last executing test programs: 11m57.555133241s ago: executing program 3 (id=285): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x7, 0x0, 0x3}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @private2}}}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002f00)=[{0x0}, {&(0x7f0000000540)="f2e659a0b00d26c2ee", 0x9}], 0x2}}], 0x1, 0x4000000) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffce53135998bd912686dd6000030800783a00fc010000000000000000000000000000fe8000000000000000000000aa0200907800000000605b52ab00002b00fc000000000000000000000000000000fc0000000000000000000000000000000004040201000000fc020000000000000000000000000000fe8800000000000000000000000000018802000000000000c910fe8000000000000000000000000000bb000000000000000000"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000018000109000000000000000002180000ff0000080000000008000100ac1414"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2a6100, 0x0) unshare(0x2c020400) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000015000103000000000070000001"], 0x14}}, 0x0) read(r5, &(0x7f0000000080)=""/186, 0xba) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r1, 0x0, 0x0) 11m54.486287737s ago: executing program 3 (id=293): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x0, 0x24, 0x5a, {0x5a, 0x24, "581991e5e43e21057e7bc0178883c73b02da3b575ddb56fb616c722287c0b034b9a2efd48d131cd246490ff7ab8c60916f8707450f46c42825f0eaefa4f9f2c0981a70cae1baa07aa26b9db5fa2970dd943898e3391ac1f6"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x421}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x80, 0xd, 0xfe, "98552236", "c24ce131"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x4, 0xff, 0x7, 0x7, 0x7, 0x1}}}, &(0x7f0000000780)={0x84, &(0x7f0000000240)={0x40, 0x16, 0x3f, "b26efc4b53c46060c9b4ba2ea31bad92cbf5d33099a62b12d51a4e4c54a23cbbd48df22631051fe6eca7f9ff147693c62ee817b629848d41aa1998e7491e69"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x40, 0x10, [0x0]}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0xfff7}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0xd}, &(0x7f0000000440)={0x40, 0xb, 0x2, "19ca"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x8001}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, &(0x7f0000000500)={0x40, 0x17, 0x6, @random="b29a2f13d8a7"}, &(0x7f0000000540)={0x40, 0x19, 0x2, "cb35"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x2}}) futex(&(0x7f000000cffc), 0x5, 0x300, 0x0, &(0x7f00000000c0), 0x3000000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11m50.787573168s ago: executing program 3 (id=302): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x76ed}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) fcntl$addseals(r5, 0x409, 0x7) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg$unix(r7, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000100)=""/246, 0xf6}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @my=0x1, 0x0, 0x0, 0x9}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) 11m49.837116943s ago: executing program 3 (id=309): r0 = syz_usb_connect$hid(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000404355220500000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) pwrite64(r1, 0x0, 0x0, 0x4000000) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000000c0)={{}, 0x8, &(0x7f0000000140)=[0x1fe00000000000, 0x6, 0xd3bc, 0x2, 0x10000000006, 0x600000000, 0x5, 0x6618], 0x4, 0x8, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pipe2(&(0x7f0000000840)={0xffffffffffffffff}, 0x0) r3 = syz_io_uring_setup(0xe41, &(0x7f0000000140)={0x0, 0x2119, 0x4000, 0xfffffffc, 0x0, 0x0, r2}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x40102, 0x0, 0x3d}, &(0x7f0000000040)='./file0/file0\x00', 0xff52}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002580)={{r8}, &(0x7f0000000140), 0x0}, 0x20) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r9, &(0x7f0000000280)=[{&(0x7f0000000400)="764dd209a02387", 0x7}, {0x0}], 0x2) eventfd(0x101) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x10c, &(0x7f0000000200)=0x5b, 0x0, 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a01020000000000000000070000000900010073797a30000000000900010073797a300000000008000240000000024c000000090a010400000000000000000700000008000a40fffffffd0900020073797a31000000000900010073797a3000000000080005400000001708000640ffffff0008000340000000389c1100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000701103806c110080080003400000000254110280041001"], 0x1244}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="0000050000000500b13a25c016261f0ee86b2819875e201167254682a00b8e6edd07cc586c6d208780f620a199a313ba5f9e1cbc3cff5bfedc41485da1aabf1ad0828fb9d16f5139918a7a37bc3cf6bb85f3a58c0d15123b1b14489aa58292"], 0x0, 0x0, 0x0}, 0x0) dup(r3) 11m47.420041419s ago: executing program 3 (id=314): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) close(r5) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x10001, @empty}, 0x1c) r6 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x400005) connect$inet(r6, 0x0, 0x0) sendmmsg(r6, &(0x7f0000002980), 0x400000000000239, 0x0) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r7, &(0x7f0000000200)=ANY=[], 0x4f) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="3080", 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_io_uring_setup(0x10e, &(0x7f0000001380)={0x0, 0x0, 0x1000, 0x4, 0x222}, &(0x7f0000000240), &(0x7f0000000280)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x6, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x200000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x56, 0x0, 0x10000000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0xb5, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff7fffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc000072, 0x9, 0x3, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x100000001]}) 11m47.095185837s ago: executing program 3 (id=316): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_vlan\x00'}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e20, 0x8, @private1, 0x85d}}, [0x9, 0xc6a, 0xe, 0x1, 0xa, 0x8, 0x5, 0x3, 0x0, 0x1, 0x400, 0x1ff, 0x80000000, 0xc04, 0x1]}, &(0x7f0000000240)=0x100) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x34, r1, 0x1, 0xffffffff, 0x0, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x19c, r1, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x19c}}, 0x24000004) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000180)={0x9, 'vlan1\x00', {0x1}, 0x9}) 11m46.312450348s ago: executing program 32 (id=316): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_vlan\x00'}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e20, 0x8, @private1, 0x85d}}, [0x9, 0xc6a, 0xe, 0x1, 0xa, 0x8, 0x5, 0x3, 0x0, 0x1, 0x400, 0x1ff, 0x80000000, 0xc04, 0x1]}, &(0x7f0000000240)=0x100) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x34, r1, 0x1, 0xffffffff, 0x0, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x19c, r1, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x19c}}, 0x24000004) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000180)={0x9, 'vlan1\x00', {0x1}, 0x9}) 34.110934209s ago: executing program 1 (id=2706): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x58, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x20000000}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 33.876172792s ago: executing program 1 (id=2708): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000100800010001"], 0x1c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000080)='S\xb5') syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) ioprio_set$pid(0x2, 0x0, 0x6000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c7f77f2c80301010000000000000000000000030c000200ffffff0d000001000c000200fffffffe000004010c000200fffffffb000097bf0800034000000002080003400000000908000340000000090c000200fffffffc00000006"], 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x4004050) close(0x4) 33.628586291s ago: executing program 1 (id=2709): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x4d, [0x10004, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x4, 0x1, 0xfd, 0x3c6, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x0, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x3, 0x2, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xc, 0x36, 0x4, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x0, 0xd, 0x10001, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40000040, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a97, 0x0, 0x9, 0x8, 0x0, 0x1, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x4, 0x2, 0x200006, 0x5, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x4, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x40000008, 0x2, 0x4, 0x800, 0x7, 0x9, 0x10000, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x4, 0x8c0, 0x9, 0x2, 0x8, 0x7, 0x6, 0x2, 0x81, 0x8, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x82, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0xd, 0x7ff, 0x606, 0x5, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0x1, 0x0, 0x2, 0x6, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0x20e, 0x4000006, 0x7, 0xfffffffd, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x8, 0x3c, 0x1000, 0x3, 0x3, 0x15, 0x8000, 0x7, 0x81, 0x8, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = getpid() syz_pidfd_open(r1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={r1, 0xffffffffffffffff, 0x0, 0x5, &(0x7f00000005c0)='syz1\x00'}, 0x30) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {0xaf0, 0xd033, 0x180}, 0x45, [0xfffffff7, 0x3, 0x2, 0x1, 0x80, 0xaf7, 0x8, 0x6, 0x7fff, 0x9, 0x42, 0x40, 0x3ff, 0x2, 0x1, 0x8000, 0x7ff, 0x20000003, 0x5, 0x5, 0x1, 0x4, 0x6, 0x2, 0x6, 0x6, 0x7, 0x1600000, 0xa, 0xfe, 0x3ff, 0xc6, 0x3, 0x8000, 0x1b, 0xb, 0x7, 0x0, 0xff, 0x4, 0x57, 0x6253, 0x7, 0xda, 0x67aa2099, 0xffffffff, 0x7, 0x8, 0x9, 0x9, 0xd, 0x6, 0x5, 0x9ec6, 0x7, 0x1, 0x7, 0xff, 0x7, 0x800, 0xfffffffa, 0x3, 0x6, 0x3], [0x3, 0x7ff, 0x7, 0xa, 0x3, 0x3, 0x3, 0x2, 0x2, 0x5, 0x0, 0xfffff283, 0x1ff8, 0x8, 0x100, 0xffffffff, 0x7, 0x3ff, 0xffffffff, 0x0, 0x400000, 0x9, 0x6, 0x20e, 0x0, 0x100, 0x1, 0xd, 0x100, 0x800, 0xcb, 0x5, 0x5, 0x6, 0x0, 0x3, 0xe, 0x6, 0x81, 0x3, 0x2, 0x8, 0xfffffff7, 0x6, 0x8, 0x5, 0xd, 0xfffffffa, 0x2, 0x8a, 0x4, 0x8b7, 0xfffffffa, 0x1, 0xfbfffff9, 0x3, 0x9, 0x7, 0x3, 0x942, 0x4, 0x12000, 0x4fb2adfa, 0xdea0], [0x2, 0x2, 0xfffff001, 0xfffffffd, 0x8, 0xe6, 0x8, 0x2, 0xf441, 0x2, 0xfffffffd, 0x2, 0x10, 0x1000, 0x9, 0x2, 0xfffffffb, 0x7, 0x0, 0xf361, 0x7, 0x3, 0x0, 0x5, 0x6, 0xff, 0x81, 0xf, 0x1, 0x9, 0x7, 0x0, 0x10005, 0x8e5c, 0x4, 0x9, 0x6, 0x1, 0x200, 0x7, 0x40, 0x7a2c, 0x200101, 0x9e38, 0x4c88, 0x6, 0xa8, 0x4, 0x8, 0x9, 0x9, 0x6, 0x5, 0x1, 0x1137, 0x8, 0xae, 0x4d70, 0x400, 0xfaa5, 0xffffff01, 0x15, 0x78, 0x1], [0x0, 0x9, 0x9, 0x0, 0x6, 0x8, 0x9, 0x4, 0xfffffff8, 0x200, 0x0, 0x5, 0x3, 0x6727, 0x7fff, 0x9, 0x200, 0x6, 0xe3, 0x400, 0x0, 0x4, 0xdfd2, 0x39, 0x101, 0x9, 0x1, 0x1, 0xa, 0x2, 0x10001, 0x1, 0x6, 0x400, 0x0, 0x8, 0x2, 0x9, 0x9, 0x6, 0x200, 0x0, 0x2334, 0x6, 0x1, 0x2, 0x6f51, 0x81, 0x5, 0x0, 0x7, 0x3, 0x7, 0x34254b70, 0x4ad, 0x3, 0x8b21, 0x80000001, 0x9, 0x1, 0xc, 0xffff, 0x7, 0x8]}, 0x45c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) 33.352126745s ago: executing program 1 (id=2710): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_opts(r3, 0x29, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="0604040205400400fc000000000000000000000000000001fe80000000000000000000000000001f89cf4f898c2e77891ed95ce136b0b7b0c7c96d34b871189825ab62abb194532ccf1ffd559ad931be510d427d3a82c05aba6c938af6f4cce89389802bbb06e80aa5b04af8c8"], 0x28) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0xff) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000eaffffff83000040"]) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 33.138831151s ago: executing program 1 (id=2711): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x34325258, 0x0, [0x2], [0x800], [0x0, 0x0, 0x0, 0x3]}) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8000, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x400, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x480, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf250b00000008000300", @ANYRES16=r0, @ANYBLOB="09000700b5de1522d30000000800090001ac0f000a00060008021100000100000500080002000000", @ANYRES16=r3], 0x44}}, 0x20004844) (async) sync() capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x216}) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000001000058000b480400945f64009400", 0x2a}], 0x1) (async) sync() (async) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x40, 0x4, 0x3, 0x3ff}]}) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) (async) r6 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) (async) munlockall() (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r7, 0x2000, 0x0) clock_gettime(0x0, &(0x7f0000000980)) 32.825258842s ago: executing program 1 (id=2713): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, 0x0) ioctl$SNAPSHOT_FREE(r3, 0x3305) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="63ab7555898ef46d8cbb37d8a7b0aa233a035140842397366d1d6167afd4576aca762aee462f08516c5d9f02c6fdf99c727b553deff3492f0bba6f871bc030376a9e1c050b01fbc46a091fda05eddb6212cb807b1ae31e994cc97194d80da7a3107e095df06e29d83e5134430f3fc69999378b", @ANYRES16=r0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="28005080110001004abee33908f8eef16f162471f40000000500020001000000080003000cac0f00"], 0x44}}, 0x1040) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0], 0x0) 17.246884647s ago: executing program 33 (id=2713): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, 0x0) ioctl$SNAPSHOT_FREE(r3, 0x3305) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="63ab7555898ef46d8cbb37d8a7b0aa233a035140842397366d1d6167afd4576aca762aee462f08516c5d9f02c6fdf99c727b553deff3492f0bba6f871bc030376a9e1c050b01fbc46a091fda05eddb6212cb807b1ae31e994cc97194d80da7a3107e095df06e29d83e5134430f3fc69999378b", @ANYRES16=r0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="28005080110001004abee33908f8eef16f162471f40000000500020001000000080003000cac0f00"], 0x44}}, 0x1040) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0], 0x0) 15.52400296s ago: executing program 5 (id=2765): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020600) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x66, &(0x7f00000000c0), 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000000c0)={0x8, 0x1, 0x2, "3a7107ca5de21f000000f373000000e0ff00", 0x56595559}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x20, 0x572, 0xcb01, 0x663d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5b, 0xe8, 0xeb}}]}}]}}, 0x0) r5 = socket(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}]}, 0x90}, 0x1, 0x200000000000000}, 0x20000000) getdents64(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) r8 = syz_io_uring_setup(0x1ace, &(0x7f0000000140)={0x0, 0xf76a, 0x400, 0x2, 0x294}, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_setup(0x5885, &(0x7f0000000280)={0x0, 0x6e1e, 0x20, 0x2, 0x3b2, 0x0, r8}, &(0x7f00000003c0), &(0x7f0000000400)) futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000000100), 0x21fffffe) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x20c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a80)=ANY=[@ANYBLOB], 0x1cdc}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 11.924807101s ago: executing program 5 (id=2771): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) syz_usb_connect(0x0, 0x25c, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e9b7e3405e04bf02069e0000000109024a0201000020000904"], 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x2f) 11.360049815s ago: executing program 4 (id=2775): r0 = syz_io_uring_setup(0xbc5, &(0x7f0000000440)={0x0, 0xc7d3, 0x10000, 0x2, 0x300}, &(0x7f00000004c0), &(0x7f0000000500)) r1 = io_uring_setup(0x8f08, &(0x7f000000c480)={0x0, 0xc46d, 0x1, 0x20001, 0x3, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{&(0x7f0000000680)=""/4096}, {&(0x7f00000003c0)=""/98, 0x3d}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB], 0xc0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x81, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xfffffffd}]}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x10, 0xa401) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x1) fchdir(0xffffffffffffffff) r5 = syz_io_uring_setup(0x10c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_LINKAT={0x27, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', r4, 0x1000}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 11.159835627s ago: executing program 6 (id=2778): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/151, &(0x7f00000000c0)=0x97) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000100)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1) r3 = syz_clone(0x1000000, &(0x7f00000001c0)="2592383d89189b2cd49c534e30a18d036804a2c76e80b9964e677fd2fd801a0399066cb65c8ba087c6102a90f62951d16193c8a373bc6b2d20794f6b112c02c80774858199af1d708f1cd4c0f6aef5ecf5754003d82717b7760f2b42ac00a24cbacb92a79d2dea829491e61c1292563dbe47e1d5a0c43ab0f47983912dd7bc967ba7f0475a8b7d0ca2f08a04c50c30e4415c06b6ee39e5b5a132aa6fd9af30a2f097c94588a772da75ece3a350dfdecc2961dd035868ace76f8a31663e02", 0xbe, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="0bb26898b511e3c73da3fe901ab8075c788c410c52") sched_setattr(r3, &(0x7f0000000340)={0x38, 0x3, 0x1, 0x93f8, 0x10001, 0xff, 0x8000000000000000, 0x0, 0x1, 0x3}, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x244000, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x8}, 0x8) recvfrom$inet(r4, &(0x7f0000000400)=""/23, 0x17, 0x3, &(0x7f0000000440)={0x2, 0x4e22, @remote}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r1) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000500), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'lo\x00', 0x0}) getsockname$packet(r4, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000600)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r4, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000a80)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000740)={0x2d4, r5, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x10}, 0xc002) socket$inet6(0xa, 0x4, 0xffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x9, &(0x7f0000000ac0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}}], &(0x7f0000000b40)='GPL\x00', 0x9, 0xfe, &(0x7f0000000b80)=""/254, 0x0, 0x8, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000cc0)=[r4], &(0x7f0000000d00)=[{0x5, 0x2, 0x5, 0x9}, {0x5, 0x1, 0x5, 0xa}, {0x4, 0x5, 0xa, 0x6}, {0x2, 0x5, 0x9, 0x6}], 0x10, 0xc905, @void, @value}, 0x94) r11 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSIGACCEPT(r11, 0x4b4e, 0x6) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000e00)=0x6) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48010}, 0x1) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) connect(r12, &(0x7f0000000f80)=@xdp={0x2c, 0x2, r9, 0x20}, 0x80) syz_open_dev$vim2m(&(0x7f0000001000), 0x1, 0x2) syz_open_dev$vbi(&(0x7f0000001040), 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x11, 0xf, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6e4}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x31, '\x00', r9, 0x0, r4, 0x8, &(0x7f00000011c0)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) 10.773985886s ago: executing program 6 (id=2779): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f0000000100)={@rand_addr=0x64010101, @rand_addr=0x64010101, @loopback}, 0xc) r3 = open(&(0x7f0000000500)='./file0\x00', 0x10080, 0xa) r4 = dup(r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000540)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000005c0)={r5, 0x0, r3, 0xc, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r5, 0x1, 0xffffffffffffffff, 0x7ff}) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r7 = syz_open_dev$mouse(&(0x7f0000000680), 0x0, 0x14b200) read(r7, 0x0, 0x2) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x470, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="98010000", @ANYRES16=r9, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d78435001088058000080200004000a00000000000000fe8000000000f00000000000000000000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff08000300000000000600050000000000f4000080a800098058000080060001000200000008000200ac1414bb0500030000000000060001000a00000014000200ff01000000000000000000000000000105000300000000000600010002000000070002000000000005000300000000004c000080060001000a00000014000200fe8000000000000000000000000000000500030000000000060001000a0000001400020000000000000000000000ffffac1414000500030000000000240002002767b524f45e9dfaf001c414581741c92349c3b6661d9864680582bd184ef1a624000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080007000000000008000100", @ANYRES32=r10], 0x198}}, 0x0) syz_usb_connect(0x3, 0xf5, 0x0, 0x0) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) 10.254599156s ago: executing program 5 (id=2780): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020600) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x66, &(0x7f00000000c0), 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000000c0)={0x8, 0x1, 0x2, "3a7107ca5de21f000000f373000000e0ff00", 0x56595559}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x20, 0x572, 0xcb01, 0x663d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5b, 0xe8, 0xeb}}]}}]}}, 0x0) r5 = socket(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}]}, 0x90}, 0x1, 0x1000000000000000}, 0x20000000) getdents64(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) r8 = syz_io_uring_setup(0x1ace, &(0x7f0000000140)={0x0, 0xf76a, 0x400, 0x2, 0x294}, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_setup(0x5885, &(0x7f0000000280)={0x0, 0x6e1e, 0x20, 0x2, 0x3b2, 0x0, r8}, &(0x7f00000003c0), &(0x7f0000000400)) futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000000100), 0x21fffffe) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x20c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a80)=ANY=[@ANYBLOB], 0x1cdc}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 10.056178496s ago: executing program 2 (id=2781): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) dup(r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f00000000c0)=""/16, 0x10}], 0x3}, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.132642123s ago: executing program 2 (id=2782): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0xb8}}, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) syz_io_uring_setup(0x17af, 0x0, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r6, r7, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x14c, 0x94a4}}, 0x50) r8 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r9, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 8.332982827s ago: executing program 6 (id=2783): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xf3c, 0x181000) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000480)="a1562b5a4269", 0x0, 0x0, 0x10, 0x0, 0x0}) timer_getoverrun(0x0) timer_create(0x2, &(0x7f00000001c0)={0x0, 0x5, 0x1, @thr={&(0x7f0000000100)="929a57f4833be654a4d5ddac6eba7211edbd0e9e516fd7f8630138c10d130ae9694934a6576aa9f46c5ea69152ad889247e882dd7d32ca9fa4758c433559905c5795120395494ceec3314b89d754967e996832033884614e7ef1261d37848277e5d5a9d1b436a2f23f095e24e30665516eb96047ba2e4aa693e65334b3472e6a", &(0x7f0000000180)="778bf424a17774c879ee76a618ef"}}, &(0x7f0000000200)=0x0) timer_delete(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x31, &(0x7f0000000040)={@broadcast, @random="6487a2bed3d6", @void, {@generic={0x88f7, "58f449351e02999a6b9c3ae6174699793723aefdba2571e58d1385ee89d2a626febe55"}}}, 0x0) r3 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x1fa}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, 0x0, 0xfe) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x0, 0x9, 0x9, 0x2}, {0x2, 0x7d, 0x9, 0x3}]}, 0x10) syz_open_dev$sg(&(0x7f0000000000), 0xf3c, 0x181000) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000480)="a1562b5a4269", 0x0, 0x0, 0x10, 0x0, 0x0}) (async) timer_getoverrun(0x0) (async) timer_create(0x2, &(0x7f00000001c0)={0x0, 0x5, 0x1, @thr={&(0x7f0000000100)="929a57f4833be654a4d5ddac6eba7211edbd0e9e516fd7f8630138c10d130ae9694934a6576aa9f46c5ea69152ad889247e882dd7d32ca9fa4758c433559905c5795120395494ceec3314b89d754967e996832033884614e7ef1261d37848277e5d5a9d1b436a2f23f095e24e30665516eb96047ba2e4aa693e65334b3472e6a", &(0x7f0000000180)="778bf424a17774c879ee76a618ef"}}, &(0x7f0000000200)) (async) timer_delete(r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) syz_emit_ethernet(0x31, &(0x7f0000000040)={@broadcast, @random="6487a2bed3d6", @void, {@generic={0x88f7, "58f449351e02999a6b9c3ae6174699793723aefdba2571e58d1385ee89d2a626febe55"}}}, 0x0) (async) syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x1fa}, &(0x7f0000ffe000), &(0x7f0000ffe000)) (async) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, 0x0, 0xfe) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x0, 0x9, 0x9, 0x2}, {0x2, 0x7d, 0x9, 0x3}]}, 0x10) (async) 7.983674624s ago: executing program 6 (id=2785): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x5421, &(0x7f00000000c0)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect$uac1(0x4, 0x106, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf4, 0x3, 0x1, 0x5, 0x40, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff2, 0x3}, [@mixer_unit={0x7, 0x24, 0x4, 0x2, 0x9, "7f0c"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x100, 0x4, 0x1, 0x6}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x4, 0x1, [0x4], 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xb, 0x3, 0xe1, 0x40, "", "b54e"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x1, 0x1c, 0x9, "1954bf718897f662"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x30, 0x4, 0x8, 0x3, "e082"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x9, 0x5, 0x21, "2198"}, @as_header={0x7, 0x24, 0x1, 0x42, 0x3c, 0x3}, @as_header={0x7, 0x24, 0x1, 0x1, 0xd}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5, 0x9, 0x81, {0x7, 0x25, 0x1, 0x80, 0x3, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xfb, 0x3, 0x6, 0x5}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x101, 0x6, 0x1, "1cdf67ac3f23041664"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xf, 0x3, 0x1, 0x6, '_', 'h!y'}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x2, 0x5, 0xe0, "", '4'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x4, 0xf, 0x8, 'c'}, @as_header={0x7, 0x24, 0x1, 0x3, 0x5, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x7f, 0xfe, 0x2, {0x7, 0x25, 0x1, 0x81, 0x9, 0x4}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x81, 0x6, 0x1, 0x8, 0x5}, 0x106, &(0x7f0000001300)={0x5, 0xf, 0x106, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x42, 0x2, 0xffff, 0x2}, @generic={0xf6, 0x10, 0x4, "d524c3da367844ff6c9aeb7990016fd78aa67d58c9fcb37dcfdebd317b76ed9fb67f6c1f3b58ba7f8456f81e80c9886acf6e7de74dcf3557760d4337e09ea7706249e50ddd6b9c9372dd38bf7741a4a96edacff695ead8926e12d98ff12a263bf150392e9000d9bac6816842394c4ab1479d465c5bddf9827395d83d59f77fefa808ff1f58987b3b3abae18b88823f17932cdf1e0a45d7d7885441557ce29e1f7863c2071c324c6d08774e799a4e3f58fcd4c3d6aefd25bcc165e56a969ad26cf75076df5e1cff1278d3c4e96f3b7430bdc5b2c1eb14632f5ea217c4bf7bdf91ebe703391f0128ab43f75ed1b969f85300aa20"}]}, 0x4, [{0x7d, &(0x7f0000000a00)=ANY=[@ANYBLOB="7d03114ad570b61a703d2e5741d58dc1ec5a24f54da323ab2ca5ecc127de136ff4182d52fb190ef981815f18e4376d8053f483365533a2328c354ad79965bcf6647ea59be32dde8193e2ff30115ca28ec02520324c827577068cc730222a76a57074fa25e8de83a41d226f385eee611448eb9ee0e37115db86968235a9ac7aea34c299a15fe4deec1daec4217957c86749898f44328c39c83e41b05625ff5fade7c66e2593174309cbda6b677aaae9bfe57dedfcee06cdbd7b6597fea1b5ba6e40bd5537d0d99ee48add3efde381a3e4714db79d5998a7ce8eabe5a9275000"/235]}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}, {0xb8, &(0x7f0000000380)=@string={0xb8, 0x3, "cbc84953d54982882be08d654b2e9469b45e799dd9185443f3c3530437485db6fef2937164edf361f3bd96b13ab421cfa526d26b40dbd1e23c6e96209c294af2f08870df36f5bdcac23c53d56e8ca12a856e23bb4dfab9654d014e65de9636203dee133b9ffc7a741f6cb280284922581ab865b42a0c02ff12f0ebd3fb46cdc9d3c0658d4041658ddafe98de47769ed358c1146be8d5590ebeed14b1c503beae24df331934e30d8721b21f86ac38befa90577b7382b9"}}, {0x86, &(0x7f0000000440)=@string={0x86, 0x3, "70cdf33b4bfc57cf1cf78f9f47d0b20719136ef7d2a4d7e4793aa28ef15cff9459307d13f473a51c0f359eae141e6c95238088a8e4a9d2e8ea97f5bf38808e06f8d81aaa5c1b01a5796f0bd5a91a40ec0b945b3dfe6fe8fefd52d031c722cd166337166c18411517e999f11e85c8d44159916d58fff3ba2e2c53191ccded7b51794495be"}}]}) syz_emit_ethernet(0x22, &(0x7f0000000700)={@remote, @empty, @val={@val, {0x88ca}}, {@x25={0x805, {0x0, 0x0, 0x0, "a67fb3ede2addfa3f1"}}}}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f00000006c0)={0x14, &(0x7f0000000580)={0x0, 0x2, 0xe6, {0xe6, 0x9, "19a1bf5d803cd5004350222591fcdea1ad552c040065b8df08943d752af46adfba2a3ab35ee11000f592a54573664ca7d76daee3784db3237b37d6f24e9f536159f064a4af6eccb585385d46619b8c095145a0dd3cf15add1a31bb38cae13c96b11fa8babb28e08b484afc6177f745576e9947b3f3a1f3f06916c20483e6d4ff11c0ec9043fb103ff7d9d6f2d37f42a7158dffe978d0e533318c55468aa2094116c8c73cdb8a703bfd7f041799b6fbdfc2e1e16b1855d81db7fc874cccaee0b24fa4d705a456ac437ffde3701300d8e19dc77f9135cf62d97f6f9034f62b3bc662e03dd7"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}}, &(0x7f0000000980)={0x44, &(0x7f0000000700)={0x20, 0x9, 0x6f, "725ef04c9e2c73428d13cabd6898961538f3ca51aad748f37ebe62f595a602c501e0d1b56e53266593ff26f3051d55a8aba35c9874be88ab68d14e9b9ea1524203bd8c44e0fa9535f1cda9d9eebf4930ef921258721b989243eacad09a996c398ef2d80eccd202c611777401edd8f5"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0xa5}, &(0x7f0000000840)={0x20, 0x81, 0x1, "9d"}, &(0x7f0000000880)={0x20, 0x82, 0x3, "24aa9a"}, &(0x7f00000008c0)={0x20, 0x83, 0x3, "4d71c0"}, &(0x7f0000000900)={0x20, 0x84, 0x1, 'T'}, &(0x7f0000000940)={0x20, 0x85, 0x3, "b0a7bf"}}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000600)={0xe, 0xa, 0x3, "ff54774034c0f968ed803995df1e82b5748a8472d170fcdf23ed33f2e94e8745", 0xa0363159}) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r4, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@fd={0x9, 0x1, 0x4, 0xe000, 0xc52, {}, {0x3, 0x0, 0x8, 0x4, 0x4, 0x7, "86642e80"}, 0x3, 0x4, {}, 0x6, 0x0, r4}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x48, 0x1406, 0x100, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081}, 0x20004010) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x103000) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000140)) pwritev(r9, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x2, 0x0, 0x0) syz_usb_connect(0x1, 0x412, &(0x7f0000000b00)={{0x12, 0x1, 0x200, 0x93, 0x3e, 0xef, 0x10, 0x157e, 0x300d, 0x234d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x400, 0x3, 0x4, 0xe7, 0x40, 0x4, [{{0x9, 0x4, 0xef, 0xc, 0x6, 0xfd, 0xbe, 0x82, 0xff, [], [{{0x9, 0x5, 0x7, 0x8, 0x3ff, 0x5, 0x0, 0x2}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x7, 0x80}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x1, 0x8, 0xd, [@generic={0x2e, 0x0, "c413a030a25c82414ff741f5cb7c1d00a49515293bdfe80a92de1eeb843054096f72aebfb856a4fc4eea9428"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x101}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0xb, 0x9, 0x81}}, {{0x9, 0x5, 0x7, 0x9, 0x408, 0x8, 0xf7, 0x2}}, {{0x9, 0x5, 0x9, 0x22, 0x20, 0xf, 0x5, 0x1, [@generic={0x4e, 0x3, "54a70e2918f8f6bff273f0b23da81dcabc3933789e1203d732459acf89ec9f69aef13ff3552345f6e336adc04cd1a87aa22bde6873007e4e008ba7ceda7889c19cbb5f146b51bcda9ad7a573"}]}}]}}, {{0x9, 0x4, 0x40, 0x6, 0x2, 0x75, 0x19, 0xcc, 0xb, [@generic={0x5a, 0x1, "536f7f6ca61d6e11bf8ab47ea2b5c1eb95f6163b70c348d9cc236052f239bd8f903c945a8b7a79c5bd6d5af676081e85dd25a42ae2c4a5bdc80f436477b72f079978c909c3a0053c7930879158605dbd2da8ef8e5940ce39"}, @uac_control={{0xa, 0x24, 0x1, 0x80af, 0x4}}], [{{0x9, 0x5, 0x1, 0x1, 0x8, 0x1, 0x3, 0x2}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x6, 0xac, 0x3, [@generic={0x2d, 0xc, "0b54930895e699205a1fc47ea939af2556c55b8102709016511d9bfb4d43356ee8fac205850af9e8d0c726"}]}}]}}, {{0x9, 0x4, 0xa9, 0xe5, 0xe, 0x9c, 0xdc, 0xcf, 0xf, [@hid_hid={0x9, 0x21, 0x9089, 0x2, 0x1, {0x22, 0x7f}}, @uac_control={{0xa, 0x24, 0x1, 0x0, 0x63}, [@mixer_unit={0xb, 0x24, 0x4, 0x5, 0x6, "184ba0c1e961"}, @feature_unit={0x11, 0x24, 0x6, 0x4, 0x5, 0x5, [0x3, 0xa, 0x9, 0x4, 0x1]}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x301, 0x6, 0x3, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x0, 0x2, 0x2, 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x0, 0x4, 0x2, 0x3, 0xa, 0x4}]}], [{{0x9, 0x5, 0x5, 0x0, 0x8, 0x8, 0x7, 0xa7}}, {{0x9, 0x5, 0x0, 0x11, 0x3ff, 0x7, 0xff, 0x8, [@generic={0x3e, 0x23, "3e5c54a8a365b7284ad4f08a9baf9ec618efc18d5f11752f499d4fc6dbf1e3f22c6ee21ce5bea45606406691664b2b69b73ba2c86de9946e2b712aaa"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x8}]}}, {{0x9, 0x5, 0xd, 0x3, 0x400, 0xc, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x100}, @generic={0x36, 0x3, "352629e719ec0819bc4bccdbbfc1a9e546b46d438b0787651bb5f80045f3c5078ff2e7080f61b0c0d7eef6ac99363ee0604d77d8"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x1, 0x58, 0x7}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x29, 0x80, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0x8}]}}, {{0x9, 0x5, 0x644c2b8df87c5d8f, 0x0, 0x8, 0x7, 0x9, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x9}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0xef, 0x1, 0x5}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x0, 0x7}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x5, 0x8, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xdfc}, @generic={0xa9, 0x6, "8199010c0c1b78ba8ba6984bbf5157b8e4bd0a66428492cc51cbb251ec6e7d93c57a2e285b3dc6fc4ca6a72f2d4d1a9e7f153f53ead2d486f6b22fc9dc382fea124bc664bbb9cb87baa8fc4986fc5efc2a4bfc24989b288ae70f906a734a91121cc361745d63450c910955cf478cadae6d160ed0832dd796eeb50ff5d0cc693a5a14ff2a52ff8f0523109c44d3c6a7a32030f8f5d4a4e52ea2f6da84094d150de34d31d2a81053"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x18, 0x5, 0xfa, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x6}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x6, 0x7, 0x8, [@generic={0x62, 0x22, "c4446d318b944422eaef7e00dbf9e8aca1399603a874dfc9e80f076ae1c771cf1088f5fa4dbef6c0b43c693b04bedda0b2fefba49cf9d8d0580034a847c052edd65ef44acbf02403ba3ee42da7fdd94bbffe86170c80cff37c11d94cf646ffdc"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0xff, 0x7}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x5, 0xc6, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0xf}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x2, 0x9, 0x6}}]}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0x3, 0x3, 0x1a, 0x40, 0x81}, 0x71, &(0x7f0000000f40)={0x5, 0xf, 0x71, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x39, 0x3, 0x29c}, @generic={0x4e, 0x10, 0x2, "b5f18ef199205405aeedde1dba1db2e54a7b72d2650d4f20014cf985211e45a183d4e10e208168bf734fa4fe10eaf494a0454921a56c1613f392a5832f61040686fadde6f178843986a055"}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "05a7b32ddfbc5d15355e696e7bda0da0"}]}, 0x3, [{0x25, &(0x7f00000002c0)=@string={0x25, 0x3, "03a6a0912eee5d0008e9879eee1ae565f98c4ee5dcd61ae3a4ad3f37453ba57aa649e6"}}, {0x9a, &(0x7f0000000fc0)=@string={0x9a, 0x3, "b2290406127112d1110418f8fdfeb34c32d5b437231ea0b45d7457fbc2481ac24b9fe8e4de29b2e0790a7dd93bbafd4c4fc1563a55195409ad815b71f84f6aa92db4c957a6b62bd717b9743c04a5e9227908bbb6fcb860184c7a7ec0f02dd7b2ff61e4de672d53ab17b2ce6cdc47a8f2014b55ab3065690c1cfd254961abc7a12db6a0facaf6332da2636ae8aadf583b689754df2b8c7511"}}, {0xf6, &(0x7f0000001080)=@string={0xf6, 0x3, "e6a5bfd18d215c61a720f1dd9414936973692e59280f4ede85c2a32e7829aec3fd47af1a4f2c7c43162653539c0078bf1c09cc5651284d68061ab51b525f014e8d723619f1cdc904e4ee85898abdad12fee1da12e1367de4eef6e599b0783760a37db87156123fe2e8ad387b345d34a16f77d202a112a92b26d2de80730f8a498c0f2fd59db7cc169f91dce2a511323dffee8eec8648f6383acd6ee7d338a6860850da085a2ffcf21bb0a81e217d41cd9c02695b34373546672beb1d4a0fcfcf21dfc9020c47abb3ba3b4f66fa28b8f76646a4f2d2ec4b39030a2354a8cd12f2c49a889be98df1af4a08163b9178d0dbf2cedbfb"}}]}) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 6.576749843s ago: executing program 4 (id=2787): fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', &(0x7f0000000040)=""/176, 0xb0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x7302, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x3, 0xe, {0x9, 0x21, 0x9172, 0xfb, 0x1, {0x22, 0xa76}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x3, 0x3}}}}}]}}]}}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x436}}, {0x6e, &(0x7f0000000640)=@string={0x6e, 0x3, "dfc136a7545ecc6deeddfa63ba18704dee0148fbabe01749789154dec9d315debb6d8823124539d82de24f5ba8f68e35da7ccd4790c7cac08bcb337ad494a5374288ab2824dbfd6385603594613d7987f36688d8e98489e4689898373b394cac892f94d1f89f13def6d819df"}}]}) 5.536062197s ago: executing program 5 (id=2791): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00'], 0x54}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x1, 0x1, &(0x7f0000000440)=[r4], &(0x7f0000000180)=[0xfb], &(0x7f0000000400)=[r5], &(0x7f0000000340)}) write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x14c, 0x94a4}}, 0x50) socket(0x2b, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 5.358647044s ago: executing program 2 (id=2792): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r3, @ANYBLOB="04002cbd7000fedbdf25680000002800c7000104010307030005110504020001000716051c000e079f0308060b0211902511a2b0d0a52800c70003050d010501e50006010306060102017203ce0502079d0108020701d8098f82adb173b31200c700060202030804066464f1b01aa11200003600c7000800090663060605e503010608050902fe06670100053507030002040905000003020a00210609070e02c1d0c3f9db735f9e00003000c700fd07000203001000fa05090602002500050202043c0500060305080501060c0309040702558edba8b31e473c2c00c7000804ff04070201020901060200010907200406048e00030206070306ff0304057762f835d5ab964efd6a1a82b3987d35879477c3145434a90663edd34de99b6dbd6be5f9fbe7241785720804df76efa505288b936579ac48929879085429c9532efa5edb1e8cc1c4b0c6052882d70a5e583c83b66af31ab122f8e1827e924ff3c8d5b28ef7745eb1bda26ee5c2b5e0ec7786572c141a422f6787c76d6be09c653f9a662ea357e20f91f021"], 0x10c}}, 0x20040001) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x68, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp={0x44, 0x8, 0x7, 0x3, 0x0, [0x0]}]}}, {{0x4e20, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x7727, 0x0, 0xbf99}}}}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fstat(r5, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="3a10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001c80)=@newqdisc={0x1c8, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x198, 0x2, [@TCA_GRED_LIMIT={0x23, 0x5, 0xb96}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x0, 0xfffffff9, 0x5, 0x3ff, 0x8, 0x148, 0x8, 0x2, 0x6c6, 0xc, 0x1c, 0xa, 0x9, 0x3, 0xfffffffd}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x9}, @TCA_GRED_LIMIT={0x8, 0x5, 0xc}, @TCA_GRED_PARMS={0x38, 0x1, {0xfffffffe, 0x40, 0x5, 0x8, 0x5, 0x1005, 0x7, 0x9, 0x3d, 0xc88a, 0x20, 0x16, 0x1, 0x1, 0x5, 0x5}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0x51d}]}}]}, 0x1c8}}, 0x0) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x43, r7, 0x9}, 0xc) 3.919230083s ago: executing program 0 (id=2794): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000200)={0x60, 0x0, 0x0, {{0x9, 0x5, 0x5, 0x2, 0x400069a, 0xae, 0x2400000, 0x800}}}, 0xfffffec2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffeffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x35c, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1}) r4 = msgget$private(0x0, 0x442) write$uinput_user_dev(r0, &(0x7f00000016c0)={'syz1\x00', {0xe75, 0xc133, 0x0, 0x2}, 0x3b, [0xfff, 0x3, 0x1f1, 0x9, 0x8, 0x3, 0xc, 0xd, 0x3, 0x7, 0x200, 0xb3e8fc87, 0x3, 0x8, 0x8, 0x3, 0xa5, 0x2, 0xe19, 0x1, 0x707, 0x4, 0x3ff, 0x1800, 0xa809, 0x1ff, 0xffffffff, 0x6f33, 0x9, 0x401, 0x2, 0x95, 0x7, 0xc, 0xdbb0, 0xea, 0x0, 0x9, 0x1, 0x0, 0x9a, 0xbb04, 0x401, 0x2, 0x7, 0xfffffffb, 0x3, 0x2, 0x4, 0x3, 0xd, 0x2, 0x6, 0xb7cd, 0x3ff, 0x1, 0x735, 0x2, 0x1, 0x51, 0x8, 0x2, 0x4, 0x5], [0x0, 0x0, 0xffff, 0x7, 0xc, 0x7, 0x1, 0x1, 0x7, 0x5, 0x200, 0x9, 0x8000, 0x7ff, 0x3, 0x64, 0x3df3, 0xc, 0x3ff, 0x1, 0x0, 0x9, 0x1, 0x401, 0x3, 0xfffffffd, 0x5, 0x9, 0x7, 0x3, 0x2, 0x0, 0x5, 0x78, 0x81, 0x3, 0x3, 0xfffffffb, 0x1, 0x7, 0x1, 0x3, 0x5, 0x7, 0x6, 0x6, 0x5d, 0x81, 0x6, 0x8, 0x6, 0x8, 0xff, 0x1, 0xffffff54, 0x7f, 0x1, 0xa, 0xff, 0x7, 0x46a, 0x80000001, 0x5, 0x5443], [0x2, 0x9, 0x3e95, 0x10000, 0x7, 0x8, 0xfffffffc, 0x6, 0xfffffffd, 0x2, 0x6, 0x6, 0x5, 0x1, 0x7, 0x6, 0x100, 0x9, 0x0, 0x7, 0x0, 0x6, 0xaa, 0x5, 0x4, 0x9, 0x0, 0x80000000, 0x9, 0x1, 0x7fffffff, 0x9, 0x2, 0x6, 0xa0, 0x1, 0x7, 0x7, 0x3, 0x0, 0x6, 0xc00, 0x0, 0x81, 0x7, 0x10, 0x6, 0x1, 0x2, 0x6, 0x7, 0x4, 0xf, 0x1ff, 0x7, 0xffffffff, 0x0, 0x100, 0x3, 0x3, 0x7fffffff, 0xfffff401, 0x1, 0x2], [0xa448, 0x5, 0x3, 0x10, 0x179, 0x5, 0x2, 0xe, 0xb4, 0x6, 0x7fff, 0x7, 0xd, 0x9, 0x6, 0x3b2, 0x3072, 0x1, 0x9, 0x80000000, 0x100, 0x9e, 0x206c, 0x80000001, 0xa, 0x4, 0x8, 0x1, 0x9, 0xffff, 0x80000000, 0x7, 0xc, 0x0, 0x4, 0x10000, 0xf, 0x0, 0x80, 0x8000, 0x8000, 0x4, 0xc885, 0xfffffff8, 0x5, 0xc, 0x8, 0x4, 0x80, 0x4, 0x453, 0x7627, 0x9, 0x7, 0x3, 0x1, 0x6, 0x1, 0x94f3, 0x1, 0x3, 0x9, 0x8, 0x28000]}, 0x45c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000000000000ab2a00ab000a20000000000a01040000000000000000010000000900010073797a3100000000e4000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a3100000000080007006e6174000b00070066696c74657200000900030073797a3100000000700008800c00024000000000000000060c0001"], 0x184}}, 0x0) msgsnd(r4, &(0x7f00000013c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00y'], 0x4, 0x800) msgrcv(r4, &(0x7f0000000000)={0x0, ""/162}, 0xaa, 0x0, 0x0) msgctl$MSG_STAT(r4, 0xb, &(0x7f00000000c0)=""/133) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000000000080003"], 0x20}, 0x1, 0xf00, 0x0, 0x40}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) msgctl$IPC_RMID(r4, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r7, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x1, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5}) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/clear_refs\x00', 0x1, 0x0) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000140)='2', 0x1}, {&(0x7f0000000000)="f68a4207dad7025c323201343fbbaef336f35784bae78237d0d31886159b0edab0b1df02a19446eaa0a80c1c028c5bfd047c8c805d75", 0x36}], 0x2) 3.449225196s ago: executing program 4 (id=2795): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32) mremap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f0000005000/0x4000)=nil) (async, rerun: 32) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000080)={0x79f8, 0x8ba, 0x4, {0x6, @win={{0xfffffff8, 0xbe6, 0x8, 0x8}, 0x4, 0x4, 0x0, 0x1, 0x0, 0x2e}}, 0x5}) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) fcntl$getownex(r1, 0x10, &(0x7f00000006c0)={0x0, 0x0}) ptrace$setregs(0xd, r7, 0x9, &(0x7f0000000700)="bb428b2e4549a961a135b821f44350d33f0f729fb13db88a4aaf603dddab9597ad25928c8ad49f2e099d68a14160023d55aac33d4a8bc34f026732769fa96fa5b8a2213746b2d081d687ff77de34d36262c68d069ca9ab551073b9fb4311f2cfabf0145966661d861a9d3c5f4f1c41ee07fe9df310c6dcddb07f8c7985c7d1cb89691a952f404cd353941f716cf12b56d528b07eb5537a2fc302f3bb8ce91d886b12f4e0c0e3f21a6a80a3efe5220b0815326ccb4a8d556a02d7252921ed2e18698f0c12b94d24ab9bd3dd747715a870244f62f7d6be14490ac5f876e4c16534613c631d743eb4f2edbdb485edf35d490ad9f3") r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x18, 0x1, 0xa, 0x801, 0x0, 0x0, {}, [@generic=' ']}, 0x18}}, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000640)={0xab3, 0x1, {0xffffffffffffffff, 0x0, 0xd, 0x3, 0x6}, 0x7}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fcdbdf253900000008000300", @ANYRES32=r6, @ANYBLOB="20005a801c000080040002001400030001006b0008000400cd800000ffff01004ee280fa17a60a4e18e692efb4cd626a8f310d98977de0a1c80c10dac27599deb7d5990b8bd3829fc0516f8b320b8104"], 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) r9 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r9, 0xc4c85512, &(0x7f00000000c0)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x56a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xd, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x36d4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000, 0x0, 0x4, 0xa6]}) 3.286166858s ago: executing program 5 (id=2796): r0 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e7823f40101402a0832001001000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x24, &(0x7f0000000640)={0x0, 0x0, 0x1, '5'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socket$netlink(0x10, 0x3, 0xf) r5 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prctl$PR_SET_NAME(0xf, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x50}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x304}, "0400", "0dd12f0d004fcf0000e8bfff1a8600", "cf0f00", "8657e2b7e63b34e4"}, 0x28) write$binfmt_script(r1, &(0x7f0000001300), 0x8f) recvmmsg(r1, 0x0, 0x0, 0x40000002, 0x0) writev(r1, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000380)="ac5e", 0x2}], 0x1) socket$inet(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) 3.208549253s ago: executing program 2 (id=2797): r0 = syz_io_uring_setup(0xbc5, &(0x7f0000000440)={0x0, 0xc7d3, 0x10000, 0x2, 0x300}, &(0x7f00000004c0), &(0x7f0000000500)) r1 = io_uring_setup(0x8f08, &(0x7f000000c480)={0x0, 0xc46d, 0x1, 0x20001, 0x3, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{&(0x7f0000000680)=""/4096}, {&(0x7f00000003c0)=""/98, 0x3d}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB], 0xc0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x81, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xfffffffd}]}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x10, 0xa401) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x1) fchdir(0xffffffffffffffff) r6 = syz_io_uring_setup(0x10c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_LINKAT={0x27, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', r5, 0x1000}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 3.189695659s ago: executing program 4 (id=2798): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @loopback}}) 3.152767659s ago: executing program 0 (id=2799): pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(adiantum(lrw(serpent),aes-asm,ghash-ce-sync),sha512_m'}, 0x58) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x0, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) close(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x4200, 0x8) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x6, 0x0, 0x40}}, 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) fcntl$lock(r1, 0x6, &(0x7f00000000c0)={0x2, 0x6, 0x3, 0x3, r10}) setxattr$incfs_metadata(&(0x7f0000000580)='./file0\x00', &(0x7f0000000500), 0x0, 0x0, 0x0) dup3(r9, r2, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x4, &(0x7f0000000100)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}], &(0x7f0000001400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r11, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x8, 0x0, 0x0}}, 0x10) 3.03981413s ago: executing program 6 (id=2800): r0 = userfaultfd(0x80001) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002740)='net/igmp\x00') read$FUSE(r2, &(0x7f0000000140)={0x2020}, 0x2061) r3 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x20000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x80440, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000080)) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x3}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) close(r0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000280)={0x1, r6, 0x0, 0x0, 0xa, 0x1ff, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 2.974476518s ago: executing program 4 (id=2801): r0 = memfd_create(&(0x7f0000000600)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2}) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000010"], 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') keyctl$update(0x14, 0x0, &(0x7f0000000d80)="b2a81072ca54e8ddf5", 0x9) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) 2.814067989s ago: executing program 6 (id=2802): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0xb8}}, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) syz_io_uring_setup(0x17af, 0x0, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r6, r7, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x14c, 0x94a4}}, 0x50) r8 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r9, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 2.724082741s ago: executing program 4 (id=2803): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x80, 0x1, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x6, 0x97, 0x1, {0x22, 0xee1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x1, 0x4}}}}}]}}]}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.917876338s ago: executing program 0 (id=2804): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x189002) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000100)={0xa287, 0x8, 0x29, 0x395, 0xf, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x4000811}, 0xc800) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0xa, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x120, 0x4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0xffffffffffffff8c) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000040)={0xfd, 0x5, 0x6, 0x0, 0xf, 0xd, 0x0, 0x7, 0x1, 0x10, 0x0, 0xd2, 0x80, 0x4}, 0xe) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000080)={r7, 0x7}, 0x8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvfrom$inet(r4, 0x0, 0x0, 0x2043, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) link(&(0x7f0000000140)='./cgroup/../file0\x00', &(0x7f00000001c0)='./file0\x00') r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000039ec9c2b56d100000000ed2b000000000021000000080003009d404433a8ff86576d4fc00918f665eb4ae5d38287e69cc4fdf5a5603a1b5f5f8ba4ff3991b65fae5d4484073928a25ae99313a2892ad8c55a27d9e98614aa23bc5a040024a84c6587b6108a05207a1a6793c8a639500f47d2c19e99177ba304206040f42ff8b0358b002ebf086270dd710b44b2a3cea4cdcb4f0d12", @ANYBLOB="94891cf76e777465107913027aabe2669952bbab3319543ff429a22596d66ea88f6f0f26e85e0b54779ab11725261e3da4525a0c96f354506327318a09a4731aebceb636f7941f2af05fc2e9f75def468a74983472597aa4dfac69c92e20081ed6553430e6fc25fb585eee4f6cffb4b252da2f5b6d000105ea2a5ce4299cd0f50ca0ef06e6e81ed1c37f69577a51a81112150384871a39d735a502", @ANYBLOB="043e3f4a9a92d7a176bec133fc9645d7b2fafa62f91dd2c1f337454266e5b72edb642003e1121397acbb43f153a543c7fe5e24d95f2574b2afc6820f18de616d3a3c0d51a8ae6430329f9c9e95f0a3cb72fecbc6e45fc86a226b585337af4e266a3ea3c88454b90d2fa0922b387d995f294d3e0662e1ae765eea05b5fabd6f0e532e64b123e5d93786a5"], 0x20}}, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000600)={{0x0, 0x2, 0x0, 0xffffff7f, 'syz0\x00', 0x1}, 0x6, 0x30, 0x40, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r10 = io_uring_setup(0x24e2, &(0x7f0000000240)={0x0, 0x100033a2, 0x10, 0x2, 0x10000297}) ioctl$BTRFS_IOC_DEFRAG(r10, 0x50009402, 0x0) pipe2(&(0x7f0000000080), 0x0) 1.706691334s ago: executing program 0 (id=2805): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002280), &(0x7f0000000000)='./file0\x00', 0x3009404, &(0x7f0000002740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}], [{@pcr={'pcr', 0x3d, 0x15}}]}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002640)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01b0ca00001c0007800c000300ffffffffff0800ff0c000400000c002a3a49653cd486c060d2791a3eea7bff6a9149cd4f76de4af6dccdf51839cc5fce16bb05f0bd2cffe6559440ee487a4b598a8cc5577b98f0d9ae69ba73ffe6b6ba4d087e3c1db425508d1f56f2f52ee46427d464cb9a8c95457947b8bf66f8e10686e60e3fb8c19b31d1d94c669afaeab0bd13add6e9d86397b3a281573acfc4baa2310259684e3ea1e79063c4bb7ca43535182c3332b04123542a1169c45fca05a2cb06f9436fa5d9195d5ca634d4b3d885a5237eb6a93e69519520"], 0x30}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002200)={&(0x7f0000002300)={0x238, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2, @private2}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xac6a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x82b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe2}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ffe0}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @mcast1, 0xfffffffe}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x54c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x40}, 0x4000018) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r1, {0x7}}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x68801, 0x0) pwritev2(r5, &(0x7f0000000880)=[{&(0x7f0000000480)="40d7", 0x2}], 0x1, 0xeffd0000, 0x3ff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r10, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r10, 0x400454cd, 0xfffffffffffffffe) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="fcfffffffffffffff0b93eaa2ee3813529e3a22f77b5b529e736972ab30eb9aac9a45494fcd357bf537026d5699704b55304b2f09f2d8b017492a6b38473304c9ac45ee15fe937022a5906aabb7628d57cdacdf387ad55df2fbb39fd4f74060fa58c314cac0165c0f5efb78d9912c94e236e2246d18e1f7ebcb2f5673a6090fc31305fb3d87d6634b1318da8cbc6c494c43af68356e8cc6ef403ca48e2dc637cb29865df1b4b"], 0x24}}, 0x0) pread64(r6, &(0x7f0000000300)=""/86, 0xfffffffffffffc56, 0x4000000000000f3) read$FUSE(r6, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r13 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r13, 0xc0205647, &(0x7f0000000100)={0xf010004, 0x251, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x76, '\x00', @p_u16=0x0}}) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r11, {0x0, 0x0, 0x80003ff}}, 0x20) syz_fuse_handle_req(r0, &(0x7f0000004340)="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", 0x2000, &(0x7f0000008c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008d40)=ANY=[@ANYRES32=r12, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r15, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1.144049958s ago: executing program 2 (id=2806): r0 = syz_open_dev$video4linux(&(0x7f0000001e00), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x300e}) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0xa080) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000001e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x600077f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d"], 0x68}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x40000000000029d, 0x832b, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r4, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0x2, 0x7f, 0x100b, 0x3, 0x8, 0x0, 0x1, 0x3}}) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0xf3e, 0x0) creat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x9}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000100ffff0900010073397a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000030000000060a010400000000000000000100000008000b400000000008000940000000030900010073797a3000000000140000001100010000000000000000000000000a"], 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x0) 591.762921ms ago: executing program 0 (id=2807): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x11, r0, 0xffffc000) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x8, 0x50424752, 0x2, @stepwise={0xfd79, 0x7, 0xa9d, 0x4, 0xfffffff7, 0x2}}) syz_emit_ethernet(0xfffffffffffffe79, &(0x7f0000000340)={@dev, @empty, @val, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @local}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8906}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0, 0xab, 0x800]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x2]}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x1}}}}}}}}, 0x0) (async) socket$inet(0xa, 0x801, 0x84) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x4924924924924fd, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r4, &(0x7f00000002c0)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket(0x840000000002, 0x3, 0xff) (async, rerun: 64) r7 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) (rerun: 64) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000540)={0x2, 0x100, 0x7, {0x9, 0x4, 0x870, 0x4}}) (async, rerun: 64) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, 0x0, 0x0) (rerun: 64) connect$inet(r6, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000080)=ANY=[@ANYRES32]) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x203, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xffffffffffffffff) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) 182.890862ms ago: executing program 2 (id=2808): socket$unix(0x1, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000025002a4a8f40d6496fc51d1370d60040"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r1, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="30000000120001000000002000000010100000000c00000000000000000000002378e29f6a8a94751fa60f01"], 0x30}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc000) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) open(0x0, 0x618a01, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x78, 0x0, 0x0, 0x1, &(0x7f0000000240), 0x1, 0x40}) io_uring_enter(r7, 0x70a, 0x8003b32, 0x45, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) r9 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r9, 0x0, 0x0) r10 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) poll(&(0x7f00000001c0)=[{r10, 0x120c}], 0x0, 0x8001) ioctl$VIDIOC_SUBSCRIBE_EVENT(r10, 0x4020565a, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) dup(r3) 144.06572ms ago: executing program 0 (id=2809): r0 = socket(0x16, 0x80000, 0x3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x2500, 0x2500, 0xe0000000, 0x1, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xa6, 0x2f, 0x0, @empty, @private}}}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000340)="660fc7760dbaf80c66b880a6d28166efbafc0c66b8aa6bde1866ef6664ae6567670f09360fc72e00010ff48ada00660f381c06002c0f01d10f20d86635080000000f22d80f3acc2f1f", 0x49}], 0x1, 0x28, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000040)={@local, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f00000000c0)={{@any, 0x400000}, 0x1, 0x2, 0xc}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x7, 0xeea, [0x0, 0x200000000540, 0x200000000884, 0x200000000db0], 0x0, &(0x7f0000000180), &(0x7f0000001640)=ANY=[@ANYBLOB="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"]}, 0x1010) sendmsg$nl_route(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000210000012cbd7000fcdbdf2502008009080000010400000008000100958281c908000b000c00000008000b0004000000080010000101090000000b0093000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040030}, 0x8c4) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x480180}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="7c0000001c00200028bd7000fddbdf2500000000", @ANYRES32=r1, @ANYRESDEC=0x0, @ANYRES32=r1, @ANYRESOCT=r0, @ANYRES8=r8, @ANYBLOB="08000100ac1e0101dfe580ff13bf38fd026eb66066e4bb57e583273288da40ecdc98f9cd3491ed"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_open_dev$video(&(0x7f0000000300), 0x418, 0x90002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000e40)=[{{&(0x7f0000000440)=@alg, 0x80, &(0x7f0000000200), 0x0, &(0x7f00000005c0)=""/183, 0xb7}, 0x1}, {{&(0x7f0000000680)=@ethernet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000780)=""/173, 0xad}], 0x1}, 0x4}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000000880)=""/152, 0x98}, {&(0x7f0000000940)=""/11, 0xb}, {&(0x7f0000000980)=""/221, 0xdd}, {&(0x7f0000000a80)=""/232, 0xe8}, {&(0x7f0000003600)=""/4096, 0x1000}], 0x7, &(0x7f0000000c00)=""/141, 0x8d}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000cc0)=""/12, 0xc}, {&(0x7f0000000d00)=""/231, 0xe7}, {&(0x7f0000004600)=""/4096, 0x1000}], 0x3}, 0x6}], 0x4, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xf7b1, 0xfffffffd}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000307060a02d93b06303e6895db1f203401e0903003bd7010203010902"], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 0s ago: executing program 5 (id=2810): r0 = io_uring_setup(0x402b, &(0x7f0000000400)={0x0, 0x70c6, 0x0, 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010100}}, 0x24) syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) (async) dup(r2) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 2 val 2400 [ 781.980193][ T5953] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 781.997876][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.025345][ T3085] pwc: recv_control_msg error -71 req 02 val 2600 [ 782.054019][ T3085] pwc: recv_control_msg error -71 req 02 val 2900 [ 782.067546][ T3085] pwc: recv_control_msg error -71 req 02 val 2800 [ 782.081162][ T3085] pwc: recv_control_msg error -71 req 04 val 1100 [ 782.096571][ T3085] pwc: recv_control_msg error -71 req 04 val 1200 [ 782.106120][ T3085] pwc: Registered as video103. [ 782.123673][ T3085] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input101 [ 782.142824][ T3085] usb 2-1: USB disconnect, device number 45 [ 782.159876][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.715581][ T3085] usb 1-1: USB disconnect, device number 55 [ 782.721863][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.722030][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.722181][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.722364][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.761217][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.907991][ T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 783.001306][T14988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2470'. [ 783.038088][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.054803][ T5953] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 783.084541][ T5953] ath9k_htc: Failed to initialize the device [ 783.099913][ T9] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.118418][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 783.136276][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 783.166297][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.179378][T14990] netlink: 'syz.4.2469': attribute type 6 has an invalid length. [ 783.188387][T14990] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2469'. [ 783.258769][ T3085] usb 1-1: ath9k_htc: USB layer deinitialized [ 783.318160][ T9] usb 6-1: config 0 descriptor?? [ 783.351155][T14992] futex_wake_op: syz.0.2471 tries to shift op by -1; fix this program [ 783.391827][T14973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2465'. [ 783.735530][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 783.743963][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 783.763006][ T9] usb 6-1: USB disconnect, device number 40 [ 783.848413][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.422269][T15005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 784.718360][T15019] __nla_validate_parse: 1 callbacks suppressed [ 784.718382][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2477'. [ 784.838202][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 785.057874][ T9] usb 2-1: config index 0 descriptor too short (expected 8192, got 36) [ 785.080200][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.115583][ T9] usb 2-1: config 0 has no interfaces? [ 785.192576][ T9] usb 2-1: New USB device found, idVendor=152e, idProduct=30ca, bcdDevice=ae.11 [ 785.226817][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.409124][ T9] usb 2-1: config 0 descriptor?? [ 785.661973][T15029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2481'. [ 785.795926][ T5953] usb 2-1: USB disconnect, device number 46 [ 786.132820][T15035] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 786.349764][T15037] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 786.970215][ T5953] net_ratelimit: 9 callbacks suppressed [ 786.970237][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.197858][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.708165][ T5893] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 787.930260][ T5893] usb 2-1: config 0 has no interfaces? [ 787.941574][ T5893] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 787.951309][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.959722][ T5893] usb 2-1: Product: syz [ 787.964693][ T5893] usb 2-1: Manufacturer: syz [ 787.971257][ T5893] usb 2-1: SerialNumber: syz [ 788.008340][ T3085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.040000][ T5893] usb 2-1: config 0 descriptor?? [ 788.237894][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.246334][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.025042][ T3085] usb 2-1: USB disconnect, device number 47 [ 789.038106][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.046609][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.055133][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.063472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.071746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.214234][T15066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2490'. [ 789.224394][T15066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2490'. [ 789.388806][T15068] pimreg: entered allmulticast mode [ 789.418056][ T3085] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 789.817586][T15069] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode [ 789.825256][T15070] pimreg: left allmulticast mode [ 789.876185][ T3085] usb 2-1: unable to get BOS descriptor or descriptor too short [ 789.885668][ T3085] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 789.894356][ T3085] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 789.927209][ T3085] usb 2-1: config 129 descriptor has 1 excess byte, ignoring [ 789.951855][ T3085] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 789.966959][T15067] mac80211_hwsim hwsim13 wlan0: left promiscuous mode [ 789.995965][ T3085] usb 2-1: config 129 has no interface number 0 [ 790.005386][ T3085] usb 2-1: config 129 has no interface number 1 [ 790.011879][ T3085] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 790.045583][ T3085] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 790.067866][ T3085] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 790.094545][ T3085] usb 2-1: config 129 interface 135 has no altsetting 0 [ 790.107261][ T3085] usb 2-1: config 129 interface 5 has no altsetting 0 [ 790.117654][ T3085] usb 2-1: string descriptor 0 read error: -22 [ 790.124230][ T3085] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 790.136608][ T3085] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.198024][ T5953] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 790.311943][ T3085] usb 2-1: can't set config #129, error -71 [ 790.349920][ T3085] usb 2-1: USB disconnect, device number 48 [ 790.358134][ T5894] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 790.400709][ T5953] usb 1-1: config 0 has an invalid interface number: 101 but max is 0 [ 790.408948][ T5953] usb 1-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 790.433381][ T5953] usb 1-1: config 0 has no interface number 0 [ 790.465534][ T5953] usb 1-1: New USB device found, idVendor=19d2, idProduct=1152, bcdDevice=90.fe [ 790.485020][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.498506][T15085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2497'. [ 790.517444][ T5953] usb 1-1: Product: syz [ 790.526530][ T5953] usb 1-1: Manufacturer: syz [ 790.540528][ T5953] usb 1-1: SerialNumber: syz [ 790.573987][ T5953] usb 1-1: config 0 descriptor?? [ 790.584406][ T5894] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 790.600531][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.615075][ T5894] usb 6-1: Product: syz [ 790.803948][ T5894] usb 6-1: Manufacturer: syz [ 790.914668][ T5894] usb 6-1: SerialNumber: syz [ 790.921686][ T5953] option 1-1:0.101: GSM modem (1-port) converter detected [ 790.943727][ T5894] usb 6-1: config 0 descriptor?? [ 791.045141][ T5953] usb 1-1: USB disconnect, device number 56 [ 791.074901][ T5894] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 791.085017][ T5953] option 1-1:0.101: device disconnected [ 791.487101][ T9] usb 6-1: USB disconnect, device number 41 [ 791.957959][ T9] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 792.118850][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 792.149650][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 792.160123][ T5893] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 792.229179][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 792.238081][ C1] net_ratelimit: 7 callbacks suppressed [ 792.238102][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.238331][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.260342][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.269124][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.418356][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 792.440622][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 792.474588][ T5893] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 792.510204][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.561296][ T5893] usb 1-1: config 0 has no interface number 0 [ 792.582263][ T9] usb 6-1: Product: syz [ 792.586551][ T9] usb 6-1: Manufacturer: syz [ 792.620348][ T5893] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=92.f7 [ 792.670383][ T9] usb 6-1: SerialNumber: syz [ 792.684061][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.798620][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.809582][ T5893] usb 1-1: Product: syz [ 792.813806][ T5893] usb 1-1: Manufacturer: syz [ 792.855744][ T5893] usb 1-1: SerialNumber: syz [ 792.931701][ T5893] usb 1-1: config 0 descriptor?? [ 793.017823][ T9] usb 6-1: 0:2 : does not exist [ 793.027202][ T9] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 793.104649][ T9] usb 6-1: USB disconnect, device number 42 [ 793.278201][ T3085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.559042][ T5893] peak_usb 1-1:0.83 can0: unable to request usb[type=0 value=1] err=-71 [ 793.694778][ T5893] peak_usb 1-1:0.83: unable to read PCAN-USB Pro firmware info (err -71) [ 793.706925][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 793.837920][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.978453][ T5893] peak_usb 1-1:0.83: probe with driver peak_usb failed with error -71 [ 794.018118][ T5953] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 794.061022][ T5893] usb 1-1: USB disconnect, device number 57 [ 794.229901][ T5953] usb 6-1: config 0 has an invalid interface number: 202 but max is 0 [ 794.271975][ T5953] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 794.288028][ T5953] usb 6-1: config 0 has no interface number 0 [ 794.294288][ T5953] usb 6-1: config 0 interface 202 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 794.304313][ T5953] usb 6-1: config 0 interface 202 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 794.319845][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.321176][ T5953] usb 6-1: New USB device found, idVendor=0b48, idProduct=3011, bcdDevice= 2.38 [ 794.340382][ T3085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.360595][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.444232][ T5953] usb 6-1: Product: syz [ 794.457650][ T5953] usb 6-1: Manufacturer: syz [ 794.476706][ T5953] usb 6-1: SerialNumber: syz [ 794.504170][ T5953] usb 6-1: config 0 descriptor?? [ 794.542346][ T5953] dvb-usb: found a 'TechnoTrend TT-connect S2-4600' in warm state. [ 794.629281][ T5953] dw2102: su3000_power_ctrl: 1, initialized 0 [ 794.639630][ T5953] dvb-usb: bulk message failed: -22 (2/0) [ 794.657208][ T5953] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 794.679300][ T5953] dvb-usb: TechnoTrend TT-connect S2-4600 error while loading driver (-19) [ 794.738872][T15120] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2505'. [ 794.850561][ T5953] usb 6-1: USB disconnect, device number 43 [ 794.877982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.268005][ T5891] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 795.316786][T15137] fuse: Unknown parameter '0x000000000000000600000000000000000008' [ 795.440455][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.453686][ T5891] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 795.571510][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.578413][ T5953] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 795.591229][ T5891] usb 1-1: config 0 descriptor?? [ 795.609271][ T5891] pwc: Askey VC010 type 2 USB webcam detected. [ 795.826879][ T5891] pwc: send_video_command error -71 [ 795.827705][ T5953] usb 2-1: config 0 has an invalid interface number: 101 but max is 0 [ 795.835561][ T5891] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 795.856506][ T5891] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 795.875815][ T5953] usb 2-1: config 0 has no interface number 0 [ 795.883251][ T5891] usb 1-1: USB disconnect, device number 58 [ 795.885141][ T5953] usb 2-1: config 0 interface 101 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 795.911771][ T3085] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 795.933526][ T5953] usb 2-1: config 0 interface 101 altsetting 0 endpoint 0x9 has invalid maxpacket 2007, setting to 1024 [ 795.950019][ T5953] usb 2-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 795.959443][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.967514][ T5953] usb 2-1: Product: syz [ 795.972422][ T5953] usb 2-1: Manufacturer: syz [ 795.977068][ T5953] usb 2-1: SerialNumber: syz [ 795.985912][ T5953] usb 2-1: config 0 descriptor?? [ 795.995881][ T5953] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 796.059605][T15136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2510'. [ 796.075160][T15136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2510'. [ 796.090955][ T3085] usb 6-1: Using ep0 maxpacket: 8 [ 796.108823][ T3085] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 796.120741][ T3085] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 796.142224][ T3085] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 796.157853][ T3085] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 796.169947][ T3085] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 796.183824][ T3085] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 796.195156][ T3085] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.421424][ T3085] usb 6-1: GET_CAPABILITIES returned 0 [ 796.437298][ T3085] usbtmc 6-1:16.0: can't read capabilities [ 796.629218][T15144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.658373][T15144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.824434][T15158] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 796.838181][ T30] audit: type=1326 audit(1744785631.965:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15145 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910ff8e169 code=0x7ffc0000 [ 796.895049][ T30] audit: type=1326 audit(1744785631.965:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15145 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f910ff8e169 code=0x7ffc0000 [ 796.917461][ C1] vkms_vblank_simulate: vblank timer overrun [ 796.958652][ T3085] usb 6-1: USB disconnect, device number 44 [ 797.001551][ T30] audit: type=1326 audit(1744785631.965:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15145 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910ff8e169 code=0x7ffc0000 [ 797.086918][ T30] audit: type=1326 audit(1744785631.965:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15145 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910ff8e169 code=0x7ffc0000 [ 797.118491][ T5953] input: gspca_pac7302 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input102 [ 797.167522][T15177] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20001 [ 797.252692][T15179] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.2519' sets config #0 [ 797.327679][T15168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.336521][T15168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.360275][ T5891] net_ratelimit: 8 callbacks suppressed [ 797.360292][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.366909][T15179] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.2519' sets config #1 [ 797.408870][ T3085] usb 2-1: USB disconnect, device number 49 [ 797.438201][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.997844][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.257875][ T5891] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 798.419738][ T5891] usb 1-1: config 0 has an invalid interface number: 202 but max is 0 [ 798.431014][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.481053][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.487873][ T5891] usb 1-1: config 0 has no interface number 0 [ 798.508435][ T5891] usb 1-1: config 0 interface 202 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 798.531772][ T5891] usb 1-1: config 0 interface 202 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 798.558074][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.566431][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.574774][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.583081][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.639841][ T5891] usb 1-1: New USB device found, idVendor=0b48, idProduct=3011, bcdDevice= 2.38 [ 798.678655][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.735078][ T5891] usb 1-1: Product: syz [ 798.745539][ T5891] usb 1-1: Manufacturer: syz [ 798.769818][ T5891] usb 1-1: SerialNumber: syz [ 798.807000][ T5891] usb 1-1: config 0 descriptor?? [ 798.846842][ T5891] dvb-usb: found a 'TechnoTrend TT-connect S2-4600' in warm state. [ 798.906931][ T5891] dw2102: su3000_power_ctrl: 1, initialized 0 [ 798.947505][ T5891] dvb-usb: bulk message failed: -22 (2/0) [ 798.967158][ T5891] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 798.996243][T15198] netlink: 'syz.4.2527': attribute type 1 has an invalid length. [ 799.038287][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.039148][T15191] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2523'. [ 799.068678][ T5891] dvb-usb: TechnoTrend TT-connect S2-4600 error while loading driver (-19) [ 799.183516][ T5891] usb 1-1: USB disconnect, device number 59 [ 799.528485][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.713823][ T5891] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 799.858065][ T5953] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 799.875500][ T5891] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 799.885130][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.893861][ T5891] usb 6-1: Product: syz [ 799.898950][ T5891] usb 6-1: Manufacturer: syz [ 799.903589][ T5891] usb 6-1: SerialNumber: syz [ 799.978396][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 800.017920][ T5953] usb 2-1: Using ep0 maxpacket: 16 [ 800.026465][ T5953] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.045184][ T5953] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 800.067467][ T5953] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 800.093072][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.109432][ T5953] usb 2-1: Product: syz [ 800.115376][ T5953] usb 2-1: Manufacturer: syz [ 800.117955][ T9] usb 1-1: device descriptor read/64, error -71 [ 800.120478][ T5953] usb 2-1: SerialNumber: syz [ 800.144222][ T5953] usb 2-1: config 0 descriptor?? [ 800.156820][ T5953] appledisplay 2-1:0.0: Could not find int-in endpoint [ 800.171488][ T5953] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 800.318223][T15210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.329190][T15210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.342453][T15210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.368294][ T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 800.376886][T15210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.507954][ T9] usb 1-1: device descriptor read/64, error -71 [ 800.604112][ T5891] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 800.613791][ T5891] cdc_ncm 6-1:1.0: bind() failure [ 800.628419][ T9] usb usb1-port1: attempt power cycle [ 800.650485][ T5891] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 800.666609][ T5891] cdc_ncm 6-1:1.1: bind() failure [ 800.979018][ T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 801.008975][ T9] usb 1-1: device descriptor read/8, error -71 [ 801.258203][ T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 801.278594][ T9] usb 1-1: device descriptor read/8, error -71 [ 801.389445][ T9] usb usb1-port1: unable to enumerate USB device [ 802.401075][ T9] usb 6-1: USB disconnect, device number 45 [ 802.472422][T15224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2534'. [ 802.608987][ T5953] usb 2-1: USB disconnect, device number 50 [ 802.638061][ T5890] net_ratelimit: 109 callbacks suppressed [ 802.638083][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.883445][T15230] netlink: 'syz.0.2537': attribute type 2 has an invalid length. [ 803.156917][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 803.198104][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.556746][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.579738][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 803.598349][ T9] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 803.611569][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.628204][ T9] usb 2-1: Product: syz [ 803.632513][ T9] usb 2-1: Manufacturer: syz [ 803.637851][ T9] usb 2-1: SerialNumber: syz [ 803.659060][ T9] usb 2-1: config 0 descriptor?? [ 803.678931][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.847509][ T9] usb 2-1: selecting invalid altsetting 3 [ 803.866778][ T9] comedi comedi0: could not set alternate setting 3 in high speed [ 803.898047][ T9] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 803.926183][ T9] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 804.079408][ T9] usb 2-1: USB disconnect, device number 51 [ 804.247853][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.730086][ T3085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.798116][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.806462][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.814912][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.867912][ T9] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 804.937840][ T5893] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 805.029156][ T9] usb 2-1: config 0 has an invalid interface number: 202 but max is 0 [ 805.078790][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.095398][ T9] usb 2-1: config 0 has no interface number 0 [ 805.103387][ T5893] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 805.118039][ T5953] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 805.118132][ T9] usb 2-1: config 0 interface 202 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 805.142411][ T5893] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 805.154075][ T5893] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 805.167837][ T9] usb 2-1: config 0 interface 202 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 805.186554][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.200949][ T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=3011, bcdDevice= 2.38 [ 805.210269][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.220182][ T9] usb 2-1: Product: syz [ 805.225097][T15251] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 805.232490][ T9] usb 2-1: Manufacturer: syz [ 805.237189][ T9] usb 2-1: SerialNumber: syz [ 805.245785][ T5893] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 805.256090][ T9] usb 2-1: config 0 descriptor?? [ 805.278000][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.282475][ T9] dvb-usb: found a 'TechnoTrend TT-connect S2-4600' in warm state. [ 805.302826][ T5953] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.324335][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 805.331125][ T5953] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 805.340370][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 805.354708][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 805.398264][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.410181][ T9] dvb-usb: TechnoTrend TT-connect S2-4600 error while loading driver (-19) [ 805.421172][ T5953] usb 6-1: config 0 descriptor?? [ 805.464324][ T5953] pwc: Askey VC010 type 2 USB webcam detected. [ 805.532667][ T5893] usb 1-1: USB disconnect, device number 64 [ 805.546664][T15260] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2547'. [ 805.566092][T15260] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2547'. [ 805.585124][T15248] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2541'. [ 805.610170][ T5890] usb 2-1: USB disconnect, device number 52 [ 805.641223][ T5953] pwc: send_video_command error -71 [ 805.661403][ T5953] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 805.686965][ T5953] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 805.706827][ T5953] usb 6-1: USB disconnect, device number 46 [ 806.188349][ T5953] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 806.339811][ T5953] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.350914][ T5953] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 806.385039][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.417040][ T5953] usb 6-1: config 0 descriptor?? [ 806.441506][ T5953] pwc: Askey VC010 type 2 USB webcam detected. [ 806.670064][ T5893] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 806.721727][T15280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2552'. [ 806.752406][T15280] bridge2: entered promiscuous mode [ 806.848026][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 806.857549][ T5893] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 806.867250][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.884558][ T5893] usb 2-1: Product: syz [ 806.892188][ T5953] pwc: recv_control_msg error -32 req 02 val 2b00 [ 806.892299][ T5893] usb 2-1: Manufacturer: syz [ 806.913781][ T5893] usb 2-1: SerialNumber: syz [ 806.919318][ T5953] pwc: recv_control_msg error -32 req 02 val 2700 [ 806.926257][ T5893] usb 2-1: config 0 descriptor?? [ 806.984617][ T5893] usb 2-1: selecting invalid altsetting 3 [ 806.987843][ T5953] pwc: recv_control_msg error -32 req 02 val 2c00 [ 806.991135][ T5893] comedi comedi0: could not set alternate setting 3 in high speed [ 807.007189][ T5893] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 807.032118][ T5953] pwc: recv_control_msg error -32 req 04 val 1000 [ 807.033000][ T5893] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 807.069118][T15252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2543'. [ 807.069626][ T5953] pwc: recv_control_msg error -32 req 04 val 1300 [ 807.115187][ T5953] pwc: recv_control_msg error -32 req 04 val 1400 [ 807.142926][ T5953] pwc: recv_control_msg error -32 req 02 val 2000 [ 807.145859][T15252] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2543'. [ 807.175576][ T5893] usb 2-1: USB disconnect, device number 53 [ 807.185025][ T5953] pwc: recv_control_msg error -32 req 02 val 2100 [ 807.758132][ T5953] pwc: recv_control_msg error -71 req 04 val 1500 [ 807.785913][ T5953] pwc: recv_control_msg error -71 req 02 val 2500 [ 807.805813][ T5953] pwc: recv_control_msg error -71 req 02 val 2400 [ 807.830841][ T5953] pwc: recv_control_msg error -71 req 02 val 2600 [ 807.840999][ T5953] pwc: recv_control_msg error -71 req 02 val 2900 [ 807.848983][ T5894] net_ratelimit: 5 callbacks suppressed [ 807.849001][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.877866][ T5953] pwc: recv_control_msg error -71 req 02 val 2800 [ 807.898544][ T5953] pwc: recv_control_msg error -71 req 04 val 1100 [ 807.918284][ T5953] pwc: recv_control_msg error -71 req 04 val 1200 [ 807.928040][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.936479][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.944907][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.953331][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.961795][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.984899][ T5953] pwc: Registered as video103. [ 807.999080][ T5953] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input103 [ 808.039447][ T5953] usb 6-1: USB disconnect, device number 47 [ 808.084321][T15290] netlink: 'syz.1.2554': attribute type 6 has an invalid length. [ 808.096727][T15290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2554'. [ 808.258126][ T5893] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 808.409449][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 808.418389][ T5893] usb 1-1: config 0 has an invalid interface number: 208 but max is 0 [ 808.428670][ T5893] usb 1-1: config 0 has no interface number 0 [ 808.448512][ T5893] usb 1-1: New USB device found, idVendor=12d1, idProduct=580e, bcdDevice=b3.5e [ 808.461617][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.494475][ T5893] usb 1-1: Product: syz [ 808.505083][ T5893] usb 1-1: Manufacturer: syz [ 808.516690][ T5893] usb 1-1: SerialNumber: syz [ 808.534933][ T5893] usb 1-1: config 0 descriptor?? [ 808.545903][ T5893] option 1-1:0.208: GSM modem (1-port) converter detected [ 808.838366][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.844743][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.858925][T15289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.870282][T15289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.878427][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.919760][ T5953] usb 1-1: USB disconnect, device number 65 [ 808.929776][ T5953] option 1-1:0.208: device disconnected [ 809.363224][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.374969][T15301] netlink: 'syz.2.2559': attribute type 3 has an invalid length. [ 809.383141][ T5953] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 809.558039][ T5953] usb 6-1: Using ep0 maxpacket: 32 [ 809.583600][ T5953] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 809.598795][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.602789][ T5953] usb 6-1: config 0 has no interface number 0 [ 809.625589][ T5953] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 809.646702][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.656448][ T5953] usb 6-1: Product: syz [ 809.706276][ T5953] usb 6-1: Manufacturer: syz [ 809.719761][T15303] ip6t_REJECT: ECHOREPLY is not supported [ 809.738881][ T5953] usb 6-1: SerialNumber: syz [ 809.762795][ T5953] usb 6-1: config 0 descriptor?? [ 809.785180][ T5953] smsc95xx v2.0.0 [ 809.918449][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.057837][ T5893] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 810.089176][ T5891] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 810.162487][T15322] xt_nfacct: accounting object `syz0' does not exists [ 810.198315][ T5893] usb 2-1: device descriptor read/64, error -71 [ 810.215183][ T5953] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 810.236295][ T5953] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 810.279317][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.296700][ T5891] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 810.317537][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.330633][ T5891] usb 1-1: config 0 descriptor?? [ 810.340772][ T5891] pwc: Askey VC010 type 2 USB webcam detected. [ 810.448127][ T5893] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 810.554656][ T5891] pwc: send_video_command error -71 [ 810.574044][ T5891] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 810.581859][ T5891] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 810.591390][ T5893] usb 2-1: device descriptor read/64, error -71 [ 810.618340][ T5891] usb 1-1: USB disconnect, device number 66 [ 810.681578][ T5953] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 810.692859][ T5953] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 810.709019][ T5893] usb usb2-port1: attempt power cycle [ 810.714983][ T5953] usb 6-1: USB disconnect, device number 48 [ 811.128102][ T5893] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 811.148841][ T5893] usb 2-1: device descriptor read/8, error -71 [ 811.168040][ T5891] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 811.349612][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.371215][ T5891] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 811.388116][ T5893] usb 2-1: new low-speed USB device number 57 using dummy_hcd [ 811.399652][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.448981][ T5893] usb 2-1: device descriptor read/8, error -71 [ 811.456066][ T5891] usb 1-1: config 0 descriptor?? [ 811.477029][ T5891] pwc: Askey VC010 type 2 USB webcam detected. [ 811.578523][ T5893] usb usb2-port1: unable to enumerate USB device [ 811.817981][ T5953] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 811.891776][ T5891] pwc: recv_control_msg error -32 req 02 val 2b00 [ 811.900288][ T5891] pwc: recv_control_msg error -32 req 02 val 2700 [ 811.908211][ T5891] pwc: recv_control_msg error -32 req 02 val 2c00 [ 811.916096][ T5891] pwc: recv_control_msg error -32 req 04 val 1000 [ 811.943473][T15316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2563'. [ 811.954295][ T5891] pwc: recv_control_msg error -32 req 04 val 1300 [ 811.968695][ T5891] pwc: recv_control_msg error -32 req 04 val 1400 [ 811.976149][ T5891] pwc: recv_control_msg error -32 req 02 val 2000 [ 811.988653][T15316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2563'. [ 812.011481][ T5891] pwc: recv_control_msg error -32 req 02 val 2100 [ 812.018477][ T5953] usb 6-1: config 0 has no interfaces? [ 812.026769][ T5953] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 812.037770][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.045862][ T5953] usb 6-1: Product: syz [ 812.067797][ T5953] usb 6-1: Manufacturer: syz [ 812.072488][ T5953] usb 6-1: SerialNumber: syz [ 812.095300][ T5953] usb 6-1: config 0 descriptor?? [ 812.513928][ T5891] pwc: recv_control_msg error -71 req 04 val 1500 [ 812.529628][ T5891] pwc: recv_control_msg error -71 req 02 val 2500 [ 812.536817][ T5891] pwc: recv_control_msg error -71 req 02 val 2400 [ 812.544729][ T5891] pwc: recv_control_msg error -71 req 02 val 2600 [ 812.552341][ T5891] pwc: recv_control_msg error -71 req 02 val 2900 [ 812.560666][ T5891] pwc: recv_control_msg error -71 req 02 val 2800 [ 812.568524][ T5891] pwc: recv_control_msg error -71 req 04 val 1100 [ 812.575894][ T5891] pwc: recv_control_msg error -71 req 04 val 1200 [ 812.592281][ T5891] pwc: Registered as video103. [ 812.636892][T15340] program syz.0.2569 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 812.637578][ T5891] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input104 [ 812.669275][T15340] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 812.707353][ T5891] usb 1-1: USB disconnect, device number 67 [ 812.860650][T15343] vlan1: entered allmulticast mode [ 813.038164][ C0] net_ratelimit: 12 callbacks suppressed [ 813.038187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.038778][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.198272][ T5953] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 813.353358][ T5953] usb 2-1: config 0 has no interfaces? [ 813.379370][ T5953] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 813.405144][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.427183][ T5953] usb 2-1: Product: syz [ 813.438180][ T5953] usb 2-1: Manufacturer: syz [ 813.454066][ T5953] usb 2-1: SerialNumber: syz [ 813.462828][ T5953] usb 2-1: config 0 descriptor?? [ 813.518085][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.692056][T15344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.714800][T15344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.786280][ T30] audit: type=1326 audit(1744785648.935:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15366 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c298e169 code=0x7ffc0000 [ 813.815390][ T30] audit: type=1326 audit(1744785648.935:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15366 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c298e169 code=0x7ffc0000 [ 813.845433][ T30] audit: type=1326 audit(1744785648.935:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15366 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fc2c298e169 code=0x7ffc0000 [ 813.869603][ T30] audit: type=1326 audit(1744785648.935:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15366 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c298e169 code=0x7ffc0000 [ 813.897641][ T30] audit: type=1326 audit(1744785648.965:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15366 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c298e169 code=0x7ffc0000 [ 813.925661][ T5930] usb 3-1: Failed to load image "edgeport/down.fw" err -110 [ 813.935030][ T5930] usb 3-1: Direct firmware load for edgeport/boot.fw failed with error -2 [ 813.945481][ T5930] usb 3-1: Falling back to sysfs fallback for: edgeport/boot.fw [ 813.954395][ T30] audit: type=1326 audit(1744785648.965:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15366 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fc2c298e169 code=0x7ffc0000 [ 813.976763][ C1] vkms_vblank_simulate: vblank timer overrun [ 813.987007][ T30] audit: type=1326 audit(1744785648.965:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15366 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c298e169 code=0x7ffc0000 [ 814.009434][ C1] vkms_vblank_simulate: vblank timer overrun [ 814.024778][T15368] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2576'. [ 814.027486][ T30] audit: type=1326 audit(1744785648.965:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15366 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c298e169 code=0x7ffc0000 [ 814.061949][ T30] audit: type=1326 audit(1744785648.995:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15366 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2c298e169 code=0x7ffc0000 [ 814.120835][ T30] audit: type=1326 audit(1744785648.995:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15366 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c298e169 code=0x7ffc0000 [ 814.143298][ C1] vkms_vblank_simulate: vblank timer overrun [ 814.150409][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.238048][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.246532][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.254922][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.263268][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.463546][ T5893] usb 6-1: USB disconnect, device number 49 [ 814.465488][T15371] input: syz0 as /devices/virtual/input/input105 [ 814.567974][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.953789][T15377] netlink: 'syz.5.2578': attribute type 6 has an invalid length. [ 814.963196][T15377] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2578'. [ 815.198580][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.368096][ T5953] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 815.529645][ T5953] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 815.554704][ T5953] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 815.576813][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.594648][ T5953] usb 1-1: config 0 descriptor?? [ 815.609314][ T5953] pwc: Askey VC010 type 2 USB webcam detected. [ 815.816456][ T5953] pwc: send_video_command error -71 [ 815.876732][ T5953] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 815.896824][ T5953] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 815.930182][ T976] usb 2-1: USB disconnect, device number 58 [ 815.942005][ T5953] usb 1-1: USB disconnect, device number 68 [ 816.398899][ T5953] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 816.531549][ T5894] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 816.600754][ T5953] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.625116][ T5953] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 816.643998][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.732838][ T5953] usb 1-1: config 0 descriptor?? [ 816.762067][ T5953] pwc: Askey VC010 type 2 USB webcam detected. [ 816.804897][ T5894] usb 2-1: unable to get BOS descriptor or descriptor too short [ 816.814871][ T5894] usb 2-1: no configurations [ 816.819651][ T5894] usb 2-1: can't read configurations, error -22 [ 817.170437][ T5953] pwc: recv_control_msg error -32 req 02 val 2b00 [ 817.181280][ T5953] pwc: recv_control_msg error -32 req 02 val 2700 [ 817.189731][ T5953] pwc: recv_control_msg error -32 req 02 val 2c00 [ 817.198127][ T5953] pwc: recv_control_msg error -32 req 04 val 1000 [ 817.206096][T15380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2579'. [ 817.217061][ T5953] pwc: recv_control_msg error -32 req 04 val 1300 [ 817.231685][ T5953] pwc: recv_control_msg error -32 req 04 val 1400 [ 817.239813][ T5953] pwc: recv_control_msg error -32 req 02 val 2000 [ 817.251476][T15380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2579'. [ 817.264130][ T5953] pwc: recv_control_msg error -32 req 02 val 2100 [ 817.830316][ T5953] pwc: recv_control_msg error -71 req 04 val 1500 [ 817.862252][ T5953] pwc: recv_control_msg error -71 req 02 val 2500 [ 817.968818][ T5953] pwc: recv_control_msg error -71 req 02 val 2400 [ 818.016040][ T5953] pwc: recv_control_msg error -71 req 02 val 2600 [ 818.304067][ T5893] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 818.353349][ T3085] net_ratelimit: 10 callbacks suppressed [ 818.353370][ T3085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.368001][ T5953] pwc: recv_control_msg error -71 req 02 val 2900 [ 818.384345][ T5953] pwc: recv_control_msg error -71 req 02 val 2800 [ 818.393993][ T5953] pwc: recv_control_msg error -71 req 04 val 1100 [ 818.415177][ T5953] pwc: recv_control_msg error -71 req 04 val 1200 [ 818.428908][ T5953] pwc: Registered as video103. [ 818.665679][ T5953] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input106 [ 818.718024][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.744400][ T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.784413][ T5893] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 818.817159][ T5953] usb 1-1: USB disconnect, device number 69 [ 818.860478][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.869189][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.896537][ T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.009324][ T3085] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 819.018289][T15422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2590'. [ 819.238006][ T3085] usb 6-1: Using ep0 maxpacket: 16 [ 819.262984][ T3085] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 819.274951][ T3085] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 819.293571][ T3085] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 819.304539][ T3085] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.320024][ T3085] usb 6-1: Product: syz [ 819.324308][ T3085] usb 6-1: Manufacturer: syz [ 819.350786][ T3085] usb 6-1: SerialNumber: syz [ 819.360349][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.370919][ T3085] usb 6-1: config 0 descriptor?? [ 819.664124][ T3085] appledisplay 6-1:0.0: Error while getting initial brightness: -110 [ 819.699435][ T3085] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -110 [ 819.758031][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.140059][T15426] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 820.146633][T15426] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 820.196108][T15426] vhci_hcd vhci_hcd.0: Device attached [ 820.241130][T15427] vhci_hcd: connection closed [ 820.241405][ T12] vhci_hcd: stop threads [ 820.258388][ T12] vhci_hcd: release socket [ 820.275904][ T12] vhci_hcd: disconnect device [ 820.408122][ T3085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.464190][T15437] syzkaller1: entered promiscuous mode [ 820.470177][T15437] syzkaller1: entered allmulticast mode [ 820.478082][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.625304][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2599'. [ 821.634875][T15453] (unnamed net_device) (uninitialized): option mode: invalid value (47) [ 821.778152][ T976] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 821.966141][ T976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.001498][ T5893] usb 6-1: USB disconnect, device number 50 [ 822.043461][ T976] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 822.071967][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.116251][ T976] usb 1-1: config 0 descriptor?? [ 822.146662][ T976] pwc: Askey VC010 type 2 USB webcam detected. [ 822.310963][T15477] bridge0: port 3(macsec0) entered blocking state [ 822.319249][T15477] bridge0: port 3(macsec0) entered disabled state [ 822.326936][T15477] macsec0: entered allmulticast mode [ 822.332446][T15477] veth1_macvtap: entered allmulticast mode [ 822.346835][T15477] macsec0: entered promiscuous mode [ 822.354524][T15477] bridge0: port 3(macsec0) entered blocking state [ 822.361588][T15477] bridge0: port 3(macsec0) entered forwarding state [ 822.378018][ T976] pwc: send_video_command error -71 [ 822.383282][ T976] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 822.473248][ T976] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 822.487304][ T976] usb 1-1: USB disconnect, device number 70 [ 823.128515][ T976] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 823.289467][ T976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.289509][ T976] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 823.289527][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.291690][ T976] usb 1-1: config 0 descriptor?? [ 823.294072][ T976] pwc: Askey VC010 type 2 USB webcam detected. [ 823.607949][ C1] net_ratelimit: 10 callbacks suppressed [ 823.607974][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.622066][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.630472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.638855][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.647192][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.678032][ T3085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.699846][ T976] pwc: recv_control_msg error -32 req 02 val 2b00 [ 823.723415][ T976] pwc: recv_control_msg error -32 req 02 val 2700 [ 823.734098][ T976] pwc: recv_control_msg error -32 req 02 val 2c00 [ 823.755009][ T976] pwc: recv_control_msg error -32 req 04 val 1000 [ 823.773158][ T976] pwc: recv_control_msg error -32 req 04 val 1300 [ 823.788976][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2598'. [ 823.810454][ T976] pwc: recv_control_msg error -32 req 04 val 1400 [ 823.819074][ T976] pwc: recv_control_msg error -32 req 02 val 2000 [ 823.829105][T15450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2598'. [ 823.846705][ T976] pwc: recv_control_msg error -32 req 02 val 2100 [ 823.918055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.977895][ T3085] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 824.159641][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.168957][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.177687][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.198064][ T3085] usb 2-1: not running at top speed; connect to a high speed hub [ 824.216271][ T3085] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 824.236371][ T3085] usb 2-1: config 95 has no interface number 0 [ 824.259020][ T3085] usb 2-1: config 95 interface 1 has no altsetting 0 [ 824.291038][ T3085] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 824.307804][ T3085] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.315860][ T3085] usb 2-1: Product: syz [ 824.334035][ T3085] usb 2-1: Manufacturer: syz [ 824.347335][ T3085] usb 2-1: SerialNumber: syz [ 824.402274][ T976] pwc: recv_control_msg error -71 req 04 val 1500 [ 824.423834][ T976] pwc: recv_control_msg error -71 req 02 val 2500 [ 824.437322][ T976] pwc: recv_control_msg error -71 req 02 val 2400 [ 824.454831][ T976] pwc: recv_control_msg error -71 req 02 val 2600 [ 824.472507][ T976] pwc: recv_control_msg error -71 req 02 val 2900 [ 824.488827][ T976] pwc: recv_control_msg error -71 req 02 val 2800 [ 824.498055][ T976] pwc: recv_control_msg error -71 req 04 val 1100 [ 824.505599][ T976] pwc: recv_control_msg error -71 req 04 val 1200 [ 824.536111][ T976] pwc: Registered as video103. [ 824.557324][ T976] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input107 [ 824.608852][ T976] usb 1-1: USB disconnect, device number 71 [ 824.636027][T15488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.702476][T15488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.846935][ T3085] usb 2-1: USB disconnect, device number 61 [ 825.028126][ T5893] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 825.122420][ T5983] udevd[5983]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 825.190266][ T5893] usb 6-1: not running at top speed; connect to a high speed hub [ 825.200316][ T5893] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 825.211443][ T5893] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 825.222374][ T5893] usb 6-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 825.236433][ T5893] usb 6-1: config 1 interface 0 has no altsetting 0 [ 825.247339][ T5893] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 825.257281][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.267013][ T5893] usb 6-1: Product: 浒䧨㕯⇮Ả詓⩋ⓙ벱嵘ë†î¼„à±¯ã¶¬ë•™ïš„Ê¿ï™¯î³¡ä“æ¾šàªá¦±ë¤´ì¹‡ä­î¿Ÿæ•«è±°é‹­à¿„挽緵轞刡䤤ࢽ윕쇻蛞éŽã¼Øµéœ æ§½ê¯­âš«â´°ã‘ꢅﶯ颓-껫ç°â©Ÿçº–燤倡檣홑 [ 825.295916][ T5893] usb 6-1: Manufacturer: С [ 825.304093][ T5893] usb 6-1: SerialNumber: ꘉ⡟æ”빇î㛙ڥ⭞鯥柳䣿蚆먠꾠㆒姤콠䒜霨ë¶é‹î¯€ã¤¡ë™‡å‚§éŒ±à œé„†à¡šê±ºè±¶á¾Ÿí™¥ëµ‰ï£é¦·áœ¦è€í„ï©¶á‘¶ã–›à´šæ™†æ¯¨ëµ˜î’ [ 825.328127][T15509] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 825.348170][T15509] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 825.637890][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 825.795035][T15509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.805505][T15509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.817990][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 825.826044][T15509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.826625][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 825.841342][T15509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.853104][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 825.870255][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 825.925183][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 826.058601][ T5893] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 826.071910][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 826.084168][ T5893] usb 6-1: USB disconnect, device number 51 [ 826.094440][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.373258][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 826.383400][ T9] usbtmc 2-1:16.0: can't read capabilities [ 826.579421][ T3085] usb 2-1: USB disconnect, device number 62 [ 827.088250][ T5893] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 827.238313][ T5893] usb 6-1: device descriptor read/64, error -71 [ 827.436698][T15531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.463557][T15531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.483380][T15531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.498188][T15531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.508365][ T5893] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 827.529685][T15531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.547011][T15531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.565432][T15531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.585996][T15531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.608978][T15531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.625370][T15531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.637656][T15527] netlink: 'syz.0.2620': attribute type 21 has an invalid length. [ 827.648669][ T5893] usb 6-1: device descriptor read/64, error -71 [ 827.662231][T15527] netlink: 'syz.0.2620': attribute type 20 has an invalid length. [ 827.670394][T15527] IPv6: NLM_F_CREATE should be specified when creating new route [ 827.758555][ T5893] usb usb6-port1: attempt power cycle [ 828.138247][ T5893] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 828.181989][ T5893] usb 6-1: device descriptor read/8, error -71 [ 828.428175][ T5893] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 828.459894][ T5893] usb 6-1: device descriptor read/8, error -71 [ 828.568386][ T5893] usb usb6-port1: unable to enumerate USB device [ 828.668272][ T3085] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 828.768177][ T5891] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 828.827961][ T3085] usb 2-1: Using ep0 maxpacket: 8 [ 828.858878][ T3085] usb 2-1: config 0 has an invalid interface number: 25 but max is 0 [ 828.877339][ T3085] usb 2-1: config 0 has no interface number 0 [ 828.883839][ T5894] net_ratelimit: 13 callbacks suppressed [ 828.883858][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.908215][ T5891] usb 1-1: device descriptor read/64, error -71 [ 828.918438][ T3085] usb 2-1: config 0 interface 25 altsetting 6 endpoint 0x8 has invalid maxpacket 544, setting to 64 [ 828.931140][ T3085] usb 2-1: config 0 interface 25 has no altsetting 0 [ 828.941506][ T3085] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c00, bcdDevice=b4.82 [ 828.950832][ T3085] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.959089][ T3085] usb 2-1: Product: syz [ 828.963386][ T3085] usb 2-1: Manufacturer: syz [ 828.968090][ T3085] usb 2-1: SerialNumber: syz [ 828.984264][ T3085] usb 2-1: config 0 descriptor?? [ 829.150080][ T5891] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 829.269076][ T5894] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 829.398388][ T5891] usb 1-1: device descriptor read/64, error -71 [ 829.427970][ T5894] usb 6-1: device descriptor read/64, error -71 [ 829.508271][ T5891] usb usb1-port1: attempt power cycle [ 829.607977][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.708355][ T5894] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 829.755488][ T3085] usb 2-1: bad CDC descriptors [ 829.766704][ T3085] cp210x 2-1:0.25: cp210x converter detected [ 829.797281][ T3085] cp210x 2-1:0.25: failed to get vendor val 0x370b size 1: -71 [ 829.818307][ T3085] cp210x 2-1:0.25: querying part number failed [ 829.848378][ T5891] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 829.888654][ T5891] usb 1-1: device descriptor read/8, error -71 [ 829.909255][ T3085] usb 2-1: cp210x converter now attached to ttyUSB0 [ 829.921606][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.929834][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.937989][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.947419][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.955610][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.974827][ T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.983030][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.002913][ T3085] usb 2-1: USB disconnect, device number 63 [ 830.047532][ T3085] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 830.064056][ T3085] cp210x 2-1:0.25: device disconnected [ 830.156010][ T5891] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 830.227365][T15570] fuse: Bad value for 'fd' [ 830.232772][T15570] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2634'. [ 830.244124][ T5891] usb 1-1: device descriptor read/8, error -71 [ 830.368371][ T5891] usb usb1-port1: unable to enumerate USB device [ 830.572220][T15577] netlink: 'syz.1.2635': attribute type 6 has an invalid length. [ 830.581718][T15577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2635'. [ 830.638015][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.646863][T15591] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 831.750073][ T5893] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 831.847101][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2641'. [ 831.930768][ T5893] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 831.940836][ T5893] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 831.995565][ T5893] usb 6-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 832.061728][ T5893] usb 6-1: config 220 has no interface number 2 [ 832.105287][ T5893] usb 6-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 832.209483][ T5893] usb 6-1: config 220 interface 0 has no altsetting 0 [ 832.242697][ T5893] usb 6-1: config 220 interface 76 has no altsetting 0 [ 832.257390][ T5893] usb 6-1: config 220 interface 1 has no altsetting 0 [ 832.360977][ T5893] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 832.371947][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.464213][ T5893] usb 6-1: Product: syz [ 832.479387][ T5893] usb 6-1: Manufacturer: syz [ 832.519241][ T5893] usb 6-1: SerialNumber: syz [ 832.619600][T15608] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 15608 comm: syz.0.2644) [ 832.649877][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 832.649900][ T30] audit: type=1800 audit(1744785667.795:809): pid=15608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2644" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=62501 res=0 errno=0 [ 832.802839][T15609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2645'. [ 832.961192][ T5893] usb 6-1: selecting invalid altsetting 0 [ 832.967525][ T5893] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 832.987600][ T5893] usb 6-1: No valid video chain found. [ 833.020076][ T5893] usb 6-1: selecting invalid altsetting 0 [ 833.026594][ T5893] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 833.061241][ T5893] usb 6-1: USB disconnect, device number 58 [ 833.906006][ T30] audit: type=1326 audit(1744785669.055:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15625 comm="syz.5.2651" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f910ff8e169 code=0x0 [ 833.938256][ C1] net_ratelimit: 12 callbacks suppressed [ 833.938281][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.952383][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.960826][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.969294][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.087992][ T5893] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 834.159724][ T3085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.250212][ T5893] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 834.261275][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.336203][ T5893] usb 1-1: config 0 descriptor?? [ 834.354763][ T5893] gspca_main: spca508-2.14.0 probing 8086:0110 [ 834.556412][ T5893] gspca_spca508: reg_read err -32 [ 834.730771][ T5893] gspca_spca508: reg_read err -32 [ 834.798083][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.939554][ T5893] gspca_spca508: reg_read err -71 [ 834.958606][ T5893] gspca_spca508: reg write: error -71 [ 834.968789][T15641] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2654'. [ 834.977844][ T5893] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 834.980384][ T5893] usb 1-1: USB disconnect, device number 76 [ 835.041224][ T1330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.050333][ T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.063018][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.187498][T15644] netlink: 'syz.2.2655': attribute type 39 has an invalid length. [ 835.198740][ T3085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.642352][T15648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2658'. [ 835.759888][ T3085] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 835.940213][ T3085] usb 6-1: config index 0 descriptor too short (expected 47917, got 45) [ 835.949962][ T3085] usb 6-1: config 221 has too many interfaces: 133, using maximum allowed: 32 [ 835.965987][ T3085] usb 6-1: config 221 has an invalid interface number: 197 but max is 132 [ 835.982621][ T3085] usb 6-1: config 221 has 1 interface, different from the descriptor's value: 133 [ 835.992988][ T3085] usb 6-1: config 221 has no interface number 0 [ 835.995685][T15660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2661'. [ 835.999761][ T3085] usb 6-1: config 221 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 835.999797][ T3085] usb 6-1: config 221 interface 197 altsetting 0 endpoint 0x87 has invalid maxpacket 1024, setting to 64 [ 836.003854][ T3085] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 836.043431][ T3085] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.052710][ T3085] usb 6-1: Product: syz [ 836.056923][ T3085] usb 6-1: Manufacturer: syz [ 836.063734][ T3085] usb 6-1: SerialNumber: syz [ 836.107864][ T5894] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 836.121542][T15650] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 836.260828][ T5894] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 836.282836][ T5894] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 836.301261][ T5894] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 836.312747][ T5894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12592, setting to 64 [ 836.352086][ T3085] qmi_wwan 6-1:221.197: probe with driver qmi_wwan failed with error -71 [ 836.370571][ T5894] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 836.394156][ T3085] usb 6-1: USB disconnect, device number 59 [ 836.412371][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 836.429042][ T5894] usb 2-1: Product: syz [ 836.475605][ T5894] usb 2-1: Manufacturer: syz [ 836.490559][ T5894] cdc_wdm 2-1:1.0: skipping garbage [ 836.495837][ T5894] cdc_wdm 2-1:1.0: skipping garbage [ 836.502384][ T5894] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 836.723838][ T5894] usb 2-1: USB disconnect, device number 64 [ 836.954731][T15670] hsr0: left promiscuous mode [ 837.016443][T15657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 837.167889][ T5894] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 837.337987][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 837.352311][ T5894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.366069][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 837.388417][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 837.405686][ T5894] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 837.416065][ T5894] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 837.429703][ T5890] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 837.440786][ T5894] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 837.451494][ T5894] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 837.459910][ T5894] usb 1-1: Manufacturer: syz [ 837.469648][ T5894] usb 1-1: config 0 descriptor?? [ 837.632830][ T5890] usb 6-1: config 7 descriptor has 1 excess byte, ignoring [ 837.649836][ T5890] usb 6-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 837.703359][ T5890] usb 6-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 837.713001][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.722182][ T5890] usb 6-1: Product: syz [ 837.756383][ T5890] usb 6-1: Manufacturer: syz [ 837.771887][ T5890] usb 6-1: SerialNumber: syz [ 837.799847][ T5890] option 6-1:7.0: GSM modem (1-port) converter detected [ 837.858034][ T5894] rc_core: IR keymap rc-hauppauge not found [ 837.871957][ T5894] Registered IR keymap rc-empty [ 837.884990][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 837.919540][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 837.939488][ T5894] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 837.953515][ T5894] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input108 [ 837.970411][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 837.978085][ T3085] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 838.008684][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 838.028216][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 838.060014][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 838.083882][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 838.111179][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 838.138006][ T3085] usb 2-1: Using ep0 maxpacket: 8 [ 838.147380][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 838.166486][ T3085] usb 2-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=31.1f [ 838.176127][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 838.183467][ T3085] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.194865][ T3085] usb 2-1: Product: syz [ 838.199261][ T3085] usb 2-1: Manufacturer: syz [ 838.204079][ T3085] usb 2-1: SerialNumber: syz [ 838.208910][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 838.219467][ T3085] usb 2-1: config 0 descriptor?? [ 838.229417][ T3085] (null): radio-mr800 - initialization failed [ 838.235874][ T3085] radio-mr800 2-1:0.0: probe with driver radio-mr800 failed with error -22 [ 838.253733][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 838.261523][ T3085] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 838.289911][ T5894] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 838.299855][ T5894] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 838.314569][ T5894] usb 1-1: USB disconnect, device number 77 [ 838.436815][ T3085] usb 2-1: USB disconnect, device number 65 [ 838.967870][ C1] net_ratelimit: 15 callbacks suppressed [ 838.967896][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.838107][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.997853][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.248021][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.256393][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.264714][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.273019][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.281313][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.324887][ T9] usb 6-1: USB disconnect, device number 60 [ 840.332597][ T9] option 6-1:7.0: device disconnected [ 840.778719][ T9] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 840.809016][ T1330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.817749][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.962825][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 840.971009][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 840.987387][ T9] usb 6-1: config 1 has an invalid interface number: 125 but max is 0 [ 841.000513][ T9] usb 6-1: config 1 has no interface number 0 [ 841.006940][ T9] usb 6-1: config 1 interface 125 has no altsetting 0 [ 841.017256][ T9] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=3c.51 [ 841.068801][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.084353][ T9] usb 6-1: Product: syz [ 841.098430][ T9] usb 6-1: Manufacturer: syz [ 841.109824][ T9] usb 6-1: SerialNumber: syz [ 841.339839][ T9] qmi_wwan 6-1:1.125: probe with driver qmi_wwan failed with error -22 [ 841.388763][ T9] usb 6-1: USB disconnect, device number 61 [ 842.267965][ T5890] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 842.445498][ T5890] usb 6-1: Using ep0 maxpacket: 16 [ 842.467415][ T5890] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 842.492978][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=8 [ 842.507766][ T5890] usb 6-1: SerialNumber: syz [ 842.522863][ T5890] usb 6-1: config 0 descriptor?? [ 842.555867][ T5890] usb_8dev 6-1:0.0 can0: sending command message failed [ 842.588896][ T5890] usb_8dev 6-1:0.0 can0: can't get firmware version [ 842.618020][ T9] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 842.667195][ T5890] usb_8dev 6-1:0.0: probe with driver usb_8dev failed with error -22 [ 842.807838][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 842.833427][ T9] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 842.857277][ T9] usb 2-1: config 0 has no interface number 0 [ 842.873181][ T9] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 842.968934][T15729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2683'. [ 843.035792][ T976] usb 6-1: USB disconnect, device number 62 [ 843.095314][ T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 843.162568][ T9] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 843.179498][ T9] usb 2-1: Product: syz [ 843.223907][ T9] usb 2-1: SerialNumber: syz [ 843.258509][ T9] usb 2-1: config 0 descriptor?? [ 843.275540][ T9] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 843.418355][ T5890] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 843.648145][T15721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2681'. [ 843.706553][ T5890] usb 1-1: config 0 has no interfaces? [ 843.719467][ T5890] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 843.731002][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.745295][ T5890] usb 1-1: Product: syz [ 843.777405][ T5890] usb 1-1: Manufacturer: syz [ 843.826858][ T5890] usb 1-1: SerialNumber: syz [ 843.870312][ T5890] usb 1-1: config 0 descriptor?? [ 844.126224][T15748] FAULT_INJECTION: forcing a failure. [ 844.126224][T15748] name failslab, interval 1, probability 0, space 0, times 0 [ 844.153520][T15748] CPU: 1 UID: 0 PID: 15748 Comm: syz.5.2688 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 844.153553][T15748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 844.153567][T15748] Call Trace: [ 844.153575][T15748] [ 844.153583][T15748] dump_stack_lvl+0x241/0x360 [ 844.153613][T15748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 844.153635][T15748] ? __pfx__printk+0x10/0x10 [ 844.153660][T15748] ? __pfx___might_resched+0x10/0x10 [ 844.153682][T15748] should_fail_ex+0x424/0x570 [ 844.153702][T15748] should_failslab+0xac/0x100 [ 844.153725][T15748] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 844.153749][T15748] ? __alloc_skb+0x1c2/0x480 [ 844.153767][T15748] __alloc_skb+0x1c2/0x480 [ 844.153787][T15748] ? __pfx___alloc_skb+0x10/0x10 [ 844.153804][T15748] ? netlink_autobind+0xd6/0x2f0 [ 844.153826][T15748] ? netlink_autobind+0x2b0/0x2f0 [ 844.153851][T15748] netlink_sendmsg+0x638/0xcd0 [ 844.153883][T15748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 844.153908][T15748] ? aa_sock_msg_perm+0x91/0x160 [ 844.153934][T15748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 844.153955][T15748] __sock_sendmsg+0x221/0x270 [ 844.153979][T15748] ____sys_sendmsg+0x523/0x860 [ 844.154003][T15748] ? __pfx_____sys_sendmsg+0x10/0x10 [ 844.154023][T15748] ? __fget_files+0x2a/0x420 [ 844.154039][T15748] ? __fget_files+0x2a/0x420 [ 844.154059][T15748] __sys_sendmsg+0x271/0x360 [ 844.154080][T15748] ? __pfx___sys_sendmsg+0x10/0x10 [ 844.154134][T15748] ? do_syscall_64+0xb6/0x230 [ 844.154156][T15748] do_syscall_64+0xf3/0x230 [ 844.154175][T15748] ? clear_bhb_loop+0x45/0xa0 [ 844.154194][T15748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.154209][T15748] RIP: 0033:0x7f910ff8e169 [ 844.154222][T15748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 844.154235][T15748] RSP: 002b:00007f9110e69038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 844.154252][T15748] RAX: ffffffffffffffda RBX: 00007f91101b5fa0 RCX: 00007f910ff8e169 [ 844.154264][T15748] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 844.154274][T15748] RBP: 00007f9110e69090 R08: 0000000000000000 R09: 0000000000000000 [ 844.154283][T15748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.154292][T15748] R13: 0000000000000000 R14: 00007f91101b5fa0 R15: 00007f91102dfa28 [ 844.154315][T15748] [ 844.394133][ C1] net_ratelimit: 11 callbacks suppressed [ 844.394149][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.450535][T15730] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2682'. [ 844.547842][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.727113][T15755] input: syz0 as /devices/virtual/input/input109 [ 844.744249][T15755] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2689'. [ 845.188682][ T5893] usb 6-1: new low-speed USB device number 63 using dummy_hcd [ 845.447823][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.567807][ T5893] usb 6-1: device descriptor read/64, error -71 [ 845.598731][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.807895][ T5893] usb 6-1: new low-speed USB device number 64 using dummy_hcd [ 845.941431][ T5894] usb 1-1: USB disconnect, device number 78 [ 845.998019][ T5893] usb 6-1: device descriptor read/64, error -71 [ 846.108093][ T5893] usb usb6-port1: attempt power cycle [ 846.170608][ T5890] usb 2-1: USB disconnect, device number 66 [ 846.477842][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.518107][ T5893] usb 6-1: new low-speed USB device number 65 using dummy_hcd [ 846.558050][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.558555][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.566490][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.575186][ T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.582825][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.605206][ T5893] usb 6-1: device descriptor read/8, error -71 [ 846.898253][ T5893] usb 6-1: new low-speed USB device number 66 using dummy_hcd [ 846.961758][ T5893] usb 6-1: device descriptor read/8, error -71 [ 847.158301][ T5893] usb usb6-port1: unable to enumerate USB device [ 848.370858][T15785] netlink: 'syz.0.2696': attribute type 6 has an invalid length. [ 848.380062][T15785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2696'. [ 849.247892][ T5890] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 849.490509][ T5890] usb 6-1: config 0 has no interfaces? [ 849.500881][ T5890] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 849.510191][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.518879][ T5890] usb 6-1: Product: syz [ 849.523615][ T5890] usb 6-1: Manufacturer: syz [ 849.533447][ T5890] usb 6-1: SerialNumber: syz [ 849.564966][ T5890] usb 6-1: config 0 descriptor?? [ 849.597846][ C1] net_ratelimit: 9 callbacks suppressed [ 849.597865][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.611655][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.758255][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.766626][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.775096][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.783545][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.872860][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.638016][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.880329][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.688199][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.784215][ T5890] usb 6-1: USB disconnect, device number 67 [ 852.379359][ T30] audit: type=1326 audit(1744785687.535:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975298e169 code=0x7ffc0000 [ 852.443378][ T30] audit: type=1326 audit(1744785687.565:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975298e169 code=0x7ffc0000 [ 852.532241][ T30] audit: type=1326 audit(1744785687.565:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f975298e169 code=0x7ffc0000 [ 852.555983][ T30] audit: type=1326 audit(1744785687.565:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975298e169 code=0x7ffc0000 [ 852.579553][ T30] audit: type=1326 audit(1744785687.565:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975298e169 code=0x7ffc0000 [ 852.603779][T15831] input: syz1 as /devices/virtual/input/input110 [ 852.716730][ T30] audit: type=1326 audit(1744785687.565:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f975298e169 code=0x7ffc0000 [ 852.750453][ T30] audit: type=1326 audit(1744785687.565:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975298e169 code=0x7ffc0000 [ 852.829197][ T30] audit: type=1326 audit(1744785687.565:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f975298e169 code=0x7ffc0000 [ 852.876606][ T30] audit: type=1326 audit(1744785687.565:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975298e169 code=0x7ffc0000 [ 853.336803][T15843] random: crng reseeded on system resumption [ 853.756470][ T30] audit: type=1326 audit(1744785688.905:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15854 comm="syz.5.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910ff8e169 code=0x7ffc0000 [ 853.778890][ C0] vkms_vblank_simulate: vblank timer overrun [ 853.967824][ T976] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 854.097848][ T976] usb 2-1: device descriptor read/64, error -71 [ 854.104702][T15870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 854.185653][T15872] xt_CT: You must specify a L4 protocol and not use inversions on it [ 854.337935][ T976] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 854.477818][ T976] usb 2-1: device descriptor read/64, error -71 [ 854.588309][ T976] usb usb2-port1: attempt power cycle [ 854.797810][ C1] net_ratelimit: 12 callbacks suppressed [ 854.797834][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.868421][T15887] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2727'. [ 854.947822][ T976] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 854.979476][ T976] usb 2-1: device descriptor read/8, error -71 [ 855.038596][ T3085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.167828][ T1214] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 855.279820][ T976] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 855.332038][ T976] usb 2-1: device descriptor read/8, error -71 [ 855.359080][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.368870][ T1214] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 855.377789][ T1214] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 855.394465][ T1214] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 855.408114][ T1214] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 855.420041][ T1214] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 855.432198][T15892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2729'. [ 855.453552][ T1214] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 855.463192][ T976] usb usb2-port1: unable to enumerate USB device [ 855.478782][T15892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2729'. [ 855.493664][ T1214] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 855.512139][ T1214] usb 1-1: Product: syz [ 855.516428][ T1214] usb 1-1: Manufacturer: syz [ 855.544767][ T1214] cdc_wdm 1-1:1.0: skipping garbage [ 855.564023][ T1214] cdc_wdm 1-1:1.0: skipping garbage [ 855.588684][ T1214] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 855.611312][ T1214] cdc_wdm 1-1:1.0: Unknown control protocol [ 855.754642][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 855.761346][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 855.768255][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 855.774896][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 855.785303][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 855.791952][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 855.798460][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 855.805064][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 855.811375][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 855.818007][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 855.824293][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 855.830891][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 855.837859][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.838110][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 855.852643][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 855.858958][ C0] vkms_vblank_simulate: vblank timer overrun [ 855.868392][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 855.875043][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 855.881415][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 855.888040][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 855.894408][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 855.901042][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 855.905146][ T3085] usb 1-1: USB disconnect, device number 79 [ 855.907122][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 856.078195][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.086654][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.095118][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.103486][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.111891][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.121476][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.378084][ T5893] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 856.460001][T15917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.479241][T15917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.487992][ T3085] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 856.559358][ T5893] usb 6-1: config 0 has no interfaces? [ 856.575573][ T5893] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 856.591044][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.599806][ T5893] usb 6-1: Product: syz [ 856.603997][ T5893] usb 6-1: Manufacturer: syz [ 856.608781][ T5893] usb 6-1: SerialNumber: syz [ 856.616139][ T5893] usb 6-1: config 0 descriptor?? [ 856.659920][ T3085] usb 1-1: config 0 has no interfaces? [ 856.667950][ T3085] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 856.678417][ T3085] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.686441][ T3085] usb 1-1: Product: syz [ 856.692104][ T3085] usb 1-1: Manufacturer: syz [ 856.696716][ T3085] usb 1-1: SerialNumber: syz [ 856.704971][ T3085] usb 1-1: config 0 descriptor?? [ 856.922960][T15911] trusted_key: encrypted_key: key user:syz not found [ 858.422598][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 858.422621][ T30] audit: type=1326 audit(1744785693.575:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15935 comm="syz.4.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f938e169 code=0x7ffc0000 [ 858.464365][ T30] audit: type=1326 audit(1744785693.575:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15935 comm="syz.4.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f938e169 code=0x7ffc0000 [ 858.487218][ T30] audit: type=1326 audit(1744785693.615:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15935 comm="syz.4.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fd0f938e169 code=0x7ffc0000 [ 858.580599][T15937] netlink: 'syz.4.2740': attribute type 15 has an invalid length. [ 859.063099][ T1214] usb 6-1: USB disconnect, device number 68 [ 859.228663][ T976] usb 1-1: USB disconnect, device number 80 [ 859.967931][ T976] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 859.998469][ C1] net_ratelimit: 14 callbacks suppressed [ 859.998493][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.167838][ T976] usb 1-1: Using ep0 maxpacket: 32 [ 860.208294][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.252452][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.278193][ T976] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 860.297592][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.326441][ T3085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.347136][ T976] usb 1-1: config 0 descriptor?? [ 860.760459][T15959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2746'. [ 860.776547][T15959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2746'. [ 860.785893][T15959] netlink: 'syz.5.2746': attribute type 3 has an invalid length. [ 861.037845][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.157794][ T3085] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 861.323761][ T3085] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 861.358732][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.386717][ T3085] usb 6-1: config 0 has no interface number 0 [ 861.395381][ T3085] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 861.395432][ T3085] usb 6-1: config 0 interface 11 has no altsetting 0 [ 861.414458][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.423678][ T3085] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 861.438164][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.458067][ T3085] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.480809][ T3085] usb 6-1: config 0 descriptor?? [ 861.495992][T15962] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 861.505439][T15964] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 861.512021][T15964] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 861.530386][ T3085] keyspan 6-1:0.11: Keyspan 2 port adapter converter detected [ 861.546185][T15964] vhci_hcd vhci_hcd.0: Device attached [ 861.555311][ T3085] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 81 [ 861.565239][ T3085] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 82 [ 861.586681][T15967] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 861.593275][T15967] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 861.603047][ T3085] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 1 [ 861.615795][ T3085] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 2 [ 861.626971][T15964] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 861.642208][ T3085] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 85 [ 861.656757][T15967] vhci_hcd vhci_hcd.0: Device attached [ 861.690572][ T3085] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 5 [ 861.692261][T15970] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(10) [ 861.704913][T15970] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 861.718247][ T5894] vhci_hcd: vhci_device speed not set [ 861.765053][T15964] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(12) [ 861.771735][T15964] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 861.780080][ T5894] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 861.799305][ T3085] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 861.836295][ T3085] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 83 [ 861.858200][T15964] vhci_hcd vhci_hcd.0: Device attached [ 861.866751][ T3085] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 84 [ 861.883365][T15967] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(15) [ 861.890052][T15967] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 862.058062][ T3085] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 3 [ 862.060263][T15981] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 862.077885][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.081481][T15967] vhci_hcd vhci_hcd.0: Device attached [ 862.092673][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.220562][T15985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.235710][T15985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.263208][ T3085] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 4 [ 862.281301][ T3085] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 86 [ 862.290439][ T3085] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 6 [ 862.308474][ T3085] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 862.321548][T15964] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(20) [ 862.328203][T15964] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 862.397950][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.406369][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.450057][T15970] vhci_hcd vhci_hcd.0: Device attached [ 862.456006][ T30] audit: type=1804 audit(1744785697.555:844): pid=15982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2749" name="/newroot/503/file0" dev="tmpfs" ino=2617 res=1 errno=0 [ 862.632437][T15964] vhci_hcd vhci_hcd.0: Device attached [ 862.683599][T15973] vhci_hcd: connection closed [ 862.683964][T15976] vhci_hcd: connection closed [ 862.691035][T15790] vhci_hcd: stop threads [ 862.691302][T15965] vhci_hcd: connection reset by peer [ 862.695868][T15790] vhci_hcd: release socket [ 862.711098][T15968] vhci_hcd: connection closed [ 862.711540][T15971] vhci_hcd: connection closed [ 862.716393][T15986] vhci_hcd: connection closed [ 862.727282][T15790] vhci_hcd: disconnect device [ 862.752692][T15790] vhci_hcd: stop threads [ 862.762768][T15790] vhci_hcd: release socket [ 862.770503][T15790] vhci_hcd: disconnect device [ 862.787629][T15790] vhci_hcd: stop threads [ 862.794000][T15790] vhci_hcd: release socket [ 862.806824][T15790] vhci_hcd: disconnect device [ 862.966389][T15790] vhci_hcd: stop threads [ 863.047631][ T976] usbhid 1-1:0.0: can't add hid device: -71 [ 863.057851][T15790] vhci_hcd: release socket [ 863.064632][ T976] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 863.080466][T15790] vhci_hcd: disconnect device [ 863.095537][T15790] vhci_hcd: stop threads [ 863.115639][T15790] vhci_hcd: release socket [ 863.123291][ T976] usb 1-1: USB disconnect, device number 81 [ 863.136033][T15790] vhci_hcd: disconnect device [ 863.155513][T15790] vhci_hcd: stop threads [ 863.176326][T15790] vhci_hcd: release socket [ 863.212659][T15790] vhci_hcd: disconnect device [ 863.858105][ T976] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 864.017916][ T976] usb 1-1: Using ep0 maxpacket: 32 [ 864.033901][ T976] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 864.103962][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.134000][ T5890] usb 6-1: USB disconnect, device number 69 [ 864.144446][ T5890] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 864.189284][ T5890] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 864.222039][ T5890] keyspan 6-1:0.11: device disconnected [ 864.222105][ T976] usb 1-1: config 0 descriptor?? [ 864.273887][ T976] cx82310_eth 1-1:0.0: probe with driver cx82310_eth failed with error -22 [ 864.298266][ T976] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 864.627844][ T5890] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 864.761911][ T5890] usb 6-1: device descriptor read/64, error -71 [ 865.007935][ T5890] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 865.129224][ T5893] net_ratelimit: 10 callbacks suppressed [ 865.129244][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.158259][ T5890] usb 6-1: device descriptor read/64, error -71 [ 865.197814][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.280299][ T5890] usb usb6-port1: attempt power cycle [ 865.598431][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.606837][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.615241][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.623647][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.632046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.642154][ T5890] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 865.650019][T15568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.678865][ T5890] usb 6-1: device descriptor read/8, error -71 [ 865.918152][ T5890] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 865.948646][ T5890] usb 6-1: device descriptor read/8, error -71 [ 866.059097][ T5890] usb usb6-port1: unable to enumerate USB device [ 866.200519][ T5890] usb 1-1: USB disconnect, device number 82 [ 866.400025][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.614610][T16017] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 866.621952][T16017] IPv6: NLM_F_CREATE should be set when creating new route [ 866.629257][T16017] IPv6: NLM_F_CREATE should be set when creating new route [ 866.733005][T15568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.866289][ T5893] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 866.947590][ T5894] vhci_hcd: vhci_device speed not set [ 867.107866][ T5893] usb 6-1: device descriptor read/64, error -71 [ 867.868463][ T5893] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 868.048901][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 868.065923][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.087141][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.104954][ T5893] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 868.114965][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.154113][ T5893] usb 6-1: config 0 descriptor?? [ 868.240960][ T9] usb usb38-port8: attempt power cycle [ 868.832029][ T9] usb usb38-port8: unable to enumerate USB device [ 869.188442][T16037] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 869.198802][ T5154] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 869.208328][ T5154] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 869.218101][ T5154] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 869.226010][ T5154] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 869.252560][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 869.262830][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 869.274558][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 869.290499][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 869.301322][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 869.585745][T16038] chnl_net:caif_netlink_parms(): no params data found [ 869.715021][T16038] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.722385][T16038] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.736438][T16038] bridge_slave_0: entered allmulticast mode [ 869.745091][T16038] bridge_slave_0: entered promiscuous mode [ 869.755135][T16038] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.762859][T16038] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.770562][T16038] bridge_slave_1: entered allmulticast mode [ 869.780682][T16038] bridge_slave_1: entered promiscuous mode [ 869.827598][T16038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.842578][T16038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.904257][T16038] team0: Port device team_slave_0 added [ 869.919262][T16038] team0: Port device team_slave_1 added [ 869.972438][T16038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.979925][T16038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 870.006966][T16038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 870.020799][T16038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.027915][T16038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 870.054302][T16038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.122983][T16038] hsr_slave_0: entered promiscuous mode [ 870.130704][T16038] hsr_slave_1: entered promiscuous mode [ 870.137098][T16038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 870.145039][T16038] Cannot create hsr debugfs directory [ 870.158211][ C0] net_ratelimit: 13 callbacks suppressed [ 870.158232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.172327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.180746][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.189212][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.197576][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.240656][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.247201][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.382246][ T5893] usbhid 6-1:0.0: can't add hid device: -71 [ 870.392997][ T5893] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 870.449399][ T5893] usb 6-1: USB disconnect, device number 75 [ 870.557864][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.566110][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.575849][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.848397][T16038] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 870.881829][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.894102][T16038] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 871.066164][T16038] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 871.137874][T16038] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 871.169204][ T5893] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 871.188220][T15568] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 871.198313][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.328072][ T5893] usb 6-1: Using ep0 maxpacket: 32 [ 871.335939][ T5893] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 871.346230][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.366296][ T5154] Bluetooth: hci5: command tx timeout [ 871.376432][T15568] usb 1-1: config 0 has no interfaces? [ 871.397012][ T5893] usb 6-1: config 0 descriptor?? [ 871.410178][ T5893] cx82310_eth 6-1:0.0: probe with driver cx82310_eth failed with error -22 [ 871.422222][T15568] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 871.422640][ T5893] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 871.482744][T15568] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.563875][T15568] usb 1-1: Product: syz [ 871.573814][T16038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.661625][T15568] usb 1-1: Manufacturer: syz [ 871.666292][T15568] usb 1-1: SerialNumber: syz [ 871.706663][T15568] usb 1-1: config 0 descriptor?? [ 871.855668][T16038] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.886772][T12046] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.894051][T12046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 871.961502][T12046] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.968794][T12046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.312011][T16038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.631878][T16038] veth0_vlan: entered promiscuous mode [ 872.660136][T16038] veth1_vlan: entered promiscuous mode [ 872.892438][T16038] veth0_macvtap: entered promiscuous mode [ 872.913074][T16038] veth1_macvtap: entered promiscuous mode [ 872.937672][T16038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.950270][T16038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.962766][T16038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.974236][T16038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.985748][T16038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.996895][T16038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.012927][T16038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.024930][T16038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.103475][T16038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 873.144303][T16038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.155965][T16038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.173003][T16038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.185114][T16038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.208273][T16038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.225080][T16038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.239816][T16038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.256548][T16038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.279170][T16038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 873.320788][T16038] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.336246][T16038] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.346152][T16038] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.362219][T16038] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.441407][ T5154] Bluetooth: hci5: command tx timeout [ 873.885650][T12046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.914127][T12046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.030298][T12046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.064613][T12046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.142913][ T9] usb 6-1: USB disconnect, device number 76 [ 874.355820][T16067] kvm: kvm [16066]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 874.560254][ T5893] usb 1-1: USB disconnect, device number 83 [ 874.698973][ T9] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 874.872726][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.912628][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 874.952285][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.982673][ T9] usb 6-1: config 0 descriptor?? [ 875.016645][ T9] gspca_main: kinect-2.14.0 probing 045e:02bf [ 875.152006][T16103] netlink: 'syz.2.2777': attribute type 4 has an invalid length. [ 875.213815][ T9] usb 6-1: USB disconnect, device number 77 [ 875.361854][ T5930] usb 3-1: Failed to load image "edgeport/boot.fw" err -110 [ 875.389031][ T5930] usb 3-1: Edgeport 2 port adapter converter now attached to ttyUSB0 [ 875.430172][ T5930] usb 3-1: Edgeport 2 port adapter converter now attached to ttyUSB1 [ 875.518169][ T5154] Bluetooth: hci5: command tx timeout [ 875.542281][ T5930] usb 3-1: USB disconnect, device number 47 [ 875.671848][ T5930] edgeport_2 ttyUSB0: Edgeport 2 port adapter converter now disconnected from ttyUSB0 [ 875.730010][ T5930] edgeport_2 ttyUSB1: Edgeport 2 port adapter converter now disconnected from ttyUSB1 [ 875.779374][ T5930] io_edgeport 3-1:162.209: device disconnected [ 876.190079][ T3085] net_ratelimit: 16 callbacks suppressed [ 876.190102][ T3085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.548314][ T3085] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 876.677203][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.751133][ T3085] usb 6-1: Using ep0 maxpacket: 32 [ 876.797129][ T3085] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 876.884144][ T3085] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.933692][ T3085] usb 6-1: config 0 descriptor?? [ 876.977325][ T3085] cx82310_eth 6-1:0.0: probe with driver cx82310_eth failed with error -22 [ 877.129164][ T3085] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 877.203611][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.282323][ T2979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.320648][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.568159][ T5893] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 877.617789][ T5154] Bluetooth: hci5: command tx timeout [ 877.831958][ T5893] usb 3-1: config 0 has no interfaces? [ 877.846522][ T5893] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 877.855960][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.874269][ T5893] usb 3-1: Product: syz [ 877.880410][ T5893] usb 3-1: Manufacturer: syz [ 877.897084][ T5893] usb 3-1: SerialNumber: syz [ 877.906656][ T796] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.033697][ T5893] usb 3-1: config 0 descriptor?? [ 878.257607][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.317831][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.608505][ T5891] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 878.715365][ T796] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.840469][ T5891] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 878.879724][ T5891] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 878.898136][ T5891] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 879.025558][ T5891] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 879.112946][ T5891] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 879.137027][ T5891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.211559][ T5891] usb 7-1: config 0 descriptor?? [ 879.233897][T16136] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 879.278603][ T3085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.357824][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.420801][ T796] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.665796][ T796] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.678785][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.763904][ T5891] plantronics 0003:047F:FFFF.0022: reserved main item tag 0xd [ 879.804121][ T5891] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 879.863166][ T5891] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 880.133434][T16145] x_tables: duplicate underflow at hook 3 [ 880.263533][T16136] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2785'. [ 880.472549][ T5894] usb 6-1: USB disconnect, device number 78 [ 880.485232][ T10] kworker/0:1 (10) used greatest stack depth: 18760 bytes left [ 880.685453][T15568] usb 3-1: USB disconnect, device number 48 [ 880.698207][T16154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.757574][T16154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.856407][ T5894] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 880.925052][ T30] audit: type=1326 audit(1744785716.075:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.2.2792" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33bc98e169 code=0x0 [ 881.039905][ T5894] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 881.059451][ T5894] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 881.101103][ T5894] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 881.110278][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 881.118678][ T5894] usb 1-1: SerialNumber: syz [ 881.160053][ T796] team0: Port device geneve0 removed [ 881.366896][T15568] net_ratelimit: 4 callbacks suppressed [ 881.366916][T15568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.385480][ T5894] usb 1-1: 0:2 : does not exist [ 881.424803][ T5894] usb 1-1: USB disconnect, device number 84 [ 881.437805][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.662093][ T796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.681703][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 881.681780][ T796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.718359][T15568] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 881.752913][ T796] bond0 (unregistering): Released all slaves [ 882.179944][ T796] bond1 (unregistering): Released all slaves [ 882.400939][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.478617][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.573452][ T796] bond2 (unregistering): Released all slaves [ 882.699201][T16157] netlink: 'syz.2.2792': attribute type 5 has an invalid length. [ 882.707008][T16157] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2792'. [ 882.743677][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.199075][ T5891] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 883.369298][ T5891] usb 6-1: no configurations [ 883.378160][ T5891] usb 6-1: can't read configurations, error -22 [ 883.438501][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.438962][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.517953][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.528075][ T5891] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 883.717931][ T5891] usb 6-1: no configurations [ 883.725406][ T5891] usb 6-1: can't read configurations, error -22 [ 883.778540][ T5891] usb usb6-port1: attempt power cycle [ 884.047843][T15568] usb 7-1: device descriptor read/64, error -71 [ 884.128427][ T5891] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 884.183383][ T5891] usb 6-1: no configurations [ 884.190028][ T5891] usb 6-1: can't read configurations, error -22 [ 884.318531][T15568] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 884.338103][ T5891] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 884.418216][ T5891] usb 6-1: no configurations [ 884.422980][ T5891] usb 6-1: can't read configurations, error -22 [ 884.480948][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.482848][ T5891] usb usb6-port1: unable to enumerate USB device [ 884.521976][T15568] usb 7-1: device firmware changed [ 884.538456][ T3085] usb 7-1: USB disconnect, device number 2 [ 884.557995][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.778815][T16218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2805'. [ 884.999907][ T3085] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 885.049985][T16217] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 885.084223][T16217] syzkaller0: linktype set to 65534 [ 885.182752][ T3085] usb 7-1: config 0 has no interfaces? [ 885.294685][ T3085] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 885.317959][ T3085] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.326030][ T3085] usb 7-1: Product: syz [ 885.351665][ T3085] usb 7-1: Manufacturer: syz [ 885.368786][ T3085] usb 7-1: SerialNumber: syz [ 885.414947][ T3085] usb 7-1: config 0 descriptor?? [ 886.176240][ T796] hsr_slave_0: left promiscuous mode [ 886.221356][ T796] hsr_slave_1: left promiscuous mode [ 886.259867][ T796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.294656][ T796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.333161][ T796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.347041][ T796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 886.415751][ T796] [ 886.418218][ T796] ============================================ [ 886.424386][ T796] WARNING: possible recursive locking detected [ 886.430550][ T796] 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 Not tainted [ 886.437699][ T796] -------------------------------------------- [ 886.443864][ T796] kworker/u8:5/796 is trying to acquire lock: [ 886.449947][ T796] ffff8880250fcd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_allmulti+0x11c/0x270 [ 886.460097][ T796] [ 886.460097][ T796] but task is already holding lock: [ 886.467485][ T796] ffff8880250fcd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 886.479120][ T796] and the lock comparison function returns 0: [ 886.485190][ T796] [ 886.485190][ T796] other info that might help us debug this: [ 886.493275][ T796] Possible unsafe locking scenario: [ 886.493275][ T796] [ 886.500739][ T796] CPU0 [ 886.504012][ T796] ---- [ 886.507284][ T796] lock(&dev_instance_lock_key#3); [ 886.512508][ T796] lock(&dev_instance_lock_key#3); [ 886.517740][ T796] [ 886.517740][ T796] *** DEADLOCK *** [ 886.517740][ T796] [ 886.525898][ T796] May be due to missing lock nesting notation [ 886.525898][ T796] [ 886.534219][ T796] 5 locks held by kworker/u8:5/796: [ 886.539417][ T796] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 886.550312][ T796] #1: ffffc90003197c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 886.560853][ T796] #2: ffffffff900f0a50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 886.570268][ T796] #3: ffffffff900fd588 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 886.580284][ T796] #4: ffff8880250fcd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 886.592311][ T796] [ 886.592311][ T796] stack backtrace: [ 886.598216][ T796] CPU: 0 UID: 0 PID: 796 Comm: kworker/u8:5 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 886.598235][ T796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 886.598247][ T796] Workqueue: netns cleanup_net [ 886.598282][ T796] Call Trace: [ 886.598289][ T796] [ 886.598296][ T796] dump_stack_lvl+0x241/0x360 [ 886.598321][ T796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 886.598342][ T796] ? __pfx__printk+0x10/0x10 [ 886.598362][ T796] ? print_lock+0x171/0x1a0 [ 886.598381][ T796] print_deadlock_bug+0x2be/0x2d0 [ 886.598401][ T796] validate_chain+0x928/0x24e0 [ 886.598422][ T796] ? do_raw_spin_lock+0x151/0x370 [ 886.598448][ T796] __lock_acquire+0xad5/0xd80 [ 886.598466][ T796] lock_acquire+0x116/0x2f0 [ 886.598496][ T796] ? dev_set_allmulti+0x11c/0x270 [ 886.598513][ T796] __mutex_lock+0x1a5/0x10c0 [ 886.598532][ T796] ? dev_set_allmulti+0x11c/0x270 [ 886.598550][ T796] ? dev_set_allmulti+0x11c/0x270 [ 886.598563][ T796] ? __pfx___mutex_lock+0x10/0x10 [ 886.598583][ T796] ? lockdep_hardirqs_on+0x9d/0x150 [ 886.598601][ T796] ? __local_bh_enable_ip+0x168/0x200 [ 886.598617][ T796] ? macvlan_stop+0x129/0x420 [ 886.598634][ T796] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 886.598650][ T796] dev_set_allmulti+0x11c/0x270 [ 886.598665][ T796] macvlan_stop+0x20f/0x420 [ 886.598682][ T796] ? __pfx_macvlan_stop+0x10/0x10 [ 886.598700][ T796] __dev_close_many+0x3d7/0x760 [ 886.598722][ T796] ? __pfx___dev_close_many+0x10/0x10 [ 886.598746][ T796] dev_close_many+0x250/0x4c0 [ 886.598768][ T796] ? __pfx_dev_close_many+0x10/0x10 [ 886.598788][ T796] ? __lock_acquire+0xad5/0xd80 [ 886.598805][ T796] unregister_netdevice_many_notify+0x628/0x2510 [ 886.598826][ T796] ? lockdep_hardirqs_on+0x9d/0x150 [ 886.598844][ T796] ? __local_bh_enable_ip+0x168/0x200 [ 886.598858][ T796] ? batadv_tt_local_remove+0x119/0x230 [ 886.598874][ T796] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 886.598889][ T796] ? batadv_tt_local_remove+0x119/0x230 [ 886.598903][ T796] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 886.598929][ T796] ? unregister_netdevice_queue+0x2c4/0x400 [ 886.598949][ T796] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 886.598971][ T796] default_device_exit_batch+0x7ff/0x880 [ 886.598998][ T796] ? __pfx_default_device_exit_batch+0x10/0x10 [ 886.599021][ T796] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 886.599042][ T796] ? cfg802154_pernet_exit+0xc3/0xe0 [ 886.599056][ T796] ? __pfx_default_device_exit_batch+0x10/0x10 [ 886.599079][ T796] cleanup_net+0x8af/0xd60 [ 886.599103][ T796] ? __pfx_cleanup_net+0x10/0x10 [ 886.599129][ T796] ? process_scheduled_works+0x9cb/0x18e0 [ 886.599145][ T796] process_scheduled_works+0xac3/0x18e0 [ 886.599172][ T796] ? __pfx_process_scheduled_works+0x10/0x10 [ 886.599192][ T796] ? assign_work+0x367/0x3d0 [ 886.599208][ T796] worker_thread+0x870/0xd50 [ 886.599230][ T796] ? __kthread_parkme+0x1a8/0x200 [ 886.599250][ T796] ? __pfx_worker_thread+0x10/0x10 [ 886.599266][ T796] kthread+0x7b7/0x940 [ 886.599287][ T796] ? __pfx_worker_thread+0x10/0x10 [ 886.599304][ T796] ? __pfx_kthread+0x10/0x10 [ 886.599323][ T796] ? __pfx_kthread+0x10/0x10 [ 886.599342][ T796] ? __pfx_kthread+0x10/0x10 [ 886.599362][ T796] ? __pfx_kthread+0x10/0x10 [ 886.599381][ T796] ? _raw_spin_unlock_irq+0x23/0x50 [ 886.599395][ T796] ? lockdep_hardirqs_on+0x9d/0x150 [ 886.599412][ T796] ? __pfx_kthread+0x10/0x10 [ 886.599432][ T796] ret_from_fork+0x4b/0x80 [ 886.599447][ T796] ? __pfx_kthread+0x10/0x10 [ 886.599467][ T796] ret_from_fork_asm+0x1a/0x30 [ 886.599490][ T796] [ 886.945898][ C0] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 886.967901][ T5930] net_ratelimit: 4 callbacks suppressed [ 886.967923][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.967957][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.022307][ T3085] usb 6-1: new low-speed USB device number 83 using dummy_hcd [ 887.074510][ T9] usb 7-1: USB disconnect, device number 3 [ 887.110385][T15568] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 887.857811][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.998344][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.799429][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.877839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.038034][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.917826][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.998728][ T2979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.081216][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.997988][ C0] net_ratelimit: 4 callbacks suppressed [ 891.998012][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.158173][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.407979][ T3085] usb 6-1: device descriptor read/all, error -110 [ 892.537957][T15568] usb 1-1: device descriptor read/64, error -110 [ 892.544394][ T3085] usb 6-1: new low-speed USB device number 84 using dummy_hcd [ 892.677879][ T3085] usb 6-1: device descriptor read/64, error -32 [ 892.780172][T15568] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 892.787995][ T3085] usb usb6-port1: attempt power cycle [ 892.917928][T15568] usb 1-1: device descriptor read/64, error -32 [ 893.030611][T15568] usb usb1-port1: attempt power cycle [ 893.037868][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.127876][ T3085] usb 6-1: new low-speed USB device number 85 using dummy_hcd [ 893.148282][ T3085] usb 6-1: device descriptor read/8, error -32 [ 893.200436][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.367868][T15568] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 893.388075][T15568] usb 1-1: device descriptor read/8, error -32 [ 893.397892][ T3085] usb 6-1: new low-speed USB device number 86 using dummy_hcd [ 893.418071][ T3085] usb 6-1: device descriptor read/8, error -32 [ 893.528116][ T3085] usb usb6-port1: unable to enumerate USB device [ 893.567954][T15568] raw-gadget.3 gadget.0: failed to queue resume event [ 893.628048][T15568] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 893.648032][ C1] raw-gadget.3 gadget.0: ignoring, device is not running [ 893.655381][T15568] usb 1-1: device descriptor read/8, error -32 [ 893.778013][T15568] raw-gadget.3 gadget.0: failed to queue suspend event [ 893.785125][T15568] usb usb1-port1: unable to enumerate USB device [ 894.077924][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.238117][T15568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.878004][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.117850][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.199062][ T2914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.281425][ T3085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog