gadget.7 gadget.6: fail, usb_ep_enable returned -22 [ 749.133874][ T1556] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 749.178603][ T1556] xpad 7-1:179.65: probe with driver xpad failed with error -90 [ 749.332428][ T1556] usb 7-1: USB disconnect, device number 9 [ 749.397054][T13314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.408112][T13314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.533516][T10333] usbhid 5-1:0.0: can't add hid device: -71 [ 749.549787][T10333] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 749.567424][T10333] usb 5-1: USB disconnect, device number 106 [ 749.610364][ T5910] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 749.648612][T12398] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 749.678455][ T5909] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 749.770413][ T5910] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 749.787496][ T5910] usb 4-1: config 5 has no interface number 0 [ 749.794314][ T5910] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 749.807187][ T5910] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 749.827713][T13312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.841142][T12398] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.852470][T13312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.878478][T12398] usb 2-1: config 0 interface 0 has no altsetting 0 [ 749.885291][ T5910] usb 4-1: config 5 interface 123 has no altsetting 0 [ 749.899229][T12398] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 749.913167][ T5910] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 749.942268][T12398] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.968585][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.976766][T12398] usb 2-1: Product: syz [ 749.982965][ T5910] usb 4-1: Product: syz [ 749.987291][T12398] usb 2-1: Manufacturer: syz [ 749.992242][ T5910] usb 4-1: Manufacturer: syz [ 749.996910][ T5910] usb 4-1: SerialNumber: syz [ 750.004446][T13321] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 750.012303][T13321] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 750.020102][T12398] usb 2-1: SerialNumber: syz [ 750.038959][T12398] usb 2-1: config 0 descriptor?? [ 750.064478][T12398] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 750.083716][T12398] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 750.109606][T12398] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 750.118677][T12398] usb 2-1: media controller created [ 750.151800][T12398] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 750.235972][T12398] DVB: Unable to find symbol tda10046_attach() [ 750.242567][T12398] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 750.269865][ T5910] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device. [ 750.278918][T12398] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 750.289679][ T30] audit: type=1326 audit(1761204770.103:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.4.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4db8efc9 code=0x7ffc0000 [ 750.322667][ T5910] usb 4-1: USB disconnect, device number 114 [ 750.346523][ T30] audit: type=1326 audit(1761204770.103:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.4.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f2e4db8efc9 code=0x7ffc0000 [ 750.401101][ T30] audit: type=1326 audit(1761204770.103:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.4.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4db8efc9 code=0x7ffc0000 [ 750.431579][ T30] audit: type=1326 audit(1761204770.103:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.4.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f2e4db8efc9 code=0x7ffc0000 [ 751.108512][ T5910] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 751.264498][T13349] syzkaller0: entered promiscuous mode [ 751.270502][T13349] syzkaller0: entered allmulticast mode [ 751.279459][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 751.287892][ T5910] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.303939][ T5910] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.320074][ T5910] usb 4-1: config 0 interface 0 has no altsetting 0 [ 751.327054][ T5910] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 751.337386][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.353783][ T5910] usb 4-1: config 0 descriptor?? [ 751.816046][ T5910] cougar 0003:060B:500A.001B: unexpected long global item [ 751.833965][ T5910] cougar 0003:060B:500A.001B: parse failed [ 751.840510][ T5910] cougar 0003:060B:500A.001B: probe with driver cougar failed with error -22 [ 751.879943][T12398] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 751.905772][T12398] usb 2-1: USB disconnect, device number 126 [ 751.982972][T13343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.996049][T13343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.045837][T12411] usb 4-1: USB disconnect, device number 115 [ 752.509871][T13366] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1960'. [ 753.558554][ T24] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 753.732602][ T24] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 753.753143][ T24] usb 4-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 0 [ 753.795518][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 753.820771][ T24] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 753.848452][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.883777][ T24] usb 4-1: Product: syz [ 753.896966][ T24] usb 4-1: Manufacturer: syz [ 753.916193][ T24] usb 4-1: SerialNumber: syz [ 753.946921][ T24] usb 4-1: config 0 descriptor?? [ 753.971579][ T24] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 753.996836][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 754.038137][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 754.088533][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 754.096243][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 754.115263][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 754.127957][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 754.142316][ T24] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 754.151683][T13391] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1970'. [ 754.162270][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 754.178891][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 754.186986][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 754.197894][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 754.225175][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 754.243675][ T24] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 754.248545][ T5909] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 754.263589][ T24] usb 4-1: USB disconnect, device number 116 [ 754.332636][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 754.358888][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 754.372131][ T24] keyspan 4-1:0.0: device disconnected [ 754.462456][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 754.660052][ T5909] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 754.669098][ T5909] usb 2-1: config 0 has no interface number 0 [ 754.937917][ T5909] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 754.942249][T13404] netlink: 'syz.6.1972': attribute type 1 has an invalid length. [ 755.073589][ T5909] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 755.146014][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.170284][T13404] geneve0: entered promiscuous mode [ 755.179814][T13404] geneve0: entered allmulticast mode [ 755.187673][ T5909] usb 2-1: Product: syz [ 755.263855][T13404] bond1 (unregistering): Released all slaves [ 755.333527][ T5909] usb 2-1: Manufacturer: syz [ 755.352442][ T5909] usb 2-1: SerialNumber: syz [ 755.360558][ T5909] usb 2-1: config 0 descriptor?? [ 755.374199][ T5909] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 755.385320][ T5909] em28xx 2-1:0.132: Video interface 132 found: [ 755.881883][ T5909] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 756.015656][T13415] 8021q: VLANs not supported on vxcan1 [ 756.021903][T13414] 8021q: VLANs not supported on vxcan1 [ 756.244331][ T5909] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 756.267347][ T5909] em28xx 2-1:0.132: board has no eeprom [ 756.329847][ T5909] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 756.760780][ T5909] em28xx 2-1:0.132: analog set to bulk mode. [ 756.779682][T13422] kvm: Disabled LAPIC found during irq injection [ 757.146010][T12396] em28xx 2-1:0.132: Registering V4L2 extension [ 757.193077][T13432] loop6: detected capacity change from 0 to 2640 [ 757.240312][ T5909] usb 2-1: USB disconnect, device number 127 [ 757.283566][ T5909] em28xx 2-1:0.132: Disconnecting em28xx [ 757.306802][T13432] Buffer I/O error on dev loop6, logical block 0, async page read [ 757.387024][T13432] Buffer I/O error on dev loop6, logical block 0, async page read [ 757.435114][T13432] Buffer I/O error on dev loop6, logical block 0, async page read [ 757.478929][T13432] Buffer I/O error on dev loop6, logical block 0, async page read [ 757.488488][T13432] Buffer I/O error on dev loop6, logical block 0, async page read [ 757.496616][T13432] Buffer I/O error on dev loop6, logical block 0, async page read [ 757.522829][T13432] Buffer I/O error on dev loop6, logical block 0, async page read [ 757.648558][T12396] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 757.659964][T12396] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 757.660099][T13432] Buffer I/O error on dev loop6, logical block 0, async page read [ 757.667102][T12396] em28xx 2-1:0.132: No AC97 audio processor [ 757.751765][T12396] usb 2-1: Decoder not found [ 757.768203][T12396] em28xx 2-1:0.132: failed to create media graph [ 757.788143][T13432] ldm_validate_partition_table(): Disk read failed. [ 757.806293][T12396] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 757.869514][T12396] em28xx 2-1:0.132: Remote control support is not available for this card. [ 757.963598][ T5909] em28xx 2-1:0.132: Closing input extension [ 758.008789][ T5909] em28xx 2-1:0.132: Freeing device [ 758.018222][T13432] Buffer I/O error on dev loop6, logical block 0, async page read [ 758.069919][T13432] Buffer I/O error on dev loop6, logical block 0, async page read [ 758.116837][T13432] Dev loop6: unable to read RDB block 0 [ 758.167584][T13432] loop6: unable to read partition table [ 758.202444][T13432] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 758.262165][ T5198] ldm_validate_partition_table(): Disk read failed. [ 758.285351][ T5198] Dev loop6: unable to read RDB block 0 [ 758.297973][ T5198] loop6: unable to read partition table [ 758.618491][T12398] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 758.783056][T12398] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.801536][T12398] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 758.810733][T12398] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.824123][T12398] usb 7-1: config 0 descriptor?? [ 758.877927][T12412] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 758.902492][T12398] pwc: Askey VC010 type 2 USB webcam detected. [ 759.038489][T12412] usb 6-1: Using ep0 maxpacket: 16 [ 759.060084][T12412] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 759.076771][T12412] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 759.094709][T12412] usb 6-1: config 0 interface 0 has no altsetting 0 [ 759.105569][T12412] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 759.147908][T12412] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.198974][T12412] usb 6-1: Product: syz [ 759.203263][T12412] usb 6-1: Manufacturer: syz [ 759.207974][T12412] usb 6-1: SerialNumber: syz [ 759.343574][T12412] usb 6-1: config 0 descriptor?? [ 759.370513][T13448] loop2: detected capacity change from 0 to 7 [ 759.377862][T13448] Dev loop2: unable to read RDB block 7 [ 759.386847][T13448] loop2: unable to read partition table [ 759.429513][T13448] loop2: partition table beyond EOD, truncated [ 759.435774][T13448] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 759.479509][T12398] pwc: recv_control_msg error -32 req 02 val 2b00 [ 759.503104][T12398] pwc: recv_control_msg error -32 req 02 val 2700 [ 759.519026][T12398] pwc: recv_control_msg error -32 req 02 val 2c00 [ 759.526237][T12398] pwc: recv_control_msg error -32 req 04 val 1000 [ 759.534142][T12398] pwc: recv_control_msg error -32 req 04 val 1300 [ 759.542004][T12398] pwc: recv_control_msg error -32 req 04 val 1400 [ 759.549450][T12398] pwc: recv_control_msg error -32 req 02 val 2000 [ 759.557916][T12398] pwc: recv_control_msg error -32 req 02 val 2100 [ 759.565836][T13459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.574750][T12398] pwc: recv_control_msg error -32 req 04 val 1500 [ 759.579043][T13459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.592587][T12398] pwc: recv_control_msg error -32 req 02 val 2500 [ 759.613035][T12412] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input69 [ 759.809762][T12398] pwc: recv_control_msg error -71 req 02 val 2600 [ 759.816207][T13459] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1984'. [ 759.828626][T12398] pwc: recv_control_msg error -71 req 02 val 2900 [ 759.846029][T12398] pwc: recv_control_msg error -71 req 02 val 2800 [ 759.866562][T12398] pwc: recv_control_msg error -71 req 04 val 1100 [ 759.886979][T12412] usb 6-1: USB disconnect, device number 34 [ 759.897027][T12398] pwc: recv_control_msg error -71 req 04 val 1200 [ 759.925458][T12398] pwc: Registered as video103. [ 759.957069][T12398] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input70 [ 759.993634][T12398] usb 7-1: USB disconnect, device number 10 [ 760.539403][T13489] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1992'. [ 760.668497][T12412] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 760.909773][T13495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1990'. [ 760.920489][T13495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1990'. [ 762.538485][T12396] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 762.637030][T13523] tipc: Started in network mode [ 762.642386][T13523] tipc: Node identity deecd391d0b6, cluster identity 4711 [ 762.649766][T13523] tipc: Enabled bearer , priority 0 [ 762.657490][T13523] syzkaller0: entered promiscuous mode [ 762.665065][T13523] syzkaller0: entered allmulticast mode [ 762.678743][T13523] tipc: Resetting bearer [ 762.686283][T13522] tipc: Resetting bearer [ 762.704674][T13522] tipc: Disabling bearer [ 762.710240][T12396] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 762.724871][T12396] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 762.745716][T12396] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 762.755374][T12396] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 762.758484][T12412] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 762.767877][T12396] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 762.789972][T12396] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 762.799457][T12396] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 762.807462][T12396] usb 6-1: Product: syz [ 762.813334][T12396] usb 6-1: Manufacturer: syz [ 762.825150][T12396] cdc_wdm 6-1:1.0: skipping garbage [ 762.828542][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 762.834638][T12396] cdc_wdm 6-1:1.0: skipping garbage [ 762.845547][T12396] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 762.853165][T12396] cdc_wdm 6-1:1.0: Unknown control protocol [ 762.878545][ T5909] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 762.938695][T12412] usb 5-1: device descriptor read/64, error -71 [ 763.008653][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 763.015412][ T24] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 763.028500][ T5909] usb 4-1: device descriptor read/64, error -71 [ 763.038615][ T24] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 763.050357][ T24] usb 2-1: config 8 has no interface number 0 [ 763.056481][ T24] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 763.088346][ T24] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 763.100351][ T24] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 763.110525][ T24] usb 2-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0 [ 763.121386][ T24] usb 2-1: config 8 interface 206 has no altsetting 0 [ 763.130526][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 763.141465][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.150131][ T24] usb 2-1: Product: syz [ 763.154299][ T24] usb 2-1: Manufacturer: syz [ 763.159348][ T24] usb 2-1: SerialNumber: syz [ 763.178558][T12412] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 763.228729][T12398] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 763.278550][ T5909] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 763.308761][T12412] usb 5-1: device descriptor read/64, error -71 [ 763.370612][T13518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.380296][T13518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.388872][T12398] usb 7-1: Using ep0 maxpacket: 8 [ 763.396470][T12398] usb 7-1: unable to get BOS descriptor or descriptor too short [ 763.401884][ T24] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 763.408875][T12398] usb 7-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 24929, setting to 1024 [ 763.423164][ T5909] usb 4-1: device descriptor read/64, error -71 [ 763.428924][T12412] usb usb5-port1: attempt power cycle [ 763.429557][T12398] usb 7-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024 [ 763.445555][T12398] usb 7-1: config 8 interface 0 has no altsetting 0 [ 763.454467][ T24] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 763.457824][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -EPIPE [ 763.465614][ T24] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 763.476054][T12398] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 763.490001][T12398] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.491645][ T24] usb 2-1: USB disconnect, device number 2 [ 763.498046][T12398] usb 7-1: Product: syz [ 763.508793][T12398] usb 7-1: Manufacturer: syz [ 763.513434][T12398] usb 7-1: SerialNumber: syz [ 763.527573][ T24] garmin_gps 2-1:8.206: device disconnected [ 763.530240][T13527] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 763.541482][ T5909] usb usb4-port1: attempt power cycle [ 763.666368][T12411] usb 6-1: USB disconnect, device number 35 [ 763.756669][T12398] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 763.764202][T12398] usb 7-1: selecting invalid altsetting 0 [ 763.779009][T12412] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 763.793817][T12398] usb 7-1: USB disconnect, device number 12 [ 763.813626][T12412] usb 5-1: device descriptor read/8, error -71 [ 763.837625][ T9750] udevd[9750]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 763.888525][ T5909] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 763.909137][ T5909] usb 4-1: device descriptor read/8, error -71 [ 764.067927][T13532] trusted_key: encrypted_key: insufficient parameters specified [ 764.098948][T12412] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 764.135058][T12412] usb 5-1: device descriptor read/8, error -71 [ 764.148560][ T5909] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 764.169642][ T5909] usb 4-1: device descriptor read/8, error -71 [ 764.251639][T12412] usb usb5-port1: unable to enumerate USB device [ 764.278859][ T5909] usb usb4-port1: unable to enumerate USB device [ 764.412553][ T30] audit: type=1326 audit(1761204784.223:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13542 comm="syz.6.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00d98efc9 code=0x7ffc0000 [ 764.435928][ T30] audit: type=1326 audit(1761204784.233:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13542 comm="syz.6.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fb00d98efc9 code=0x7ffc0000 [ 764.474570][ T30] audit: type=1326 audit(1761204784.233:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13542 comm="syz.6.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00d98efc9 code=0x7ffc0000 [ 764.497877][ T30] audit: type=1326 audit(1761204784.233:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13542 comm="syz.6.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb00d98efc9 code=0x7ffc0000 [ 764.524032][ T30] audit: type=1326 audit(1761204784.233:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13542 comm="syz.6.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb00d98f003 code=0x7ffc0000 [ 764.549994][ T30] audit: type=1326 audit(1761204784.233:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13542 comm="syz.6.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb00d98f003 code=0x7ffc0000 [ 764.572988][ T30] audit: type=1326 audit(1761204784.233:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13542 comm="syz.6.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00d98efc9 code=0x7ffc0000 [ 764.596035][ T30] audit: type=1326 audit(1761204784.233:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13542 comm="syz.6.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00d98efc9 code=0x7ffc0000 [ 764.620865][ T30] audit: type=1326 audit(1761204784.233:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13542 comm="syz.6.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00d98efc9 code=0x7ffc0000 [ 764.644479][ T30] audit: type=1326 audit(1761204784.233:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13542 comm="syz.6.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb00d98efc9 code=0x7ffc0000 [ 764.668702][ T9868] Bluetooth: hci5: command 0x0406 tx timeout [ 765.018518][T12396] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 765.171108][T12396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 765.182719][T12396] usb 6-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 765.197404][T12396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.210158][T12396] usb 6-1: config 0 descriptor?? [ 765.558583][T12412] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 765.631895][T12396] logitech 0003:046D:C295.001C: ignoring exceeding usage max [ 765.650026][T12396] logitech 0003:046D:C295.001C: ignoring exceeding usage max [ 765.665984][T12396] logitech 0003:046D:C295.001C: usage index exceeded [ 765.675742][T12396] logitech 0003:046D:C295.001C: item 0 0 2 2 parsing failed [ 765.681827][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 765.684630][T12396] logitech 0003:046D:C295.001C: parse failed [ 765.697704][T12396] logitech 0003:046D:C295.001C: probe with driver logitech failed with error -22 [ 765.728681][T12412] usb 7-1: Using ep0 maxpacket: 16 [ 765.740500][T12412] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.759338][T12412] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.808465][T12412] usb 7-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 765.817590][T12412] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.838912][T12412] usb 7-1: config 0 descriptor?? [ 765.851812][T13574] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2019'. [ 765.852128][T12412] usbhid 7-1:0.0: can't add hid device: -22 [ 765.866923][T12412] usbhid 7-1:0.0: probe with driver usbhid failed with error -22 [ 765.891753][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.904000][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.916445][ T24] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 765.926226][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.944550][ T24] usb 2-1: config 0 descriptor?? [ 766.050396][ T5909] usb 7-1: USB disconnect, device number 13 [ 766.051413][T12411] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 766.221022][T12411] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 766.231371][T12411] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 766.246364][T12411] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 766.256298][T12411] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 766.264397][T12411] usb 4-1: Manufacturer: syz [ 766.273931][T12411] usb 4-1: config 0 descriptor?? [ 766.389511][ T24] uclogic 0003:5543:0042.001D: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.1-1/input0 [ 766.487228][ T5909] usb 4-1: USB disconnect, device number 121 [ 766.652564][ T24] usb 2-1: USB disconnect, device number 3 [ 767.201857][T13595] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 767.528646][ T24] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 767.658800][ T5909] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 767.695332][T12398] usb 6-1: USB disconnect, device number 36 [ 767.698452][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 767.723706][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.734572][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 767.775553][ T24] usb 5-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 767.788579][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.788734][T12396] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 767.796932][ T24] usb 5-1: Product: syz [ 767.837602][ T24] usb 5-1: Manufacturer: syz [ 767.871141][ T5909] usb 2-1: config 0 has no interfaces? [ 767.876669][ T5909] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 767.886805][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.886881][ T24] usb 5-1: SerialNumber: syz [ 767.941570][ T24] usb 5-1: config 0 descriptor?? [ 767.958153][ T5909] usb 2-1: config 0 descriptor?? [ 768.020233][T12396] usb 4-1: Using ep0 maxpacket: 16 [ 768.181830][ T5909] usb 2-1: USB disconnect, device number 4 [ 768.478349][T13609] netlink: 'syz.5.2028': attribute type 10 has an invalid length. [ 768.748352][T13609] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 769.379005][ T24] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 769.540873][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.554034][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 769.570598][ T24] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 769.708789][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.726263][ T24] usb 7-1: config 0 descriptor?? [ 769.783832][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 769.791577][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 769.804578][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 769.871625][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 769.924021][ T24] usb 7-1: media controller created [ 769.945593][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 770.032701][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 770.057793][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 770.176972][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input72 [ 770.295657][T13639] program syz.1.2036 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 770.395228][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 770.427433][T12396] usb 4-1: unable to get BOS descriptor or descriptor too short [ 770.452133][T12396] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 770.458944][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 770.488503][T12396] usb 4-1: can't read configurations, error -71 [ 770.549786][ T24] usb 7-1: USB disconnect, device number 14 [ 770.561632][ T5909] usb 5-1: USB disconnect, device number 111 [ 770.652403][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 770.718525][T12411] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 770.752284][T13650] netlink: 340 bytes leftover after parsing attributes in process `syz.3.2041'. [ 770.752318][T13650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2041'. [ 770.752350][T13650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2041'. [ 770.978030][T12411] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 770.991004][T12411] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 771.063585][ T5909] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 771.215171][T13662] kvm: pic: non byte write [ 771.231553][ T5909] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 771.239743][ T5909] usb 5-1: config 0 has no interface number 0 [ 771.248487][ T24] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 771.249159][T10333] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 771.274210][ T5909] usb 5-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=51.8f [ 771.283850][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.301383][T12411] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 771.311682][ T5909] usb 5-1: Product: syz [ 771.316466][ T5909] usb 5-1: Manufacturer: syz [ 771.322259][ T5909] usb 5-1: SerialNumber: syz [ 771.326179][T12411] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 771.345428][ T5909] usb 5-1: config 0 descriptor?? [ 771.364458][T12411] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 771.477410][T10333] usb 7-1: Using ep0 maxpacket: 16 [ 771.510813][T10333] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 771.523962][T10333] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 771.533211][T10333] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.548886][T10333] usb 7-1: Product: syz [ 771.553073][T10333] usb 7-1: Manufacturer: syz [ 771.561526][T10333] usb 7-1: SerialNumber: syz [ 771.573151][ T5909] gspca_main: spca501-2.14.0 probing 040a:0002 [ 771.594336][T10333] usb 7-1: config 0 descriptor?? [ 771.604753][T13659] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 771.615539][T10333] mcba_usb 7-1:0.0: Can't find endpoints [ 771.638126][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.649309][T12411] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 771.668665][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.688591][ T24] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 771.702620][T12411] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 771.729999][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.743050][T12411] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 771.782857][T12411] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 771.798819][ T24] usb 6-1: config 0 descriptor?? [ 771.875616][T13659] netlink: 'syz.6.2040': attribute type 5 has an invalid length. [ 771.934200][T13664] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2040'. [ 771.954378][T13659] ip6erspan0: entered promiscuous mode [ 771.964435][T13664] bridge0: port 3(macsec0) entered blocking state [ 771.973970][T13664] bridge0: port 3(macsec0) entered disabled state [ 771.984824][T13664] macsec0: entered allmulticast mode [ 771.991106][T13664] veth1_macvtap: entered allmulticast mode [ 772.008013][T13664] macsec0: entered promiscuous mode [ 772.031229][T13664] bridge0: port 3(macsec0) entered blocking state [ 772.037851][T13664] bridge0: port 3(macsec0) entered forwarding state [ 772.078584][T12411] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 772.199964][T12411] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 772.255691][T12411] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 772.324576][ T24] arvo 0003:1E7D:30D4.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0 [ 772.339403][T12411] usb 2-1: string descriptor 0 read error: -22 [ 772.349441][T12411] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 772.384580][T12411] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.469144][T12411] adutux 2-1:168.0: interrupt endpoints not found [ 772.488624][T10333] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 772.598530][ T5909] gspca_spca501: reg write: error -71 [ 772.604298][ T5909] spca501 5-1:0.9: Reg write failed for 0x00,0x00,0x05 [ 772.612772][ T5909] spca501 5-1:0.9: probe with driver spca501 failed with error -22 [ 772.643856][T12411] usb 2-1: USB disconnect, device number 5 [ 772.658587][T10333] usb 4-1: Using ep0 maxpacket: 8 [ 772.689984][ T5909] usb 5-1: USB disconnect, device number 112 [ 772.712338][T10333] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 772.722363][T10333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.798254][T10333] usb 4-1: config 0 descriptor?? [ 773.170976][T10333] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 773.759326][T13673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2045'. [ 773.888538][T12411] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 774.003763][ T5909] usb 7-1: USB disconnect, device number 15 [ 774.104062][T12411] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 774.125207][T12411] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.156832][T12411] usb 2-1: Product: syz [ 774.170482][T12411] usb 2-1: Manufacturer: syz [ 774.184811][T12411] usb 2-1: SerialNumber: syz [ 774.223158][T12411] usb 2-1: config 0 descriptor?? [ 774.454944][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 774.454964][ T30] audit: type=1400 audit(1761204794.273:2696): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=13674 comm="syz.1.2046" [ 774.713907][ T30] audit: type=1326 audit(1761204794.533:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13674 comm="syz.1.2046" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f727f98efc9 code=0x0 [ 774.768171][T12411] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 774.807977][T12411] asix 2-1:0.0: probe with driver asix failed with error -71 [ 774.939204][T12411] usb 2-1: USB disconnect, device number 6 [ 775.006481][ T24] arvo 0003:1E7D:30D4.001E: couldn't init struct arvo_device [ 775.040434][ T24] arvo 0003:1E7D:30D4.001E: couldn't install keyboard [ 775.105377][ T24] arvo 0003:1E7D:30D4.001E: probe with driver arvo failed with error -71 [ 775.144057][ T24] usb 6-1: USB disconnect, device number 37 [ 775.223198][T13688] xt_bpf: check failed: parse error [ 775.271621][T10333] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 775.283551][T10333] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 775.304419][T10333] asix 4-1:0.0: probe with driver asix failed with error -71 [ 775.343946][T10333] usb 4-1: USB disconnect, device number 124 [ 775.598935][ T24] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 775.630907][T12398] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 775.761341][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 775.770740][ T24] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 775.788934][T12398] usb 5-1: Using ep0 maxpacket: 16 [ 775.796118][T12398] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.798432][ T24] usb 6-1: config 0 has no interface number 0 [ 775.807894][T12398] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.832732][T12398] usb 5-1: config 0 interface 0 has no altsetting 0 [ 775.839454][ T24] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0x2 has invalid maxpacket 1015, setting to 64 [ 775.839487][ T24] usb 6-1: config 0 interface 4 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 775.839507][ T24] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 775.839529][ T24] usb 6-1: config 0 interface 4 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 520 [ 775.888628][ T24] usb 6-1: New USB device found, idVendor=19d2, idProduct=0189, bcdDevice=9e.2b [ 775.917631][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.933157][ T24] usb 6-1: Product: syz [ 775.942352][ T24] usb 6-1: Manufacturer: syz [ 775.947685][ T24] usb 6-1: SerialNumber: syz [ 775.956675][ T24] usb 6-1: config 0 descriptor?? [ 775.969460][T13690] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 775.971658][T12398] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 776.025942][T12398] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.055580][T12398] usb 5-1: config 0 descriptor?? [ 776.180682][T12412] usb 6-1: USB disconnect, device number 38 [ 776.248566][ T24] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 776.398555][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 776.406891][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 776.432352][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 776.446597][ T24] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 776.465856][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.476774][ T24] usb 7-1: Product: syz [ 776.477908][T12398] nzxt-smart2 0003:1E71:2009.001F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 776.515568][ T24] usb 7-1: Manufacturer: syz [ 776.524782][ T24] usb 7-1: SerialNumber: syz [ 776.545080][ T24] usb 7-1: config 0 descriptor?? [ 776.563173][ T24] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 776.577750][ T24] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 776.668060][T12411] usb 5-1: USB disconnect, device number 113 [ 776.721938][T13713] fuse: blksize only supported for fuseblk [ 776.888557][T13704] @: renamed from vlan0 (while UP) [ 777.258491][T12398] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 777.448164][ T24] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 777.501933][T13720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.513031][T13720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 777.518500][T12398] usb 6-1: Using ep0 maxpacket: 16 [ 777.560446][T13720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.610375][T13720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 777.647668][ T24] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 777.656457][T12398] usb 6-1: config 0 has an invalid descriptor of length 56, skipping remainder of the config [ 777.698318][T12398] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 777.709794][ T24] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 777.744566][ T24] em28xx 7-1:0.0: No AC97 audio processor [ 777.771523][T12398] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 777.783665][T12398] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 777.792109][T12398] usb 6-1: Product: syz [ 777.796321][T12398] usb 6-1: Manufacturer: syz [ 777.801386][T12398] usb 6-1: SerialNumber: syz [ 777.861830][T12398] usb 6-1: config 0 descriptor?? [ 777.998591][T12412] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 778.199814][T12412] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 778.209110][T12412] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.229798][T12412] usb 2-1: config 0 descriptor?? [ 778.252079][T12412] cp210x 2-1:0.0: cp210x converter detected [ 778.561494][T13746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2062'. [ 778.728699][T12412] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 778.755690][T12412] usb 2-1: cp210x converter now attached to ttyUSB0 [ 778.803537][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.811797][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.950268][T12398] usb 2-1: USB disconnect, device number 7 [ 778.958997][T12398] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 778.984635][T12398] cp210x 2-1:0.0: device disconnected [ 779.018751][T12412] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 779.170173][T12412] usb 4-1: device descriptor read/64, error -71 [ 779.421268][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.464486][T12412] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 779.608511][T12412] usb 4-1: device descriptor read/64, error -71 [ 779.722503][T12412] usb usb4-port1: attempt power cycle [ 779.795571][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.803753][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.088593][T12412] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 780.109163][T12412] usb 4-1: device descriptor read/8, error -71 [ 780.228473][T10333] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 780.352086][T12412] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 780.368541][T10333] usb 5-1: device descriptor read/64, error -71 [ 780.388000][T12412] usb 4-1: device descriptor read/8, error -71 [ 780.501966][T12412] usb usb4-port1: unable to enumerate USB device [ 780.591521][T12398] usb 6-1: USB disconnect, device number 39 [ 780.628462][T10333] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 780.801785][T10333] usb 5-1: device descriptor read/64, error -71 [ 780.923402][T10333] usb usb5-port1: attempt power cycle [ 781.288555][T10333] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 781.319249][T10333] usb 5-1: device descriptor read/8, error -71 [ 781.496101][T13753] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2064'. [ 781.532628][T12398] usb 7-1: USB disconnect, device number 16 [ 781.550297][T12398] em28xx 7-1:0.0: Disconnecting em28xx [ 781.563940][T12398] em28xx 7-1:0.0: Freeing device [ 781.569145][T10333] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 781.589423][T10333] usb 5-1: device descriptor read/8, error -71 [ 781.718736][T10333] usb usb5-port1: unable to enumerate USB device [ 781.922476][T12395] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 781.951910][T12395] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 782.229577][T10333] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 782.400447][T10333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.452209][T10333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.481447][T10333] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 782.518489][T10333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.550299][T10333] usb 2-1: config 0 descriptor?? [ 783.038515][T12395] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 783.191463][T12395] usb 6-1: config 0 has an invalid interface number: 92 but max is 0 [ 783.200451][T12395] usb 6-1: config 0 has no interface number 0 [ 783.206667][T12395] usb 6-1: config 0 interface 92 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 783.238137][T12395] usb 6-1: config 0 interface 92 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 783.258612][T12395] usb 6-1: config 0 interface 92 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 783.292531][T12395] usb 6-1: config 0 interface 92 altsetting 0 endpoint 0x84 has invalid maxpacket 49879, setting to 1024 [ 783.420693][T12395] usb 6-1: config 0 interface 92 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 783.479037][T12396] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 783.536922][T12395] usb 6-1: New USB device found, idVendor=093b, idProduct=a005, bcdDevice= 9.81 [ 783.556769][T12395] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.619827][T12395] usb 6-1: config 0 descriptor?? [ 783.631521][T13797] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 783.645330][T12395] em28xx 6-1:0.92: New device @ 480 Mbps (093b:a005, interface 92, class 92) [ 783.679048][T12395] em28xx 6-1:0.92: DVB interface 92 found: isoc [ 783.690308][T12396] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 783.758728][T12396] usb 5-1: config 0 has no interface number 0 [ 783.798724][T12396] usb 5-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 783.820814][T12396] usb 5-1: config 0 interface 128 has no altsetting 0 [ 783.832949][T12396] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 783.842589][T12396] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.853084][T12396] usb 5-1: Product: syz [ 783.857967][T12396] usb 5-1: Manufacturer: syz [ 783.864165][T12396] usb 5-1: SerialNumber: syz [ 783.894600][T12396] usb 5-1: config 0 descriptor?? [ 783.913045][T12396] radio-si470x 5-1:0.128: could not find interrupt in endpoint [ 783.924353][T10333] usbhid 2-1:0.0: can't add hid device: -71 [ 783.947491][T10333] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 783.968502][T12396] radio-si470x 5-1:0.128: probe with driver radio-si470x failed with error -5 [ 783.993037][T10333] usb 2-1: USB disconnect, device number 8 [ 784.008869][T12396] usbhid 5-1:0.128: couldn't find an input interrupt endpoint [ 784.177009][T13805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2079'. [ 784.320813][T12412] usb 5-1: USB disconnect, device number 118 [ 784.403605][T13816] netlink: 'syz.3.2081': attribute type 16 has an invalid length. [ 784.468507][T10333] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 784.690563][T10333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.708687][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2086'. [ 784.726560][T10333] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 784.760470][T10333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.780377][T10333] usb 2-1: config 0 descriptor?? [ 784.799664][T12395] em28xx 6-1:0.92: unknown em28xx chip ID (0) [ 785.021927][T10333] usbhid 2-1:0.0: can't add hid device: -71 [ 785.048032][T10333] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 785.079310][T12395] em28xx 6-1:0.92: reading from i2c device at 0xa0 failed (error=-5) [ 785.089209][T12395] em28xx 6-1:0.92: board has no eeprom [ 785.120278][T10333] usb 2-1: USB disconnect, device number 9 [ 785.158756][T12395] em28xx 6-1:0.92: Identified as Plextor ConvertX PX-TV100U (card=40) [ 785.167128][T12395] em28xx 6-1:0.92: dvb set to isoc mode. [ 785.177576][T12412] em28xx 6-1:0.92: Remote control support is not available for this card. [ 785.211057][T13812] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 785.278491][T12396] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 785.358525][ T24] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 785.438529][T12396] usb 7-1: Using ep0 maxpacket: 16 [ 785.508489][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 785.519316][ T24] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 785.533984][ T24] usb 5-1: config 0 has no interface number 0 [ 785.555079][T10333] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 785.682937][ T24] usb 5-1: config 0 interface 184 has no altsetting 0 [ 785.711094][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 785.731817][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.758437][T10333] usb 2-1: Using ep0 maxpacket: 16 [ 785.765177][ T24] usb 5-1: Product: syz [ 785.773944][T10333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.793203][ T24] usb 5-1: Manufacturer: syz [ 785.802876][ T24] usb 5-1: SerialNumber: syz [ 785.817387][T12398] usb 6-1: USB disconnect, device number 40 [ 785.824291][ T24] usb 5-1: config 0 descriptor?? [ 785.825116][T12398] em28xx 6-1:0.92: Disconnecting em28xx [ 785.865450][T10333] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 785.875281][T12398] em28xx 6-1:0.92: Closing input extension [ 785.876779][ T24] smsc75xx v1.0.0 [ 785.928954][T10333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.944847][T12398] em28xx 6-1:0.92: Freeing device [ 785.955368][T10333] usb 2-1: config 0 descriptor?? [ 786.372873][T10333] kye 0003:0458:5016.0021: control desc unexpectedly large [ 786.399333][T10333] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0021/input/input73 [ 786.472645][T10333] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0021/input/input74 [ 786.670125][T10333] kye 0003:0458:5016.0021: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 786.925628][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 787.051386][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 787.063705][T12412] usb 2-1: USB disconnect, device number 10 [ 787.103827][T13857] netlink: 'syz.4.2092': attribute type 1 has an invalid length. [ 787.178419][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 787.201329][T13857] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2092'. [ 787.233885][T13851] fido_id[13851]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 787.260583][ T24] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 787.318751][ T24] usb 5-1: USB disconnect, device number 119 [ 787.437249][T13857] gretap1: entered promiscuous mode [ 787.553543][T13859] macvlan2: entered promiscuous mode [ 787.559171][T13859] macvlan2: entered allmulticast mode [ 787.569907][T13859] bond3: entered promiscuous mode [ 787.577698][T13859] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 787.632583][T13859] bond3: left promiscuous mode [ 787.915183][T12396] usb 7-1: unable to get BOS descriptor or descriptor too short [ 787.933386][T12396] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 787.968447][T12396] usb 7-1: can't read configurations, error -71 [ 808.662005][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.668332][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 846.578681][ T9868] Bluetooth: hci0: command 0x0406 tx timeout [ 850.530525][T13888] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2099'. [ 850.599775][ T24] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 850.698442][ T30] audit: type=1326 audit(1761204870.513:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.5.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d3b8efc9 code=0x7ffc0000 [ 850.753435][ T30] audit: type=1326 audit(1761204870.543:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.5.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f71d3b8efc9 code=0x7ffc0000 [ 850.759267][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 850.800870][ T30] audit: type=1326 audit(1761204870.543:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.5.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d3b8efc9 code=0x7ffc0000 [ 850.815033][ T24] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 850.830783][ T30] audit: type=1326 audit(1761204870.543:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.5.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f71d3b8efc9 code=0x7ffc0000 [ 850.854097][ T24] usb 7-1: config 179 has no interface number 0 [ 850.854179][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 850.854250][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 850.854302][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 850.854365][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 850.854432][ T24] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 850.854516][ T24] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 850.873315][T12396] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 850.938007][ T30] audit: type=1326 audit(1761204870.623:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.5.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d3b8efc9 code=0x7ffc0000 [ 850.941702][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.961114][ T30] audit: type=1326 audit(1761204870.623:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.5.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d3b8efc9 code=0x7ffc0000 [ 851.021509][T13883] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 851.028509][T12412] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 851.162399][T12396] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 851.171727][T12396] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.191157][T12396] usb 5-1: Product: syz [ 851.197856][T12396] usb 5-1: Manufacturer: syz [ 851.208500][T12396] usb 5-1: SerialNumber: syz [ 851.218722][T12412] usb 4-1: Using ep0 maxpacket: 8 [ 851.232516][T12412] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 851.248579][T12412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.248995][T12396] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 851.266023][T12412] usb 4-1: Product: syz [ 851.279185][T12412] usb 4-1: Manufacturer: syz [ 851.291554][T10333] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 851.293166][T12412] usb 4-1: SerialNumber: syz [ 851.306600][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input75 [ 851.372539][T12412] usb 4-1: config 0 descriptor?? [ 851.382490][T13898] netlink: 'syz.5.2103': attribute type 1 has an invalid length. [ 851.438163][T13898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 851.452629][T13900] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.456407][T12395] usb 7-1: USB disconnect, device number 20 [ 851.459833][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 851.459880][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 851.460387][T13900] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.512114][T13900] netlink: 'syz.5.2103': attribute type 2 has an invalid length. [ 851.520324][T13900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2103'. [ 851.533058][T13908] netlink: 'syz.1.2104': attribute type 1 has an invalid length. [ 851.544300][T13900] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 851.563742][T13903] netlink: 'syz.5.2103': attribute type 2 has an invalid length. [ 851.573009][T13903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2103'. [ 851.593657][T13909] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2104'. [ 851.811834][T13905] gretap1: entered promiscuous mode [ 851.926580][T13911] macvlan2: entered promiscuous mode [ 851.932233][T13911] macvlan2: entered allmulticast mode [ 851.952354][T13911] bond9: entered promiscuous mode [ 851.961665][T13911] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 852.076348][T13911] bond9: left promiscuous mode [ 852.173441][T13924] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2102'. [ 852.290332][T13926] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 852.296890][T13926] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 852.368638][T13926] vhci_hcd vhci_hcd.0: Device attached [ 852.377659][T10333] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 852.407763][T12412] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 852.410084][T10333] ath9k_htc: Failed to initialize the device [ 852.455310][ T24] usb 5-1: USB disconnect, device number 120 [ 852.472381][T12412] gspca_sunplus: reg_w_riv err -71 [ 852.480583][ T24] usb 5-1: ath9k_htc: USB layer deinitialized [ 852.492677][T12412] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 852.544465][T12412] usb 4-1: USB disconnect, device number 3 [ 852.612895][T12395] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 852.888496][T12412] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 853.039054][T13929] vhci_hcd: connection reset by peer [ 853.046070][ T7263] vhci_hcd: stop threads [ 853.051430][ T7263] vhci_hcd: release socket [ 853.055970][ T7263] vhci_hcd: disconnect device [ 853.061219][T12412] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.072075][T12412] usb 4-1: config 0 interface 0 has no altsetting 0 [ 853.080143][T12412] usb 4-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 853.138101][T12412] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.150611][T12412] usb 4-1: config 0 descriptor?? [ 853.568055][T12412] usbhid 4-1:0.0: can't add hid device: -32 [ 853.574432][T12412] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 853.702762][T13952] FAULT_INJECTION: forcing a failure. [ 853.702762][T13952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.747110][T13952] CPU: 0 UID: 0 PID: 13952 Comm: syz.5.2113 Not tainted syzkaller #0 PREEMPT(full) [ 853.747136][T13952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 853.747148][T13952] Call Trace: [ 853.747156][T13952] [ 853.747164][T13952] dump_stack_lvl+0x189/0x250 [ 853.747193][T13952] ? __pfx____ratelimit+0x10/0x10 [ 853.747214][T13952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 853.747236][T13952] ? __pfx__printk+0x10/0x10 [ 853.747263][T13952] ? __might_fault+0xb0/0x130 [ 853.747296][T13952] should_fail_ex+0x414/0x560 [ 853.747326][T13952] _copy_from_user+0x2d/0xb0 [ 853.747349][T13952] __sys_bpf+0x1e3/0x860 [ 853.747369][T13952] ? __pfx___sys_bpf+0x10/0x10 [ 853.747403][T13952] ? ksys_write+0x1e1/0x250 [ 853.747428][T13952] ? __pfx_ksys_write+0x10/0x10 [ 853.747456][T13952] __x64_sys_bpf+0x7c/0x90 [ 853.747480][T13952] do_syscall_64+0xfa/0xfa0 [ 853.747500][T13952] ? lockdep_hardirqs_on+0x9c/0x150 [ 853.747521][T13952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.747538][T13952] ? clear_bhb_loop+0x60/0xb0 [ 853.747559][T13952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.747575][T13952] RIP: 0033:0x7f71d3b8efc9 [ 853.747591][T13952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 853.747606][T13952] RSP: 002b:00007f71d49c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 853.747626][T13952] RAX: ffffffffffffffda RBX: 00007f71d3de5fa0 RCX: 00007f71d3b8efc9 [ 853.747639][T13952] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 853.747650][T13952] RBP: 00007f71d49c9090 R08: 0000000000000000 R09: 0000000000000000 [ 853.747662][T13952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.747671][T13952] R13: 00007f71d3de6038 R14: 00007f71d3de5fa0 R15: 00007f71d3f0fa28 [ 853.747697][T13952] [ 854.179532][T12412] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 854.358551][T12412] usb 7-1: Using ep0 maxpacket: 32 [ 854.365555][T12412] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.376904][T12412] usb 7-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 854.386048][T12412] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.396169][T12412] usb 7-1: config 0 descriptor?? [ 854.428721][T10333] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 854.568475][T10333] usb 6-1: device descriptor read/64, error -71 [ 854.808483][T10333] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 854.811704][T12412] asus 0003:048D:CE50.0022: item fetching failed at offset 6/7 [ 854.827079][T12412] asus 0003:048D:CE50.0022: Asus hid parse failed: -22 [ 854.835273][T12412] asus 0003:048D:CE50.0022: probe with driver asus failed with error -22 [ 854.948599][T10333] usb 6-1: device descriptor read/64, error -71 [ 855.013911][T13955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.030167][T13955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.046937][ T5909] usb 7-1: USB disconnect, device number 21 [ 855.059052][T10333] usb usb6-port1: attempt power cycle [ 855.418541][T10333] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 855.453862][T10333] usb 6-1: device descriptor read/8, error -71 [ 855.566585][T12412] usb 4-1: USB disconnect, device number 4 [ 855.678605][ T5909] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 855.708510][T10333] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 855.751895][T10333] usb 6-1: device descriptor read/8, error -71 [ 855.858784][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 855.913486][T10333] usb usb6-port1: unable to enumerate USB device [ 855.929234][ T5909] usb 2-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 855.945955][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.009522][ T5909] usb 2-1: Product: syz [ 856.014051][ T5909] usb 2-1: Manufacturer: syz [ 856.019359][ T5909] usb 2-1: SerialNumber: syz [ 856.029837][ T5909] usb 2-1: config 0 descriptor?? [ 856.045948][ T5909] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 856.124460][T13991] netlink: 'syz.6.2123': attribute type 10 has an invalid length. [ 856.161138][T13997] program syz.4.2124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 856.250574][T13979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.261415][T13979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.273752][T13979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.287758][T13979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.299952][T13979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.314229][T13979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.328450][T13979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.339983][T13979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.353418][T13979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.363472][T13991] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 856.388549][T13999] wg1: entered promiscuous mode [ 856.394168][T13999] wg1: entered allmulticast mode [ 856.411777][T13979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.549534][T12411] usb 2-1: USB disconnect, device number 11 [ 856.648506][ T5909] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 856.690591][T14004] program syz.3.2126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 856.808468][ T5909] usb 7-1: Using ep0 maxpacket: 32 [ 856.842871][ T5909] usb 7-1: config 0 has an invalid interface number: 217 but max is 0 [ 856.860095][ T5909] usb 7-1: config 0 has no interface number 0 [ 856.880450][ T5909] usb 7-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 856.898362][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.912329][ T5909] usb 7-1: Product: syz [ 856.967586][ T5909] usb 7-1: Manufacturer: syz [ 856.990991][ T5909] usb 7-1: SerialNumber: syz [ 857.007244][ T5909] usb 7-1: config 0 descriptor?? [ 857.025438][ T5909] ftdi_sio 7-1:0.217: FTDI USB Serial Device converter detected [ 857.034228][ T5909] usb 7-1: Detected SIO [ 857.043638][ T5909] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 857.946099][T12395] vhci_hcd: vhci_device speed not set [ 877.858429][ C0] sched: DL replenish lagged too much [ 962.808407][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 962.815403][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14008/1:b..l [ 962.823904][ C1] rcu: (detected by 1, t=10503 jiffies, g=85937, q=337 ncpus=2) [ 962.831647][ C1] task:syz.3.2128 state:R running task stack:26632 pid:14008 tgid:14007 ppid:5842 task_flags:0x40044c flags:0x00080000 [ 962.846452][ C1] Call Trace: [ 962.849744][ C1] [ 962.852695][ C1] __schedule+0x1798/0x4cc0 [ 962.857231][ C1] ? unwind_next_frame+0x19ae/0x2390 [ 962.862539][ C1] ? __pfx___schedule+0x10/0x10 [ 962.867397][ C1] ? arch_do_signal_or_restart+0xa0/0x790 [ 962.873128][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 962.879290][ C1] ? arch_stack_walk+0x110/0x150 [ 962.884240][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 962.889541][ C1] preempt_schedule_irq+0xb5/0x150 [ 962.894659][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 962.900392][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 962.906201][ C1] irqentry_exit+0x6f/0x90 [ 962.910618][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 962.916602][ C1] RIP: 0010:__read_once_word_nocheck+0x0/0x10 [ 962.922674][ C1] Code: e8 45 fd b1 00 48 ba 00 00 00 00 00 fc ff df e9 88 fc ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <48> 8b 07 e9 58 28 d5 09 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 [ 962.942284][ C1] RSP: 0018:ffffc9000caa6f70 EFLAGS: 00000202 [ 962.948361][ C1] RAX: ffffc9000caa7f01 RBX: ffffc9000caa7f40 RCX: 1ffff92001954e01 [ 962.956334][ C1] RDX: ffffffff90b03cca RSI: 0000000000000002 RDI: ffffc9000caa7f40 [ 962.964310][ C1] RBP: 1ffff92001954e0a R08: 0000000000000001 R09: ffffffff81738d25 [ 962.972283][ C1] R10: ffffc9000caa7098 R11: ffffffff81ac2cb0 R12: ffffc9000caa8000 [ 962.980263][ C1] R13: 1ffff92001954e0b R14: ffffc9000caa7048 R15: ffffc9000caa0000 [ 962.988248][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 962.994417][ C1] ? unwind_next_frame+0xa5/0x2390 [ 962.999538][ C1] unwind_next_frame+0xc3c/0x2390 [ 963.004571][ C1] ? unwind_next_frame+0xa5/0x2390 [ 963.009688][ C1] ? do_syscall_64+0x2bd/0xfa0 [ 963.014465][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 963.020625][ C1] arch_stack_walk+0x11c/0x150 [ 963.025398][ C1] ? do_syscall_64+0x2bd/0xfa0 [ 963.030176][ C1] stack_trace_save+0x9c/0xe0 [ 963.034859][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 963.040253][ C1] save_stack+0xf5/0x1f0 [ 963.044506][ C1] ? __pfx_save_stack+0x10/0x10 [ 963.049360][ C1] ? free_unref_folios+0xdb3/0x14f0 [ 963.054567][ C1] ? folios_put_refs+0x584/0x670 [ 963.059500][ C1] ? free_pages_and_swap_cache+0x277/0x520 [ 963.065308][ C1] ? tlb_flush_mmu+0x3a0/0x680 [ 963.070074][ C1] ? tlb_finish_mmu+0xc3/0x1d0 [ 963.074835][ C1] ? exit_mmap+0x444/0xb40 [ 963.079258][ C1] ? __mmput+0x118/0x430 [ 963.083501][ C1] ? exit_mm+0x1da/0x2c0 [ 963.087745][ C1] ? do_exit+0x648/0x2300 [ 963.092077][ C1] ? do_group_exit+0x21c/0x2d0 [ 963.096842][ C1] ? get_signal+0x1285/0x1340 [ 963.101513][ C1] ? arch_do_signal_or_restart+0xa0/0x790 [ 963.107234][ C1] ? exit_to_user_mode_loop+0x72/0x130 [ 963.112699][ C1] ? do_syscall_64+0x2bd/0xfa0 [ 963.117474][ C1] ? page_ext_put+0x97/0xc0 [ 963.121985][ C1] __reset_page_owner+0x71/0x1f0 [ 963.126932][ C1] free_unref_folios+0xdb3/0x14f0 [ 963.131975][ C1] ? folio_unqueue_deferred_split+0x93/0x230 [ 963.137964][ C1] folios_put_refs+0x584/0x670 [ 963.142741][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 963.148043][ C1] ? free_swap_cache+0x109/0x300 [ 963.152991][ C1] free_pages_and_swap_cache+0x277/0x520 [ 963.158636][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 963.164793][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 963.169957][ C1] ? tlb_table_flush+0x36d/0x410 [ 963.174906][ C1] tlb_flush_mmu+0x3a0/0x680 [ 963.179498][ C1] ? __pfx_down_write+0x10/0x10 [ 963.184360][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 963.188955][ C1] exit_mmap+0x444/0xb40 [ 963.193203][ C1] ? uprobe_clear_state+0x20f/0x290 [ 963.198588][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 963.203357][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 963.209013][ C1] ? __pfx_exit_aio+0x10/0x10 [ 963.213708][ C1] ? uprobe_clear_state+0x27c/0x290 [ 963.218917][ C1] __mmput+0x118/0x430 [ 963.222994][ C1] exit_mm+0x1da/0x2c0 [ 963.227077][ C1] ? __pfx_exit_mm+0x10/0x10 [ 963.231674][ C1] ? rcu_is_watching+0x15/0xb0 [ 963.236451][ C1] do_exit+0x648/0x2300 [ 963.240622][ C1] ? do_raw_spin_lock+0x121/0x290 [ 963.245653][ C1] ? __pfx_do_exit+0x10/0x10 [ 963.250272][ C1] do_group_exit+0x21c/0x2d0 [ 963.254869][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 963.260080][ C1] get_signal+0x1285/0x1340 [ 963.264609][ C1] arch_do_signal_or_restart+0xa0/0x790 [ 963.270167][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 963.276330][ C1] ? __se_sys_futex+0x36f/0x400 [ 963.281203][ C1] ? exit_to_user_mode_loop+0x40/0x130 [ 963.286673][ C1] exit_to_user_mode_loop+0x72/0x130 [ 963.291962][ C1] do_syscall_64+0x2bd/0xfa0 [ 963.296567][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 963.301775][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.307857][ C1] ? clear_bhb_loop+0x60/0xb0 [ 963.312541][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.318437][ C1] RIP: 0033:0x7fc6ea38efc9 [ 963.322851][ C1] RSP: 002b:00007fc6eb2bd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 963.331277][ C1] RAX: fffffffffffffe00 RBX: 00007fc6ea5e5fa8 RCX: 00007fc6ea38efc9 [ 963.339250][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc6ea5e5fa8 [ 963.347225][ C1] RBP: 00007fc6ea5e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 963.355307][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 963.363299][ C1] R13: 00007fc6ea5e6038 R14: 00007fc6ea70f940 R15: 00007fc6ea70fa28 [ 963.371309][ C1] [ 963.374341][ C1] rcu: rcu_preempt kthread starved for 10360 jiffies! g85937 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 963.385536][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 963.395506][ C1] rcu: RCU grace-period kthread stack dump: [ 963.401390][ C1] task:rcu_preempt state:R running task stack:27224 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 963.414889][ C1] Call Trace: [ 963.418177][ C1] [ 963.421112][ C1] __schedule+0x1798/0x4cc0 [ 963.425647][ C1] ? __lock_acquire+0xab9/0xd20 [ 963.430502][ C1] ? __pfx___schedule+0x10/0x10 [ 963.435374][ C1] ? schedule+0x91/0x360 [ 963.439626][ C1] schedule+0x165/0x360 [ 963.443788][ C1] schedule_timeout+0x12b/0x270 [ 963.448642][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 963.454011][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 963.459914][ C1] ? __pfx_process_timeout+0x10/0x10 [ 963.465212][ C1] ? prepare_to_swait_event+0x341/0x380 [ 963.470771][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 963.475644][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 963.480857][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 963.487038][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 963.492326][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 963.497539][ C1] ? finish_swait+0xcd/0x1f0 [ 963.502140][ C1] rcu_gp_kthread+0x99/0x390 [ 963.506748][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 963.511952][ C1] ? __kthread_parkme+0x7b/0x200 [ 963.516904][ C1] ? __kthread_parkme+0x1a1/0x200 [ 963.521950][ C1] kthread+0x711/0x8a0 [ 963.526036][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 963.531244][ C1] ? __pfx_kthread+0x10/0x10 [ 963.535853][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 963.541068][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 963.546279][ C1] ? __pfx_kthread+0x10/0x10 [ 963.550917][ C1] ret_from_fork+0x4bc/0x870 [ 963.555516][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 963.560638][ C1] ? __switch_to_asm+0x39/0x70 [ 963.565404][ C1] ? __switch_to_asm+0x33/0x70 [ 963.570168][ C1] ? __pfx_kthread+0x10/0x10 [ 963.574775][ C1] ret_from_fork_asm+0x1a/0x30 [ 963.579563][ C1] [ 963.582584][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 963.588912][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 963.597868][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 963.607934][ C1] RIP: 0010:stack_depot_save_flags+0x55/0x860 [ 963.614025][ C1] Code: 0f 83 48 01 00 00 41 89 d5 49 89 fe 89 4c 24 04 e8 20 d7 ea fc 41 89 c2 31 c0 45 85 d2 0f 84 f1 03 00 00 80 3d db 67 ec 14 00 <0f> 85 e4 03 00 00 43 8d 34 12 42 8d 2c d5 7b 71 f5 75 83 fe 04 72 [ 963.633635][ C1] RSP: 0018:ffffc90000a07cf8 EFLAGS: 00000246 [ 963.639715][ C1] RAX: 0000000000000000 RBX: 0000000000082801 RCX: 0000000000000001 [ 963.647684][ C1] RDX: 0000000000082801 RSI: 000000000000001e RDI: ffffc90000a07d60 [ 963.655656][ C1] RBP: ffffc90000a07f88 R08: 0000000000000003 R09: ffffffff81738d25 [ 963.663630][ C1] R10: 0000000000000017 R11: ffffffff81ac2cb0 R12: 0000000000000101 [ 963.671607][ C1] R13: 0000000000082820 R14: ffffc90000a07d60 R15: ffffc90000a07d60 [ 963.679585][ C1] FS: 0000000000000000(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 [ 963.688518][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 963.695107][ C1] CR2: 00007fcf86f1102b CR3: 000000005fcac000 CR4: 00000000003526f0 [ 963.703083][ C1] Call Trace: [ 963.706361][ C1] [ 963.709219][ C1] kasan_save_track+0x4f/0x80 [ 963.713910][ C1] ? kasan_save_track+0x3e/0x80 [ 963.718767][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 963.723793][ C1] ? kmem_cache_alloc_node_noprof+0x433/0x710 [ 963.729868][ C1] ? kmalloc_reserve+0xbd/0x290 [ 963.734728][ C1] ? __alloc_skb+0x142/0x2d0 [ 963.739322][ C1] ? synproxy_send_client_synack_ipv6+0x169/0xca0 [ 963.745740][ C1] ? nft_synproxy_eval_v6+0x36e/0x560 [ 963.751114][ C1] ? nft_synproxy_do_eval+0x3d7/0x570 [ 963.756486][ C1] ? nft_do_chain+0x40c/0x1920 [ 963.761253][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 963.766375][ C1] ? nf_hook_slow+0xc5/0x220 [ 963.770961][ C1] ? NF_HOOK+0x206/0x3a0 [ 963.775208][ C1] ? ip6_input+0x16a/0x270 [ 963.779631][ C1] ? NF_HOOK+0x30c/0x3a0 [ 963.783880][ C1] ? __netif_receive_skb+0xd3/0x380 [ 963.789081][ C1] ? process_backlog+0x60e/0x14f0 [ 963.794114][ C1] ? __napi_poll+0xc7/0x360 [ 963.798618][ C1] ? net_rx_action+0x5f7/0xdf0 [ 963.803388][ C1] ? handle_softirqs+0x286/0x870 [ 963.808331][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 963.813097][ C1] ? irq_exit_rcu+0x9/0x30 [ 963.817514][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 963.823320][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 963.829481][ C1] ? pv_native_safe_halt+0x13/0x20 [ 963.834598][ C1] ? default_idle+0x13/0x20 [ 963.839105][ C1] ? default_idle_call+0x73/0xb0 [ 963.844045][ C1] ? do_idle+0x1e7/0x510 [ 963.848289][ C1] ? cpu_startup_entry+0x44/0x60 [ 963.853225][ C1] ? start_secondary+0x101/0x110 [ 963.858166][ C1] ? common_startup_64+0x13e/0x147 [ 963.863318][ C1] __kasan_slab_alloc+0x6c/0x80 [ 963.868182][ C1] kmem_cache_alloc_node_noprof+0x433/0x710 [ 963.874080][ C1] ? kmalloc_reserve+0xbd/0x290 [ 963.878938][ C1] ? rcu_is_watching+0x15/0xb0 [ 963.883708][ C1] kmalloc_reserve+0xbd/0x290 [ 963.888394][ C1] __alloc_skb+0x142/0x2d0 [ 963.892866][ C1] synproxy_send_client_synack_ipv6+0x169/0xca0 [ 963.899110][ C1] ? synproxy_pernet+0x45/0x270 [ 963.903995][ C1] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 963.910758][ C1] ? nft_symhash_reduce+0x1a0/0x560 [ 963.915957][ C1] ? synproxy_pernet+0x45/0x270 [ 963.920815][ C1] nft_synproxy_eval_v6+0x36e/0x560 [ 963.926025][ C1] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 963.931753][ C1] ? nf_ip_checksum+0x13c/0x510 [ 963.936628][ C1] nft_synproxy_do_eval+0x3d7/0x570 [ 963.941837][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 963.947563][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 963.952949][ C1] nft_do_chain+0x40c/0x1920 [ 963.957550][ C1] ? ip6t_do_table+0x1376/0x1560 [ 963.962494][ C1] ? nf_nat_inet_fn+0x924/0xba0 [ 963.967348][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 963.972371][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 963.977243][ C1] ? nf_nat_ipv6_fn+0x21d/0x2d0 [ 963.982099][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 963.987307][ C1] nft_do_chain_inet+0x25d/0x340 [ 963.992249][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 963.997706][ C1] ? nf_nat_ipv6_local_in+0x14f/0x650 [ 964.003087][ C1] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 964.008812][ C1] ? NF_HOOK+0x9a/0x3a0 [ 964.012992][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 964.018455][ C1] nf_hook_slow+0xc5/0x220 [ 964.022876][ C1] NF_HOOK+0x206/0x3a0 [ 964.026956][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 964.032331][ C1] ? NF_HOOK+0x9a/0x3a0 [ 964.036490][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 964.041092][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 964.046480][ C1] ip6_input+0x16a/0x270 [ 964.050726][ C1] ? ip6_input+0x23/0x270 [ 964.055064][ C1] NF_HOOK+0x30c/0x3a0 [ 964.059136][ C1] ? skb_orphan+0xaf/0xd0 [ 964.063479][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 964.068688][ C1] ? NF_HOOK+0x9a/0x3a0 [ 964.072847][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 964.077443][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 964.082656][ C1] __netif_receive_skb+0xd3/0x380 [ 964.087689][ C1] ? process_backlog+0x2d5/0x14f0 [ 964.092721][ C1] process_backlog+0x60e/0x14f0 [ 964.097598][ C1] ? __pfx_process_backlog+0x10/0x10 [ 964.102900][ C1] __napi_poll+0xc7/0x360 [ 964.107230][ C1] ? skb_defer_free_flush+0x229/0x250 [ 964.112614][ C1] net_rx_action+0x5f7/0xdf0 [ 964.117224][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 964.122368][ C1] ? sched_balance_domains+0x8be/0x9e0 [ 964.127841][ C1] handle_softirqs+0x286/0x870 [ 964.132609][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 964.137378][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 964.142667][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 964.147869][ C1] __irq_exit_rcu+0xca/0x1f0 [ 964.152460][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 964.157666][ C1] irq_exit_rcu+0x9/0x30 [ 964.161914][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 964.167552][ C1] [ 964.170483][ C1] [ 964.173423][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 964.179402][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 964.185136][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 31 22 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 964.204746][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 964.210832][ C1] RAX: 79251b864047cc00 RBX: ffffffff81967b87 RCX: 79251b864047cc00 [ 964.218805][ C1] RDX: 0000000000000001 RSI: ffffffff8d70bc84 RDI: ffffffff8bbf0460 [ 964.226778][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 964.234751][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7cd370 [ 964.242725][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003952b58 [ 964.250704][ C1] ? do_idle+0x1e7/0x510 [ 964.254968][ C1] default_idle+0x13/0x20 [ 964.259309][ C1] default_idle_call+0x73/0xb0 [ 964.264079][ C1] do_idle+0x1e7/0x510 [ 964.268156][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 964.274309][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 964.279517][ C1] ? __pfx_do_idle+0x10/0x10 [ 964.284117][ C1] ? do_idle+0xc/0x510 [ 964.288196][ C1] cpu_startup_entry+0x44/0x60 [ 964.292968][ C1] start_secondary+0x101/0x110 [ 964.297739][ C1] common_startup_64+0x13e/0x147 [ 964.302699][ C1] [ 964.693052][ T5198] udevd[5198]: worker [13885] /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.217/ttyUSB0/tty/ttyUSB0 is taking a long time [ 965.040393][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 965.054181][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 971.464216][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 971.478545][ T1300] ieee802154 phy1 wpan1: encryption failed: -22