last executing test programs: 8m25.718080937s ago: executing program 1 (id=2895): epoll_create1(0x80000) r0 = syz_open_dev$loop(&(0x7f00000000c0), 0xa26, 0x200100) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000100)=0x10001) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) (fail_nth: 9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c000c80080002802d", @ANYBLOB="d5ef"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) 8m25.125826736s ago: executing program 1 (id=2896): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r4, 0x301, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x24008080) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0}]) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r10, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x3}) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x12, 0x0, 0x7}]}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201510100000010da092b02000000000001090224"], 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_ro(r13, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r14, &(0x7f0000000040), 0x12) syz_usb_control_io$hid(r12, &(0x7f0000001200)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002228000000b350360009176f4044e6a3a02da4f0a3"], 0x0}, 0x0) 8m20.46990264s ago: executing program 1 (id=2909): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c9", 0x1}], 0x1}, 0x4004045) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/169, 0xa9, 0x0, 0x0}, &(0x7f0000000400)=0x40) 8m19.461433135s ago: executing program 1 (id=2912): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000000)={0x20, 0x10, 0x17, "d3c15751157f8c4f7031f9cf60bd2d8dcdf072ffe1218b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32={[0x0, 0x0, 0x41ff]}}], 0xffc8) 8m18.79336759s ago: executing program 1 (id=2914): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000006c00010025bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="8000010018000000180034801400350069703665727370", @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008010) 8m18.080183529s ago: executing program 1 (id=2915): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000980)={0x23b, 0x7d, 0x0, {{0x500, 0xfa, 0xff00, 0x0, {0x2, 0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x13\xf6\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00', 0x5e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf6\x99\xfa\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xf6\xc6\x9ai\xd0\x17\xce\xc4Y\x06\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1a'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0xffffffffffffffff}}, 0xffffffffffffff1f) syz_open_dev$media(0x0, 0x10, 0x101000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="000008000100000000003d00000048f800400000000000f78490783fffffffac1414aa440c670000000004000000030000000005f2250dbb08444b", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x4e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffbfff07002000"], 0x14}}, 0x0) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) userfaultfd(0x1) r6 = fcntl$dupfd(r5, 0x406, r5) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) io_setup(0xf, &(0x7f00000001c0)=0x0) io_submit(r7, 0x1, &(0x7f0000001000)=[&(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x7fff, r6, &(0x7f0000000cc0)="e3", 0x1, 0x0, 0x0, 0x2}]) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x240440d1}, 0x400d1) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000010c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r8, &(0x7f0000000600)='d', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @empty, 0xfffffffc}, 0x1c) 8m2.623924159s ago: executing program 32 (id=2915): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000980)={0x23b, 0x7d, 0x0, {{0x500, 0xfa, 0xff00, 0x0, {0x2, 0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x13\xf6\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00', 0x5e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf6\x99\xfa\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xf6\xc6\x9ai\xd0\x17\xce\xc4Y\x06\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1a'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0xffffffffffffffff}}, 0xffffffffffffff1f) syz_open_dev$media(0x0, 0x10, 0x101000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="000008000100000000003d00000048f800400000000000f78490783fffffffac1414aa440c670000000004000000030000000005f2250dbb08444b", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x4e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffbfff07002000"], 0x14}}, 0x0) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) userfaultfd(0x1) r6 = fcntl$dupfd(r5, 0x406, r5) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) io_setup(0xf, &(0x7f00000001c0)=0x0) io_submit(r7, 0x1, &(0x7f0000001000)=[&(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x7fff, r6, &(0x7f0000000cc0)="e3", 0x1, 0x0, 0x0, 0x2}]) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x240440d1}, 0x400d1) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000010c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r8, &(0x7f0000000600)='d', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @empty, 0xfffffffc}, 0x1c) 25.505785424s ago: executing program 3 (id=4960): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendto(r2, &(0x7f0000000000)="2c0000000314050000000000000000000900020073797a30000000000800410072786500070033006c6f0000", 0x2c, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) listen(r3, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) accept4(r3, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, 0x0, 0x24040084) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf2500000000080001", @ANYRES32=0x0, @ANYRESOCT=r4], 0x2c}, 0x1, 0x0, 0x0, 0x4044011}, 0x400004c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000000c0)=0xf20, 0x54, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r8 = getuid() sendmsg$nl_xfrm(r1, &(0x7f0000000b40)={&(0x7f0000000780), 0xc, &(0x7f0000000b00)={&(0x7f0000000b80)=@updsa={0x2c0, 0x1a, 0x300, 0x70bd25, 0x25dfdbfb, {{@in=@rand_addr=0x64010100, @in6=@private0, 0x4e21, 0x6, 0x4e24, 0x0, 0x2, 0x0, 0x80, 0x0, r5, r8}, {@in6=@remote, 0x4d2, 0x2b}, @in6=@loopback, {0x9, 0x7, 0x2c00, 0x6, 0x800, 0x1000, 0x3, 0x1}, {0x4, 0xc053, 0x955, 0xc0000000000000}, {0xa, 0x8000, 0x4}, 0x70bd27, 0x3501, 0x2, 0x2, 0x4}, [@lifetime_val={0x24, 0x9, {0xffffffffffffffc5, 0x6d, 0x8000, 0x3}}, @algo_comp={0x138, 0x3, {{'lzs\x00'}, 0x780, "ffcc4dd6c46a59cfd57e9b918d3be7a303be033fb9aee1a45f1a93216b54c80f9bfd594f554ae26411fe4b838a35a85cc68c55195503b923e53a83f904b233880d95cf348941d586eb7c46872b4716688d225248b8308f2a681221306d362e39edc3c78502c1247bc3d4008bf4c651455185ebe320704104ebe0d6cf7d373c2dd33fe5e0a405c14de1c113c4488de0e660cac042bf4a2dad92d8933b7b0e5de95a31a45ec4cfdc20abe51319948b065b08c8b4e609921fc401b73c1215a2919ae1cd068f2862e1b2380c260cb66793d894139394d1d568cc62b0729b415aed99e7ecc77a9cf4fd3df31c729e28a1d7b1"}}, @offload={0xc, 0x1c, {r5}}, @srcaddr={0x14, 0xd, @in=@local}, @algo_auth={0x48, 0x1, {{'blake2s-224-x86\x00'}}}, @proto={0x5, 0x19, 0xff}, @proto={0x5, 0x19, 0x32}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x851}, 0x4000) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r7) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x48, &(0x7f00000007c0)={{0x12, 0x1, 0x101, 0x84, 0x31, 0x2, 0x40, 0x1b80, 0xe1cc, 0x26cb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0x80, 0x3c, 0x40, 0x9, "", [{{0x9, 0x4, 0x5, 0x80, 0x0, 0xab, 0x3a, 0x2b, 0x6}}, {{0x9, 0x4, 0x5, 0x8, 0x3, 0x36, 0x88, 0x82, 0x3, [], [{{0x9, 0x5, 0x80, 0x3, 0x0, 0x40, 0x82, 0x9}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0xc1, 0x2, 0x5}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x9, 0x5, 0x1}}]}}]}}]}}, 0x0) 22.003389306s ago: executing program 3 (id=4965): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008cbd7f209904f4cdee780102030109023c0001100010000904130001ff06d20005240600010524039a830d640f0100000000060091008106241a0000080424080009050503"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000100)={0x2, 0x0, 0xb}) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x28e, 0x0, 0x14}]}) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400070080000300", 0x33a) r4 = syz_open_dev$loop(&(0x7f0000000180), 0x8, 0x80000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r6, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) gettid() getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f00000004c0)=""/65, &(0x7f0000000600)=0x41) syz_io_uring_setup(0x34b7, &(0x7f0000000540)={0x0, 0x7243, 0xc00, 0x2, 0x12f}, 0x0, &(0x7f0000000080), &(0x7f0000000200)) r8 = add_key(0x0, &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r9, 0x58) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x28e802, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r11 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r12 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r12, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r12, 0x6) write$tun(r10, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000080000005000500000001c0010008"], 0x4a) socket$igmp(0x2, 0x3, 0x2) 15.205418756s ago: executing program 3 (id=4988): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = dup(r0) (async) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0xfffc, 0xc, 0x0, 0x1ff}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000640)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) (async, rerun: 32) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x28000}, 0x8000) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r8) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000002640), r8) sendmsg$BATADV_CMD_GET_VLAN(r8, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="0902abc6fa33124b7677d273254649efaf00fcfc992be392aaca"], 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x0) (async) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x44, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) (async, rerun: 64) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x2, 0x20000000, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1d1, 0x0, 0x0, 0x1f0, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r10, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000002c0), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, r13}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) (async) read$FUSE(r1, &(0x7f0000008180)={0x2020}, 0x2020) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) socket(0x400000000010, 0x2, 0x0) (async, rerun: 32) socket$unix(0x1, 0x1, 0x0) 12.444123619s ago: executing program 3 (id=4993): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x48850) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffd) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x8100) fcntl$dupfd(r4, 0x406, r2) r5 = socket(0x2d, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x400000000000000) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000001000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x200000}]}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x1b, 0x0, 0x8fee00d00}]}) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_GET_LAPIC(r8, 0x8400ae8e, &(0x7f0000000600)) connect$netlink(r5, &(0x7f0000000140)=@unspec={0x2d, 0x0, 0xa00}, 0xc) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_freeze_timeout', 0x86000, 0xcd) io_setup(0x20, &(0x7f0000000280)=0x0) io_submit(r10, 0x1, &(0x7f0000000300)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x6, r9, &(0x7f00000004c0)="3734df", 0x3}]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0xa8, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @qdisc_kind_options=@q_htb={{0x8}, {0x74, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x2000001}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x27}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3ff}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x40, 0x1}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x2}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x6}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8000}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x5}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20048954}, 0x8840) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r13 = getpid() syz_pidfd_open(r13, 0x0) syz_open_procfs(r13, &(0x7f0000000100)='net/vlan/config\x00') 11.688561208s ago: executing program 2 (id=4997): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000140), 0x4, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x9, 0x0, 0x2, 0x180, 0x8, 0x4, 0xf1, 0x50, 0x12, 0x4, 0xffffffffffffffff, 0x29, 0xc4, 0x4, 0x0, 0x8000000bdb], 0x54000, 0x43102}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600040000000000000000000003003e00e9ffffff940200000200000040000000000000000000200000000000000000002d8f38000b"], 0xe8) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0xc921d000) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f00000023c0)=""/4096, 0x7e592850fa52087b}], 0x1, 0x0, 0x0) r6 = msgget$private(0x0, 0x300) msgsnd(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="02"], 0x8, 0x0) msgsnd(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="03000072"], 0x8, 0x800) msgrcv(r6, 0x0, 0x0, 0x3, 0x1000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x2, 0x9, 0x5, 0x0, 0x7], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0x2, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x2, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x9, 0xb0, 0x9}, {0xffff2000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0x0, 0xf401, 0x3000, [0x9, 0x100000000000204, 0x5b, 0x8]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2f2244d5a54b7f92d3c63e2e681af2d8d3a7753dbc12862c78b1590a2856f513042b62a60eff9f4c6f9b6e256d862cccf88b1ac8f8eda6d100c1897e371084335b2c1cabab960d8409000c392a0b1e7dc160a8528f9b7066a86494e68f47ef75923543628ea95b1887cb52d0b3c4a3f3896417e5c08c6653632504079ec3daf8acf55fe50cb8886d89ffca43a0fd86475355254d27e228ae0ae5229d1081fa57fbec83f175ca1e9e9561a7059dff3d13a60eaeb8f6eeaf1cb4a0578d444f75853088cceeba95f2ecea2dbfa0a17da63da7e692f104c3006d8edcc7fb1294a86ed6ae"]) openat$fuse(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r7, 0x8004e500, &(0x7f0000000000)=r7) 10.720990937s ago: executing program 0 (id=5002): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$peek(0x2, r1, &(0x7f0000000180)) syz_io_uring_setup(0x3568, &(0x7f0000000000)={0x0, 0xe809, 0x80000, 0x2, 0x26, 0x0, r0}, &(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x8, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000, 0x1}) r6 = mmap$IORING_OFF_SQES(0x0, 0xfffffff7, 0x4, 0x40010, r0, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000480)={'syz0\x00', {0x1, 0x4, 0x1, 0x81}, 0x38, [0x3, 0x5, 0xffff4f19, 0x2110, 0x9, 0x5, 0x0, 0xb213, 0xf8b, 0x7, 0x2cd5, 0x9, 0xfffffff7, 0x7, 0x7f, 0x936e, 0x14000, 0x4, 0x3, 0x80000001, 0xd, 0x2, 0x3, 0x0, 0xd192, 0x10000, 0x3ff, 0x7, 0x3, 0x5, 0x5, 0x6, 0x7, 0xd, 0xea5a, 0x10000, 0xb, 0x3ff, 0xe07, 0x9b, 0x200, 0xd, 0x1000, 0x4, 0x200, 0x0, 0x1, 0xffffffff, 0x4, 0x9, 0x8c83, 0x2, 0x8, 0x5, 0x3, 0xff, 0x2, 0x4, 0x8, 0x2, 0xa3, 0x2, 0xa5b, 0xfffffffb], [0x3, 0x93, 0x2, 0x3548, 0x5, 0xfffffff0, 0x8000, 0xffffffff, 0x5, 0xa2, 0x80, 0xd6, 0x6, 0x7, 0x3, 0x7, 0x24a, 0x3, 0x4, 0x8, 0x8, 0x8, 0x1400000, 0xa0000000, 0x7ee, 0x0, 0x800, 0xae00, 0xf, 0x4, 0x10001, 0x8, 0x8, 0x7, 0xb95, 0x3, 0x6, 0xa, 0xe, 0x1, 0x8, 0x8, 0x7, 0xbe, 0xb, 0x3dd9, 0x80000000, 0x3, 0x8, 0x12d, 0x0, 0x6, 0x4, 0xfff, 0x7, 0x0, 0x400, 0x8001, 0x643d, 0x9, 0x3, 0x9, 0x0, 0x80000001], [0x80, 0x4, 0x1, 0x9, 0x6, 0x6, 0x1, 0x8001, 0x5, 0x400, 0x400, 0x4, 0x101, 0x1ed, 0x3ff7ca5b, 0xfff, 0x3, 0x1, 0xc1bd, 0x8, 0x6242, 0x401, 0xfffffff7, 0x9d, 0x4, 0x1000, 0x1, 0x20, 0x400, 0xfff, 0x9, 0xffff, 0xd05, 0x6e9, 0x5, 0x3, 0x8, 0x5, 0x9, 0xfffffc01, 0xbe, 0x370, 0x7fff, 0x0, 0x8, 0x8, 0x1, 0x3780000, 0x6, 0x5, 0x0, 0x6, 0x391, 0x4a3, 0x4, 0x0, 0x4, 0x3ff, 0x0, 0x2981, 0x6c07, 0xa39, 0x8, 0x3f4], [0x400, 0x8, 0x6, 0x400, 0x0, 0x0, 0x200, 0xa, 0xf4, 0x98e, 0x8000, 0x9, 0xffff, 0x7fffffff, 0x6, 0x5, 0xf, 0x1000, 0x5, 0x8001, 0x2, 0x5, 0x5, 0x4, 0xcd, 0x2, 0x0, 0x0, 0x9, 0x5, 0x6, 0x3, 0x6, 0x1cd9, 0x8, 0x5, 0xfff, 0x1, 0x8, 0x0, 0x5, 0x2, 0xce, 0x6, 0x1, 0x3, 0x3ff, 0x100, 0x4, 0x8, 0xfffffff7, 0x2, 0x6, 0x9, 0x80000000, 0x2, 0xf, 0xfffffffd, 0x1, 0x3, 0x6, 0x1ff, 0x9, 0x4]}, 0x45c) read$FUSE(r0, &(0x7f00000014c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_ublk_add_dev(r0, r2, r4, r6, &(0x7f0000003540)={0x2e, 0x12, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, r7, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003500)=@any_dev={0x3, 0x84f, 0x0, 0x0, 0x1000, 0x5, r8, 0x0, 0x4}}}, &(0x7f00000035c0)) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x400) 10.42610736s ago: executing program 0 (id=5004): fsopen(0x0, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x10448) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)=@newqdisc={0x294, 0x24, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x3}}, [@qdisc_kind_options=@q_red={{0x8}, {0x268, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x6, 0x7}}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x7}}, @TCA_RED_PARMS={0x14, 0x1, {0x10, 0x8000, 0xbe0d, 0x15, 0x12, 0x5, 0x8}}, @TCA_RED_FLAGS={0xc}, @TCA_RED_STAB={0x104, 0x2, "90c866bb7aca6b96761959243f16d6fa4897bd0f5bdfc12d756610c6ea304d99537224470a3d17208c2bc364ec9e1b0d6f82d608d6fea3bef00aeb0967f9a5894e47a724b578198e9c93d4188c63752fc18f31553bcb706d2f9928402f9be70a6f058d44f72fd047f965dcb0cc606ff543a57b3f3f2a098f4e579c4488f27b85b11c6526ae565cecc9eea0dccffce3fdccee3e6bcc60fa3cb3d73ed24bb78b7a70b04a0b2d48c8b7556b6d2ed9f62399445699d2cae3ac32472efab48307ef9a859c864ab7b42ab3dd06ef2af681f5792dfb2c9737a3eb2cd0a886bcf8a4287f8ffa69276d0c4caa2f72c59c5d01076bb78f17b084e7f84370ebfee47b8a0677"}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x786d}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0xc, 0x61, 0x68, 0xf, 0xd, 0x16, 0x4}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0xa}]}}]}, 0x294}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x800) sendmsg$netlink(r0, &(0x7f0000002540)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x40000000}, 0xc, &(0x7f0000001dc0)=[{&(0x7f0000000300)={0x60, 0x1d, 0x400, 0x70bd27, 0x25dfdbff, "", [@typed={0x4, 0x12c, 0x0, 0x0, @binary}, @generic="529052dc08ecb0dafe490bc2e964c38974d3545541b12e3149868fd53f419b7a5926729730c3f3365c5f16317d7db18dc73147b5820663eee6209f3312e9b421c59d", @typed={0x8, 0x11a, 0x0, 0x0, @u32=0xb34}]}, 0x60}, {&(0x7f0000001300)={0xbc, 0x33, 0x300, 0x70bd25, 0x25dfdbfb, "", [@generic="23cdc2acf21702c593f3775f65f913caef4f0ddbe8c645be9e57ff3e02fffc8735667aa37944e3cd4ee09e30ab4b1f94316e5d4ae267d42e2213590cd2bf7d4274b9cdfacae9993cdde677c6050b2b87b6b0cd915438280ba15b479c758fd7e11d1fd10a44ce2dd86c1101fdb903876d135d7636a921601e9437", @typed={0x8, 0x19, 0x0, 0x0, @fd=r8}, @generic="039a167ad6f1c41b4bed6d0dd5335b4b6d9fcd113132b16612cf60fe84cfebcdd0c7b91b1909664ab275"]}, 0xbc}, {&(0x7f0000001480)={0x40, 0x25, 0x20, 0x70bd25, 0x25dfdbff, "", [@nested={0x14, 0x41, 0x0, 0x1, [@typed={0x8, 0x40, 0x0, 0x0, @uid}, @typed={0x8, 0x15d, 0x0, 0x0, @pid}]}, @typed={0x14, 0x15c, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x5, 0xab, 0x0, 0x0, @str='\x00'}]}, 0x40}, {&(0x7f00000016c0)={0x1d0, 0x12, 0x10, 0x70bd2a, 0x25dfdbff, "", [@nested={0x1ae, 0x1, 0x0, 0x1, [@typed={0x52, 0xcd, 0x0, 0x0, @binary="5ba90127e964039dd023f992227974823dabb18899d3502324ef37deadd08434a6aca9265b4310aada296a7520d78940dd81c59ff6ed63f140833cfe07d33ac915bd1860ea4a8cdf8c4c09c9ee3d"}, @typed={0x8, 0x23, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="56928f9db2be750f1101f7d2bdfd9c88712f46d12ca732f0a15a79966c30212acd7097b8f9d4624371e959ab1ef7b1e113db8c5247d30cfcfffa9aa8689a1981a12cf895bbf4de61fb9b2d94f2c9b25db52411177095c7ab11079d628d57703829577f2332d29ec0921a40e8c2619672993f0170bba6c258317af30be136659cc07cd6e2c6ecf976110a492aab79758e3dc6fd30fe4de4537c516a356baccb08fc", @generic="6aae4d0414888c199338174511ab4de1214158e4da1d8de1af77fea3c785d549b050f53e6b069025767e7e5a46e9e0a1647de8508c29419d4bd3018935581216e30158f526d0546f05d5a52c7fab68ecd0eb76e72439313f534adcfdd88fb3496ab30489a3ed16342af601a5aa25b7cd7e8d8d3d1cd58afb28567b77dee39d5e335955ee577c60a127e15a24c5e3ea6daabef0ad31def72ede79431f81e1edbd85f83a1ecb5ff81e785468e949"]}, @nested={0x10, 0x11, 0x0, 0x1, [@typed={0x4, 0x3ff8}, @typed={0x8, 0xd8, 0x0, 0x0, @u32=0x8}]}]}, 0x1d0}, {&(0x7f0000001e00)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="cf58d195c9bc76ab6c9e299712d60ca2d0198bd7555febb5c742f15b3ced53cc91320d6ebbf236dfdc2b5ec729944ac972d1635dcad24863561f6d8a34070671455c344057c771ee447c2db5bdfd7e4cd5ca08007200", @ANYRES32=0x0, @ANYBLOB], 0x1a4}, {&(0x7f0000002580)={0x574, 0x1e, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@generic="6edf97dca2409d6bd56bdcecfb430467a32ec27a168c478df1781ba81e22468e7d6b2d9174bace3848ad3cc4eea1f5cd246cfde6d9b147d453e6a3980e471dd886fee740380ea9b5b6427317a94a3c71d973687d74dbc123fd552c16b97595fb2e0a87c615a36d0dc685d68aa6f8b4d99b87ac037ea30bd0457b563fb18750258ad8d4e1235b17959ee427fa87fa0c895766c32d836b6881e8733b0d54a5d9477e100d8326e8d947e58f280715a19934fda1ac66b91a08fa749b02fcc84e379ac4694fbf193230d70f95c1db2b3dbd002212e8d0f4102649a548737ee79105b7c13c9215823a7308f0b595", @generic="bd4a55b3534efe7ab905a0cbbe7f50041b20f2edfb441fa177f35d04698f18f91b644527b816ba5229bde9626419a56564a43a6e992dcfb30bcac089eee033fdd237d2ece780a48ab0b906c46670a62eb6c272406667b9", @nested={0x86, 0x76, 0x0, 0x1, [@typed={0xc, 0x6, 0x0, 0x0, @u64=0x4}, @generic="c8d704408426e4bd230226d41d457cfd448f7314db368cdab871f22c065110cc71131d44efea898827b1f3cb4b6c2fd3da46761e598c3ba2f13fd0a761137e5f7bbb4407fd0802e847fd9fd4dbee2cfbf07b26689018aae997f57dbf27d50eb533a6f5953472578f8840e75aedafe20047e0a8a8d2e6"]}, @nested={0x25d, 0x159, 0x0, 0x1, [@generic="36dba18f7103c5a1cc0b6d47c9675512f91e8ba00e9cfd9f04342846298361f4af8f5fa6b448e2c4e2ec74767cb8c563d86edbacf488bf6789bb9f208861c075ee6d759920e119b265e5f5792a0fc2d6a6192c6473e8ca067b32cd37794a167839cd1e9d30ac2ef80c60fa4a0e9c98f4240a026ce28cf1e17191afdf9535f06294247a2a9d9c726335dbd9d402b446e3d761c8255a8ed791b00a40c002ac33a1d655", @nested={0x4, 0x5a}, @typed={0x8, 0x131, 0x0, 0x0, @uid}, @generic="f2977638615599d00d8c86abbbf2d3ec3e8f844a2ed4ff1dfa87fbfc95076c307756dbb4207b3054d565801001ac985071f570c272d7787617fffca707a2aac8c792675352bebb", @typed={0x4, 0x7c}, @generic="718ed3b5f2221114c307cceada02015aea9940db1469b9995fb301b00e79b150a7972bb720f29753d0e64d0a951896db811d1aaafa1dd28e9b3aa2651588e623f96441fc83f87d0859a010e80d209995ae474a07", @typed={0xc, 0x8c, 0x0, 0x0, @u64=0x100000000}, @generic="f1ae74401133372b32d5be760e3c8bbd8e1379fa195f3d310b530b4f4f5810399ce48da6b1534848dfbc065e2d27cd7e43631d3bfaa315d51c5765e8e72702f93be66a6a89bbe11a5de0c4670b22e2525d26543779917735e3564c86585864e5ac4cdd336bbfa5eb5bc194817ff0275f064da26a45425bc487fb6501703f8d4a9355b78f6fea9e8194c768d3fb6414b7d1d227c4f0dc05ab7630cf5de845f89de7f824fc0b00986773c4eaa682afadf06152d9604a30212a3ed5bd907857c0e1a90daccfd0702c0779d58179ff47fa46db7e98f4c282e27abb4ed4801039ec874eac46e9c7bb74140636e45ac23e8866561a21d0ea48f6b9", @nested={0x4, 0x114}, @nested={0x4, 0x12b}]}, @nested={0x138, 0x115, 0x0, 0x1, [@generic="171cd9895c9247a14042e39e26bae36af504a1f3fe7ed0021d2e0b0dacb82be10b21b08ce5cd1fbc5c8204d54b0ac5da8207081caca1cc5fe3b4cba4f003faf1cc7e0aad58d958226ff2", @generic="1d236a23890493ddb8acd77e7a5b3ddf7fcc97ed617c194078df5249db774c261c1fdf2b0ddcffadc8309163719ee5656c2831f856f3eb4982dc6884f288384c4d861c760a8b5b082fa7942f1e0029f0e5454ae9d90fa7916862353113d78c0d5915237d621c5398f406cf954dc46f496813c38b9044ae2923712f6bfae438138c5c6107bbf5de5a3aebd66d11ea491424306c55bfd48fd3879277ab9e6872e9ad5db36d545b086b39a093c2bb", @typed={0x8, 0x58, 0x0, 0x0, @ipv4=@remote}, @generic="58481452964120ab5dfa37a4cf6e5fb3e51128ed99b27501ce65eb68d1192ddfc174bcf753d7c011ade74f53a2", @nested={0x4, 0x8f}, @nested={0x4, 0xf0}]}]}, 0x574}], 0x6, &(0x7f0000002480)=[@rights={{0x20, 0x1, 0x1, [r4, 0xffffffffffffffff, r3, r8, r2]}}, @rights={{0xc}}, @rights={{0xc}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [r7]}}, @cred={{0x18}}], 0x78}, 0x800) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x8}, {0xfff2, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x403a, 0x7, 0xf84, 0x9}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000740)={0x40000004}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r0, 0x9d0e7000) r10 = socket$inet_sctp(0x2, 0x28c004d2139a8ff1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x6}, &(0x7f00000000c0)=0x8) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r11) syz_usb_connect(0x3, 0x4f9, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xb4, 0xc1, 0xc8, 0x8, 0x17cc, 0x1000, 0xf1bd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e7, 0x1, 0x1, 0xda, 0x40, 0x1, "", [{{0x9, 0x4, 0x80, 0xff, 0xc, 0x67, 0x7e, 0xa6, 0x40, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x2, 0x9, 0x9}]}], [{{0x9, 0x5, 0x0, 0x0, 0x40, 0x2, 0x0, 0x6, [@generic={0x72, 0x3, "5b8a122a5eee5600cb8d353ba4645c9b188174750af3c27060d85b5395cd980f7c8292032851652a0e8540fece1996de5737767bc7ab77b67262fe97bbeecc6b919fb6c66a5b74123d434f4077f252ecdaa60d09a5ce99d21dcbe7bf114ab0d3f5b47db1b54855097e4028b6f7d4dca1"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x400, 0x4, 0xf3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2e, 0x7f}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xfe, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x6}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0xe, 0x0, 0x6b, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x9}]}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0x13, 0x1, 0x5, [@generic={0xb, 0x22, "e9205c691d1ee95fcc"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0x1, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x9}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x1, 0xc8, 0x3, [@generic={0xfd, 0x21, "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"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x8, 0x7f, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x6}, @generic={0xbc, 0x5, "29e3ba70d0dc0b818f8f646740385bef435c0d5c27358dc6ba58bd066aa0f545a5ad45e0850ffd328b75949b877a5399d6113e978f329b78a79a5f9c59d13093f73aa3ce16bb508959f0cf7ae89df4ab8fa7167ccb535f4c577fc56823b26a65eb4d53d8ec56292a6b3fd84630efb2c5f5814d1bef5eb3b8eea9e9e27d419950e62954c6d626d6985152ce7d82e0d9aa43686a1ccae8bc8f3d19eb7f077ac0b465befcfc50baaa59befcd129c7a7011660e8b8fb2d435c9b4927"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0x8, 0xf7, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x9}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x6, 0x2, 0xec, [@generic={0x4d, 0x21, "90d14be35bf926e760f931df375ba7b59cf04ea0f6d967e2ec1e79ee416c281bbe47af0b3c0dd6d346a78bdc6fce63a4e63d3565724f60ce19ab5d132df3c7bba1ee34513e21697496a2a0"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x2, 0x6, 0x4d, [@generic={0xdd, 0x1f, "1f84d526f2e85386f7c9a99076ffd23b91cca6aecd0e919f6b877073bf3c111bace4a810bd0108426bd705d48d90e56a481ab7ccc96b7840d6e942c3e99d45ced10baff67d417c6ce22153d17ab1b96409e146928fb0dec637dfe1a405d1ceff478ab5a9366c4ede210fb25363aa3099aa225ea900c936dd0d5d6f0beb46023f1c66c41165621dd5e5d50bb7ac72bc1cbfecc99f4ecfa41e22d7eb5a62c7eb9ff4def355e63deeed8db240e10faee95d6ea1c2e9237c8211279a250bbf8933daac93c56341c5d1daecc44fdff59d8010fc71943a0ece3dc9cd8932"}, @generic={0x5e, 0x22, "70079c2c02e7f94ddfdc4905b83e50b1fc86ac46e1a542bca2da080f72fba1287e47f0d32bec58f910c2d77161f2afb6709f9a82b223509ad9236e39750aa788f73726ff601a5425641f4ee427977838085d1481cdaa8e8a6f3a79dd"}]}}, {{0x9, 0x5, 0x85, 0x4, 0x3ff, 0x6, 0xfc, 0xd, [@generic={0x79, 0x31, "0903bfc50707d40470224c2eba3b49a921acae8a48259bcd53f79397ba7d0f270bec45edde04be4dd63231fe7d98cd914d05eb9deeef48ff012aae130fb71e96148ae994cb5af47a0c70f73bb6bf3331d7d9a8c7992fe99ac650c26c1eed6b8f65939e9f89ac29835893b58d8a304bcba826a48d7aa2dd"}]}}]}}]}}]}}, &(0x7f0000000f80)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x200, 0xd0, 0x5, 0x1, 0xff, 0x1}, 0x13, &(0x7f00000009c0)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x2, 0xe, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x8, 0xff81}]}, 0x9, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x2c0a}}, {0xac, &(0x7f0000000a40)=@string={0xac, 0x3, "01f3e22ef7f0d9ecf39c6cdad28ed52cbd806f34b42d7ff75f64e61dc422307441b5f11163fc1802ed34b0464ec7a6747b009cf14a97ee0d681a00c5ea3f2762281b6c69786c4704b1f7a19bc4a2b6bcca0c25bee56252a8013145074e76c7b954c9befda19c63ab5a48be3115c896ddc1c7a128c9ff66527236571c8444963af77eac6f3aa146390cde2c0ab70bde3537bcc2609784e5207e55816823a1b2e515911b2de2bfe362ab26"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x409}}, {0xf6, &(0x7f0000000b40)=@string={0xf6, 0x3, "9011ec0f1ca9fb5c2e15ceb151f4081acde13e9df75eec7f40095ab14c690a5640370dc797a60b234a9be03532c0d78db3c37d1d741283705d5503bed53c61589ba6f9fef6e0da8f9c7a428fc613b972d4c953f2b1c50c2bedce3087f6ceb41633c9d113472669a61462c9c6fb2b1d9ac459194ccedb87fb5e55cd7f44f50f60809cd23791e02677e4b72fbedb20cc86a3ca3f20cc2cfb04c12f4eed934d8e69cccc658ea8e0be2380a3e1ce97bf7850df7ea0b19ae13a4d577ac0af3b3f8e27e68813a42c1386deb90e1ecc56a3c9cf752d3922b2812d72a1c6a5f145c43fa3483c8d98dad1c75b3c32c2f7242216c180ad6eb7"}}, {0xb6, &(0x7f0000000c40)=@string={0xb6, 0x3, "4ef971a69d830380642ce4ea9176baddf5b67df5c9eb66af0f0a1d5d065860bb9060eda85a188e370367a78f5f637ddaebd06fed4febf2b77fc390a17d24303c6f164407d9c03a7a6b86773fe5dc912af11a301b02c8314d3aeb396f1fa67b2afb0c0665bdf31c4bd17b2432ce3494814b904c5cc97f85b878a5cd1fce5700031641f85d9ba2e4933804852617ffe82b03977fc3fff84ef8b7a48aa49f25db783b2d8d6e4c619c9ccad2a393cc056a13c4a98b99"}}, {0x32, &(0x7f0000000280)=ANY=[@ANYBLOB="320361bda55282444c99f50f7884fa87fd32e66a0e20acf5b8f4bf0e8b182fad050cfd9711ffc858127aaa34f0f130a08be3a0160060c4cd2d80b59347563fba"]}, {0xe5, &(0x7f0000000d40)=@string={0xe5, 0x3, "8acd82f35ce0ed081a6131a91cb5849249d2726320dee97ec23047d4a7e30017b94964033cc4c12afa6741012200908f44d934ecf3be4d5bb6918d8f780f7170cf3db07d3fd4f7279fd8c5fd72a5aee19c3e908891f6aea4250bad534e04a9b020d2a5996010c82a1c6adb685d2b69daeb0bb3b2935bfa87b658e4c15e27fb55191b03aa3fc9be5759c50ee92c0f191b90bbb4d48ba64298c5d4d5c6f0856d64c6da7b4b9ff7772b1d732f9857b621fa399a704680065554ff6150ea9eb0a2808479b577f37ebd538206d370661ec55459d93158e1f4318268a49d638532d0ed79ebeb"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x430}}, {0xe6, &(0x7f0000000e80)=@string={0xe6, 0x3, "061e59cb7398fa27aedff9ef29ff51b03c5d1b31f7b8d8a8855c3f91b414dde284582ee87286d14422abce8156a8cbfe7582432c7208f5f30701ac813e3a81265347949af9f396bb7efc73fc6a888f288936a5bca3cbb8edfb118aa4ff7f6003bdb13123f2fdaf5143e5c63cecdf7c0e39003d88b2649accba53eed3c73ccd2e01bdbbc1cf1cc0f493d1b666ad1feb3f954115fb50a5e9a8691151c4731c08f3cc7c8401ae79d6930a2c721870e7fd1251d49f787f0e959fa4fb949184b88b558a8027ea88f616eb61e3fe50eb58ee9b1ecef607d6cbc46161b122571d31ae8bd6d820c2"}}]}) socket(0x1d, 0x2, 0x6) 7.821131426s ago: executing program 2 (id=5007): socket$nl_route(0x10, 0x3, 0x0) (async) clock_gettime(0xa, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async, rerun: 32) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x9}) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x9, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x2, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004200)=@newtfilter={0x2414, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x23dc, 0x2, [@TCA_BASIC_POLICE={0x146c, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x443a, 0x1, 0xffff, 0x3, 0xfd8c, 0x40, 0x6, 0xffff8000, 0xffc5, 0xe0c, 0x703, 0x7, 0x721, 0x0, 0x7, 0x3ff, 0x10, 0x3, 0x6, 0x81, 0x2, 0x7, 0x5, 0x3074, 0x4, 0x4, 0x3, 0x7, 0x10001, 0x299, 0xfffffff9, 0x2, 0xffff7883, 0x0, 0x388c, 0x0, 0xffff1d7a, 0x9b, 0x0, 0x5, 0x4, 0x3, 0x7, 0x1, 0x5, 0xd, 0x93, 0x22, 0x1, 0x3b8d, 0x2, 0x250, 0x1, 0x392, 0x8, 0x80000001, 0x0, 0x401, 0x400, 0x40, 0x9, 0x9, 0x3, 0x9, 0x6, 0x26, 0x1, 0x8e7c, 0x8, 0x7, 0x5, 0x8, 0x5, 0xffffffff, 0x7ff, 0xaf8, 0x7, 0x2, 0xb, 0xa, 0xfd5a, 0x1, 0x7fffffff, 0x4, 0xffffffff, 0x800, 0xfa, 0xb, 0x2, 0xfe3, 0x7ff, 0xff000000, 0x4, 0x77, 0x5, 0x0, 0xcdb4, 0x4, 0x4, 0x7, 0xb76, 0x949, 0x39, 0x4f0, 0x0, 0x6, 0x7f, 0x5, 0x5, 0x7, 0x7, 0x5824, 0xa, 0x8, 0x5, 0x4, 0xcd, 0xff, 0x3, 0x7, 0xc, 0xca, 0xd, 0x3, 0x2, 0xf, 0x1, 0x91e, 0x1, 0x0, 0xfffffff9, 0x0, 0x1000000, 0x2, 0x0, 0xfff, 0x5, 0x0, 0x3, 0x5, 0x8, 0x8, 0x40, 0x6, 0x9, 0xc43e, 0x6c, 0x9, 0x4, 0x6, 0x3, 0x8, 0x8001, 0xfff, 0xffffffff, 0x4, 0x4, 0x0, 0x7, 0xb, 0x20002, 0x401, 0x8, 0x10, 0xbed2, 0xff, 0x2, 0xffffffe4, 0x8000, 0x8, 0xac6, 0xffffffff, 0x8001, 0x2, 0x3, 0x3, 0x1, 0x9db, 0x80, 0x9, 0x9, 0x494, 0xfffffff7, 0x7, 0x6, 0x3, 0x8, 0x9, 0xe17a, 0x3, 0x1, 0xff7d, 0x7f, 0xc, 0x3, 0x800, 0x4, 0x80000001, 0x2, 0x0, 0x8, 0x39fc1a79, 0x2, 0xf55a, 0x4, 0x8, 0x6a66, 0x5, 0x7, 0x800, 0x3, 0x5, 0x9, 0x40, 0x3, 0x100, 0x8, 0xfbc7, 0x0, 0xa3, 0x5, 0x2, 0x7, 0x2, 0x9, 0xfffffffd, 0x10001, 0xf, 0xb61, 0x6, 0xc0, 0x6, 0x6, 0x6, 0x5, 0x9, 0x2, 0x8, 0x2, 0x0, 0x9, 0x7, 0x9, 0x3ff, 0x80000001, 0xffff, 0x2, 0xfa5, 0x5, 0x4, 0xf, 0x5, 0x5, 0x3000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x385}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x5, 0x7, 0x0, {0xb1, 0x2, 0xbe, 0x3, 0xfff, 0x6}, {0xec, 0x0, 0x7, 0x7f, 0x0, 0x8}, 0x5, 0x7ff, 0x8001}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8001}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x4000, 0x0, 0x3, 0x3, 0x9, 0x1, 0x8, 0x7fffffff, 0x9, 0x2, 0xd0, 0xddd, 0x8, 0x8, 0xffffff01, 0x0, 0x0, 0x5, 0x8, 0x5, 0x5, 0x1, 0x4dc, 0x7, 0x10000, 0x3, 0x1, 0x6, 0xfffffff6, 0x5, 0xa, 0x5, 0xe99, 0x4, 0x36, 0x9, 0x91, 0x0, 0xffffffff, 0xe9, 0xf, 0x70c, 0xe3, 0x5, 0x3, 0x7, 0xd, 0x5, 0xfff, 0x9, 0x10001, 0x9, 0xfffffff7, 0x3490, 0x6, 0x6, 0x1bf210ab, 0x6, 0x7f, 0x7, 0x7, 0x2, 0x3, 0xffff, 0x80000001, 0x401, 0x80000000, 0x3, 0x0, 0x1, 0x8, 0x101, 0x10, 0x9, 0x8, 0xfffffff9, 0xd, 0x797f, 0xfa7b, 0x1, 0x4, 0x6, 0x9, 0x40, 0x9, 0x4, 0x800, 0x3, 0xfffffff8, 0x76, 0x7e50, 0x0, 0x6, 0x9, 0x4, 0x9, 0x27d, 0x4, 0x0, 0x4, 0x4, 0xf, 0x2, 0x5, 0x4, 0x4, 0xd8a7, 0x4, 0x5, 0x0, 0x0, 0x2, 0x0, 0x3, 0x1, 0x7, 0x7ff, 0x7, 0x8, 0x9, 0x3, 0x4926, 0xe, 0x5, 0x1f, 0xffffffef, 0x2, 0x3, 0x7, 0x1000, 0x6, 0x20, 0xa, 0x7, 0xe8, 0x4, 0x3ff, 0x2, 0x100000, 0x32b, 0xcd9f, 0xc24b, 0x120000, 0x7, 0x1, 0x9, 0x2, 0x6f, 0xa, 0x8, 0x4aa2, 0x6, 0x0, 0x2a9d, 0xfffffffd, 0x50d, 0x7f, 0x4, 0x5, 0x3, 0x0, 0x2000, 0x7, 0x10001, 0x8, 0x4, 0x5, 0x180, 0xffffb8b3, 0xffffffff, 0x8, 0x1, 0x10, 0x80, 0x1, 0x1, 0x7f, 0xfff, 0xd8ff, 0x7fffffff, 0x8c, 0x401, 0x4, 0xa, 0x2, 0x74f8, 0x9, 0x2, 0x0, 0x4, 0x8, 0x8, 0x7, 0x8, 0x7, 0xfff, 0x0, 0x9, 0x240, 0x9, 0xfffffffa, 0x400, 0x4, 0x9, 0xac17, 0x4, 0x0, 0x2, 0xfff, 0x1, 0xf669, 0xa720, 0x1, 0x2, 0x8, 0xfffffdd0, 0xffffff34, 0x9, 0x8001, 0x0, 0x1, 0x7fffffff, 0x0, 0x10, 0x6, 0x101, 0x200, 0x4, 0xdc, 0x5, 0x8, 0x9, 0xba, 0x4, 0xffffffff, 0x800, 0x676a, 0x0, 0xc9, 0x9, 0xf, 0x7fffffff, 0x8, 0x80000001, 0x2, 0x22, 0x1, 0x2, 0x1ff, 0x9, 0x4, 0x0, 0x7, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x6, 0xfff, 0x5ee6, 0x9, 0x33, 0xa, 0x30c9, 0x36, 0x10, 0x7, 0x7f, 0xb599, 0x0, 0x4, 0x3d, 0xa, 0x4, 0xff, 0x4, 0x9, 0xe6, 0x2, 0x3, 0x3, 0x3, 0x6e0bad88, 0x0, 0x5d2, 0x3, 0xfffffff9, 0x3, 0x9, 0x100, 0x4, 0x8, 0x7701, 0x3, 0x9, 0x8, 0xaa89, 0x2, 0x8fa, 0x2, 0x6, 0x5, 0x400, 0x7fff, 0x0, 0x6, 0x6, 0x5, 0x8, 0x0, 0x7ff, 0x8, 0xf6cf, 0x5, 0x8, 0x7ff, 0x0, 0xb, 0x335a, 0x401, 0x400, 0x40000, 0xf, 0x8, 0x57, 0x7, 0x3, 0x5, 0x1, 0x3e, 0x7fffffff, 0xb1f4, 0x8, 0x3f, 0xffffffff, 0x4, 0x1, 0x7, 0x2, 0xd65, 0x4a8, 0x4, 0x4, 0x40, 0x6, 0x5, 0x2, 0x7ff, 0x3, 0x4a7, 0x2, 0x0, 0xfffff3d5, 0x9, 0x1, 0x5, 0x3, 0x9, 0x1, 0xc, 0x8, 0x1, 0x6, 0x1, 0x3d3b, 0x800000, 0x6, 0x0, 0x6, 0x2, 0x3, 0x6, 0x5, 0xe6a5cfeb, 0x1, 0x9, 0x8, 0x4, 0x12a, 0xa, 0x8, 0x0, 0x2, 0x26, 0x3, 0x80000000, 0xf, 0x8000, 0x9, 0x3726, 0x3, 0x6, 0x6, 0x6, 0x3, 0xffff, 0x0, 0x1, 0x7fff, 0x8, 0x1, 0x2346f7b1, 0x2, 0x200, 0x4, 0x7f, 0x81, 0xfffff6b3, 0x401, 0x8, 0xdf6, 0x200, 0x7, 0x8, 0x10, 0xd4, 0x0, 0x3, 0x8, 0x5, 0xff, 0x0, 0x1, 0x8, 0x7f, 0x4, 0xfffffff9, 0xa46, 0x671, 0x6, 0x4, 0xc, 0x9, 0x1, 0x2, 0x40, 0x1, 0x554, 0x94, 0x9, 0x80000001, 0x8, 0x5, 0x4, 0x7, 0xffff, 0x9, 0x3, 0x8aa, 0x3, 0xffff8000, 0x0, 0x8, 0x10000, 0x100000, 0x5c51, 0xf, 0x9, 0x3, 0xffff8000, 0x9, 0x9, 0x9, 0x4, 0xb, 0xd32, 0x9cef, 0x0, 0xd0, 0x7, 0x9, 0x10001, 0x0, 0x329, 0x10, 0x1000, 0x9, 0xdffa, 0x2, 0x5, 0x9, 0x9, 0x2, 0x4, 0x3, 0x11, 0x8430, 0xf7, 0x9, 0xf6f, 0x4, 0xffff, 0x1000, 0x0, 0x7, 0x6a0b, 0x5, 0x5, 0x1, 0xb2e, 0x4, 0x7, 0x7, 0x3ff, 0x5a, 0x401, 0x7, 0x3, 0x0, 0x6, 0xfffffffa, 0xfa]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x5, 0x0, 0x6, 0x5, 0xfffffffc, 0xffffff80, 0x5, 0x7, 0x76bd, 0x5b70, 0x53c, 0x3, 0x81, 0x8001, 0x4, 0xd, 0x17e420, 0x0, 0xa7, 0xfffffff9, 0x5, 0x0, 0x2, 0x209, 0x9, 0x9, 0x3, 0x5, 0x100, 0xa0aa, 0x36400, 0x3e, 0x7, 0x1, 0xfffffffa, 0x1000, 0x101, 0x4, 0x10, 0x4, 0x2, 0xc, 0xffffffff, 0x9, 0x8, 0x3, 0x9, 0x1, 0x7, 0x3, 0x4506, 0x8000, 0xfffff801, 0x7, 0x9, 0x70ac, 0x7f, 0x80000000, 0x7fffffff, 0xffffff7f, 0xd70, 0xfff, 0xdda, 0x9, 0x9, 0x5, 0x1, 0x8001, 0x1000, 0x395, 0x82ee, 0x6, 0x3, 0x81, 0x3ff, 0x81, 0x9, 0x3, 0x10000, 0x300, 0xc, 0x7, 0x7d5, 0x2, 0x5, 0x1000, 0x401, 0x400, 0x9, 0x0, 0x1, 0x80000001, 0x10000000, 0x9, 0xffffffed, 0x3, 0x82f6, 0xbd, 0x8, 0x6, 0x5, 0x3ff, 0x80000001, 0xb0, 0xb49e, 0x3a, 0xfffff7f8, 0x10, 0x6, 0x4, 0x9, 0x5, 0x80000000, 0x5, 0x1ff, 0x0, 0x0, 0xa, 0xe, 0x10, 0xa6, 0x200, 0x8, 0x0, 0x4, 0x8, 0x7, 0x4, 0x4, 0x0, 0x8001, 0x5, 0x5, 0x1, 0x1, 0x9, 0xffff, 0x200, 0x2, 0xffffffff, 0xfffffffe, 0x10001, 0x3, 0x48000000, 0x5, 0x3, 0x2000, 0x9, 0x6, 0x0, 0xff, 0x7, 0x4, 0x4, 0x4, 0xf968, 0x3, 0x10001, 0xe5a, 0x4, 0x2, 0x4, 0xc, 0x3, 0x3, 0x8000, 0x3ff, 0x7f, 0x3, 0x3ff, 0x2, 0x2, 0x200, 0x9, 0x5472, 0x250e, 0xf, 0x37, 0x300, 0x0, 0x1, 0xff, 0xb52d, 0x0, 0x10000, 0xffffffff, 0x1, 0x15d7, 0xb, 0xe3c8, 0x6, 0x1, 0xb4c7, 0x8f1, 0x1000, 0x1ff, 0x7, 0x838, 0x3, 0x9, 0xbd30, 0x0, 0x4, 0x8, 0x117, 0x4ff, 0xd8c, 0xf, 0x8, 0x7fff, 0xe0000000, 0x1, 0x6, 0xfffffbfd, 0x2, 0xfffff801, 0x0, 0xbafa, 0x0, 0x7, 0x1, 0x3, 0x8, 0x0, 0x705, 0x6, 0x2, 0x9, 0x85b, 0x4, 0x0, 0x1, 0x6, 0x468e, 0xd76, 0x5ee3, 0xb79, 0xfffffffa, 0xb, 0x73a3, 0x1, 0xffff, 0xffffff81, 0x3ff, 0x4, 0x80, 0x1, 0xfff, 0x3, 0x2, 0x7f, 0xffffffff, 0x3, 0x6, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x118, 0x859e, 0x9, 0x2, 0xfffffffd, 0x2, 0x3, 0x401, 0x2, 0x6, 0x2, 0x3, 0x8, 0x8001, 0xffffff45, 0x3, 0x7, 0x5, 0x151f, 0x7, 0xc0000000, 0x7, 0x4999, 0xd9, 0xc, 0xcb84, 0xffffffff, 0x1, 0x9, 0x65, 0x3ff, 0xb3d, 0x200, 0x7f, 0x80000001, 0x5, 0x918a, 0x3, 0x82e8, 0x1, 0x8c8, 0x2, 0x6, 0x2, 0x4, 0x7ff, 0x9, 0x401, 0x9, 0x3, 0x9, 0x626f264, 0x80000000, 0xfffffff8, 0x903, 0x8, 0x6, 0x8, 0x401, 0x4, 0x5, 0x4, 0x3, 0xd, 0x6, 0xb85, 0x3, 0xff8, 0x0, 0x100, 0x100, 0x1, 0x1, 0x9, 0xe763, 0x7, 0x1, 0x3, 0xce, 0x93, 0x2, 0x6, 0x7, 0x7, 0x3, 0x80, 0xdb, 0x7, 0x5, 0x583b, 0x8, 0x3, 0x0, 0x1, 0xf7ab, 0x7, 0x10001, 0x2, 0xe, 0x7, 0xb, 0x0, 0x1a4, 0x9, 0x1, 0x9, 0x34de, 0x80000000, 0x594, 0xff, 0xb, 0xc, 0xf, 0x0, 0x0, 0x0, 0x65, 0xfffeffff, 0x7, 0x9, 0x7, 0x4, 0x468b, 0x9, 0x5, 0x400, 0x6, 0x7, 0x2, 0x171f, 0x101, 0x80000000, 0x5, 0x6, 0xd, 0x80000001, 0x7, 0xed16, 0x10, 0x8, 0x0, 0x69fa, 0xe, 0x2, 0x5, 0x7fffffff, 0x3ff, 0x8001, 0x8, 0x2, 0x80000000, 0x0, 0x0, 0x7, 0x9, 0x80000001, 0x101, 0xf, 0x15c, 0x5, 0x3ff, 0xefd, 0x0, 0x2400, 0x6, 0xff, 0x0, 0x1, 0x1, 0x3, 0xb, 0x5c9, 0x0, 0xfffffffe, 0x10001, 0x5, 0x8001, 0x80, 0x7, 0x4, 0x2, 0xae8, 0x7, 0x3, 0x10000, 0x5, 0x10001, 0xfff, 0x4, 0x6307, 0x1, 0xffff8000, 0x3, 0xfffffffe, 0x2e, 0x3, 0xd, 0x7, 0xdbe66d3, 0x2, 0xb6, 0x42ec, 0x3, 0x0, 0x1, 0x8, 0x2, 0xddc, 0x0, 0xfdc, 0xffffff81, 0x7, 0x1ff, 0xf, 0x3, 0xab91c558, 0xfffffff8, 0x80, 0x6, 0x6, 0x1, 0x0, 0x5ca985c6, 0x9d, 0x9, 0xfffffffd, 0x6e4, 0x1, 0x5, 0x7, 0xfffffffb, 0xb, 0x9, 0x0, 0xb, 0x400, 0x8, 0x2, 0x9, 0x9, 0x7, 0x3, 0x2, 0x9e29, 0x1, 0x3, 0x9, 0x8, 0x0, 0x1000, 0xf, 0x2, 0x7, 0x9, 0x0, 0x6]}]}, @TCA_BASIC_ACT={0x220, 0x3, [@m_gact={0x7c, 0x8, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x36c, 0x6, 0x3}}]}, {0x38, 0x6, "7832b9a2eda626a6650c7f7bf7993c0cfd6edaf94893a9b3b7ca98767833bed00df787cea370578cee15a4386f941f02f023364d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x9c, 0x17, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}]}, {0x62, 0x6, "12df07a2e7cc25fd53507dfe5e6285e78142a5e266953d424028997fe868e244137506ffc2829ac86562d77a54a288b9c9e313c755409a6983dc9817f3f389b86c80b7dc4087bf9984a120d58b5055cd30e858bf907bbd687989b1c4ddf7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0x104, 0xa, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x9, 0x5, 0x6, 0x4}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xa0, 0xd5f, 0x5, 0x2, 0x100}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9b03}]}, {0x97, 0x6, "6919a3d38a0ac47b5c8749728f0473c0f4bfad30600622f0d547dcced079e340c1263e68ab71b7e17881e9cae546cf550f27d22aebc18f4c119ea7f66ac75a698ffed3ce65312ea8bab530f80cfefb479766827f044170cccdc17fe7c93e1fe4b6913c1cb36b01a766a119e1a06fd93224e33a37839d959d5d64ad03bc527f6f76fcdbd3028a68fb82001a99011c102b9aabdb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}]}, @TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x78b4, 0x8, 0xefba, 0x0, 0x9, 0x4, 0x7db4, 0x3, 0x8, 0x400, 0xfffffffc, 0x2, 0x0, 0x4, 0x7, 0x4, 0xa, 0xffff8000, 0x2, 0x4, 0x6, 0x9, 0x5, 0x800, 0x7, 0xfffff723, 0x8, 0x9f22, 0x4, 0x6, 0x4, 0x101, 0xc1, 0x4, 0x7, 0xfffffffc, 0x7, 0x9, 0xfd, 0xfffff320, 0x1, 0xfffffffb, 0x2, 0x7, 0x1, 0x8c, 0x3, 0x3db715d4, 0x6, 0x200, 0x1, 0x3, 0x4, 0x3, 0x9, 0xe, 0x3ff, 0x200, 0x2, 0x5, 0x600, 0x8, 0x27ac, 0x8, 0xff, 0x6, 0x6, 0x1, 0x5, 0x4, 0x2, 0x7, 0x1, 0x5, 0x7fffffff, 0x40, 0x1, 0x736a, 0x5, 0x6, 0x9, 0x4, 0x4, 0x401, 0xfffffffe, 0x8937, 0x4aa, 0xfffffffa, 0x7ff, 0xf, 0x8, 0x8, 0xfffffffe, 0xcd, 0xfda0, 0x8, 0x81, 0x7f, 0x9, 0x400, 0x7fffffff, 0x7f, 0x2, 0x5, 0xfffffffd, 0x68, 0x9, 0x86, 0x4, 0x9, 0x6, 0x7, 0x6, 0x401, 0x7, 0x4, 0xfe, 0x2, 0x6f75, 0x101, 0x0, 0x2, 0x8f, 0xa, 0xd, 0xfffffeff, 0x0, 0x3, 0x1, 0x8, 0x2, 0x6, 0x9, 0x7, 0x6, 0x3f700, 0x400, 0x0, 0x7f, 0x1, 0xf, 0xac, 0x6, 0x900000, 0x1, 0x0, 0x6, 0x6e9, 0x9, 0xf38461ea, 0x3, 0x5, 0x8001, 0x8000, 0x2, 0x0, 0x95, 0x8, 0xd997, 0x2, 0x3, 0x8001, 0xd, 0x2, 0x8, 0x101, 0xd, 0x0, 0x6, 0x2, 0x2562, 0x9, 0x8, 0xff, 0x4, 0x8a85, 0x0, 0x40, 0x9, 0xb842, 0xc, 0x68e9908b, 0x3, 0x3ff, 0x200000, 0x8, 0x9, 0x0, 0x5, 0x80000001, 0x4, 0x80000001, 0x6, 0x0, 0x5689, 0x9, 0x100, 0x800, 0x3ff, 0x44, 0x4, 0x3ff, 0x1, 0x8001, 0x5, 0x0, 0xf47, 0x5, 0x6, 0x7fffffff, 0x1, 0x6, 0xfffffff9, 0x80000001, 0x7, 0x9, 0x7ff, 0x4, 0x10000, 0x3, 0x3, 0x3, 0x0, 0xf, 0x5, 0x3, 0x9, 0x6c, 0xf, 0xffffffff, 0x9, 0x38e, 0x200, 0x7, 0xb4, 0xfffffff8, 0x2, 0x6d0, 0xcf3c, 0x4, 0xc2e6, 0x8, 0x7, 0x6, 0x1ff, 0x7ff, 0x70a5, 0x7, 0xd5, 0x2, 0x10000, 0x8000, 0x8f, 0x7, 0x1, 0x9]}]}, @TCA_BASIC_ACT={0x420, 0x3, [@m_connmark={0xb8, 0x14, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fffffff, 0x7, 0x3, 0x3, 0x1}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffff615, 0x9, 0x2, 0x40, 0x3}, 0x1d}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffff001, 0x1, 0x5, 0x5, 0x9}, 0x9}}]}, {0x32, 0x6, "8cfd4ee1204c8f179720a1ab116add9419eae1ef928d55f7585db40cdbf6227b71b74ff16043a4e94ae51a5eea5e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x18c, 0x16, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x8, 0x5, 0x5, 0x80000000}, @multicast1, @loopback, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x6a80, 0x3, 0x800, 0xef22}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x6, 0x20000000, 0x1, 0x8}, @private=0xa010100, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x6, 0x2, 0x3cf8}, @multicast2, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x800, 0x10000000, 0x9, 0x8}, @private=0xa010102, @multicast1, 0xff, 0x1}}]}, {0x9a, 0x6, "f195155c74dfe45024025241e4cf6cd66625f5158d2f12ffd7b6819bc32f056c7745537a625858c7777159070102477a5fe47c413349d7ef7dffdd1ba9a00ed3af345d10bbc262ef80e88b0eec83664fb2173e4e72a59637b17ad5136ce93fd7ae0a04fd2a09bd7214e2bed826d7388b511b30b8b0e550a4747836382e86da50358750db3314eca3727602d4840baec409e906002bac"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_xt={0x60, 0x3, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_sample={0x94, 0x12, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}]}, {0x5e, 0x6, "b0b57b834d4f297d73fec95044bfe51c94bd0adcea3c0a29300849165213e34918e99f07045475438703504d7040a9ce45814e404e2b59efbde306655d8e2dd7c5cf0ba16a31af002af1fc8983abf90d96563bb54d8b1cccc898"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0xe4, 0xb, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xcb}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010101}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0x66, 0x6, "201c7fd3901078df699278b001d680037f556cb7af2171ae99601f50dc3429b0b95c8ce8226cc078a07084566e9d86bbd6ca72dce7eaaa29d61fbe55a1db7b269c808ba0afc693c0219e5e72c7f3c8993decf149e924e119ee284562fe70bcce1c38"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_BASIC_ACT={0x518, 0x3, [@m_mirred={0x104, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x528c, 0x73, 0x1, 0x7, 0x3}, 0x4}}]}, {0xb5, 0x6, "dbdd15b2538ebef7a3f16a0872124b9c9854ce3745d24f53a38cdb4190f68dedcdafb3d0564a05c06eb2ce0abb9150ca68cf117db4541171f3ed6db8af43db28baa67fab54e5b22290d7ca2deab723657523c127087b2f626359d0e2a458ac2adb4477194a479c1b97ca062ef9c2548e48c392139143da159190052a440cfec9015cec9d776559930938ce4ac044e18bd512f7f44c363d16619e11fdf10873ee9659563cf6247f22ce1ef60778d6a9b95f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0xd4, 0xd, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x20cb, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0xc095, 0x0, 0x4, 0xfffffff7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2085, 0xffffffffffffffff}}]}, {0x75, 0x6, "47c04b53fd8e7bbce3333bc7210c86fa69ce18f81b2af6df1e61a60e279e85a448a02acfdefb5594c5b542175f76b75307f0b143eea556fd3fe48706075a55a308b0648d9d0c139f890c6bd19fc6a913729319d62282eb04ce0bb406004f88229c2e159570845d125697323a4a81bfbcd2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}, @m_vlan={0x11c, 0x15, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x328, 0x6, 0x7, 0x9973}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x287}]}, {0xc2, 0x6, "b23abb0dea856ff90d78671ac5808071b1adf99b6a576e0fd74ac761d3072901dea8de4de011ef9f4c45011699e7fc695db411c6ce804582a9fb416fb52f0f22f52ec8a05602408eded2e813866a1cca5ffbac8fd06954b10770a2caf56bed34aff7f95bb9b601f1f39593b2bf4bdaa9a847948ba51e9499016d38c03b28eacb698225612491b3d2b56d9d1d32ba5561f9168a9bcd45b46085ccfc16de8e2f33e14daa463420781b427797c29e26d972921d6f89b9aa6db8c3c8a58198f8"}, {0xc}, {0xc, 0x8, {0x0, 0xbd9374113938fd5b}}}}, @m_ife={0x154, 0x18, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0xc4, 0x4, 0x3, 0x5}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}]}, {0xda, 0x6, "4ce30d478e8d61f80220561abea144d8f414ea8efa0d4d6586f8cd7e975715e26a68fd7446ffd1a5402cf74bf06892e8893499507c35a800e147afe534389b1d7d4f8893f11713ab44d040f9a99a415979c99b49263b0f14755446833bd1feed35da77765a27ff9dc9f87b7c7a4382fc27c5be0c41cf3477215fa287a66b72001727916d362df87a1714217aa941efce8995078a44786a2be7e94f0fc424db7fa05eeccf4d470c8c6166b38e400b932f138cdfdabcb0c0d53c8e377532a439606a3605a7ae12e685acd190dad29f4c4bb3789a7d7916"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_ctinfo={0xcc, 0xc, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x6, 0x1, 0x1, 0xfffff800}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8b}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xe}]}, {0x6e, 0x6, "8c3d9554ff022f6069ceb7434bbea45e30f06aa514fdd8f120bddd6665d92b9a16619b9ff5562911c2ce7aa2b9c80604806288f57a342cb7a337cb6a0ceed9bee9a3a224c30fcf281abb5fc07a7a8f6fa00b2b0b09cbcd9692cbf946dad44b2a356d751b9133dcbd143e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1}}]}, 0x2414}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e000100dec0b05db506403ba1cc3d5c8c26bd7000fedbdf2caec6ea347a043b5d25040000", @ANYRES32=0x0, @ANYBLOB="000004000a0005000800168004000180"], 0x28}, 0x1, 0x0, 0x0, 0x4040840}, 0x20000800) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000000)=0x10000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000100)) (async, rerun: 32) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r7, 0x7b1, &(0x7f0000000240)={0x0, 0x7ffffffe, 0x38, 0x3}) (async, rerun: 32) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd7, 0x0, 0x6, 0x200002000001, 0x0, 0x2004c8, 0x4000000000040000, 0x0, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000, 0x4000000000, 0x7fe0000], 0x54000}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r8 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, 0x0) (async) ioctl$VIDIOC_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0xe0, 0x1, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xffff, 0x2, 0x8, 0x1000008e, 0x3, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84d}, 0x3, 0xed}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 7.466879617s ago: executing program 5 (id=5008): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x8}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') timer_create(0x0, 0x0, &(0x7f0000bbdffc)) preadv(r5, &(0x7f0000002380)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x140d, 0x100, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x40811) read$FUSE(r4, &(0x7f00000023c0)={0x2020}, 0x2020) r6 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000280)="e0714e0867ba92f2261cc4951ffb4772591272ac8bfed613b3477476e253aec93deb5b6b5fbbf96a1c278c3af7e49916adb0fbb04d7305ae0c1af767d94098a8c1ee1ed3ada06b321b37c3fb6ce92704eb7a5ec1017a7738324e21d0674363c531686f8dd9a9ec6a5ff4a2c1718db89c19b65df51efdaae3cd67dc67ce69bdf547b28002df34881197dc83a5bef772b59bc25c258db95899c31c0b0ebd563a6e29725486d30272eb7f6ff200bf94c4a1392bea31707c6454deeae688", 0xbc, 0xfffffffffffffffa) keyctl$instantiate(0xc, r6, &(0x7f0000000380)=ANY=[@ANYBLOB="75706461746520656372799e0e667320707275737465643a2001000000000000000000004d3f000100e8b09fc84af7efe98f1be4ccd042f4deeb7fcf6690851ba56176024a174d0fbbd7ee493850b3f1d14f86438924e644b2ed5c343e7fe3a2cc4574ebac63c02028364d48b6cbeb6ed25b4065998191525847b43c19d1fb64fc8d74afcd9e84d705e98c3d17e2472b3e7efbf5ac8af04edb9528f65eb474b4e851c17b94ebb520d433d421fafd"], 0x29, 0xfffffffffffffffc) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newroute={0x60, 0x18, 0x401, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x1}, [@RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2}}, @RTA_OIF={0x8, 0x4, 0x2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x1c, 0x1, {0x0, 0x2, 0x1, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}]}, 0x60}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newroute={0x38, 0x18, 0x401, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x1}, [@RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2}}, @RTA_OIF={0x8, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) 7.272895914s ago: executing program 5 (id=5009): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x2c}}, 0xc00) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000010000100297000fadbdf250000000000", @ANYRES32=r1, @ANYBLOB="1380000023b205003c00128009000100626f6e64000000002c0002800800070081000000080003"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0xc094) 6.77043703s ago: executing program 5 (id=5010): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x9, 0x58, 0xb8, 0x10, 0x1410, 0x7004, 0x6a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0x4, "", [{{0x9, 0x4, 0xe8, 0x5d, 0x2, 0x42, 0x10, 0xab, 0x2, [], [{{0x9, 0x5, 0xe, 0x2, 0x40, 0x8, 0x1}}, {{0x9, 0x5, 0x83, 0x2, 0x200, 0x9, 0x1, 0x6}}]}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200000000000109022400010000600009040180020300000009210604000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000c40)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @mcast1, 0x5}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0x7000000}, 0xf401}], 0x8000000000000a8, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00030d0000000d03e2b15b4b528b5eea0000"], 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_usb_connect$uac3(0x3, 0xc3, &(0x7f0000000e80)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x3, 0x1, 0x2, 0x60, 0x80, {0x8, 0xb, 0x0, 0x0, 0x1, 0x21, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x1, 0x5, 0x5, "b9d4ff", "b5"}, @as_header={0x17, 0x24, 0x1, 0x1, 0x5, 0x9, 0x4, 0xbd, 0x9, 0x4, 0x9}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x36}]}, {{0x9, 0x5, 0x1, 0x9, 0x270, 0x7, 0x1, 0x94, {0xa, 0x25, 0x25, 0x7, 0x7, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xcc18, 0xa, 0x7f, 0x8}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5, 0x8db, 0x4, "1b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x74, 0xfc, 0x0, {0xa, 0x25, 0x25, 0x6, 0x40, 0x7}}}}}}}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x201, 0x7f, 0x98, 0x3, 0xff, 0x24}, 0xe6, &(0x7f0000000fc0)={0x5, 0xf, 0xe6, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x6, 0xf, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x21, "46c4aa207d81569fd1ff070dd79d7474"}, @ptm_cap={0x3}, @generic={0xb6, 0x10, 0xa, "9dc11cdeb274cf9350033854093d8adc302f3449565eab284725ed032e87f55d682c432dc34577b2ac2055319f1133339621cdb227a5a6cfa1b4bd59e24fd3209828f73126dcffc1a2576d150c395a5a31e8abf3c12a2d46a0b528239392f1c1dd2d5426edefd88dc2a012ae59ba1a039fa5f77da66162b787d52e1dbd0d7f5bab6db00f2f6da82a62389453c7a65d2bbab5f01f06157b684118ed70f1c02954a2ccca9fc1252ccf8b7fbf7b60565f7251b9f8"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x1, 0x8, 0x1}]}, 0x1, [{0xc9, &(0x7f00000010c0)=@string={0xc9, 0x3, "17022b53b31df995265229c81ad9369e28f97be1cb6f87216cb994d97adaa76720240d87d8668b56a74f2c566f44ca5f46aeae678ed1facf9d8c26dcefaaea426a7f88b47b13f7400aabb829b65ded65fd47ac6749e4c46403783a5c1c4a431ddfcaa9c42d5801d358e4ef274521e2a42ec5a97cdc5405c746f1c9d93519596b318a3812bd4b588d02079d73b885992760c117a9e7506b3a636a62ccf28e6a648ee592385380a07ba90f2cf76ccfa80bd9c2d159d984c95647577cd6fd427d27ebedcdcc2488d7"}}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x200}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) read$FUSE(r3, &(0x7f0000003380)={0x2020}, 0x2020) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xc, 0x0, 0xfd, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x1, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x2, 0x1d, 0xf}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0xc, 0x7, 0x4}}]}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x8, 0x47, 0x1, 0x40, 0x2}, 0x10, &(0x7f0000000300)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x0, 0x9c, 0xff, 0x1, 0xa, 0x14}]}, 0x9, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40f}}, {0xdc, &(0x7f0000000480)=@string={0xdc, 0x3, "be5c2b401545688be0e04eaf2142f87d5f3bb3d1c1add7c9d771c007a15500579a8aeb7d5eaf35678f24165579c9ce9f38db2e1cd0ebb0a3a083262b5c6f4db2aca3c1830db8753aec5c179e732983bb0bdf39090308b4a219b0347d57de0be9bdaa5c6fa54755c2b001d2cf6997587d9c0dce2b36de756fbd79b9a1a824f7b30b6e2a62e02875242eac7b2abe8f01acf44e8b2e0373b7787b4206721ea0bae4d03959a56d22e98ef0c46e91522ff51e54807711c2c5b3e88b798b64657ee482a00d8fe6b4267ea946684e536e184811d50811b2223d5cb1654f"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1c09}}, {0x32, &(0x7f00000014c0)=ANY=[@ANYBLOB="320354483a69eb515b802b9193f50976382afae375e7446ca42750dd17641f271f5f1d0d7b5789447fd19b96c1c82ef87d91f7f66969cc09d5cb17024cfca8bfd2b0c8fc3ff041c1c9746a2f3a69ab15e4100b09fe69aaec6c015e40a546e122d116b99a7e9af0e35b604010395a6a8f7e1365f0276f411a875720dd49c2f07b9c2c74487465bff60173a5404654eec186d43f4c1257a474ce"]}, {0x102, &(0x7f0000001200)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x41d}}, {0x57, &(0x7f00000007c0)=@string={0x57, 0x3, "fbd11267f51c5292dcbec59708d87201ceb50e0b56d1eac0e690447b2c1fa94a473b637ace2908c1b94cc60d3b0617209fc5d7f4527c9c4e595f46a39f9984af2d3afbcb875f9dc4b1a33de10c5b43956bc7484b82"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2009}}, {0x99, &(0x7f0000000940)=@string={0x99, 0x3, "bd66a5ee06e01a052024b39c5d55ecaf9cbac8e6602e0edaa20bcdaa5c71e3a81a9558ce4b50a0c5cdde67580f1c86e9e4c207820a89ec16165750e3d20b6af1f3c4ad2acd0e06e485d01e41f759a7b322b88054e45ae636e61364abdcebab8c818cf97ea14ee64fbf50b60d63ef6f20ef1d9cfd93a0b459ab74366e6360ab80a7622518c5379d3796694a5bf1ffb1b0f350ae6293c11e"}}]}) syz_usb_control_io$printer(r4, &(0x7f0000000bc0)={0xc, &(0x7f0000000a80)={0x40, 0x24, 0x20, {0x20, 0x30, "46ef2bf3235ca4a733cc88c03fbff3c453e35f1a986072fcec4b13bd40be"}}, &(0x7f0000000ac0)={0x0, 0x3, 0xe3, @string={0xe3, 0x3, "0d49cc588479640c4f0696c98ce7e5a8355aeeb3bae122d38f698c69f965f8d36f265aa563e8363d04802a784ef92ffb1becf619ee0a0411179e0e32505a9846b8c9e724648b91dccc7c4fd77edac65bc15508f81dc61ca90fd6523d871d358c3a5e1dd8f6a5c35b4103c91b08d45086f9ca0056223d6774a4f318dcda85e9a212c829be726ad570f080f6925d113584c0dbdb47c0b19f347a63032d9f3566d3c425fc8094923e1bbbfeff4b9eaf49d4489904bbe57e71e537fd8c06b52ca0c801586921b8d15d098dac7c0adcbeb95e485cedd9d0536ebcddeb4b633810539550"}}}, &(0x7f0000000e40)={0x1c, &(0x7f0000001380)={0x20, 0xe, 0x100, "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"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000d80)={0x20, 0x0, 0x31, {0x2f, "5d051072d36c4a5ce666fc2b18949101dafa00b0b8ef0f0f9150a75216c42132769dbb3080fc6fce14a63c65217932"}}, &(0x7f0000000c00)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000e00)={0x20, 0x0, 0x1, 0xf0}}) syz_ublk_setup_io_uring(0x3e5f, &(0x7f0000000340)={0x0, 0xbfb, 0x10, 0x1, 0x3e8}, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000840)) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000001340)={0x25000, 0x8000000, 0x6, 0xa6}) r5 = syz_io_uring_setup(0xf51, &(0x7f0000000580)={0x0, 0xbbda, 0x10000, 0x2}, &(0x7f0000000240), &(0x7f0000000180), &(0x7f0000000000)) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b01fb03010902240001fe00c0000904eb02027f9c1f000905e60220000200020905", @ANYRES16], 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x21, &(0x7f0000000440), 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)={0xb8, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@generic="fd6f6c5548d1d3f779c022913be1e9ad8b96079bcbe7de1ae8c6e93336b250ee812b58995c9b336719093fe0d0cc5091ff0322f5ad06bfbdd9123b272ecc5e9b30020638c7bf964779a8a7cecb015e4f20295ac211b44c3672d81a3bc131b3cb346a38bbf7bc51fd4f23c466c269b7d79e8afabb094ce6c81b625c3d81c585816418fee97f293b091ef2a07f88abff33474e41a7417d8edc88ebbbd1b6d14e3df5e2ac"]}, 0xb8}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) 6.37441248s ago: executing program 2 (id=5011): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) (async, rerun: 64) listen(r1, 0x10040) (async, rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x0, 0x0, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x766861be, 0x0, 0x80000, 0x100000000, 0xca8, 0x1}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000028fffe00009506907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6f0400ca90781000"], 0x0) (async) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) r4 = timerfd_create(0x4, 0x80000) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r4, 0x3, &(0x7f0000000040)={{}, {r5, r6+60000000}}, &(0x7f0000000080)) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000006c0)=ANY=[@ANYBLOB="e00000027f000001000000e902010000ac141437"], 0x14) 6.36926425s ago: executing program 4 (id=5012): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x102, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x78}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.134963558s ago: executing program 4 (id=5013): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0300010000000014000500fe8000000000000000000000000000bb080004", @ANYRES32=0x2, @ANYBLOB], 0x60}}, 0x0) 5.902433825s ago: executing program 2 (id=5014): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000008ac0530024000010203010902240001010480090904000002030102"], 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x5f2}, &(0x7f0000000040)=0x8) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) syz_usb_connect$uac3(0x4, 0x11d, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x3, 0xb, 0xa2, 0x8, 0xc0}, 0x46, &(0x7f0000000240)={0x5, 0xf, 0x46, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x8, 0x2}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "e75505d99843f10af398164fb6ff72b5"}, @ssp_cap={0x20, 0x10, 0xa, 0xf8, 0x5, 0x0, 0x0, 0xe, [0x0, 0x3f30, 0xff0000, 0xff0f, 0x7]}]}, 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x403}}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r1, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000200)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x0, 0x6e6, 0x4, 0xaf, 0x98, 0x7}}, &(0x7f00000002c0), 0x600) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x20006, 0x2) r3 = io_uring_setup(0xc01, &(0x7f0000000000)={0x0, 0xc08f, 0x40, 0x4, 0x318}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) io_uring_register$IORING_REGISTER_CLOCK(r3, 0x1d, &(0x7f0000002c40)={0x5}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x19, 0x2, 0x0, "bc57499e007105bf0000000100100000e403000000000000000040002100", 0x3132564e}) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r0, 0x8, 0x3, 0x6}, 0x10) 5.802423939s ago: executing program 4 (id=5015): r0 = io_uring_setup(0x489b, &(0x7f00000003c0)={0x0, 0x80815f, 0x402, 0x3}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00715f2abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x2000c830}, 0x0) listen(r1, 0x4) accept4(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x4}, 0x1c) shutdown(r4, 0x1) sendmmsg$inet6(r4, &(0x7f0000000600)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x6, @remote, 0x5}, 0x1c, 0x0}}], 0x1, 0x20000000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000000c0)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.592817943s ago: executing program 0 (id=5016): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) setpriority(0x2, 0x0, 0x8000000000000000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x190, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x15c, 0x3, 0x0, 0x1, [{0x158, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6d57}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x128, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x44, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x67}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x24}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x95}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x58, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xe6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x4}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xc2}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r5, r5, &(0x7f0000000000)=0x7, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) 5.319764634s ago: executing program 3 (id=5017): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) setpriority(0x2, 0x0, 0x8000000000000000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x190, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x15c, 0x3, 0x0, 0x1, [{0x158, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6d57}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x128, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x44, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x67}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x24}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x95}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x58, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xe6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x4}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xc2}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r5, r5, &(0x7f0000000000)=0x7, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) 4.570460829s ago: executing program 4 (id=5018): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-', 0x1}], 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000500)={0x0, 0x1, 0x1}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, &(0x7f00000005c0)) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000140)=0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0x4, 0xffffffff, 0x1000002, 0x5, 0x7, "d0993d0554caddbd3a00", 0x5, 0x9}) write(r2, &(0x7f0000000180)="a788b9a48d1de6603c475fe3cfa8a27d7c8425073f756d1cefddc08a6dd4c4c0a5323f8f93d65682bc4974397001a396624e1bd23560952dee5736311e3d06e60f168e59f8a3125595ff42643b55d9addf2ea3fa011611a8c539558baf2581e9a8b722f2108f58cb3d552779ea51ba9462992a9156243c50c162d06280d116e26d280aacfb494b66c66bb4df665381440690afc4854f4a19db6357a3e57802de79c221ae7c5171faa19b3dc84934b452b1c81e98bf2eaeedca4e6cce792c6e01c592688acaefe150f0ffd163d3d54d4318b5df03be5916dd0fc3cbb297cc1cda81fbc3cc8c552216b48289eb4065a84e76d035c469ed7f879f1d522715f615d3d9b4e7b270b25837894d760981", 0x10d) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = fanotify_init(0x200, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f00000004c0)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0xf, &(0x7f0000000300)={0x1, 0x6, 0xfffffffe}) r5 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0xffffffff, @local, 0x9}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) 3.403172335s ago: executing program 4 (id=5019): bind$inet(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c29ebab028deda501009bdeffafde2500", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x10, 0x117, 0x3, 0x1}], 0x4}], 0x1, 0x40800) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r8, 0x6, 0x1c, &(0x7f0000000200)="50ea07831d762ad4bddc5159d1fadfe83dbcf739f687304ada7d8951b59f73e6871806b3e9b158e581ee0a538dbd012d55a43dedb987cc042be96d6671ad9a17b227621ac561b78675d7f2773964479c2a705f0710edc93f5fb7f951ea24988154d0fc1b199bbd89bf563d69ddae2d8b5d80e3a67f4058a6c1a90d4768c815a8e4bd158e0f7c2d17cd8b491d01fa6140783dbec02c2ae1626794e8568a4b8b1b357146d6662c12f9ffb462b610a837de78ac023bf24525eb411dfa89c86aced984e260648b9d3e9556139882d473f2b0e64ae395e47db98fb31a789342bd90b6a399fe0dce50aa68175bb84d", 0xec) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x4) write(r11, &(0x7f0000000040)="2700000014000707030e0000120f0a0011600100f5fe009d2fb112ff000000008a151f75080039", 0x27) sendfile(r7, r9, 0x0, 0x20000023896) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0) 3.366396172s ago: executing program 2 (id=5020): unshare(0xa020480) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000840)=[{&(0x7f00000006c0)="62043c", 0x3}], 0x1}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x1}}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x5}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r5, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x21, 0x0, 0x80000000, 0x0, 0x20410, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r6}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x1, 0x80, 0x9, 0x9bfb, {{0x2e, 0x4, 0x2, 0x9, 0xb8, 0x66, 0x0, 0xfb, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@ssrr={0x89, 0x1b, 0x45, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010101, @private=0xa010102, @broadcast, @broadcast]}, @cipso={0x86, 0x28, 0x2, [{0x1, 0x5, "0f6070"}, {0x1, 0x5, '.?\a'}, {0x5, 0xa, "27cd4f41801f73e3"}, {0x5, 0x3, "ff"}, {0x5, 0xb, "8778932bdacbdf6015"}]}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x34, 0x93, 0x3, 0x5, [{@private=0xa010101, 0x4}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x4}, {@local, 0x7}, {@multicast1, 0x609929f6}, {@private=0xa010101, 0x5}]}, @lsrr={0x83, 0x27, 0xc2, [@local, @broadcast, @private=0xa010102, @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0xca, 0x1, 0x10, @loopback, @mcast1, 0x7, 0x1, 0x7ff, 0x9}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYRES8=r6], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r10, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004004}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_attach_bpf(r9, 0x1, 0x34, &(0x7f00000000c0)=r8, 0x4) listen(r9, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000000600)) 3.084889757s ago: executing program 5 (id=5021): r0 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r0, &(0x7f0000000180)='q', 0x1, 0x100004) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x93) write$cgroup_int(r2, &(0x7f0000000300)=0x4000000000, 0x12) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendfile(r3, r0, 0x0, 0xd39a) 2.606552264s ago: executing program 5 (id=5022): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0x2, 0x0, 0x1}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x4, 0x4, 0x8, 0x0, r0}, 0x48) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000003840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20006, 0xa68d7c5193c827fc, 0xffbc, 0x6, 0x1d46, 0x32, 0x0, 0x0, 0x4, 0x9}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000001500)=[{&(0x7f00000021c0)="bcc8", 0x2}], 0x1) (fail_nth: 1) 2.593431032s ago: executing program 2 (id=5023): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x9, 0x58, 0xb8, 0x10, 0x1410, 0x7004, 0x6a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0x4, "", [{{0x9, 0x4, 0xe8, 0x5d, 0x2, 0x42, 0x10, 0xab, 0x2, [], [{{0x9, 0x5, 0xe, 0x2, 0x40, 0x8, 0x1}}, {{0x9, 0x5, 0x83, 0x2, 0x200, 0x9, 0x1, 0x6}}]}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200000000000109022400010000600009040180020300000009210604000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000c40)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @mcast1, 0x5}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0x7000000}, 0xf401}], 0x8000000000000a8, 0x0) syz_usb_control_io(r1, &(0x7f0000000780)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00030d0000000d03e2b15b4b528b5eea0000"], 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_usb_connect$uac3(0x3, 0xc3, &(0x7f0000000e80)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x3, 0x1, 0x2, 0x60, 0x80, {0x8, 0xb, 0x0, 0x0, 0x1, 0x21, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x1, 0x5, 0x5, "b9d4ff", "b5"}, @as_header={0x17, 0x24, 0x1, 0x1, 0x5, 0x9, 0x4, 0xbd, 0x9, 0x4, 0x9}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x36}]}, {{0x9, 0x5, 0x1, 0x9, 0x270, 0x7, 0x1, 0x94, {0xa, 0x25, 0x25, 0x7, 0x7, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xcc18, 0xa, 0x7f, 0x8}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5, 0x8db, 0x4, "1b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x74, 0xfc, 0x0, {0xa, 0x25, 0x25, 0x6, 0x40, 0x7}}}}}}}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x201, 0x7f, 0x98, 0x3, 0xff, 0x24}, 0xe6, &(0x7f0000000fc0)={0x5, 0xf, 0xe6, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x6, 0xf, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x21, "46c4aa207d81569fd1ff070dd79d7474"}, @ptm_cap={0x3}, @generic={0xb6, 0x10, 0xa, "9dc11cdeb274cf9350033854093d8adc302f3449565eab284725ed032e87f55d682c432dc34577b2ac2055319f1133339621cdb227a5a6cfa1b4bd59e24fd3209828f73126dcffc1a2576d150c395a5a31e8abf3c12a2d46a0b528239392f1c1dd2d5426edefd88dc2a012ae59ba1a039fa5f77da66162b787d52e1dbd0d7f5bab6db00f2f6da82a62389453c7a65d2bbab5f01f06157b684118ed70f1c02954a2ccca9fc1252ccf8b7fbf7b60565f7251b9f8"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x1, 0x8, 0x1}]}, 0x1, [{0xc9, &(0x7f00000010c0)=@string={0xc9, 0x3, "17022b53b31df995265229c81ad9369e28f97be1cb6f87216cb994d97adaa76720240d87d8668b56a74f2c566f44ca5f46aeae678ed1facf9d8c26dcefaaea426a7f88b47b13f7400aabb829b65ded65fd47ac6749e4c46403783a5c1c4a431ddfcaa9c42d5801d358e4ef274521e2a42ec5a97cdc5405c746f1c9d93519596b318a3812bd4b588d02079d73b885992760c117a9e7506b3a636a62ccf28e6a648ee592385380a07ba90f2cf76ccfa80bd9c2d159d984c95647577cd6fd427d27ebedcdcc2488d7"}}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x200}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) read$FUSE(r4, &(0x7f0000003380)={0x2020}, 0x2020) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xc, 0x0, 0xfd, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x1, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x2, 0x1d, 0xf}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0xc, 0x7, 0x4}}]}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x8, 0x47, 0x1, 0x40, 0x2}, 0x10, &(0x7f0000000300)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x0, 0x9c, 0xff, 0x1, 0xa, 0x14}]}, 0x9, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40f}}, {0xdc, &(0x7f0000000480)=@string={0xdc, 0x3, "be5c2b401545688be0e04eaf2142f87d5f3bb3d1c1add7c9d771c007a15500579a8aeb7d5eaf35678f24165579c9ce9f38db2e1cd0ebb0a3a083262b5c6f4db2aca3c1830db8753aec5c179e732983bb0bdf39090308b4a219b0347d57de0be9bdaa5c6fa54755c2b001d2cf6997587d9c0dce2b36de756fbd79b9a1a824f7b30b6e2a62e02875242eac7b2abe8f01acf44e8b2e0373b7787b4206721ea0bae4d03959a56d22e98ef0c46e91522ff51e54807711c2c5b3e88b798b64657ee482a00d8fe6b4267ea946684e536e184811d50811b2223d5cb1654f"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1c09}}, {0x32, &(0x7f00000014c0)=ANY=[@ANYBLOB="320354483a69eb515b802b9193f50976382afae375e7446ca42750dd17641f271f5f1d0d7b5789447fd19b96c1c82ef87d91f7f66969cc09d5cb17024cfca8bfd2b0c8fc3ff041c1c9746a2f3a69ab15e4100b09fe69aaec6c015e40a546e122d116b99a7e9af0e35b604010395a6a8f7e1365f0276f411a875720dd49c2f07b9c2c74487465bff60173a5404654eec186d43f4c1257a474ce"]}, {0x102, &(0x7f0000001200)=@string={0x102, 0x3, "0bd966bee78ce5d6d7ca5aa4e65ad51feea354ca1c776687933c2d34713810f6a409c08d8f400e8dc3b3fbc54d60b3791f2dd7db94d175f21e8e3bf4a3ae937e7df3dcdb670662109d566e38841ad0eb70d030f1f6b1a36bde4e2ed96a3214aa5638f71775e27709e1ead47f4995cb71fb9198c7d8909f11a5174ae7d92bd653b07734a6dec6c7267b9fd185d90d81b994a006c85b05cb179108c7ff472b1acd2901da65bc8d9cbabb3314665ccfa7ffb3a38963cf7b4e04acaa6e69df4250482888bc3651f3d164aee04c4cc44630ddaed467a697251269411685e317324987b4369d76c1539c129f49bf971cb4a9ada5627f3e88a3b2fd03207e5803d9057e"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x41d}}, {0x57, &(0x7f00000007c0)=@string={0x57, 0x3, "fbd11267f51c5292dcbec59708d87201ceb50e0b56d1eac0e690447b2c1fa94a473b637ace2908c1b94cc60d3b0617209fc5d7f4527c9c4e595f46a39f9984af2d3afbcb875f9dc4b1a33de10c5b43956bc7484b82"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2009}}, {0x99, &(0x7f0000000940)=@string={0x99, 0x3, "bd66a5ee06e01a052024b39c5d55ecaf9cbac8e6602e0edaa20bcdaa5c71e3a81a9558ce4b50a0c5cdde67580f1c86e9e4c207820a89ec16165750e3d20b6af1f3c4ad2acd0e06e485d01e41f759a7b322b88054e45ae636e61364abdcebab8c818cf97ea14ee64fbf50b60d63ef6f20ef1d9cfd93a0b459ab74366e6360ab80a7622518c5379d3796694a5bf1ffb1b0f350ae6293c11e"}}]}) syz_usb_control_io$printer(r5, &(0x7f0000000bc0)={0xc, &(0x7f0000000a80)={0x40, 0x24, 0x20, {0x20, 0x30, "46ef2bf3235ca4a733cc88c03fbff3c453e35f1a986072fcec4b13bd40be"}}, &(0x7f0000000ac0)={0x0, 0x3, 0xe3, @string={0xe3, 0x3, "0d49cc588479640c4f0696c98ce7e5a8355aeeb3bae122d38f698c69f965f8d36f265aa563e8363d04802a784ef92ffb1becf619ee0a0411179e0e32505a9846b8c9e724648b91dccc7c4fd77edac65bc15508f81dc61ca90fd6523d871d358c3a5e1dd8f6a5c35b4103c91b08d45086f9ca0056223d6774a4f318dcda85e9a212c829be726ad570f080f6925d113584c0dbdb47c0b19f347a63032d9f3566d3c425fc8094923e1bbbfeff4b9eaf49d4489904bbe57e71e537fd8c06b52ca0c801586921b8d15d098dac7c0adcbeb95e485cedd9d0536ebcddeb4b633810539550"}}}, &(0x7f0000000e40)={0x1c, &(0x7f0000001380)={0x20, 0xe, 0x100, "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"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000d80)={0x20, 0x0, 0x31, {0x2f, "5d051072d36c4a5ce666fc2b18949101dafa00b0b8ef0f0f9150a75216c42132769dbb3080fc6fce14a63c65217932"}}, &(0x7f0000000c00)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000e00)={0x20, 0x0, 0x1, 0xf0}}) syz_ublk_setup_io_uring(0x3e5f, &(0x7f0000000340)={0x0, 0xbfb, 0x10, 0x1, 0x3e8}, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000840)) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000001340)={0x25000, 0x8000000, 0x6, 0xa6}) r6 = syz_io_uring_setup(0xf51, &(0x7f0000000580)={0x0, 0xbbda, 0x10000, 0x2}, &(0x7f0000000240), &(0x7f0000000180), &(0x7f0000000000)) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b01fb03010902240001fe00c0000904eb02027f9c1f000905e60220000200020905", @ANYRES16], 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x21, &(0x7f0000000440), 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)={0xb8, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@generic="fd6f6c5548d1d3f779c022913be1e9ad8b96079bcbe7de1ae8c6e93336b250ee812b58995c9b336719093fe0d0cc5091ff0322f5ad06bfbdd9123b272ecc5e9b30020638c7bf964779a8a7cecb015e4f20295ac211b44c3672d81a3bc131b3cb346a38bbf7bc51fd4f23c466c269b7d79e8afabb094ce6c81b625c3d81c585816418fee97f293b091ef2a07f88abff33474e41a7417d8edc88ebbbd1b6d14e3df5e2ac"]}, 0xb8}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) 1.538690425s ago: executing program 5 (id=5024): getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x6a, 0x3, 0x0, &(0x7f00000000c0)=0xfffffffffffffd27) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'vlan0\x00', @random="010000201079"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)="65f259", 0x3}], 0x1) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0xff, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0x12, 0x5, 0xcc}, {0x804, 0x2, 0x1, 0x45, 0x7, 0x0, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x0, 0x3, 0x38, 0x3, 0x84, 0x7, 0x3, 0x50, 0x8, 0x1, 0x4, 0x9, 0x24ab}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x2, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0xc, 0x400000000, 0x6, 0xf73b], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r4}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) lseek(r3, 0x36440ee8, 0x3) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="0201140078ff18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206"], 0xdd12}, {&(0x7f0000000480)=ANY=[@ANYBLOB="24000000100000042dbd7000ffdbdf250800e9000a0101010400630021e2580e1497fb"], 0x24}, {&(0x7f0000001600)={0x1010, 0x1d, 0x200, 0x70bd2d, 0x25dfdbfb, "", [@generic="718839de1b1633b17afd16cc004f2c91ba318fe5a01f2fe4c4cc8e981fe59932c6d229f20e37073617413494313a2513d02ca7ee9e7e4ce5f77b563d3ffdd3b419ad8ff03420e68969e9c4f9688d8578231da2914416edc30a3f5b9c0a486634e3304f33d86b27f23e30fe89f1621f39954cecbae2c09d5146ad3652f9e741c614ae20818ca1df064811dfeafdd4b257f8977f118413cdf220c71094f83f44710448e551fc3fd84178893d83b1991624cdbd17fee3a41d95c4752869f9d447f841ed89d1e894e9b7333aaae67b5f15aac7e50c073f6084170896aaa78a2aaa0a69da26740f78202b90fb86f132d02b7b02f75d1d21a95a3e8e32a2efa663a991683e4aa488039dd70795123662863ad10d34b5483eab5149bd1c9b2fe91d9c2b1bbcd91d30ee7d15bc637eeee917ebd5c91d443bd7c1a9a0df4b182199a246bad427c774128ccb92ea22434727602d2eba308e51637c13cf822cb96b51430008b8c0f7a08bb652a194937e4388970d3bab9e01c0bd73cc4666979963fa2b752677789f470cf4facb6409766e706665269694ede623b773975ec7c7116e7c72eae2017fa61313dc2b95d30a65260ab35fca69c1c53e140fe4584d10ba88b19acb2d3ebcdfd60e5529d4ef30aea31cd5f2cbe084f0d6b107d8df773599c5aef205f3bf0c7817e3666f8186a10e5d107508d3e35ca5000f307a47e2144e9dbc4ccb7a59d7fcc4cb2b191593d83b02a74656191177ddd8f6fe25aa71dd42284234cba3063837137b1f707a94351b0e16e23f493263891dd3fc05ee36ff5a27da5e8b535dfae38ecfcb21369cda37022a03ff91fee884937efb8edd74e5c353824b9fb7f40eaa68972e8dcd99f9b9bb7ed4bb3a47a597c0bb9b176d222c9d2922cad30dd4900ff8c5aae4879a2ccb9e1f3e46521e663dc658daf247bb46b56c441a7fd3268421070941dd8123c02f9ff3f496078593c3bd01d6e66bf07015ae8d3e96901a9c9a3065074e1456d6011ca8ea2f171af89ea0735f9bd70b412996e5e3eaa1eb611092b6b74fe9be62336e7805ea9d73d0918ce4d58736911b994da1817a50b83559e5d950a8048566c5e7b4e119889158baa1e161ef8f3efcd10f49a08744a3e26072c1ad325f555759a13decfcb1af0d789897932706243bbf45b9214b1a6fa673013efe8d007527322a52556083b07b1b8ce80e5953d88c809babbb6c3ddba3718731550223f0aa48498d5358d36c3c4d55bae0ecaa68c8e3d657a9f0771465d5863ed0587beb1115b514f893f1520f68d1a2658930a0bcc66de4da126d1a9279c992ebc5148a026e169a73d5af6178e89e1bd9c3093a8f1272a0fcac56ff261f7a10a26a7ae934f8acbbc8ea3591db5a0dfdac6de6aebad12c92cf62a7b76104939b3fc4a54e7ab290fc0b797e8ed184c8064d1616b0d0d1afe162e8ec1c1ae3a468106a5a41f742a300014ce4127d746ef5bda9f6153fee77817f0e5845712fc9f60b35dfbfeca0eee53c6b68c894b911799a8daa94ef1d079343e0bbbe27255bfe0715aea73398cfbbc1f42f7714a78231b9466f14c3c4ee761dd0b95bad40e6b80223ec2b138e28e102d57db5b97b67865600740032d38a7d59f75e0ba34fc8742b5b80df84d7fab897f222db9d83a98344be8e7b4538f013a04bf1eb359d379cc39c250ad8bef071e46c11569e25f7c520c839fa4e55f161392ac9bd0be080cca8a75c03f44a90475b36f4fc97e6da1628108ca6875e1b768fd6bec6a1d320b7e13408127959f06bd822810ef4275d6e8d867fec04e7f7ab7bdea003b0d98e0ae3cf39d7df70c5a3776a6d80e0d7e57a4f7b5bca57a5cfe297916680acaeda7543d2ffcd175c9762b1972950e311a22992e34121e98385d1d0dd56c9d9276fc9c8844c0dc85d960d7ee0538b50b30a30853da7c941803a513612ad65d0f981d3dabdcbd5daaa78d090a66212154e2247a89162e9fc23d8c869467860162b3d15b9b555cb59d41177790ba66c833ce75c9c3280bb9fc9901c04b162c94e9ec1a8104433b5ad708a467323fc6d06c28646f51674b18b736aacdd2247b4c725574dc844b8e44297e344b90c96050b619a61b8530f25e7caa23938d24a5ad11d25ab6ea3fb9dbc3d73130a8128ce2e7276864111d4c4d9e73ecb7d463c1487beba4833a110825a1a816a802a4018ec4ef467cded0ac8e95210c150ce6993a05be887e5c96590c3036198cccd2241dbbaab86e32980ba9e44ef66c4584f8a5477ade2ed3731bbd37a7f914a4e6b284ea22ebddfdf351cdf773ef8f56bfd6d6ff41c1a9be07f9e0ce5813b9d1a252bda3eef3f7cd1d30bc4512bf8dfe8ecd341df452d7d87514f8aea081434d10f0d1a27a4d7a2634a44e96168545735cace91de3bee714bdab3536f85511034287671d0d07bee7f59f67a9ce6a8162d7ea9adec7a886ae2418840b3556c815bd701302facad4d3c44ebb8cd153d3c18183a55d4d5c5bd383394fce183392c5bade7dd7ba06969fc1e41d6ac50135ffc6c5e6c660f3922661cad83ca5822378e9dda397e84da116d9c5ed84b7bba954ae84cf86d1b9d0e2af1fe137a9a6bf845ca007a7a711097726fedeedf7af16e8b93c315fb728dbbec3cfa148fafc789456644b2b1e63a686d2336a3cb25fa6fea521b02ddac118d19b6158da41bb66262ebde45546f6b96f7abd644dbc719cd049bd1d9b4b432117c9eea685cb4dc900839d0e5e408d711bfa83bd210bbd8f18b9be9348af16d5bef7112a27f6ee635abc01a829b0fc12c18141b348ec1bb64be99f970f3a4ab39ba5534a1f36c774f784094f7cf34221acccb3eab187cbeb3fabced2d6d456563a3089ebfc9448f48e2849c763d3072f73df4d35e8cfd88eb8e25fc869f23b0ae9db2cbb160f2c4375b697220f2ac054f9718a720ed7636447f43640091cc4c1eca52dff6bc9035c72b4ff3ad93ced4f11e50d8c9b5b4d33e429f9c1e9f26dfb393102c2a61f285729759c2368b81b39f90b116e1525a2c0ec559ed026dfa1adc79ef7e502436a624b0023f6af7457aff97e2a0679d666c84ccf68b392ddb5534fb876fdaa67394e6f046768c853b985c91363d2e57c27835df938d4792c6f50f437b7cb551a106275db4ea8b6247d04d910c508ae178645132192f0f9eb6aba1acb72000b5ca5fd689e973375f32207c0cc51a86ccec4b603b4c81733dfdb2aa6c1b5629b42db090c207d615d245e8c9ade7f200271e9cc413b1167bb12ba2bdd1f14842e3de0ebc140597cd571a123008942c67980909f2b504175f9b7b17e8911f585b765af8911c807394ac3e198963b50aac0bf9cc4de066a5c783598b0d25b34cb94cefe12eec2a7d17bf098fdcd1d5e6d87b755181dff5c52846c5a31abb3d34e03a7592bbab9f936c87470b8878d8c8caccdfcbf00dfcfbac869454a5f095f51b02095fb14ecd7006aa3e73c7a4e9764e5597e21f79b35b71fe12f684998c4bccdd1f4cbe9b24463f2dcc2e6233791e48da4b11f17a79b6c73774d4ea03a699f5a597dbc73d105f847f094ca24d83fbfcc8ce9763715bc328ec92439c1bf62d763aa97d54990b31657c140e7253a7ed66e58d1f3c2bab3c60063fa1d73ac08a726f0e5348852d33b28a7258bad2ed25d6039f42cd560d768a710353cc863c3520d4105982324afce794bd96e3b4cfcb71d7350ef34d0aade1da12a1bc910275d4f19b42afd27cdce2f8f550c901f811d9b7d5da6f54e8b11c3b70b82d8e9d8746cb3facaceb5115b7d54c143a32635e225670ba11fe10a02538d366d6da57ce845a01a6f74000aa8e7a5a8673f5c95faacfd547a251eaec102c8af106d7d113d841db0a79783beae7f3b2b18635af6d9e270a2d11188926b33a47a9a852b1c9427e8170c1f4b9e4ad0db2746ccca40e365b111ca7bdc84a8d60d43e482abd5da1705cb488a9e7e7486484efd5d359258439b3de5de72753c42c712452edd05c3e07ecb47df016379ea8d78c32e38a4a6bead3608661b53cd26836140472f3eddaa06275ccb6ca45d6bc91806091a1c3020d207195ceb3be39e4476802fe0af87f9e88c5d1fa241f7f27c2db4fa483039df28e605561e9f78d0e9ab322ba493af5b7c691ef75ebb509364da1c0c2bb052050d53161b102b1b033ed34a65a8bbed47d4f01d69272a54c63525cca8ce504da7d274f865de5c82ee70668ab264283ac9ab00433ccce02ab1abc67c3dcbdaa8e4d925de96e3e6431ac97cc6dc46a90a713b9c5d9b1acf6adfa46cf21801a7c952149717dbef0656a4261576401c1bf103fbbc36b752ecef4cbd39be331a10bb339527c2e3b0559e65b5a0888611e2602a385717a812d6781905ad458cb0b18378a18dd2ff6a6dd6f127dc190d97d80f003c59a9d97c139bbdcb4d861876defb5a938c6e7277af33268ff2e9b56bf17fdac8a740aa1ff193a4ef3b9bca9ec70de0cbec4f17d378526bfc89a150f2ef572ac46d6e582959b820066558510e0203e94fa93e8fdeb76270c8a1928fdf8dcda30a95763acaee9466ec9d0e87525fd96098b424fe13f537f5e050eeecd01b9f576c0d6220339c8c02438cf69a3371b3a817520581c7eea3d1cd2eaf561630476cef93f483b83f53a7dc1d2ffd0228ce618cecbc4e951d12e81611caa784e9fd697c840b27e687ee0c5c9d44d2e606c8fe6875d1455613ffb7fbdda73b544794c8e44cbf56926ec4c980de13e38cfbc4d0dd1978a04a8e0a1c939022709944e96b9fbdad2e8db54ea2186e98e35e7b4db01206d5865e14e99901bfc031ee50f5f125dc070cf0fc357b658d501f47c4451b08ae75b32f4c345ac7345a68c062b77cac13bb407b4d52dfd4cfb7ea05a9ae0450ccc379abf6703b8146bc778fdbac1a10ac64ab242c232b88ceaabc9c0fae9faa23f25176ae8ce8dd7cbcff26ea59c1fcf5c3d7400bf7b413a54b272d09fac83d615370bfbc7d65ad75b8ab3dd2dd20012649544d287218abd93acb16683554bff5bf14aed342927b1672c8b8ff7093619a45d378e9e3581de2ba88f7c291dfde64f9e98469766e72d74fa8fb10c0740eaba2ae2580d59b7e680b6315fd3c6dfeb2e3933ce5799e4657aa5a9c877d007d3aa4837fa56dbe7995b8342852a70e02a7998c24e45974c79ebeb50f5f7f397c58be28734d6196c2cff2da42a9949b18f8cfc7528f61fb2bfe136201b7ee7d722056888997654a081cb10b2a43eb690a7f1325be523e8abbfddd4fb204a9ea6e0aa63f8d47b44b79176f23467b364f967f2eec4a6742b32e628416be1bea6736face02531a537c1469375bc634db25ae3c0d974f9267f44dc5064e168424cf259bb98cca67dc73daf5c6b6ad31cc2cd94fb6181baf994aca4e591a48e40b4ffa263079f3434a3f2f89add52882601957869859d8b0efd3a8fcdf9aa49729fddd40952d86006bb9fb6961732aaeb8e7c6143d7a8cd95292ca1dce11935d5a1c01f346abd2909d45ab6644bc835af8f9ed297949a0829d73c0444d4d2e25cc23821ddf801412f0a6020c6194cbc85dd7af4d9e144c63055d6479fb4711e77278e7c85f52362758e2c93fe1905dd698cb86eac0910693a3f8ea3a8d5a5013bf7b16a7ada0db0d0456f944d13bbaffc4cbe13391044476d0b5fb49594d844c7c5c2bad7c1fe88fd2b8307e81dbdaf326e315bcaded4e97651aa07ed1f7be7db17739698c88e4a2724cc3f5af0bf7c488858be91565834a936dba876d5692594bdcd93deaea443edb2209750af529f773b563e"]}, 0x1010}, {&(0x7f0000003640)={0x12c4, 0x10, 0x200, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x12b4, 0xf6, 0x0, 0x1, [@nested={0x6d, 0x13e, 0x0, 0x1, [@generic="f145af7edaa0399691b6d15fcc3f84a31c53290f0d6631128fa73fe8bfce6a51e621f782f3402c455b3bff5eb714509371633e0e49bd2432db6720d94053367d4dbc37c2d57791f360bb68c0315261877a7d5424be9f0e689d6e1c2c645458275a0e71e7d0bfbc7ff5"]}, @nested={0x1240, 0x29, 0x0, 0x1, [@typed={0x15, 0x8f, 0x0, 0x0, @str='/dev/vhost-vsock\x00'}, @nested={0x1221, 0x15, 0x0, 0x1, [@nested={0x14, 0x12e, 0x0, 0x1, [@typed={0x8, 0x106, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x154, 0x0, 0x0, @pid}]}, @typed={0x8, 0xb, 0x0, 0x0, @u32=0x5}, @generic="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", @nested={0x45, 0x136, 0x0, 0x1, [@nested={0x4, 0xeb}, @generic="69358341b8cd86a4ea861ea517cb432c24b2d6016d0df2b2978b33054b10d4ed4e97167fac769aea7c91a2e63d58fd2e34612a6ef633d4bc22e332a4d0"]}, @generic="a0e84633945afc1ce9f14afc6ab4c2dee9424dd050a41bb01878cfc995758bdf9410d95e1e8c78b012ea39ab6d7020be2f44380c9893e566d31962d59479f1c69e45c80f4154a1980592502e7d5f4d89c5949e4d152384a9804bbe440f8d2f96742329731c312d9e64d1e8eddee034b18c686178c6f813dae86c1ed7e0b09464af6437a53332eda20845de47ca9a8b276e59129b2a3d40625de8276fd0edef47f7446a9affec55cb7d520e34f8ed3d228243f75b82069017513263", @generic="228fcb919c1c0bd052cebd608dabf47ad507c8bb276428d44c2e9873a74a68fd44dde86e15c4f218489828fccb33f889d733a7daffd4e292871a31be44d79ce0f5bf55c7307a192676c81b8b2d91c239933269c6e8272a065329f4a2ae3abd28530fa36b8f104c1e39188cf5ee9d629db5cd00fc1b2ab355e9418be22e5ea1bd2c1478d360c20314eba90e8cb76aa643850a53", @nested={0x69, 0x9a, 0x0, 0x1, [@typed={0x14, 0x95, 0x0, 0x0, @ipv6=@local}, @generic="a8146d8cd93642fa970a4af33aa3b18cfeffad2a6c3f3c55faf0a0372d2dd6690d5bcda79d061ea7d520829b6f94fb2dce3ef4003f071e023f3b2b312f20c36057551b713d7843516f22e5e36f", @nested={0x4, 0x19}]}]}]}]}]}, 0x12c4}], 0x4, 0x0, 0x0, 0x30008803}, 0x44040) r5 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x4, 0x10000, 0xfffffff9, 0x2376}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000040)) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x20) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000009, 0x10851, r6, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0x1) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000180)) io_uring_enter(r5, 0x742f, 0x77ae, 0x1, 0x0, 0x0) 1.333537579s ago: executing program 0 (id=5025): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1ff, 0x41000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r4, 0x3b8d, &(0x7f0000000300)={0x20, r5, &(0x7f00000002c0)=[{0x1, 0x3}, {0x1}, {}, {0x0, 0x3}, {0x1}], 0xdeadbeef, 0x8, 0x5}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000019200)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_OIF={0x8, 0x5, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000040)={0xa, {0x200, 0x800, 0x7, 0x6}, {0x3ff, 0x0, 0x3, 0x800}, {0xee, 0x5}}) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r8 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40058}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {}, 0x1}) io_uring_enter(r8, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$FE_GET_EVENT(r7, 0x80286f4e, &(0x7f0000000140)) r12 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FS_IOC_GETFSUUID(r7, 0x80111500, &(0x7f0000000180)) readv(r12, &(0x7f0000000080)=[{&(0x7f00000028c0)=""/4098, 0x1052}], 0x2) ioctl$FE_SET_FRONTEND(r7, 0x40246f4c, &(0x7f0000000080)={0x7ffffffd, 0x1, @qam={0x3, 0xb, 0xa}}) 786.475382ms ago: executing program 3 (id=5026): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x1ff}]}, &(0x7f0000000140)=0x10) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) syz_usb_connect$uac2(0x5, 0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000081e04003040000102030109027c000301032004080b000201072007090400000001012000092401ff03071c00060c240301010101010408009a0724090401010709040100000102200009040101010102200009050109000004042d082501820301050009040102"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000040000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8"], 0x48}}, 0x0) getsockopt$inet6_buf(r1, 0x29, 0xcc, &(0x7f00000000c0)=""/9, &(0x7f00000001c0)=0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8500, 0x2}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syzkaller0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 786.085077ms ago: executing program 0 (id=5027): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x7a, 0x0, {r2}}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) syz_ublk_setup_io_uring(0x7cf5, &(0x7f0000000080)={0x0, 0x911f, 0x2000, 0x2, 0xd}, &(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f0000000280)) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) syz_io_uring_complete(r3, r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="feffffff1ee6ed6194773e2141acee000000000100000029c848b64fd7aec929882e7562b48375cc9179bf38a5e9c332911ccad3322bfa4ad721151f17ebc093af009471", @ANYRES16=r9, @ANYBLOB="010027bd7000ffdbdf257b00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x2000c198) 261.851029ms ago: executing program 0 (id=5028): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000280)=0x0) rseq(0x0, 0x0, 0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r3, 0x1) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) syz_usb_connect(0x3, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e0200"], 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r6) close(r6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf6b) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000340)=@filename='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x4c, r1, 0x101, 0xfffffffe, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x3400, 0x0, 0x1, 0x0, {0xffffffffffff3615, 0x2, 0x0, 0x3e5, 0x0, 0x0, 0x0, 0x2}, 0x8, 0x9, 0x6}}]}, 0x4c}}, 0x20004800) 0s ago: executing program 4 (id=5029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10048056}, 0x4000050) kernel console output (not intermixed with test programs): ltsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.294941][ T5711] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 794.317101][ T5711] option 5-1:1.232: device disconnected [ 794.320120][ T985] kye 0003:0458:5005.003C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 794.338270][ T5612] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 794.355256][ T985] hid_parser_main: 70 callbacks suppressed [ 794.355275][ T985] kye 0003:0458:5005.003C: unknown main item tag 0x0 [ 794.369116][ T5612] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.381831][ T985] kye 0003:0458:5005.003C: unknown main item tag 0x0 [ 794.396132][ T985] kye 0003:0458:5005.003C: unknown main item tag 0x0 [ 794.407140][ T5612] usb 6-1: config 0 descriptor?? [ 794.409424][ T5713] usb 4-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=18.d7 [ 794.434710][ T985] kye 0003:0458:5005.003C: unknown main item tag 0x0 [ 794.438249][ T5713] usb 4-1: config 4 has an invalid interface number: 106 but max is 0 [ 794.454598][ T5713] usb 4-1: config 4 has no interface number 0 [ 794.475426][ T5713] usb 4-1: config 4 interface 106 altsetting 3 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 794.475443][ T985] kye 0003:0458:5005.003C: unknown main item tag 0x0 [ 794.475474][ T985] kye 0003:0458:5005.003C: unknown main item tag 0x0 [ 794.497776][ T5713] usb 4-1: config 4 interface 106 altsetting 3 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 794.521311][ T5713] usb 4-1: config 4 interface 106 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 794.540630][ T5713] usb 4-1: config 4 interface 106 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 794.556531][T19043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.571948][ T5713] usb 4-1: config 4 interface 106 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 794.585393][T19043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.594731][ T5713] usb 4-1: config 4 interface 106 altsetting 3 endpoint 0x2 has invalid maxpacket 959, setting to 64 [ 794.608429][ T5713] usb 4-1: config 4 interface 106 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 794.623725][ T985] kye 0003:0458:5005.003C: unknown main item tag 0x0 [ 794.626714][ T5713] usb 4-1: config 4 interface 106 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 794.653391][ T5713] usb 4-1: config 4 interface 106 has no altsetting 0 [ 794.664591][ T985] kye 0003:0458:5005.003C: unknown main item tag 0x0 [ 794.665616][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.683399][ T5713] usb 4-1: Product: Ð [ 794.688423][ T5713] usb 4-1: Manufacturer: à š [ 794.693164][ T5713] usb 4-1: SerialNumber: ï“¿ [ 794.694559][ T985] kye 0003:0458:5005.003C: unknown main item tag 0x0 [ 794.733803][ T985] kye 0003:0458:5005.003C: unknown main item tag 0x0 [ 794.772699][ T985] kye 0003:0458:5005.003C: hidraw0: USB HID v0.08 Device [HID 0458:5005] on usb-dummy_hcd.0-1/input0 [ 794.797538][ T985] kye 0003:0458:5005.003C: tablet-enabling feature report not found [ 794.806746][ T985] kye 0003:0458:5005.003C: tablet enabling failed [ 794.849186][ T985] usb 1-1: USB disconnect, device number 120 [ 794.934697][ T5612] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 794.939726][ T5713] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 794.970380][T19049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4697'. [ 795.007320][T19045] fido_id[19045]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 795.008211][T19049] netlink: 'syz.4.4697': attribute type 5 has an invalid length. [ 795.042351][T19049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4697'. [ 795.204267][T19053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.247037][T19053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.328693][ T5713] usb 4-1: USB disconnect, device number 116 [ 795.424378][T10224] udevd[10224]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.106/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 795.574690][T19061] FAULT_INJECTION: forcing a failure. [ 795.574690][T19061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.592410][T19061] CPU: 1 UID: 0 PID: 19061 Comm: syz.0.4703 Tainted: G L syzkaller #0 PREEMPT(full) [ 795.592449][T19061] Tainted: [L]=SOFTLOCKUP [ 795.592456][T19061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 795.592468][T19061] Call Trace: [ 795.592476][T19061] [ 795.592484][T19061] dump_stack_lvl+0xe8/0x150 [ 795.592517][T19061] should_fail_ex+0x40c/0x560 [ 795.592544][T19061] _copy_from_user+0x2d/0xb0 [ 795.592572][T19061] get_compat_msghdr+0xb3/0x4c0 [ 795.592598][T19061] ? __pfx_get_compat_msghdr+0x10/0x10 [ 795.592625][T19061] ? kfree+0x4d/0x640 [ 795.592653][T19061] ___sys_recvmsg+0x1db/0x5a0 [ 795.592682][T19061] ? __pfx____sys_recvmsg+0x10/0x10 [ 795.592707][T19061] ? __fget_files+0x2a/0x420 [ 795.592759][T19061] do_recvmmsg+0x38b/0x7f0 [ 795.592790][T19061] ? __pfx_do_recvmmsg+0x10/0x10 [ 795.592825][T19061] ? __mutex_unlock_slowpath+0x731/0x900 [ 795.592863][T19061] __sys_recvmmsg+0x1a5/0x290 [ 795.592887][T19061] ? __pfx___sys_recvmmsg+0x10/0x10 [ 795.592908][T19061] ? ksys_write+0x242/0x270 [ 795.592951][T19061] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 795.592981][T19061] __do_fast_syscall_32+0x23e/0x6f0 [ 795.593008][T19061] ? do_fast_syscall_32+0x33/0x70 [ 795.593032][T19061] ? lockdep_hardirqs_on+0x7a/0x110 [ 795.593056][T19061] ? asm_int80_emulation+0x1a/0x20 [ 795.593074][T19061] ? do_int80_emulation+0x29f/0x550 [ 795.593096][T19061] ? trace_irq_disable+0x3b/0x140 [ 795.593122][T19061] do_fast_syscall_32+0x33/0x70 [ 795.593148][T19061] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 795.593170][T19061] RIP: 0023:0xf7f990ec [ 795.593196][T19061] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 795.593213][T19061] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 795.593234][T19061] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000840 [ 795.593247][T19061] RDX: 0000000000000414 RSI: 0000000000000000 RDI: 0000000000000000 [ 795.593259][T19061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 795.593270][T19061] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 795.593281][T19061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 795.593310][T19061] [ 796.068458][ T985] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 796.138474][ T5612] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 796.178341][ C1] plantronics 0003:047F:FFFF.003D: usb_submit_urb(ctrl) failed: -1 [ 796.218694][ T1225] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 796.228173][ T985] usb 3-1: Using ep0 maxpacket: 32 [ 796.234069][ T985] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 796.244939][ T985] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 796.255816][ T985] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 796.267707][ T985] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 796.279605][ T985] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 796.297339][ T985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.305655][ T5612] usb 1-1: Using ep0 maxpacket: 32 [ 796.311563][ T985] usb 3-1: Product: syz [ 796.315968][ T5612] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 796.325127][ T985] usb 3-1: Manufacturer: syz [ 796.330042][ T985] usb 3-1: SerialNumber: syz [ 796.335758][ T5612] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 796.344765][ T5612] usb 1-1: config 0 has no interface number 0 [ 796.356479][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 796.365428][ T985] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input105 [ 796.377680][ T5612] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 796.390309][ T1225] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 796.406903][ T5612] usb 1-1: config 0 interface 1 has no altsetting 0 [ 796.416969][ T1225] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 796.426110][ T1225] usb 5-1: config 0 has no interface number 0 [ 796.432981][ T1225] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 796.444638][ T1225] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.454804][ T1225] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 796.468284][ T5612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.476382][ T1225] usb 5-1: config 0 interface 1 has no altsetting 0 [ 796.483104][ T5612] usb 1-1: Product: syz [ 796.487345][ T1225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.495556][ T5612] usb 1-1: Manufacturer: syz [ 796.501618][ T5612] usb 1-1: SerialNumber: syz [ 796.507500][ T1225] usb 5-1: config 0 descriptor?? [ 796.517085][ T5612] usb 1-1: config 0 descriptor?? [ 796.578146][ T985] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 796.586498][ T985] (id 0x00) [ 796.650660][ T985] rc_core: IR keymap rc-imon-pad not found [ 796.656564][ T985] Registered IR keymap rc-empty [ 796.661740][ T985] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 796.672153][ T985] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 796.741508][ T5612] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 796.757691][ T5612] cx231xx 1-1:0.1: Failed to read PCB config [ 796.766792][ T5612] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 796.767342][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 796.767358][ T30] audit: type=1326 audit(1786302020.622:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19082 comm="syz.5.4710" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 796.779683][ T985] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 796.800030][ T30] audit: type=1326 audit(1786302020.622:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19082 comm="syz.5.4710" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 796.813167][ T5612] usb 1-1: USB disconnect, device number 121 [ 796.850266][ T985] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input106 [ 796.874802][ T30] audit: type=1326 audit(1786302020.642:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19082 comm="syz.5.4710" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 796.900887][ T30] audit: type=1326 audit(1786302020.642:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19082 comm="syz.5.4710" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 796.925543][ T985] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:119> initialized [ 796.935676][ T30] audit: type=1326 audit(1786302020.642:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19082 comm="syz.5.4710" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=110 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 796.983625][ T24] usb 6-1: USB disconnect, device number 92 [ 796.996083][ T30] audit: type=1326 audit(1786302020.642:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19082 comm="syz.5.4710" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 797.023529][ T30] audit: type=1326 audit(1786302020.642:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19082 comm="syz.5.4710" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 797.052937][ T30] audit: type=1326 audit(1786302020.642:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19082 comm="syz.5.4710" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 797.081542][ T30] audit: type=1326 audit(1786302020.642:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19082 comm="syz.5.4710" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 797.116649][ T30] audit: type=1326 audit(1786302020.642:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19082 comm="syz.5.4710" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 797.175822][ T1225] input: HID 145f:0212 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:145F:0212.003E/input/input107 [ 797.358180][ T5612] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 797.403391][ T1225] input: HID 145f:0212 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:145F:0212.003E/input/input108 [ 797.467090][T19074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.494942][T19074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.509200][ T5612] usb 1-1: Using ep0 maxpacket: 32 [ 797.517594][ T5612] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 797.544111][ T5612] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 797.584274][ T5612] usb 1-1: config 0 has no interface number 0 [ 797.604106][T19074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.627372][ T5612] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 797.651070][T19074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.663508][ T1225] uclogic 0003:145F:0212.003E: input,hidraw0: USB HID v4.06 Keypad [HID 145f:0212] on usb-dummy_hcd.4-1/input1 [ 797.689751][ T5612] usb 1-1: config 0 interface 1 has no altsetting 0 [ 797.720706][ T5612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.727202][T19074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.740388][T19074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.743499][ T5612] usb 1-1: Product: syz [ 797.762284][ T5713] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 797.778608][ T5612] usb 1-1: Manufacturer: syz [ 797.788555][ T5612] usb 1-1: SerialNumber: syz [ 797.804734][T19074] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4708'. [ 797.840718][ T5612] usb 1-1: config 0 descriptor?? [ 797.938198][ T5711] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 797.945995][ T5713] usb 6-1: Using ep0 maxpacket: 32 [ 797.957584][ T5713] usb 6-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 797.977673][ T5713] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 797.990701][ T5713] usb 6-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 798.009238][ T5713] usb 6-1: config 0 interface 0 has no altsetting 0 [ 798.017827][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.036803][ T1225] usb 5-1: USB disconnect, device number 2 [ 798.067454][ T5612] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 798.087107][ T5612] cx231xx 1-1:0.1: bad scenario!!!!! [ 798.087107][ T5612] config_info=0 [ 798.096026][ T5612] cx231xx 1-1:0.1: Failed to read PCB config [ 798.133989][ T5713] usb 6-1: config 0 descriptor?? [ 798.175171][ T5711] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 798.190849][ T5711] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8 has an invalid bInterval 0, changing to 4 [ 798.215006][ T5711] usb 4-1: config 0 interface 0 has no altsetting 0 [ 798.280136][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 798.293925][ T5711] usb 4-1: Product: syz [ 798.308931][ T5711] usb 4-1: Manufacturer: syz [ 798.322287][ T5711] usb 4-1: SerialNumber: syz [ 798.345027][ T5711] usb 4-1: config 0 descriptor?? [ 798.366380][ T5711] usb 4-1: selecting invalid altsetting 0 [ 798.565461][ T5713] kye 0003:0458:5005.003F: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 798.609666][ T5713] kye 0003:0458:5005.003F: hidraw0: USB HID v0.08 Device [HID 0458:5005] on usb-dummy_hcd.5-1/input0 [ 798.638157][ T5713] kye 0003:0458:5005.003F: tablet-enabling feature report not found [ 798.678178][ T5713] kye 0003:0458:5005.003F: tablet enabling failed [ 798.715355][T19101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4714'. [ 798.808957][T19094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.826503][ T1225] usb 4-1: USB disconnect, device number 117 [ 798.867434][T19094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.918837][ T5713] usb 3-1: USB disconnect, device number 119 [ 799.021041][T19105] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4715'. [ 799.042467][ T5612] usb 6-1: USB disconnect, device number 93 [ 799.301299][T19112] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4718'. [ 799.472530][T19116] fuse: Unknown parameter 'uid>00000000000000002789' [ 799.486185][ T1225] usb 1-1: USB disconnect, device number 122 [ 799.748484][ T5713] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 799.859690][T19130] tipc: Enabled bearer , priority 10 [ 799.918933][ T5713] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 799.929665][ T1225] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 799.940645][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.954172][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.968783][ T5713] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 799.983340][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.997376][ T5713] usb 5-1: config 0 descriptor?? [ 800.019937][T19130] tipc: Resetting bearer [ 800.091072][T19130] tipc: Disabling bearer [ 800.111215][ T1225] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 800.129160][ T1225] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 800.137562][ T1225] usb 3-1: config 0 has no interface number 0 [ 800.147296][ T1225] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 800.159341][ T1225] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.187775][ T1225] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 800.211516][ T1225] usb 3-1: config 0 interface 1 has no altsetting 0 [ 800.228519][ T1225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.245936][ T1225] usb 3-1: config 0 descriptor?? [ 800.443146][ T5713] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 800.458746][ T985] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 800.612027][T19142] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4729'. [ 800.640717][ T985] usb 6-1: Using ep0 maxpacket: 32 [ 800.650884][ T985] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 800.670602][ T985] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 800.689844][ T985] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 800.714832][ T985] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 800.726371][ T985] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 800.752712][ T985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.764598][T19146] netlink: Unknown conntrack attr (0) [ 800.770451][ T985] usb 6-1: Product: syz [ 800.772755][T19147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.774722][T19146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 800.794500][ T985] usb 6-1: Manufacturer: syz [ 800.799319][ T985] usb 6-1: SerialNumber: syz [ 800.800776][T19147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.811803][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 800.829656][ T985] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input109 [ 800.897933][ T1225] input: HID 145f:0212 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:145F:0212.0041/input/input111 [ 801.054077][ T985] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 801.067041][ T1225] input: HID 145f:0212 Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:145F:0212.0041/input/input112 [ 801.086491][ T985] (id 0x00) [ 801.197229][T19127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.213944][ T1225] uclogic 0003:145F:0212.0041: input,hidraw1: USB HID v4.06 Keypad [HID 145f:0212] on usb-dummy_hcd.2-1/input1 [ 801.218465][T19127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.330096][ T985] rc_core: IR keymap rc-imon-pad not found [ 801.351976][ T985] Registered IR keymap rc-empty [ 801.352092][ T985] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 801.352111][ T985] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 801.376400][T19127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.382671][T19127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.389913][ T985] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 801.393384][ T985] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input110 [ 801.406760][ T985] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:94> initialized [ 801.426914][T19127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.427483][T19127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.429993][T19127] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4724'. [ 801.748410][ C1] plantronics 0003:047F:FFFF.0040: usb_submit_urb(ctrl) failed: -1 [ 801.757569][ T5612] usb 3-1: USB disconnect, device number 120 [ 802.298271][ T5713] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 802.481022][ T5713] usb 1-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 802.503707][ T5713] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.519714][ T1225] usb 5-1: USB disconnect, device number 3 [ 802.525960][ T5713] usb 1-1: config 0 has no interfaces? [ 802.556806][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.566744][T19176] netlink: 'syz.4.4740': attribute type 2 has an invalid length. [ 802.598408][T19176] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4740'. [ 802.609161][ T5713] usb 1-1: config 0 descriptor?? [ 802.654089][T19185] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4743'. [ 802.714687][T19185] netlink: 'syz.2.4743': attribute type 3 has an invalid length. [ 802.952296][T19191] syzkaller0: entered promiscuous mode [ 802.960531][T19191] syzkaller0: entered allmulticast mode [ 803.529276][ T985] usb 6-1: USB disconnect, device number 94 [ 804.444274][T19233] FAULT_INJECTION: forcing a failure. [ 804.444274][T19233] name failslab, interval 1, probability 0, space 0, times 0 [ 804.472246][T19233] CPU: 1 UID: 0 PID: 19233 Comm: syz.2.4758 Tainted: G L syzkaller #0 PREEMPT(full) [ 804.472279][T19233] Tainted: [L]=SOFTLOCKUP [ 804.472287][T19233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 804.472298][T19233] Call Trace: [ 804.472306][T19233] [ 804.472315][T19233] dump_stack_lvl+0xe8/0x150 [ 804.472352][T19233] should_fail_ex+0x40c/0x560 [ 804.472381][T19233] should_failslab+0xa8/0x100 [ 804.472411][T19233] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 804.472436][T19233] ? sock_alloc_inode+0x2c/0x1a0 [ 804.472459][T19233] ? sock_alloc_inode+0x2c/0x1a0 [ 804.472489][T19233] ? __pfx_sock_alloc_inode+0x10/0x10 [ 804.472513][T19233] sock_alloc_inode+0x2c/0x1a0 [ 804.472538][T19233] ? __pfx_sock_alloc_inode+0x10/0x10 [ 804.472561][T19233] alloc_inode+0x6a/0x1b0 [ 804.472585][T19233] do_accept+0x13e/0x750 [ 804.472619][T19233] ? __pfx_do_accept+0x10/0x10 [ 804.472668][T19233] __sys_accept4+0x139/0x230 [ 804.472699][T19233] ? __pfx___sys_accept4+0x10/0x10 [ 804.472731][T19233] ? ksys_write+0x242/0x270 [ 804.472767][T19233] __ia32_sys_accept4+0x9a/0xb0 [ 804.472798][T19233] __do_fast_syscall_32+0x23e/0x6f0 [ 804.472826][T19233] ? do_fast_syscall_32+0x33/0x70 [ 804.472850][T19233] ? lockdep_hardirqs_on+0x7a/0x110 [ 804.472873][T19233] ? asm_int80_emulation+0x1a/0x20 [ 804.472892][T19233] ? do_int80_emulation+0x29f/0x550 [ 804.472915][T19233] ? trace_irq_disable+0x3b/0x140 [ 804.472941][T19233] do_fast_syscall_32+0x33/0x70 [ 804.472966][T19233] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 804.472987][T19233] RIP: 0023:0xf7fc70ec [ 804.473004][T19233] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 804.473020][T19233] RSP: 002b:00000000f546550c EFLAGS: 00000206 ORIG_RAX: 000000000000016c [ 804.473042][T19233] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 804.473055][T19233] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 804.473065][T19233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 804.473076][T19233] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 804.473087][T19233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 804.473113][T19233] [ 804.748250][ T5711] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 805.129840][ T5711] usb 5-1: New USB device found, idVendor=1b80, idProduct=e1cc, bcdDevice=26.cb [ 805.158834][ T5711] usb 5-1: config 128 has an invalid interface number: 5 but max is 1 [ 805.175102][ T5711] usb 5-1: config 128 has an invalid interface number: 5 but max is 1 [ 805.191285][ T5711] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 2 [ 805.213190][ T5711] usb 5-1: config 128 has no interface number 0 [ 805.226194][ T5711] usb 5-1: config 128 interface 5 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 805.245013][ T5711] usb 5-1: config 128 interface 5 altsetting 8 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 805.261186][ T5711] usb 5-1: config 128 interface 5 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 805.277793][ T5711] usb 5-1: config 128 interface 5 has no altsetting 0 [ 805.288312][ T5711] usb 5-1: config 128 interface 5 has no altsetting 1 [ 805.306367][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.339947][ T5711] usb 5-1: Product: syz [ 805.376166][ T5711] usb 5-1: Manufacturer: syz [ 805.382528][ T5711] usb 5-1: SerialNumber: syz [ 805.451579][ T5713] usb 1-1: string descriptor 0 read error: -71 [ 805.472699][ T5713] usb 1-1: USB disconnect, device number 123 [ 805.550382][T19241] fuse: Unknown parameter '0x0000000000000007' [ 805.596161][T19241] fuse: Bad value for 'fd' [ 805.799322][T19246] syzkaller0: entered promiscuous mode [ 805.811778][T19246] syzkaller0: entered allmulticast mode [ 805.844761][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 805.844783][ T30] audit: type=1800 audit(1786302029.702:370): pid=19242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4759" name="memory.events" dev="tmpfs" ino=1722 res=0 errno=0 [ 806.600290][ T5612] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 806.758198][ T5612] usb 4-1: Using ep0 maxpacket: 32 [ 806.771284][ T5612] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 806.805095][ T5612] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 806.829782][ T5612] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 806.857957][ T5612] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 806.883735][ T5612] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 806.914734][ T5612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.930923][ T5612] usb 4-1: Product: syz [ 806.956051][ T5612] usb 4-1: Manufacturer: syz [ 806.971758][ T5612] usb 4-1: SerialNumber: syz [ 807.010565][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 807.035301][ T5612] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input113 [ 807.250519][ T5612] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 807.270515][ T5612] (id 0x00) [ 807.421070][ T5612] rc_core: IR keymap rc-imon-pad not found [ 807.422006][ T5711] usb 5-1: USB disconnect, device number 4 [ 807.462401][ T5612] Registered IR keymap rc-empty [ 807.486484][ T5612] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 807.559427][ T5612] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 807.639701][ T5612] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 807.685491][ T5612] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input114 [ 807.740188][ T5612] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:118> initialized [ 808.157987][T19279] FAULT_INJECTION: forcing a failure. [ 808.157987][T19279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 808.181757][ T5612] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 808.208388][ T985] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 808.225039][T19279] CPU: 1 UID: 0 PID: 19279 Comm: syz.5.4772 Tainted: G L syzkaller #0 PREEMPT(full) [ 808.225067][T19279] Tainted: [L]=SOFTLOCKUP [ 808.225071][T19279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 808.225085][T19279] Call Trace: [ 808.225092][T19279] [ 808.225098][T19279] dump_stack_lvl+0xe8/0x150 [ 808.225120][T19279] should_fail_ex+0x40c/0x560 [ 808.225137][T19279] _copy_from_user+0x2d/0xb0 [ 808.225154][T19279] generic_map_delete_batch+0x302/0x9d0 [ 808.225171][T19279] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 808.225183][T19279] ? __fget_files+0x2a/0x420 [ 808.225201][T19279] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 808.225213][T19279] bpf_map_do_batch+0x445/0x630 [ 808.225231][T19279] __sys_bpf+0xb55/0xd90 [ 808.225249][T19279] ? __pfx___sys_bpf+0x10/0x10 [ 808.225264][T19279] ? ksys_write+0x1e6/0x270 [ 808.225282][T19279] ? __mutex_unlock_slowpath+0x731/0x900 [ 808.225308][T19279] ? fput+0xa0/0xd0 [ 808.225321][T19279] ? ksys_write+0x242/0x270 [ 808.225340][T19279] __ia32_sys_bpf+0xba/0xd0 [ 808.225355][T19279] __do_fast_syscall_32+0x23e/0x6f0 [ 808.225371][T19279] ? do_fast_syscall_32+0x33/0x70 [ 808.225385][T19279] ? lockdep_hardirqs_on+0x7a/0x110 [ 808.225398][T19279] ? asm_int80_emulation+0x1a/0x20 [ 808.225409][T19279] ? do_int80_emulation+0x29f/0x550 [ 808.225423][T19279] ? trace_irq_disable+0x3b/0x140 [ 808.225438][T19279] do_fast_syscall_32+0x33/0x70 [ 808.225453][T19279] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 808.225467][T19279] RIP: 0023:0xf6fdf0ec [ 808.225479][T19279] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 808.225489][T19279] RSP: 002b:00000000f53cd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 808.225503][T19279] RAX: ffffffffffffffda RBX: 000000000000001b RCX: 0000000080000040 [ 808.225512][T19279] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 808.225519][T19279] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 808.225525][T19279] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 808.225532][T19279] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 808.225548][T19279] [ 808.683468][ T5612] usb 1-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 808.694262][ T5612] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.704617][ T5612] usb 1-1: config 0 has no interfaces? [ 808.711109][ T5612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.722923][ T5612] usb 1-1: config 0 descriptor?? [ 808.728148][ T985] usb 5-1: Using ep0 maxpacket: 16 [ 808.734256][ T985] usb 5-1: New USB device found, idVendor=0e41, idProduct=4244, bcdDevice= 0.40 [ 808.756652][ T985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.764999][ T985] usb 5-1: Product: ≠[ 808.769402][ T985] usb 5-1: Manufacturer: 瀶⚸㪵䧎ë‚쇨傾腉╸⺷켼⻃⾛劭啃䎆넺皪ﾣ뤼ñ“žšà»„⪸䡗쿿昻勸蔋휠泫킌⿺䙙꼦꭪ꅳ [ 808.780179][T19286] syzkaller0: entered promiscuous mode [ 808.792407][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.799622][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.806086][ T985] usb 5-1: SerialNumber: Ñ… [ 808.806367][ T5680] kworker/0:3 (5680) used greatest stack depth: 16072 bytes left [ 808.811003][T19286] syzkaller0: entered allmulticast mode [ 809.225582][T19267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.265941][T19291] syzkaller0: entered promiscuous mode [ 809.282228][T19267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.293923][T19291] syzkaller0: entered allmulticast mode [ 809.354584][T19293] netlink: 'syz.2.4778': attribute type 4 has an invalid length. [ 809.362631][T19293] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4778'. [ 809.678293][ T5681] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 809.698440][T19297] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4779'. [ 809.812516][ T5713] usb 4-1: USB disconnect, device number 118 [ 809.836020][ T5681] usb 3-1: unable to get BOS descriptor or descriptor too short [ 809.867112][ T5681] usb 3-1: not running at top speed; connect to a high speed hub [ 809.902236][ T5681] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 809.956774][ T5681] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 809.991060][ T5681] usb 3-1: string descriptor 0 read error: -22 [ 810.014838][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.108957][ T5681] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 810.129582][ T5681] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 810.140211][ T5681] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 810.149206][ T5681] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 810.190269][T19304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4781'. [ 810.331753][T19293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.343761][T19293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.353676][T19308] fuse: Bad value for 'rootmode' [ 810.358768][ T5681] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 810.378754][ T5681] usb 3-1: found format II with max.bitrate = 0, frame size=7 [ 810.397970][ T5681] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 810.399430][T19308] fuse: Bad value for 'fd' [ 810.406631][ T5681] usb 3-1: found format II with max.bitrate = 0, frame size=7 [ 810.461162][T19304] vxlan0: entered promiscuous mode [ 810.518298][T13916] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.553664][T13916] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.597531][T13916] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.654747][T13916] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.792333][ T985] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 810.824277][ T985] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 810.851678][ T5681] usb 3-1: USB disconnect, device number 121 [ 810.953596][T19311] bond5: entered allmulticast mode [ 811.006847][T19311] 8021q: adding VLAN 0 to HW filter on device bond5 [ 811.181341][ T985] usb 5-1: USB disconnect, device number 5 [ 811.334206][ T5612] usb 1-1: string descriptor 0 read error: -71 [ 811.387518][ T5612] usb 1-1: USB disconnect, device number 124 [ 811.566632][T19333] netlink: 'syz.5.4789': attribute type 29 has an invalid length. [ 811.732345][T19326] syzkaller0: entered promiscuous mode [ 811.759957][T19326] syzkaller0: entered allmulticast mode [ 812.318962][ T5713] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 812.486737][ T5713] usb 5-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 812.509906][ T5713] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.533397][ T5713] usb 5-1: config 0 has no interfaces? [ 812.555153][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.574856][ T5713] usb 5-1: config 0 descriptor?? [ 814.342336][ T5713] usb 5-1: string descriptor 0 read error: -71 [ 814.362909][ T5713] usb 5-1: USB disconnect, device number 6 [ 815.928213][T19363] fuse: Unknown parameter 'uid>00000000000000002789' [ 816.258415][ T985] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 816.418992][ T985] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 816.429645][ T985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.441001][ T985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.451174][ T985] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 816.464737][ T985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.483663][ T985] usb 5-1: config 0 descriptor?? [ 816.883085][T19368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4800'. [ 817.005226][ T985] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 817.010019][T19377] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.058282][T19379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4804'. [ 817.116852][T19378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 817.238294][ T5713] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 817.246603][T19388] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4809'. [ 817.265886][T19364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.278583][T19388] syzkaller1: entered promiscuous mode [ 817.284228][T19388] syzkaller1: entered allmulticast mode [ 817.300527][T19364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.400501][ T5713] usb 4-1: Using ep0 maxpacket: 16 [ 817.408222][ T5713] usb 4-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 817.422573][ T5713] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.434236][ T5713] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 817.445574][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.454827][ T5713] usb 4-1: Product: syz [ 817.459432][ T5697] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 817.467582][ T5713] usb 4-1: Manufacturer: syz [ 817.478087][ T5713] usb 4-1: SerialNumber: syz [ 817.488416][ T5713] usb 4-1: config 0 descriptor?? [ 817.628123][ T5697] usb 6-1: Using ep0 maxpacket: 32 [ 817.635703][ T5697] usb 6-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 817.646431][ T5697] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 817.666049][ T5697] usb 6-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 817.693388][ T5697] usb 6-1: config 0 interface 0 has no altsetting 0 [ 817.707968][ T5697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.725452][T19376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.747752][T19376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.777773][ T5697] usb 6-1: config 0 descriptor?? [ 817.787134][ T5713] usb 4-1: USB disconnect, device number 119 [ 817.935385][T19397] sctp: [Deprecated]: syz.0.4812 (pid 19397) Use of int in max_burst socket option. [ 817.935385][T19397] Use struct sctp_assoc_value instead [ 818.142724][T19400] netlink: 'syz.0.4813': attribute type 8 has an invalid length. [ 818.220169][ T5697] kye 0003:0458:5005.0043: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 818.248312][ T5713] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 818.248392][ C1] plantronics 0003:047F:FFFF.0042: usb_submit_urb(ctrl) failed: -1 [ 818.292062][ T5697] hid_parser_main: 70 callbacks suppressed [ 818.292087][ T5697] kye 0003:0458:5005.0043: unknown main item tag 0x0 [ 818.310759][ T5697] kye 0003:0458:5005.0043: unknown main item tag 0x0 [ 818.317573][ T5697] kye 0003:0458:5005.0043: unknown main item tag 0x0 [ 818.324615][ T5697] kye 0003:0458:5005.0043: unknown main item tag 0x0 [ 818.332250][ T5697] kye 0003:0458:5005.0043: unknown main item tag 0x0 [ 818.339458][ T5697] kye 0003:0458:5005.0043: unknown main item tag 0x0 [ 818.346556][ T5697] kye 0003:0458:5005.0043: unknown main item tag 0x0 [ 818.374545][ T5697] kye 0003:0458:5005.0043: unknown main item tag 0x0 [ 818.389382][T19081] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 818.397610][ T5697] kye 0003:0458:5005.0043: unknown main item tag 0x0 [ 818.405038][ T5697] kye 0003:0458:5005.0043: unknown main item tag 0x0 [ 818.433576][ T5697] kye 0003:0458:5005.0043: hidraw1: USB HID v0.08 Device [HID 0458:5005] on usb-dummy_hcd.5-1/input0 [ 818.459014][ T5713] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 818.475383][ T5697] kye 0003:0458:5005.0043: tablet-enabling feature report not found [ 818.483959][T19386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.498223][ T5713] usb 4-1: config 0 has an invalid interface number: 229 but max is 0 [ 818.513886][ T5697] kye 0003:0458:5005.0043: tablet enabling failed [ 818.525522][ T5713] usb 4-1: config 0 has no interface number 0 [ 818.528424][ T985] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 818.540460][T19386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.544474][ T5713] usb 4-1: config 0 interface 229 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 818.600326][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.616707][ T5713] usb 4-1: Product: syz [ 818.631736][ T5713] usb 4-1: Manufacturer: syz [ 818.657136][ T5713] usb 4-1: SerialNumber: syz [ 818.681387][ T5713] usb 4-1: config 0 descriptor?? [ 818.687088][ T5697] usb 6-1: USB disconnect, device number 95 [ 818.724400][T19407] FAULT_INJECTION: forcing a failure. [ 818.724400][T19407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.742198][ T985] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 818.758429][T19407] CPU: 0 UID: 0 PID: 19407 Comm: syz.0.4815 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.758462][T19407] Tainted: [L]=SOFTLOCKUP [ 818.758470][T19407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 818.758482][T19407] Call Trace: [ 818.758497][T19407] [ 818.758507][T19407] dump_stack_lvl+0xe8/0x150 [ 818.758554][T19407] should_fail_ex+0x40c/0x560 [ 818.758584][T19407] _copy_from_user+0x2d/0xb0 [ 818.758613][T19407] ip6_tnl_siocdevprivate+0x1ea/0xad0 [ 818.758709][T19407] ? __pfx_ip6_tnl_siocdevprivate+0x10/0x10 [ 818.758758][T19407] ? __pfx___mutex_lock+0x10/0x10 [ 818.758784][T19407] ? full_name_hash+0x92/0xe0 [ 818.758839][T19407] dev_ifsioc+0xb56/0x1360 [ 818.758877][T19407] dev_ioctl+0x84c/0x1150 [ 818.758909][T19407] sock_ioctl+0x753/0x7e0 [ 818.758937][T19407] ? __pfx_sock_ioctl+0x10/0x10 [ 818.758985][T19407] compat_sock_ioctl+0x289/0xcc0 [ 818.759016][T19407] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 818.759043][T19407] ? __fget_files+0x3a2/0x420 [ 818.759067][T19407] ? __fget_files+0x2a/0x420 [ 818.759093][T19407] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 818.759119][T19407] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 818.759142][T19407] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 818.759162][T19407] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 818.759188][T19407] ? __fget_files+0x3a2/0x420 [ 818.759218][T19407] ? fput+0xa0/0xd0 [ 818.759240][T19407] ? ksys_write+0x242/0x270 [ 818.759278][T19407] __do_fast_syscall_32+0x23e/0x6f0 [ 818.759305][T19407] ? do_fast_syscall_32+0x33/0x70 [ 818.759330][T19407] ? lockdep_hardirqs_on+0x7a/0x110 [ 818.759353][T19407] ? asm_int80_emulation+0x1a/0x20 [ 818.759371][T19407] ? do_int80_emulation+0x29f/0x550 [ 818.759396][T19407] ? trace_irq_disable+0x3b/0x140 [ 818.759423][T19407] do_fast_syscall_32+0x33/0x70 [ 818.759449][T19407] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 818.759471][T19407] RIP: 0023:0xf7f990ec [ 818.759489][T19407] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 818.759505][T19407] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 818.759525][T19407] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000000089f1 [ 818.759542][T19407] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 818.759550][T19407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 818.759556][T19407] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 818.759564][T19407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 818.759580][T19407] [ 818.768158][ T985] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.063808][ T5697] usb 4-1: USB disconnect, device number 120 [ 819.139804][T19410] netlink: 'syz.0.4816': attribute type 1 has an invalid length. [ 819.148332][ T985] usb 3-1: config 0 has no interfaces? [ 819.153970][ T985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.171964][ T985] usb 3-1: config 0 descriptor?? [ 819.234963][T19410] 8021q: adding VLAN 0 to HW filter on device bond3 [ 819.257367][T19414] bond2: (slave dummy0): Releasing active interface [ 819.260133][ T5681] usb 5-1: USB disconnect, device number 7 [ 819.391355][T19414] bond3: (slave dummy0): making interface the new active one [ 819.431521][T19414] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 819.473418][T19410] : renamed from dummy0 (while UP) [ 820.012272][T19431] program syz.3.4821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 820.088196][ T5612] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 820.164531][T19431] unsupported nla_type 256 [ 820.218917][ T5697] usb 6-1: new full-speed USB device number 96 using dummy_hcd [ 820.228352][ T5612] usb 1-1: device descriptor read/64, error -71 [ 820.413848][T19436] FAULT_INJECTION: forcing a failure. [ 820.413848][T19436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 820.449270][ T5697] usb 6-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 820.468871][ T5612] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 820.480336][T19436] CPU: 1 UID: 0 PID: 19436 Comm: syz.4.4823 Tainted: G L syzkaller #0 PREEMPT(full) [ 820.480359][T19436] Tainted: [L]=SOFTLOCKUP [ 820.480363][T19436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 820.480370][T19436] Call Trace: [ 820.480376][T19436] [ 820.480385][T19436] dump_stack_lvl+0xe8/0x150 [ 820.480409][T19436] should_fail_ex+0x40c/0x560 [ 820.480426][T19436] _copy_from_user+0x2d/0xb0 [ 820.480444][T19436] __sys_sendto+0x2a9/0x5a0 [ 820.480459][T19436] ? __pfx___sys_sendto+0x10/0x10 [ 820.480478][T19436] ? __fget_files+0x3a2/0x420 [ 820.480498][T19436] ? ksys_write+0x242/0x270 [ 820.480517][T19436] __ia32_sys_sendto+0xdd/0x100 [ 820.480531][T19436] __do_fast_syscall_32+0x23e/0x6f0 [ 820.480547][T19436] ? do_fast_syscall_32+0x33/0x70 [ 820.480561][T19436] ? lockdep_hardirqs_on+0x7a/0x110 [ 820.480575][T19436] ? asm_int80_emulation+0x1a/0x20 [ 820.480586][T19436] ? do_int80_emulation+0x29f/0x550 [ 820.480600][T19436] ? trace_irq_disable+0x3b/0x140 [ 820.480615][T19436] do_fast_syscall_32+0x33/0x70 [ 820.480631][T19436] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 820.480644][T19436] RIP: 0023:0xf7f680ec [ 820.480656][T19436] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 820.480666][T19436] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 820.480681][T19436] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 820.480690][T19436] RDX: 000000000000000e RSI: 0000000000040880 RDI: 0000000080000200 [ 820.480697][T19436] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 820.480705][T19436] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 820.480712][T19436] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 820.480728][T19436] [ 821.028257][ T5612] usb 1-1: device descriptor read/64, error -71 [ 821.123839][ T5697] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 821.156152][T19438] fuse: Unknown parameter '0xffffffffffffffff' [ 821.164913][ T5612] usb usb1-port1: attempt power cycle [ 821.177022][ T5697] usb 6-1: config 0 has no interfaces? [ 821.193136][T19438] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4824'. [ 821.212081][ T5697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.251149][T19438] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4824'. [ 821.281362][ T5697] usb 6-1: config 0 descriptor?? [ 821.331599][ T985] usb 3-1: string descriptor 0 read error: -71 [ 821.394295][ T985] usb 3-1: USB disconnect, device number 122 [ 821.543687][ T5612] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 821.585962][ T5612] usb 1-1: device descriptor read/8, error -71 [ 821.607852][T19441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4825'. [ 821.753731][T19445] FAULT_INJECTION: forcing a failure. [ 821.753731][T19445] name failslab, interval 1, probability 0, space 0, times 0 [ 821.802135][T19445] CPU: 1 UID: 0 PID: 19445 Comm: syz.2.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 821.802166][T19445] Tainted: [L]=SOFTLOCKUP [ 821.802173][T19445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 821.802183][T19445] Call Trace: [ 821.802188][T19445] [ 821.802194][T19445] dump_stack_lvl+0xe8/0x150 [ 821.802217][T19445] should_fail_ex+0x40c/0x560 [ 821.802234][T19445] should_failslab+0xa8/0x100 [ 821.802262][T19445] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 821.802284][T19445] ? local_lock_release+0x9c/0x160 [ 821.802312][T19445] ? __alloc_skb+0x1d7/0x7a0 [ 821.802328][T19445] ? __alloc_skb+0x1d7/0x7a0 [ 821.802346][T19445] __alloc_skb+0x1d7/0x7a0 [ 821.802359][T19445] __ip6_append_data+0x2ec4/0x40c0 [ 821.802383][T19445] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 821.802425][T19445] ? __pfx___ip6_append_data+0x10/0x10 [ 821.802443][T19445] ? do_raw_spin_lock+0x12b/0x2f0 [ 821.802466][T19445] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 821.802489][T19445] ip6_append_data+0x108/0x270 [ 821.802504][T19445] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 821.802519][T19445] udpv6_sendmsg+0xd0d/0x2610 [ 821.802537][T19445] ? arch_stack_walk+0xfb/0x150 [ 821.802564][T19445] ? __lock_acquire+0x683/0x2cf0 [ 821.802588][T19445] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 821.802653][T19445] ? inet_send_prepare+0x5b/0x260 [ 821.802668][T19445] ? inet6_sendmsg+0xe4/0x120 [ 821.802683][T19445] ? __pfx_inet6_sendmsg+0x10/0x10 [ 821.802697][T19445] sock_sendmsg_nosec+0x90/0x180 [ 821.802720][T19445] sock_sendmsg+0x1ca/0x2d0 [ 821.802751][T19445] ? __pfx_sock_sendmsg+0x10/0x10 [ 821.802787][T19445] ? __asan_memset+0x22/0x50 [ 821.802806][T19445] ? iov_iter_bvec+0xb8/0x180 [ 821.802823][T19445] splice_to_socket+0xb5e/0x12a0 [ 821.802855][T19445] ? __pfx_splice_to_socket+0x10/0x10 [ 821.802899][T19445] ? shmem_file_splice_read+0xa2b/0xb90 [ 821.802939][T19445] ? __pfx_splice_to_socket+0x10/0x10 [ 821.802963][T19445] direct_splice_actor+0x101/0x160 [ 821.802980][T19445] splice_direct_to_actor+0x57b/0xcb0 [ 821.803007][T19445] ? __pfx_direct_splice_actor+0x10/0x10 [ 821.803026][T19445] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 821.803069][T19445] do_splice_direct+0x195/0x290 [ 821.803097][T19445] ? __pfx_do_splice_direct+0x10/0x10 [ 821.803118][T19445] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 821.803135][T19445] ? bpf_lsm_file_permission+0x9/0x20 [ 821.803153][T19445] ? security_file_permission+0x75/0x260 [ 821.803179][T19445] ? rw_verify_area+0x203/0x4c0 [ 821.803209][T19445] do_sendfile+0x52e/0x7c0 [ 821.803237][T19445] ? __pfx_do_sendfile+0x10/0x10 [ 821.803257][T19445] ? ksys_write+0x242/0x270 [ 821.803289][T19445] ? __ia32_compat_sys_sendfile+0x180/0x1d0 [ 821.803317][T19445] __do_fast_syscall_32+0x23e/0x6f0 [ 821.803343][T19445] ? do_fast_syscall_32+0x33/0x70 [ 821.803367][T19445] ? lockdep_hardirqs_on+0x7a/0x110 [ 821.803390][T19445] ? asm_int80_emulation+0x1a/0x20 [ 821.803407][T19445] ? do_int80_emulation+0x29f/0x550 [ 821.803432][T19445] ? trace_irq_disable+0x3b/0x140 [ 821.803458][T19445] do_fast_syscall_32+0x33/0x70 [ 821.803483][T19445] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 821.803506][T19445] RIP: 0023:0xf7fc70ec [ 821.803525][T19445] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 821.803542][T19445] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 821.803564][T19445] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000003 [ 821.803577][T19445] RDX: 0000000000000000 RSI: 000000000000d39a RDI: 0000000000000000 [ 821.803590][T19445] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 821.803600][T19445] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 821.803612][T19445] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 821.803642][T19445] [ 822.286098][ T5612] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 822.468859][ T5612] usb 1-1: device descriptor read/8, error -71 [ 822.579666][ T5612] usb usb1-port1: unable to enumerate USB device [ 822.738216][ T5713] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 822.908348][ T5713] usb 3-1: Using ep0 maxpacket: 32 [ 822.929497][ T5713] usb 3-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 822.965219][ T5713] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 822.981906][T19459] FAULT_INJECTION: forcing a failure. [ 822.981906][T19459] name failslab, interval 1, probability 0, space 0, times 0 [ 822.984038][ T5713] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 822.995657][T19455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4831'. [ 823.017462][T19459] CPU: 1 UID: 0 PID: 19459 Comm: syz.0.4833 Tainted: G L syzkaller #0 PREEMPT(full) [ 823.017496][T19459] Tainted: [L]=SOFTLOCKUP [ 823.017503][T19459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 823.017514][T19459] Call Trace: [ 823.017523][T19459] [ 823.017531][T19459] dump_stack_lvl+0xe8/0x150 [ 823.017566][T19459] should_fail_ex+0x40c/0x560 [ 823.017590][T19459] ? io_alloc_cache_init+0x42/0x140 [ 823.017623][T19459] should_failslab+0xa8/0x100 [ 823.017651][T19459] __kvmalloc_node_noprof+0x176/0x860 [ 823.017678][T19459] ? __kvmalloc_node_noprof+0x35c/0x860 [ 823.017695][T19459] ? io_alloc_cache_init+0x42/0x140 [ 823.017717][T19459] io_alloc_cache_init+0x42/0x140 [ 823.017736][T19459] io_rsrc_cache_init+0x43/0x50 [ 823.017820][T19459] io_ring_ctx_alloc+0x554/0xc40 [ 823.017852][T19459] io_uring_create+0x50/0x990 [ 823.017880][T19459] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 823.017900][T19459] ? __fget_files+0x2a/0x420 [ 823.017924][T19459] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 823.017954][T19459] ? ksys_write+0x242/0x270 [ 823.017985][T19459] __do_fast_syscall_32+0x23e/0x6f0 [ 823.018007][T19459] ? do_fast_syscall_32+0x33/0x70 [ 823.018033][T19459] ? lockdep_hardirqs_on+0x7a/0x110 [ 823.018055][T19459] ? asm_int80_emulation+0x1a/0x20 [ 823.018073][T19459] ? do_int80_emulation+0x29f/0x550 [ 823.018092][T19459] ? trace_irq_disable+0x3b/0x140 [ 823.018113][T19459] do_fast_syscall_32+0x33/0x70 [ 823.018133][T19459] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 823.018151][T19459] RIP: 0023:0xf7f990ec [ 823.018166][T19459] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 823.018179][T19459] RSP: 002b:00000000f54564bc EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 823.018198][T19459] RAX: ffffffffffffffda RBX: 0000000000005b0f RCX: 0000000080000280 [ 823.018211][T19459] RDX: 0000000000000000 RSI: 00000000f5456514 RDI: 00000000f5456578 [ 823.018221][T19459] RBP: 0000000080000080 R08: 0000000000000000 R09: 0000000000000000 [ 823.018231][T19459] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 823.018240][T19459] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 823.018263][T19459] [ 823.242780][ T5713] usb 3-1: config 0 interface 0 has no altsetting 0 [ 823.249563][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.261735][ T5713] usb 3-1: config 0 descriptor?? [ 823.578911][T14982] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 823.680898][ T5713] kye 0003:0458:5005.0044: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 823.694492][ T5713] hid_parser_main: 30 callbacks suppressed [ 823.694519][ T5713] kye 0003:0458:5005.0044: unknown main item tag 0x0 [ 823.714133][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 823.738217][T14982] usb 1-1: Using ep0 maxpacket: 8 [ 823.744800][ T5713] kye 0003:0458:5005.0044: unknown main item tag 0x0 [ 823.761984][T14982] usb 1-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 823.772369][ T5713] kye 0003:0458:5005.0044: unknown main item tag 0x0 [ 823.779311][ T5713] kye 0003:0458:5005.0044: unknown main item tag 0x0 [ 823.786191][ T5713] kye 0003:0458:5005.0044: unknown main item tag 0x0 [ 823.793478][ T5713] kye 0003:0458:5005.0044: unknown main item tag 0x0 [ 823.800924][T14982] usb 1-1: config index 0 descriptor too short (expected 30244, got 36) [ 823.810242][ T5713] kye 0003:0458:5005.0044: unknown main item tag 0x0 [ 823.817022][T14982] usb 1-1: config 130 has too many interfaces: 65, using maximum allowed: 32 [ 823.825979][ T5713] kye 0003:0458:5005.0044: unknown main item tag 0x0 [ 823.832918][T14982] usb 1-1: config 130 has an invalid descriptor of length 199, skipping remainder of the config [ 823.843456][ T5713] kye 0003:0458:5005.0044: unknown main item tag 0x0 [ 823.850277][ T5713] kye 0003:0458:5005.0044: unknown main item tag 0x0 [ 823.857026][T14982] usb 1-1: config 130 has 0 interfaces, different from the descriptor's value: 65 [ 823.869541][T14982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.880938][ T5713] kye 0003:0458:5005.0044: hidraw0: USB HID v0.08 Device [HID 0458:5005] on usb-dummy_hcd.2-1/input0 [ 823.906225][ T5713] kye 0003:0458:5005.0044: tablet-enabling feature report not found [ 823.923535][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 823.942116][ T5713] kye 0003:0458:5005.0044: tablet enabling failed [ 823.951792][ T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 823.978706][ T5612] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 823.983777][ T9] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 824.008708][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 824.016910][T19449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.028207][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.032450][T19449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.052880][ T9] usb 5-1: config 0 descriptor?? [ 824.133972][ T5681] usb 3-1: USB disconnect, device number 123 [ 824.143082][ T5612] usb 4-1: Using ep0 maxpacket: 32 [ 824.157794][ T5612] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 824.171224][T19461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4834'. [ 824.202516][ T5612] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 824.226426][ T5612] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 824.252850][ T5612] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 824.275340][ T5697] usb 6-1: string descriptor 0 read error: -71 [ 824.278394][ T5612] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 824.326964][ T5697] usb 6-1: USB disconnect, device number 96 [ 824.346073][ T5612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.374599][ T5612] usb 4-1: Product: syz [ 824.387064][ T5612] usb 4-1: Manufacturer: syz [ 824.399933][ T5612] usb 4-1: SerialNumber: syz [ 824.436321][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 824.452830][ T5612] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input115 [ 824.537721][ T9] corsair-cpro 0003:1B1C:0C10.0045: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 824.563590][T14982] usb 1-1: string descriptor 0 read error: -71 [ 824.604397][T14982] usb 1-1: USB disconnect, device number 3 [ 824.660935][ T5612] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 824.709093][ T5612] (id 0x00) [ 824.781057][ T5681] IPVS: starting estimator thread 0... [ 824.881733][T19480] random: crng reseeded on system resumption [ 824.891404][T19476] IPVS: using max 27 ests per chain, 64800 per kthread [ 824.899911][ T5612] rc_core: IR keymap rc-imon-pad not found [ 824.914510][ T5612] Registered IR keymap rc-empty [ 824.937209][ T5612] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 824.976084][ T5612] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 825.022730][ T5612] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 825.040335][T19483] FAULT_INJECTION: forcing a failure. [ 825.040335][T19483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 825.055508][ T5612] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input116 [ 825.088423][T19483] CPU: 1 UID: 0 PID: 19483 Comm: syz.5.4840 Tainted: G L syzkaller #0 PREEMPT(full) [ 825.088462][T19483] Tainted: [L]=SOFTLOCKUP [ 825.088469][T19483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 825.088481][T19483] Call Trace: [ 825.088489][T19483] [ 825.088498][T19483] dump_stack_lvl+0xe8/0x150 [ 825.088533][T19483] should_fail_ex+0x40c/0x560 [ 825.088562][T19483] _copy_to_user+0x31/0xb0 [ 825.088591][T19483] simple_read_from_buffer+0xe1/0x170 [ 825.088623][T19483] proc_fail_nth_read+0x1bb/0x230 [ 825.088654][T19483] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 825.088684][T19483] ? rw_verify_area+0x24a/0x4c0 [ 825.088714][T19483] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 825.088740][T19483] vfs_read+0x213/0xa80 [ 825.088772][T19483] ? __pfx___mutex_lock+0x10/0x10 [ 825.088801][T19483] ? __pfx_vfs_read+0x10/0x10 [ 825.088829][T19483] ? __fget_files+0x2a/0x420 [ 825.088856][T19483] ? __fget_files+0x3a2/0x420 [ 825.088879][T19483] ? __fget_files+0x2a/0x420 [ 825.088912][T19483] ksys_read+0x150/0x270 [ 825.088944][T19483] ? __pfx_ksys_read+0x10/0x10 [ 825.088975][T19483] ? asm_int80_emulation+0x1a/0x20 [ 825.089000][T19483] do_int80_emulation+0x19a/0x550 [ 825.089026][T19483] ? trace_irq_disable+0x3b/0x140 [ 825.089048][T19483] ? asm_int80_emulation+0x1a/0x20 [ 825.089075][T19483] ? clear_bhb_loop+0x70/0xc0 [ 825.089093][T19483] ? clear_bhb_loop+0x70/0xc0 [ 825.089116][T19483] asm_int80_emulation+0x1a/0x20 [ 825.089135][T19483] RIP: 0023:0xf71174eb [ 825.089154][T19483] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 825.089171][T19483] RSP: 002b:00000000f53cd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 825.089193][T19483] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53cd5d0 [ 825.089207][T19483] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 825.089219][T19483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 825.089231][T19483] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 825.089243][T19483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 825.089274][T19483] [ 825.159371][ T5612] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:121> initialized [ 825.310961][T19486] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 825.345891][T19486] ALSA: mixer_oss: invalid OSS volume 'VOLUM0:00000000' [ 825.366713][T14983] hid-generic 0000:0000:0000.0046: hidraw1: HID v0.00 Device [syz0] on syz0 [ 825.374664][T19486] ALSA: mixer_oss: invalid OSS volume '7' [ 825.382439][T19486] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 825.388877][T19486] ALSA: mixer_oss: invalid OSS volume '8' [ 825.410459][ T9] corsair-cpro 0003:1B1C:0C10.0045: probe with driver corsair-cpro failed with error -71 [ 825.539729][ T9] usb 5-1: USB disconnect, device number 8 [ 825.638678][T19490] fido_id[19490]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 825.892253][T19498] bond1 (unregistering): Released all slaves [ 826.005433][T19467] imon:send_packet: task interrupted [ 826.023383][T19467] imon:send_packet: packet tx failed (-512) [ 826.049497][ T5681] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 826.058257][T19467] imon:vfd_write: send packet #2 failed [ 826.208233][ T5681] usb 6-1: Using ep0 maxpacket: 8 [ 826.215829][ T5681] usb 6-1: unable to get BOS descriptor or descriptor too short [ 826.228246][ T5681] usb 6-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice=4b.37 [ 826.252789][ T5681] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 826.281449][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 826.288164][ T5681] usb 6-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 826.311022][ T5681] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.320302][ T5681] usb 6-1: Product: syz [ 826.326740][ T5681] usb 6-1: Manufacturer: syz [ 826.335530][ T5681] usb 6-1: SerialNumber: syz [ 826.377521][T19506] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 826.478361][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 826.486124][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 826.502243][ T9] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 826.518123][ T9] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 826.534594][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 826.541726][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.564884][ T5681] usb 6-1: USB disconnect, device number 97 [ 826.572133][ T9] usb 5-1: config 0 descriptor?? [ 826.581597][T19514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4851'. [ 826.873603][ T30] audit: type=1326 audit(1786302050.732:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19516 comm="syz.2.4852" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fc70ec code=0x7ffc0000 [ 826.899347][ T30] audit: type=1326 audit(1786302050.732:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19516 comm="syz.2.4852" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fc70ec code=0x7ffc0000 [ 826.924228][ T30] audit: type=1326 audit(1786302050.732:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19516 comm="syz.2.4852" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fc70ec code=0x7ffc0000 [ 826.955934][ T30] audit: type=1326 audit(1786302050.732:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19516 comm="syz.2.4852" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fc70ec code=0x7ffc0000 [ 826.980971][ T30] audit: type=1326 audit(1786302050.732:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19516 comm="syz.2.4852" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fc70ec code=0x7ffc0000 [ 827.006167][ T30] audit: type=1326 audit(1786302050.732:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19516 comm="syz.2.4852" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fc70ec code=0x7ffc0000 [ 827.009117][T14983] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 827.031359][ T30] audit: type=1326 audit(1786302050.732:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19516 comm="syz.2.4852" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fc70ec code=0x7ffc0000 [ 827.052192][ T9] kye 0003:0458:5005.0047: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 827.145514][ T30] audit: type=1326 audit(1786302050.732:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19516 comm="syz.2.4852" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fc70ec code=0x7ffc0000 [ 827.148414][ T9] kye 0003:0458:5005.0047: hidraw0: USB HID v0.08 Device [HID 0458:5005] on usb-dummy_hcd.4-1/input0 [ 827.228371][ T9] kye 0003:0458:5005.0047: tablet-enabling feature report not found [ 827.244957][ T30] audit: type=1326 audit(1786302050.732:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19516 comm="syz.2.4852" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fc70ec code=0x7ffc0000 [ 827.269383][ T9] kye 0003:0458:5005.0047: tablet enabling failed [ 827.309648][T14983] usb 1-1: Using ep0 maxpacket: 16 [ 827.322570][T14983] usb 1-1: unable to get BOS descriptor or descriptor too short [ 827.334369][ T30] audit: type=1326 audit(1786302050.732:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19516 comm="syz.2.4852" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fc70ec code=0x7ffc0000 [ 827.335732][T14983] usb 1-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 827.430039][T14983] usb 1-1: config 1 has an invalid interface number: 232 but max is 0 [ 827.452834][T14983] usb 1-1: config 1 has no interface number 0 [ 827.462797][ T9] usb 5-1: USB disconnect, device number 9 [ 827.496145][T14983] usb 1-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 827.561220][ T5681] usb 4-1: USB disconnect, device number 121 [ 827.604735][T14983] usb 1-1: config 1 interface 232 has no altsetting 0 [ 827.652583][T14983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.692504][T14983] usb 1-1: Product: syz [ 827.704011][T14983] usb 1-1: Manufacturer: syz [ 827.717670][T14983] usb 1-1: SerialNumber: syz [ 827.737978][T19520] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 827.977676][T19520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.030620][T19520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.258228][ T985] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 828.293752][T19520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.351981][T19520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.400134][ T9] usb 6-1: new full-speed USB device number 98 using dummy_hcd [ 828.464077][ T985] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 828.523450][ T985] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 828.544720][ T985] usb 3-1: config 0 has no interfaces? [ 828.554571][ T985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.611254][ T9] usb 6-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 828.622278][ T985] usb 3-1: config 0 descriptor?? [ 828.638747][T19559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4861'. [ 828.694375][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 828.718410][T19520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.747502][ T9] usb 6-1: config 0 has no interfaces? [ 828.760910][T19520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.773375][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.866709][T19520] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4853'. [ 828.877970][ T9] usb 6-1: config 0 descriptor?? [ 829.285419][T14983] hub 1-1:1.232: bad descriptor, ignoring hub [ 829.316950][T14983] hub 1-1:1.232: probe with driver hub failed with error -5 [ 829.339249][T14983] option 1-1:1.232: GSM modem (1-port) converter detected [ 829.384907][T14983] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 829.457427][T14983] usb 1-1: USB disconnect, device number 4 [ 829.533852][T14983] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 829.579911][T14983] option 1-1:1.232: device disconnected [ 829.824357][T19578] random: crng reseeded on system resumption [ 831.018225][ T985] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 831.180970][ T5612] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 831.205323][ T985] usb 4-1: unable to get BOS descriptor or descriptor too short [ 831.223243][ T985] usb 4-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 831.245884][ T5681] usb 6-1: USB disconnect, device number 98 [ 831.261869][ T985] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 831.297951][ T985] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 831.356000][ T985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.374413][ T5612] usb 1-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 831.394626][ T985] usb 4-1: Product: syz [ 831.412164][ T985] usb 4-1: Manufacturer: syz [ 831.427700][ T5612] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.438717][ T985] usb 4-1: SerialNumber: syz [ 831.474864][ T5612] usb 1-1: config 0 has no interfaces? [ 831.499763][ T5612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.568730][ T5612] usb 1-1: config 0 descriptor?? [ 831.594747][ T5713] usb 3-1: USB disconnect, device number 124 [ 832.148166][T19081] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 832.268168][ T5681] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 832.308180][T19081] usb 3-1: Using ep0 maxpacket: 32 [ 832.323065][T19081] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 832.336879][T19081] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 832.347750][T19081] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 832.370638][T19081] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.381742][T19081] usb 3-1: Product: syz [ 832.394735][T19081] usb 3-1: Manufacturer: syz [ 832.407014][T19081] usb 3-1: SerialNumber: syz [ 832.438607][ T5681] usb 6-1: Using ep0 maxpacket: 32 [ 832.446077][ T5681] usb 6-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 832.473523][ T5681] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 832.498453][ T5681] usb 6-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 832.542750][ T5681] usb 6-1: config 0 interface 0 has no altsetting 0 [ 832.556024][ T5681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.586976][ T5681] usb 6-1: config 0 descriptor?? [ 833.012267][ T5681] kye 0003:0458:5005.0048: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 833.024081][ T5681] hid_parser_main: 72 callbacks suppressed [ 833.024222][ T5681] kye 0003:0458:5005.0048: unknown main item tag 0x0 [ 833.041183][ T5681] kye 0003:0458:5005.0048: unknown main item tag 0x0 [ 833.049522][ T5681] kye 0003:0458:5005.0048: unknown main item tag 0x0 [ 833.056547][ T5681] kye 0003:0458:5005.0048: unknown main item tag 0x0 [ 833.064785][ T5681] kye 0003:0458:5005.0048: unknown main item tag 0x0 [ 833.074765][ T5681] kye 0003:0458:5005.0048: unknown main item tag 0x0 [ 833.082411][ T5681] kye 0003:0458:5005.0048: unknown main item tag 0x0 [ 833.092229][ T5681] kye 0003:0458:5005.0048: unknown main item tag 0x0 [ 833.102403][ T5681] kye 0003:0458:5005.0048: unknown main item tag 0x0 [ 833.116908][ T5681] kye 0003:0458:5005.0048: unknown main item tag 0x0 [ 833.137112][ T5681] kye 0003:0458:5005.0048: hidraw0: USB HID v0.08 Device [HID 0458:5005] on usb-dummy_hcd.5-1/input0 [ 833.162897][ T5681] kye 0003:0458:5005.0048: tablet-enabling feature report not found [ 833.171763][ T5681] kye 0003:0458:5005.0048: tablet enabling failed [ 833.423352][ T5681] usb 6-1: USB disconnect, device number 99 [ 833.767972][ T5612] usb 1-1: string descriptor 0 read error: -71 [ 833.780945][ T5612] usb 1-1: USB disconnect, device number 5 [ 834.012911][ T985] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 834.032310][ T985] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 834.066782][ T985] usb 4-1: failed to enable PITCH for EP 0x1 [ 834.081641][ T985] usb 4-1: unit 2 not found! [ 834.093665][ T985] usb 4-1: unit 0 not found! [ 834.200199][T19624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4876'. [ 834.221582][T19623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.299455][ T985] usb 4-1: USB disconnect, device number 122 [ 834.348288][ T9] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 834.440073][T10224] udevd[10224]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 834.508212][ T9] usb 6-1: device descriptor read/64, error -71 [ 834.574665][T19631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4879'. [ 834.585509][T19631] netlink: 'syz.4.4879': attribute type 5 has an invalid length. [ 834.593965][T19631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4879'. [ 834.608172][ T5612] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 834.649714][T19633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4880'. [ 834.669884][T19633] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20000 [ 834.760565][ T5612] usb 1-1: unable to get BOS descriptor or descriptor too short [ 834.768340][ T9] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 834.777616][ T5612] usb 1-1: not running at top speed; connect to a high speed hub [ 834.786860][ T5612] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 834.813074][ T5612] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 834.828150][ T5612] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 834.839764][ T5612] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 834.894836][ T5713] usb 3-1: USB disconnect, device number 125 [ 834.903698][ T5612] usb 1-1: string descriptor 0 read error: -22 [ 834.916772][ T5612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.918273][ T9] usb 6-1: device descriptor read/64, error -71 [ 835.081341][ T5612] usb 1-1: 0:1 : does not exist [ 835.094866][ T5612] usb 1-1: 0:2 : does not exist [ 835.099265][ T9] usb usb6-port1: attempt power cycle [ 835.218179][T14983] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 835.398898][T14983] usb 4-1: Using ep0 maxpacket: 16 [ 835.413337][T14983] usb 4-1: unable to get BOS descriptor or descriptor too short [ 835.438558][T14983] usb 4-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 835.457517][T14983] usb 4-1: config 1 has an invalid interface number: 232 but max is 0 [ 835.488555][T14983] usb 4-1: config 1 has no interface number 0 [ 835.497101][ T9] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 835.505782][T14983] usb 4-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 835.517371][T14983] usb 4-1: config 1 interface 232 has no altsetting 0 [ 835.527978][T14983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.536651][T14983] usb 4-1: Product: syz [ 835.544828][T14983] usb 4-1: Manufacturer: syz [ 835.544983][ T9] usb 6-1: device descriptor read/8, error -71 [ 835.556515][T14983] usb 4-1: SerialNumber: syz [ 835.566724][T19638] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 835.638604][ T5612] usb 1-1: USB disconnect, device number 6 [ 835.652129][T14982] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 835.785775][T19638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.809857][ T9] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 835.818611][T19638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.848900][ T9] usb 6-1: device descriptor read/8, error -71 [ 835.869153][T14982] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 835.882237][T14982] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.892746][T14982] usb 3-1: config 0 has no interfaces? [ 835.898518][T14982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.911025][T14982] usb 3-1: config 0 descriptor?? [ 835.946374][T19638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.976731][T19638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.978475][ T9] usb usb6-port1: unable to enumerate USB device [ 836.053620][T19638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.088716][ T985] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 836.096957][T19638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.124781][T19638] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4882'. [ 836.268874][ T985] usb 5-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 836.270948][T19656] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4885'. [ 836.296018][ T985] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.317471][T14983] hub 4-1:1.232: bad descriptor, ignoring hub [ 836.327425][ T985] usb 5-1: config 0 has no interfaces? [ 836.337398][ T985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.339558][T14983] hub 4-1:1.232: probe with driver hub failed with error -5 [ 836.363613][ T985] usb 5-1: config 0 descriptor?? [ 836.390687][T14983] option 4-1:1.232: GSM modem (1-port) converter detected [ 836.432914][T14983] usb 4-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 836.491488][T19658] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4886'. [ 836.501095][T14983] usb 4-1: USB disconnect, device number 123 [ 836.555147][ T9965] udevd[9965]: setting mode of /dev/ttyUSB0 to 020660 failed: No such file or directory [ 836.571058][T14983] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 836.587913][ T9965] udevd[9965]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 836.604062][T14983] option 4-1:1.232: device disconnected [ 837.418173][T14983] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 837.652103][T14983] usb 1-1: Using ep0 maxpacket: 32 [ 837.674899][T14983] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 837.711230][T14983] usb 1-1: config 0 has an invalid interface number: 28 but max is 0 [ 837.719922][T14983] usb 1-1: config 0 has no interface number 0 [ 837.726105][T14983] usb 1-1: too many endpoints for config 0 interface 28 altsetting 139: 234, using maximum allowed: 30 [ 837.740738][T14983] usb 1-1: config 0 interface 28 altsetting 139 has 0 endpoint descriptors, different from the interface descriptor's value: 234 [ 837.765097][T14983] usb 1-1: config 0 interface 28 has no altsetting 0 [ 837.775945][T14983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.796129][T14983] usb 1-1: config 0 descriptor?? [ 838.059298][T14983] usb 1-1: string descriptor 0 read error: -71 [ 838.109907][T14983] usb 1-1: USB disconnect, device number 7 [ 838.251738][T14982] usb 3-1: string descriptor 0 read error: -71 [ 838.274975][T14982] usb 3-1: USB disconnect, device number 126 [ 838.541337][T19683] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4896'. [ 838.968207][ T5612] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 839.128165][ T5612] usb 3-1: Using ep0 maxpacket: 16 [ 839.146017][ T5612] usb 3-1: unable to get BOS descriptor or descriptor too short [ 839.172350][ T5612] usb 3-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 839.197673][ T5612] usb 3-1: config 1 has an invalid interface number: 232 but max is 0 [ 839.224219][ T5612] usb 3-1: config 1 has no interface number 0 [ 839.251858][ T5612] usb 3-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 839.295582][ T5612] usb 3-1: config 1 interface 232 has no altsetting 0 [ 839.324312][ T5612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.376787][ T5612] usb 3-1: Product: syz [ 839.396437][ T5612] usb 3-1: Manufacturer: syz [ 839.423582][ T5612] usb 3-1: SerialNumber: syz [ 839.471678][ T985] usb 5-1: string descriptor 0 read error: -71 [ 839.491573][T19687] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 839.524059][ T985] usb 5-1: USB disconnect, device number 10 [ 839.588253][ T5681] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 839.762324][ T5681] usb 1-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 839.802267][T19687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.816395][ T5681] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.839468][T19687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.872245][ T5681] usb 1-1: config 0 has no interfaces? [ 839.886383][ T5681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.939208][ T5681] usb 1-1: config 0 descriptor?? [ 840.089596][T19687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.138720][T19687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.237174][T19687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.295821][T19687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.313896][T19712] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4907'. [ 840.351008][T19687] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4897'. [ 840.666803][ T5612] hub 3-1:1.232: bad descriptor, ignoring hub [ 840.687609][ T5612] hub 3-1:1.232: probe with driver hub failed with error -5 [ 840.706274][ T5612] option 3-1:1.232: GSM modem (1-port) converter detected [ 840.774785][ T5612] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 840.820981][ T5612] usb 3-1: USB disconnect, device number 127 [ 840.874576][ T5612] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 840.912434][ T5612] option 3-1:1.232: device disconnected [ 840.990868][T14983] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 841.160867][T14983] usb 4-1: unable to get BOS descriptor or descriptor too short [ 841.191355][T14983] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 841.218716][T14983] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 841.257601][T14983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.282983][T14983] usb 4-1: Product: syz [ 841.292442][T14983] usb 4-1: Manufacturer: syz [ 841.316043][T14983] usb 4-1: SerialNumber: syz [ 841.542420][T14983] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 841.736698][T14983] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 841.767367][T14983] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 841.937865][T19719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.961901][T19719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.997875][T19719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.029805][T19719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.105733][T14983] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 842.379326][T19745] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4918'. [ 842.454745][T14983] usb 4-1: USB disconnect, device number 124 [ 842.666449][ T9965] udevd[9965]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 842.913768][T14983] usb 1-1: USB disconnect, device number 8 [ 843.120576][T14982] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 843.272965][T19769] netlink: 208 bytes leftover after parsing attributes in process `syz.5.4926'. [ 843.288974][T14982] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 843.295586][T19769] netlink: 'syz.5.4926': attribute type 3 has an invalid length. [ 843.314342][T14982] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 843.344266][T14982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.368921][ T9] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 843.387622][T14982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.407717][T14982] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 843.432951][T14982] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 843.450613][T14982] usb 3-1: Manufacturer: syz [ 843.470981][T14982] usb 3-1: config 0 descriptor?? [ 843.559657][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 843.570400][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 843.582163][ T9] usb 4-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 843.582458][T19781] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4930'. [ 843.593063][ T9] usb 4-1: config 1 has an invalid interface number: 232 but max is 0 [ 843.619873][ T9] usb 4-1: config 1 has no interface number 0 [ 843.645110][ T9] usb 4-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 843.673538][ T9] usb 4-1: config 1 interface 232 has no altsetting 0 [ 843.701757][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.710417][ T9] usb 4-1: Product: syz [ 843.714841][ T9] usb 4-1: Manufacturer: syz [ 843.719645][ T9] usb 4-1: SerialNumber: syz [ 843.730624][T19759] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 843.749140][ T1225] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 843.899683][T14982] hid_parser_main: 30 callbacks suppressed [ 843.899737][T14982] appleir 0003:05AC:8243.0049: unknown main item tag 0x0 [ 843.914159][ T1225] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 843.927763][ T1225] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 843.943569][T14982] appleir 0003:05AC:8243.0049: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 843.947821][ T1225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 843.959328][T19759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.996196][ T1225] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 844.007292][T19759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.057435][ T1225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.099320][T19759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.110069][ T1225] usb 1-1: config 0 descriptor?? [ 844.145965][ T1225] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 844.170954][T19759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.217744][T19759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.232124][T19759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.243369][T19759] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4923'. [ 844.345350][ T5612] usb 1-1: USB disconnect, device number 9 [ 844.366332][T19790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.402085][T19790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.413804][ T9] hub 4-1:1.232: bad descriptor, ignoring hub [ 844.433145][ T9] hub 4-1:1.232: probe with driver hub failed with error -5 [ 844.445726][T14982] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 844.459263][ T9] option 4-1:1.232: GSM modem (1-port) converter detected [ 844.485878][ T9] usb 4-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 844.539869][ T9] usb 4-1: USB disconnect, device number 125 [ 844.600788][ T9] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 844.630160][T14982] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 844.642523][ T9] option 4-1:1.232: device disconnected [ 844.654800][T14982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.662645][T19753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 844.670915][T14982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.689284][T14982] usb 6-1: config 0 descriptor?? [ 844.762343][ T5612] usb 3-1: USB disconnect, device number 2 [ 845.090723][T19806] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4935'. [ 845.165546][T19806] syzkaller1: entered promiscuous mode [ 845.177711][T19806] syzkaller1: entered allmulticast mode [ 845.215289][T19808] syzkaller0: entered promiscuous mode [ 845.221651][T19808] syzkaller0: entered allmulticast mode [ 845.408264][ T1225] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 845.592228][ T1225] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 845.693008][ T1225] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0xA has an invalid bInterval 0, changing to 4 [ 845.738192][ T1225] usb 1-1: config 0 interface 0 has no altsetting 0 [ 845.802365][ T1225] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 845.820160][T19820] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4941'. [ 845.830533][ T1225] usb 1-1: Product: syz [ 845.834775][ T1225] usb 1-1: Manufacturer: syz [ 845.845460][ T1225] usb 1-1: SerialNumber: syz [ 845.872303][ T1225] usb 1-1: config 0 descriptor?? [ 845.912245][ T1225] usb 1-1: selecting invalid altsetting 0 [ 845.988306][ T5612] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 846.149173][ T5612] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 846.194242][ T5612] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.202136][T19805] netlink: 276 bytes leftover after parsing attributes in process `syz.0.4934'. [ 846.244235][ T5612] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.254375][ T985] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 846.306315][ T5612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.335575][ T5612] usb 4-1: config 0 descriptor?? [ 846.448205][ T985] usb 5-1: device descriptor read/64, error -71 [ 846.547388][T19818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.570504][T19818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.588493][T19818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.608888][T19818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.630933][T19818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.659133][T19818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.674084][T19818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.683527][T19818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.689362][ T985] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 846.720984][T19818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.731249][T19818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.778226][ T5713] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 846.848291][ T985] usb 5-1: device descriptor read/64, error -71 [ 846.890662][ T5612] usbhid 4-1:0.0: can't add hid device: -71 [ 846.911890][ T5612] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 846.949814][ T5713] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 846.949920][ T5612] usb 4-1: USB disconnect, device number 126 [ 846.987966][ T985] usb usb5-port1: attempt power cycle [ 847.013353][ T5713] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.065437][ T5713] usb 3-1: config 0 has no interfaces? [ 847.073176][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.113935][ T5713] usb 3-1: config 0 descriptor?? [ 847.359236][ T985] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 847.390739][T14982] usbhid 6-1:0.0: can't add hid device: -71 [ 847.401872][T14982] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 847.411203][ T985] usb 5-1: device descriptor read/8, error -71 [ 847.451119][T14982] usb 6-1: USB disconnect, device number 104 [ 847.571510][T19843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4948'. [ 847.592045][T19843] netlink: 'syz.3.4948': attribute type 5 has an invalid length. [ 847.609794][T19843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4948'. [ 847.678375][ T985] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 847.698969][ T985] usb 5-1: device descriptor read/8, error -71 [ 847.815689][T19850] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4950'. [ 847.829383][ T985] usb usb5-port1: unable to enumerate USB device [ 847.882661][T19850] syzkaller1: entered promiscuous mode [ 847.903656][T19850] syzkaller1: entered allmulticast mode [ 848.256119][T19860] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4954'. [ 848.311937][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 848.311958][ T30] audit: type=1326 audit(1786302072.172:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19858 comm="syz.5.4955" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 848.353502][ T30] audit: type=1326 audit(1786302072.172:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19858 comm="syz.5.4955" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 848.404600][ T30] audit: type=1326 audit(1786302072.202:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19858 comm="syz.5.4955" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 848.435861][ T985] usb 1-1: USB disconnect, device number 10 [ 848.511340][ T30] audit: type=1326 audit(1786302072.202:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19858 comm="syz.5.4955" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 848.584698][ T30] audit: type=1326 audit(1786302072.212:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19858 comm="syz.5.4955" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fdf108 code=0x7ffc0000 [ 848.657519][ T30] audit: type=1326 audit(1786302072.212:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19858 comm="syz.5.4955" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 848.700599][ T30] audit: type=1326 audit(1786302072.212:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19858 comm="syz.5.4955" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 848.726012][ T30] audit: type=1326 audit(1786302072.212:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19858 comm="syz.5.4955" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 848.752912][ T30] audit: type=1326 audit(1786302072.242:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19858 comm="syz.5.4955" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71174eb code=0x7ffc0000 [ 848.801128][ T30] audit: type=1326 audit(1786302072.242:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19858 comm="syz.5.4955" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 848.826711][ T1225] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 848.988209][ T1225] usb 6-1: Using ep0 maxpacket: 16 [ 849.174651][ T1225] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 849.211302][ T1225] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 849.282309][ T1225] usb 6-1: config 0 interface 0 has no altsetting 0 [ 849.370380][ T1225] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.378981][ T1225] usb 6-1: Product: syz [ 849.383312][ T1225] usb 6-1: Manufacturer: syz [ 849.410573][ T1225] usb 6-1: SerialNumber: syz [ 849.447706][ T1225] usb 6-1: config 0 descriptor?? [ 849.519009][ T985] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 849.554001][T19880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4961'. [ 849.799527][ T985] usb 4-1: New USB device found, idVendor=1b80, idProduct=e1cc, bcdDevice=26.cb [ 849.817236][ T1225] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input118 [ 849.863460][ T985] usb 4-1: config 128 has an invalid interface number: 5 but max is 1 [ 849.925992][ T985] usb 4-1: config 128 has an invalid interface number: 5 but max is 1 [ 849.971440][ T985] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 2 [ 850.002075][ T985] usb 4-1: config 128 has no interface number 0 [ 850.039616][ T5713] usb 3-1: string descriptor 0 read error: -71 [ 850.053516][ T985] usb 4-1: config 128 interface 5 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 850.135139][ T985] usb 4-1: config 128 interface 5 altsetting 8 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 850.185791][ T5713] usb 3-1: USB disconnect, device number 3 [ 850.420247][ T985] usb 4-1: config 128 interface 5 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 850.451588][ T1225] rc_core: IR keymap rc-imon-pad not found [ 850.473923][ T1225] Registered IR keymap rc-empty [ 850.493897][ T985] usb 4-1: config 128 interface 5 has no altsetting 0 [ 850.507038][ T1225] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 850.535805][ T985] usb 4-1: config 128 interface 5 has no altsetting 1 [ 850.552407][T19884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4962'. [ 850.563654][ T1225] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 850.588823][ T985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.606880][ T985] usb 4-1: Product: syz [ 850.620450][ T1225] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 850.633647][ T985] usb 4-1: Manufacturer: syz [ 850.654550][ T985] usb 4-1: SerialNumber: syz [ 850.690501][ T1225] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input119 [ 850.744143][T19882] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4956'. [ 850.799325][ T1225] imon 6-1:0.0: iMON device (15c2:0041, intf0) on usb<6:105> initialized [ 851.403911][T19890] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4964'. [ 851.549649][T19890] syzkaller1: entered promiscuous mode [ 851.555613][T19890] syzkaller1: entered allmulticast mode [ 851.588291][ T1225] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 851.772461][ T1225] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 851.785347][ T1225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.802577][ T1225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.837321][ T1225] usb 1-1: config 0 descriptor?? [ 852.064459][ T985] usb 4-1: USB disconnect, device number 127 [ 852.570272][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 852.591382][ T5681] usb 6-1: USB disconnect, device number 105 [ 853.227153][T19899] binder: 19898:19899 ioctl ae44 fffff6f5 returned -22 [ 853.253277][T19899] binder: 19898:19899 ioctl c0306201 0 returned -14 [ 853.310355][T19899] binder: 19898:19899 ioctl c0306201 80000640 returned -22 [ 853.656044][T19903] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4968'. [ 853.920747][ T5681] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 854.006368][ T1225] usbhid 1-1:0.0: can't add hid device: -71 [ 854.016864][ T1225] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 854.069588][ T1225] usb 1-1: USB disconnect, device number 11 [ 854.108953][ T5681] usb 4-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 854.145436][ T5681] usb 4-1: config 16 has an invalid interface number: 19 but max is 0 [ 854.176404][ T5681] usb 4-1: config 16 has no interface number 0 [ 854.204447][ T5681] usb 4-1: config 16 interface 19 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 854.244125][ T5681] usb 4-1: config 16 interface 19 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 854.284317][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.316601][ T5681] usb 4-1: Product: syz [ 854.331260][ T5681] usb 4-1: Manufacturer: syz [ 854.347171][ T5681] usb 4-1: SerialNumber: syz [ 854.871133][ T9965] udevd[9965]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 854.996813][T19895] netlink: 'syz.3.4965': attribute type 3 has an invalid length. [ 855.028244][T19895] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4965'. [ 855.049712][ T5681] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 855.071663][T19901] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4965'. [ 855.120619][T19901] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.131167][T19901] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.228872][ T5681] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 855.252491][ T5681] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 855.280729][ T5681] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 855.313928][ T5681] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 855.347268][ T5681] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 855.381410][ T5681] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 855.411526][ T5681] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 855.423254][ T5681] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 855.449058][ T5681] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 855.463218][ T5681] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 855.476116][ T5681] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 855.492433][ T5681] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 855.504204][ T5681] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 855.517127][ T5681] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 855.531415][ T5681] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 855.543232][ T5681] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 855.558718][ T5681] usb 5-1: string descriptor 0 read error: -22 [ 855.565322][ T5681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.597028][ T5681] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 855.820996][T19918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4973'. [ 855.836201][T19918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4973'. [ 855.847311][T19918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4973'. [ 855.865753][T19918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4973'. [ 855.875764][T19918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4973'. [ 855.909474][T19918] input: syz1 as /devices/virtual/input/input120 [ 856.011473][T19923] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(0) [ 856.018068][T19923] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 856.051171][T19923] vhci_hcd vhci_hcd.0: Device attached [ 856.206404][T19924] vhci_hcd: connection closed [ 856.210288][T13918] vhci_hcd vhci_hcd.0: stop threads [ 856.221058][T13918] vhci_hcd vhci_hcd.0: release socket [ 856.231681][T13918] vhci_hcd vhci_hcd.0: disconnect device [ 856.627023][T19934] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4979'. [ 857.293422][T19947] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4983'. [ 857.329850][T19947] syzkaller1: entered promiscuous mode [ 857.335538][T19947] syzkaller1: entered allmulticast mode [ 857.369838][ T5681] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 857.539111][ T5681] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 857.555251][ T5681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.567149][ T5681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.587714][ T5681] usb 3-1: config 0 descriptor?? [ 858.283170][T19081] usb 5-1: USB disconnect, device number 15 [ 858.292918][ T5612] usb 4-1: USB disconnect, device number 2 [ 859.644718][T19969] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4990'. [ 861.536102][ T5681] usbhid 3-1:0.0: can't add hid device: -71 [ 861.653545][ T5681] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 861.859605][ T5681] usb 3-1: USB disconnect, device number 4 [ 863.575332][T20014] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5001'. [ 864.188291][ T5681] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 864.358189][ T5681] usb 1-1: Using ep0 maxpacket: 16 [ 864.365512][ T5681] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 864.387048][ T5681] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 864.409930][ T5681] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 864.432724][ T5681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.448203][ T5681] usb 1-1: Product: syz [ 864.454167][ T5681] usb 1-1: Manufacturer: syz [ 864.467087][ T5681] usb 1-1: SerialNumber: syz [ 864.512765][ T5681] usb 1-1: 0:2 : does not exist [ 864.898186][ T1225] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 865.056109][ T1225] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 865.072653][ T1225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.085456][ T1225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.105377][ T1225] usb 5-1: config 0 descriptor?? [ 867.220538][T20041] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5009'. [ 867.242425][T20041] bond0: option miimon: invalid value (18446744071562068928) [ 867.262912][T20041] bond0: option miimon: allowed values 0 - 2147483647 [ 867.744000][ T1225] usbhid 5-1:0.0: can't add hid device: -71 [ 867.768736][ T1225] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 867.800580][ T1225] usb 5-1: USB disconnect, device number 16 [ 867.878322][ T5612] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 868.050131][ T5612] usb 6-1: Using ep0 maxpacket: 16 [ 868.070847][ T5612] usb 6-1: unable to get BOS descriptor or descriptor too short [ 868.080631][T20047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5011'. [ 868.102489][ T5612] usb 6-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 868.136605][ T5612] usb 6-1: config 1 has an invalid interface number: 232 but max is 0 [ 868.174425][ T5612] usb 6-1: config 1 has no interface number 0 [ 868.206259][ T5612] usb 6-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 868.254090][ T5612] usb 6-1: config 1 interface 232 has no altsetting 0 [ 868.285790][ T5612] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.318696][ T5612] usb 6-1: Product: syz [ 868.340708][T20053] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5013'. [ 868.352977][ T5612] usb 6-1: Manufacturer: syz [ 868.367976][ T5612] usb 6-1: SerialNumber: syz [ 868.398299][T20044] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 868.580385][ T5681] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 868.659593][T20044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.701904][T20044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.798191][ T1225] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 868.939434][ T5681] usb 1-1: USB disconnect, device number 12 [ 868.991099][ T1225] usb 3-1: Using ep0 maxpacket: 8 [ 869.032126][ T1225] usb 3-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 869.102943][ T1225] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 869.183972][ T1225] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 869.242267][T20044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.261200][ T9965] udevd[9965]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 869.323887][T20044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.339127][ T1225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.371926][ T1225] usb 3-1: Product: syz [ 869.401274][ T1225] usb 3-1: Manufacturer: syz [ 869.440623][ T1225] usb 3-1: SerialNumber: syz [ 869.566167][T20065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.629638][T20065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.831198][T20044] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5010'. [ 869.961813][ T1225] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input121 [ 870.056698][ T4966] bcm5974 3-1:1.0: could not read from device [ 870.131590][ T4966] bcm5974 3-1:1.0: could not read from device [ 870.169436][ T1225] usb 3-1: USB disconnect, device number 5 [ 870.229833][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.236301][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.233034][ T5612] hub 6-1:1.232: bad descriptor, ignoring hub [ 871.282925][ T5612] hub 6-1:1.232: probe with driver hub failed with error -5 [ 871.343528][ T5612] option 6-1:1.232: GSM modem (1-port) converter detected [ 871.429814][ T5612] usb 6-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 871.542412][ T5612] usb 6-1: USB disconnect, device number 106 [ 871.660482][ T5612] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 871.760123][ T5612] option 6-1:1.232: device disconnected [ 872.053707][T20088] FAULT_INJECTION: forcing a failure. [ 872.053707][T20088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.123453][T20088] CPU: 1 UID: 0 PID: 20088 Comm: syz.5.5022 Tainted: G L syzkaller #0 PREEMPT(full) [ 872.123487][T20088] Tainted: [L]=SOFTLOCKUP [ 872.123495][T20088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 872.123507][T20088] Call Trace: [ 872.123517][T20088] [ 872.123526][T20088] dump_stack_lvl+0xe8/0x150 [ 872.123561][T20088] should_fail_ex+0x40c/0x560 [ 872.123593][T20088] _copy_to_user+0x31/0xb0 [ 872.123623][T20088] simple_read_from_buffer+0xe1/0x170 [ 872.123656][T20088] proc_fail_nth_read+0x1bb/0x230 [ 872.123688][T20088] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 872.123718][T20088] ? rw_verify_area+0x24a/0x4c0 [ 872.123749][T20088] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 872.123775][T20088] vfs_read+0x213/0xa80 [ 872.123811][T20088] ? __pfx_vfs_read+0x10/0x10 [ 872.123860][T20088] ksys_read+0x150/0x270 [ 872.123890][T20088] ? __pfx_ksys_read+0x10/0x10 [ 872.123922][T20088] ? asm_int80_emulation+0x1a/0x20 [ 872.123948][T20088] do_int80_emulation+0x19a/0x550 [ 872.123977][T20088] ? trace_irq_disable+0x3b/0x140 [ 872.124000][T20088] ? asm_int80_emulation+0x1a/0x20 [ 872.124017][T20088] ? clear_bhb_loop+0x70/0xc0 [ 872.124036][T20088] ? clear_bhb_loop+0x70/0xc0 [ 872.124059][T20088] asm_int80_emulation+0x1a/0x20 [ 872.124078][T20088] RIP: 0023:0xf71174eb [ 872.124097][T20088] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 872.124113][T20088] RSP: 002b:00000000f53cd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 872.124136][T20088] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f53cd5d0 [ 872.124149][T20088] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 872.124160][T20088] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 872.124171][T20088] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 872.124183][T20088] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 872.124212][T20088] [ 872.678179][ T5681] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 872.828129][ T5681] usb 3-1: Using ep0 maxpacket: 16 [ 872.836750][ T5681] usb 3-1: unable to get BOS descriptor or descriptor too short [ 872.848526][ T5681] usb 3-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 872.903652][ T5681] usb 3-1: config 1 has an invalid interface number: 232 but max is 0 [ 872.941301][ T5681] usb 3-1: config 1 has no interface number 0 [ 872.965797][ T5681] usb 3-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 873.024345][ T5681] usb 3-1: config 1 interface 232 has no altsetting 0 [ 873.060716][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.102679][ T5681] usb 3-1: Product: syz [ 873.122419][ T5681] usb 3-1: Manufacturer: syz [ 873.147141][ T5681] usb 3-1: SerialNumber: syz [ 873.182110][T20087] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 873.494686][T20087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.560740][T20087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.015222][T20087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.064066][T20087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.205140][ T5612] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 874.361362][T20087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.408481][T20087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.416951][ T5612] usb 4-1: Using ep0 maxpacket: 8 [ 875.594884][ T5612] usb 4-1: unable to get BOS descriptor or descriptor too short [ 876.549098][ C0] sched: DL replenish lagged too much [ 878.724447][ T5612] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 919.446042][T20087] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5023'. [ 932.598087][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.619062][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.542034][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 995.563134][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.094314][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.860984][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1108.122196][ T5612] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1116.997909][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1117.005186][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20113/1:b..l [ 1117.014339][ C0] rcu: (detected by 0, t=10503 jiffies, g=163741, q=1488357 ncpus=2) [ 1117.022532][ C0] task:syz.0.5028 state:R running task stack:26600 pid:20113 tgid:20110 ppid:14257 task_flags:0x400040 flags:0x08080002 [ 1117.037578][ C0] Call Trace: [ 1117.040897][ C0] [ 1117.043861][ C0] __schedule+0x17d9/0x56c0 [ 1117.048409][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1117.053400][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1117.058402][ C0] ? __pfx___schedule+0x10/0x10 [ 1117.063316][ C0] preempt_schedule_irq+0x4d/0xa0 [ 1117.068384][ C0] irqentry_exit+0x14f/0x8f0 [ 1117.073005][ C0] ? trace_irq_disable+0x3b/0x140 [ 1117.078066][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1117.084077][ C0] RIP: 0010:unwind_next_frame+0x45e/0x2550 [ 1117.089925][ C0] Code: 5f 00 48 c7 c1 20 b4 9b 8e 31 d2 84 c0 48 0f 45 d1 48 89 15 a4 7b fb 11 48 85 d2 0f 84 2e 02 00 00 48 8d 5a 04 48 89 54 24 18 <4c> 8d 6a 05 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 b4 19 [ 1117.109576][ C0] RSP: 0000:ffffc9000436f2c0 EFLAGS: 00000282 [ 1117.115681][ C0] RAX: 000000000000000f RBX: ffffffff9159251e RCX: ffffffff90b7bf44 [ 1117.123685][ C0] RDX: ffffffff9159251a RSI: ffffffff915924fc RDI: ffffffff8c4bbe20 [ 1117.131687][ C0] RBP: ffffffff87d17987 R08: 0000000000000006 R09: 0000000000000000 [ 1117.139694][ C0] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: dffffc0000000000 [ 1117.147692][ C0] R13: 0000000000000005 R14: ffffc9000436f368 R15: ffffffff90b7bf44 [ 1117.155700][ C0] ? raw_open+0x87/0x4d0 [ 1117.160100][ C0] ? raw_open+0x88/0x4d0 [ 1117.164383][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1117.169523][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1117.175707][ C0] arch_stack_walk+0x11b/0x150 [ 1117.180507][ C0] ? raw_open+0x88/0x4d0 [ 1117.184788][ C0] stack_trace_save+0xa9/0x100 [ 1117.189578][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1117.194981][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1117.199965][ C0] save_stack+0x122/0x230 [ 1117.204328][ C0] ? __pfx_save_stack+0x10/0x10 [ 1117.209204][ C0] ? page_ext_get+0x22/0x2e0 [ 1117.213821][ C0] ? __free_frozen_pages+0xc1e/0xd10 [ 1117.219152][ C0] ? __slab_free+0x274/0x2c0 [ 1117.223765][ C0] ? qlist_free_all+0x99/0x100 [ 1117.228565][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 1117.234222][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 1117.239280][ C0] ? __kmalloc_cache_noprof+0x2ab/0x660 [ 1117.244856][ C0] ? raw_open+0x88/0x4d0 [ 1117.249158][ C0] ? page_ext_put+0x97/0xc0 [ 1117.253788][ C0] __reset_page_owner+0x71/0x1f0 [ 1117.258765][ C0] __free_frozen_pages+0xc1e/0xd10 [ 1117.263909][ C0] ? __free_slab+0x172/0x280 [ 1117.268528][ C0] __slab_free+0x274/0x2c0 [ 1117.272982][ C0] ? qlist_free_all+0x8e/0x100 [ 1117.277780][ C0] qlist_free_all+0x99/0x100 [ 1117.283709][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1117.289338][ C0] __kasan_slab_alloc+0x22/0x80 [ 1117.294246][ C0] ? __kmalloc_cache_noprof+0x150/0x660 [ 1117.299887][ C0] __kmalloc_cache_noprof+0x2ab/0x660 [ 1117.305311][ C0] ? __kmalloc_cache_noprof+0x150/0x660 [ 1117.310895][ C0] ? raw_open+0x88/0x4d0 [ 1117.315178][ C0] ? raw_open+0x88/0x4d0 [ 1117.319461][ C0] ? __pfx_raw_open+0x10/0x10 [ 1117.324194][ C0] raw_open+0x88/0x4d0 [ 1117.328308][ C0] ? __pfx_raw_open+0x10/0x10 [ 1117.333022][ C0] misc_open+0x2d5/0x350 [ 1117.337428][ C0] chrdev_open+0x4d9/0x600 [ 1117.341890][ C0] ? __pfx_chrdev_open+0x10/0x10 [ 1117.346885][ C0] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 1117.353235][ C0] ? __pfx_chrdev_open+0x10/0x10 [ 1117.358179][ C0] do_dentry_open+0x816/0x1380 [ 1117.362945][ C0] vfs_open+0x3b/0x340 [ 1117.367020][ C0] ? path_openat+0x2e2d/0x3830 [ 1117.371791][ C0] path_openat+0x2e44/0x3830 [ 1117.376395][ C0] ? kasan_save_track+0x3e/0x80 [ 1117.381241][ C0] ? do_sys_openat2+0xcc/0x200 [ 1117.385998][ C0] ? asm_int80_emulation+0x1a/0x20 [ 1117.391113][ C0] do_file_open+0x23e/0x4a0 [ 1117.395616][ C0] ? __pfx_do_file_open+0x10/0x10 [ 1117.400742][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1117.405588][ C0] ? alloc_fd+0x651/0x6c0 [ 1117.409923][ C0] do_sys_openat2+0x115/0x200 [ 1117.414598][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 1117.419790][ C0] ? exc_page_fault+0x6a/0xc0 [ 1117.424467][ C0] ? do_user_addr_fault+0xc4a/0x1340 [ 1117.429748][ C0] __ia32_compat_sys_openat+0x131/0x160 [ 1117.435308][ C0] do_int80_emulation+0x19a/0x550 [ 1117.440330][ C0] ? trace_irq_disable+0x3b/0x140 [ 1117.445364][ C0] ? asm_int80_emulation+0x1a/0x20 [ 1117.450467][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1117.455134][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1117.459804][ C0] asm_int80_emulation+0x1a/0x20 [ 1117.464752][ C0] RIP: 0023:0xf71974eb [ 1117.469010][ C0] RSP: 002b:00000000f543338c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1117.477467][ C0] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7261595 [ 1117.485441][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1117.493415][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1117.501388][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1117.509367][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1117.517444][ C0] [ 1126.480237][ T1310] ieee802154 phy0 wpan0: encryption failed: -22