last executing test programs: 19m54.733275812s ago: executing program 2 (id=653): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', '', [{0x20, ',L'}]}, 0x7) (async) sendfile(r0, r1, &(0x7f0000000000)=0x5, 0x20001) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000016c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000002b00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x14300) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0xa0000]}, 0x8, 0xc00) (async) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='itimer_state\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) (async) r7 = socket(0x8000000010, 0x2, 0x0) write(r7, &(0x7f0000000340)="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", 0xfc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x3e, 0x0, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r2, r3, r4, 0xffffffffffffffff, r5, r6, r7], 0x7) (async) setxattr$incfs_metadata(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0, 0x0, 0x6) (async) socket(0x11, 0x3, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) 19m54.332236269s ago: executing program 2 (id=655): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYRESHEX=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, &(0x7f0000000080)={0x3}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0xa, 0x4e21, 0x3, @remote, 0x2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000380)="96ee217f6687e7f0d5dc9909357b38e824899133d7650302a9d464ca7e9529151db2f517f152a2f8ce99e7633b0396be8d484c0bf5dcc72e7ad387f17a05c0e5bcac2bd91af35b417a2184d25687be9f1387341d4fa4a0b12243b3020f7d7faf805e7f8e86439960915d50b3f3415b9810df9358daa147a5676095e1fb59890b758ef6ad6ace324b4191478c936602556054fe4b58b29123f66a78a370c2", 0x9e}, {&(0x7f0000000500)="b45a6e17cc2c0052f99481ffa01186db38575090bc79cfe2b3e9a2aeeed0c1b2979e7fd9d1d4ba25c254b75535e9fbb712f2f650511aa8780fea033087c6ddf9df0b462c94c011b95bd38f7a1177aab8275c78ee5ab433251b5ad34e486890b0fa91aa4faa30ceebb63f56780d9f1def30d71557bd6b681957b891ff31fab3937d5f9777b9530d0276a083249679032d6b258cddf2f285845547bf4cc0dfc8ff34522a5ca1dc3c14f4d37691f3150fbe04ccde", 0xb3}], 0x2}, 0x800) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, 0x0, 0x40000d0) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000000)={0x1c, r3, 0x62c21a4ade68aba1, 0x0, 0x4, {{0x32}, {@void, @val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4df30c", 0x24, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x6, 0x0, 0x0, {[@generic={0x3, 0x2}, @exp_fastopen={0xfe, 0xe, 0xf989, "000000d27ebc0a2f1549"}]}}}}}}}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, r10, 0x40, 0x0, 0xb}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0xc880}, 0x840) pread64(r8, &(0x7f00000000c0)=""/105, 0x69, 0xfff) 19m52.66892507s ago: executing program 2 (id=661): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301"], 0x4c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f00000000c0), 0x106}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="0d000000246804003199aee6fdb9291b3091ec1a2d41d2270a00d8ec030f5919f397e54095ffb2261ae3445472867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaed", 0x7d}, {&(0x7f0000001100)="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", 0xf98}], 0x3) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000200)={'full', 0x20, 0xfc3f, 0x20, 0x2}, 0x2f) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x4d, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000891}, 0x20000000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0x40}}, 0x4000010) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 19m52.439987901s ago: executing program 2 (id=663): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0xffff0000, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000004000000090000006fc0e03a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) futex(&(0x7f0000000040)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2) futex(&(0x7f0000000040)=0x1, 0x1, 0x0, 0x0, 0x0, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x20, 0x0, 0x40, 0x100, {{0x2c, 0x4, 0x0, 0x8, 0xb0, 0x66, 0x0, 0x0, 0x4, 0x0, @remote, @local, {[@timestamp={0x44, 0x10, 0x36, 0x0, 0x1, [0x5, 0x7d, 0x8]}, @ssrr={0x89, 0x1b, 0x53, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1c}, @broadcast, @remote, @empty]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x44, 0x8b, 0x1, 0x2, [{@local, 0xff}, {@remote, 0xdf}, {@private=0xa010101, 0x7}, {@private=0xa010101, 0xfffffffb}, {@empty, 0x4}, {@multicast1, 0x6}, {@local, 0x4}, {@multicast1, 0x9}]}, @generic={0x83, 0x7, "e266491411"}, @ra={0x94, 0x4}, @cipso={0x86, 0xe, 0x2, [{0x2, 0x8, "5dbce803fb03"}]}, @rr={0x7, 0xf, 0x66, [@multicast1, @broadcast, @multicast2]}]}}}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x800, 0x4, 0x2, 0x0, r1, 0x0, '\x00', r2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r1, 0x20}, 0x20) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="0000210007000000bb00002024ed0f986d81a62d0f97d2518ae82432ffb9c85fc57c5bce52f1d73d16f0bc7c6bf1e444366ef57c77e0d61e6ee013cb01199249966ede5c3f5886a892468c4efd17f912b4a769c7a7baab2426ada47a850312dfb4804dd90000000000000003bc2af624b95990be361e53621e2f14dacf487c96bba86d7f7e3d7c457fff6e73423b5773ae2be8b14da3bfd4325fb5db36a40e2bd938d16ca3e5481d70b8ea2242acf4ee"]) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850500005a0000006910a40000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) chroot(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') name_to_handle_at(r5, &(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000340)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x7, 0xfb2}, 0x8000, 0x8402}}, &(0x7f0000000380), 0x200) 19m51.397147086s ago: executing program 2 (id=665): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = socket(0x10, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) write(r3, &(0x7f00000004c0)="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", 0x267) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x214000, 0x8) unlinkat(r4, &(0x7f0000000180)='./file0\x00', 0x200) clock_gettime(0x0, &(0x7f00000001c0)) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r6 = socket(0x10, 0x3, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0xc0c89425, &(0x7f0000000340)={"b84dcdac7b9678a7a8bace78cc7c2676", 0x0, 0x0, {0x7fffffffffffffff, 0x7f}, {0x4, 0x100}, 0x3, [0x8, 0x2bf, 0x4, 0xff, 0x6, 0xa, 0xa, 0x0, 0x0, 0xfff, 0x8000, 0x64e8, 0xfffffffffffff800, 0x8, 0x4, 0x5]}) ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000001640)={{r2}, r10, 0x6, @unused=[0x6, 0x4, 0x6, 0x9], @name="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"}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r9, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 19m50.736606372s ago: executing program 2 (id=667): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102001, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000)) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0xb3d) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x27, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003f0007010000000000000000037c0000180037801300030071722834"], 0x2c}}, 0xc0) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x0) ioctl$VIDIOC_DQEVENT(r7, 0x80885659, 0x0) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0xe, r3}, 0x10) r8 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)) syz_open_dev$vbi(&(0x7f00000001c0), 0x2, 0x2) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000016c11a19d6fb00010a00000000000000"], 0x14}}, 0x0) 19m50.195640406s ago: executing program 32 (id=667): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102001, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000)) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0xb3d) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x27, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003f0007010000000000000000037c0000180037801300030071722834"], 0x2c}}, 0xc0) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x0) ioctl$VIDIOC_DQEVENT(r7, 0x80885659, 0x0) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0xe, r3}, 0x10) r8 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)) syz_open_dev$vbi(&(0x7f00000001c0), 0x2, 0x2) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000016c11a19d6fb00010a00000000000000"], 0x14}}, 0x0) 17m32.755654666s ago: executing program 3 (id=1173): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x8, 0x1, 0x6, 0x5, 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x80, 0x78e, 0x7, 0x40484, 0xffffffffffffffff, 0xf6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) fcntl$lock(r2, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x2, r5}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r7, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x28) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) writev(r6, &(0x7f0000000340)=[{&(0x7f00000000c0)="3e765e98e90a994aa5f836731571670470512dc7521874fc35401f2e2006de9652c2eeaf18df05d5d7c531b5c7b0cd941d3e3105fb8b114f", 0x38}, {&(0x7f00000003c0)="32ad81626fb340aef231a938fbf54df22cb3da02e8f872f11501ac6e3c6ecdf3cbb546522eaa475f3662da675a948732060fa788f778ec8d5ff24884ec3f2a8e5c3409c5b2784fed10ac4a473b4ba1e4509cb582b26269128909fa3de3a1bc69c5ec41f2ed59ccf5e4f8034b94f8f697223563559c18d784f4b30cc3888bbe658da7a9d4e2723080bd21fb50644bf2313476fe05cd158a1c03a15fd7815e0004e70991857771", 0xa6}, {&(0x7f0000000180)="d4f21df040d6e4a8e05af414e85562ef28e7611096dd48ef665e436866cc058380b6a740072ac1cb6045554f0aeb7691b74176cae6daf33ba64e4db128368f3845534701c531a8da02773f", 0x4b}, {&(0x7f0000000480)="d045bbfbcbe0c7fe4f406979b9929a25b7b13e88fcfc8bfb5b3e2578278a3845c12d58e0ce0a9231893ce4701222c107662d2655dc4d9ff91cec3ac7ef9c51f1540344ccfda9af002651ed8e9d0bb74da186a1ada0c5cc0e308cd6533c39914663bf48712c582af8d25b3dd33cff692d85897d5ebf1c6616d5fbd8c987dc8f696ac41efa08b1c89ae2e866a57f4a8405959193294fcf90e8fc5153f062255ea6ca21f6a0a544044864542cb1174f1b75fa473b64", 0xb4}], 0x4) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r8, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001800090000000000fdffffff1c14000000010000000014001200210015b14f44bf35f72f11b676eb8fcfbc6ac116945cf4a5b2ff7fffff0000"], 0x30}}, 0x4) sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, 0x0, 0x24008004) syz_emit_ethernet(0x4a, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) 17m29.025144042s ago: executing program 3 (id=1185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x44810) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) 17m28.892792634s ago: executing program 3 (id=1186): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 17m28.874435055s ago: executing program 3 (id=1187): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x810, 0xffffffffffffffff, 0x1c5ed000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') chroot(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6000, 0x2, &(0x7f0000301000/0x6000)=nil) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setparam(r2, &(0x7f0000000200)=0x7fffffff) inotify_init() syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp\x00') r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f000000b2c0), 0x10801, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f000000b300)={{0x8, 0xbe}, {0x8, 0x4000}, 0xbd6a, 0x3}) syz_usb_control_io$printer(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES32=r3]) r5 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)) io_setup(0x7, &(0x7f0000000240)) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001cc0)={'ipvlan1\x00', 0x0}) bind$packet(r6, &(0x7f0000000300)={0x11, 0x6, r8}, 0x14) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 17m27.846664882s ago: executing program 3 (id=1198): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x1d, 0x2, 0x6) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfffffffd, 0x4, 0xb, 0x8001}}) r4 = open(0x0, 0x64842, 0x389b0d52417bb201) pwritev2(r4, &(0x7f0000000240), 0x0, 0x7000, 0x0, 0x3) r5 = socket$qrtr(0x2a, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) fchown(r6, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x92e82) unshare(0x2040400) r7 = open(&(0x7f0000000a40)='.\x00', 0x0, 0x0) utimensat(r7, 0x0, 0x0, 0x0) sendmsg$sock(r5, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, 'lo\x00'}}, 0x80, 0x0}, 0x40000c0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 17m27.596519926s ago: executing program 3 (id=1200): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x635e, 0x4, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x4, 0x7}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x40004) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000000c0)) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r9 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r9, 0x47bc, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r9, 0x18, &(0x7f00000001c0)={0x79c, r8, 0x32, {0xb, 0x100000000}, 0x2}, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) 17m27.094729484s ago: executing program 33 (id=1200): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x635e, 0x4, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x4, 0x7}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x40004) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000000c0)) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r9 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r9, 0x47bc, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r9, 0x18, &(0x7f00000001c0)={0x79c, r8, 0x32, {0xb, 0x100000000}, 0x2}, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) 15m42.990633169s ago: executing program 5 (id=1615): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) add_key(0x0, 0x0, &(0x7f0000000140), 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000240), 0x9, 0xf2282) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001200), 0xc, &(0x7f0000001400)={0x0, 0x124}}, 0x0) sendmmsg$alg(r3, &(0x7f00000031c0)=[{0x0, 0x0, 0x0}, {0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002880)="7e5e52eb7862fcc10ad6d3cd93d7f86a64ad89e0cf82acc78d43d9392710a4a8a92f8a97a66aa8ad8f39fd79aa6fc812467993532d4a50209c703f800951e2", 0x3f}, {&(0x7f0000002fc0)="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", 0xfd}, {&(0x7f00000030c0)="ac94198f68a0b0398a7ff71eaa7bfb3a8d2d5fe5e9d235b090b38c1cb02c975dd8c2433503769c3ba1509265675f872b1e395444dbce8e79c2ebf5d196b802dc468317f88b2ebe08fd497e81d53747dd23fa9d837cfe17e551f0ae7583f0c5b1de811240f947dd6a21d0c4edac73fa9d6da89b6d601ab713b714361b", 0x7c}], 0x3, &(0x7f0000003140)=[@assoc={0x18, 0x117, 0x4, 0x400}, @op={0x18}, @op={0x18}], 0x48, 0x4008081}], 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000017000/0x2000)=nil, 0x2000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0xc100080, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYRESDEC, @ANYRESOCT, @ANYRES8=r3], 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) select(0x40, &(0x7f0000000100)={0x2, 0x100000000000000, 0x105, 0x80000000, 0x10000, 0x1f4, 0x8, 0x80000001}, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000044199610b906614088010102030109021200010000000009040000007fbefb00d64f994e885578008b4d7178ea933db93987fc0272f5efaceba72ec73aabba1e16b642a02970eb7d42df05b44c51e1e56836b147a7e197532246d6e528a12e96496870a9936cee9395e928f1c51363b28f80d79c9b6c8024ce55bc41a5c56e2b890a675857698fde62d4eca94c45974112342b3151c25f0e4a7e2bce99c83067bea4e28eaf95ed91ec4c9a217589d6bd9f965640aef405465229324b839cdb6474604bd22fb25a"], 0x0) syz_usb_control_io$printer(r7, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003ea000000ea031b145c1ec654ab798223bcaa5e2505853bb8b0ed01cbff6c74ad31520b8ab9"]}, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000002c0)="0f01764a652e36f2f0fe040f0e0f30baf80c66b81e17898f66efbafc0cedd9fa3eff58030f350f015a000f01f6", 0x2d}], 0x1, 0x34, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000000680)={{0x0, 0x0, 0x80, {0xeeef0000, 0x2}}, "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", "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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_control_io(r4, &(0x7f00000005c0)={0x2c, &(0x7f0000002700)={0x0, 0x9, 0xd2, {0xd2, 0x8, "0c2b7acf840548d8aaaa3091e9da90386e652c72ed4ae65a9f507ae4646a84543576e6dcb8a2bef488989c16d262ab461c2adc3b00eff54e7822d0a74182d71697b38a585a9e10c93d5a5109afd391505ac9c1218f7f229f9b9f96bf83056e0a29fb35128dbb84f847471537552cbdc32ddb17e171b5a244f78f2670b94bb2da83ebd3bf06ceb47c9067419dd71f5b344bb8a4787e06c420681cb8031fe543a7a386f654f3a805e87aaaaff9c484bd70ba1b98e349866c949bf45e0086a8695a1c6bd700"/208}}, &(0x7f0000002e00)=ANY=[@ANYBLOB="0003eb000000eb035a8381893e395a048e0f975e9d2773546ad815be5014cf0153f0ed0536eadea0fac00acdd483ab56c95f7641a16ad0528c71718d39352b10d76a8771609bcc3e0f1514f2f49e0d58fc1724064582c607f6d53a77b685a08def40599ca628294f72f4b9f93aa43edfc7f67d9b1ae497df2f5ac99dae43aa00853ec9a16a804b15683245f93228cd7e0097969aa61864c21ce09f8b84d5bc6194ea1064c17efca5dd45256b283c9564a8275c30f48e7a29a75f18acb9c763a4af0b59d731a232183131a123faea72141365fe133813b34ca3d508974677bb4cc22f25bf329e3bb789d8fbc14a2a40bb48c50ebe545ce6463181f785d35b09b1829ae53ca287ae4d36d04b9bc7353300c5621e50909d194077145899b791900136dcc89ec587b252eb5b16a8d9a7cbf2ea180ea1ff030000d89cb1ca8821655d9dad3aa3e1747b462735835ba6f3ca3f38a3b2a3a2defd908f03d3b8ed215317c748dde3988e6045250e4efd251b7b0fa88f572e85965898ba2306a34f76ee9320403c071491a10e28132fa556737b34322b1b4de2e434c4789d80efddc69d3ea2499a52e3a1ab18b96b130ecae8b2"], &(0x7f00000000c0)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x7, 0x7, 0xc0, 0x2}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x8, 0xfe, 0x9, "6dfdf499", "49531a62"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x1, 0x5, 0xa0, 0x1, 0x8, 0x81}}}, &(0x7f0000002d40)={0x84, &(0x7f0000002900)={0x20, 0xc, 0xf9, "bb1005d74abc7be865ffcc31e55f9ca7bc66f5187ec7b0495de874d2fc6a25a5a0a0ab25a51617645b36e6148a7cce4771161572618d5e1f8872a800d7505f5123624f48643ca8bcb11cd1dc0118b37949afe4bbf97e99fa3b526eb708c20ca504a76c962a26c59a5ae861c5e542380d46e0850d0e4e05af380390c2ae7ea121c658bbcb0cf7650276410d0aff54951b042f28a0dcc31eed60630b177ce9cd9ca20bc05340d5443f07b6086c274cfbc91260545eaf670faa3da1e52c5470a37523711cd9dc03158d40a70d0b6bc740903cfb043448bad6ee6bd9a359f10fb1d50a493d06bd3be0040f9d607836bd9dc8e7ba1b39338253a782"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000002a00)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000002840)=ANY=[@ANYBLOB="200008000000ba227fab7c0d8292170919f7f7efd12ec22902006a62699e9c5e1ea680ff030000"], &(0x7f0000002a80)={0x40, 0x7, 0x2, 0x3ff}, &(0x7f0000002ac0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000002b00)={0x40, 0xb, 0x2, "5fda"}, &(0x7f0000002b40)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000002b80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, &(0x7f0000002bc0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000002800)={0x40, 0x19, 0x2, "9df4"}, &(0x7f0000002c40)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000002c80)={0x40, 0x1c, 0x1, 0xd}, &(0x7f0000002cc0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000002d00)={0x40, 0x21, 0x1, 0x8}}) close(r1) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000300)=0x6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x53, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYRES64], 0x38}}, 0x40004000) 15m40.705323602s ago: executing program 5 (id=1623): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pwrite64(r1, 0x0, 0xeffd, 0x3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x50) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@deltaction={0x74, 0x31, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x44}, 0x5) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket(0x400000000010, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000000}, {0xfffffff9}]}}) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0x7, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffc], 0x10000, 0x202}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x3001, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xeeee0000, 0x8080000, 0xb, 0x4, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x6, 0x0, 0xfc}, {0x0, 0x22279fff, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4, 0x2}, {0x80a0000, 0x6000, 0x8, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x3c, 0x2}, {0x100000, 0xeeee0000, 0x0, 0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x2, 0x0, 0xa1, 0x20, 0x0, 0xff, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0x9df8ffd9, 0x0, 0x0, 0x110, 0xc, 0xf801, 0x0, [0x80000001, 0x0, 0xffffffffffffffff, 0x1]}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@x86={0x81, 0xa, 0x9, 0x0, 0x5, 0x8, 0x3, 0x7, 0x0, 0x8, 0x25, 0x8b, 0x0, 0x2, 0x7, 0x1, 0x8, 0x4, 0x8a, '\x00', 0x8e, 0x100000001}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_connect(0x3, 0x88f, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2191], &(0x7f0000000bc0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x98, 0x7, 0xfe, 0x40, 0x2}, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x44a}}, {0x1c, &(0x7f0000000c00)=ANY=[@ANYBLOB="1c0309ef1739e8f9bf6d70a3e9000000000000000048bafabb253a9742998a9c8ed3e79eff10326044d7cde31cf422baabaa8b2e767bbfff6bec6c368fbd2413fdfca48968c6916aa580eaf76dccf8a5cc8fdc88330b2543a26a392c7817f2c5eafa5ef4dca8bd8e700431db17c3233d8b892c5d818d80fa9413796d31e4cf865f311119ba0f0f5032d2eda681966b3b66b023f4b8ed3f14df61c556fcceb23afff84d2a78b6ac8e42053f2bf60308d09a495a317b7c341d94ed43"]}]}) 15m38.811528271s ago: executing program 5 (id=1634): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x34, 0xffffbffffffffdfd) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000780)="e53343b5dedad958044e5d5a92aff71be568b65e2b7a13f952740563bb9332ebfacb22d068bd86034e72d9458707975ae0eaecd2f5ae80b67503d568d5e7e9e0da846e73be7a49722607f75627a1ca842d2e7cd45f9c035e6138cf3b1292e1dbd784294dfca32bcf18af0cbf52aef1e5dbc24293fde6a2f6185d25be2c074f3e21752b39a85d0539b7aaa9032667a401c2d20a32e5cd1a2111839584571666be80b6f45b9513ddc73b336c778b0e8c874e75337543140863f61a67f8eeaad469c812b5a32c7ea06b322d029b8d4854e3673a13f4cf8f6e3ec4a8b813fafef682be8d19419a448f5598be", 0xea}, {&(0x7f0000000480)="6d374577cfca4a9c36a2b4a4aed29958b8ca0833f8fee3d1578ed3fd24f867af73095bad2c112fe2f10731b35892af0efdac5830269721cc45ec518a7dc44f92625ad3d1dde4561607b650f822557cf6fe2499a29f7c9471af0b6fb66ca5957735185e5c9a1ec790bc174ac80a1cb8d46bb9631e51483df576d153a650e4b4c87adb7b93b858585ba8", 0x89}, {&(0x7f0000000540)}, {&(0x7f0000000600)="fcbed71f17a7b199fcbe90596e92b15caa05d42c41971a1d01a2f0d8034cbf50feb826003bf4fb2b0329a9eaa78961bc69d1e683d033a35a4a7a6d83fb5601ba29c58a58cfb1b8e2cb8579250bb04ff9e4d0a76762a596635e956a43343ab66da67a946456cb6054f2d39322689caa2efc8c895c03000000000000b90fd1516380f6953f59af4472f3277ae9ae55eb3f998f3473dd3086833b4ef8f63b1dbf84540ed208699f34f0f3a561684300a5bc8350ece5d2437a7671dee87d8f46b5b32d4601d4e7af95c9f62cc68dac4a92b64d9f80b97180e1d3379348e90719ee227c37c5c4f5240bea", 0xe8}, {&(0x7f00000003c0)="0000e000609f", 0x6}], 0x5) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x7d}}}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x7048}, 0x1c) bind$can_raw(r0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000019080)={0x1, 0x1, 0x1}) 15m37.144158214s ago: executing program 5 (id=1637): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003e00)={@fallback, 0xffffffffffffffff, 0x15, 0x2020}, 0x20) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000064006bcd9e3fe3dc6e48aa31086b5c6c8752b57446001f0000000000000004000d000a004424eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fc1d92eb8d8d8702ccb7fd7c1b02f50e15554c247958", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$unix(0x1, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f0000000280)='fd/3\x00') pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r5, r5}, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0xe3) listen(r4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x900}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x80000}, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0) 15m36.97264646s ago: executing program 5 (id=1639): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2=0xe0000001}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xffffff}}}}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) readv(0xffffffffffffffff, &(0x7f0000002940), 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000100)={0xf010004, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x0, '\x00', @value64=0xfffffffffffffffe}}) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='\\\x8b\x00', 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0de, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'nr0\x00'}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@iprange={{0x68}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@multicast2, @ipv4=@broadcast, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x438) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) 15m36.923412642s ago: executing program 5 (id=1640): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="04000000f2313920422c021240850102030109022400010010100009040c02cd706a0a1226f2950200020200002603ff717ea72d760043ef1550453266271852c0559ef11b95ddf0ce133b9a94ce079c34f13381c03446c7da043a20a629864cad8ccd1eefcb3b20bbab151479f8b44ba0d05b02b64fb90170831c88c72cabc3b7524401e1790fb92aeb8e5192386bb2d4a79d0297d429ce27d842079e5905e24b9765c63284fc3623fc64ee8df6d5706f1107dfc782cecdbdf64df5"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000440)) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@deltclass={0xa2c, 0x29, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff2}, {0xffe0, 0xfff2}, {0x0, 0xffe0}}, [@c_cbq={{0x8}, {0x438, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x4, 0xd09, 0x8, 0x101, 0x1, 0xfffffffa, 0xa, 0x6a1, 0x4, 0xa, 0x4, 0x8, 0xffff7fff, 0x51, 0x9, 0x9, 0x0, 0x11, 0x6, 0x489, 0x7, 0x101, 0x832, 0x3ff, 0x1, 0x3, 0xfffffff9, 0xfc87, 0x1, 0xb500000, 0x891d, 0x8, 0x8001, 0x2, 0x3cef, 0x61b, 0x9, 0x3d, 0x20000000, 0x7, 0x8, 0x3, 0xb, 0x3, 0x8, 0x8, 0x10000, 0x9, 0x1, 0xce, 0x7, 0x3, 0x8, 0x80000009, 0xffffffff, 0x9, 0x4, 0x80, 0xf19, 0x5, 0x9, 0x2, 0x5, 0xdf6, 0x6, 0x5, 0xffffffdd, 0x5, 0x3, 0x10, 0x2, 0x5, 0x8a, 0x6, 0x9, 0xc, 0x6, 0x0, 0x5, 0x2767, 0xe8c, 0x2, 0xb1a2, 0x0, 0xd, 0x5, 0xfffff001, 0x0, 0x0, 0x80000001, 0x2, 0x5, 0x9, 0x6, 0x3, 0x3ff, 0x82f, 0x4, 0xffff, 0x4c9, 0x6, 0x1, 0x8, 0x1, 0x7, 0x7, 0xd71, 0xcd8, 0x0, 0x7, 0x401, 0x9000000, 0x5, 0x6, 0x100, 0x8, 0x5, 0x7, 0x8, 0x6, 0x9, 0x5, 0x800, 0x0, 0x4a7f, 0x7fff, 0xa957, 0x9, 0x7f3, 0x4, 0x7fffffff, 0x3, 0x10001, 0x2, 0x3, 0x9, 0x4, 0xea85, 0x5, 0x1, 0x223f, 0x2, 0x7, 0x1ff, 0x2, 0x0, 0x100, 0x101, 0x6, 0x10, 0x2, 0x0, 0x3, 0x9, 0x200, 0x6, 0x0, 0xaa3b, 0x8, 0x89b4, 0x80000001, 0x0, 0x5, 0x0, 0x0, 0x1, 0x100, 0xfffffff8, 0xffffff59, 0x6405484f, 0x7, 0x0, 0xd6b, 0x7, 0x1, 0x4, 0x1, 0x279cb4b7, 0x7fff, 0x5, 0x9, 0x1000, 0x9, 0x10, 0x5, 0x3, 0x2, 0x5, 0xffffffff, 0x4c, 0x81, 0xdfbf, 0x8, 0x7, 0x4, 0xb, 0x4, 0xc92, 0x7f, 0x6, 0x7, 0x800, 0x4, 0xfff, 0x1, 0x6, 0xcf, 0x2, 0x24, 0x1, 0x6, 0x8, 0x3, 0xffff8000, 0x0, 0x8000, 0x0, 0x5, 0x7, 0x1ea7, 0x9, 0x5, 0x3, 0xc6a3, 0x9, 0x9, 0x8, 0x6, 0x8, 0x1, 0x400, 0x0, 0x8, 0x8, 0x0, 0xfffffffe, 0x6, 0x4, 0x80000000, 0x6, 0x81, 0x10001, 0x69b0, 0x3f5, 0x5, 0x6, 0x2, 0x0, 0x1, 0x5, 0x8, 0xfea, 0x5, 0x9, 0x1, 0x6]}, @TCA_CBQ_RATE={0x10, 0x5, {0xe4, 0x0, 0x1, 0x0, 0x4, 0x1}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x5, 0xffe2}, 0x7, 0x1}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x6, 0x5, 0xa9, 0x4, 0xa2b0}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x3}}}, @c_atm={{0x8}, {0xe8, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0xb}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0xfff2}}, @TCA_ATM_HDR={0x30, 0x3, "0c797c0d96a953522064dbcaf2b8bc7d9b909d6a7575e7f4b42f4542aa59b06701662d5e49f1c155c6845508"}, @TCA_ATM_FD={0x8}, @TCA_ATM_HDR={0x40, 0x3, "84f0638dc93dfd509b4bf36fb24506c0c1db3038fe028c7b8fcf96f32ff18959f95d852a631576b4daaa54643078cd22b9d34e3e89c2826f3454cc90"}, @TCA_ATM_HDR={0x3a, 0x3, "65f2be7009dbfb13fc78bb705c154f167c03cfc7dc41b3c61c7623a55d01d0a3e200d6e9ae71bdfa21fbddb7b8f6ac820be65d3d40f8"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff2}}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_FD={0x8, 0x1, r2}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x9}}}, @c_cbq={{0x8}, {0x4a0, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x5, 0xfff1}, 0x2, 0x12f}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x4, 0x0, 0x5, 0xd, 0x2a2b, 0x8}}, @TCA_CBQ_RATE={0x10, 0x5, {0x6, 0x0, 0xff36, 0x793, 0x8000, 0x9}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x8, 0xa}, 0x2a, 0x6}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x1, 0x7, 0x4, 0xa, 0x1ff, 0x81}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x7, 0xc}, 0x6, 0x5}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x80, 0x81, 0x80, 0x9, 0x0, 0xc, 0x1, 0x7, 0x80, 0x160000, 0x0, 0x4, 0x9, 0x10000, 0x5, 0x4, 0xc, 0x4, 0x29ce28bb, 0x3, 0xe0a, 0x2, 0x30, 0xbd1, 0x101, 0x4, 0xfff, 0x60, 0x4, 0x10, 0x38, 0x2, 0x7, 0xd28, 0x8000, 0x10000, 0x1000, 0x1, 0x6, 0x998, 0x5, 0x169, 0x1000, 0x5, 0x100, 0x9, 0x80000000, 0x9, 0x1, 0x63b7, 0x80000001, 0x1, 0x8, 0x1, 0x4, 0x2, 0x3, 0x7, 0x1, 0x4, 0x3, 0x5, 0x800, 0xf9, 0x5, 0x5, 0x2, 0x5, 0xb, 0x168dcec8, 0xffe7, 0xd4, 0x4, 0x3, 0x3a, 0x5, 0xfffeffff, 0x80000, 0x10001, 0x7ff, 0x9, 0x1, 0xb5f0, 0xf, 0xf31, 0x1, 0x2, 0x7, 0x9, 0xf59, 0x2, 0x3ff, 0xc8d, 0x3, 0x10000, 0x8, 0x0, 0x40, 0x8, 0x1, 0x80, 0x2, 0xfffffffd, 0x644b, 0x4e81, 0x8, 0x8, 0xd, 0x6fe7, 0x6, 0x5, 0x0, 0x3, 0xffffffff, 0x8, 0xffff, 0x5, 0x4, 0x366, 0xa, 0x6, 0x81, 0x5d1a0fca, 0x60f, 0x0, 0xffff, 0xa, 0x7d, 0x9, 0x3, 0x3, 0x0, 0x9, 0x6, 0x3e, 0x1, 0x9, 0x8, 0x955f, 0x2, 0xffffffff, 0x0, 0x4, 0xde, 0xe, 0x6, 0xd46, 0x5da, 0x3, 0x1000, 0x3ff, 0x7, 0x5, 0x3, 0x2, 0x0, 0x8000, 0x7, 0x4, 0x800, 0x8, 0xac, 0xf, 0x7, 0x4, 0x200, 0x400, 0x3, 0xed, 0x2, 0xfffffff8, 0x3, 0x2, 0xfffff311, 0x1761, 0x800, 0x175, 0xae, 0x2, 0x100, 0x5, 0xe, 0x401, 0x8ed, 0x0, 0x9, 0x80, 0x9bf6, 0x3, 0x8, 0x3, 0x6, 0x3, 0xfffffff7, 0x7, 0x9, 0x9, 0x3, 0x8000, 0x4, 0x1, 0x9, 0xa, 0x2, 0x1, 0x2, 0x9, 0xc, 0x7, 0x2, 0x3, 0xe, 0x5, 0xdbe, 0x5, 0x8, 0xffff, 0x9, 0x6, 0x0, 0x8, 0x7, 0x3, 0x0, 0x0, 0xb, 0xeb, 0x6b7, 0x2, 0x1, 0x7, 0xfffff42a, 0x8b, 0x81, 0x7f, 0x5, 0x80000001, 0x9, 0x9, 0x6, 0x7da, 0xe2a, 0x4, 0x0, 0xc, 0x0, 0x2, 0x101, 0xfde2, 0x7, 0x278, 0x1, 0x0, 0x7fffffff, 0x0, 0x8]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x14, 0x1, 0xc, 0x6, 0x4ef8, 0x9, 0x6, 0xfffffffb}}, @TCA_CBQ_RATE={0x10, 0x5, {0x3, 0x0, 0x8, 0x0, 0x5, 0x9}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x9, 0xe}, 0x6, 0xc7}}]}}]}, 0xa2c}}, 0x0) recvmmsg(r2, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000300)=""/5, 0x5}, {&(0x7f0000000e40)=""/176, 0xb0}], 0x2}, 0x101}], 0x1, 0x101, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000280000000000000", @ANYRES32=0x1, @ANYBLOB="43006f08017e9723b40cd015", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000001000"/28], 0x48) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd606b88ef00083a00fc010000000000000000000000000000fe8006000000000000000000000000aa8000907800000000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdffffff000000000800000018010000646c6c2500000000002020207b1af8ff00000000bfa10000000000000742698a7bffffffb70200000800e6b01f6500002800000085000000d400000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x2d, &(0x7f0000000280)=""/45, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_usb_control_io(r0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000380)='\xcfD\xbc\xbf\x95@\xd6j\'$\x1d\x14\xb7!\x8b\x84=r \xe34\xdb\x84\x00\x00>\xf9\x9c\x83s1n@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x83\xe9]\xf4\x96\xbc\x9e\xfcG\xb5\x1b', &(0x7f00000001c0)='t+\xdb\xaaU\x8e\xd6\x9b\xaar\xa1\xf7\xf1\xfa\xed\r\f:\xef\xff\xa7x kT\x14\xaf\xe9\xf2\x00\b\x00\x00\x00\x00\x00\x00\xb1O0\x05\xee\xc5\x81\xfd\xa5\x99\xfe\xa1\xf2\xde>\xcdF8\xd2x\xb4\x05\xf8\x0e\xc2\x85\xfe\xd8b=\xf8q\xa96{\xf49\x88\xb1\xcb\x81n\n.\xd0;7\xd6\xc5\xe7{\xc2\xcf\x0fO1y\xb1\xd9n\xa9\x133*\b\x99\xd5/t\xaaE\a\xba\x05!]S3\xd5\x9c\x17\xb4n\x83)\xfd\xe4eU{\xb1IE\x81\x01E\x8f\xa5!\x9a\xee\x95\x8aF\x87\x0e\x82>\xc3`m\x80y\x8cX\xe7\xb2aQ', 0x0) readv(r4, &(0x7f0000000480)=[{&(0x7f0000002800)=""/4104, 0x1008}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0xfffff000) syz_open_dev$dri(&(0x7f0000000400), 0xec, 0x109001) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="001101000000a12b7c98ef0358bc2eecb98c83056525644a8aaf6f42601b9303cbf604d6fce7b674f206bc7b72297c3c71608ec6e42b61702c9dc806ac3bc09b5f63bf49d0786a0daf9c7d2ae2f12cf54b3a6d66a134690e0275fae86fe66458e209604cb60309953515d96794c5d0326664270cdf0d455643613f406c3e0f355f34181561f6edf71ea9701830b1992bb267ef701570e9722d"], 0x0, 0x0, 0x0, 0x0, 0x0}) 15m36.640249219s ago: executing program 34 (id=1640): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="04000000f2313920422c021240850102030109022400010010100009040c02cd706a0a1226f2950200020200002603ff717ea72d760043ef1550453266271852c0559ef11b95ddf0ce133b9a94ce079c34f13381c03446c7da043a20a629864cad8ccd1eefcb3b20bbab151479f8b44ba0d05b02b64fb90170831c88c72cabc3b7524401e1790fb92aeb8e5192386bb2d4a79d0297d429ce27d842079e5905e24b9765c63284fc3623fc64ee8df6d5706f1107dfc782cecdbdf64df5"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000440)) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@deltclass={0xa2c, 0x29, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff2}, {0xffe0, 0xfff2}, {0x0, 0xffe0}}, [@c_cbq={{0x8}, {0x438, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x4, 0xd09, 0x8, 0x101, 0x1, 0xfffffffa, 0xa, 0x6a1, 0x4, 0xa, 0x4, 0x8, 0xffff7fff, 0x51, 0x9, 0x9, 0x0, 0x11, 0x6, 0x489, 0x7, 0x101, 0x832, 0x3ff, 0x1, 0x3, 0xfffffff9, 0xfc87, 0x1, 0xb500000, 0x891d, 0x8, 0x8001, 0x2, 0x3cef, 0x61b, 0x9, 0x3d, 0x20000000, 0x7, 0x8, 0x3, 0xb, 0x3, 0x8, 0x8, 0x10000, 0x9, 0x1, 0xce, 0x7, 0x3, 0x8, 0x80000009, 0xffffffff, 0x9, 0x4, 0x80, 0xf19, 0x5, 0x9, 0x2, 0x5, 0xdf6, 0x6, 0x5, 0xffffffdd, 0x5, 0x3, 0x10, 0x2, 0x5, 0x8a, 0x6, 0x9, 0xc, 0x6, 0x0, 0x5, 0x2767, 0xe8c, 0x2, 0xb1a2, 0x0, 0xd, 0x5, 0xfffff001, 0x0, 0x0, 0x80000001, 0x2, 0x5, 0x9, 0x6, 0x3, 0x3ff, 0x82f, 0x4, 0xffff, 0x4c9, 0x6, 0x1, 0x8, 0x1, 0x7, 0x7, 0xd71, 0xcd8, 0x0, 0x7, 0x401, 0x9000000, 0x5, 0x6, 0x100, 0x8, 0x5, 0x7, 0x8, 0x6, 0x9, 0x5, 0x800, 0x0, 0x4a7f, 0x7fff, 0xa957, 0x9, 0x7f3, 0x4, 0x7fffffff, 0x3, 0x10001, 0x2, 0x3, 0x9, 0x4, 0xea85, 0x5, 0x1, 0x223f, 0x2, 0x7, 0x1ff, 0x2, 0x0, 0x100, 0x101, 0x6, 0x10, 0x2, 0x0, 0x3, 0x9, 0x200, 0x6, 0x0, 0xaa3b, 0x8, 0x89b4, 0x80000001, 0x0, 0x5, 0x0, 0x0, 0x1, 0x100, 0xfffffff8, 0xffffff59, 0x6405484f, 0x7, 0x0, 0xd6b, 0x7, 0x1, 0x4, 0x1, 0x279cb4b7, 0x7fff, 0x5, 0x9, 0x1000, 0x9, 0x10, 0x5, 0x3, 0x2, 0x5, 0xffffffff, 0x4c, 0x81, 0xdfbf, 0x8, 0x7, 0x4, 0xb, 0x4, 0xc92, 0x7f, 0x6, 0x7, 0x800, 0x4, 0xfff, 0x1, 0x6, 0xcf, 0x2, 0x24, 0x1, 0x6, 0x8, 0x3, 0xffff8000, 0x0, 0x8000, 0x0, 0x5, 0x7, 0x1ea7, 0x9, 0x5, 0x3, 0xc6a3, 0x9, 0x9, 0x8, 0x6, 0x8, 0x1, 0x400, 0x0, 0x8, 0x8, 0x0, 0xfffffffe, 0x6, 0x4, 0x80000000, 0x6, 0x81, 0x10001, 0x69b0, 0x3f5, 0x5, 0x6, 0x2, 0x0, 0x1, 0x5, 0x8, 0xfea, 0x5, 0x9, 0x1, 0x6]}, @TCA_CBQ_RATE={0x10, 0x5, {0xe4, 0x0, 0x1, 0x0, 0x4, 0x1}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x5, 0xffe2}, 0x7, 0x1}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x6, 0x5, 0xa9, 0x4, 0xa2b0}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x3}}}, @c_atm={{0x8}, {0xe8, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0xb}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0xfff2}}, @TCA_ATM_HDR={0x30, 0x3, "0c797c0d96a953522064dbcaf2b8bc7d9b909d6a7575e7f4b42f4542aa59b06701662d5e49f1c155c6845508"}, @TCA_ATM_FD={0x8}, @TCA_ATM_HDR={0x40, 0x3, "84f0638dc93dfd509b4bf36fb24506c0c1db3038fe028c7b8fcf96f32ff18959f95d852a631576b4daaa54643078cd22b9d34e3e89c2826f3454cc90"}, @TCA_ATM_HDR={0x3a, 0x3, "65f2be7009dbfb13fc78bb705c154f167c03cfc7dc41b3c61c7623a55d01d0a3e200d6e9ae71bdfa21fbddb7b8f6ac820be65d3d40f8"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff2}}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_FD={0x8, 0x1, r2}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x9}}}, @c_cbq={{0x8}, {0x4a0, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x5, 0xfff1}, 0x2, 0x12f}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x4, 0x0, 0x5, 0xd, 0x2a2b, 0x8}}, @TCA_CBQ_RATE={0x10, 0x5, {0x6, 0x0, 0xff36, 0x793, 0x8000, 0x9}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x8, 0xa}, 0x2a, 0x6}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x1, 0x7, 0x4, 0xa, 0x1ff, 0x81}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x7, 0xc}, 0x6, 0x5}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x80, 0x81, 0x80, 0x9, 0x0, 0xc, 0x1, 0x7, 0x80, 0x160000, 0x0, 0x4, 0x9, 0x10000, 0x5, 0x4, 0xc, 0x4, 0x29ce28bb, 0x3, 0xe0a, 0x2, 0x30, 0xbd1, 0x101, 0x4, 0xfff, 0x60, 0x4, 0x10, 0x38, 0x2, 0x7, 0xd28, 0x8000, 0x10000, 0x1000, 0x1, 0x6, 0x998, 0x5, 0x169, 0x1000, 0x5, 0x100, 0x9, 0x80000000, 0x9, 0x1, 0x63b7, 0x80000001, 0x1, 0x8, 0x1, 0x4, 0x2, 0x3, 0x7, 0x1, 0x4, 0x3, 0x5, 0x800, 0xf9, 0x5, 0x5, 0x2, 0x5, 0xb, 0x168dcec8, 0xffe7, 0xd4, 0x4, 0x3, 0x3a, 0x5, 0xfffeffff, 0x80000, 0x10001, 0x7ff, 0x9, 0x1, 0xb5f0, 0xf, 0xf31, 0x1, 0x2, 0x7, 0x9, 0xf59, 0x2, 0x3ff, 0xc8d, 0x3, 0x10000, 0x8, 0x0, 0x40, 0x8, 0x1, 0x80, 0x2, 0xfffffffd, 0x644b, 0x4e81, 0x8, 0x8, 0xd, 0x6fe7, 0x6, 0x5, 0x0, 0x3, 0xffffffff, 0x8, 0xffff, 0x5, 0x4, 0x366, 0xa, 0x6, 0x81, 0x5d1a0fca, 0x60f, 0x0, 0xffff, 0xa, 0x7d, 0x9, 0x3, 0x3, 0x0, 0x9, 0x6, 0x3e, 0x1, 0x9, 0x8, 0x955f, 0x2, 0xffffffff, 0x0, 0x4, 0xde, 0xe, 0x6, 0xd46, 0x5da, 0x3, 0x1000, 0x3ff, 0x7, 0x5, 0x3, 0x2, 0x0, 0x8000, 0x7, 0x4, 0x800, 0x8, 0xac, 0xf, 0x7, 0x4, 0x200, 0x400, 0x3, 0xed, 0x2, 0xfffffff8, 0x3, 0x2, 0xfffff311, 0x1761, 0x800, 0x175, 0xae, 0x2, 0x100, 0x5, 0xe, 0x401, 0x8ed, 0x0, 0x9, 0x80, 0x9bf6, 0x3, 0x8, 0x3, 0x6, 0x3, 0xfffffff7, 0x7, 0x9, 0x9, 0x3, 0x8000, 0x4, 0x1, 0x9, 0xa, 0x2, 0x1, 0x2, 0x9, 0xc, 0x7, 0x2, 0x3, 0xe, 0x5, 0xdbe, 0x5, 0x8, 0xffff, 0x9, 0x6, 0x0, 0x8, 0x7, 0x3, 0x0, 0x0, 0xb, 0xeb, 0x6b7, 0x2, 0x1, 0x7, 0xfffff42a, 0x8b, 0x81, 0x7f, 0x5, 0x80000001, 0x9, 0x9, 0x6, 0x7da, 0xe2a, 0x4, 0x0, 0xc, 0x0, 0x2, 0x101, 0xfde2, 0x7, 0x278, 0x1, 0x0, 0x7fffffff, 0x0, 0x8]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x14, 0x1, 0xc, 0x6, 0x4ef8, 0x9, 0x6, 0xfffffffb}}, @TCA_CBQ_RATE={0x10, 0x5, {0x3, 0x0, 0x8, 0x0, 0x5, 0x9}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x9, 0xe}, 0x6, 0xc7}}]}}]}, 0xa2c}}, 0x0) recvmmsg(r2, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000300)=""/5, 0x5}, {&(0x7f0000000e40)=""/176, 0xb0}], 0x2}, 0x101}], 0x1, 0x101, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000280000000000000", @ANYRES32=0x1, @ANYBLOB="43006f08017e9723b40cd015", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000001000"/28], 0x48) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd606b88ef00083a00fc010000000000000000000000000000fe8006000000000000000000000000aa8000907800000000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdffffff000000000800000018010000646c6c2500000000002020207b1af8ff00000000bfa10000000000000742698a7bffffffb70200000800e6b01f6500002800000085000000d400000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x2d, &(0x7f0000000280)=""/45, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_usb_control_io(r0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000380)='\xcfD\xbc\xbf\x95@\xd6j\'$\x1d\x14\xb7!\x8b\x84=r \xe34\xdb\x84\x00\x00>\xf9\x9c\x83s1n@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x83\xe9]\xf4\x96\xbc\x9e\xfcG\xb5\x1b', &(0x7f00000001c0)='t+\xdb\xaaU\x8e\xd6\x9b\xaar\xa1\xf7\xf1\xfa\xed\r\f:\xef\xff\xa7x kT\x14\xaf\xe9\xf2\x00\b\x00\x00\x00\x00\x00\x00\xb1O0\x05\xee\xc5\x81\xfd\xa5\x99\xfe\xa1\xf2\xde>\xcdF8\xd2x\xb4\x05\xf8\x0e\xc2\x85\xfe\xd8b=\xf8q\xa96{\xf49\x88\xb1\xcb\x81n\n.\xd0;7\xd6\xc5\xe7{\xc2\xcf\x0fO1y\xb1\xd9n\xa9\x133*\b\x99\xd5/t\xaaE\a\xba\x05!]S3\xd5\x9c\x17\xb4n\x83)\xfd\xe4eU{\xb1IE\x81\x01E\x8f\xa5!\x9a\xee\x95\x8aF\x87\x0e\x82>\xc3`m\x80y\x8cX\xe7\xb2aQ', 0x0) readv(r4, &(0x7f0000000480)=[{&(0x7f0000002800)=""/4104, 0x1008}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0xfffff000) syz_open_dev$dri(&(0x7f0000000400), 0xec, 0x109001) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="001101000000a12b7c98ef0358bc2eecb98c83056525644a8aaf6f42601b9303cbf604d6fce7b674f206bc7b72297c3c71608ec6e42b61702c9dc806ac3bc09b5f63bf49d0786a0daf9c7d2ae2f12cf54b3a6d66a134690e0275fae86fe66458e209604cb60309953515d96794c5d0326664270cdf0d455643613f406c3e0f355f34181561f6edf71ea9701830b1992bb267ef701570e9722d"], 0x0, 0x0, 0x0, 0x0, 0x0}) 5m43.281317798s ago: executing program 0 (id=3944): socket(0x10, 0x3, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000440)) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = creat(&(0x7f0000002180)='./file0\x00', 0x2) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r1], 0x0) 5m42.487837778s ago: executing program 0 (id=3948): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f00000003c0)={0x0, @bt={0x8, 0x20e, 0x0, 0x1, 0xc62a, 0x4006, 0x3ff, 0x3, 0x2, 0x6, 0x1bf78000, 0x7, 0x0, 0x1, 0xc, 0x38, {0x7, 0x8}, 0x74, 0x1}}) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0xff6f, 0xffffffff, 0xffffffc0, 0xffff, 0x2, "83843c556dec3a9a90800124b904cfc27929a3", 0xf57, 0x81}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f83edf848480000005e140602ab1100000e002b000f000000028000001294", 0x2e}], 0x1}, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x4) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0, 0xfffffffffffffe9a}) socket$pppl2tp(0x18, 0x1, 0x1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r8, 0x0, r7, 0x0, 0x6, 0x0) write$binfmt_script(r7, &(0x7f0000000080)={'#! ', './file0'}, 0xfffffffe) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0x5, &(0x7f0000000080), 0x4) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{}], 0x1) semop(0x0, &(0x7f0000000240)=[{0x4, 0xfffc}, {0x1, 0x5, 0x1800}, {0x0, 0x8, 0x800}, {0x0, 0x1, 0x1800}, {0x3, 0x7000, 0x1000}], 0x5) semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000107, 0x0, 0x7}]}) 5m39.354782081s ago: executing program 0 (id=3963): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x200000000000000}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x140, 0x1000, 0x0, 0x4, 0x0, {0x0, 0x3, 0x1002}, {0x34c, 0xfffffffd, 0x1}, {0xf4ef}, {0x8000, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd618, 0x1, 0x4, 0x0, 0x205, 0x0, 0x6, 0x0, 0xfffffffd, 0x8, 0x100, 0x0, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002c00)={0x2358, 0x40, 0x107, 0x70bd2f, 0x0, {0x1, 0x7c}, [@nested={0x2336, 0x142, 0x0, 0x1, [@typed={0x6, 0x9e, 0x0, 0x0, @str='\x80\n'}, @generic="1b7f8fb52ffd4bbab350b789c5cdf8665ff2901655443739e3b5a4ed50c6942d2b65f480e849161a38d026b8c54809047f7130182cfe7b2cc6f48b87355917cd05c863be1c145bfa2389f4c1d1dd824b91fa00c5e2ae8580f650c4ece81d92c238023246ffef", @nested={0x2255, 0x28, 0x0, 0x1, [@nested={0x1079, 0x84, 0x0, 0x1, [@nested={0x4, 0xa4}, @nested={0x4, 0x9e}, @typed={0x8, 0x149, 0x0, 0x0, @u32=0x3}, @generic="d83b316dec1b2eed950702454c4d7016a682664c90b51fd7522ee2ff7d6db376c0755ea6b89f9612dbed31bd", @generic="bef091909c79d1aae1be2291df2d2476a77f143edc22f26f8c091e33e21d978f78da045bc974c615a3deb192b01e8c5471", @typed={0x8, 0x19, 0x0, 0x0, @uid}, @generic="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"]}, @generic="4d5a6e0d915303ebacb55503361aa76d8e7c482d804e51b8e2deca7845cbd7ca270566614433f059ac06c246a4ec37118f37a89c94b3ec116337e6345378c19998ceabd5e27502e22e8baa0df338f8315b1c3c766cebdd5c50b596787fe5b41cb3cf538a6e390a02b6c4867fa578a22af9171644de9ca52e3a20025eef4649ed4a89a1a14e4862753367e35c55ff328c4cb122ba65dbf4362ba0ab247da066a9a4272ba0c5b0387c4c7c4a26d5a5", @generic="e23cc559605edb3628ab73dfed95b6f8c3ad91134eebcf87c65a08045de1dfec5ebae0ccb17ae9dff0b7ae66ef95c4d012c3f838a39bde8fbc7af524b49dc0ec06aa99d41dd8788422", @nested={0x108b, 0xb7, 0x0, 0x1, [@nested={0x4, 0x8}, @nested={0x4, 0xf7}, @nested={0x4, 0x2a}, @typed={0xc, 0x11d, 0x0, 0x0, @u64=0x4}, @generic="918e80e770eda6b41bf8b9254d2b137ec516ac2b5b55b181753c81b4e72400cfcdeac726762b1efa574b11d74677a5367780ba8d5fd06ad3e68a83d6d61bac329634099bb9f54b850b8c723b7326c7e91c33b3fd6387d5495a3c652f1b73f095bb904a0f53b865b8b4c2cd6913d871326784f6e7f07b5db98a08c9c8800cf4ba25c49983599600397a9972e63e90b4c271db7f7f104f06330356f5e2d5764508b2a38b34b0d83c3fb907e8e61d682230047c48d56a13c1d68faed84badc0b72cb066e480ff48b9f20de490ed436c6bce2135422b0d8ffa05f3d1d561371e7d3cfc60c113e70d1ced196ab4d278add23b53278edeba529b6b216c3d960a6657173b517fff5a7fa417c3c9f8db71049f6c9c998774dd29ef534fdb859b51f1b2be2c12711b38eca8b56c22f1d6b71e3ea83c5c660f53f77a6fb3392adb4f8c437d019f8621efa3045b2c9291461c7b07e443256cb1374da838966ec3596fc69e8882b4015ed345fdd82b88c8103c0eabe8c717ac8786bfa44215057763e292be264f1b544a725eb568bc40cd5048268497e41edcafc83833a667b4ba75452ed6feb0bc6421205f9769a936bdd83f2a757795fe55aeee15b43175e5a8940a9b0888d9a9a4737530c3fa53dc2a23728365b821f949204558a818ce440d3c61225a008519f9f0bc20dee6d57b9830693b7c5f1be9be7cf3b3be97d6f95a6c81df9c67ff233a52d7f2f63649b129b88b2f1af4d828582a992e9d7c8f47ecf3eeff928c6877b7c4c2146c8952f35a7de6f5d33584cbd064d01a713a94b605a2b183b63bb65c592f02a1f1578b3c46088dc93179411dd4779f6f9af43e81bfb4c971769972c40cdd9fde02c430509411848344649f2fe05cb485c77314ac3db0343cde79d28e3d23b2a4bafb8e26dcbedb87c935a70aa8b31adc319bf24016a36bf4581accedba95a514be3f32daef2d9c0d17f33164b9c8a9f6a8f2a60f65d94c2fc03107df0ea86654ce69f3424fbb6d7cce6f0cd09094efd3e94e031ca5ab2f673d8b7dba7da3b7469222b2402b4bcc16e5cbdc04980a3fc353e13dca5d6da6ae442f03a71d6e5430f2789fbfdf78d4a30fa1e447f9a46598c986e422fdd779435ccb5bbca858725221ab612035306059ceb4c1aba2c454bd1a5f5b2854919c6332d09546deb871ed078aa549887e5084be0962453a13829d0d13c3c8d2516fe5e16dcbc11c2ef643865dbe365d30b969de1333f939ea068f3151a0b5ebe60336427076114b18495c3a33950683f5ce73e41bd6399e911a2d136d34b8022c4b1e04cad42d2b98571f375e2d8486331e72d99c40389ff2e34d4c55aef6335ff33b9699a832c28d0da6ced47b6e1fa2e8f7178748b46694680a97e36e6ba6324e2ba21d8b611a02f3a43ca68ed06cedd1b4fe21aa596a46dbeaedfad76cb67179a31496874026b969d72cfc18faa39c981c25d92e58550c830861675e4753ea13dc2be94a88bb6fd429931c620e466f5adffb7ec5a4ddeeb01b6befef6e5d9652ba5a53cdbb9c5ee432a4efdbf358becd18c34eb954c2d26b3085de84ffb5095eedecbe2d9d98110678d357c4ed815e818ad9b99624ebb55c94c016a5ab2a4b304bf5478aeabefcfe73188445fa33d2dbd76cc73b47751b33ba97cfea9ba9357885af9b773068a0330c849eaa7bc190f57d9845e8a8a5ca07f11476e0ed3850a4950c4c614c163fd0e5127da54208b7e2379f36c9888f7612d51ae381b81e53dec670ea1586d81939220625094a2a82b918604a27331435df25402fe6a574d8e22acecb0f64ee105a9a2a20d4c699527f909645fa4108cfaf12c9d20b7dd4efcb584d2db93c00bb60527254aaae03c066e14c37b9db1daa43be77963907ba76d6976a783943479535433d1d301bba2aad3886365866c5db213713e1ba3860fe6c1147c6f5d7c217025da8249d637889ac6d8ed0052741fdaacffeb77ac1c4fba1dd5535753f7c5e087e3f2137dbdb8aa5fe00b7f32cae12ba18d374ac998ccf350ea7020e1affe6093b453c197219f9b9378f12e1b143eb3d401f48677ccc3075d6ea630605d79c0e8e4fd2ac3d1ef1ba82a93f459a371cce0236b23391290bed24a8154714a1d8d34d08afe904adedc7c3e14624b317f3474c903ade0b7775a0bee2357752cc6c5516836eb36dd8934bbbc70e04af56d15da7efd81708258d8e152a3f77bdce16767ee645412a1fbce7e3e096e220d168c6f735e0c050e051eb09ffd899d4dd104f7f650567a6f58b2ad5b915d2a4892380233d1589e68c33cdc1ce0d777e1f2eb34e342bdc5dd5f91b92ea751e4ae3462063c5076bf04e8b66d757d959c19616263eec61c6c0301eda9d5b1bd9532e2d79736d2e9094722e45ff51cd728f8b93445e08ae67045859e7f85c6156d0ec6a168e19c93cce7b77e6a6f5bdaf79c34a631198e335e9db4dba4f908187f2ba3430cea5f57dd6894e3db0c933290497368fe7867cac666305e35aebe45dbc2fd4926b1df24b93392673765f59778d544affcbeb3ab5a09b6df23903cbde1d1dd45d698d645cebbe7c295707285b1aee27b77024941b1fbf08c52d4bf3c70634e1eb906167fd5f7efe8357cef61cba3a0a8bcc1d3e2bead29a6a4c53260cad0abd358fae4baadc7ed7b6f8a0c879c0b4e4bdaa4312db23390cc46407c94f7f4dcf417d213fa9b04da15269c0a4b21e06439892b86fb66fb0b46db30f11b4766bd9d59ed52569803607b64416945e20e86470b7919e4a4abe1f66cc36a934376badcb583fc2e6c803c46a2fbf513818e8efc8bfb2b72cb45828e57577fbe4f1776e1962c912a4fae47c2b108406c00450c3b26ff0dcd059612e4d3d68bc60d817514f635b3216393598138a5cf9ff5ca33810d7a73665658cf35e0289410aba78918b1e1453b782d01144dd9c0ad0b5b92b62ad3b39a17add78ffd2964dc39237bd29ee225725442bad2d6d43930768df072ff4404b6cab4d45c2659ef2aa34ad81571b07fc4aa25f73584c81cb79d8195fd4b9fd62b9836fc9937d06a478d092128bad825a1a01b1c821efa37f861e95c44d27c2626ac96d348432ffa2c48387cc3bcd7378c096c19cbe6c8ba8e59286bb593aa33ccc5e0c60dc705ae838e8446887aecc1b85d77e8ce135daad2854661efbff841b20bcc11e5655a5dd9b1b5f09528dc71ea87b40bf003c4fd0bc7b089ead05c48fd3d519be1a862b5d59ef31c937209e80714287a72e9e0bda4beb6b5caf5711c3376e921c916febb2caebc7bac729a1e305e1dd739953bf38bbce04dca22301493d93cf8b60d45e24fc8be9eafa07a2b9102bc91b29c905bf525ac8c6a5b06acfbe89490e071952a050373d72724ce78bdea5d2c0bc21be1580fe7eac4c4356bc9ce61052ac5c185fe997ac77c8611d594e770098219ba662bf67f74a82b0419d79da0976f56de26b85ba008154ae8fbfc2e8c7f18c53291c5cfe8e1299580c9e6393312be812939756ef50bb4b08864e184b35c2597d38d3a9edcc0112cac1a83ebee343f1e8fe292c7523a79b1d3f2dcc6d5d138716fa57fca15ff79b0bfc7d8e582fad73104d04472855dd3c822b2d1009dccf03301b8a7e4253a281c8bee8cb2f62ee7364483f12b79937b4ef19f88b3a32fd4c50c124cbb3db90797ae1ce985d09c2e8114fa42a323d1e3e6b35a6432110fa9be4db1f294d4e9b59ebe47313715916599185659869ac182901e28008f3225d99631351fdf3704d491a834cf06a9930c24562c9d0f89009ca60960e3e6df7542f4967e814a2c30f25049abfd42bf0ff6ab7e96af4f6242138a50767e1a58837e33900ead465c22f7595fafb6b0f2e89562b46d3500a7fe52ea0555741c206897869de0c70704f2475496a3fd28815c9406022b1a43cff57ae9524dca9ef87053294678547c23a70cf5d7fa9f639a2e14687b9bedb836e9bc50e84bd134ff5ee1affb83396cde4ae17e0bef78b1d6ab93f5d185472c2abda504ee343c04abc43244d12709479d59537380b39b44c598953f12e5d3f2abc2e1d41988949d81d0aff38e10c1f32d1ea2302fb087b5de02a81c742340e5a1785bcf86c55b59b1888b5646cd15103c55b6f3bc419ee9b10b3cd8516de3dc5ae3777ebfe882dcede3384827e1d98d5d4322dccaad3a20ef858298e6e6473fe8dbd16c7beaaea9e4719c870773bc4bdbdcad1a274c6f02bb48f5036da512112d7357c5c20d8a13dcfebab1541c6d2cfb6cc28855df13d5115b3e690c9c7a41ce7178592a2b8b6d2203664e6c2e1189c868108f0329eb6b3667c721400ed4047438e1f5e1d4192be2b2f356fa415bc699607f3d1ade750457add00ad970f23e6892fb79e2fd742c1e0c4367831c2413ec4bea512f62202a38dad2b23763fe6b72171b27666d7a71160e1a04d482aff9f2158391abe26e27986901a4c3c2835740f0d6c4e2f0c12582de45a9d51c07761fc984e7ae1378517898bedfea47e88ea3b794b88334f5421985c048ea9e191185528b159b996e63790c744d426a850d6f4139e6272eef5b209943c04ad97b1c29ae7a9fb3bd11c44b4a0aa4ed60fa471d5e7cbb4237db912894df36387d7449260214fffa811433b6e92310edf12be62d9812dbf949c5e35a544fc4d78de6a672b0c1c205177e4a7d28bed4d50b7d73cbdbe260f5814443feb4ab573ffd4520277b9231a5a8950c148825a7b43f41f3c4ec5a84928eeaa56cef247deba077f720bfe7821dd015f578a2024582ad5fe40967353c9eea01289a9bf4293a8be022028f0cf31205d1149f3a768590b24ae6d3ae767bdd7d276d767a08fd280d2f6192327ee2b46bb2a7d116d4273f2c483223c4de631bea182415baed8ff6f38f85e8072b256c2e79cadaaec4d33ebe90b4e4673694ae2026f044190ff26e046da21c017159a6bee4bd6dc8b5b7f39bcf1c94756df1550f06c34cc6a05161f27136acd45228fce1119c9c656d20941c59df3c9d70c4e88d6df226ef215af2c78e89394064dd89336aa578dcfd36bb2ebdcf72542d4dacb3c152bc09bfb6589157595068f619bd64940f8ce3b808fc520e62938f31544f3fcc720acf4979c4115c3d609774b053a663fbf0ab58211a65e24668a90911bda94d4808def07e73a427284c29e638668a55478061bd44280e90646af484fec73b31c3c7828170c6fc88e45752eb914a52717f0b5684d26e1a3b98048dac51d02887c0a4147e67335330347e0e15fdd53c1450fef86d14f3f55f019cf32e8192d69f9fd8e4b39965dea882da6808d2771c57bf6945bdd3b4e15baea2f2d6645a67d4678ba3628ad40b01dee6195d1c14cd608f6c0b968a995a8124ee418cd55df2233b226cbe57cead3ddf21b7b31c5e56f0d70e9b3c63c587d4edca63369c0c688e9b4ebc9d3810264ad77dece3e0face780cacc6be9d1742d864b7cd24384198f5cca45c19e08670ab2464a88f3bd56363735b3dd0277ae00779d583636e0a1999be5040703faf010c54f73a6b1e392bf3ba60b7b3d579e127f3043e9aebc9bace43fc2bc8fd317d2ec7dffd362aa76c47464bed3a45a018f05dd0b1d77e2024f7ee6e2fd47072e6115c47ec1fca21f62e0072b65a01049337499ba34ab4d7d654beecf31197a0d417618099e6309773fb2eca5f7a545ba0c58c3150e3e65f9e79ce296242e5d0e452fdd111e58ac00d1fa57e5fcaa1a71c3d35a3b48c78f62cf1864a499b9d7e28e0692c0966e8f3d7cd0dd9e73fed165f621246584c613c754734e01e8d9a78232", @typed={0x8, 0x2b, 0x0, 0x0, @uid}, @typed={0xb, 0x119, 0x0, 0x0, @str='@!\x8d@\\(\x00'}, @generic="e6cd07eb9247817c1fa8ebfb4107e0c66d13a785bfa5858405dba4b37a424c54f4fefc2470141755a63de42059566fe670c5660e545623b248410e899b650eed6652c8a05510dcd636f3e26df7324cda52bcb837381eba14f3d1dd"]}, @generic="08aade2328bd3d1cce3c5b017452f58b19fc68f589bd5be38f8b9e7f3065090edd069d7b18b10cd57b6c5df44134c9e57fee0694b6b3abf818f84f1cbbeba1a74159ef04e5ac3d733a3f", @typed={0x8, 0x7a, 0x0, 0x0, @ipv4=@private=0xa010101}]}, @generic="a073b7662ad955f4f35e235803299f1461a5ea74194ab45ea74547ac64d26e8cdd7298fe5bce1ee7e862be448a37c44be32712909e60fffd2ba23b4706f36f96729aeee93489ebecd1ecfc21e7da55c0d7109f0d9a788c6d4f9086f9c303019b30f83afe", @typed={0x8, 0x9, 0x0, 0x0, @uid}]}, @nested={0x4, 0x1}, @typed={0x8, 0x10a, 0x0, 0x0, @ipv4=@remote}]}, 0x2358}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) fanotify_init(0x4000, 0x180) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', 0x0}) rmdir(&(0x7f0000000000)='./file0\x00') socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KDGETKEYCODE(r4, 0x4b4c, &(0x7f00000001c0)={0x800, 0x88}) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6(0xa, 0x80002, 0x0) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)) socket$nl_route(0x10, 0x3, 0x0) 5m37.328427093s ago: executing program 0 (id=3968): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r2, &(0x7f0000001b80)=[{&(0x7f0000002f40)=""/102, 0x66}], 0x1, 0x0, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') chroot(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000200)={0x2000, 0x35, 0x4}, 0x18) openat(r3, &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', 0x305040, 0x0) 5m37.296551297s ago: executing program 0 (id=3970): syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_writev(0x0, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r7, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500070000001400040073"], 0x58}}, 0x0) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1ff}) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x3, {[@global=@item_012={0x0, 0x1, 0x9}, @global=@item_012={0x0, 0x1, 0x5}, @local=@item_012={0x0, 0x2, 0x2}]}}, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 5m36.922605788s ago: executing program 0 (id=3971): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000002140)=ANY=[@ANYBLOB='@\r\r'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 5m36.686252989s ago: executing program 35 (id=3971): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000002140)=ANY=[@ANYBLOB='@\r\r'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 3m53.445400901s ago: executing program 1 (id=4338): r0 = socket$inet(0x2, 0x1, 0xfffffffd) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) read$FUSE(r1, &(0x7f0000006300)={0x2020}, 0x402) write$UHID_DESTROY(r1, &(0x7f00000000c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'erspan0\x00', 0x2}) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae25625c64f82ecc0a7", 0x3e}, {&(0x7f0000000cc0)="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", 0x1e4}], 0x2}}], 0x2, 0x54004) 3m53.260753568s ago: executing program 1 (id=4339): modify_ldt$write(0x1, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff44}, 0x4040844) sched_setattr(0x0, &(0x7f0000002280)={0x38, 0x0, 0x0, 0x20000, 0xc0000000, 0xfffffffffffffffb, 0x9, 0x6, 0x80, 0xfffffffd}, 0x0) syz_open_dev$usbfs(&(0x7f00000021c0), 0x5, 0x100) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[], 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002200)={0x50, 0x0, r3, {0x7, 0x27, 0x2, 0x1dd880, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004340)="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", 0x2000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010029bd8100000000", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000000000000000080004000e0400001400168010"], 0x50}}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000002300)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x2, 0x4, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 'y)\x00'}, 0x0, 0x1, {0x0}, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000200)=0x2) syz_open_procfs(0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xfffffffffffffecc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) 3m49.148935167s ago: executing program 1 (id=4349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000003c0)={0x14, &(0x7f0000000440)={0x20, 0x10, 0xc0, {0xc0, 0x23, "77099f8d48e42dcb5142e4708a524672d4f3590a8c1a2f6f70803e77b78020f97fb23847f83102aaf4a18c6541ae44866b7464b65a14149ea61902bc90e19c50a96e227d5ec9dd161b5dc8f073268f2b19e9ccfe2a74875aeb2f4522ac38b8181627cc905c4aac5ce9f2f423c0f5b9aec7a9d8fbc26037274ece4b3f578b3c3b0ee69b63a04febd9c7f62d0fd4196c9d0f9d15d63089f06660a124f7cfd7e57eb063b5622fe0134e5484fc39e4a46988e2b487c7c74402b02b796baf69a4"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b00)={0x44, &(0x7f0000000540)={0x40, 0x14, 0xd7, "8c9ccb2e7b868f2605ada140ca239cfe18119a2e493479dddde4cd1bb15030a643ffda196fc411c42a95b32123a1fd0254bd8d208778aa5287b65cc81635626f6a29b7ecc5aef614468dbfa066983116093359735ea05bf755c702520f65fa6127813445dc00582d5b1572cdc6b211bf815edaab0e8dc2777332888ddbbeb2397eacc25b298d89abd4e7e898e37c7e4e00422f1ad5d93e177d073ba9c6b75720a5a5b6cda02dac8a95883f6de746a00ffd2039b151d2d97a6d89a295fa566f4dd2acf4ce2cae24aebfaa810e490525b1bb94ecd274b16b"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xa}, &(0x7f00000006c0)={0x20, 0x80, 0x1c, {0x0, 0x46, 0x7f, 0x8, 0x6, 0x8000, 0x2, 0x5, 0x9, 0x1ff, 0x8, 0xd2b}}, &(0x7f0000000700)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000a40)={0x20, 0x83, 0x2}, &(0x7f0000000a80)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000ac0)={0x20, 0x89, 0x2, 0x1}}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x2, 0xfff7}, &(0x7f00000002c0)=0x8) 3m46.926600661s ago: executing program 1 (id=4351): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xd20a, 0x10, 0x3, 0x40004334}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) keyctl$restrict_keyring(0xa, 0xfffffffffffffffc, &(0x7f0000000300)='asymmetric\x00', &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00\x00A\xbd\x98\x88\xf8\xc8\xa1#\xc5\xae\xe2\x17\xde\x8f2\x90') syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="81bd2bbd7000fbdbdf251400000018000780080002"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c8c5}, 0x80) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x1, &(0x7f0000000600)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1}, @IFLA_MACSEC_REPLAY_PROTECT={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r8 = accept(r6, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000040900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001408000140000000090900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000"], 0xfdef) sendmmsg$alg(r8, &(0x7f0000000740)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmsg(r8, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x2) 3m45.700876831s ago: executing program 1 (id=4356): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000080)={0x44, 0x0, 0x1, 'queue0\x00', 0xd08}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000001f) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x80000024) fcntl$notify(r5, 0x402, 0x80000032) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) 3m43.99305347s ago: executing program 1 (id=4364): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x2, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xe7ffffff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "68b9c381"}, 0x0, 0x1, {0x0}, 0x0, 0x0, r1}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x10448) r5 = timerfd_create(0x0, 0x80800) read(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x20000023896) r7 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg$can_j1939(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000003bc0)=""/111, 0x6f}], 0x1}, 0x10000) 3m28.888973369s ago: executing program 36 (id=4364): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x2, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xe7ffffff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "68b9c381"}, 0x0, 0x1, {0x0}, 0x0, 0x0, r1}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x10448) r5 = timerfd_create(0x0, 0x80800) read(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x20000023896) r7 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg$can_j1939(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000003bc0)=""/111, 0x6f}], 0x1}, 0x10000) 18.671367954s ago: executing program 4 (id=5339): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x395180, 0x149) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x40010) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') preadv(r2, 0x0, 0x0, 0x40000000, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='$]*&:[{:\x00', &(0x7f00000000c0)='\x00', 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a80)={@fallback, 0xffffffffffffffff, 0xa, 0x72ba0346831dfb3b}, 0x20) r4 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x20c841, 0x0) ioctl$int_out(r4, 0x2, &(0x7f0000000140)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 17.246649415s ago: executing program 4 (id=5351): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x193}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x40442, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000040)=ANY=[@ANYRES8=r4], 0x28) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x118, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x217e, &(0x7f0000000240)={0x0, 0x8fea, 0x20, 0x0, 0x1df, 0x0, r4}, &(0x7f00000001c0), &(0x7f0000000340)) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd, 0x3, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e20, @loopback}}}, 0x108) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f00000004c0)=0x2500060) io_uring_enter(r1, 0x3516, 0xfffffffd, 0x0, 0x0, 0xfffffffffffffe41) 17.029176399s ago: executing program 4 (id=5353): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) open(&(0x7f00000000c0)='./file0\x00', 0x108943, 0x148) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x24}}, 0x0) 16.865445535s ago: executing program 4 (id=5354): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a0000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 16.671759955s ago: executing program 4 (id=5355): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) unshare(0x400) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) ppoll(&(0x7f0000000280)=[{r1, 0x701}], 0x1, 0x0, 0x0, 0x0) 15.734826499s ago: executing program 4 (id=5358): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x408260) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21, 0x80000007, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) unshare(0x400) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) shutdown(r5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES16=r1], 0xa8}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r7, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r3, r4, 0x0, 0x20000023896) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e23, 0x2, 0xa, 0xa0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1={0xfc, 0x1, '\x00', 0x4}, 0xfe, 0x32}, @in6=@remote, {0x0, 0x1000000000000, 0x0, 0x8, 0x0, 0x0, 0x2000000000, 0x543}, {0x4, 0x8000000000000001, 0xffffffffffffffff}, {}, 0x70bd2a, 0x3503, 0xa, 0x4, 0x0, 0xd8}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) r9 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r9, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4) 6.867016039s ago: executing program 7 (id=5384): keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r3, 0x0, 0x4048043) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x12, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 5.405081285s ago: executing program 9 (id=5388): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026"], 0x398}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 5.209655065s ago: executing program 7 (id=5389): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x2c, @remote, 0x4e24, 0x3, 'dh\x00', 0x8, 0x0, 0x78}, 0x2c) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1}}], 0x1, 0x2090) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a0104fdffffff000000000a0000040900010073797a310000005168000540000000020900020073797a310000000008000a40ffffff41c3ba442556599da77f5b8783016b90fc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x88c0}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000140), 0x9) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10700000800034000000001140000001100010000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) 4.94477656s ago: executing program 7 (id=5390): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x145, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x14) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0x40044102, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000475000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000000c0), &(0x7f00000001c0)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) write$uinput_user_dev(r6, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x4d, [0x10004, 0x6, 0x9, 0x8a4, 0xfffffffe, 0x2, 0x7fffffff, 0x80000001, 0x4, 0x1, 0xfd, 0x3c6, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x0, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x3, 0x2, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xc, 0x36, 0x4, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x0, 0xd, 0x10001, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40000040, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a97, 0x0, 0x9, 0x8, 0x0, 0x1, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x4, 0x2, 0x200006, 0x5, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x4, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x40000008, 0x2, 0x4, 0x800, 0x7, 0x9, 0x10000, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x4, 0x8c0, 0x9, 0x2, 0x8, 0x7, 0x6, 0x2, 0x81, 0x8, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x82, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0xd, 0x7ff, 0x606, 0x5, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0xffffffff, 0x0, 0x2, 0x6, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0x20e, 0x4000006, 0x7, 0xfffffffd, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x8, 0x3c, 0x1000, 0x3, 0x3, 0x15, 0x8000, 0x7, 0x81, 0x8, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) write$uinput_user_dev(r6, &(0x7f0000001180)={'syz0\x00', {0xaf0, 0xd033, 0x180}, 0x45, [0xfffffff7, 0x3, 0x2, 0x1, 0x80, 0xaf7, 0x8, 0x6, 0x7fff, 0x9, 0x42, 0x40, 0x3ff, 0x2, 0x1, 0x8000, 0x7ff, 0x20000003, 0x5, 0x5, 0x1, 0x4, 0x6, 0x2, 0x6, 0x6, 0x7, 0x1600000, 0xa, 0xfe, 0x3ff, 0xc6, 0x3, 0x8000, 0x1b, 0xb, 0x7, 0x0, 0xff, 0x4, 0x54, 0x6253, 0x7, 0xda, 0x67aa2099, 0xffffffff, 0x7, 0x8, 0x9, 0x9, 0xd, 0x6, 0x5, 0xbf, 0x7, 0x1, 0x7, 0xff, 0x7, 0x800, 0xfffffffa, 0x3, 0x6, 0x3], [0x3, 0x803, 0x7, 0xa, 0x3, 0x3, 0x3, 0x2, 0x2, 0x5, 0x0, 0xfffff283, 0x1ff8, 0x8, 0x100, 0xffffffff, 0x7, 0x3ff, 0xffffffff, 0x0, 0x400000, 0x9, 0x6, 0xe, 0x0, 0x100, 0x1, 0xd, 0x100, 0x800, 0xcb, 0x5, 0x5, 0x6, 0x0, 0x3, 0xe, 0x6, 0x81, 0x3, 0x2, 0x8, 0x1, 0x6, 0x8, 0x5, 0xd, 0xfffffff7, 0x2, 0x8e, 0x4, 0x8b7, 0xfffffffa, 0x1, 0xfbfffff9, 0x3, 0x9, 0x7, 0x3, 0x942, 0x4, 0x12000, 0x4fb2adfa, 0xdea0], [0x2, 0x3, 0xfffff001, 0xfffffffd, 0x8, 0xe6, 0x8, 0x2, 0xf441, 0xa, 0xfffffffd, 0x2, 0x10, 0x1000, 0x9, 0x2, 0xffffffff, 0x7, 0x0, 0xf361, 0x7, 0x3, 0x0, 0x5, 0x81, 0xff, 0x81, 0xf, 0x1, 0x9, 0x7, 0x0, 0x10001, 0x8e5c, 0x4, 0x9, 0x6, 0x1, 0x200, 0x7, 0x40, 0x7a2c, 0x200101, 0x9e38, 0x4c88, 0x6, 0xa8, 0x4, 0x8, 0x9, 0x2, 0x6, 0xfffffff7, 0x1, 0x1137, 0x8, 0xae, 0x4d70, 0x400, 0xfaa5, 0xffffff01, 0x15, 0x7a, 0x1], [0x0, 0x8, 0x9, 0x0, 0x6, 0x8, 0x9, 0x4, 0xfffffff8, 0x200, 0xf, 0x5, 0x3, 0x6727, 0x7fff, 0x9, 0x200, 0xfffffff7, 0xe3, 0x400, 0x0, 0x4, 0xdfd2, 0x39, 0x101, 0x9, 0x1, 0x1, 0xa, 0x7, 0x10001, 0x1, 0x6, 0x400, 0x0, 0x8, 0x2, 0x9, 0x9, 0x6, 0x200, 0x0, 0x2334, 0x6, 0x1, 0x2, 0x6f51, 0x81, 0x5, 0x0, 0x7, 0x3, 0x7, 0x34254b70, 0x4ad, 0x3, 0x8b21, 0x1, 0x9, 0x3, 0xc, 0xffff, 0x9, 0x8]}, 0x45c) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f0000000040)={r4}, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r7, 0x1, 0x9, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(r0, 0x0, 0x20000000) close(0x3) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r6, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x10000}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 4.431166555s ago: executing program 9 (id=5391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x8, 0x0, 0x413}}}, 0x7) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x10, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x18, 0x0, 0x1, {0x4, 0x1, 'Q.931\x00'}}]}, 0xa4}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x40, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/69, 0x45, 0x2000, &(0x7f0000000300)=@phonet={0x23, 0x6, 0x2, 0xb4}, 0x80) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x74, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x81}]}, 0x34}, 0x1, 0x0, 0x0, 0x48842}, 0x80) 4.275393374s ago: executing program 9 (id=5392): symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') statfs(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 4.132465748s ago: executing program 9 (id=5393): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x2, 0xfff7}, &(0x7f00000002c0)=0x8) 2.938179708s ago: executing program 6 (id=5396): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70023000000090507", @ANYRES64=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.60905636s ago: executing program 8 (id=5398): openat$vim2m(0xffffffffffffff9c, &(0x7f0000005a00), 0x2, 0x0) 2.532920692s ago: executing program 8 (id=5399): keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r3, 0x0, 0x4048043) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x12, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 2.378909415s ago: executing program 9 (id=5400): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@get={0x1, &(0x7f00000008c0)=""/4096, 0x6}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090400206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_connect(0x3, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="40050b00000020891a"], 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)={0x2c, r3, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x24, 0xc]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0}) 1.882150031s ago: executing program 7 (id=5401): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026"], 0x398}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.561026528s ago: executing program 8 (id=5402): syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) openat$vimc0(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) unshare(0x72030400) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {0x0, r4}}, 0x18) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0x7, 0x1, 0x129, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0x80000000, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10003, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcd, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000201, 0x0, 0xfffffffd, 0x4, 0x4, 0x7, 0x9, 0x1, 0x1, 0x5, 0x5, 0xfffff966, 0xfb5, 0x2, 0x4, 0x9550, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x10001, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x10000, 0x100, 0x6, 0x10000, 0x1306, 0x800, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x8, 0xfffffff8, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0x1, 0x7, 0x9, 0x6, 0x4, 0x5, 0x2, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x1, 0x2, 0xfff, 0x6, 0x9, 0x7c83, 0xd, 0x1, 0x2, 0xd, 0x81, 0x47, 0x8000007, 0x0, 0x11, 0x3, 0xb5, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x2, 0x40, 0x1, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x4, 0xc41f, 0x3e1e, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1003, 0x10, 0xd, 0x6, 0x8000, 0x53, 0xf, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xa, 0x400, 0x8, 0x0, 0x8, 0x100007, 0x9a33247, 0x8, 0x0, 0x1, 0x8005, 0xfffffff7, 0x5]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.508571831s ago: executing program 6 (id=5403): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0xffffff99}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c416676be5828c5c8ceeed81a978fd9c32d877ec94961df3203f2b7bafe86580c10d29ad805053e356bd960018a", 0xbd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1914593fbe63c1c99bcbf2a2e1688c0ff2ee5b69", 0x14}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000f40)=[@iv={0xe8, 0x117, 0x2, 0xcf, "62783c54cdc47da6cdb7f03d8cab5abe1a2c7fba3106730d09833a5f362901e8998d1bdb7b17d2231b63942a4e156500be1246b02efe051a238dc81ee8438f6b2ff7e93b21ff348844f5e5a67df0de01ec340585f874125320137c0bd3c5ea253f30729a229af1f07def7e9c5681f97cb16eb40f04477084186b7ef0e9431a107bf991abef4bbe24aa287d12171617a1748f0d13a7951392b8c8bd22c7d29d83480a7d720f738e8b2e22d5d6adb8656c6be7f8d4c74b19e9be637735447ed3b0d157c47581a13a9ca3cadaee1b605a"}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x80}, @assoc={0x18, 0x117, 0x4, 0xae5}, @iv={0x40, 0x117, 0x2, 0x25, "bd2dfdf3a35167789d1e86eb11d3da70196a98ded037398fd10a44e4483892f9e41494aeae"}, @iv={0x0, 0x117, 0x2, 0x0, "a1525e4edb3ed20038351cbec9986b7f1548bae5344672d70bc4d90e089d8633b56f8225904f42e78f6230ee768d387680c1bf7e20c820e147bd8f79440392b7eefd4c5864e0f2a352fd4075429d9bc38be3651a9cf1c8fbc4e8483928334ef4890430eaf0a72d1e68b1d11113c773cd53225e60024023b723f721683d79a8533a6cd2b3b7eb0862c4f44eb5"}, @op={0x18}, @iv={0x30, 0x117, 0x2, 0x15, "e186f696fd1013a29e3da8955ad005d353361442a1"}], 0x200, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x50, 0x117, 0x2, 0x38, "ad9d57ae1a34cd169d6fad8561a7ecad9a52c724a11e24510fc61cfeb3470c372d2eff433cea2fec76c92d3482c3c6692d8275cd566690ad"}, @op={0x18}, @iv={0x140, 0x117, 0x2, 0x128, "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"}, @assoc={0x18, 0x117, 0x4, 0xeed}], 0x1d8, 0x4000010}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000ac0)="e57b2098eebbf00e85c066cd616ac4c7f7aad46ad25398631c11a50d045d08af9c20922a4d95b0e6f376a6acf9baffa30229d37793c31505429b9aeb02ebbce4a2", 0x41}], 0x1, &(0x7f0000000b40)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x0, 0x117, 0x4, 0x1}, @iv={0x80, 0x117, 0x2, 0x65, "433075e40e764ff78e98d6e2fd28ab1e7de0926b29692837e244860a37ed45eef4be3fa9abbd4b13ca0aac110785fc948b1797d36763c6d368e52217fda90bbe4fc93ce397e33566a5f1637e9ab82231e64719d3529d653ab937022831b3a638704fe05ac9"}], 0xc8, 0x7a4e64b47bb0bd6a}], 0x4, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) statfs(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.495650054s ago: executing program 8 (id=5404): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_disconnect(r0) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) (async) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0xfffffffc}}, 0x10) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffbfef}]}) (async) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x8, r6}) ioctl$DMA_BUF_SET_NAME_A(r8, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') poll(&(0x7f0000000040)=[{r8, 0x8235}], 0x1, 0x10000) (async, rerun: 64) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f0000000080)=0xf58) (rerun: 64) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f00000000c0), 0x4) (async) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async) bind$tipc(r3, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x1}}, 0x10) (async) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x6}, 0x10) pipe(&(0x7f0000000240)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) bind$tipc(r4, 0x0, 0x0) (async) unshare(0x2040400) (async) socket$kcm(0x2, 0x922000000001, 0x106) (async) setsockopt$sock_attach_bpf(r8, 0x29, 0x25, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[], 0x0) 1.4248121s ago: executing program 6 (id=5405): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf"], 0x398}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 938.431675ms ago: executing program 7 (id=5406): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x409, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000000)={"3c1df9082c48040aa65c4efcd1ea503a91ece074c24bbe19a79cc06e58c5ad33", r1, 0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) 899.402944ms ago: executing program 7 (id=5407): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000840)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a00000006000000e34a52c98bf4000000000000000001050000000000020000000008a75300000000000000001be192125713aea03fa4852db45a5315ce0e95dabd51ab447f9505b75e20de715f25559e496eb2e3c0404d36b62155449de588ebe8cb4e54f6f5d8f9ff55ba0d23453fef630e82a3e87bbb284894ffb55d1d428673e1f4b2c85bb9c2f658a6a362081af8ac8a"], 0x2a) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x2, 0xe, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x7, 0xda, 0x0, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}}]}, 0x28}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000000040)=0x40000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r8}}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x24, &(0x7f0000000200)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x140, 0x5, 0xf, 0x9, 0xd}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "891dba73fc66d84ecef1500f49ebe72a"}]}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'}) sendmsg(r10, &(0x7f0000000780)={&(0x7f0000000580)=@caif=@dgm={0x25, 0x4, 0x8b}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000680)="6d629e1f39cf8f9ea6130909ee1c88e66a9b2bd449911416d2d0a9bc5ef3e43eb227a2df21a48655833ce3934f772110bac7776d0c8783a66f3832f15a199a1144e74a7ef2fcbcee6f34657caec3fa84de26f80f849ea1d6bc65eb58ac", 0x5d}, {&(0x7f0000000700)="f20d0c03f66beb6bdb39ee33dc9ca0d6a17b02276791879c3f10dea6a31eb1909500ce73ffe31dc1cc542476236346cb3dfaf2264bfa9f48410448c840a6c35fa9ace4f9c7ae12a409410af3c0a6df", 0xa0}], 0x2, &(0x7f0000000ac0)=[{0x98, 0x1, 0x200, "12310ae1cc0d0c0f39a1281a6252fc56390fe9df43bb228736c5000b3efe9b02fa348c1ada5dce455f004b71c87cdd089fbd5f2b19b5cd253ebabd6df65420782c1ca8a2275658ff8d639f8fb3c4e10f5f0306623cb85193c4b6d1cde8b9b98056e10d9cb5db61061a956bb22e1533c5b8fe4ad0652de0a6af587f14b0a178970a6f"}, {0x100, 0x112, 0x3, "c4f188885e457981ea4a618cd5f1f91715e89f9325f92ae2178b2a048557541902b39b6c8b1411a296952e83152186470da5909c9524b42a51963e4ff473b7c5d152d7696698207812fe374843bb35c349acf3a925a9c6d8e38f7a6d3173425afc9f6c1207016e3393c00af855da8aba3dc1d0a9e25e43d69e43a4b64c8f8a8612e34cb544fd26d944bf12031089894fd5f9b4a0c570db5868e75975010bf535b56f99a636aac105d2a3daf6c48a890dc41dc346b29601317a6c6bd08fe0f712a9e379e1acd05df5c8900946193f15bf897b94f4b2094f78082c958684d4f6be06931499e3a2413332"}], 0x198}, 0x4040005) madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x9) 675.924333ms ago: executing program 8 (id=5408): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x193}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x40442, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000040)=ANY=[@ANYRES8=r4], 0x28) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x118, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x217e, &(0x7f0000000240)={0x0, 0x8fea, 0x20, 0x0, 0x1df, 0x0, r4}, &(0x7f00000001c0), &(0x7f0000000340)) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd, 0x3, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e20, @loopback}}}, 0x108) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f00000004c0)=0x2500060) io_uring_enter(r1, 0x3516, 0xfffffffd, 0x0, 0x0, 0xfffffffffffffe41) 673.746557ms ago: executing program 37 (id=5358): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x408260) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21, 0x80000007, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) unshare(0x400) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) shutdown(r5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES16=r1], 0xa8}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r7, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r3, r4, 0x0, 0x20000023896) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e23, 0x2, 0xa, 0xa0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1={0xfc, 0x1, '\x00', 0x4}, 0xfe, 0x32}, @in6=@remote, {0x0, 0x1000000000000, 0x0, 0x8, 0x0, 0x0, 0x2000000000, 0x543}, {0x4, 0x8000000000000001, 0xffffffffffffffff}, {}, 0x70bd2a, 0x3503, 0xa, 0x4, 0x0, 0xd8}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) r9 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r9, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4) 489.641692ms ago: executing program 6 (id=5410): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (fail_nth: 2) 400.679741ms ago: executing program 9 (id=5411): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c8, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x3f8, 0x2e0, 0x2e0, 0x3f8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xc}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x4d}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x1, 0x5}, {0xffffffffffffffff, 0x1, 0x7}, 0x2, 0x5be}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x5, [{{0x9, 0x2, 0x5f}}]}}, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f0000000480)={0x14, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)={0x0, 0x3, 0xbb, @string={0xbb, 0x3, "c025cc505ca1f8f8885a48d82509e21ed17d6e0767980b3aca996238d00232da070eeca3f5162b13265b8fad0ce2e1d9254e65823888e68c15e7082963937d5bd87cd4e7498bb94c3586c991b85a3bbcc2cc204b79dadd94cb4b93109aa71589e2b49a3bf8dae790a80ec2b7fb83c8e3403b9364a08b43757e7fc392202551dc9d59fd4f6a9e7eee231653ff66ea39f7e35281c0f118ed885b108db4af448e3046072344a6a473e6eb2f713209092b4d68dbf39510a00aae59"}}}, &(0x7f0000000980)={0x2c, &(0x7f0000000700)={0x0, 0x5, 0x13, "3f72bb24b078505a8b81b6ac5b8a1e7f9d87a9"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x67}, &(0x7f0000000780)={0x0, 0x8, 0x1}, &(0x7f0000000900)=ANY=[@ANYBLOB="c00521000000"], &(0x7f0000000940)={0x40, 0x5, 0x1, '>'}}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="40002400f44d245b5db7a38c1b83421658b38f56f63cde87e6ad27edc43bbc3d7100cb40dbe7d9345046ed88349897ba"], &(0x7f00000000c0)=ANY=[@ANYBLOB="000351000000510318303e8a350513273c5848bbc424b6266703300ba495b7822187431d8b12ae4b131e48fc9b164672edb66b78577127031b239f8d18ca93bc88ac75fb912e664b63"], &(0x7f0000000200)=ANY=[@ANYBLOB="102a1754089ce8c375c0b1d71b5324b2ca3ea9953a612a56bc4f8ce3d3120961cb5038ac7a524fb35c68553edf545cab0e14b8128b251347b056355b3e78fabe60794aad161fe151f7"], &(0x7f0000000180)={0x0, 0x21, 0xffffffffffffff28, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0xa31}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000a80)=ANY=[@ANYBLOB="4030ea0000002d543e6e6533d3195ab8d1f48619e90ede2c4f81855267a8f456fd69cebb4e719abb00741cad963ef2508451209d559f17dff2abb9a6e7647f997ba95c462f10eca188e944cbaaf56d1c9c918b816b0b8c84a033dcea7d85d085692363c5511c280b5f40fd84ae94a5d72517a0c5c8bd75a6db9a8de466c4cb09155ebc9e6608de962df47fc9679384dbcad8f945ee9c0b73a284f949b238ef6b426aa12f2c724ef5138e6e35544c1315195950f4e9f5b59ec21e30afd786b8e7b891bd908d1a2bc64303ada028b52ceb04abc74c6572eab3b5147b27e24142911b1ae245278091cd9839a620e3f2820ca1471bcdcff6f010ad9324905f1808dd91a5e3c6b8204ff670"], &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000080)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/289, @ANYRESHEX=r2], &(0x7f0000000040)={0x20, 0x3, 0x1}}) syz_usb_control_io$printer(r0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003e00250304000000000000000a"], 0x14}, 0x1, 0x0, 0x0, 0x2000c001}, 0x80084) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000e00)={0x14, &(0x7f0000000d00)={0x0, 0x11, 0xb6, {0xb6, 0x7, "ff0ae75f085743d41c8b6d8b669b5c0a24728088e0a2776643d05a2965307dba66a7daabec002b44283dac833029a00c2479a037abac781b3f2f3b7c0bf07fd75fd073c02424c277c04092dde148bd13a1bd4fba849120b4e373aa134962a9e45526ad6718bc7fb6ad9e5a42c64372c2636524af70a72d73a3d43568db71e47a61be78e76a8525d0e2690b1bbb98d4b1341d6e43f5b72ee239211364f97a18c5fefe5a7b9b2dd66b08f62ef35b3047707897d768"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001000)={0x1c, &(0x7f0000000e40)={0x0, 0x11, 0xfe, "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"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x9f}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x9}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 331.07881ms ago: executing program 8 (id=5412): keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r3, 0x0, 0x4048043) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x12, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 144.557179ms ago: executing program 6 (id=5413): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) 0s ago: executing program 6 (id=5414): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70023000000090507", @ANYRES64=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): w USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1354.976447][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.991268][ T5899] usb 7-1: config 0 descriptor?? [ 1355.000045][ T5899] hub 7-1:0.0: USB hub found [ 1355.056520][T19001] usb 9-1: Using ep0 maxpacket: 32 [ 1355.064229][T19001] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1355.086414][T19001] usb 9-1: config 0 has no interface number 0 [ 1355.104186][T19001] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1355.114148][T19001] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1355.123518][T19001] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.131664][T19001] usb 9-1: Product: syz [ 1355.135926][T19001] usb 9-1: Manufacturer: syz [ 1355.141252][T19001] usb 9-1: SerialNumber: syz [ 1355.149046][T19001] usb 9-1: config 0 descriptor?? [ 1355.203223][ T5899] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1355.276510][T17090] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1355.436164][T17090] usb 5-1: Using ep0 maxpacket: 16 [ 1355.445501][T17090] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1355.458520][T17090] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1355.470370][T17090] usb 5-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 1355.481207][T17090] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.498078][T17090] usb 5-1: config 0 descriptor?? [ 1355.556209][T19006] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1355.616966][ T5899] usbhid 7-1:0.0: can't add hid device: -32 [ 1355.623082][ T5899] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 1355.661231][ T5899] usb 7-1: USB disconnect, device number 78 [ 1355.723466][T19006] usb 10-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.740499][T19006] usb 10-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 1355.750166][T19006] usb 10-1: config 3 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1355.786546][T19006] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1355.797389][T19006] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.805541][T19006] usb 10-1: Product: syz [ 1355.810048][T19006] usb 10-1: Manufacturer: syz [ 1355.814772][T19006] usb 10-1: SerialNumber: syz [ 1355.838950][T19006] cdc_ncm 10-1:3.0: invalid descriptor buffer length [ 1355.846695][T19006] cdc_ncm 10-1:3.0: CDC Union missing and no IAD found [ 1355.853736][T19006] cdc_ncm 10-1:3.0: bind() failure [ 1355.972439][T19001] f81534 9-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71 [ 1355.997414][T19001] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 1356.013567][T19001] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1356.029221][T19001] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 1356.054112][T19001] usb 9-1: USB disconnect, device number 51 [ 1356.457256][T19001] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1356.621736][T17090] usb 5-1: USB disconnect, device number 126 [ 1356.636239][T19001] usb 7-1: Using ep0 maxpacket: 8 [ 1356.661185][T19001] usb 7-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 1356.678118][T19001] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 1356.689761][T19001] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1356.755870][T19001] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1356.774338][T19001] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1356.794674][T19001] usb 7-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 1356.811513][T19001] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.829758][T19001] usb 7-1: config 0 descriptor?? [ 1356.909136][T24078] program syz.4.4927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1357.259966][T24089] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4931'. [ 1357.281709][T24089] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4931'. [ 1357.312232][T19001] logitech-djreceiver 0003:046D:C53A.005A: hidraw0: USB HID v0.81 Device [HID 046d:c53a] on usb-dummy_hcd.6-1/input0 [ 1357.501505][ T5899] usb 7-1: USB disconnect, device number 79 [ 1357.521110][T24093] syzkaller0: entered promiscuous mode [ 1357.534435][T24093] syzkaller0: entered allmulticast mode [ 1358.185608][T17090] usb 10-1: USB disconnect, device number 12 [ 1358.593670][T24117] FAULT_INJECTION: forcing a failure. [ 1358.593670][T24117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1358.625297][T24117] CPU: 1 UID: 0 PID: 24117 Comm: syz.9.4941 Tainted: G L syzkaller #0 PREEMPT(full) [ 1358.625318][T24117] Tainted: [L]=SOFTLOCKUP [ 1358.625322][T24117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1358.625329][T24117] Call Trace: [ 1358.625334][T24117] [ 1358.625340][T24117] dump_stack_lvl+0x189/0x250 [ 1358.625358][T24117] ? __pfx____ratelimit+0x10/0x10 [ 1358.625375][T24117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1358.625387][T24117] ? __pfx__printk+0x10/0x10 [ 1358.625408][T24117] should_fail_ex+0x414/0x560 [ 1358.625427][T24117] _copy_to_user+0x31/0xb0 [ 1358.625441][T24117] video_usercopy+0xd93/0x13f0 [ 1358.625458][T24117] ? __pfx___video_do_ioctl+0x10/0x10 [ 1358.625470][T24117] ? __pfx_video_usercopy+0x10/0x10 [ 1358.625490][T24117] ? __fget_files+0x3a0/0x420 [ 1358.625504][T24117] v4l2_ioctl+0x18d/0x1e0 [ 1358.625515][T24117] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1358.625526][T24117] __se_sys_ioctl+0xfc/0x170 [ 1358.625548][T24117] do_syscall_64+0xfa/0xf80 [ 1358.625559][T24117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.625570][T24117] ? clear_bhb_loop+0x60/0xb0 [ 1358.625582][T24117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.625592][T24117] RIP: 0033:0x7fef1998f749 [ 1358.625603][T24117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1358.625617][T24117] RSP: 002b:00007fef1a8b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1358.625639][T24117] RAX: ffffffffffffffda RBX: 00007fef19be5fa0 RCX: 00007fef1998f749 [ 1358.625662][T24117] RDX: 00002000000000c0 RSI: 00000000c0045627 RDI: 0000000000000003 [ 1358.625670][T24117] RBP: 00007fef1a8b9090 R08: 0000000000000000 R09: 0000000000000000 [ 1358.625676][T24117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1358.625683][T24117] R13: 00007fef19be6038 R14: 00007fef19be5fa0 R15: 00007fef19d0fa28 [ 1358.625700][T24117] [ 1358.902220][T24123] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4944'. [ 1358.917116][T24123] ip6gre1: entered promiscuous mode [ 1358.922621][T24123] ip6gre1: entered allmulticast mode [ 1358.931029][T21452] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1358.940869][T21452] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1358.956262][T19001] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1359.175342][T24130] syzkaller0: entered promiscuous mode [ 1359.198412][T24130] syzkaller0: entered allmulticast mode [ 1359.257446][ T5913] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1359.291875][T19002] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1359.374292][T17091] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1359.394696][T24139] ip6_tunnel: non-ECT from 2001:0000:0000:0000:0000:0000:0000:0001 with DS=0x7 [ 1359.436111][ T5913] usb 10-1: Using ep0 maxpacket: 8 [ 1359.459004][ T5913] usb 10-1: config 0 has an invalid interface number: 143 but max is 0 [ 1359.496229][ T5913] usb 10-1: config 0 has no interface number 0 [ 1359.529796][ T5913] usb 10-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1359.574272][ T5913] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.602557][ T5913] usb 10-1: config 0 descriptor?? [ 1359.616436][T17090] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1359.753100][ T5913] viperboard 10-1:0.143: version 0.00 found at bus 010 address 013 [ 1359.772470][T24148] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1359.802592][ T5913] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1359.835581][ T5913] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1359.836662][T17090] usb 9-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1359.910679][T24146] mac80211_hwsim hwsim69 wlan0: entered promiscuous mode [ 1359.919131][T17090] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1359.927536][T24146] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1360.003967][T17090] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 253 [ 1360.047326][T17090] usb 9-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1360.060362][T24155] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1360.133826][T17090] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.168834][T17090] usb 9-1: Product: syz [ 1360.186540][T17090] usb 9-1: Manufacturer: syz [ 1360.211668][T17090] usb 9-1: SerialNumber: syz [ 1360.255184][T17090] usb 9-1: config 0 descriptor?? [ 1360.486695][T17090] usb 7-1: new full-speed USB device number 80 using dummy_hcd [ 1360.671585][T17090] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1360.695693][T17090] usb 7-1: not running at top speed; connect to a high speed hub [ 1360.726703][T17090] usb 7-1: config 188 has an invalid interface number: 3 but max is 1 [ 1360.756851][T17090] usb 7-1: config 188 has an invalid interface number: 9 but max is 1 [ 1360.793129][T17090] usb 7-1: config 188 has no interface number 0 [ 1360.823081][T17090] usb 7-1: config 188 has no interface number 1 [ 1360.850040][T17090] usb 7-1: config 188 interface 3 has no altsetting 0 [ 1360.880647][T17090] usb 7-1: config 188 interface 9 has no altsetting 0 [ 1360.921850][T17090] usb 7-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=86.a0 [ 1360.964710][T17090] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.986724][T17090] usb 7-1: Product: syz [ 1361.003437][T17090] usb 7-1: Manufacturer: syz [ 1361.018420][T17090] usb 7-1: SerialNumber: syz [ 1361.820648][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.829957][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.630061][T19006] usb 9-1: USB disconnect, device number 52 [ 1362.734707][T19002] usb 10-1: USB disconnect, device number 13 [ 1362.776243][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1362.868908][T17090] usb 7-1: unknown number of interfaces: 2 [ 1362.883979][T17090] usb 7-1: USB disconnect, device number 80 [ 1362.935612][T24166] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1363.286126][T19002] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1363.436611][T19002] usb 10-1: Using ep0 maxpacket: 16 [ 1363.454014][T19002] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1363.466697][T19002] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1363.478550][T19002] usb 10-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1363.488735][T19002] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.504034][T19002] usb 10-1: config 0 descriptor?? [ 1363.691720][T24173] netlink: 8916 bytes leftover after parsing attributes in process `syz.7.4959'. [ 1363.701465][T24173] openvswitch: netlink: Flow key attr not present in new flow. [ 1363.816411][T17090] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1363.823044][T24183] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1363.951202][T19002] kye 0003:0458:5016.005B: control desc unexpectedly large [ 1363.983960][T19002] input: HID 0458:5016 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5016.005B/input/input124 [ 1364.075017][T19002] input: HID 0458:5016 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5016.005B/input/input125 [ 1364.114574][T17090] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1364.160885][T17090] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1364.211643][T19002] kye 0003:0458:5016.005B: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.9-1/input0 [ 1364.265797][T17090] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1364.305632][T17090] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1364.334366][T17090] usb 9-1: Manufacturer: syz [ 1364.387537][T17090] usb 9-1: config 0 descriptor?? [ 1364.427313][T19006] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1364.596161][T19006] usb 5-1: Using ep0 maxpacket: 16 [ 1364.619256][T19006] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1364.671961][T19006] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.685604][T24198] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1364.700051][T24198] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4966'. [ 1364.716468][T19006] usb 5-1: config 0 has no interface number 0 [ 1364.979381][T19006] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1365.021399][T19006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.052729][T17090] usbhid 9-1:0.0: can't add hid device: -71 [ 1365.071104][T19006] usb 5-1: Product: syz [ 1365.088121][T17090] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1365.179984][T19006] usb 5-1: Manufacturer: syz [ 1365.225366][T19006] usb 5-1: SerialNumber: syz [ 1365.286499][T17090] usb 9-1: USB disconnect, device number 53 [ 1365.376701][T19006] usb 5-1: config 0 descriptor?? [ 1365.394655][T19006] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1365.431726][T19006] uvcvideo 5-1:0.105: No valid video chain found. [ 1365.916216][T17091] usb 9-1: new full-speed USB device number 54 using dummy_hcd [ 1366.069819][T17091] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1366.079530][T17091] usb 9-1: not running at top speed; connect to a high speed hub [ 1366.090929][T17091] usb 9-1: config 188 has an invalid interface number: 3 but max is 1 [ 1366.102056][T17091] usb 9-1: config 188 has an invalid interface number: 9 but max is 1 [ 1366.120220][T17091] usb 9-1: config 188 has no interface number 0 [ 1366.127435][T17091] usb 9-1: config 188 has no interface number 1 [ 1366.133826][T17091] usb 9-1: config 188 interface 3 has no altsetting 0 [ 1366.142451][T17091] usb 9-1: config 188 interface 9 has no altsetting 0 [ 1366.155242][T17091] usb 9-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=86.a0 [ 1366.164528][ T5913] usb 10-1: reset high-speed USB device number 14 using dummy_hcd [ 1366.173394][T17091] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.182045][T17091] usb 9-1: Product: syz [ 1366.200655][T17091] usb 9-1: Manufacturer: syz [ 1366.206357][T17091] usb 9-1: SerialNumber: syz [ 1366.306198][ T5913] usb 10-1: device descriptor read/64, error -71 [ 1366.546172][ T5913] usb 10-1: reset high-speed USB device number 14 using dummy_hcd [ 1366.567213][T19006] usb 7-1: new full-speed USB device number 81 using dummy_hcd [ 1366.676649][ T5913] usb 10-1: device descriptor read/64, error -71 [ 1366.718457][T19006] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 1366.726896][T19006] usb 7-1: config 0 has no interface number 0 [ 1366.735276][T19006] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1366.746763][T19006] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.755132][T19006] usb 7-1: Product: syz [ 1366.759555][T19006] usb 7-1: Manufacturer: syz [ 1366.764369][T19006] usb 7-1: SerialNumber: syz [ 1366.772472][T19006] usb 7-1: config 0 descriptor?? [ 1366.926143][ T5913] usb 10-1: reset high-speed USB device number 14 using dummy_hcd [ 1366.946926][ T5913] usb 10-1: device descriptor read/8, error -71 [ 1366.992185][T24210] IPv6: Can't replace route, no match found [ 1367.134988][T19001] usb 5-1: USB disconnect, device number 127 [ 1367.186220][ T5913] usb 10-1: reset high-speed USB device number 14 using dummy_hcd [ 1367.217324][ T5913] usb 10-1: device descriptor read/8, error -71 [ 1367.257403][T19006] usb 7-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3) [ 1367.330272][T19002] usb 10-1: USB disconnect, device number 14 [ 1367.496279][T19002] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1367.526146][T19001] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1367.636125][T19002] usb 10-1: device descriptor read/64, error -71 [ 1367.676187][T19001] usb 5-1: Using ep0 maxpacket: 32 [ 1367.683585][T19001] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1367.695018][T19001] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1367.705236][T19001] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1367.717778][T19001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.729338][T19001] usb 5-1: config 0 descriptor?? [ 1367.744874][T19001] hub 5-1:0.0: USB hub found [ 1367.886224][T19002] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1367.939600][T19001] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1368.016229][T19002] usb 10-1: device descriptor read/64, error -71 [ 1368.067212][T17091] usb 9-1: unknown number of interfaces: 2 [ 1368.079637][T17091] usb 9-1: USB disconnect, device number 54 [ 1368.127571][T19002] usb usb10-port1: attempt power cycle [ 1368.298559][T19006] usb 7-1: failed to fetch extended address, random address set [ 1368.347338][T19001] usbhid 5-1:0.0: can't add hid device: -32 [ 1368.358986][T19001] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1368.397056][T19001] usb 5-1: USB disconnect, device number 2 [ 1368.466702][T19002] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1368.497921][T19002] usb 10-1: device descriptor read/8, error -71 [ 1368.525536][T24219] syzkaller0: entered promiscuous mode [ 1368.532123][T24219] syzkaller0: entered allmulticast mode [ 1368.739293][T19002] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1368.766706][T19002] usb 10-1: device descriptor read/8, error -71 [ 1368.876425][T19002] usb usb10-port1: unable to enumerate USB device [ 1368.970844][T24239] netlink: 8916 bytes leftover after parsing attributes in process `syz.7.4977'. [ 1368.986155][T24239] openvswitch: netlink: Flow key attr not present in new flow. [ 1369.470009][T19001] usb 7-1: USB disconnect, device number 81 [ 1369.818602][T24250] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4981'. [ 1369.960786][T24254] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4981'. [ 1370.776269][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1370.898278][T24258] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4982'. [ 1370.996372][T19006] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1371.088880][T24263] netlink: 'syz.7.4984': attribute type 21 has an invalid length. [ 1371.130056][T24263] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4984'. [ 1371.166723][T19006] usb 9-1: Using ep0 maxpacket: 8 [ 1371.179412][T24263] netlink: 'syz.7.4984': attribute type 5 has an invalid length. [ 1371.180150][T19006] usb 9-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 1371.226409][T19006] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.241299][T24263] netlink: 3 bytes leftover after parsing attributes in process `syz.7.4984'. [ 1371.277637][T19006] usb 9-1: config 0 descriptor?? [ 1371.312829][T19006] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 1371.529834][T19006] usb 9-1: USB disconnect, device number 55 [ 1372.163485][T24270] syzkaller0: entered promiscuous mode [ 1372.186626][T24270] syzkaller0: entered allmulticast mode [ 1372.576224][T17091] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1372.747991][T17091] usb 9-1: device descriptor read/64, error -71 [ 1372.997481][T17091] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1373.050205][T24284] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4992'. [ 1373.143451][T24287] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4992'. [ 1373.158908][T17091] usb 9-1: device descriptor read/64, error -71 [ 1373.276505][T17091] usb usb9-port1: attempt power cycle [ 1373.296248][T19006] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1373.478844][T19006] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1373.498722][T19006] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1373.511899][T19006] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1373.525213][T19006] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1373.533802][T19006] usb 5-1: Manufacturer: syz [ 1373.565706][T19006] usb 5-1: config 0 descriptor?? [ 1373.626158][T17091] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1373.671584][T17091] usb 9-1: device descriptor read/8, error -71 [ 1373.916291][T17091] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1373.936679][T17091] usb 9-1: device descriptor read/8, error -71 [ 1374.046200][T19001] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1374.054544][T17091] usb usb9-port1: unable to enumerate USB device [ 1374.191213][ C0] raw-gadget.2 gadget.4: ignoring, device is not running [ 1374.199263][T19006] usbhid 5-1:0.0: can't add hid device: -32 [ 1374.205308][T19006] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1374.206180][T19001] usb 10-1: Using ep0 maxpacket: 32 [ 1374.225595][T19001] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.229279][T19006] usb 5-1: USB disconnect, device number 3 [ 1374.236707][T19001] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1374.255267][T19001] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1374.264822][T19001] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.275223][T19001] usb 10-1: config 0 descriptor?? [ 1374.285074][T19001] hub 10-1:0.0: bad descriptor, ignoring hub [ 1374.291682][T19001] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1374.302789][T19001] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1374.759937][T24304] syzkaller0: entered promiscuous mode [ 1374.765444][T24304] syzkaller0: entered allmulticast mode [ 1375.226106][T19006] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 1375.366283][T19006] usb 5-1: device descriptor read/64, error -71 [ 1375.425752][T24315] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1375.439683][T24315] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1375.450281][T24315] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1375.479625][T24315] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1375.495446][T24315] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1375.504622][T24315] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1375.518281][T24315] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1375.616226][T19006] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 1375.756154][T19006] usb 5-1: device descriptor read/64, error -71 [ 1375.867109][T19006] usb usb5-port1: attempt power cycle [ 1376.228842][T19006] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 1376.258911][T19006] usb 5-1: device descriptor read/8, error -71 [ 1376.286279][T17090] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1376.404461][T19001] IPVS: starting estimator thread 0... [ 1376.458159][T17090] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1376.470661][T17090] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1376.481784][T17090] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1376.492496][T17090] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1376.500640][T19006] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1376.506232][T24332] IPVS: using max 34 ests per chain, 81600 per kthread [ 1376.509390][T17090] usb 7-1: Manufacturer: syz [ 1376.525834][T17090] usb 7-1: config 0 descriptor?? [ 1376.536811][T19006] usb 5-1: device descriptor read/8, error -71 [ 1376.651588][T19006] usb usb5-port1: unable to enumerate USB device [ 1376.926486][T19001] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1376.937772][T19006] usb 10-1: USB disconnect, device number 19 [ 1377.076831][T19001] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 1377.085462][T19001] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1377.096920][T19001] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1377.108270][T19001] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1377.117984][T19001] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1377.127084][T19001] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1377.138871][T19001] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1377.140053][T17090] usbhid 7-1:0.0: can't add hid device: -32 [ 1377.146931][T19001] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1377.158459][T17090] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 1377.166273][T19001] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1377.185592][T17090] usb 7-1: USB disconnect, device number 82 [ 1377.205200][T19001] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1377.218239][T19001] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1377.236602][T19001] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1377.256118][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 1377.262193][T19001] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1377.277054][T19001] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1377.285979][T19001] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1377.316085][T19001] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1377.336734][T19001] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1377.345642][T19001] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1377.376163][T19001] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1377.386733][T19001] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1377.395636][T19001] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1377.426077][T19001] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1377.446717][T19001] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1377.456129][T19001] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1377.476097][T19001] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1377.496137][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 1377.506392][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 1377.547533][T19001] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1377.568011][T19001] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1377.586084][T19001] usb 9-1: Product: syz [ 1377.594887][T19001] usb 9-1: Manufacturer: syz [ 1377.606169][T19001] usb 9-1: SerialNumber: syz [ 1377.614047][T19001] usb 9-1: config 0 descriptor?? [ 1377.629753][T19001] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 1377.667707][T24346] syzkaller0: entered promiscuous mode [ 1377.678839][T24346] syzkaller0: entered allmulticast mode [ 1377.890196][ C1] usb 9-1: yurex_control_callback - control failed: -71 [ 1377.901916][T19001] usb 9-1: USB disconnect, device number 60 [ 1377.909554][T19001] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 1377.997897][T19006] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1378.169938][T19006] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1378.186826][T19006] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.194955][T19006] usb 7-1: Product: syz [ 1378.204708][T19006] usb 7-1: Manufacturer: syz [ 1378.214927][T19006] usb 7-1: SerialNumber: syz [ 1378.222998][T19006] usb 7-1: config 0 descriptor?? [ 1378.392299][T24365] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5017'. [ 1378.408512][T24365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5017'. [ 1378.439637][T19006] hso 7-1:0.0: Failed to find BULK IN ep [ 1378.473244][T19006] usb-storage 7-1:0.0: USB Mass Storage device detected [ 1378.654191][T19006] usb 7-1: USB disconnect, device number 83 [ 1379.026146][T19006] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1379.196249][T19006] usb 10-1: Using ep0 maxpacket: 32 [ 1379.221038][T19006] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.249266][T19006] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1379.285256][T19006] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1379.323643][T19006] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.363302][T19006] usb 10-1: config 0 descriptor?? [ 1379.392250][T19006] hub 10-1:0.0: bad descriptor, ignoring hub [ 1379.417538][T19006] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1379.447892][T19006] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1379.576495][ T5155] Bluetooth: hci4: command 0x0c1a tx timeout [ 1379.582694][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 1379.701184][T19006] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1379.846466][T19006] usb 7-1: device descriptor read/64, error -71 [ 1380.086263][T19006] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1380.177243][T17090] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1380.216182][T19006] usb 7-1: device descriptor read/64, error -71 [ 1380.258392][T24386] ip6gretap0: entered promiscuous mode [ 1380.266974][T24386] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1380.326120][T17090] usb 9-1: Using ep0 maxpacket: 16 [ 1380.331636][T19006] usb usb7-port1: attempt power cycle [ 1380.348087][T17090] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 1380.366200][T17090] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1380.386335][T17090] usb 9-1: config 0 has no interface number 0 [ 1380.408816][T17090] usb 9-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1380.426927][T17090] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.434955][T17090] usb 9-1: Product: syz [ 1380.457139][T17090] usb 9-1: Manufacturer: syz [ 1380.461750][T17090] usb 9-1: SerialNumber: syz [ 1380.475251][T17090] usb 9-1: config 0 descriptor?? [ 1380.488774][T17090] uvcvideo 9-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1380.507310][T17090] uvcvideo 9-1:0.105: No valid video chain found. [ 1380.696256][T19006] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1380.738038][T19006] usb 7-1: device descriptor read/8, error -71 [ 1380.986118][T19006] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1381.007818][T19006] usb 7-1: device descriptor read/8, error -71 [ 1381.118065][T19006] usb usb7-port1: unable to enumerate USB device [ 1381.657180][ T5155] Bluetooth: hci4: command 0x0c1a tx timeout [ 1381.663482][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 1381.927357][T19001] usb 10-1: USB disconnect, device number 20 [ 1382.529975][T24423] netlink: 'syz.6.5036': attribute type 12 has an invalid length. [ 1382.538338][T24423] netlink: 'syz.6.5036': attribute type 29 has an invalid length. [ 1382.548756][T24423] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5036'. [ 1382.886417][T19006] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1382.926216][T19001] usb 9-1: USB disconnect, device number 61 [ 1383.046182][T19006] usb 5-1: device descriptor read/64, error -71 [ 1383.306116][T19006] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1383.436153][T19006] usb 5-1: device descriptor read/64, error -71 [ 1383.562003][T19006] usb usb5-port1: attempt power cycle [ 1383.907182][T19006] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1383.926433][T17090] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1383.975983][T19006] usb 5-1: device descriptor read/8, error -71 [ 1384.053921][T24463] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1384.142619][T17090] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1384.169139][T17090] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1384.189359][T17090] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1384.206088][T17090] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1384.223578][T17090] usb 7-1: Manufacturer: syz [ 1384.228320][T19006] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1384.248451][T17090] usb 7-1: config 0 descriptor?? [ 1384.267130][T19006] usb 5-1: device descriptor read/8, error -71 [ 1384.328503][T19007] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1384.390095][T19006] usb usb5-port1: unable to enumerate USB device [ 1384.496258][T19007] usb 9-1: Using ep0 maxpacket: 16 [ 1384.519755][T19007] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1384.544288][T19007] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1384.561911][T19007] usb 9-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1384.581911][T19007] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.610287][T19007] usb 9-1: config 0 descriptor?? [ 1384.865467][T17090] usbhid 7-1:0.0: can't add hid device: -71 [ 1384.880348][T17090] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1384.899083][T17090] usb 7-1: USB disconnect, device number 88 [ 1385.041167][T19007] kye 0003:0458:5016.005C: control desc unexpectedly large [ 1385.058373][T19007] input: HID 0458:5016 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5016.005C/input/input126 [ 1385.141854][T19007] input: HID 0458:5016 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5016.005C/input/input127 [ 1385.230928][T19007] kye 0003:0458:5016.005C: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.8-1/input0 [ 1385.468237][T24471] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5053'. [ 1386.236219][T19001] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1386.416273][T19001] usb 5-1: Using ep0 maxpacket: 16 [ 1386.421479][T17091] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 1386.439236][T19001] usb 5-1: config 0 has an invalid interface number: 176 but max is 0 [ 1386.457786][T19001] usb 5-1: config 0 has no interface number 0 [ 1386.478064][T19001] usb 5-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=18.b3 [ 1386.497210][T19001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.515594][T19001] usb 5-1: Product: syz [ 1386.524146][T19001] usb 5-1: Manufacturer: syz [ 1386.534300][T19001] usb 5-1: SerialNumber: syz [ 1386.548054][T19001] usb 5-1: config 0 descriptor?? [ 1386.565809][T19001] usb 5-1: bad CDC descriptors [ 1386.608412][T17091] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1386.637466][T17091] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1386.659710][T17091] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1386.679408][T17091] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1386.696242][T17091] usb 7-1: Manufacturer: syz [ 1386.718038][T17091] usb 7-1: config 0 descriptor?? [ 1386.776546][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1386.815827][T19006] usb 5-1: USB disconnect, device number 12 [ 1386.878002][T17090] usb 9-1: USB disconnect, device number 62 [ 1387.069989][T24507] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5065'. [ 1387.186037][T17091] pyra 0003:1E7D:2CF6.005D: unknown main item tag 0x0 [ 1387.201063][T17091] pyra 0003:1E7D:2CF6.005D: unknown main item tag 0x0 [ 1387.212051][T24512] FAULT_INJECTION: forcing a failure. [ 1387.212051][T24512] name failslab, interval 1, probability 0, space 0, times 0 [ 1387.216191][T17091] pyra 0003:1E7D:2CF6.005D: unknown main item tag 0x0 [ 1387.249180][T24512] CPU: 0 UID: 0 PID: 24512 Comm: syz.7.5068 Tainted: G L syzkaller #0 PREEMPT(full) [ 1387.249212][T24512] Tainted: [L]=SOFTLOCKUP [ 1387.249220][T24512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1387.249233][T24512] Call Trace: [ 1387.249242][T24512] [ 1387.249251][T24512] dump_stack_lvl+0x189/0x250 [ 1387.249279][T24512] ? __pfx____ratelimit+0x10/0x10 [ 1387.249309][T24512] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1387.249332][T24512] ? __pfx__printk+0x10/0x10 [ 1387.249363][T24512] ? __pfx___might_resched+0x10/0x10 [ 1387.249386][T24512] ? fs_reclaim_acquire+0x7d/0x100 [ 1387.249427][T24512] should_fail_ex+0x414/0x560 [ 1387.249461][T24512] should_failslab+0xa8/0x100 [ 1387.249482][T24512] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1387.249510][T24512] ? ip_fib_metrics_init+0xc3/0x6f0 [ 1387.249537][T24512] ip_fib_metrics_init+0xc3/0x6f0 [ 1387.249564][T24512] ? __pfx_ip_fib_metrics_init+0x10/0x10 [ 1387.249581][T24512] ? rcu_is_watching+0x15/0xb0 [ 1387.249607][T24512] ? trace_kmalloc+0x1f/0xb0 [ 1387.249629][T24512] ? __kmalloc_noprof+0x432/0x800 [ 1387.249652][T24512] ? inet_ioctl+0x42c/0x4c0 [ 1387.249675][T24512] ? fib_create_info+0x171d/0x31f0 [ 1387.249709][T24512] fib_create_info+0x1774/0x31f0 [ 1387.249762][T24512] fib_table_insert+0xc6/0x1b50 [ 1387.249795][T24512] ? __kasan_kmalloc+0x93/0xb0 [ 1387.249824][T24512] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1387.249849][T24512] ? l3mdev_fib_table+0x18/0x160 [ 1387.249872][T24512] ? ip_rt_ioctl+0x8b7/0x1070 [ 1387.249903][T24512] ? l3mdev_fib_table+0x18/0x160 [ 1387.249931][T24512] ip_rt_ioctl+0x46e/0x1070 [ 1387.249954][T24512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1387.249979][T24512] ? __pfx_ip_rt_ioctl+0x10/0x10 [ 1387.250005][T24512] ? __might_fault+0xb0/0x130 [ 1387.250053][T24512] inet_ioctl+0x42c/0x4c0 [ 1387.250082][T24512] ? __pfx_inet_ioctl+0x10/0x10 [ 1387.250125][T24512] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1387.250147][T24512] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1387.250181][T24512] sock_do_ioctl+0xdc/0x300 [ 1387.250212][T24512] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1387.250241][T24512] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1387.250276][T24512] sock_ioctl+0x576/0x790 [ 1387.250306][T24512] ? __pfx_sock_ioctl+0x10/0x10 [ 1387.250336][T24512] ? __fget_files+0x3a0/0x420 [ 1387.250355][T24512] ? __fget_files+0x2a/0x420 [ 1387.250379][T24512] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1387.250400][T24512] ? __pfx_sock_ioctl+0x10/0x10 [ 1387.250434][T24512] __se_sys_ioctl+0xfc/0x170 [ 1387.250462][T24512] do_syscall_64+0xfa/0xf80 [ 1387.250483][T24512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1387.250503][T24512] ? clear_bhb_loop+0x60/0xb0 [ 1387.250527][T24512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1387.250545][T24512] RIP: 0033:0x7f2afb58f749 [ 1387.250564][T24512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1387.250582][T24512] RSP: 002b:00007f2afc3d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1387.250603][T24512] RAX: ffffffffffffffda RBX: 00007f2afb7e5fa0 RCX: 00007f2afb58f749 [ 1387.250618][T24512] RDX: 0000200000000840 RSI: 000000000000890b RDI: 0000000000000003 [ 1387.250631][T24512] RBP: 00007f2afc3d8090 R08: 0000000000000000 R09: 0000000000000000 [ 1387.250644][T24512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1387.250656][T24512] R13: 00007f2afb7e6038 R14: 00007f2afb7e5fa0 R15: 00007f2afb90fa28 [ 1387.250686][T24512] [ 1387.252398][T17091] pyra 0003:1E7D:2CF6.005D: unknown main item tag 0x0 [ 1387.607642][T17091] pyra 0003:1E7D:2CF6.005D: unknown main item tag 0x0 [ 1387.666182][T19001] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1387.704562][T17091] pyra 0003:1E7D:2CF6.005D: unknown main item tag 0x0 [ 1387.718573][T17091] pyra 0003:1E7D:2CF6.005D: unknown main item tag 0x0 [ 1387.774887][T17091] pyra 0003:1E7D:2CF6.005D: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 1387.806127][T17091] pyra 0003:1E7D:2CF6.005D: couldn't init struct pyra_device [ 1387.823903][T17091] pyra 0003:1E7D:2CF6.005D: couldn't install mouse [ 1387.852593][T19001] usb 10-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 1387.863678][T19001] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.888988][T17091] pyra 0003:1E7D:2CF6.005D: probe with driver pyra failed with error -32 [ 1387.908206][T19001] usb 10-1: Product: syz [ 1387.912495][T19001] usb 10-1: Manufacturer: syz [ 1387.942128][T19001] usb 10-1: SerialNumber: syz [ 1387.947621][T24520] program syz.4.5070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1388.114449][T19001] usb 10-1: config 0 descriptor?? [ 1388.334389][T19001] gspca_main: touptek-2.14.0 probing 0547:6801 [ 1388.485643][T24523] FAULT_INJECTION: forcing a failure. [ 1388.485643][T24523] name failslab, interval 1, probability 0, space 0, times 0 [ 1388.514636][T24523] CPU: 0 UID: 0 PID: 24523 Comm: syz.8.5071 Tainted: G L syzkaller #0 PREEMPT(full) [ 1388.514669][T24523] Tainted: [L]=SOFTLOCKUP [ 1388.514677][T24523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1388.514690][T24523] Call Trace: [ 1388.514699][T24523] [ 1388.514708][T24523] dump_stack_lvl+0x189/0x250 [ 1388.514738][T24523] ? __pfx____ratelimit+0x10/0x10 [ 1388.514765][T24523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1388.514785][T24523] ? __pfx__printk+0x10/0x10 [ 1388.514816][T24523] ? __pfx___might_resched+0x10/0x10 [ 1388.514837][T24523] ? fs_reclaim_acquire+0x7d/0x100 [ 1388.514870][T24523] should_fail_ex+0x414/0x560 [ 1388.514903][T24523] should_failslab+0xa8/0x100 [ 1388.514925][T24523] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 1388.514953][T24523] ? __d_alloc+0x37/0x6f0 [ 1388.514981][T24523] __d_alloc+0x37/0x6f0 [ 1388.515010][T24523] path_from_stashed+0x384/0x5c0 [ 1388.515040][T24523] pidfs_alloc_file+0xf7/0x270 [ 1388.515060][T24523] ? _raw_spin_unlock+0x28/0x50 [ 1388.515088][T24523] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 1388.515118][T24523] pidfd_prepare+0x14e/0x1b0 [ 1388.515145][T24523] scm_recv_unix+0x204/0x360 [ 1388.515177][T24523] ? __pfx_scm_recv_unix+0x10/0x10 [ 1388.515213][T24523] ? unix_stream_read_actor+0x77/0xb0 [ 1388.515244][T24523] unix_stream_read_generic+0x20be/0x2390 [ 1388.515312][T24523] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 1388.515347][T24523] ? __lock_acquire+0x6b6/0x2cf0 [ 1388.515372][T24523] ? __lock_acquire+0x6b6/0x2cf0 [ 1388.515402][T24523] unix_stream_recvmsg+0x15d/0x1b0 [ 1388.515425][T24523] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1388.515444][T24523] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 1388.515477][T24523] ? __lock_acquire+0x6b6/0x2cf0 [ 1388.515501][T24523] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1388.515531][T24523] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1388.515551][T24523] sock_recvmsg_nosec+0x186/0x1c0 [ 1388.515585][T24523] ____sys_recvmsg+0x3aa/0x460 [ 1388.515618][T24523] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1388.515659][T24523] ? import_iovec+0x74/0xa0 [ 1388.515685][T24523] ___sys_recvmsg+0x1b5/0x510 [ 1388.515716][T24523] ? __pfx____sys_recvmsg+0x10/0x10 [ 1388.515773][T24523] ? __might_fault+0xb0/0x130 [ 1388.515804][T24523] do_recvmmsg+0x307/0x770 [ 1388.515838][T24523] ? __pfx_do_recvmmsg+0x10/0x10 [ 1388.515863][T24523] ? lockdep_hardirqs_on+0x98/0x140 [ 1388.515891][T24523] ? do_sys_openat2+0x15a/0x200 [ 1388.515932][T24523] __x64_sys_recvmmsg+0x190/0x240 [ 1388.515960][T24523] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1388.515989][T24523] ? do_syscall_64+0xbe/0xf80 [ 1388.516010][T24523] do_syscall_64+0xfa/0xf80 [ 1388.516028][T24523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.516046][T24523] ? clear_bhb_loop+0x60/0xb0 [ 1388.516068][T24523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.516087][T24523] RIP: 0033:0x7f6b74b8f749 [ 1388.516105][T24523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1388.516121][T24523] RSP: 002b:00007f6b759fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1388.516142][T24523] RAX: ffffffffffffffda RBX: 00007f6b74de5fa0 RCX: 00007f6b74b8f749 [ 1388.516158][T24523] RDX: 000000000000004b RSI: 0000200000000500 RDI: 0000000000000003 [ 1388.516171][T24523] RBP: 00007f6b759fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1388.516184][T24523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1388.516197][T24523] R13: 00007f6b74de6038 R14: 00007f6b74de5fa0 R15: 00007f6b74f0fa28 [ 1388.516229][T24523] [ 1388.975287][T19006] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1389.138235][T19006] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1389.160396][T24527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1389.183646][T17090] usb 7-1: USB disconnect, device number 89 [ 1389.242180][T24527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1389.251849][T19006] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1389.267576][T19006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.280792][T19006] usb 5-1: Product: syz [ 1389.282378][T24529] hub 9-0:1.0: USB hub found [ 1389.284980][T19006] usb 5-1: Manufacturer: syz [ 1389.314824][T19001] usb 10-1: USB disconnect, device number 21 [ 1389.326325][T24529] hub 9-0:1.0: 1 port detected [ 1389.347653][T19006] usb 5-1: SerialNumber: syz [ 1389.375113][T19006] usb 5-1: config 0 descriptor?? [ 1389.656439][T24535] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5073'. [ 1389.974781][T24535] erspan0: entered promiscuous mode [ 1390.706318][T19001] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1390.890128][T19001] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1390.916714][T24556] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1390.956959][T19001] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1390.968155][T19001] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1390.988091][T19001] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.061243][T24554] netlink: 35 bytes leftover after parsing attributes in process `syz.8.5079'. [ 1391.077300][T19001] usb 10-1: config 0 descriptor?? [ 1391.311534][T19007] usb 5-1: USB disconnect, device number 13 [ 1391.369217][T17091] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1391.586591][T17091] usb 7-1: Using ep0 maxpacket: 32 [ 1391.628865][T17091] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1391.660787][T24562] netlink: 'syz.8.5079': attribute type 4 has an invalid length. [ 1391.687215][T17091] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1391.741989][T19001] usbhid 10-1:0.0: can't add hid device: -71 [ 1391.780927][T19001] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1391.805109][T17091] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1391.871720][T19001] usb 10-1: USB disconnect, device number 22 [ 1391.890006][T24568] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5083'. [ 1391.904202][T17091] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.938670][T17091] usb 7-1: Product: syz [ 1391.960354][T17091] usb 7-1: Manufacturer: syz [ 1391.980845][T17091] usb 7-1: SerialNumber: syz [ 1392.021477][T17091] usb 7-1: config 0 descriptor?? [ 1392.109970][T24568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1392.117485][T24568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1392.145434][T24568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1392.153743][T24568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1392.353517][T24572] netlink: 'syz.9.5084': attribute type 12 has an invalid length. [ 1392.380148][T24572] netlink: 'syz.9.5084': attribute type 29 has an invalid length. [ 1392.425748][T24572] netlink: 148 bytes leftover after parsing attributes in process `syz.9.5084'. [ 1393.996215][T19006] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1394.034642][T19007] usb 7-1: USB disconnect, device number 90 [ 1394.160701][T19006] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1394.186376][T19006] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1394.233754][T19006] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1394.244408][T19006] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1394.253144][T19006] usb 10-1: Manufacturer: syz [ 1394.263756][T19006] usb 10-1: config 0 descriptor?? [ 1394.700342][T19006] pyra 0003:1E7D:2CF6.005E: unknown main item tag 0x0 [ 1394.711117][T19006] pyra 0003:1E7D:2CF6.005E: unknown main item tag 0x0 [ 1394.722946][T19006] pyra 0003:1E7D:2CF6.005E: unknown main item tag 0x0 [ 1394.732315][T19006] pyra 0003:1E7D:2CF6.005E: unknown main item tag 0x0 [ 1394.741019][T19006] pyra 0003:1E7D:2CF6.005E: unknown main item tag 0x0 [ 1394.749349][T19006] pyra 0003:1E7D:2CF6.005E: unknown main item tag 0x0 [ 1394.756806][T19006] pyra 0003:1E7D:2CF6.005E: unknown main item tag 0x0 [ 1394.776955][T19006] pyra 0003:1E7D:2CF6.005E: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 1394.966751][T24606] netlink: 'syz.7.5095': attribute type 12 has an invalid length. [ 1394.974731][T24606] netlink: 'syz.7.5095': attribute type 29 has an invalid length. [ 1394.983896][T24606] netlink: 148 bytes leftover after parsing attributes in process `syz.7.5095'. [ 1395.726114][T19004] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1395.741150][T24582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.779470][T24582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.863004][T24582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.895475][T24582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.906277][T19004] usb 7-1: Using ep0 maxpacket: 32 [ 1395.927989][T19006] pyra 0003:1E7D:2CF6.005E: couldn't init struct pyra_device [ 1395.938288][T19004] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1395.944907][T19006] pyra 0003:1E7D:2CF6.005E: couldn't install mouse [ 1395.968849][T19006] pyra 0003:1E7D:2CF6.005E: probe with driver pyra failed with error -32 [ 1395.980821][T19004] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1396.001376][T24626] netlink: 'syz.4.5103': attribute type 12 has an invalid length. [ 1396.013833][T24626] netlink: 'syz.4.5103': attribute type 29 has an invalid length. [ 1396.024201][T19004] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1396.036866][T24626] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5103'. [ 1396.049042][T19004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.080501][T19004] usb 7-1: Product: syz [ 1396.111637][T19004] usb 7-1: Manufacturer: syz [ 1396.129554][T19004] usb 7-1: SerialNumber: syz [ 1396.153335][T19004] usb 7-1: config 0 descriptor?? [ 1396.246183][T19001] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1396.416187][T19001] usb 9-1: Using ep0 maxpacket: 16 [ 1396.430603][T19001] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1396.459582][T19001] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1396.480234][T19001] usb 9-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 1396.499107][T19001] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.528203][T19001] usb 9-1: config 0 descriptor?? [ 1396.575925][T24635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5105'. [ 1397.009693][T19001] usb 10-1: USB disconnect, device number 23 [ 1397.396142][T19001] usb 10-1: new full-speed USB device number 24 using dummy_hcd [ 1397.559565][T19001] usb 10-1: config 0 has an invalid interface number: 105 but max is 0 [ 1397.568032][T19001] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1397.579090][T19001] usb 10-1: config 0 has no interface number 0 [ 1397.589410][T19001] usb 10-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 1397.598810][T19001] usb 10-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 1397.607020][T19001] usb 10-1: Product: syz [ 1397.611318][T19001] usb 10-1: Manufacturer: syz [ 1397.617626][T19001] usb 10-1: SerialNumber: syz [ 1397.624333][T19001] usb 10-1: config 0 descriptor?? [ 1397.634513][T19001] uvcvideo 10-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 1397.642234][T19001] uvcvideo 10-1:0.105: Entity type for entity Output 1 was not initialized! [ 1397.652889][T19001] uvcvideo 10-1:0.105: Failed to create links for entity 1 [ 1397.661187][T19006] usb 9-1: USB disconnect, device number 63 [ 1397.676218][T17091] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1397.690305][T19001] uvcvideo 10-1:0.105: Failed to register entities (-22). [ 1397.771772][T24643] netlink: 'syz.8.5108': attribute type 12 has an invalid length. [ 1397.780282][T24643] netlink: 'syz.8.5108': attribute type 29 has an invalid length. [ 1397.788779][T24643] netlink: 148 bytes leftover after parsing attributes in process `syz.8.5108'. [ 1397.849816][T17091] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1397.867288][T17091] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1397.882422][T17091] usb 5-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 1397.894526][T17091] usb 5-1: config 220 has no interface number 2 [ 1397.901143][T17091] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1397.914387][T17091] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1397.922833][T17091] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1397.931588][T17091] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1397.940663][T17091] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1397.960102][T17091] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.976244][T17091] usb 5-1: Product: syz [ 1397.986129][T17091] usb 5-1: Manufacturer: syz [ 1397.993559][T17091] usb 5-1: SerialNumber: syz [ 1398.245140][T17091] usb 5-1: selecting invalid altsetting 0 [ 1398.262016][T17091] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1398.274251][T17091] uvcvideo 5-1:220.0: No valid video chain found. [ 1398.327988][T17091] usb 5-1: selecting invalid altsetting 0 [ 1398.338527][T17091] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1398.377919][T17091] usb 5-1: USB disconnect, device number 14 [ 1398.512750][T19006] usb 7-1: USB disconnect, device number 91 [ 1399.015054][T24671] netlink: 'syz.6.5119': attribute type 12 has an invalid length. [ 1399.023375][T24671] netlink: 'syz.6.5119': attribute type 29 has an invalid length. [ 1399.035162][T24671] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5119'. [ 1399.272108][T24678] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1399.387925][T17091] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 1399.556200][T17091] usb 7-1: Using ep0 maxpacket: 16 [ 1399.568012][T17091] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1399.583346][T17091] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1399.600012][T17091] usb 7-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 1399.610764][T17091] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.635392][T17091] usb 7-1: config 0 descriptor?? [ 1399.823226][T24682] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1399.962395][T24682] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1399.970027][T24682] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1400.095707][T19006] usb 10-1: USB disconnect, device number 24 [ 1400.256472][T24689] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5124'. [ 1400.567667][T17091] usbhid 7-1:0.0: can't add hid device: -71 [ 1400.579182][T17091] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1400.614149][T17091] usb 7-1: USB disconnect, device number 92 [ 1400.727690][T24706] netlink: 'syz.4.5131': attribute type 12 has an invalid length. [ 1400.735705][T24706] netlink: 'syz.4.5131': attribute type 29 has an invalid length. [ 1400.743737][T24706] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5131'. [ 1400.916198][T19006] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1401.046249][T19006] usb 10-1: device descriptor read/64, error -71 [ 1401.136130][T17090] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 1401.236273][T19007] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1401.296113][T19006] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1401.317386][T17090] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.327845][T17090] usb 7-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 1401.337499][T17090] usb 7-1: config 3 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1401.394556][T17090] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1401.416347][T19007] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1401.428010][T19006] usb 10-1: device descriptor read/64, error -71 [ 1401.434508][T17090] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.442884][T19007] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1401.457279][T17090] usb 7-1: Product: syz [ 1401.468067][T17090] usb 7-1: Manufacturer: syz [ 1401.473854][T19007] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1401.483623][T17090] usb 7-1: SerialNumber: syz [ 1401.491277][T19007] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1401.509093][T19007] usb 9-1: Manufacturer: syz [ 1401.519648][T19007] usb 9-1: config 0 descriptor?? [ 1401.536512][T19006] usb usb10-port1: attempt power cycle [ 1401.576524][T22582] Bluetooth: hci1: command 0x0c1a tx timeout [ 1401.702108][T17090] cdc_ncm 7-1:3.0: invalid descriptor buffer length [ 1401.709718][T17090] cdc_ncm 7-1:3.0: CDC Union missing and no IAD found [ 1401.716769][T17090] cdc_ncm 7-1:3.0: bind() failure [ 1401.927165][T19006] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1401.965469][T19007] pyra 0003:1E7D:2CF6.0060: unknown main item tag 0x0 [ 1401.976277][T24403] Bluetooth: hci4: command 0x0c1a tx timeout [ 1401.976906][T19006] usb 10-1: device descriptor read/8, error -71 [ 1401.982350][T22582] Bluetooth: hci0: command 0x0c1a tx timeout [ 1402.003703][T19007] pyra 0003:1E7D:2CF6.0060: unknown main item tag 0x0 [ 1402.047805][T19007] pyra 0003:1E7D:2CF6.0060: unknown main item tag 0x0 [ 1402.075963][T19007] pyra 0003:1E7D:2CF6.0060: unknown main item tag 0x0 [ 1402.102886][T19007] pyra 0003:1E7D:2CF6.0060: unknown main item tag 0x0 [ 1402.149745][T19007] pyra 0003:1E7D:2CF6.0060: unknown main item tag 0x0 [ 1402.190892][T19007] pyra 0003:1E7D:2CF6.0060: unknown main item tag 0x0 [ 1402.203830][T19007] pyra 0003:1E7D:2CF6.0060: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 1402.204403][T19007] pyra 0003:1E7D:2CF6.0060: couldn't init struct pyra_device [ 1402.204762][T19007] pyra 0003:1E7D:2CF6.0060: couldn't install mouse [ 1402.217401][T19007] pyra 0003:1E7D:2CF6.0060: probe with driver pyra failed with error -32 [ 1402.269065][T19006] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1402.287668][T19006] usb 10-1: device descriptor read/8, error -71 [ 1402.398641][T19006] usb usb10-port1: unable to enumerate USB device [ 1402.429186][T24731] netlink: 8972 bytes leftover after parsing attributes in process `syz.7.5136'. [ 1402.510573][T24731] openvswitch: netlink: Flow key attr not present in new flow. [ 1404.042074][T19001] usb 9-1: USB disconnect, device number 64 [ 1405.207504][T24786] netlink: 'syz.9.5144': attribute type 12 has an invalid length. [ 1405.215739][T24786] netlink: 248 bytes leftover after parsing attributes in process `syz.9.5144'. [ 1405.283706][T19006] usb 7-1: USB disconnect, device number 93 [ 1405.746115][T19006] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 1406.026229][T19006] usb 7-1: Using ep0 maxpacket: 32 [ 1406.038158][T19006] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1406.052573][T19006] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1406.062668][T19006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.166152][T19004] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1406.269699][T19006] usb 7-1: config 0 descriptor?? [ 1406.288957][T19006] hub 7-1:0.0: bad descriptor, ignoring hub [ 1406.294874][T19006] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1406.362162][T19006] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1406.401705][T19004] usb 5-1: Using ep0 maxpacket: 32 [ 1406.408784][T19004] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1406.426399][T19004] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1406.438897][T19004] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.468606][T19004] usb 5-1: config 0 descriptor?? [ 1406.518485][T19004] hub 5-1:0.0: bad descriptor, ignoring hub [ 1406.534748][T19004] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1406.566591][T19004] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1406.584822][T24796] netlink: 'syz.9.5148': attribute type 12 has an invalid length. [ 1406.593127][T24796] netlink: 'syz.9.5148': attribute type 29 has an invalid length. [ 1406.601841][T24796] netlink: 148 bytes leftover after parsing attributes in process `syz.9.5148'. [ 1406.886203][T19004] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1407.038540][T19004] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1407.049864][T19004] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1407.062078][T19004] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1407.072460][T19004] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1407.080722][T19004] usb 10-1: Manufacturer: syz [ 1407.087643][T19004] usb 10-1: config 0 descriptor?? [ 1407.505559][T19004] pyra 0003:1E7D:2CF6.0061: unknown main item tag 0x0 [ 1407.520417][T19004] pyra 0003:1E7D:2CF6.0061: unknown main item tag 0x0 [ 1407.534175][T19004] pyra 0003:1E7D:2CF6.0061: unknown main item tag 0x0 [ 1407.542562][T19004] pyra 0003:1E7D:2CF6.0061: unknown main item tag 0x0 [ 1407.549610][T19004] pyra 0003:1E7D:2CF6.0061: unknown main item tag 0x0 [ 1407.556564][T19004] pyra 0003:1E7D:2CF6.0061: unknown main item tag 0x0 [ 1407.582949][T19004] pyra 0003:1E7D:2CF6.0061: unknown main item tag 0x0 [ 1407.599252][T19004] pyra 0003:1E7D:2CF6.0061: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 1407.703446][T19004] pyra 0003:1E7D:2CF6.0061: couldn't init struct pyra_device [ 1407.712445][T19004] pyra 0003:1E7D:2CF6.0061: couldn't install mouse [ 1407.721555][T19004] pyra 0003:1E7D:2CF6.0061: probe with driver pyra failed with error -32 [ 1408.479542][T24818] netlink: 268 bytes leftover after parsing attributes in process `syz.6.5155'. [ 1408.490019][T19006] usb 7-1: USB disconnect, device number 94 [ 1408.836180][T17091] usb 7-1: new full-speed USB device number 95 using dummy_hcd [ 1409.008173][T17091] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1409.040077][T19006] usb 5-1: USB disconnect, device number 15 [ 1409.052921][T17091] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1409.086304][T17091] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1409.148237][T17091] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1409.200905][T17091] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.247950][T24823] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1409.705379][T19006] usb 10-1: USB disconnect, device number 29 [ 1410.288121][T17091] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 1410.319924][T17091] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input128 [ 1410.396936][T19006] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1410.418641][T17091] usb 7-1: USB disconnect, device number 95 [ 1410.424615][ C1] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1410.566276][T19006] usb 5-1: Using ep0 maxpacket: 16 [ 1410.581994][T19006] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1410.594035][T19006] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1410.605286][T19006] usb 5-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 1410.615709][T19006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.641718][T19006] usb 5-1: config 0 descriptor?? [ 1410.693650][T24843] netlink: 'syz.8.5164': attribute type 12 has an invalid length. [ 1410.702184][T24843] netlink: 'syz.8.5164': attribute type 29 has an invalid length. [ 1410.710356][T24843] netlink: 148 bytes leftover after parsing attributes in process `syz.8.5164'. [ 1411.002902][T24853] FAULT_INJECTION: forcing a failure. [ 1411.002902][T24853] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.017202][T24853] CPU: 0 UID: 0 PID: 24853 Comm: syz.6.5168 Tainted: G L syzkaller #0 PREEMPT(full) [ 1411.017234][T24853] Tainted: [L]=SOFTLOCKUP [ 1411.017242][T24853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1411.017255][T24853] Call Trace: [ 1411.017263][T24853] [ 1411.017273][T24853] dump_stack_lvl+0x189/0x250 [ 1411.017302][T24853] ? __pfx____ratelimit+0x10/0x10 [ 1411.017332][T24853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1411.017355][T24853] ? __pfx__printk+0x10/0x10 [ 1411.017396][T24853] should_fail_ex+0x414/0x560 [ 1411.017429][T24853] should_failslab+0xa8/0x100 [ 1411.017451][T24853] kmem_cache_alloc_noprof+0x74/0x6f0 [ 1411.017477][T24853] ? __send_signal_locked+0x22a/0xeb0 [ 1411.017503][T24853] ? sig_get_ucounts+0x26/0x450 [ 1411.017519][T24853] ? sig_get_ucounts+0x3e4/0x450 [ 1411.017541][T24853] __send_signal_locked+0x22a/0xeb0 [ 1411.017571][T24853] ? mt_find+0x46f/0x5e0 [ 1411.017594][T24853] force_sig_info_to_task+0x305/0x4a0 [ 1411.017626][T24853] force_sig_fault+0xdc/0x130 [ 1411.017653][T24853] ? __pfx_force_sig_fault+0x10/0x10 [ 1411.017677][T24853] ? __up_read+0x25d/0x670 [ 1411.017708][T24853] ? fixup_vdso_exception+0x2cc/0x300 [ 1411.017743][T24853] __bad_area_nosemaphore+0x3b3/0x780 [ 1411.017774][T24853] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 1411.017797][T24853] ? rcu_is_watching+0x15/0xb0 [ 1411.017823][T24853] ? trace_page_fault_user+0x84/0x1c0 [ 1411.017846][T24853] exc_page_fault+0x82/0x100 [ 1411.017868][T24853] asm_exc_page_fault+0x26/0x30 [ 1411.017888][T24853] RIP: 0033:0x7f628a24e79a [ 1411.017907][T24853] Code: 90 8b 45 04 ba 03 00 00 00 c1 e0 04 03 45 64 39 c6 48 0f 42 f0 45 31 c9 31 ff e8 e1 0f 14 00 8b 75 00 ba 03 00 00 00 45 89 e0 <49> 89 45 00 41 b9 00 00 00 10 b9 01 80 00 00 31 ff c1 e6 06 e8 bd [ 1411.017925][T24853] RSP: 002b:00007f628b1d2fd0 EFLAGS: 00010217 [ 1411.017945][T24853] RAX: ffffffffffffffff RBX: 00007f628a5e5fa0 RCX: 00007f628a38f783 [ 1411.017961][T24853] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 1411.017973][T24853] RBP: 0000200000000080 R08: 00000000ffffffff R09: 0000000000000000 [ 1411.017987][T24853] R10: 0000000000008001 R11: 0000000000000246 R12: ffffffffffffffff [ 1411.018001][T24853] R13: 0000000000000000 R14: 0000000000000500 R15: 0000000000000000 [ 1411.018031][T24853] [ 1411.248845][T17090] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1411.390760][T24863] program syz.7.5170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1411.463181][T17090] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1411.474431][T17090] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1411.486170][T17090] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1411.495525][T17090] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1411.506903][T17090] usb 10-1: Manufacturer: syz [ 1411.555414][T17090] usb 10-1: config 0 descriptor?? [ 1411.695263][T19006] usbhid 5-1:0.0: can't add hid device: -71 [ 1411.723445][T19006] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1411.773514][T19006] usb 5-1: USB disconnect, device number 16 [ 1411.811592][T24874] netlink: 'syz.4.5176': attribute type 12 has an invalid length. [ 1411.819972][T24874] netlink: 'syz.4.5176': attribute type 29 has an invalid length. [ 1411.828989][T24874] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5176'. [ 1411.984504][T17090] pyra 0003:1E7D:2CF6.0062: unknown main item tag 0x0 [ 1411.992760][T17090] pyra 0003:1E7D:2CF6.0062: unknown main item tag 0x0 [ 1412.002339][T17090] pyra 0003:1E7D:2CF6.0062: unknown main item tag 0x0 [ 1412.029541][T17090] pyra 0003:1E7D:2CF6.0062: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 1412.185619][T17090] pyra 0003:1E7D:2CF6.0062: couldn't init struct pyra_device [ 1412.202726][T17090] pyra 0003:1E7D:2CF6.0062: couldn't install mouse [ 1412.222705][T17090] pyra 0003:1E7D:2CF6.0062: probe with driver pyra failed with error -32 [ 1412.397028][T17090] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1412.428201][T24888] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5179'. [ 1412.742802][T17090] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.742826][T17090] usb 5-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 1412.742854][T17090] usb 5-1: config 3 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1413.142283][T17090] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1413.142306][T17090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.142317][T17090] usb 5-1: Product: syz [ 1413.142326][T17090] usb 5-1: Manufacturer: syz [ 1413.142334][T17090] usb 5-1: SerialNumber: syz [ 1413.225137][T17090] cdc_ncm 5-1:3.0: invalid descriptor buffer length [ 1413.300338][T17090] cdc_ncm 5-1:3.0: CDC Union missing and no IAD found [ 1413.300388][T17090] cdc_ncm 5-1:3.0: bind() failure [ 1413.792335][T19006] usb 10-1: USB disconnect, device number 30 [ 1414.226210][T19001] usb 9-1: new full-speed USB device number 65 using dummy_hcd [ 1414.233859][T19004] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1414.388088][T19001] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1414.398670][T19004] usb 10-1: Using ep0 maxpacket: 8 [ 1414.419600][T19004] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1414.433938][T19001] usb 9-1: config 0 has no interfaces? [ 1414.468154][T19001] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1414.477470][T19004] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1414.511793][T19001] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1414.546484][T19004] usb 10-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1414.572350][T19001] usb 9-1: SerialNumber: syz [ 1414.587838][T19004] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.618186][T19001] usb 9-1: config 0 descriptor?? [ 1414.625051][T19004] usb 10-1: Product: syz [ 1414.646346][T19004] usb 10-1: Manufacturer: syz [ 1414.669804][T19004] usb 10-1: SerialNumber: syz [ 1414.702630][T24914] netlink: 'syz.7.5186': attribute type 12 has an invalid length. [ 1414.702792][T19004] usb 10-1: config 0 descriptor?? [ 1414.717486][T24914] netlink: 'syz.7.5186': attribute type 29 has an invalid length. [ 1414.725528][T24914] netlink: 148 bytes leftover after parsing attributes in process `syz.7.5186'. [ 1414.751747][T19004] iowarrior 10-1:0.0: no interrupt-in endpoint found [ 1414.876122][T19004] usb 9-1: USB disconnect, device number 65 [ 1414.952186][T19001] usb 10-1: USB disconnect, device number 31 [ 1414.961875][T24918] netlink: 'syz.7.5188': attribute type 12 has an invalid length. [ 1414.988905][T24918] netlink: 'syz.7.5188': attribute type 29 has an invalid length. [ 1415.004774][T24918] netlink: 148 bytes leftover after parsing attributes in process `syz.7.5188'. [ 1415.145047][T19004] usb 5-1: USB disconnect, device number 17 [ 1415.166135][T17091] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 1415.326384][T17091] usb 7-1: Using ep0 maxpacket: 16 [ 1415.363850][T17091] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1415.406149][T19006] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1415.440710][T17091] usb 7-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1415.487870][T17091] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.537556][T17091] usb 7-1: config 0 descriptor?? [ 1415.626535][T19006] usb 10-1: Using ep0 maxpacket: 8 [ 1415.657738][T19006] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.707233][T19006] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1415.778100][T19006] usb 10-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1415.832943][T19006] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.866663][T19001] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1415.885685][T19006] usb 10-1: Product: syz [ 1415.913327][T19006] usb 10-1: Manufacturer: syz [ 1415.939966][T19006] usb 10-1: SerialNumber: syz [ 1415.987059][T19006] usb 10-1: config 0 descriptor?? [ 1415.995052][T17091] hid_parser_main: 4 callbacks suppressed [ 1415.995068][T17091] uclogic 0003:5543:0005.0063: unknown main item tag 0x0 [ 1416.034771][T19006] iowarrior 10-1:0.0: no interrupt-in endpoint found [ 1416.046864][T19001] usb 9-1: Using ep0 maxpacket: 32 [ 1416.061077][T17091] uclogic 0003:5543:0005.0063: unknown main item tag 0x0 [ 1416.071497][T19001] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1416.091527][T17091] uclogic 0003:5543:0005.0063: unknown main item tag 0x0 [ 1416.107612][T19001] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1416.132005][T17091] uclogic 0003:5543:0005.0063: hidraw0: USB HID v0.05 Device [HID 5543:0005] on usb-dummy_hcd.6-1/input0 [ 1416.175233][T19001] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1416.205083][T24916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.229205][T19001] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.244394][T24916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.281416][T19001] usb 9-1: config 0 descriptor?? [ 1416.312378][T19001] hub 9-1:0.0: USB hub found [ 1416.528879][T19001] hub 9-1:0.0: 1 port detected [ 1416.852755][T17091] usb 7-1: USB disconnect, device number 96 [ 1417.040820][T24946] tipc: Publication distribution failure [ 1417.137384][T19001] hub 9-1:0.0: hub_ext_port_status failed (err = -71) [ 1417.137775][T19006] usb 9-1: USB disconnect, device number 66 [ 1417.310925][T17090] usb 10-1: USB disconnect, device number 32 [ 1417.515082][T19001] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1417.665901][ T30] audit: type=1326 audit(1764954251.439:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24953 comm="syz.9.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1998f749 code=0x7ffc0000 [ 1417.706155][T19001] usb 7-1: Using ep0 maxpacket: 16 [ 1417.713406][ T30] audit: type=1326 audit(1764954251.469:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24953 comm="syz.9.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1998f749 code=0x7ffc0000 [ 1417.748213][T19001] usb 7-1: config 0 has an invalid interface number: 238 but max is 0 [ 1417.763964][T19001] usb 7-1: config 0 has no interface number 0 [ 1417.773074][ T30] audit: type=1326 audit(1764954251.469:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24953 comm="syz.9.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fef1998f749 code=0x7ffc0000 [ 1417.796065][T19001] usb 7-1: config 0 interface 238 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1417.816741][T19001] usb 7-1: config 0 interface 238 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1417.850041][ T30] audit: type=1326 audit(1764954251.469:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24953 comm="syz.9.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1998f749 code=0x7ffc0000 [ 1417.879663][T19001] usb 7-1: config 0 interface 238 has no altsetting 0 [ 1417.890270][T19001] usb 7-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 1417.906677][T19001] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.914847][ T30] audit: type=1326 audit(1764954251.469:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24953 comm="syz.9.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1998f749 code=0x7ffc0000 [ 1417.939470][T19001] usb 7-1: config 0 descriptor?? [ 1417.949736][ T30] audit: type=1326 audit(1764954251.469:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24953 comm="syz.9.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fef1998f749 code=0x7ffc0000 [ 1418.003091][ T30] audit: type=1326 audit(1764954251.469:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24953 comm="syz.9.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1998f749 code=0x7ffc0000 [ 1418.119699][ T30] audit: type=1326 audit(1764954251.469:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24953 comm="syz.9.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1998f749 code=0x7ffc0000 [ 1418.220537][ T30] audit: type=1326 audit(1764954251.469:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24953 comm="syz.9.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef1998f749 code=0x7ffc0000 [ 1418.275796][ T30] audit: type=1326 audit(1764954251.469:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24953 comm="syz.9.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1998f749 code=0x7ffc0000 [ 1418.368398][T19001] logitech-djreceiver 0003:046D:C513.0064: unknown main item tag 0x0 [ 1418.380982][T19001] logitech-djreceiver 0003:046D:C513.0064: unknown main item tag 0x0 [ 1418.399725][T19001] logitech-djreceiver 0003:046D:C513.0064: unknown main item tag 0x0 [ 1418.444036][T19001] logitech-djreceiver 0003:046D:C513.0064: unknown main item tag 0x0 [ 1418.486133][T19001] logitech-djreceiver 0003:046D:C513.0064: unknown main item tag 0x0 [ 1418.520306][T19001] logitech-djreceiver 0003:046D:C513.0064: hidraw0: USB HID v0.05 Device [HID 046d:c513] on usb-dummy_hcd.6-1/input238 [ 1418.604771][T19001] usb 7-1: USB disconnect, device number 97 [ 1418.751365][T17091] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1419.007078][T24976] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1419.023238][T17091] usb 9-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.046278][T17091] usb 9-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 1419.081324][T17091] usb 9-1: config 3 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1419.228440][T24978] FAULT_INJECTION: forcing a failure. [ 1419.228440][T24978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1419.320880][T24978] CPU: 0 UID: 0 PID: 24978 Comm: syz.6.5203 Tainted: G L syzkaller #0 PREEMPT(full) [ 1419.320911][T24978] Tainted: [L]=SOFTLOCKUP [ 1419.320919][T24978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1419.320931][T24978] Call Trace: [ 1419.320941][T24978] [ 1419.320950][T24978] dump_stack_lvl+0x189/0x250 [ 1419.320978][T24978] ? __pfx____ratelimit+0x10/0x10 [ 1419.321009][T24978] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1419.321033][T24978] ? __pfx__printk+0x10/0x10 [ 1419.321062][T24978] ? __might_fault+0xb0/0x130 [ 1419.321082][T24978] should_fail_ex+0x414/0x560 [ 1419.321101][T24978] _copy_from_user+0x2d/0xb0 [ 1419.321122][T24978] ___sys_recvmsg+0x12e/0x510 [ 1419.321153][T24978] ? __pfx____sys_recvmsg+0x10/0x10 [ 1419.321202][T24978] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 1419.321222][T24978] do_recvmmsg+0x307/0x770 [ 1419.321240][T24978] ? __pfx_do_recvmmsg+0x10/0x10 [ 1419.321260][T24978] ? _copy_from_user+0x94/0xb0 [ 1419.321296][T24978] __x64_sys_recvmmsg+0x1af/0x240 [ 1419.321325][T24978] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1419.321354][T24978] ? do_syscall_64+0xbe/0xf80 [ 1419.321376][T24978] do_syscall_64+0xfa/0xf80 [ 1419.321395][T24978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.321415][T24978] ? clear_bhb_loop+0x60/0xb0 [ 1419.321438][T24978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.321456][T24978] RIP: 0033:0x7f628a38f749 [ 1419.321473][T24978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1419.321491][T24978] RSP: 002b:00007f628b1d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1419.321513][T24978] RAX: ffffffffffffffda RBX: 00007f628a5e5fa0 RCX: 00007f628a38f749 [ 1419.321529][T24978] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 1419.321540][T24978] RBP: 00007f628b1d3090 R08: 0000200000003700 R09: 0000000000000000 [ 1419.321547][T24978] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 1419.321558][T24978] R13: 00007f628a5e6038 R14: 00007f628a5e5fa0 R15: 00007f628a70fa28 [ 1419.321594][T24978] [ 1419.426332][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1419.766142][T17091] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1419.766175][T17091] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.766265][T17091] usb 9-1: Product: syz [ 1419.766319][T17091] usb 9-1: Manufacturer: syz [ 1419.766361][T17091] usb 9-1: SerialNumber: syz [ 1419.876973][T17091] cdc_ncm 9-1:3.0: invalid descriptor buffer length [ 1419.876989][T17091] cdc_ncm 9-1:3.0: CDC Union missing and no IAD found [ 1419.877012][T17091] cdc_ncm 9-1:3.0: bind() failure [ 1420.265890][T24994] veth0_to_team: entered promiscuous mode [ 1420.536137][ T5913] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1420.708777][ T5913] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1420.757795][ T5913] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1420.798950][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.842022][ T5913] usb 7-1: config 0 descriptor?? [ 1420.883702][ T5913] pwc: Askey VC010 type 2 USB webcam detected. [ 1421.283769][ T5913] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1421.341105][T24999] netlink: 88 bytes leftover after parsing attributes in process `syz.9.5210'. [ 1421.510195][ T5913] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1421.531102][ T5913] pwc: recv_control_msg error -32 req 04 val 1000 [ 1421.552710][ T5913] pwc: recv_control_msg error -32 req 04 val 1300 [ 1421.573442][ T5913] pwc: recv_control_msg error -32 req 04 val 1400 [ 1421.590851][ T5913] pwc: recv_control_msg error -32 req 02 val 2000 [ 1421.608491][ T5913] pwc: recv_control_msg error -32 req 02 val 2100 [ 1421.630868][ T5913] pwc: recv_control_msg error -32 req 04 val 1500 [ 1421.645243][ T5913] pwc: recv_control_msg error -32 req 02 val 2500 [ 1421.686699][T19006] usb 9-1: USB disconnect, device number 67 [ 1421.739988][T17091] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1421.880456][ T5913] pwc: recv_control_msg error -71 req 02 val 2600 [ 1421.896167][T17091] usb 10-1: Using ep0 maxpacket: 8 [ 1421.904195][ T5913] pwc: recv_control_msg error -71 req 02 val 2900 [ 1421.905461][ T5913] pwc: recv_control_msg error -71 req 02 val 2800 [ 1421.906295][ T5913] pwc: recv_control_msg error -71 req 04 val 1100 [ 1421.906990][ T5913] pwc: recv_control_msg error -71 req 04 val 1200 [ 1421.908108][ T5913] pwc: Registered as video103. [ 1421.909987][T17091] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1421.911526][ T5913] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input129 [ 1421.913620][T17091] usb 10-1: config 1 interface 0 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 1421.913651][T17091] usb 10-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1421.913679][T17091] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1421.921500][T17091] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1421.921520][T17091] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.921532][T17091] usb 10-1: Product: syz [ 1421.921541][T17091] usb 10-1: Manufacturer: syz [ 1421.921549][T17091] usb 10-1: SerialNumber: syz [ 1421.926326][T25001] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 1421.929279][ T5913] usb 7-1: USB disconnect, device number 98 [ 1422.194507][T25008] netlink: 8968 bytes leftover after parsing attributes in process `syz.8.5212'. [ 1422.194559][T25008] openvswitch: netlink: Flow key attr not present in new flow. [ 1422.227122][T25011] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5211'. [ 1422.227145][T25011] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5211'. [ 1422.255513][T25012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5213'. [ 1422.339023][T25013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5213'. [ 1423.171161][T25021] fuse: Bad value for 'fd' [ 1423.258974][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.268395][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.861491][T25044] netlink: 'syz.8.5223': attribute type 10 has an invalid length. [ 1425.316401][T19006] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1425.516395][T19006] usb 5-1: Using ep0 maxpacket: 16 [ 1425.536712][T19006] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1425.572587][T19006] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1425.609491][T19006] usb 5-1: config 0 has no interface number 0 [ 1425.653049][T19006] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1425.699818][T19006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.739703][T19006] usb 5-1: Product: syz [ 1425.761156][T19006] usb 5-1: Manufacturer: syz [ 1425.784352][T19006] usb 5-1: SerialNumber: syz [ 1425.823099][T19006] usb 5-1: config 0 descriptor?? [ 1426.076243][ T5913] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1426.088727][T19006] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1426.124465][T19006] uvcvideo 5-1:0.105: No valid video chain found. [ 1426.165134][T19006] usb 5-1: USB disconnect, device number 18 [ 1426.237773][ T5913] usb 9-1: Using ep0 maxpacket: 32 [ 1426.251165][ T5913] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1426.268144][ T5913] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1426.282009][ T5913] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1426.297831][ T5913] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.325504][ T5913] usb 9-1: config 0 descriptor?? [ 1426.347114][ T5913] hub 9-1:0.0: USB hub found [ 1426.553412][ T5913] hub 9-1:0.0: 1 port detected [ 1427.170055][ C1] raw-gadget.1 gadget.8: ignoring, device is not running [ 1427.187692][ C1] raw-gadget.1 gadget.8: ignoring, device is not running [ 1427.206952][ C1] raw-gadget.1 gadget.8: ignoring, device is not running [ 1427.214362][ C1] raw-gadget.1 gadget.8: ignoring, device is not running [ 1427.222263][ T5913] hub 9-1:0.0: hub_ext_port_status failed (err = -32) [ 1427.259677][ T5913] usb 9-1: USB disconnect, device number 68 [ 1427.828169][T25067] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5231'. [ 1428.185152][T17091] usb 10-1: USB disconnect, device number 33 [ 1428.186123][T19006] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 1428.366359][T19006] usb 9-1: Using ep0 maxpacket: 16 [ 1428.380808][T19006] usb 9-1: config 0 has an invalid interface number: 238 but max is 0 [ 1428.396284][T17090] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1428.405964][T19006] usb 9-1: config 0 has no interface number 0 [ 1428.422668][T19006] usb 9-1: config 0 interface 238 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1428.450654][T19006] usb 9-1: config 0 interface 238 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1428.473892][T19006] usb 9-1: config 0 interface 238 has no altsetting 0 [ 1428.489258][T19006] usb 9-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 1428.510367][T19006] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.529662][T19006] usb 9-1: config 0 descriptor?? [ 1428.577355][T17090] usb 5-1: Using ep0 maxpacket: 8 [ 1428.587723][T17090] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1428.613990][T17090] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1428.638219][T17090] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1428.679891][T17090] usb 5-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 1428.709769][T17090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.709799][T17090] usb 5-1: Product: syz [ 1428.709814][T17090] usb 5-1: Manufacturer: syz [ 1428.709841][T17090] usb 5-1: SerialNumber: syz [ 1428.739016][T17090] ti_usb_3410_5052 5-1:1.0: TI USB 3410 1 port adapter converter detected [ 1428.978861][T17091] usb 5-1: USB disconnect, device number 19 [ 1429.015087][T19006] logitech-djreceiver 0003:046D:C513.0065: unknown main item tag 0x0 [ 1429.015116][T19006] logitech-djreceiver 0003:046D:C513.0065: unknown main item tag 0x0 [ 1429.015133][T19006] logitech-djreceiver 0003:046D:C513.0065: unknown main item tag 0x0 [ 1429.015150][T19006] logitech-djreceiver 0003:046D:C513.0065: unknown main item tag 0x0 [ 1429.015166][T19006] logitech-djreceiver 0003:046D:C513.0065: unknown main item tag 0x0 [ 1429.036208][T19006] logitech-djreceiver 0003:046D:C513.0065: hidraw0: USB HID v0.05 Device [HID 046d:c513] on usb-dummy_hcd.8-1/input238 [ 1429.206602][T25081] netlink: 'syz.7.5237': attribute type 12 has an invalid length. [ 1429.206627][T25081] netlink: 'syz.7.5237': attribute type 29 has an invalid length. [ 1429.206643][T25081] netlink: 148 bytes leftover after parsing attributes in process `syz.7.5237'. [ 1429.235088][T19006] usb 9-1: USB disconnect, device number 69 [ 1429.529358][T25083] syzkaller0: entered promiscuous mode [ 1429.529375][T25083] syzkaller0: entered allmulticast mode [ 1429.944992][T25091] veth0_to_team: entered promiscuous mode [ 1429.953041][T25092] netlink: 'syz.4.5240': attribute type 10 has an invalid length. [ 1429.987031][T25092] mac80211_hwsim hwsim51 wlan1: entered promiscuous mode [ 1429.988036][T25092] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1430.061064][T25092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5240'. [ 1431.887096][T25122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1432.226146][T19006] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1432.368735][T19007] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1432.396408][T19006] usb 7-1: Using ep0 maxpacket: 16 [ 1432.407157][T19006] usb 7-1: config 0 has an invalid interface number: 238 but max is 0 [ 1432.423851][T19006] usb 7-1: config 0 has no interface number 0 [ 1432.442894][T19006] usb 7-1: config 0 interface 238 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1432.466168][T19006] usb 7-1: config 0 interface 238 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1432.491525][T19006] usb 7-1: config 0 interface 238 has no altsetting 0 [ 1432.498920][T19006] usb 7-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 1432.510152][T19006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.528238][T19006] usb 7-1: config 0 descriptor?? [ 1432.536290][T19007] usb 9-1: Using ep0 maxpacket: 32 [ 1432.548803][T19007] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1432.565761][T19007] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1432.576775][T19007] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1432.589598][T19007] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.615533][T19007] usb 9-1: config 0 descriptor?? [ 1432.643012][T19007] hub 9-1:0.0: USB hub found [ 1432.831804][T19007] hub 9-1:0.0: config failed, can't read hub descriptor (err -22) [ 1432.848274][T19007] usbhid 9-1:0.0: can't add hid device: -71 [ 1432.855834][T19007] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1432.887559][T19007] usb 9-1: USB disconnect, device number 70 [ 1432.949683][T19006] logitech-djreceiver 0003:046D:C513.0066: unknown main item tag 0x0 [ 1432.962654][T19006] logitech-djreceiver 0003:046D:C513.0066: unknown main item tag 0x0 [ 1432.970846][T19006] logitech-djreceiver 0003:046D:C513.0066: unknown main item tag 0x0 [ 1432.979286][T19006] logitech-djreceiver 0003:046D:C513.0066: unknown main item tag 0x0 [ 1432.987603][T19006] logitech-djreceiver 0003:046D:C513.0066: unknown main item tag 0x0 [ 1432.997855][T19006] logitech-djreceiver 0003:046D:C513.0066: hidraw0: USB HID v0.05 Device [HID 046d:c513] on usb-dummy_hcd.6-1/input238 [ 1433.155271][T19006] usb 7-1: USB disconnect, device number 99 [ 1433.597923][T25155] program syz.8.5263 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1433.815791][T25161] netlink: 'syz.9.5264': attribute type 12 has an invalid length. [ 1433.853566][T25161] netlink: 'syz.9.5264': attribute type 29 has an invalid length. [ 1433.889400][T25161] netlink: 148 bytes leftover after parsing attributes in process `syz.9.5264'. [ 1435.102921][T25187] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5270'. [ 1435.207175][T19007] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1435.378552][T19007] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1435.430727][T19007] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1435.487679][T19007] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1435.517926][T19007] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1435.547677][T19007] usb 9-1: Manufacturer: syz [ 1435.577691][T19007] usb 9-1: config 0 descriptor?? [ 1436.014467][T19007] pyra 0003:1E7D:2CF6.0067: unknown main item tag 0x0 [ 1436.034330][T19007] pyra 0003:1E7D:2CF6.0067: unknown main item tag 0x0 [ 1436.051753][T19007] pyra 0003:1E7D:2CF6.0067: unknown main item tag 0x0 [ 1436.077515][T19007] pyra 0003:1E7D:2CF6.0067: unknown main item tag 0x0 [ 1436.093075][T19007] pyra 0003:1E7D:2CF6.0067: unknown main item tag 0x0 [ 1436.101294][T19007] pyra 0003:1E7D:2CF6.0067: unknown main item tag 0x0 [ 1436.111296][T19007] pyra 0003:1E7D:2CF6.0067: unknown main item tag 0x0 [ 1436.138958][T19007] pyra 0003:1E7D:2CF6.0067: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 1436.212466][T19007] pyra 0003:1E7D:2CF6.0067: couldn't init struct pyra_device [ 1436.229762][T19007] pyra 0003:1E7D:2CF6.0067: couldn't install mouse [ 1436.255389][T19007] pyra 0003:1E7D:2CF6.0067: probe with driver pyra failed with error -32 [ 1436.645095][T25208] netlink: 'syz.6.5277': attribute type 12 has an invalid length. [ 1436.653808][T25208] netlink: 'syz.6.5277': attribute type 29 has an invalid length. [ 1436.663147][T25208] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5277'. [ 1436.923797][T25213] program syz.6.5279 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1437.075523][T25217] netlink: 'syz.9.5281': attribute type 21 has an invalid length. [ 1437.084976][T25217] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5281'. [ 1437.568566][T25229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5284'. [ 1437.928405][ T5913] usb 9-1: USB disconnect, device number 71 [ 1437.990433][T25237] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5286'. [ 1438.142711][T25240] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1438.395453][T25245] syzkaller0: entered promiscuous mode [ 1438.407087][T25245] syzkaller0: entered allmulticast mode [ 1439.943441][T25269] program syz.7.5295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1442.509998][T25263] netlink: 'syz.6.5293': attribute type 12 has an invalid length. [ 1442.518055][T25263] netlink: 'syz.6.5293': attribute type 29 has an invalid length. [ 1442.529392][T25263] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5293'. [ 1442.926159][T17091] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1443.116150][T17091] usb 10-1: Using ep0 maxpacket: 32 [ 1443.132221][T17091] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 1443.149499][T17091] usb 10-1: config 0 has no interface number 0 [ 1443.175647][T17091] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1443.198194][T17091] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.233765][T17091] usb 10-1: Product: syz [ 1443.243237][T17091] usb 10-1: Manufacturer: syz [ 1443.248345][T17091] usb 10-1: SerialNumber: syz [ 1443.262931][T17091] usb 10-1: config 0 descriptor?? [ 1443.305884][T17091] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1443.435948][T25298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5302'. [ 1443.916212][T25295] netlink: 203340 bytes leftover after parsing attributes in process `syz.8.5301'. [ 1443.979141][T17091] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1444.042149][T17091] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1445.364415][T25318] netlink: 892 bytes leftover after parsing attributes in process `syz.7.5303'. [ 1445.444521][T25319] netlink: 892 bytes leftover after parsing attributes in process `syz.7.5303'. [ 1445.728227][ C1] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1445.728697][T17090] usb 10-1: USB disconnect, device number 34 [ 1445.777490][T17090] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1445.830013][T17090] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1445.865037][T17090] quatech2 10-1:0.51: device disconnected [ 1445.891751][T25327] netlink: 'syz.8.5307': attribute type 12 has an invalid length. [ 1445.901399][T25327] netlink: 'syz.8.5307': attribute type 29 has an invalid length. [ 1445.910080][T25327] netlink: 148 bytes leftover after parsing attributes in process `syz.8.5307'. [ 1445.997201][T25331] program syz.9.5306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1446.006912][T25332] veth0_to_team: entered promiscuous mode [ 1446.198551][T25334] syzkaller0: entered promiscuous mode [ 1446.215822][T25334] syzkaller0: entered allmulticast mode [ 1449.501478][T25345] bridge0: entered promiscuous mode [ 1449.508789][T25345] macsec1: entered promiscuous mode [ 1449.515343][T25345] bridge0: port 3(macsec1) entered blocking state [ 1449.522498][T25345] bridge0: port 3(macsec1) entered disabled state [ 1449.529248][T25345] macsec1: entered allmulticast mode [ 1449.534620][T25345] bridge0: entered allmulticast mode [ 1449.547270][T25345] macsec1: left allmulticast mode [ 1449.552348][T25345] bridge0: left allmulticast mode [ 1449.559493][T25345] bridge0: left promiscuous mode [ 1450.936441][ T5913] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 1451.129592][ T5913] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1451.162150][ T5913] usb 5-1: not running at top speed; connect to a high speed hub [ 1451.193389][ T5913] usb 5-1: config 188 has an invalid interface number: 3 but max is 1 [ 1451.214339][ T5913] usb 5-1: config 188 has an invalid interface number: 9 but max is 1 [ 1451.238749][T25377] IPv6: Can't replace route, no match found [ 1451.244932][ T5913] usb 5-1: config 188 has no interface number 0 [ 1451.257274][ T5913] usb 5-1: config 188 has no interface number 1 [ 1451.264829][ T5913] usb 5-1: config 188 interface 3 has no altsetting 0 [ 1451.280328][ T5913] usb 5-1: config 188 interface 9 has no altsetting 0 [ 1451.293986][ T5913] usb 5-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=86.a0 [ 1451.304644][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.313212][ T5913] usb 5-1: Product: syz [ 1451.319980][ T5913] usb 5-1: Manufacturer: syz [ 1451.324708][ T5913] usb 5-1: SerialNumber: syz [ 1453.187107][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1453.187147][ T30] audit: type=1326 audit(1764954286.959:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25417 comm="syz.6.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628a38f749 code=0x7ffc0000 [ 1453.240146][ T5913] usb 5-1: unknown number of interfaces: 2 [ 1453.272339][ T5913] usb 5-1: USB disconnect, device number 20 [ 1453.295401][ T30] audit: type=1326 audit(1764954286.959:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25417 comm="syz.6.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628a38f749 code=0x7ffc0000 [ 1453.360610][ T30] audit: type=1326 audit(1764954286.959:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25417 comm="syz.6.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628a38f749 code=0x7ffc0000 [ 1453.421420][ T30] audit: type=1326 audit(1764954286.969:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25417 comm="syz.6.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628a38f749 code=0x7ffc0000 [ 1453.465798][ T30] audit: type=1326 audit(1764954286.999:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25417 comm="syz.6.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f628a38f749 code=0x7ffc0000 [ 1453.491940][ T30] audit: type=1326 audit(1764954286.999:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25417 comm="syz.6.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628a38f749 code=0x7ffc0000 [ 1453.639740][ T30] audit: type=1326 audit(1764954286.999:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25417 comm="syz.6.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628a38f749 code=0x7ffc0000 [ 1453.696167][ T5913] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1453.753764][ T30] audit: type=1326 audit(1764954286.999:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25417 comm="syz.6.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628a38f749 code=0x7ffc0000 [ 1453.786750][T19007] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1453.836537][ T5913] usb 7-1: device descriptor read/64, error -71 [ 1453.879882][ T30] audit: type=1326 audit(1764954286.999:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25417 comm="syz.6.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628a38f749 code=0x7ffc0000 [ 1453.993673][ T30] audit: type=1326 audit(1764954286.999:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25417 comm="syz.6.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f628a3915dc code=0x7ffc0000 [ 1454.116234][ T5913] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1454.172040][T19007] usb 10-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1454.188641][T19007] usb 10-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 1454.200499][T19007] usb 10-1: config 3 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1454.223457][T19007] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1454.235126][T19007] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.249006][T19007] usb 10-1: Product: syz [ 1454.258952][T19007] usb 10-1: Manufacturer: syz [ 1454.264538][T19007] usb 10-1: SerialNumber: syz [ 1454.266439][ T5913] usb 7-1: device descriptor read/64, error -71 [ 1454.304068][T19007] cdc_ncm 10-1:3.0: invalid descriptor buffer length [ 1454.314359][T19007] cdc_ncm 10-1:3.0: CDC Union missing and no IAD found [ 1454.321847][T19007] cdc_ncm 10-1:3.0: bind() failure [ 1454.407184][ T5913] usb usb7-port1: attempt power cycle [ 1454.756144][ T5913] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1454.776733][ T5913] usb 7-1: device descriptor read/8, error -71 [ 1455.026120][ T5913] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1455.049198][ T5913] usb 7-1: device descriptor read/8, error -71 [ 1455.159059][ T5913] usb usb7-port1: unable to enumerate USB device [ 1455.470434][T25448] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1455.575020][T25453] syzkaller0: entered promiscuous mode [ 1455.582386][T25453] syzkaller0: entered allmulticast mode [ 1455.975536][T19007] usb 10-1: USB disconnect, device number 35 [ 1456.366339][ T5913] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1456.538736][ T5913] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1456.551020][ T5913] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1456.562366][ T5913] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1456.571946][ T5913] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1456.580480][ T5913] usb 9-1: Manufacturer: syz [ 1456.588741][ T5913] usb 9-1: config 0 descriptor?? [ 1457.011457][ T5913] pyra 0003:1E7D:2CF6.0068: unknown main item tag 0x0 [ 1457.021229][ T5913] pyra 0003:1E7D:2CF6.0068: unknown main item tag 0x0 [ 1457.028453][ T5913] pyra 0003:1E7D:2CF6.0068: unknown main item tag 0x0 [ 1457.040034][ T5913] pyra 0003:1E7D:2CF6.0068: unknown main item tag 0x0 [ 1457.056383][ T5913] pyra 0003:1E7D:2CF6.0068: unknown main item tag 0x0 [ 1457.070064][ T5913] pyra 0003:1E7D:2CF6.0068: unknown main item tag 0x0 [ 1457.085267][ T5913] pyra 0003:1E7D:2CF6.0068: unknown main item tag 0x0 [ 1457.115032][ T5913] pyra 0003:1E7D:2CF6.0068: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 1457.207221][ T5913] pyra 0003:1E7D:2CF6.0068: couldn't init struct pyra_device [ 1457.219013][T25484] netlink: 592 bytes leftover after parsing attributes in process `syz.4.5354'. [ 1457.235129][ T5913] pyra 0003:1E7D:2CF6.0068: couldn't install mouse [ 1457.270041][ T5913] pyra 0003:1E7D:2CF6.0068: probe with driver pyra failed with error -5 [ 1459.099171][T17091] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1459.226260][T19007] usb 9-1: USB disconnect, device number 72 [ 1459.275650][T17091] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1459.299478][T17091] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1459.312634][T17091] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1459.322566][T17091] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.331619][T17091] usb 7-1: Product: syz [ 1459.335932][T17091] usb 7-1: Manufacturer: syz [ 1459.341023][T17091] usb 7-1: SerialNumber: syz [ 1459.351390][T17091] usb 7-1: config 0 descriptor?? [ 1459.363594][T17091] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1459.716236][T19007] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1459.866113][T19007] usb 9-1: Using ep0 maxpacket: 16 [ 1459.873530][T19007] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1459.885024][T19007] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1459.894873][T19007] usb 9-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 1459.905020][T19007] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.918049][T19007] usb 9-1: config 0 descriptor?? [ 1460.187253][T17091] usb 7-1: USB disconnect, device number 104 [ 1460.329404][ C0] raw-gadget.2 gadget.8: ignoring, device is not running [ 1460.337483][ C0] raw-gadget.2 gadget.8: ignoring, device is not running [ 1460.345022][ C0] raw-gadget.2 gadget.8: ignoring, device is not running [ 1460.352262][T19007] usbhid 9-1:0.0: can't add hid device: -32 [ 1460.358361][T19007] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 1460.375116][T19007] usb 9-1: USB disconnect, device number 73 [ 1460.546137][T17091] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1460.698399][T17091] usb 10-1: Using ep0 maxpacket: 16 [ 1460.708131][T17091] usb 10-1: config 0 has an invalid interface number: 238 but max is 0 [ 1460.716732][T17091] usb 10-1: config 0 has no interface number 0 [ 1460.722950][T17091] usb 10-1: config 0 interface 238 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1460.749144][T17091] usb 10-1: config 0 interface 238 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1460.759651][T17091] usb 10-1: config 0 interface 238 has no altsetting 0 [ 1460.766795][T17091] usb 10-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 1460.780149][T17091] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.790873][T17091] usb 10-1: config 0 descriptor?? [ 1461.026209][ T5913] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1461.189750][ T5913] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.200437][ T5913] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1461.213141][ T5913] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1461.222984][T17091] logitech-djreceiver 0003:046D:C513.0069: unknown main item tag 0x0 [ 1461.231250][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1461.239641][T17091] logitech-djreceiver 0003:046D:C513.0069: unknown main item tag 0x0 [ 1461.248220][ T5913] usb 7-1: SerialNumber: syz [ 1461.254436][T17091] logitech-djreceiver 0003:046D:C513.0069: unknown main item tag 0x0 [ 1461.269443][T17091] logitech-djreceiver 0003:046D:C513.0069: hidraw0: USB HID v0.05 Device [HID 046d:c513] on usb-dummy_hcd.9-1/input238 [ 1461.429148][T17091] usb 10-1: USB disconnect, device number 36 [ 1461.479774][ T5913] usb 7-1: 0:2 : does not exist [ 1461.494512][ T5913] usb 7-1: USB disconnect, device number 105 [ 1461.528955][T25273] udevd[25273]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1462.227411][T25551] veth0_to_team: entered promiscuous mode [ 1462.326159][ T5913] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1462.491080][ T5913] usb 7-1: Using ep0 maxpacket: 32 [ 1462.509812][ T5913] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.538077][ T5913] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1462.564976][ T5913] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1462.595757][ T5913] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1462.634735][ T5913] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1462.671680][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.691928][ T5913] usb 7-1: Product: syz [ 1462.733572][ T5913] usb 7-1: Manufacturer: syz [ 1462.841777][ T5913] usb 7-1: SerialNumber: syz [ 1462.891285][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1462.905665][ T5913] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input130 [ 1463.126104][ T5913] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1463.161337][ T5913] (id 0x00) [ 1463.398474][ T5913] rc_core: IR keymap rc-imon-pad not found [ 1463.447393][ T5913] Registered IR keymap rc-empty [ 1463.469954][ T5913] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1463.507061][ T5913] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1463.538810][ T5913] imon:send_packet: packet tx failed (-71) [ 1463.576807][ T5913] imon 7-1:155.0: remote input dev register failed [ 1463.602059][ T5913] imon 7-1:155.0: imon_init_intf0: rc device setup failed [ 1463.700847][ T5913] imon 7-1:155.0: unable to initialize intf0, err 0 [ 1463.713298][ T5913] imon:imon_probe: failed to initialize context! [ 1463.732836][ T5913] imon 7-1:155.0: unable to register, err -19 [ 1463.761536][ T5913] usb 7-1: USB disconnect, device number 106 [ 1464.106229][ T5913] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 1464.288914][ T5913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1464.308680][ T5913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1464.336328][ T5913] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1464.355755][ T5913] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1464.372728][ T5913] usb 7-1: Manufacturer: syz [ 1464.388436][ T5913] usb 7-1: config 0 descriptor?? [ 1464.821851][ T5913] hid_parser_main: 2 callbacks suppressed [ 1464.821869][ T5913] pyra 0003:1E7D:2CF6.006A: unknown main item tag 0x0 [ 1464.868590][ T5913] pyra 0003:1E7D:2CF6.006A: unknown main item tag 0x0 [ 1464.898284][ T5913] pyra 0003:1E7D:2CF6.006A: unknown main item tag 0x0 [ 1464.924371][ T5913] pyra 0003:1E7D:2CF6.006A: unknown main item tag 0x0 [ 1464.946600][ T5913] pyra 0003:1E7D:2CF6.006A: unknown main item tag 0x0 [ 1464.967768][ T5913] pyra 0003:1E7D:2CF6.006A: unknown main item tag 0x0 [ 1464.989496][ T5913] pyra 0003:1E7D:2CF6.006A: unknown main item tag 0x0 [ 1465.021494][ T5913] pyra 0003:1E7D:2CF6.006A: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 1465.055727][ T5913] pyra 0003:1E7D:2CF6.006A: couldn't init struct pyra_device [ 1465.079307][ T5913] pyra 0003:1E7D:2CF6.006A: couldn't install mouse [ 1465.104530][ T5913] pyra 0003:1E7D:2CF6.006A: probe with driver pyra failed with error -5 [ 1466.649332][ T5913] usb 7-1: USB disconnect, device number 107 [ 1468.700341][T25633] netlink: 860 bytes leftover after parsing attributes in process `syz.9.5388'. [ 1468.717547][ T5913] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1468.788015][T25635] netlink: 860 bytes leftover after parsing attributes in process `syz.9.5388'. [ 1468.821912][T25635] netlink: 'syz.9.5388': attribute type 10 has an invalid length. [ 1468.848955][T25637] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20004 [ 1468.872538][T25637] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5389'. [ 1468.890648][ T5913] usb 9-1: Using ep0 maxpacket: 8 [ 1468.900385][ T5913] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1468.910392][ T5913] usb 9-1: config 7 has an invalid interface number: 142 but max is 0 [ 1468.919738][ T5913] usb 9-1: config 7 has no interface number 0 [ 1468.933850][ T5913] usb 9-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 1468.943367][ T5913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.951656][ T5913] usb 9-1: Product: syz [ 1468.957314][ T5913] usb 9-1: Manufacturer: syz [ 1468.962077][ T5913] usb 9-1: SerialNumber: syz [ 1469.190187][T25627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1469.208096][T25627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1469.641225][T22582] Bluetooth: hci4: unexpected event for opcode 0x0413 [ 1470.176577][T19007] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1470.339631][T19007] usb 10-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1470.349563][T19007] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1470.362699][T19007] usb 10-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1470.374453][T19007] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.390818][T19007] usb 10-1: Product: syz [ 1470.400537][T19007] usb 10-1: Manufacturer: syz [ 1470.410622][T19007] usb 10-1: SerialNumber: syz [ 1470.434141][T19007] usb 10-1: config 0 descriptor?? [ 1470.457182][T19007] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1471.062057][T19007] gspca_sunplus: reg_r err -32 [ 1471.091083][T19007] sunplus 10-1:0.0: probe with driver sunplus failed with error -32 [ 1471.113711][T19007] usb 10-1: USB disconnect, device number 37 [ 1471.188464][ T5913] usb 9-1: USB disconnect, device number 74 [ 1471.326178][T17090] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 1471.506105][T17090] usb 7-1: Using ep0 maxpacket: 32 [ 1471.521513][T17090] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1471.540776][T17090] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1471.569564][T17090] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8960, setting to 1024 [ 1471.610448][T17090] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1471.631327][T17090] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1471.653344][T17090] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1471.662958][T17090] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.674282][T17090] usb 7-1: Product: syz [ 1471.680651][T17090] usb 7-1: Manufacturer: syz [ 1471.685594][T17090] usb 7-1: SerialNumber: syz [ 1471.699027][T17090] usb 7-1: config 0 descriptor?? [ 1471.920470][T17090] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 1471.937956][T17090] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1471.950380][ T5913] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1471.962012][T17090] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1471.975122][T17090] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1471.986603][T17090] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1472.002578][T17090] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1472.015579][T17090] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1472.026494][T17090] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1472.033800][T17090] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1472.041339][T17090] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1472.051097][T17090] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1472.069151][T17090] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1472.082112][T17090] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1472.096277][T17090] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1472.109686][T17090] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1472.119395][ T5913] usb 10-1: Using ep0 maxpacket: 32 [ 1472.133910][T17090] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1472.148657][ T5913] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1472.167820][ T5913] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1472.167865][T17090] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1472.196796][T25668] netlink: 860 bytes leftover after parsing attributes in process `syz.7.5401'. [ 1472.206538][ T5913] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1472.206549][T17090] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1472.206569][ T5913] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.230384][T17090] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1472.240621][T17090] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1472.247397][T17090] input input132: Timeout waiting for response from device. [ 1472.248766][ T5913] usb 10-1: config 0 descriptor?? [ 1472.260159][T17090] usb 7-1: USB disconnect, device number 108 [ 1472.270084][T25669] netlink: 860 bytes leftover after parsing attributes in process `syz.7.5401'. [ 1472.311867][T25669] netlink: 'syz.7.5401': attribute type 10 has an invalid length. [ 1472.330077][ T5913] hub 10-1:0.0: USB hub found [ 1472.542696][ T5913] hub 10-1:0.0: 26 ports detected [ 1472.552804][ T5913] hub 10-1:0.0: insufficient power available to use all downstream ports [ 1472.766306][T17090] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1472.928692][T17090] usb 9-1: config 0 has an invalid interface number: 98 but max is 0 [ 1472.937102][T17090] usb 9-1: config 0 has no interface number 0 [ 1472.943197][T17090] usb 9-1: config 0 interface 98 has no altsetting 0 [ 1472.953046][T17090] usb 9-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 1472.962403][T17090] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.970637][T17090] usb 9-1: Product: syz [ 1472.974409][ T5913] usb 10-1: USB disconnect, device number 38 [ 1472.975151][T17090] usb 9-1: Manufacturer: syz [ 1472.991900][T17090] usb 9-1: SerialNumber: syz [ 1473.005846][T17090] usb 9-1: config 0 descriptor?? [ 1473.229779][T17090] usb 9-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 1473.658296][T22582] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1473.669190][T22582] Bluetooth: hci4: Injecting HCI hardware error event [ 1473.681634][T22582] Bluetooth: hci4: hardware error 0x00 [ 1473.699730][T25692] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.5410'. [ 1473.888875][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1473.901427][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1473.910389][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1473.923113][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1473.931917][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1473.976116][T17091] usb 10-1: new full-speed USB device number 39 using dummy_hcd [ 1474.039728][T17090] usb 9-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1474.071418][T17090] usb 9-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 1474.079629][T19008] usb 9-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 1474.102659][T19008] usb 9-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 1474.124055][T17090] usb 9-1: USB disconnect, device number 75 [ 1474.161220][T19008] ------------[ cut here ]------------ [ 1474.167861][T19008] WARNING: fs/kernfs/dir.c:537 at kernfs_get+0x72/0x90, CPU#0: kworker/0:9/19008 [ 1474.177225][T19008] Modules linked in: [ 1474.182190][T19008] CPU: 0 UID: 0 PID: 19008 Comm: kworker/0:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 1474.193315][T19008] Tainted: [L]=SOFTLOCKUP [ 1474.197712][T19008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1474.207872][T19008] Workqueue: events request_firmware_work_func [ 1474.214226][T19008] RIP: 0010:kernfs_get+0x72/0x90 [ 1474.219245][T19008] Code: e8 33 5e 5e ff 48 89 df be 04 00 00 00 e8 d6 58 c4 ff f0 ff 03 eb 05 e8 1c 5e 5e ff 5b 5d c3 cc cc cc cc cc e8 0f 5e 5e ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 d5 [ 1474.239193][T19008] RSP: 0018:ffffc90011f6f600 EFLAGS: 00010293 [ 1474.245281][T19008] RAX: ffffffff8262ed71 RBX: ffff8880600e6690 RCX: ffff888049468000 [ 1474.253326][T19008] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1474.261775][T19008] RBP: 0000000000000000 R08: ffff8880600e6693 R09: 1ffff1100c01ccd2 [ 1474.269980][T19008] R10: dffffc0000000000 R11: ffffed100c01ccd3 R12: ffff8880542b3030 [ 1474.278019][T19008] R13: 1ffff1100a856607 R14: ffff8880542b3038 R15: dffffc0000000000 [ 1474.286050][T19008] FS: 0000000000000000(0000) GS:ffff88812608e000(0000) knlGS:0000000000000000 [ 1474.295000][T19008] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1474.301882][T19008] CR2: 000055f55734ef28 CR3: 000000007bff2000 CR4: 00000000003526f0 [ 1474.309957][T19008] Call Trace: [ 1474.313258][T19008] [ 1474.316260][T19008] kobject_add_internal+0x728/0xca0 [ 1474.321491][T19008] kobject_add+0x155/0x220 [ 1474.325933][T19008] ? __pfx_kobject_add+0x10/0x10 [ 1474.331004][T19008] ? __kasan_kmalloc+0x93/0xb0 [ 1474.335813][T19008] ? __pfx_kobject_add+0x10/0x10 [ 1474.340880][T19008] ? kobject_put+0x43c/0x480 [ 1474.345508][T19008] ? get_device_parent+0x366/0x3a0 [ 1474.350724][T19008] device_add+0x408/0xb50 [ 1474.355086][T19008] firmware_fallback_sysfs+0x2e4/0x9b0 [ 1474.360811][T19008] ? kmem_cache_free+0x197/0x620 [ 1474.365791][T19008] _request_firmware+0xf67/0x1540 [ 1474.370954][T19008] ? __pfx__request_firmware+0x10/0x10 [ 1474.376680][T19008] ? process_scheduled_works+0x9ef/0x1770 [ 1474.382443][T19008] request_firmware_work_func+0xaf/0x1c0 [ 1474.388174][T19008] ? process_scheduled_works+0x9ef/0x1770 [ 1474.393926][T19008] process_scheduled_works+0xad1/0x1770 [ 1474.399595][T19008] ? __pfx_process_scheduled_works+0x10/0x10 [ 1474.405602][T19008] worker_thread+0x8a0/0xda0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1474.410328][T19008] ? __kthread_parkme+0x7b/0x200 [ 1474.415310][T19008] kthread+0x711/0x8a0 [ 1474.419533][T19008] ? __pfx_worker_thread+0x10/0x10 [ 1474.424679][T19008] ? __pfx_kthread+0x10/0x10 [ 1474.429373][T19008] ? _raw_spin_unlock_irq+0x23/0x50 [ 1474.434582][T19008] ? lockdep_hardirqs_on+0x98/0x140 [ 1474.439907][T19008] ? __pfx_kthread+0x10/0x10 [ 1474.444927][T19008] ret_from_fork+0x599/0xb30 [ 1474.449701][T19008] ? __pfx_ret_from_fork+0x10/0x10 [ 1474.454858][T19008] ? __switch_to_asm+0x39/0x70 [ 1474.462659][T19008] ? __switch_to_asm+0x33/0x70 [ 1474.467634][T19008] ? __pfx_kthread+0x10/0x10 [ 1474.472246][T19008] ret_from_fork_asm+0x1a/0x30 [ 1474.477178][T19008] [ 1474.480205][T19008] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1474.487493][T19008] CPU: 0 UID: 0 PID: 19008 Comm: kworker/0:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 1474.498539][T19008] Tainted: [L]=SOFTLOCKUP [ 1474.502974][T19008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1474.513033][T19008] Workqueue: events request_firmware_work_func [ 1474.519189][T19008] Call Trace: [ 1474.522468][T19008] [ 1474.525396][T19008] dump_stack_lvl+0x99/0x250 [ 1474.529978][T19008] ? __asan_memcpy+0x40/0x70 [ 1474.534564][T19008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1474.539819][T19008] ? __pfx__printk+0x10/0x10 [ 1474.544443][T19008] vpanic+0x237/0x6d0 [ 1474.548430][T19008] ? __pfx_vpanic+0x10/0x10 [ 1474.552935][T19008] ? is_bpf_text_address+0x292/0x2b0 [ 1474.558222][T19008] ? is_bpf_text_address+0x26/0x2b0 [ 1474.563420][T19008] panic+0xb9/0xc0 [ 1474.567130][T19008] ? __pfx_panic+0x10/0x10 [ 1474.571710][T19008] ? ret_from_fork_asm+0x1a/0x30 [ 1474.576656][T19008] __warn+0x317/0x4b0 [ 1474.580643][T19008] ? kernfs_get+0x72/0x90 [ 1474.584995][T19008] ? kernfs_get+0x72/0x90 [ 1474.589358][T19008] __report_bug+0x288/0x500 [ 1474.593874][T19008] ? kernfs_get+0x72/0x90 [ 1474.598221][T19008] ? __pfx___report_bug+0x10/0x10 [ 1474.603253][T19008] ? kernfs_add_one+0xf6/0x530 [ 1474.608029][T19008] ? up_write+0x1ac/0x410 [ 1474.612350][T19008] ? kernfs_get+0x72/0x90 [ 1474.616686][T19008] report_bug+0x16a/0x220 [ 1474.621034][T19008] ? kernfs_get+0x72/0x90 [ 1474.625372][T19008] ? kernfs_get+0x74/0x90 [ 1474.629689][T19008] handle_bug+0x98/0x200 [ 1474.633940][T19008] exc_invalid_op+0x1a/0x50 [ 1474.638448][T19008] asm_exc_invalid_op+0x1a/0x20 [ 1474.643301][T19008] RIP: 0010:kernfs_get+0x72/0x90 [ 1474.648238][T19008] Code: e8 33 5e 5e ff 48 89 df be 04 00 00 00 e8 d6 58 c4 ff f0 ff 03 eb 05 e8 1c 5e 5e ff 5b 5d c3 cc cc cc cc cc e8 0f 5e 5e ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 d5 [ 1474.667837][T19008] RSP: 0018:ffffc90011f6f600 EFLAGS: 00010293 [ 1474.673907][T19008] RAX: ffffffff8262ed71 RBX: ffff8880600e6690 RCX: ffff888049468000 [ 1474.681877][T19008] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1474.689842][T19008] RBP: 0000000000000000 R08: ffff8880600e6693 R09: 1ffff1100c01ccd2 [ 1474.697811][T19008] R10: dffffc0000000000 R11: ffffed100c01ccd3 R12: ffff8880542b3030 [ 1474.705781][T19008] R13: 1ffff1100a856607 R14: ffff8880542b3038 R15: dffffc0000000000 [ 1474.713757][T19008] ? kernfs_get+0x71/0x90 [ 1474.718098][T19008] kobject_add_internal+0x728/0xca0 [ 1474.723307][T19008] kobject_add+0x155/0x220 [ 1474.727730][T19008] ? __pfx_kobject_add+0x10/0x10 [ 1474.732662][T19008] ? __kasan_kmalloc+0x93/0xb0 [ 1474.737466][T19008] ? __pfx_kobject_add+0x10/0x10 [ 1474.742399][T19008] ? kobject_put+0x43c/0x480 [ 1474.746988][T19008] ? get_device_parent+0x366/0x3a0 [ 1474.752106][T19008] device_add+0x408/0xb50 [ 1474.756448][T19008] firmware_fallback_sysfs+0x2e4/0x9b0 [ 1474.761913][T19008] ? kmem_cache_free+0x197/0x620 [ 1474.766866][T19008] _request_firmware+0xf67/0x1540 [ 1474.771903][T19008] ? __pfx__request_firmware+0x10/0x10 [ 1474.777366][T19008] ? process_scheduled_works+0x9ef/0x1770 [ 1474.783089][T19008] request_firmware_work_func+0xaf/0x1c0 [ 1474.788819][T19008] ? process_scheduled_works+0x9ef/0x1770 [ 1474.794537][T19008] process_scheduled_works+0xad1/0x1770 [ 1474.800106][T19008] ? __pfx_process_scheduled_works+0x10/0x10 [ 1474.806098][T19008] worker_thread+0x8a0/0xda0 [ 1474.810697][T19008] ? __kthread_parkme+0x7b/0x200 [ 1474.815638][T19008] kthread+0x711/0x8a0 [ 1474.819856][T19008] ? __pfx_worker_thread+0x10/0x10 [ 1474.825004][T19008] ? __pfx_kthread+0x10/0x10 [ 1474.829612][T19008] ? _raw_spin_unlock_irq+0x23/0x50 [ 1474.834826][T19008] ? lockdep_hardirqs_on+0x98/0x140 [ 1474.840024][T19008] ? __pfx_kthread+0x10/0x10 [ 1474.844633][T19008] ret_from_fork+0x599/0xb30 [ 1474.849222][T19008] ? __pfx_ret_from_fork+0x10/0x10 [ 1474.854336][T19008] ? __switch_to_asm+0x39/0x70 [ 1474.859096][T19008] ? __switch_to_asm+0x33/0x70 [ 1474.863854][T19008] ? __pfx_kthread+0x10/0x10 [ 1474.868466][T19008] ret_from_fork_asm+0x1a/0x30 [ 1474.873328][T19008] [ 1474.876763][T19008] Kernel Offset: disabled [ 1474.881090][T19008] Rebooting in 86400 seconds..