last executing test programs: 13m59.236422394s ago: executing program 1 (id=1954): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) tkill(r0, 0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0135014010ff"}) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00') wait4(r0, 0x0, 0x8, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x0, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x0, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_NETMASK={0x0, 0x14, 0x1}]}, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_FAMILY={0x0, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL]}, 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'i'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=[@cred={{0x1c, 0x1, 0x2, {r5}}}], 0x20, 0x20040082}}], 0x1, 0x24008011) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000140)=0xa80, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000006b80)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x1, 0x20000000) recvfrom$inet6(r7, 0x0, 0x0, 0x12020, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x7a382dcae6654ac0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r8, 0x3b83, &(0x7f0000000200)={0x28, 0x4, 0x0, r9, 0x309d26, 0x5, 0x8, 0x8d2aa}) pwritev(r8, &(0x7f0000000880)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}, {&(0x7f00000005c0)="d13ad3fd7dbec813b491aa4bac00a17a43ce5a876cc443eb25810cb0c9266d5fe7ae0a33b27b5ac94d56773c47ba8364bb6c0f96bba65c37b4ead8494fd9254e3a9b2482511c8de06bbd0cdf58b9c2ffe78396e59892a0315e4356993e309fe25d35e6dbf9a5b3c18f64e84991df1592df5cc182fdda2fe8d70f340bb7a6082a7aae6693cfe35d", 0x87}, {0x0}], 0x4, 0x0, 0x0) mmap(&(0x7f0000361000/0x2000)=nil, 0x2000, 0x300000a, 0x769f00b363895638, 0xffffffffffffffff, 0x0) 13m59.107406705s ago: executing program 1 (id=1955): socket$nl_route(0x10, 0x3, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r0 = socket$netlink(0x10, 0x3, 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x418ca0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x100000003, 0xbdb], 0xffff1001, 0x4000}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x93}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0xffffffffffffff9c) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$wireguard(0x0, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) 13m57.524213266s ago: executing program 1 (id=1961): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e702008000040905", @ANYBLOB="b70795"], 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x20db, &(0x7f0000000040)={0x0, 0xc898, 0xc000, 0xa, 0xa5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13m55.802627834s ago: executing program 1 (id=1967): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00F'], 0x0, 0x0, 0x0, 0x0}, 0x0) 13m52.666721063s ago: executing program 1 (id=1974): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x45, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaae130aeaaba3086dd606410a6000f040402000000000000000000ffffffffffffff020000000000000000000000000001223427d5c9a46b9fa14172170a0135f3ee944f69ee4b1b0c2e53e93a16ae5db1b56d52"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x2c020400) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$FUSE(r7, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000680)=@urb_type_bulk={0x3, {0x8}, 0xffffff00, 0x0, &(0x7f00000002c0)="caff1bc0953aa3274c061fb48221a863f94a9e58109ade8a598469e0af450394d7e3fa41d459f6eee854af95618512bbfd9411a291be4e32f34e8681f94c839f344d98c585398642544eff930f14939d1144822dc8a586d1bc615dd96aae92418c9cfcb1f63e5b14d15e03e2971af9cb9306abfa63f482e3d8dba32b3d798c8e316c44ac698ce7c0326a099191822a1448376331ca3cea66eb1daeef5ec0a2324c2b25c189e3f4879d6559436829b1d6b51950f8bb510fe70799566cb046890876846eabdac30bc01f0487c63d16ca7173249fd4ff8e0adc379c9018ec52998975", 0xe1, 0x2, 0x1, 0x23, 0xf5, 0xe, &(0x7f0000000600)="21650a249d9549ee7f54b889b20d880de938e095fa08b0edceeba8a039d6a9ea58201a1513b640d04415e3b017d5e4a3ffc867cb660be7a96266f8b805c2e4851990cdc3542bccf1"}) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf251f000020"], 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x4080004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="040028bd7000fcdbdf250600000008000300", @ANYRES32=r8, @ANYBLOB="0a001800031fc20303030000"], 0x28}, 0x1, 0x0, 0x0, 0x24000015}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYRES8=r10, @ANYRES16=r10, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r11, @ANYBLOB="08000500060000001500178004000200040003000400"], 0x40}, 0x1, 0x0, 0x0, 0x24008804}, 0x8000) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_TIMER_IOCTL_CREATE(r7, 0xc02054a5, &(0x7f0000000700)={0x7, r5, 'id0\x00'}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r13, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r12, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x4}, {0xfffffffffffffffc, 0x9, 0x0, 0x1000000000}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0xa, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x1001}}, 0xe8) connect$inet6(r13, &(0x7f0000000200)={0xa, 0x0, 0xffffffff, @local, 0x40000}, 0x1c) 13m51.326043131s ago: executing program 1 (id=1979): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = inotify_init() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) setsockopt(r3, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x8, &(0x7f0000000000)=0x12, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e1e, 0x5, @empty, 0x6}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') read$FUSE(r5, &(0x7f00000046c0)={0x2020}, 0x2020) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r7, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r8 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f00000000c0)={0x385000080, 0x0, 0x0, 0x0, {0x80033}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) write$P9_RSTATu(r9, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003000000404e150e50400001020301090271000301093009080b00010107208c09040000000101200009240100400411000708240a0001aa0302090401000001022000090401010101022000090501"], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 13m34.983315639s ago: executing program 32 (id=1979): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = inotify_init() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) setsockopt(r3, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x8, &(0x7f0000000000)=0x12, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e1e, 0x5, @empty, 0x6}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') read$FUSE(r5, &(0x7f00000046c0)={0x2020}, 0x2020) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r7, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r8 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f00000000c0)={0x385000080, 0x0, 0x0, 0x0, {0x80033}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) write$P9_RSTATu(r9, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003000000404e150e50400001020301090271000301093009080b00010107208c09040000000101200009240100400411000708240a0001aa0302090401000001022000090401010101022000090501"], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 7m47.171408685s ago: executing program 4 (id=3424): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x6, &(0x7f0000000040)={0xc, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tgkill(0x0, 0x0, 0xd) r3 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r3, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x480c4) r4 = dup(0xffffffffffffffff) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40603d07, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$revoke(0x3, r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a98000000060a010400000000000000000a0004050900010073797a31000000006c000480680001800a000100696e6e6572000000580002800800044000000017340005800c0500007061796c6f616400240002800800034000000092080002400000000008000440000000e9080001400000000d0800034000000002080002400000008408000140000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) add_key(0x0, 0x0, &(0x7f00000002c0)="1d", 0x1, r5) socket$kcm(0x29, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = openat$uhid(0xffffff9c, &(0x7f0000000b00), 0x802, 0x0) write$UHID_CREATE(r7, &(0x7f0000001fc0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0xfffffffffffffdf3, 0x101, 0x4002, 0x2, 0x8, 0xfca7}}, 0x11c) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x1}}, 0x18) 7m46.042732367s ago: executing program 4 (id=3427): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40, 0x2200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x9}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}]}, 0x48}}, 0x0) request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='&\x00', r0) add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)="79cf", 0x2, r0) 7m45.939837466s ago: executing program 4 (id=3428): socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000200), r0) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000200), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x74, 0x43, 0x2}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="6800d491a585247e2affd18a4657202600001000", @ANYBLOB="1000000000000000480012800c0001006d6163766c616e00380002800a000400aaaaaaaaaabb0000280005800a0004002ae0d5b3974e00000a000400"], 0x68}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xb}, {0x6, 0xb}, {0x10, 0xffe0}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1, 0x9, 0x1000, 0x2, 0x1, 0x6, 0x4}}, {0xc, 0x2, [0x8, 0x3, 0x9, 0xd576]}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x240040e0}, 0x21a06664297a28aa) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000003"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000000010104000000000008000001000002069e32953f0c6b68024a42c890ad613dce6332b8b7deb4beb7ce62a27c04b089d76f686d8201b9685e3de7db97386dc990382ba87365a9df299bc9e00e94170f3f1a9725d8715fa4715c3b798c3d64f2ffa791e84d5779746fa05f59570f122dd173289f8295d83f56beeaa86a2319bfcab5bbfdbf4bca1c2f44b113af2a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) 7m44.934265107s ago: executing program 4 (id=3430): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e000000200000000000000000000000000000000000000000000000000000000000000004e2300000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010400000000000000000000ff0f0000000000008998077eeb345007131696f773b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200200000000000000fffffffffffffffffeffffff"], 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x208000, &(0x7f0000000640)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3c, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x8) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) fchdir(r5) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r4, &(0x7f0000000640)='\x00', 0x89901) 7m43.829290008s ago: executing program 4 (id=3438): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'}}}]}, 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="791001002b000000200012800b0001006272696467650000100002800c002100cf00000000000000fa5d2f0b62132c6edc44c90c55c1dd9bc6009ea1f062edf60f9aec2c529c0161e8a7a200cee3029a8ed8f39698a40b366639e627029d7b5952e9d2aadd7399a360bdbf5393379e3f8e1e"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 7m43.585830885s ago: executing program 4 (id=3440): r0 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000019080)=ANY=[@ANYBLOB="0c00000004000000040000000180000000080000", @ANYRES32, @ANYBLOB="000000000000000000000000006b08b025a30000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008d6000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00003e1000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x9, 0xfffffe0040000001, 0x892, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x1ff, 0x2, {0x4, @pix_mp={0xffffffff, 0xf, 0x31363553, 0x7, 0xd, [{0x9, 0x5}, {0x22955b83, 0x7f68}, {0x5, 0x4}, {0x28, 0x3}, {0x6, 0x5}, {0x800, 0x3}, {0x5, 0xb33b}, {0x3, 0x4}], 0x42, 0x6, 0x1, 0x2, 0x1}}, 0x9}) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000019280)=@deltfilter={0xf00, 0x2d, 0x8, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xf, 0x1}, {0xb, 0xffff}, {0x2, 0xd}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_fw={{0x7}, {0xec4, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ip6_vti0\x00'}, @TCA_FW_ACT={0x23c, 0x4, [@m_bpf={0x110, 0xa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x9, 0x8, 0x3, 0x40}, {0x2, 0x2, 0x47, 0x6}, {0x200, 0xd, 0x81, 0x1ff}]}]}, {0xca, 0x6, "5b08f41f607176054ee127087df00d46260393434947176e0006a7955ee6593ef486159f3cbb4992716a854ac3e07290c4466fceccfaa32dfacaecf130ec41fcc77a976e93d1ca981b580c760eb837f79c3e8d9338c8daf6a48303ea7dd8bd30f34dd4583524886c9a22fe03b2fb27bc67162a108572eb3c36fc7f1436727e013e7283ae16ab21698ceb8e06bb408e3fd45f8df17263a3633a5ee950f89ed0b7b2d2a528ca40237f792dbb50d2dabdbcb51c789e51bbd784bef47ff1b948ab6e06fc9fcb305c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x128, 0x1e, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0xfff3}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0xfff2}}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0xcb, 0x6, "1292afd27e5be88c031c72692dcb6dad1bbea59a1af850b4daef8afffca5c9af14d06c292a0132bd8ca4af22248e94c9d0cd8c7644374857cd993d145548b6c51c130a2a69487fc7aca5b727d43b426fdd8c9682430b4f839781a591268b8953d3a8bb8e03bb1e59bb5cdac423ac90f81fb4e25b33af5b28dc877a5d81c1eaa4e81f447ce71d15e491e5c7bcf104414aa2f7460658a4cb07ffe0a3fd6a1b4f7f5f7638d8ef03cd30f96bcccc581bb314c29c05b5524ba7213dfbd2aecf32a5d37a78f8c00128d2"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x3}}, @TCA_FW_POLICE={0xc68, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xfc4a}, @TCA_POLICE_RATE={0x404, 0x2, [0x4f, 0x7, 0x0, 0x9a, 0x1, 0x7, 0xebb, 0x40, 0x8, 0x9, 0x4, 0x9, 0xae, 0x3, 0x1, 0xe0000, 0x3, 0x1, 0x5, 0x2, 0xe, 0x2, 0x5, 0x9, 0xc, 0x800, 0x71ac, 0x8001, 0x80000000, 0x2, 0x1, 0x8fa1, 0xfe3f, 0x7, 0x6, 0x7fffffff, 0xd8f, 0x6, 0xe7c3, 0x2, 0x4f34, 0x3, 0x7fff, 0x1, 0x9, 0xd97f, 0x1347, 0x83, 0x3, 0x8001, 0xfffffffc, 0x2, 0x8001, 0x0, 0x9, 0x6, 0x401, 0xfffffffa, 0x1, 0x8b74, 0x57b7, 0x6, 0x9, 0x1a000000, 0x2, 0x4, 0x5, 0x0, 0x8, 0x5, 0x7, 0x69, 0x0, 0x4, 0x6, 0x6, 0x4, 0x9, 0x46, 0x1, 0xfffffff8, 0x2, 0x6, 0x315, 0x0, 0x1, 0xc, 0xc, 0x9, 0x0, 0x2, 0x6, 0x6, 0x6, 0x3, 0x45a, 0x4, 0x4, 0x77b6, 0x3, 0x3ff, 0x4, 0x80000000, 0x9, 0x1, 0x7, 0x8, 0x7fffffff, 0x3, 0x3, 0x5, 0x6, 0xff, 0x700, 0x80000000, 0x9, 0x4, 0x5, 0x7fffffff, 0xd, 0x0, 0x9, 0x0, 0x0, 0x9, 0xc, 0x4000400, 0xc, 0x9ba, 0x6, 0x800, 0x7, 0xebb, 0x3, 0x3, 0x5, 0x4, 0xffff, 0x5, 0x8, 0x8001, 0x9, 0x0, 0x0, 0x3, 0x5, 0x3, 0x25, 0x9, 0x8, 0x6, 0xb5, 0x9, 0xf4, 0x6, 0x4e6f, 0x7, 0x5, 0x3ae, 0x18000, 0x9, 0x10, 0x3, 0x8000, 0x2, 0x6, 0x100, 0x9, 0x4, 0x1, 0x84, 0xf, 0x2, 0xfffffff6, 0x81, 0x3, 0x9, 0x0, 0x4, 0x2, 0x4, 0x4, 0x6, 0x9, 0x8, 0x3, 0x81, 0x8, 0x382, 0x9, 0x9, 0x1, 0x40ae, 0x7, 0x0, 0x7, 0x1, 0xfe, 0x6, 0x200040, 0x10001, 0x8, 0xae, 0x5, 0x2, 0x9, 0x2, 0x9, 0x4, 0x2, 0xfffffff9, 0x80000000, 0x1, 0x8, 0xfffffe00, 0x8, 0x80000001, 0x9, 0x1, 0x2, 0x8000, 0x401, 0xff, 0x4, 0xfffffff6, 0xfffff949, 0x101, 0x4026be, 0x5, 0x5, 0x7, 0x1, 0xff, 0x8, 0x4, 0x1ed9, 0x6, 0x51d, 0x3, 0xffff, 0x3, 0x3, 0x6, 0x5, 0xfffffffc, 0x0, 0x9, 0x3, 0x1, 0x80000001, 0x4, 0x14c370ca, 0x47a4, 0x845, 0xe, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb, 0x4, 0xfffffffc, 0x6, 0x3, {0x8, 0x0, 0x1d8, 0x7ff, 0x4, 0x6}, {0x14, 0x2, 0x401, 0x1, 0xb7, 0x1}, 0x2, 0x24, 0x81}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xb87c, 0x76e7540f, 0x0, 0x6, 0x7, 0x98a5, 0x4, 0x8, 0x5, 0x4, 0x0, 0xfffff800, 0x1, 0x4, 0x8, 0x2, 0xff, 0xd, 0x54, 0x401, 0x1, 0x2, 0x401, 0x0, 0x8000, 0xd20, 0x400, 0x1, 0x1, 0x3fa4c8b2, 0xffffffed, 0x9f, 0x0, 0x1, 0x9, 0x0, 0xf, 0x7f, 0xa9, 0x5, 0x9, 0x6, 0x3, 0x5, 0x3, 0x6, 0x7, 0x336, 0x3ff, 0x5, 0x7, 0x1ff, 0x8a, 0x9, 0x8, 0x4, 0x5, 0x9, 0x36b5, 0x9, 0x5, 0x6, 0x5, 0xd1, 0x3, 0x4, 0x5, 0x6, 0x8, 0xb69, 0x8, 0x40, 0x4, 0x7, 0x3, 0x4, 0x6, 0xfffffffb, 0x5, 0xfffff316, 0x44, 0x5, 0x3, 0x3, 0x5, 0x4, 0x7fff, 0x4, 0x8, 0x4, 0x2, 0x6, 0x400, 0x80000000, 0x7, 0xa, 0x7, 0x1, 0x1ff, 0x1, 0x6, 0x0, 0x8, 0x6, 0x9, 0x800, 0x7b6729c0, 0x7, 0x9, 0x8, 0x6, 0xfffffbff, 0x4, 0xb, 0x0, 0x6, 0x225b, 0x3, 0x7, 0x0, 0x2, 0x5, 0x5, 0x1, 0xc8a9, 0x6, 0x10, 0x7, 0x8, 0x800, 0x0, 0x81c, 0x1, 0xffffff05, 0xffffff03, 0x9, 0x5, 0x1, 0x0, 0x9, 0x3, 0xff, 0x9, 0x7fd, 0x5, 0x7f, 0xd, 0x1, 0x6, 0x5, 0x3, 0x3, 0x24e2, 0x10001, 0x1ff, 0x0, 0x24b, 0x656c, 0x0, 0xe, 0x7, 0xff, 0x4, 0x0, 0x5, 0x2, 0xb64, 0x10, 0x6, 0xfffffff9, 0x8, 0x4, 0x3, 0x4, 0x612, 0x80000001, 0xa, 0x8001, 0xfffffffc, 0x1, 0xf, 0x9, 0x5, 0x5, 0x8, 0x2, 0x4, 0x101, 0x6, 0x8, 0xfffffff7, 0x4, 0x3, 0x3, 0x52, 0x8, 0x80000000, 0xffff, 0x6a, 0x1, 0x3, 0x200, 0x0, 0x7fff, 0x5, 0xd, 0x9, 0x6, 0xfffffbff, 0x3, 0x2, 0x101, 0x9, 0x200, 0xef8c, 0x5, 0x216, 0x1000, 0x7, 0xd, 0x63e3, 0xffffab1c, 0x800, 0x3, 0x8, 0x6, 0x7a0628df, 0xe, 0x6, 0x2, 0x7, 0x5, 0x5, 0xd2bf, 0x0, 0xfffffdf9, 0x10001, 0xa, 0x5, 0x2, 0x2, 0x5, 0x7, 0x538, 0x1, 0xb04c, 0x2, 0x0, 0x65, 0x0, 0x1, 0x1, 0x2, 0x8ac, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x100, 0xc, 0x1, 0x1, 0xfffffff7, 0x10001, 0x1e, 0x8f, 0x38000, 0x100, 0x8, 0x8, 0x5, 0x63, 0x1ff, 0x4, 0x8, 0x7, 0x5, 0x1, 0xb, 0xfffffff7, 0x401, 0x8000, 0x2, 0x7ff, 0x1, 0x7, 0xa, 0x0, 0xfffffffb, 0x5, 0x5, 0x0, 0x6, 0x400, 0x8, 0x9c, 0x6, 0xffffffff, 0x401, 0x6, 0x4, 0xf0bbf6b, 0x7, 0x68, 0x3, 0xba5, 0x5, 0x100, 0x7, 0x95708ac, 0xc0f, 0x80000000, 0x5, 0xfffffffb, 0x0, 0x80000001, 0x2, 0x3, 0x4, 0x400, 0x0, 0x0, 0x1ff, 0xfffffff1, 0x4, 0x6, 0xf, 0x8, 0x9, 0xfffffffc, 0xb8d, 0x3, 0x1, 0x6, 0x380, 0x3, 0x4, 0x940b, 0x2, 0x800, 0x0, 0x2, 0x1000, 0x97f, 0x2, 0x3, 0x0, 0x1000, 0x97, 0x7, 0x2, 0x0, 0x10001, 0x9, 0x0, 0xbd, 0x56b8, 0x7fffffff, 0x1, 0xc36d, 0x2, 0x4, 0x8, 0x2, 0x40, 0x8, 0x8, 0x8000, 0x4, 0xffff2339, 0x1, 0x197, 0x6095, 0xf, 0x4, 0x3, 0x8, 0x1, 0xa, 0xffff, 0x5, 0x50b, 0x6, 0xff, 0x7, 0x7fffffff, 0x1ff, 0x10000, 0x9, 0x8001, 0xfffffff9, 0x2, 0x80000001, 0x2, 0x10000, 0x200, 0xdfbb, 0x5393, 0x7, 0x5, 0x1, 0x8, 0x8, 0x5, 0x7, 0x0, 0x0, 0x7, 0x4, 0x7, 0x1ff, 0x4, 0x2, 0x6, 0x1, 0x2, 0x5, 0x6a, 0x0, 0xb, 0x1, 0x8001, 0x10, 0xe, 0x5, 0x7fffffff, 0x445c, 0x7, 0x48, 0x10, 0x75c515e7, 0x0, 0x101, 0x40000000, 0x8, 0x5, 0x8, 0x6a067f84, 0x6ed9, 0x8000, 0x1, 0x4, 0x8, 0x6, 0x0, 0x5, 0x7, 0x80000001, 0x0, 0x2, 0x4, 0x8, 0x8, 0x1000, 0x4, 0x8000, 0xfffffffa, 0x7fffffff, 0x3, 0x7, 0x5, 0x6, 0x6, 0x200, 0x68, 0x2, 0x200, 0x7ff, 0x3, 0x4, 0xfffffc00, 0x8000, 0x2, 0x7fffffff, 0x6, 0x7, 0x5, 0xe, 0x100, 0x1, 0x8000, 0x7, 0x4, 0x1000, 0x6, 0x401, 0x3, 0x3, 0x4, 0x5, 0x9, 0x6, 0x1, 0x80000000, 0x4, 0x2, 0xf88, 0x1, 0x1, 0x1ff, 0x6, 0x80000001, 0x4, 0x0, 0x2, 0xa, 0x1, 0xe, 0x8, 0x9, 0x9, 0x5, 0x6, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}]}}]}, 0xf00}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019240)='net/fib_triestat\x00') pread64(r10, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) prctl$PR_SET_MM_MAP(0x3c, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) fsmount(r0, 0x1, 0x84) 7m43.254402114s ago: executing program 33 (id=3440): r0 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000019080)=ANY=[@ANYBLOB="0c00000004000000040000000180000000080000", @ANYRES32, @ANYBLOB="000000000000000000000000006b08b025a30000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008d6000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00003e1000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x9, 0xfffffe0040000001, 0x892, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x1ff, 0x2, {0x4, @pix_mp={0xffffffff, 0xf, 0x31363553, 0x7, 0xd, [{0x9, 0x5}, {0x22955b83, 0x7f68}, {0x5, 0x4}, {0x28, 0x3}, {0x6, 0x5}, {0x800, 0x3}, {0x5, 0xb33b}, {0x3, 0x4}], 0x42, 0x6, 0x1, 0x2, 0x1}}, 0x9}) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000019280)=@deltfilter={0xf00, 0x2d, 0x8, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xf, 0x1}, {0xb, 0xffff}, {0x2, 0xd}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_fw={{0x7}, {0xec4, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ip6_vti0\x00'}, @TCA_FW_ACT={0x23c, 0x4, [@m_bpf={0x110, 0xa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x9, 0x8, 0x3, 0x40}, {0x2, 0x2, 0x47, 0x6}, {0x200, 0xd, 0x81, 0x1ff}]}]}, {0xca, 0x6, "5b08f41f607176054ee127087df00d46260393434947176e0006a7955ee6593ef486159f3cbb4992716a854ac3e07290c4466fceccfaa32dfacaecf130ec41fcc77a976e93d1ca981b580c760eb837f79c3e8d9338c8daf6a48303ea7dd8bd30f34dd4583524886c9a22fe03b2fb27bc67162a108572eb3c36fc7f1436727e013e7283ae16ab21698ceb8e06bb408e3fd45f8df17263a3633a5ee950f89ed0b7b2d2a528ca40237f792dbb50d2dabdbcb51c789e51bbd784bef47ff1b948ab6e06fc9fcb305c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x128, 0x1e, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0xfff3}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0xfff2}}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0xcb, 0x6, "1292afd27e5be88c031c72692dcb6dad1bbea59a1af850b4daef8afffca5c9af14d06c292a0132bd8ca4af22248e94c9d0cd8c7644374857cd993d145548b6c51c130a2a69487fc7aca5b727d43b426fdd8c9682430b4f839781a591268b8953d3a8bb8e03bb1e59bb5cdac423ac90f81fb4e25b33af5b28dc877a5d81c1eaa4e81f447ce71d15e491e5c7bcf104414aa2f7460658a4cb07ffe0a3fd6a1b4f7f5f7638d8ef03cd30f96bcccc581bb314c29c05b5524ba7213dfbd2aecf32a5d37a78f8c00128d2"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x3}}, @TCA_FW_POLICE={0xc68, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xfc4a}, @TCA_POLICE_RATE={0x404, 0x2, [0x4f, 0x7, 0x0, 0x9a, 0x1, 0x7, 0xebb, 0x40, 0x8, 0x9, 0x4, 0x9, 0xae, 0x3, 0x1, 0xe0000, 0x3, 0x1, 0x5, 0x2, 0xe, 0x2, 0x5, 0x9, 0xc, 0x800, 0x71ac, 0x8001, 0x80000000, 0x2, 0x1, 0x8fa1, 0xfe3f, 0x7, 0x6, 0x7fffffff, 0xd8f, 0x6, 0xe7c3, 0x2, 0x4f34, 0x3, 0x7fff, 0x1, 0x9, 0xd97f, 0x1347, 0x83, 0x3, 0x8001, 0xfffffffc, 0x2, 0x8001, 0x0, 0x9, 0x6, 0x401, 0xfffffffa, 0x1, 0x8b74, 0x57b7, 0x6, 0x9, 0x1a000000, 0x2, 0x4, 0x5, 0x0, 0x8, 0x5, 0x7, 0x69, 0x0, 0x4, 0x6, 0x6, 0x4, 0x9, 0x46, 0x1, 0xfffffff8, 0x2, 0x6, 0x315, 0x0, 0x1, 0xc, 0xc, 0x9, 0x0, 0x2, 0x6, 0x6, 0x6, 0x3, 0x45a, 0x4, 0x4, 0x77b6, 0x3, 0x3ff, 0x4, 0x80000000, 0x9, 0x1, 0x7, 0x8, 0x7fffffff, 0x3, 0x3, 0x5, 0x6, 0xff, 0x700, 0x80000000, 0x9, 0x4, 0x5, 0x7fffffff, 0xd, 0x0, 0x9, 0x0, 0x0, 0x9, 0xc, 0x4000400, 0xc, 0x9ba, 0x6, 0x800, 0x7, 0xebb, 0x3, 0x3, 0x5, 0x4, 0xffff, 0x5, 0x8, 0x8001, 0x9, 0x0, 0x0, 0x3, 0x5, 0x3, 0x25, 0x9, 0x8, 0x6, 0xb5, 0x9, 0xf4, 0x6, 0x4e6f, 0x7, 0x5, 0x3ae, 0x18000, 0x9, 0x10, 0x3, 0x8000, 0x2, 0x6, 0x100, 0x9, 0x4, 0x1, 0x84, 0xf, 0x2, 0xfffffff6, 0x81, 0x3, 0x9, 0x0, 0x4, 0x2, 0x4, 0x4, 0x6, 0x9, 0x8, 0x3, 0x81, 0x8, 0x382, 0x9, 0x9, 0x1, 0x40ae, 0x7, 0x0, 0x7, 0x1, 0xfe, 0x6, 0x200040, 0x10001, 0x8, 0xae, 0x5, 0x2, 0x9, 0x2, 0x9, 0x4, 0x2, 0xfffffff9, 0x80000000, 0x1, 0x8, 0xfffffe00, 0x8, 0x80000001, 0x9, 0x1, 0x2, 0x8000, 0x401, 0xff, 0x4, 0xfffffff6, 0xfffff949, 0x101, 0x4026be, 0x5, 0x5, 0x7, 0x1, 0xff, 0x8, 0x4, 0x1ed9, 0x6, 0x51d, 0x3, 0xffff, 0x3, 0x3, 0x6, 0x5, 0xfffffffc, 0x0, 0x9, 0x3, 0x1, 0x80000001, 0x4, 0x14c370ca, 0x47a4, 0x845, 0xe, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb, 0x4, 0xfffffffc, 0x6, 0x3, {0x8, 0x0, 0x1d8, 0x7ff, 0x4, 0x6}, {0x14, 0x2, 0x401, 0x1, 0xb7, 0x1}, 0x2, 0x24, 0x81}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xb87c, 0x76e7540f, 0x0, 0x6, 0x7, 0x98a5, 0x4, 0x8, 0x5, 0x4, 0x0, 0xfffff800, 0x1, 0x4, 0x8, 0x2, 0xff, 0xd, 0x54, 0x401, 0x1, 0x2, 0x401, 0x0, 0x8000, 0xd20, 0x400, 0x1, 0x1, 0x3fa4c8b2, 0xffffffed, 0x9f, 0x0, 0x1, 0x9, 0x0, 0xf, 0x7f, 0xa9, 0x5, 0x9, 0x6, 0x3, 0x5, 0x3, 0x6, 0x7, 0x336, 0x3ff, 0x5, 0x7, 0x1ff, 0x8a, 0x9, 0x8, 0x4, 0x5, 0x9, 0x36b5, 0x9, 0x5, 0x6, 0x5, 0xd1, 0x3, 0x4, 0x5, 0x6, 0x8, 0xb69, 0x8, 0x40, 0x4, 0x7, 0x3, 0x4, 0x6, 0xfffffffb, 0x5, 0xfffff316, 0x44, 0x5, 0x3, 0x3, 0x5, 0x4, 0x7fff, 0x4, 0x8, 0x4, 0x2, 0x6, 0x400, 0x80000000, 0x7, 0xa, 0x7, 0x1, 0x1ff, 0x1, 0x6, 0x0, 0x8, 0x6, 0x9, 0x800, 0x7b6729c0, 0x7, 0x9, 0x8, 0x6, 0xfffffbff, 0x4, 0xb, 0x0, 0x6, 0x225b, 0x3, 0x7, 0x0, 0x2, 0x5, 0x5, 0x1, 0xc8a9, 0x6, 0x10, 0x7, 0x8, 0x800, 0x0, 0x81c, 0x1, 0xffffff05, 0xffffff03, 0x9, 0x5, 0x1, 0x0, 0x9, 0x3, 0xff, 0x9, 0x7fd, 0x5, 0x7f, 0xd, 0x1, 0x6, 0x5, 0x3, 0x3, 0x24e2, 0x10001, 0x1ff, 0x0, 0x24b, 0x656c, 0x0, 0xe, 0x7, 0xff, 0x4, 0x0, 0x5, 0x2, 0xb64, 0x10, 0x6, 0xfffffff9, 0x8, 0x4, 0x3, 0x4, 0x612, 0x80000001, 0xa, 0x8001, 0xfffffffc, 0x1, 0xf, 0x9, 0x5, 0x5, 0x8, 0x2, 0x4, 0x101, 0x6, 0x8, 0xfffffff7, 0x4, 0x3, 0x3, 0x52, 0x8, 0x80000000, 0xffff, 0x6a, 0x1, 0x3, 0x200, 0x0, 0x7fff, 0x5, 0xd, 0x9, 0x6, 0xfffffbff, 0x3, 0x2, 0x101, 0x9, 0x200, 0xef8c, 0x5, 0x216, 0x1000, 0x7, 0xd, 0x63e3, 0xffffab1c, 0x800, 0x3, 0x8, 0x6, 0x7a0628df, 0xe, 0x6, 0x2, 0x7, 0x5, 0x5, 0xd2bf, 0x0, 0xfffffdf9, 0x10001, 0xa, 0x5, 0x2, 0x2, 0x5, 0x7, 0x538, 0x1, 0xb04c, 0x2, 0x0, 0x65, 0x0, 0x1, 0x1, 0x2, 0x8ac, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x100, 0xc, 0x1, 0x1, 0xfffffff7, 0x10001, 0x1e, 0x8f, 0x38000, 0x100, 0x8, 0x8, 0x5, 0x63, 0x1ff, 0x4, 0x8, 0x7, 0x5, 0x1, 0xb, 0xfffffff7, 0x401, 0x8000, 0x2, 0x7ff, 0x1, 0x7, 0xa, 0x0, 0xfffffffb, 0x5, 0x5, 0x0, 0x6, 0x400, 0x8, 0x9c, 0x6, 0xffffffff, 0x401, 0x6, 0x4, 0xf0bbf6b, 0x7, 0x68, 0x3, 0xba5, 0x5, 0x100, 0x7, 0x95708ac, 0xc0f, 0x80000000, 0x5, 0xfffffffb, 0x0, 0x80000001, 0x2, 0x3, 0x4, 0x400, 0x0, 0x0, 0x1ff, 0xfffffff1, 0x4, 0x6, 0xf, 0x8, 0x9, 0xfffffffc, 0xb8d, 0x3, 0x1, 0x6, 0x380, 0x3, 0x4, 0x940b, 0x2, 0x800, 0x0, 0x2, 0x1000, 0x97f, 0x2, 0x3, 0x0, 0x1000, 0x97, 0x7, 0x2, 0x0, 0x10001, 0x9, 0x0, 0xbd, 0x56b8, 0x7fffffff, 0x1, 0xc36d, 0x2, 0x4, 0x8, 0x2, 0x40, 0x8, 0x8, 0x8000, 0x4, 0xffff2339, 0x1, 0x197, 0x6095, 0xf, 0x4, 0x3, 0x8, 0x1, 0xa, 0xffff, 0x5, 0x50b, 0x6, 0xff, 0x7, 0x7fffffff, 0x1ff, 0x10000, 0x9, 0x8001, 0xfffffff9, 0x2, 0x80000001, 0x2, 0x10000, 0x200, 0xdfbb, 0x5393, 0x7, 0x5, 0x1, 0x8, 0x8, 0x5, 0x7, 0x0, 0x0, 0x7, 0x4, 0x7, 0x1ff, 0x4, 0x2, 0x6, 0x1, 0x2, 0x5, 0x6a, 0x0, 0xb, 0x1, 0x8001, 0x10, 0xe, 0x5, 0x7fffffff, 0x445c, 0x7, 0x48, 0x10, 0x75c515e7, 0x0, 0x101, 0x40000000, 0x8, 0x5, 0x8, 0x6a067f84, 0x6ed9, 0x8000, 0x1, 0x4, 0x8, 0x6, 0x0, 0x5, 0x7, 0x80000001, 0x0, 0x2, 0x4, 0x8, 0x8, 0x1000, 0x4, 0x8000, 0xfffffffa, 0x7fffffff, 0x3, 0x7, 0x5, 0x6, 0x6, 0x200, 0x68, 0x2, 0x200, 0x7ff, 0x3, 0x4, 0xfffffc00, 0x8000, 0x2, 0x7fffffff, 0x6, 0x7, 0x5, 0xe, 0x100, 0x1, 0x8000, 0x7, 0x4, 0x1000, 0x6, 0x401, 0x3, 0x3, 0x4, 0x5, 0x9, 0x6, 0x1, 0x80000000, 0x4, 0x2, 0xf88, 0x1, 0x1, 0x1ff, 0x6, 0x80000001, 0x4, 0x0, 0x2, 0xa, 0x1, 0xe, 0x8, 0x9, 0x9, 0x5, 0x6, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}]}}]}, 0xf00}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019240)='net/fib_triestat\x00') pread64(r10, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) prctl$PR_SET_MM_MAP(0x3c, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) fsmount(r0, 0x1, 0x84) 4m38.261231559s ago: executing program 3 (id=4371): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0xc369d000) mbind(&(0x7f00002d0000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xff, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4m37.990219418s ago: executing program 3 (id=4374): socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000a00ff01000000000000000000000000000108000a00", @ANYRES32=r3], 0x54}}, 0x0) 4m37.929421013s ago: executing program 3 (id=4375): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2311}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r6, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000040)={0xfffffffc, 0x1003, 0x4, {0x6, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0f08b9820400000f32b805000000b9050000000f01d966ba410066ed0fa80f01c40fc72a36f4c4e2fd40db66ba6100b83e9f0000ef", 0x35}], 0x0, 0x2c, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) read$dsp(r1, &(0x7f0000003200)=""/4088, 0x57d) 4m36.627409855s ago: executing program 3 (id=4379): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) io_uring_enter(0xffffffffffffffff, 0x16fe, 0x8004, 0x69, &(0x7f0000000100)={[0x2]}, 0x8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a05125000000000000109022400010000e80b0904000001030002000921fd7f000122e30109058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x83, 0x20, "d2"}, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xe, {[@local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x11, r5, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r5, 0x4f544000) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x208000, &(0x7f0000000640)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3c, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r7, &(0x7f0000000640)='\x00', 0x89901) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r4, 0x1, 0x70bd27, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r11 = syz_open_procfs(r10, &(0x7f0000000080)='maps\x00') pread64(r11, &(0x7f00000003c0)=""/115, 0x73, 0xb) 4m33.479059517s ago: executing program 3 (id=4394): openat$kvm(0xffffffffffffff9c, 0x0, 0xc2400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000010c0)={&(0x7f0000001080)="e6a6cb0d7537481893f484c4aa82716e4287bdc4", 0x14}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000001100)={0x4000000, 0x4, 0x4}) close(r2) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/4109, 0x100d) lsm_get_self_attr(0x64, 0xffffffffffffffff, 0x0, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x3, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0x30, 0x5a, 0xbd, 0x40, 0x22b8, 0x6425, 0x8ae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xae, 0x5, 0x10, 0x2}}]}}, 0x0) ioctl$EVIOCRMFF(r4, 0x40085507, 0x0) syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x537d, 0x10100, 0x0, 0x250}, &(0x7f0000000880), &(0x7f0000000280), &(0x7f0000000000)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000001f21000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="05000000"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 4m33.268108642s ago: executing program 3 (id=4395): gettid() r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = syz_usb_connect(0xc, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0100029c000100000400090400bf900b64ea00090587033b"], 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x101, 0x4000, 0xfffffffd, 0x7}) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000180)=r3, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0), 0x161) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x20, 0x16, 0xa01, 0x0, 0x0, {0x3}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @uid}]}, 0x20}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r8, &(0x7f0000000000)='\x00', 0x1) syz_usb_control_io$uac1(r1, 0x0, 0x0) r9 = fsopen(0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) ioctl$XFS_IOC_OPEN_BY_HANDLE(r8, 0xc038586b, &(0x7f0000000380)={r9, &(0x7f00000000c0)='memory.events\x00', 0x3, &(0x7f0000000140)={@_ha_fsid={[0x8, 0x2]}, {0x7f, 0x2f11, 0x2, 0x3}}, 0xfffffff9, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x9}) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r10 = geteuid() setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6c9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@empty, @in6=@remote, 0x4e23, 0x80, 0x4e23, 0x1, 0xa, 0x60, 0x20, 0x21, 0x0, r10}, {0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffffa, 0x9, 0x2, 0x4bce, 0x9}, {0x7f, 0x8, 0x40, 0x6}, 0x8000, 0x6e6bb7, 0x1, 0x1, 0x0, 0x3}, {{@in=@empty, 0x4d2, 0x3c}, 0xa, @in6=@local, 0x3501, 0xd60343466fda1ed6, 0x1, 0x3, 0x92e5, 0xf, 0xfffffff8}}, 0xe8) 4m32.887438838s ago: executing program 34 (id=4395): gettid() r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = syz_usb_connect(0xc, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0100029c000100000400090400bf900b64ea00090587033b"], 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x101, 0x4000, 0xfffffffd, 0x7}) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000180)=r3, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0), 0x161) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x20, 0x16, 0xa01, 0x0, 0x0, {0x3}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @uid}]}, 0x20}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r8, &(0x7f0000000000)='\x00', 0x1) syz_usb_control_io$uac1(r1, 0x0, 0x0) r9 = fsopen(0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) ioctl$XFS_IOC_OPEN_BY_HANDLE(r8, 0xc038586b, &(0x7f0000000380)={r9, &(0x7f00000000c0)='memory.events\x00', 0x3, &(0x7f0000000140)={@_ha_fsid={[0x8, 0x2]}, {0x7f, 0x2f11, 0x2, 0x3}}, 0xfffffff9, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x9}) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r10 = geteuid() setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@empty, @in6=@remote, 0x4e23, 0x80, 0x4e23, 0x1, 0xa, 0x60, 0x20, 0x21, 0x0, r10}, {0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffffa, 0x9, 0x2, 0x4bce, 0x9}, {0x7f, 0x8, 0x40, 0x6}, 0x8000, 0x6e6bb7, 0x1, 0x1, 0x0, 0x3}, {{@in=@empty, 0x4d2, 0x3c}, 0xa, @in6=@local, 0x3501, 0xd60343466fda1ed6, 0x1, 0x3, 0x92e5, 0xf, 0xfffffff8}}, 0xe8) 10.854084208s ago: executing program 7 (id=5595): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x8000, 0x8058, 0x3, 0x9, {{0xd, 0x4, 0x2, 0x9, 0x34, 0x65, 0x0, 0xf8, 0x29, 0x0, @private=0xa010102, @multicast1, {[@generic={0x44, 0x6, "a3ff2ddb"}, @cipso={0x86, 0x17, 0x3, [{0x0, 0x11, "28b3d54a2bafc9430f75eca2983c55"}]}]}}}}}) unshare(0x6020400) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000300)={'erspan0\x00', r2, 0x8, 0x80, 0x1, 0x5, {{0x18, 0x4, 0x1, 0x29, 0x60, 0x64, 0x0, 0x93, 0x29, 0x0, @loopback, @private=0xa010101, {[@rr={0x7, 0x1b, 0x94, [@broadcast, @empty, @multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @generic={0x89, 0x10, "bcbbaf420bb95823bbbcaefc2d55"}, @generic={0x86, 0x6, "a540c862"}, @rr={0x7, 0x13, 0x51, [@multicast1, @remote, @empty, @dev={0xac, 0x14, 0x14, 0xa}]}, @end, @end, @ra={0x94, 0x4, 0x1}]}}}}}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x181e5000) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$rds(r1, &(0x7f0000000b00)={&(0x7f0000000140)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000440)=""/118, 0x76}, {&(0x7f00000004c0)=""/50, 0x32}, {&(0x7f0000000500)=""/123, 0x7b}, {&(0x7f0000000580)=""/158, 0x9e}, {&(0x7f0000000640)=""/254, 0xfe}], 0x5, &(0x7f0000000a80)=[@cswp={0x58, 0x114, 0x7, {{0xd23}, &(0x7f0000000a00)=0x5, &(0x7f0000000a40)=0x4, 0x0, 0x401, 0x7, 0x9, 0x40, 0x3}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x9}], 0x70}, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005200010001000000fcdbdf250a00000008000100", @ANYRES16=r3], 0x1c}, 0x1, 0x0, 0x0, 0x5001}, 0x20000000) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) getsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000280)) 10.474481155s ago: executing program 7 (id=5598): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffff9, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000300)={0x0, 0x14, 0x1, 0xae2, 0xfffffffffffffeb4, 0x7, 0x0}) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_POISON(r2, 0xc020aa08, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000026c0)=ANY=[@ANYBLOB="120150023862ea404b062578c63f010203010901c509d0100904d30600aaaf6400"], &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = fanotify_init(0x200, 0x0) execve(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x1b, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) pipe(&(0x7f0000000540)={0xffffffffffffffff}) fanotify_mark(r4, 0x1, 0x4800001e, r6, 0x0) fchdir(r1) close_range(r3, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x400000000001, 0x100) sendto$inet6(r7, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @private2}, 0x1c) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000000000)={0x1, 'veth0_to_bond\x00', {}, 0x9}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x911}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xf55b}}}, &(0x7f00000002c0)=0x84) 7.723359903s ago: executing program 5 (id=5612): prctl$PR_SET_IO_FLUSHER(0x4e, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x6, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff}, {0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8000, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d0010000210001000000000004000000ff010000000000000000000000000001fc02000000000000000000000000002000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1d0}}, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r3, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x378}}, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1) eventfd(0x5f0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r8, 0x4020aed2, &(0x7f0000000300)={0x0, 0x3000, 0x8}) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000240)='./cgroup/cgroup.procs\x00', 0x0, 0xb070c0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014935d1071040c03e9ba010203010902120001000000000904"], 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x7}, [@CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x34, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x3, 0x6}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x6, 0xff}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x40}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x28, 0x9}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x81, 0x2}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x98, 0x4}}]}}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x7, 0x3, 0x401, 0xe, 0x7]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x90}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48820}, 0x0) 7.184069208s ago: executing program 7 (id=5614): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x1108) (async) fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) 7.067998329s ago: executing program 0 (id=5616): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c0000040000010902"], 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x4001fffbfffff]}, 0x8, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x24, 0x0, r1}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$rds(0x15, 0x5, 0x0) socket(0x15, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00004d4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000890000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc0}) unshare(0x20060400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (fail_nth: 3) 6.905962286s ago: executing program 7 (id=5617): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpgrp(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x80) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1a9882, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), 0x0, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r7, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000002140)={0x50, 0x0, r8, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r7, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r7, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r9}, 0x10) syz_fuse_handle_req(r7, &(0x7f0000009040)="c9b6cf40d6a9928c6a8c0fdaba1e7bbd4ee597917b02ec4e8ff3bec8d7d8c08f8813039f40175e54e3d66ec19388ed788cf69c0c5b560f0401f1adb4b1f5198fe0bd7627cb9dc384db5b44495ba6094046fb2c8c7d0af7d67dbc3f5ef4aef8ec6bb01c52b6a10d4f9473987d0809b6a84f2ff8aae19a082abcb68b41c291add3ca2204a38c59e28c7c910aaa5a075676e541b6bb91de3854d2f97d3f80dc56c0705e74624a947f2c21ff936c6ba827742a24fd6d9e10b470ceb73a23fc57f5fa27cf073f2d0235e6fa4d1c29f9d0b6509c890ce0e7c3a2a4dd8b6336f02b9d7cc4c8e37f5f5a57f63aeec3228bd15b6d041eab97bccb14ee1ca6fbf7f7ed2e4dd0a32d41cc41c1031424b94621edcea1bddd40f3ad905202dfba3b912efd3468d2ad42b8a01bcb13b288afdc00b7e5857425d7919651160ec15447a26758f20653e69559f0892efc8f0715d8d79f52a44c79aba8ac58dc726ed721eeab3480eaacc2655d4b8831c9aff049c32709ab7adfb24ae767d45468dc0e42bc34b3568ce95e850eaabbf3a1be4d0f9b3e8781a2a9dc06374fe496a755b48abce67fd56de43816d64e883d9db51489ab8a81d1af3a180b6772d2bdac6313d3c183239d4c0bbbe76173f011f144ba71ac8043107f6533b3ef2f44924039b8587485749647315eb7bfe1e412e94f8cdaa937480fdd23769a69e14ea82d741484c99dd1ddd1edfb4faa51431f15531b61e59d68f9d189b27d0bf925970ac66fc35dbe1e430893cc60b28ca6d8e34931bf02154aee6f1fc58d0c0d8e48eaf8079ded67fdd9f19ebfa85d1ab6ec7f54e1963be353b34a6cb7fa35ddb60a9fc6bd1c6f11bf981b5a1bba81513fe447ff7eb2db0d27f1cfd04353e05f37d6c1bd6eb8219ce799338de3518bfec529373e4acfd644212be283856be064bac0f4926c02c0915816615f1f04d1d5136872029afee663f0bf1b6811c594e1465fba59f5727e5a826e3c60576bc2087f21521ffc90dcca39cbec7c0466c8fb7b1bcea7cffb333d2d16daa269d63f4911d10ed24462b37cdceb7c88e819489e1939e5e3cdcc5a858d09803c98d9e5fd617bc92c0880f072c54608f6ea69edba05b4edcd8d3f5e3c926220a191f2aa0d2f0c9158e298bc2e756ee091a0ac48752e4bb56fac67b02eb2c7b3380244ed66648482d8bc2a29bfc26ade0f4a5665282ea408254fd88e2812a184ee9af9c7769fba1ec380043d5cdf6056f89b4d7f12a441c3013b0fe0d8418fc47c13fbf4fc2b4a89496d4ab9d9826d0e586574e8dd15d4eb8b86ed372e37287fc818df5b6993b650fba844d960e3fd62db0bc7b12ab286d6492388a91ae4da6bdece6e101c13100eaba3b9998706fd4defaa3ed2965ce7fe6062b8c58f20c6b44b01121184ee1dda1cb66b3ababecfc0b7a9a12624e0b826c35d0149335149cfb49fbe68d1dbb7eef96d7956dc573d449847ff4bb7ba0ededd00c904130f1252c3dd4bdcdeccf6f8a83e3abfa14d12c753558022efa0704549b0571e31c4bc9f3e485f8d2d88189b4149569ef83e8feb2ad26c263b0f91f8975c86c8fa9c9457da5ef4a8a94844f824873576f722e32b376ba5f3ed0ea9818d86ddc35ba0e7f322594d9a0fea878af5c03d242bc7b0af89091f088245154391e75ab1b6b2730ccd01c28e9ec99428cc22c2d08ae2829537c34ebd1273327d0d18175698f9fe587e968d19f00ff98555fcfe95d00cb3abae32afcd48f3d4cd7c63c45581203a8a3040363d98bf9426493039fce7bb03493ab6e176cb45e2af461e77fc93d1202fe0bc7b77398c52bbc1c1436439f26cb2e17933a0ae309611e46bebd4d84a939d9b040a08cad90c2eda6ddc933edffc8e562aa64658f99a9ec8a47278edb828b5312a95ca34c0af428aac64d3fa1c4045885891fda7666dfb680da4dc2c02becb8303b76987b6d9be01174df88e41a48a42444caeae5e36118564e57209594285bc2915b222f99f016326430c38c9807994cfa1c3c85aa0f6375c716cd7f27be9b2cef6866d07c8ed00bc101a74219182562467ebbd43d2ba78a4b0eae22c67702f318bc55ccd92f5fd11557335f94ff6f38cfe9fbe31d3fac064dcd7d660d02fbeaa26acf8927c1e3bc71d9ed8ef2e93f0a42813526daa1fad36676734103bcc621a114b098295de578bf8d7df9034fb3ba86ea529bf639cde496b5e48145e4a814f894fb3bf3f41b49d0572dad5988348dad7a064b2d76d9092336cb404934790683b2b3576d3b75534df2c36bc78e05ed250b9aaede772a08bf5972444ecf4e447c062d95e556768e264813369465713834f6e239695b6bfca1b6108a09368688e212b7ba556df50c02486bf1b2196da3d4c0553923fe9b1bb4474d0f569bec1f35dce4be0f5e2408efa69aa66dda6bb1ef43295fe005f4a86840bb608796ce14bcc1134013bf741ad1aa70cc6579edbd42478d3054e1f7bdbd5b1131ded725041270e8a46bcc8bbfe89089f87105939deb2a9f10dd60d059679d4514bfbfc94b333c7dde79576426f07f24ab6a57290b0d723bf3bffa2f66fe191d0dee8b292c8c15eb42245b899ddde3c6afbbf0d7c301dd142878dbca579f387931460c8c37e186f60f8d9209dc98f1a27b84ecefd71de077017261ad6cc3072fe57ec589cd9498946fda8a834e3f02e8a91f7ce6e18e76f936f6f39d354b63dccc706e25b1d8b1a4830c46f249b5e5a40042fea920ed57a2415431f83c238113ee7d152c16f0780c502d5c995168e3f91113af11752f10434b8dc5ef0e46a276c683261aa73877ce96ebd0176977e124c5b93bbb02ef97a6f6a13c15c261f23014f4b13c8f18746727206b245bee70d7b94968141f104f0682a3df4242c6a60fa1b70c227306520b1b9fbd6c916b0edf5e2ce5220fc9ef10ab0a10e1bf259e91eb127d5a31b7633f15130fdb44ce2178a20d5dc3f91688090881c061d75b4b59c3b2b7eb7a3dd1564bfa6c883c217cb76c2a7516dec926add0a1886570531c32b6284b1e80fbde88905f67ea5cea41003325327000a7f7249a99986f19f423843e8dc791df8679a2ed2b024d7d8c79112644a4fbd32bef0cd1f9d55025708135ed34cbf52ce3a0af0f8cd985362ef6fceb6c72f241128b16dad7575558badb3847e051f38d7b5ca638a1f454054659d90b2c046e4f9e2ab127f257ccc92f887b3e0c4fb49d159741fc649638180addf3f23e5265015f6dad9b25cb86d8a33b802e55258749ec050d15d0d7d821f9615c7d8c12ce11c63fb1eb118455c4e2167f66e4eaf9dec0dd2f345a7e2bb369a66b0755003a9c89449393f71acd98afdf6347792251d669ff3c64c50d705a67e543cad95655d6a4cce233acdac5ffc96681772be3c04a1b36f5273815af65ef87c7ad0d51462bf337c2389a8eded875f75eeebe5e5efc26933948e623364d0dbad3402f659a93acaaa21bc8f559dca605aa6732d0eced5a21ee8a6403b1f91722fcbada24a3031d6aa221612a36584d5edc6ba0f64096e9b6eae1555a95945b937457c4c74371f474939d3c3f299f691316497951c646f142adbd6ee49182aec388ce2ca560a1f4b7d8a63e5cd25ba91ebc61175a6955895bcddae7bf1cefccac5c93dd669ab65a2f508adbcfd62ec46027efa396b9f69984d6adcb38fdddb616ec38929fedd97677c3d06060309db5a9cb5fc8919f4310f06bb40f1b76bc197798acbf8d3162257071e034174047006796fac6fbc95c28afd881e1197c20fea8b4be5c5de39a292bd1ff3819d4d4f48162ea1a57930d8f324ce54875d3ad09eea95c4c825765842f9bbb1957fa8188578e86081adfc87502e69c8841218b596d71c4ec49afa60408028012d974051559d924f5f8a59ee195fb01994b8710994d8201ae10f6e88e0e418489c47499b7efd2021f56a6c9fba761beaf79acb6087a496afe7524f2260e14a792cf1a1203d4b0cd8a11d2544293b7657fc393014295fa28e409ab8be0a02695223d17d7caf4f44cf5d0f416130067f28f3fc51c88ad7b53e401e658214abcc8f597f22d662144f878573d0370c874287698784b6ba9abf9b22da2eeb0ce8b817f85e429e799a5edd246d72d77228652b80c4949a85cd5131d851d9f9bda9afa0646de5e477e0fa999562cb46758502c7d63dd3e8b6f88c7ea44f41c4212d633f0160e738c6d36128e9e58c154b08460c899a26276dc1257dc5de18495573693674e40faf1dad49db8ac83baecf92f3aa5c23f639cdcf6e6864c14a8d6a3de95906813fd17f83c406ffd1d2d7bc75737b7b00172448b2ff167b9fa43649db32ab4094652cbb2e18c3bdb527f24049878bb44b82135009f9af22d24ffbee4b5289fa61bd0502f019b2f24a08542db818bffb7c1637b4f4cb9043952f88aa69d9431b8df2e3f9ef6e4a5ba58e79acf082bbd871aa0f0feef71ade8f921bb597ea28548f4116a281ab3542b732c4a8e9973409c75a0c6443d83547d0d314cc7bd62128e3b0db9c03c78b9d78ba714627866230414947523a6a239873f932c2b28c09cbdf182e856bf41598998150cbdd6d54f76c227fb1519f5afb0008e31d6a0b87818d0a2ca0dd6e953a5ba1a347dd927acd36f3fa3a68920eb9c36bce6cef857447aa733e4ffb7014e194993eb1399270b64151ddbb15478c2b762a14d1782608fb24199d9d311281c47726f565b3a3b7be584afb03d87cdc5eb8156772694ab422f59cd7b1e359583a7cc0695b9f64e6416c6b52de230afbc160d2e9384501b40645189434d416c0fbb034e9ffc654d0dee7ee7a878f9e559daac7ee5af769aeac7a92e85b1bc7983803d3bb572befe76184a46b76450feccffa753cc6123cba0686440a5ba81236458831031a4ba4c91d7aab3bb2514208a902face1c12b7dfe25318ab5ca2c1ef9769aa06ba0539f6904f95d3c8440617efc7858d3984f566b3390b9b1a0f2ec3c86dd77a0b82958c4b15278ffaf10e47e613545f4cf67ef7e8b31a6bda35022871840ae1536fb65bb11b932936db7a15642359bb6b157893d19e7918b11d3d3072b78c761c1784afa2214c865fc2aed860dcc17b69cfe9189bcd0767a84cb306a59966e5f96514a7d7182e6aa7204bbd1a84092ba645f86b68813debd5a2290acc93388e5eacc17db51d69604733ea9160a0e77ec5317194654313a9a8a0535c0bc49d0837e2821df92e8ee2f154cbea6b87ffc207aab4ea491e8aa75b90f70136d84ea2f5dfd138371dbdf8fe273956cb7411db6df48ebf56105da42b219b9dad387ca7be9ecd90508c62279a53bc9f7e2a845f9da42d8e85d2653854737948ce228b2d76d1b9fe2e0e456fdff24575939b82a3f6e1a4be6ffcf1c493c17dabbfa0859a87d259ae3931fb6da544589b9b6bb7cc93e078813ac94918942bf113aee5742498d86a70fff31d2a69507739317a9aa9e0289f053dad4eec63cd58e833027f0859fb4ab74e8fc742d03b5b6dca1168d3d47fd95b514a567e6518342d52b3c3bb6438b5aeacb95ff9001d2f5480f6a80a0685b5bda2ceba06925ab5ae0986954c3169e92fedaf3f1681247cb114202c0f728296a51396063fc64aad05662bf05a626b90f656b47069ca668bb96208c287e8f793d77d4fb1f1cc14e73406005e11a2c1c46ca7448be534c97738487527d79e284d7a0ae275bd4361ecf4a352e6dc8b8c8c8e132a3edb7d645f4943445f523fb28bbf857218a117f1288afec49f9def9aabc2381b38a315d5c927aeb96fa1ad3eb13b0151dd570f6734f004467171d2cdd609d1d09d115c9b42e1da3472ada98d3e1da90a8f373a98133fa708f5a62c75b5eb1b643c48de72143ffc8761ccffd7f3336b69faa277d364cdf2d4f2bc428bda8b76e4748d5ae02d9850ac6f2ed0ddcb874c25d210163d4da10c0d6cc5218a3558deee5519c94032158bca02fe1c1b8184fdf417e863352b224b7b06267486296ebd4100ad5f1108c78a7056979f5ad6f97794a0460bf371584d9b962034aa7449f4e6b0f925b7a648d4ed7f2442135629b0baee3385882682fde57e5eb9204647a898c566120e4b577ba215ed863f76d5ad9ed19a6b7465952292e7543110eac3dc436a16c85047f3ff10a00c917d5902d296c063c4b173775f2b612e407bce02c8647877abcc07b21b89a60e16ff5c5cdc3708f285d6e411036661e97f628c6c2bef7a6e297f0ea7db2aaceb87d13425e80c28cf095b1dd4e08122e89f58862c6466d79fe7d06e0038a9a1869cba0d1554bffc08b94bf3dc7ec4d108073a4dcb7a6a503b608e777f1ca6b64deec19072052cdab8e7222966170bd35cfa66d3d013c537e723bfa2f634b34edba64ee27ab814bf66c5943e5b7b4d2cbad0550982b2d68ea0633a48f24ef5a59da6e9671717afed4253db66afce693ab08e2b4343d9efd1705802393ba22af5f0e04fc559ddafd78bb1c013b2826cfd77591736cd8a1e079c00f72dc89ee419cf4cc5e867138e35372bb0854df45d2142ce56ea01465d7cf42d3beabbed8602ff568df5d8e53d22bbd897c0aa050165319ba28d6f861a128556e420275562b8a19c0a2112df4490925f52090c6c7ac79b8533936d4020af3ea5d383cc8e4f23cf275194887d42bde7061bc17246a91b735472c4dee6f2d159a4fb2cce10f0727a964658f6d60aa18bd474ce1e88114ce3c2a3acabd74175b82afc6126ed79d8d333ed993e3a0d67afba888c94cb266f906681d9595f2ca21946f32d8f07eb7cfc979cdd56a885e6a5deb1dc54ffbbbac728db4145056cc9b78386f1f17ad16856cc10b04038f0d835a5842584b6a9516a770abd839ade5d379db9889d22d9049dd13010ad612a64128f724f7a643505b8ca50bddc4ec4875beed2f8593b7382645625809bbc3591027d53bde8a16be5bb209cd49e71aaa435c923ef3c4d1aefec7111773b0d58b47efabc7a43b93cb7eab287cefe554a5b59e2a746081d0d875919df356504008374ef184be2f7ef7e644bf5535dedf5b969b30dcedcfbecb83173b0cea015efe45630880c303472daf1dc22b384e65078cb0ae21baa4834fcd4b4f7c995b700117e1448d041a7106277302fabf3a512ad4e802988c43e6cad0b4b74962e195b355b653acfab53d9f38337e46758c0f8c147333d30f8fbb508a889b84d4672e025b0d9adec09fd4e2d62bda0e0c40570d8fcf5487a59380584f7b85a8576985a4423cbdb1503ea4f93d4f3dbb2c384efcac84dd8649e6f09d2ac37e1d8268c3c07db365581c7c3752410909968598b8ea5ea05b68e6013965cc60be6f6b24e493655f5ddd572a84a924803a7df025914f4b57527841928d30c03b09aeee28c8b81860968f53a663f4f56b004e07cc380f5b0b0dad43869faeed5f240ce389a0fb0920073b8d3de611e54d4011f55ba28743a3b51af6293ed1376fcfe3592c877e2d81d14ee882410cf8207476409b5673eb65297155e91cbe089c8c043964063f9b469419bce6e59e0017e0f527d20eab5d9579208df9cc65389ca8fdb3d62618395bb0274b8094799cb4c36632488e79950ac3bd3d982d521614f56df1bd16c1f928481dd4580a796eb7892b3e4a33b748b16f96b1def674c2b70d0315b486a94a979292d635a2ad1fa877927de9355f38a612747fb982bccf12040d9a14a63c34b6f2b3b450a6401d4d0c96a9090ab80d30f7e7af84bade864791455402cbd278427c5a1e84e2e2286c4bf773da614e6705802c130ade8a3a67b309f9db1558372046ec276a34fb50f72c7df40e33f447ab5f0af05eece4e8f654b3c2dad6ea76ef6b694699f4ad8c6fdcbfd8bdc23d0c580631d0c95ac6ae9613dad680939db2ecf9e7a0d4d0f2f2b7f1c1d308cfaccacc2381e97bb278a53b14daf686c0541e56264c33d5176b830ac7d13c28edb2d8e77d7acbced061c4ec315cb1a259966ad997c7c7beae44d4d1b6955842d7fbba0bb0c461bb22db3e15f0fc1cd3fd997dac5e6a4bff6e2eb8310d828f15309b2c8feaa21281963d35ab2d5c099beb806cd384d304449c58d89910105df11225fb893e984734a8e5cba2e553f03ebd5ce4cae24826547df81db3f2bd7d930f785755c8b6311f221da59679ce50479adef1cc5dac984a5d2f9343fe4892b2b5640892892cfd50d0015c1f568792d8919943a578b62585081175237444d9542a2241c967bcfbc3dab4e8961ecad89165eaada2d759e844be5021aed42b971e9ffea8c08a3d6e4073ce4226b4e54b83f3d8ccd207a0cfcf9da7b5e55d1a26a90e03f7c3611c6562b65edb42fe110dc3970b44aa36660d1cdbc882495271f80816350b945aedb0d46ca6d160d5f0096e8263325e257dbb574932e32f1b28ce2b7f5b3ee6ccec64085496bb513ec168b53d79e6ecb72622a70b22e1f9116fa48815709b2080b27b31a6b26dde0701cd74c31b4e33a702f051ae07ad54ce23ae33e6060e5451a4171cc930af2ab70862044c5a0ff9e8aeebd3cc41c62d38e7b79596d3851430dd661b071c319751985d48eeea2afb463d7d9390ed4e68a60f90ad80aeca4b8d283ae0538e590668c857a526a264be238641eeb5f321248d829539efccf03dcefa54c6def8b7d4a8cdf6bc76d71eefaca1a7a33bd4b56e94b8e38f784b742bdd080faca4769e1aa91ff50d9374f3632cb7b66a0042beb802c6cedff0a3634aec072f57d38a6ea61439029ba5d921f57bfbc281d75f5ec322b8f8c90b4d3f65d00ef97dcffe7e07fa01af8e7f8da15532f0c18b73d7a183327aea46680651645782f4f318c00f2355c301fe2e805a22f8586119768b8424735f5495607d170f0818be232cec1d9e40daf79bcd63a26cbead93753b7171bcad462da2af68e9ea9c0b207200f1fcf3793283931603a719e745120273efb541a7af896f6eea7359939d7226896c8023cc963e4e0a7579bc83a37cb8d871324bb3e66b671d8df83d645495740c5b99aaf2edda3018e1895dda6744b1e6623cb62d4b80ac208f69a81caa0277a497e41bf637817518cbe0fcd2028d07be199a126f82641f2fd54e6b20287b912ee8d8dd72db5824ca9e464a94d45beda7f52932d1bb57a28a4e99ac32ea4c3650197613a87e4cec91d82f37069fde871575d3cb2220aaad9277511271a86377da5f2a9f94303e7151acb087ca549fd0cb9b1961954ddb28333a24b510b92cddc057ec5a147ccdd708a2db3c8cb3600756100b38b71f0676f6fc5a7f5912b5e81bf6d2b07e15fb5b1c96459110ceb22ba4f2fb0e531dcaa913a13437cc6276c8b4e1bdbc5365144c7abd2e2a6c93ef102e26b14e576ada244408d9db50aab045f9879bf95425eaa7b11d77e0dc503851c5c278c282aa736103adf5ca2b30724bde27f98e4e7a947f964b7abfe58a3da354e3008a2b86d50223d3077e151ce2e086172002eab7279ac1948361e172073184401d5650181547f1bacc1534f9ab2ad66fd9d200d867de79a92e465dda8d781b15881acc9bfdc53815f3fc3f064c830db3908cdb173e3e1295ea7dca280273ca99073d5663003f14c4f7ac9ef9bc735b2a413daaa7d97101553f90a0d33b043d1f2b0f131d35c9244808bb4b76213ff5c418053a569d760498518d701aae39cfbd7a052b586c53617dfaad1415c1cafbb41640d1650be9297dd42c803d8bfd443916310bb80a74c991cc26331ab70c0c4bc4f2295f069787f6759878e42ffbc76b34493f71d88a109b0813ebfcd24953b2b5f1f5164d9974bab7ed1f4d42f62b8379912dd7e9f35a19951e4d57b0c70fe516cd2059c4ef879d9f9b1191d5bb51b852d3e9462e4528b9c1f7c676e6039d1deb00442a482e297b08a67c79bb818d0316072d8174885de3413ae0505232100f217e424e0106811902d60ecc0e0aaca7c5f00f4f365e1360f10aa645b9215c93668a08be97cacd6b0f9c80ead76478846d12e8f24a53bfab01628afd199b2db332d38d5009d7a1437f0f5b2a0d36b5c98f3a35e5043ffd55bac325d3927888fa5d0e3569d9be002205b501b3e68d661515bb9eac9d4f234e22e4e5bd0b4c4530933aadd99f132794ce48e9a3220d2c17748c012fc5fd93d265cebb3edc3be29a1ba26f2adcf510663c28d29e28774c4ec1190fbfbf614aa8e2745f8605f7d7e94fdd06322454a08833f1a22c77deedb1337e380a8e18f85168e045d1e7cf32fda1a709d3eddf62909a9e580ed8abd605e07dbab79b5bcc2f4533e6fec589b976816471b1f11ac3c89336c52e03b72520995d05275024e9988727f2e1ac9421ccaaa0b736e9f7f296c2d27cbd774d7179f9c6921df68985998034862c15adc452666deb40c0c40cedf16f4d187524a0a5cdff6f7b2531eda54fbe15a7ad1aea46466a51642326c5d7d374fb38475d119027a3714598fe7307de94bece2741b7a742b053682dae9452eed3b820b1386b604fa647e392b35b205019cf1ad317d1441cbee2aea5ca95e56fd5e959689bf96c9f470acb8e4e630b13403e9459242b629fa28e1ba8eacf1ed572b1db735a20ee1a5b8500b6edf66cbe671c5938741ab2b36ccd4e92160f6df9e1d465cdaf3a7746e128e26e0e7a7aa4869b2a482c6e9bf7e58408411016740c547129e4f11d2317af3c5bb55b2468e6d08e75e5039c3bfdc9b6da06e7c27933a8c9d8ad0e4c74a093e6d57c02b1b49e995962c1046b5c8a3df0ea4c20049e300cbe41bd92a0ea5993ef6fd92ea74e28e1cfaf4a8533c224104d6081b64ae08b4e7a23a259b2b03655b987c23687c6e279bab469a3e0881a30620910566982945f8f86229fd614ca2bb2adcbdd49a5c579c0d1bbdefb9e33cd0641bb43f6ca3fab33dc4188e1508e4293e6de932040b895a97bc1f196467ad4a0d4899e6078c014f42521cf39411e2e4f1b5adc26f1f3bb2fcd27b89ac418c8251423de82c4b5980a4e66649b9f3ec48c833c35f8653ca510a0a1b049561e64a6938714c3a1946b3fa5079533698bb8f8f85bea8711ccda5cf01de150b055d3586a890d0654d2b4cfba25c434e2ff492b69798aa197dffbfe2bba77d4b4eea35c42e698221e971a4bca34e59c46084f48f2170b83db6719324ecb55e07a9cf74a84ee0fc3567fa5cd2f3937ad956b4ed2187e2026b7d4166d50fd9c937fb4dd5aa96f2731f1db1dda4eac4e589295ffe9b72a7b9533f6e23c82b57c8361c8cb3b15128235f65c84b99d93383b7398e936884542d0e73bdf37cadfb6c70da47af3c5a3cde0d8e381cdf9ec1a39d2fc963f0d8ee31b76d9668c0171967cb9ef2f15d5bbdbd1058328da7a60bbc7d77efed2de74a2ed5637a8a84e1163325dd22b584b15fe894c9b1ce89d24619a344a8987f6d21b7de7ccf6fad223134e1c389a8e6baa375dd142baf4a8852e984eb6c281cf86e2457a7f85782c7764564af26d331d3ddf4850d24742ef449cd5e32f5957d2ee10e05e7d3312215e4d36ac5c8c4bae3340f074f88a20e18b270b3baf05de1b0363f4c6f2ab9386d6034e8567e4828ad256cd250448c70147c318a621697be402c1e8365d2798084f968a8897242ff6756c2937e4d1300", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x45, {0x6, 0x0, 0x0, 0xfa0, 0xffffffff, 0x0, {0x8000, 0x0, 0x0, 0x0, 0x22, 0xf7fe, 0x3, 0x0, 0xfffffff7, 0x4000, 0x1, r10, 0x0, 0x0, 0xfffff8af}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, r10, 0x0) syz_open_procfs(r2, &(0x7f0000000040)='net/l2cap\x00') sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001900010025bd7000fedbdf251d010e009a4725b8cefe165af4010241218ab3be104e48e9012b7e83544ebf734070d64287a6e114e73988c47c3ea94dbf341dc64a36169dad1340fbc2654c956f864e54a48d2df58d01f6f318d9d895b31d1c63035d8ed0ac95441f4131a05bb7420f45d1c573c9e661308ce49754eeafe02aa94cef75873f4e799cad027b71930a79"], 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x40000) syz_usb_connect$midi(0x0, 0x57, &(0x7f0000003140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x644, 0x800e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x2, 0x40, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x4a, [@midi_out_jack={0x9, 0x24, 0x3, 0x0, 0xff, 0x1, [{0x81, 0x8}], 0x9}, @ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x1, 0x53}], [{{0x9, 0x5, 0x6, 0x0, 0x400, 0x9, 0xfc, 0xc0, {0x4}}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x5, 0x9d, 0xe, {0x7, 0x25, 0x1, 0x3, "62ffbe"}}}]}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0xf0ff}}]}) 6.809613744s ago: executing program 2 (id=5618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0xdac2, 0xc00, 0x0, 0x4}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x22, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000, 0x0, {0x3}}) io_uring_enter(r1, 0x1, 0x21, 0x1, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) close(0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x8000, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d300012802c0001800a0001006c696d69740000001c0002800c000140fffffffffffffffd0c00024000000000000010000800034000000110140000201000010000000000000000000084000a", @ANYRES64=r5], 0xbc}}, 0x20050800) 6.458484121s ago: executing program 6 (id=5620): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000000)) 6.392215172s ago: executing program 6 (id=5621): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000000000", 0xb2) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbe}}, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r3, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xe000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x64}, 0x1, 0x620b}, 0x40004c0) r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000003c0)={0x0, 0x1, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) 5.85528641s ago: executing program 2 (id=5622): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xe, &(0x7f00000039c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) syz_open_procfs(0x0, &(0x7f00000000c0)='net/udplite\x00') epoll_create1(0x0) r0 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x86) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x55, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x6) 5.604461751s ago: executing program 2 (id=5623): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x2002) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40140, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r6 = socket(0x10, 0x3, 0x0) close(r5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.404346128s ago: executing program 0 (id=5624): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x17, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000010000000000009f09000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff0bffb702000008000000b7030000000000008500000006000000bf91000000000000b70200000000000085000000d4000000b70000000064000095"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x20, &(0x7f0000000000)=""/32, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 5.251340482s ago: executing program 0 (id=5625): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x4, 0x0, 0x3, {0x2, @raw_data="c85f5bb197493797808cfe03a242e1385dc56d2b4e9b98dc73470bf6419d5a4610f67781dcb14b126a10498fc0edd1371a91607f29944d19f5c13b4d96da0c658824a5b7da9ee03ab5d386da595699f51fee3136561758ffbbdfa6c43f06f236e8c38157ec0530ec5c0b3a092d6188f294416c63181a2cf0723707a86a2d57992f6d58ae22f251365375caaf3531cc24399b5daf0bee20b903fa6ceda798793ed8ab889c8ad60ddd6e3e455a66f9162b6ed704b7868d4de43093abf48d5d5beab5051db600"}}) r1 = syz_usb_connect(0x6, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/diskstats\x00', 0x0, 0x0) lseek(r2, 0x4, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x4, 0x8008, 0x7, 0x6, 0x0}, &(0x7f00000005c0)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000600)={r3, 0x1000}, &(0x7f0000000640)=0x8) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) (async, rerun: 64) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2a282) (rerun: 64) ioctl$LOOP_SET_STATUS(r6, 0x4c02, 0x0) write$char_usb(r5, &(0x7f0000000280)='4', 0x1) (async) syz_usb_disconnect(r1) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) socket(0x10, 0x3, 0x0) (async) capset(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) rt_sigsuspend(0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) (async) close(r8) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x3, 0x2, 0x8001, 0xfa11, 0xffffffff}, 0x0) (async) madvise(&(0x7f00004f0000/0x3000)=nil, 0x3000, 0x17) (async) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000100)=0x101000d) 5.211896045s ago: executing program 7 (id=5626): openat$kvm(0xffffffffffffff9c, 0x0, 0xc2400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000010c0)={0x0}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000001100)={0x4000000, 0x4, 0x4}) close(r2) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/4109, 0x100d) openat(0xffffffffffffffff, 0x0, 0xd40, 0x82) lsm_get_self_attr(0x64, 0xffffffffffffffff, 0x0, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x3, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0x30, 0x5a, 0xbd, 0x40, 0x22b8, 0x6425, 0x8ae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xae, 0x5, 0x10, 0x2}}]}}, 0x0) ioctl$EVIOCRMFF(r4, 0x40085507, 0x0) syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x537d, 0x10100, 0x0, 0x250}, &(0x7f0000000880), &(0x7f0000000280), &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000001f21000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="05000000"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 5.000009472s ago: executing program 0 (id=5627): socket$kcm(0x2, 0x4, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x25, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000080)=""/162, 0xa2}, {&(0x7f00000001c0)=""/219, 0xdb}, {&(0x7f0000000380)=""/241, 0xf1}, {&(0x7f0000000500)=""/132, 0x84}, {&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x6, &(0x7f0000001680)=""/148, 0x94}, 0x4}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001740)=""/182, 0xb6}, {&(0x7f0000001800)=""/25, 0x19}, {&(0x7f0000001840)=""/71, 0x47}], 0x3, &(0x7f0000001900)=""/87, 0x57}, 0xff}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001980)=""/225, 0xe1}], 0x1, &(0x7f0000001ac0)=""/4096, 0x1000}, 0x7ff}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002ac0)=""/206, 0xce}, {&(0x7f0000002bc0)=""/45, 0x2d}, {&(0x7f0000002c00)=""/181, 0xb5}], 0x3, &(0x7f0000002d00)=""/165, 0xa5}, 0x6}], 0x4, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xd231c4f959ad4808) syz_open_dev$dri(0x0, 0x1, 0x2200) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x8, 0xffffffffffffffff, 0x20}) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 4.841118023s ago: executing program 6 (id=5628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x41, 0x0, 0x2, 0x0) io_uring_setup(0x267a, &(0x7f0000000140)={0x0, 0x52a0, 0x8000, 0x1, 0x8e}) socketpair(0x0, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0100eb00"}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) fcntl$lock(r9, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff, 0xb}) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001020000082505a1a440000102030109025c000201a220fc0904000001020d0000052406000105240000000d240f0100000000000000000006241a000000090581030000000000090401e8608e2e29ca4b3b010102020d0000090582020000000000090503020000000000"], 0xfffffffffffffffc) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001008000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6, 0x1}}, './file0\x00'}) 4.238345536s ago: executing program 5 (id=5629): r0 = socket$key(0xf, 0x3, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) 3.121119663s ago: executing program 5 (id=5630): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x8000, 0x8058, 0x3, 0x9, {{0xd, 0x4, 0x2, 0x9, 0x34, 0x65, 0x0, 0xf8, 0x29, 0x0, @private=0xa010102, @multicast1, {[@generic={0x44, 0x6, "a3ff2ddb"}, @cipso={0x86, 0x17, 0x3, [{0x0, 0x11, "28b3d54a2bafc9430f75eca2983c55"}]}]}}}}}) unshare(0x6020400) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000300)={'erspan0\x00', r2, 0x8, 0x80, 0x1, 0x5, {{0x18, 0x4, 0x1, 0x29, 0x60, 0x64, 0x0, 0x93, 0x29, 0x0, @loopback, @private=0xa010101, {[@rr={0x7, 0x1b, 0x94, [@broadcast, @empty, @multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @generic={0x89, 0x10, "bcbbaf420bb95823bbbcaefc2d55"}, @generic={0x86, 0x6, "a540c862"}, @rr={0x7, 0x13, 0x51, [@multicast1, @remote, @empty, @dev={0xac, 0x14, 0x14, 0xa}]}, @end, @end, @ra={0x94, 0x4, 0x1}]}}}}}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x181e5000) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$rds(r1, &(0x7f0000000b00)={&(0x7f0000000140)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000440)=""/118, 0x76}, {&(0x7f00000004c0)=""/50, 0x32}, {&(0x7f0000000500)=""/123, 0x7b}, {&(0x7f0000000580)=""/158, 0x9e}, {&(0x7f0000000640)=""/254, 0xfe}], 0x5, &(0x7f0000000a80)=[@cswp={0x58, 0x114, 0x7, {{0xd23}, &(0x7f0000000a00)=0x5, &(0x7f0000000a40)=0x4, 0x0, 0x401, 0x7, 0x9, 0x40, 0x3}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x9}], 0x70}, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) getsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000280)) 3.080575077s ago: executing program 5 (id=5631): syz_usb_connect(0x2, 0x2d, &(0x7f0000001100)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX, @ANYRES16, @ANYRES8], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) 2.842507885s ago: executing program 0 (id=5632): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x45, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40}}]}}, 0x0) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0) (async) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0) syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00"], 0x0) (async) syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00"], 0x0) syz_usb_disconnect(r0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_timeval(r5, 0x1, 0x1e, &(0x7f0000000240), &(0x7f0000000280)=0x10) ppoll(0x0, 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={[0x81c6]}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f00000003c0)="8c", 0x1}], 0x1) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040bd28090900000000000109022400cc0000000009040000020300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000440)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000440)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r7, 0x3ba0, &(0x7f0000000500)={0x48, 0xa, 0x0, 0x0, r8}) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0) 1.990588748s ago: executing program 2 (id=5633): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xe, &(0x7f00000039c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000480000002c41000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd3641130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce7400dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f000006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08e774c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d32872c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe94ff010011d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcebc7586186fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d263e8778e6e8ffe4ea50b076446f35eff00006b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd311a40030f9ffce75ffff996a80153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b58fd76e4bc46c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be1557951854c01dbc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e9994ca9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676590bd2047229e0237c1e34641848531712ff09e89fb062a3e66f4fced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfd0e5e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a60a0290bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b239a3646ef55b9f070ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cdcc1f594ecfaff9a79b56f8b38038002d29b3193cea9cd0a0ef4f58fa48f61071f548d411353965615c24c1860fd0dfae0f4cdf8c8f8645a289a79f9b919b674f0325d81eacaa8399324a304885da01733bb7917ec5e52718eb05f9c1ffd69f834150e9100c215968e8fb31c83526e6f66897569e28d01ca6135a2acca398c1415e0f9b58b63ee9dc33608ba7e5c4bdf3f37d8e4f4f424be263d9c2a5204f41e9b0ee01ad4cc0519395b69c310c98d3c8edc7d07b30617f3535634257f5472d9f3263a6f04778a920c12000721bb82f9884780ac294b8bb07ebf6e3f16584e95607e319b2ea9778289c19fb775514246159bbfa9dc0fdf711d3efa316a3323c915a40e6d7c8f8d7daf98824fd0bc955dc9731cc8c7a600d94b8049af764688c7ffdd26a741b03b065ba9c586914d8beb94c8a265ace34172ed003357ddd400557230b2caba17a647a171c2fc73a8c7541c7ffaafba62195fce77382ae962f30d4a377d760040975a44aa73a4e687d06f96f0987b980f6f883534dfc71ace539eeeb08cff54e0e05d5e0563660a3664c67d0eb9cdf4eab93ab4bf1972a2acc5c5d43dc2f2b66d7493c390d042d896a1ad772f6d4c2cf38ba0"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) syz_open_procfs(0x0, &(0x7f00000000c0)='net/udplite\x00') epoll_create1(0x0) r0 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x86) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x55, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x6) 1.884234171s ago: executing program 2 (id=5634): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/54, 0x36}, 0x1}], 0x1, 0x40002063, 0x0) sendmsg$tipc(r1, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1, 0x0, 0x0, 0x1}, 0x4800) 1.787827882s ago: executing program 2 (id=5635): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000500)={0x8000000, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x5, 0x18000000, 0x91db, 0x1, 0x2}}, 0x120) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES16=r0, @ANYRES64=r0, @ANYBLOB="e84c7a4eacbdc500752e5911495baf4c292e90af65ee36507c8c5d120c524d76cfe80696e8debbcf00181bc131503f4e81f44118bad72918e4a61569bf181bba3f22f6044cd9f04271eed81dbf24543d9d5b165800905ddb11dcc0da32a712e3575fec4101808e7c7a", @ANYRES64=r0, @ANYRESHEX=r0, @ANYRES8=r1, @ANYRESOCT=r1, @ANYBLOB="af5312b94314b65808dfdc792523952058eadc0cf336db20c3af8192560298944a54430a4bd5"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"]) 1.656079564s ago: executing program 6 (id=5636): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x8, 0x2ea473, 0x2eb80c}) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x9, 0x0, 0x0) (async) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x5a848}) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x3, 0x400, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x4a, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) (async) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e21, @multicast1}, 0x10) (async, rerun: 64) syz_emit_ethernet(0x3e, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0) (async, rerun: 64) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x40, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000400)='./file3\x00', 0xc1c0, 0x0) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32=r12, @ANYRES8=0x0, @ANYRES16=r12, @ANYRES8=r12], 0x48}}, 0x2044081) 1.485682871s ago: executing program 6 (id=5637): syz_emit_ethernet(0x82, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd66078ffd004c2f01aaff02000000000000000000000000000187e892944f56e9659e000000000010000c21880b000000020c0008000d0086dd0a0088be000000041e0208040100000000000004080022eb2300ea032300813802000030024044bbef894e16080065580000000200"/138], 0x0) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) getsockopt(r0, 0x2, 0x9, &(0x7f00000005c0)=""/82, &(0x7f0000000500)=0x52) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r7 = socket(0x10, 0x3, 0x0) (async) syz_usb_connect(0x4, 0x24, &(0x7f00000001c0)=ANY=[], 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) socket$netlink(0x10, 0x3, 0xf) (async) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r9, 0x40045402, &(0x7f0000000140)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r9, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r9, 0x54a2) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000540)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r8, 0xc0182101, &(0x7f00000000c0)={r10}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000080)={r11, 0x3, r8, 0x5}) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 1.439233038s ago: executing program 7 (id=5638): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) listen(r1, 0x0) creat(0x0, 0x122) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x1f, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x20004001}, 0x9053) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010000304020000000000000000040000", @ANYRES32=0x0, @ANYBLOB="0042000000000000280012800b000100697036746e6c00001800028014000300fc000000000000000000000000000001"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8044) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x7) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x4b, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x5, 0x6, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x40) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 777.83629ms ago: executing program 6 (id=5639): prctl$PR_SET_IO_FLUSHER(0x4e, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x6, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff}, {0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8000, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d0010000210001000000000004000000ff010000000000000000000000000001fc02000000000000000000000000002000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1d0}}, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r3, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x378}}, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1) eventfd(0x5f0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r8, 0x4020aed2, &(0x7f0000000300)={0x0, 0x3000, 0x8}) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000240)='./cgroup/cgroup.procs\x00', 0x0, 0xb070c0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014935d1071040c03e9ba010203010902120001000000000904"], 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x7}, [@CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x34, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x3, 0x6}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x6, 0xff}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x40}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x28, 0x9}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x81, 0x2}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x98, 0x4}}]}}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x7, 0x3, 0x401, 0xe, 0x7]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x90}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48820}, 0x0) 774.821327ms ago: executing program 0 (id=5640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0xa, 0x0, 0xfc, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xdddd8000, 0x18, 0x8, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x3}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {0x1000, 0x80a0000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x1a, 0xa8}, {0xdddd1000, 0xd000, 0x0, 0x66, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x30000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0xeeee8000, 0x3, 0x0, 0x0, 0x10, 0x4, 0xe}, {0x6000}, {0x1, 0xfffe}, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000100)) syz_usb_connect(0x0, 0x107, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b2111d40c71b10905336000000010902f50001000000000904"], 0x0) 45.89977ms ago: executing program 5 (id=5641): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x8000, 0x8058, 0x3, 0x9, {{0xd, 0x4, 0x2, 0x9, 0x34, 0x65, 0x0, 0xf8, 0x29, 0x0, @private=0xa010102, @multicast1, {[@generic={0x44, 0x6, "a3ff2ddb"}, @cipso={0x86, 0x17, 0x3, [{0x0, 0x11, "28b3d54a2bafc9430f75eca2983c55"}]}]}}}}}) unshare(0x6020400) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000300)={'erspan0\x00', r2, 0x8, 0x80, 0x1, 0x5, {{0x18, 0x4, 0x1, 0x29, 0x60, 0x64, 0x0, 0x93, 0x29, 0x0, @loopback, @private=0xa010101, {[@rr={0x7, 0x1b, 0x94, [@broadcast, @empty, @multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @generic={0x89, 0x10, "bcbbaf420bb95823bbbcaefc2d55"}, @generic={0x86, 0x6, "a540c862"}, @rr={0x7, 0x13, 0x51, [@multicast1, @remote, @empty, @dev={0xac, 0x14, 0x14, 0xa}]}, @end, @end, @ra={0x94, 0x4, 0x1}]}}}}}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x181e5000) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$rds(r1, &(0x7f0000000b00)={&(0x7f0000000140)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000440)=""/118, 0x76}, {&(0x7f00000004c0)=""/50, 0x32}, {&(0x7f0000000500)=""/123, 0x7b}, {&(0x7f0000000580)=""/158, 0x9e}, {&(0x7f0000000640)=""/254, 0xfe}], 0x5, &(0x7f0000000a80)=[@cswp={0x58, 0x114, 0x7, {{0xd23}, &(0x7f0000000a00)=0x5, &(0x7f0000000a40)=0x4, 0x0, 0x401, 0x7, 0x9, 0x40, 0x3}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x9}], 0x70}, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000280)) 0s ago: executing program 5 (id=5642): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x20f39, 0x8) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x4) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r4, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019100)={0x0, 0x0, &(0x7f0000019080)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x2c, r6, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000192c0)=[{0x0}, {0x0}], 0x2) r7 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r7, 0x0, 0x0, 0x4000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') unshare(0x28000600) socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000180)={0x2, 0x4e25, @rand_addr=0x64010101}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, 0x0) socket$can_raw(0x1d, 0x3, 0x1) eventfd(0x0) kernel console output (not intermixed with test programs): ity_capable+0x7e/0x2c0 [ 1347.095657][T25608] nfnetlink_rcv+0x2c0/0x27b0 [ 1347.095671][T25608] ? is_bpf_text_address+0x26/0x2b0 [ 1347.095685][T25608] ? is_bpf_text_address+0x292/0x2b0 [ 1347.095695][T25608] ? is_bpf_text_address+0x26/0x2b0 [ 1347.095707][T25608] ? kernel_text_address+0xa5/0xe0 [ 1347.095720][T25608] ? __kernel_text_address+0xd/0x30 [ 1347.095730][T25608] ? unwind_get_return_address+0x4d/0x90 [ 1347.095746][T25608] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1347.095757][T25608] ? arch_stack_walk+0xfb/0x150 [ 1347.095777][T25608] ? __lock_acquire+0x6b5/0x2cf0 [ 1347.095790][T25608] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1347.095804][T25608] ? __pfx_stack_trace_save+0x10/0x10 [ 1347.095819][T25608] ? __lock_acquire+0x6b5/0x2cf0 [ 1347.095835][T25608] ? __lock_acquire+0x6b5/0x2cf0 [ 1347.095850][T25608] ? __netlink_lookup+0xc6/0x8b0 [ 1347.095864][T25608] ? __netlink_lookup+0x7e4/0x8b0 [ 1347.095879][T25608] ? netlink_deliver_tap+0x2e/0x1b0 [ 1347.095892][T25608] ? netlink_deliver_tap+0x2e/0x1b0 [ 1347.095906][T25608] netlink_unicast+0x80f/0x9b0 [ 1347.095926][T25608] ? __pfx_netlink_unicast+0x10/0x10 [ 1347.095941][T25608] ? netlink_sendmsg+0x650/0xb40 [ 1347.095951][T25608] ? skb_put+0x11b/0x210 [ 1347.095966][T25608] netlink_sendmsg+0x813/0xb40 [ 1347.095981][T25608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1347.095993][T25608] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1347.096010][T25608] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1347.096023][T25608] ____sys_sendmsg+0x972/0x9f0 [ 1347.096040][T25608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1347.096057][T25608] ? import_iovec+0x73/0xa0 [ 1347.096071][T25608] ___sys_sendmsg+0x2a5/0x360 [ 1347.096087][T25608] ? __pfx____sys_sendmsg+0x10/0x10 [ 1347.096122][T25608] ? __fget_files+0x2a/0x420 [ 1347.096132][T25608] ? __fget_files+0x3a0/0x420 [ 1347.096146][T25608] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1347.096160][T25608] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1347.096178][T25608] ? __pfx_ksys_write+0x10/0x10 [ 1347.096195][T25608] do_syscall_64+0x14d/0xf80 [ 1347.096209][T25608] ? trace_irq_disable+0x3b/0x150 [ 1347.096218][T25608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.096229][T25608] ? clear_bhb_loop+0x40/0x90 [ 1347.096242][T25608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.096252][T25608] RIP: 0033:0x7f08b919c819 [ 1347.096264][T25608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1347.096273][T25608] RSP: 002b:00007f08b73f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1347.096285][T25608] RAX: ffffffffffffffda RBX: 00007f08b9415fa0 RCX: 00007f08b919c819 [ 1347.096292][T25608] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1347.096299][T25608] RBP: 00007f08b73f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1347.096305][T25608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1347.096311][T25608] R13: 00007f08b9416038 R14: 00007f08b9415fa0 R15: 00007f08b953fa48 [ 1347.096327][T25608] [ 1347.249212][ T5879] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1347.252073][ T43] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1347.435201][ T5879] usb 8-1: config 0 has no interfaces? [ 1347.547671][ T5879] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1347.557062][ T5879] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1347.565119][ T5879] usb 8-1: Manufacturer: syz [ 1347.579104][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 1347.585598][ T5879] usb 8-1: config 0 descriptor?? [ 1347.591470][ T43] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 1347.717945][ T43] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1347.730779][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.738869][ T43] usb 1-1: Product: syz [ 1347.747150][T25618] netlink: 388 bytes leftover after parsing attributes in process `syz.2.5182'. [ 1347.775984][T25616] bond2: option ad_user_port_key: invalid value (62172) [ 1347.783485][ T43] usb 1-1: Manufacturer: syz [ 1347.788278][ T43] usb 1-1: SerialNumber: syz [ 1347.803962][ T43] usb 1-1: config 0 descriptor?? [ 1347.814527][ T43] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1347.823243][ T43] usb 1-1: setting power ON [ 1347.827771][ T43] dvb-usb: bulk message failed: -22 (2/0) [ 1347.842274][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1347.852784][T25616] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 1347.853059][ T43] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1347.869234][ T43] usb 1-1: media controller created [ 1347.882249][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1347.897616][T25616] bond2 (unregistering): Released all slaves [ 1347.916443][ T43] usb 1-1: selecting invalid altsetting 6 [ 1347.922459][ T43] usb 1-1: digital interface selection failed (-22) [ 1347.934095][ T43] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1347.980912][ T5879] tipc: Node number set to 2396244798 [ 1347.984920][ T43] usb 1-1: setting power OFF [ 1348.192108][T25627] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5176'. [ 1348.227187][ T43] dvb-usb: bulk message failed: -22 (2/0) [ 1348.259430][T25627] 1·: renamed from c0· [ 1348.266360][ T43] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1348.280350][ T43] (NULL device *): no alternate interface [ 1348.322772][ T43] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1348.328726][T25627] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 1348.559345][T12085] usb 8-1: USB disconnect, device number 49 [ 1349.237268][T25650] FAULT_INJECTION: forcing a failure. [ 1349.237268][T25650] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.253777][T25650] CPU: 0 UID: 0 PID: 25650 Comm: syz.5.5191 Tainted: G L syzkaller #0 PREEMPT(full) [ 1349.253806][T25650] Tainted: [L]=SOFTLOCKUP [ 1349.253813][T25650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1349.253824][T25650] Call Trace: [ 1349.253831][T25650] [ 1349.253839][T25650] dump_stack_lvl+0xe8/0x150 [ 1349.253869][T25650] should_fail_ex+0x412/0x560 [ 1349.253898][T25650] should_failslab+0xa8/0x100 [ 1349.253924][T25650] __kvmalloc_node_noprof+0x178/0x8a0 [ 1349.253947][T25650] ? hash_ipmac_create+0x3a9/0x1040 [ 1349.253972][T25650] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1349.253997][T25650] hash_ipmac_create+0x3a9/0x1040 [ 1349.254029][T25650] ? __nla_parse+0x40/0x60 [ 1349.254048][T25650] ? __pfx_hash_ipmac_create+0x10/0x10 [ 1349.254073][T25650] ip_set_create+0xae6/0x1a40 [ 1349.254099][T25650] ? ip_set_create+0x4eb/0x1a40 [ 1349.254135][T25650] ? __pfx_ip_set_create+0x10/0x10 [ 1349.254198][T25650] nfnetlink_rcv_msg+0xc00/0x12c0 [ 1349.254223][T25650] ? unwind_get_return_address+0x4d/0x90 [ 1349.254248][T25650] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 1349.254285][T25650] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1349.254348][T25650] netlink_rcv_skb+0x232/0x4b0 [ 1349.254361][T25650] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1349.254377][T25650] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1349.254393][T25650] ? bpf_lsm_capable+0x9/0x20 [ 1349.254408][T25650] ? security_capable+0x7e/0x2c0 [ 1349.254427][T25650] nfnetlink_rcv+0x2c0/0x27b0 [ 1349.254446][T25650] ? __local_bh_enable_ip+0xd0/0x130 [ 1349.254459][T25650] ? lockdep_hardirqs_on+0x7a/0x110 [ 1349.254474][T25650] ? __dev_queue_xmit+0x277/0x3890 [ 1349.254488][T25650] ? __local_bh_enable_ip+0xd0/0x130 [ 1349.254499][T25650] ? __dev_queue_xmit+0x277/0x3890 [ 1349.254513][T25650] ? __dev_queue_xmit+0x1e78/0x3890 [ 1349.254525][T25650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.254539][T25650] ? __dev_queue_xmit+0x277/0x3890 [ 1349.254555][T25650] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1349.254573][T25650] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1349.254590][T25650] ? ref_tracker_free+0x693/0x840 [ 1349.254600][T25650] ? __copy_skb_header+0xa3/0x4a0 [ 1349.254614][T25650] ? __pfx_ref_tracker_free+0x10/0x10 [ 1349.254624][T25650] ? __skb_clone+0x63/0x7a0 [ 1349.254639][T25650] ? __skb_clone+0x483/0x7a0 [ 1349.254655][T25650] ? skb_clone+0x246/0x3a0 [ 1349.254669][T25650] ? __netlink_deliver_tap+0x807/0x850 [ 1349.254680][T25650] ? netlink_deliver_tap+0x2e/0x1b0 [ 1349.254693][T25650] ? netlink_deliver_tap+0x2e/0x1b0 [ 1349.254708][T25650] netlink_unicast+0x80f/0x9b0 [ 1349.254726][T25650] ? __pfx_netlink_unicast+0x10/0x10 [ 1349.254742][T25650] ? netlink_sendmsg+0x650/0xb40 [ 1349.254752][T25650] ? skb_put+0x11b/0x210 [ 1349.254765][T25650] netlink_sendmsg+0x813/0xb40 [ 1349.254780][T25650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1349.254793][T25650] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1349.254809][T25650] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1349.254827][T25650] ____sys_sendmsg+0x972/0x9f0 [ 1349.254845][T25650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1349.254862][T25650] ? import_iovec+0x73/0xa0 [ 1349.254876][T25650] ___sys_sendmsg+0x2a5/0x360 [ 1349.254894][T25650] ? __pfx____sys_sendmsg+0x10/0x10 [ 1349.254925][T25650] ? __fget_files+0x2a/0x420 [ 1349.254934][T25650] ? __fget_files+0x3a0/0x420 [ 1349.254949][T25650] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1349.254963][T25650] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1349.254980][T25650] ? __pfx_ksys_write+0x10/0x10 [ 1349.254998][T25650] do_syscall_64+0x14d/0xf80 [ 1349.255012][T25650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.255022][T25650] ? clear_bhb_loop+0x40/0x90 [ 1349.255035][T25650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.255046][T25650] RIP: 0033:0x7fc7f079c819 [ 1349.255057][T25650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1349.255065][T25650] RSP: 002b:00007fc7f15c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1349.255077][T25650] RAX: ffffffffffffffda RBX: 00007fc7f0a15fa0 RCX: 00007fc7f079c819 [ 1349.255084][T25650] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1349.255090][T25650] RBP: 00007fc7f15c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1349.255096][T25650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1349.255103][T25650] R13: 00007fc7f0a16038 R14: 00007fc7f0a15fa0 R15: 00007fc7f0b3fa48 [ 1349.255118][T25650] [ 1349.829020][T12085] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1349.966236][ T5879] usb 1-1: USB disconnect, device number 76 [ 1349.988987][T12085] usb 3-1: Using ep0 maxpacket: 8 [ 1349.995557][T12085] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1350.004261][T12085] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1350.013163][T12085] usb 3-1: string descriptor 0 read error: -22 [ 1350.019655][T12085] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1350.028683][T12085] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1350.043822][T12085] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1350.053220][T12085] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1350.063654][T12085] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1350.070873][T12085] usb 3-1: media controller created [ 1350.083391][T12085] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1350.207560][T25664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5195'. [ 1350.320812][T25668] fuse: Bad value for 'fd' [ 1350.869663][T25681] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5202'. [ 1350.951979][ T5879] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1351.111373][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1351.123120][T25685] FAULT_INJECTION: forcing a failure. [ 1351.123120][T25685] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.140159][T12085] zl10353_read_register: readreg error (reg=127, ret==0) [ 1351.150935][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 12336, setting to 64 [ 1351.176488][ T5879] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1351.203985][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.213355][T25685] CPU: 0 UID: 0 PID: 25685 Comm: syz.5.5204 Tainted: G L syzkaller #0 PREEMPT(full) [ 1351.213374][T25685] Tainted: [L]=SOFTLOCKUP [ 1351.213378][T25685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1351.213384][T25685] Call Trace: [ 1351.213389][T25685] [ 1351.213394][T25685] dump_stack_lvl+0xe8/0x150 [ 1351.213414][T25685] should_fail_ex+0x412/0x560 [ 1351.213433][T25685] should_failslab+0xa8/0x100 [ 1351.213449][T25685] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1351.213461][T25685] ? __alloc_skb+0x186/0x7d0 [ 1351.213473][T25685] ? __alloc_skb+0x1d0/0x7d0 [ 1351.213483][T25685] ? __local_bh_enable_ip+0xd0/0x130 [ 1351.213499][T25685] __alloc_skb+0x1d0/0x7d0 [ 1351.213511][T25685] ? netlink_ack_tlv_len+0x6c/0x210 [ 1351.213523][T25685] netlink_ack+0x146/0xa50 [ 1351.213541][T25685] netlink_rcv_skb+0x2b6/0x4b0 [ 1351.213552][T25685] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1351.213569][T25685] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1351.213585][T25685] ? bpf_lsm_capable+0x9/0x20 [ 1351.213600][T25685] ? security_capable+0x7e/0x2c0 [ 1351.213621][T25685] nfnetlink_rcv+0x2c0/0x27b0 [ 1351.213651][T25685] ? __local_bh_enable_ip+0xd0/0x130 [ 1351.213673][T25685] ? lockdep_hardirqs_on+0x7a/0x110 [ 1351.213687][T25685] ? __dev_queue_xmit+0x277/0x3890 [ 1351.213701][T25685] ? __local_bh_enable_ip+0xd0/0x130 [ 1351.213713][T25685] ? __dev_queue_xmit+0x277/0x3890 [ 1351.213725][T25685] ? __dev_queue_xmit+0x1e78/0x3890 [ 1351.213738][T25685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.213752][T25685] ? __dev_queue_xmit+0x277/0x3890 [ 1351.213767][T25685] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1351.213785][T25685] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1351.213808][T25685] ? ref_tracker_free+0x693/0x840 [ 1351.213818][T25685] ? __copy_skb_header+0xa3/0x4a0 [ 1351.213831][T25685] ? __pfx_ref_tracker_free+0x10/0x10 [ 1351.213841][T25685] ? __skb_clone+0x63/0x7a0 [ 1351.213856][T25685] ? __skb_clone+0x483/0x7a0 [ 1351.213871][T25685] ? skb_clone+0x246/0x3a0 [ 1351.213886][T25685] ? __netlink_deliver_tap+0x807/0x850 [ 1351.213897][T25685] ? netlink_deliver_tap+0x2e/0x1b0 [ 1351.213910][T25685] ? netlink_deliver_tap+0x2e/0x1b0 [ 1351.213924][T25685] netlink_unicast+0x80f/0x9b0 [ 1351.213943][T25685] ? __pfx_netlink_unicast+0x10/0x10 [ 1351.213959][T25685] ? netlink_sendmsg+0x650/0xb40 [ 1351.213969][T25685] ? skb_put+0x11b/0x210 [ 1351.213982][T25685] netlink_sendmsg+0x813/0xb40 [ 1351.213997][T25685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1351.214009][T25685] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1351.214025][T25685] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1351.214039][T25685] ____sys_sendmsg+0x972/0x9f0 [ 1351.214058][T25685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1351.214075][T25685] ? import_iovec+0x73/0xa0 [ 1351.214089][T25685] ___sys_sendmsg+0x2a5/0x360 [ 1351.214104][T25685] ? __pfx____sys_sendmsg+0x10/0x10 [ 1351.214132][T25685] ? __fget_files+0x2a/0x420 [ 1351.214141][T25685] ? __fget_files+0x3a0/0x420 [ 1351.214155][T25685] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1351.214169][T25685] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1351.214186][T25685] ? __pfx_ksys_write+0x10/0x10 [ 1351.214202][T25685] do_syscall_64+0x14d/0xf80 [ 1351.214215][T25685] ? trace_irq_disable+0x3b/0x150 [ 1351.214224][T25685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.214234][T25685] ? clear_bhb_loop+0x40/0x90 [ 1351.214247][T25685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.214257][T25685] RIP: 0033:0x7fc7f079c819 [ 1351.214268][T25685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1351.214277][T25685] RSP: 002b:00007fc7f15c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1351.214289][T25685] RAX: ffffffffffffffda RBX: 00007fc7f0a15fa0 RCX: 00007fc7f079c819 [ 1351.214296][T25685] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1351.214302][T25685] RBP: 00007fc7f15c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1351.214308][T25685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1351.214315][T25685] R13: 00007fc7f0a16038 R14: 00007fc7f0a15fa0 R15: 00007fc7f0b3fa48 [ 1351.214341][T25685] [ 1351.628252][T12085] usb 3-1: USB disconnect, device number 86 [ 1351.888179][ T5879] usb 1-1: config 0 descriptor?? [ 1352.026280][T25692] netlink: 'syz.7.5205': attribute type 39 has an invalid length. [ 1352.128240][T25674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1352.154491][ T5879] ath6kl: Failed to submit usb control message: -71 [ 1352.169912][ T5879] ath6kl: unable to send the bmi data to the device: -71 [ 1352.180845][ T5879] ath6kl: Unable to send get target info: -71 [ 1352.210141][ T5879] ath6kl: Failed to init ath6kl core: -71 [ 1352.217642][ T5879] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1352.236830][ T5879] usb 1-1: USB disconnect, device number 77 [ 1352.261514][T25696] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5207'. [ 1352.292517][T25696] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5207'. [ 1352.476341][T25706] program syz.7.5211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1352.615151][T25713] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5212'. [ 1352.809349][ T5879] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1352.830991][T25720] 8021q: VLANs not supported on nlmon0 [ 1352.907465][T25725] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5217'. [ 1352.916575][T25725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5217'. [ 1352.959044][ T5879] usb 8-1: device descriptor read/64, error -71 [ 1353.209141][ T5879] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1353.350233][ T5879] usb 8-1: device descriptor read/64, error -71 [ 1353.460019][ T5879] usb usb8-port1: attempt power cycle [ 1353.692313][T25737] vivid-004: disconnect [ 1353.708838][T25736] vivid-004: reconnect [ 1353.829216][ T5879] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1353.891001][ T5879] usb 8-1: device descriptor read/8, error -71 [ 1354.139140][ T43] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1354.180547][ T5879] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1354.250603][ T5879] usb 8-1: device descriptor read/8, error -71 [ 1354.299242][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 1354.339139][T19128] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1354.351822][ T43] usb 3-1: config 6 has an invalid interface number: 46 but max is 1 [ 1354.366985][ T43] usb 3-1: config 6 has no interface number 1 [ 1354.373833][ T5879] usb usb8-port1: unable to enumerate USB device [ 1354.374672][ T43] usb 3-1: config 6 interface 46 altsetting 4 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1354.391721][ T43] usb 3-1: config 6 interface 46 altsetting 4 endpoint 0xF has invalid wMaxPacketSize 0 [ 1354.401859][ T43] usb 3-1: config 6 interface 46 altsetting 4 bulk endpoint 0xF has invalid maxpacket 0 [ 1354.419681][ T43] usb 3-1: config 6 interface 0 altsetting 140 endpoint 0x6 has invalid maxpacket 80, setting to 64 [ 1354.431341][ T43] usb 3-1: config 6 interface 0 altsetting 140 has a duplicate endpoint with address 0xF, skipping [ 1354.449057][ T43] usb 3-1: config 6 interface 0 altsetting 140 has a duplicate endpoint with address 0x2, skipping [ 1354.462990][ T43] usb 3-1: config 6 interface 46 has no altsetting 0 [ 1354.469866][ T43] usb 3-1: config 6 interface 0 has no altsetting 0 [ 1354.484000][T24727] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1354.486202][ T43] usb 3-1: New USB device found, idVendor=2013, idProduct=025f, bcdDevice=47.f3 [ 1354.509015][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.517473][ T43] usb 3-1: Product: syz [ 1354.532325][ T43] usb 3-1: Manufacturer: syz [ 1354.536993][ T43] usb 3-1: SerialNumber: syz [ 1354.776917][T24727] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1354.789221][T24727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.802552][T24727] usb 6-1: Product: syz [ 1354.808898][T24727] usb 6-1: Manufacturer: syz [ 1354.818206][T24727] usb 6-1: SerialNumber: syz [ 1354.831090][T24727] usb 6-1: config 0 descriptor?? [ 1356.723627][T19128] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1356.732102][T19128] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1356.741281][T19128] usb 1-1: can't read configurations, error -71 [ 1357.226046][ T5872] usb 6-1: USB disconnect, device number 37 [ 1357.455048][ T43] usb 3-1: USB disconnect, device number 87 [ 1357.901481][T24727] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1358.009530][ T43] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1358.059027][T24727] usb 6-1: Using ep0 maxpacket: 8 [ 1358.070040][T24727] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1358.078480][T24727] usb 6-1: config 179 has no interface number 0 [ 1358.084975][T24727] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1358.096616][T24727] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1358.108114][T24727] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1358.146628][ T43] usb 3-1: device descriptor read/64, error -71 [ 1358.187004][T24727] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1358.198970][T24727] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1358.212693][T24727] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1358.229520][T24727] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.260111][T25781] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1358.272633][T25787] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5234'. [ 1358.325629][T25787] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5234'. [ 1358.453443][ T43] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1358.599190][T19128] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1358.608515][ T43] usb 3-1: device descriptor read/64, error -71 [ 1358.716233][ T5923] usb 6-1: USB disconnect, device number 38 [ 1358.716233][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1358.716357][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1358.729822][ T43] usb usb3-port1: attempt power cycle [ 1358.769357][T19128] usb 8-1: Using ep0 maxpacket: 16 [ 1358.782026][T19128] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1358.800447][T19128] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.809294][T19128] usb 8-1: Product: syz [ 1358.813950][T19128] usb 8-1: Manufacturer: syz [ 1358.821653][T19128] usb 8-1: SerialNumber: syz [ 1358.862342][T19128] usb 8-1: config 0 descriptor?? [ 1359.072039][ T5923] usb 8-1: USB disconnect, device number 54 [ 1359.080728][ T5872] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1359.109570][ T43] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1359.129729][ T43] usb 3-1: device descriptor read/8, error -71 [ 1359.239025][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 1359.246144][ T5872] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1359.255694][ T5872] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1359.265967][ T5872] usb 1-1: string descriptor 0 read error: -22 [ 1359.272480][ T5872] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1359.282362][ T5872] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1359.304121][ T5872] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1359.325949][ T5872] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1359.342796][ T5872] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1359.350192][ T5872] usb 1-1: media controller created [ 1359.363907][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1359.373029][ T43] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1359.387669][T25797] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5237'. [ 1359.404124][ T43] usb 3-1: device descriptor read/8, error -71 [ 1359.496632][ T5872] zl10353_read_register: readreg error (reg=127, ret==0) [ 1359.519240][ T43] usb usb3-port1: unable to enumerate USB device [ 1359.543854][ T5872] usb 1-1: USB disconnect, device number 80 [ 1360.280321][ T5872] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1360.439008][ T5872] usb 1-1: device descriptor read/64, error -71 [ 1360.741979][T25820] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5244'. [ 1360.809434][ T5872] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1360.961387][T25829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5247'. [ 1360.989060][ T5872] usb 1-1: device descriptor read/64, error -71 [ 1361.087897][T25833] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5248'. [ 1361.120128][ T5872] usb usb1-port1: attempt power cycle [ 1361.325747][T24727] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1361.489036][T24727] usb 8-1: Using ep0 maxpacket: 8 [ 1361.502114][T24727] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1361.522549][T24727] usb 8-1: config 4 interface 0 has no altsetting 0 [ 1361.545673][T24727] usb 8-1: string descriptor 0 read error: -22 [ 1361.556047][T24727] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1361.569829][T24727] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1361.593388][T24727] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1361.609103][ T5872] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1361.616290][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.624662][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.647668][T24727] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1361.660591][ T5872] usb 1-1: device descriptor read/8, error -71 [ 1361.687295][T24727] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1361.705373][T24727] usb 8-1: media controller created [ 1361.730412][T24727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1361.788613][T24727] zl10353_read_register: readreg error (reg=127, ret==0) [ 1361.858247][T24727] usb 8-1: USB disconnect, device number 55 [ 1361.939041][ T5872] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1361.969622][ T5872] usb 1-1: device descriptor read/8, error -71 [ 1362.079688][ T5872] usb usb1-port1: unable to enumerate USB device [ 1362.699071][ T5879] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1362.789385][T24727] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1362.859044][ T5879] usb 8-1: Using ep0 maxpacket: 32 [ 1362.866344][ T5879] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1362.876365][ T5879] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1362.886722][ T5879] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1362.897861][ T5879] usb 8-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 1362.907314][ T5879] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.916139][ T5879] usb 8-1: Product: syz [ 1362.920775][ T5879] usb 8-1: Manufacturer: syz [ 1362.925379][ T5879] usb 8-1: SerialNumber: syz [ 1362.932133][ T5879] usb 8-1: config 0 descriptor?? [ 1362.941155][T24727] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1362.952797][T24727] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1362.962702][T24727] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1362.971839][T24727] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.982269][T24727] usb 6-1: config 0 descriptor?? [ 1363.143246][ T5872] usb 8-1: USB disconnect, device number 56 [ 1363.233132][T25860] syzkaller0: entered promiscuous mode [ 1363.239087][T25860] syzkaller0: entered allmulticast mode [ 1363.599030][T24727] usbhid 6-1:0.0: can't add hid device: -71 [ 1363.607447][T24727] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1363.625820][T24727] usb 6-1: USB disconnect, device number 39 [ 1363.749035][T25862] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5260'. [ 1363.832783][T25864] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5261'. [ 1364.123119][T25871] netlink: 'syz.0.5264': attribute type 1 has an invalid length. [ 1364.139130][T25871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1364.201479][T25873] input: syz0 as /devices/virtual/input/input98 [ 1364.299201][T24727] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1364.465037][T24727] usb 8-1: config 0 has no interfaces? [ 1364.494458][T24727] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1364.514724][T24727] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1364.549542][T24727] usb 8-1: Manufacturer: syz [ 1364.563083][T25889] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5271'. [ 1364.573159][T24727] usb 8-1: config 0 descriptor?? [ 1364.959170][T24727] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1364.979232][T12085] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1365.005612][T25897] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5274'. [ 1365.149010][T24727] usb 6-1: Using ep0 maxpacket: 32 [ 1365.164268][T24727] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1365.184503][T24727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.193479][T24727] usb 6-1: Product: syz [ 1365.199734][T24727] usb 6-1: Manufacturer: syz [ 1365.208906][T24727] usb 6-1: SerialNumber: syz [ 1365.227942][T24727] usb 6-1: config 0 descriptor?? [ 1365.348878][ T5872] usb 8-1: USB disconnect, device number 57 [ 1365.752936][T24727] airspy 6-1:0.0: Board ID: 00 [ 1365.759628][T24727] airspy 6-1:0.0: Firmware version: [ 1365.879084][ T5923] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1366.089396][ T5923] usb 8-1: Using ep0 maxpacket: 32 [ 1366.097008][ T5923] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1366.106771][ T5923] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1366.121863][ T5923] usb 8-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1366.132669][ T5923] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.140784][ T5923] usb 8-1: Product: syz [ 1366.145067][ T5923] usb 8-1: Manufacturer:  [ 1366.149860][ T5923] usb 8-1: SerialNumber: syz [ 1366.378232][ T5923] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1366.385471][ T5923] usb 8-1: MIDIStreaming interface descriptor not found [ 1366.486732][ T5923] usb 8-1: USB disconnect, device number 58 [ 1366.576655][T13638] udevd[13638]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1366.870212][T24727] airspy 6-1:0.0: usb_control_msg() failed -71 request 10 [ 1366.893110][T24727] airspy 6-1:0.0: Registered as swradio24 [ 1366.912421][T24727] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1366.944298][T24727] usb 6-1: USB disconnect, device number 40 [ 1367.289101][ T5923] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1367.444706][ T5923] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1367.457283][ T5923] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1367.468146][ T5923] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1367.510668][ T5923] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1367.532963][ T5923] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.556976][ T5923] usb 8-1: config 0 descriptor?? [ 1367.757335][T12085] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1367.766930][T12085] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1367.810163][T12085] usb 1-1: can't read configurations, error -71 [ 1367.947824][T25923] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1367.976401][ T5923] plantronics 0003:047F:FFFF.004F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1368.311720][T25935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5285'. [ 1368.326907][ T29] audit: type=1326 audit(1775581148.497:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25926 comm="syz.6.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3592b9c819 code=0x7ffc0000 [ 1368.339020][T25936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.376180][T25936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.385484][ T29] audit: type=1326 audit(1775581148.497:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25926 comm="syz.6.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3592b9c819 code=0x7ffc0000 [ 1368.455835][ T29] audit: type=1326 audit(1775581148.497:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25926 comm="syz.6.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3592b9c819 code=0x7ffc0000 [ 1368.486726][T25936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.537216][ T29] audit: type=1326 audit(1775581148.497:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25926 comm="syz.6.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3592b9c819 code=0x7ffc0000 [ 1368.570067][ T5923] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1368.578847][T25936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.619036][ T29] audit: type=1326 audit(1775581148.497:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25926 comm="syz.6.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3592b9c819 code=0x7ffc0000 [ 1368.685191][ T29] audit: type=1326 audit(1775581148.497:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25926 comm="syz.6.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3592b9c819 code=0x7ffc0000 [ 1368.745778][ T29] audit: type=1326 audit(1775581148.497:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25926 comm="syz.6.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3592b9c819 code=0x7ffc0000 [ 1368.776014][ T5923] usb 3-1: config 0 has no interfaces? [ 1368.796580][ T5923] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1368.834671][ T5923] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1368.834689][ T29] audit: type=1326 audit(1775581148.497:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25926 comm="syz.6.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3592b9c819 code=0x7ffc0000 [ 1368.834727][ T29] audit: type=1326 audit(1775581148.497:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25926 comm="syz.6.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3592b9c819 code=0x7ffc0000 [ 1368.887961][T12085] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1368.924130][ T29] audit: type=1326 audit(1775581148.497:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25926 comm="syz.6.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3592b9c819 code=0x7ffc0000 [ 1368.948725][ T5923] usb 3-1: Manufacturer: syz [ 1368.968707][ T5923] usb 3-1: config 0 descriptor?? [ 1369.059022][T12085] usb 1-1: Using ep0 maxpacket: 32 [ 1369.066854][T12085] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1369.075373][T12085] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.086601][T12085] usb 1-1: config 0 has no interface number 0 [ 1369.095404][T12085] usb 1-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1369.111694][T12085] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1369.123445][T12085] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1369.134741][T12085] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.149446][T12085] usb 1-1: Product: syz [ 1369.154764][T12085] usb 1-1: Manufacturer: syz [ 1369.164684][T12085] usb 1-1: SerialNumber: syz [ 1369.181988][T12085] usb 1-1: config 0 descriptor?? [ 1369.207384][T12085] f81534 1-1:0.12: required endpoints missing [ 1370.074776][T24727] usb 8-1: USB disconnect, device number 59 [ 1370.088186][ T13] wlan0: Trigger new scan to find an IBSS to join [ 1370.212389][ T5879] usb 3-1: USB disconnect, device number 92 [ 1370.345710][T25962] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5295'. [ 1370.796872][T25981] tipc: Enabled bearer , priority 0 [ 1370.810871][T25981] syzkaller0: entered promiscuous mode [ 1370.816620][T25981] syzkaller0: entered allmulticast mode [ 1370.819711][T25983] Invalid argument reading file caps for ./file0 [ 1370.844306][T25981] tipc: Resetting bearer [ 1370.909268][ T5923] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1371.060787][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1371.073251][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1371.084691][ T5923] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1371.096296][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.107444][ T5923] usb 6-1: config 0 descriptor?? [ 1371.302858][T25992] TCP: TCP_TX_DELAY enabled [ 1371.318610][T25991] usb usb8: usbfs: process 25991 (syz.6.5302) did not claim interface 0 before use [ 1371.578100][ T5923] usbhid 6-1:0.0: can't add hid device: -71 [ 1371.595165][ T5923] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1371.628309][ T5923] usb 6-1: USB disconnect, device number 41 [ 1371.919282][T25966] tipc: Resetting bearer [ 1371.959790][T25966] tipc: Disabling bearer [ 1372.019400][ T5923] usb 1-1: USB disconnect, device number 86 [ 1372.629118][ T43] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1372.789008][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 1372.802255][ T43] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1372.833062][ T43] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1372.846447][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.856383][ T43] usb 3-1: Product: syz [ 1372.864442][ T43] usb 3-1: Manufacturer: syz [ 1372.878249][ T43] usb 3-1: SerialNumber: syz [ 1372.891076][T26035] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1372.939108][ T43] usb 3-1: config 0 descriptor?? [ 1372.950037][ T43] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1372.958080][ T43] usb 3-1: setting power ON [ 1372.963868][ T43] dvb-usb: bulk message failed: -22 (2/0) [ 1372.975603][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1373.034798][ T43] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1373.051882][ T43] usb 3-1: media controller created [ 1373.114024][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1373.348587][T26040] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5311'. [ 1373.906069][T26040] 0·: renamed from c1· [ 1373.911191][ T43] usb 3-1: selecting invalid altsetting 6 [ 1373.916956][ T43] usb 3-1: digital interface selection failed (-22) [ 1373.923813][ T43] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1373.934629][ T43] usb 3-1: setting power OFF [ 1373.939763][ T43] dvb-usb: bulk message failed: -22 (2/0) [ 1373.973662][ T43] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1373.995674][ T43] (NULL device *): no alternate interface [ 1374.119986][T26040] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1374.173377][ T43] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1374.549043][T24727] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1374.699154][T24727] usb 1-1: Using ep0 maxpacket: 32 [ 1374.707232][T24727] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1374.716322][T24727] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.726724][T24727] usb 1-1: config 0 has no interface number 0 [ 1374.732919][T24727] usb 1-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1374.745990][T24727] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1374.754519][T24727] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1374.764115][T24727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.772275][ T5879] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1374.780094][T24727] usb 1-1: Product: syz [ 1374.784796][T24727] usb 1-1: Manufacturer: syz [ 1374.789926][T24727] usb 1-1: SerialNumber: syz [ 1374.796976][T24727] usb 1-1: config 0 descriptor?? [ 1374.804111][T24727] f81534 1-1:0.12: required endpoints missing [ 1374.820869][T18498] wlan0: Trigger new scan to find an IBSS to join [ 1374.939236][ T5879] usb 6-1: Using ep0 maxpacket: 8 [ 1374.946735][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1374.958038][ T5879] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1374.967211][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.977161][ T5879] usb 6-1: config 0 descriptor?? [ 1375.185795][ T5879] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1375.360687][ T5879] usb 3-1: USB disconnect, device number 93 [ 1375.609044][T24727] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 1375.785001][T18498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1375.835694][T24727] usb 8-1: Using ep0 maxpacket: 8 [ 1375.881903][T24727] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1375.932876][T24727] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1375.952171][T24727] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1375.972823][T24727] usb 8-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 1375.987845][T24727] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.008642][T24727] usb 8-1: config 0 descriptor?? [ 1376.076016][T26063] tipc: Enabled bearer , priority 0 [ 1376.100171][T26063] syzkaller0: entered promiscuous mode [ 1376.107259][T26063] syzkaller0: entered allmulticast mode [ 1376.144667][ T5879] usb 6-1: USB disconnect, device number 42 [ 1376.189009][T26063] tipc: Resetting bearer [ 1376.233259][T26051] syzkaller0: entered promiscuous mode [ 1376.270027][T26051] syzkaller0: entered allmulticast mode [ 1376.614294][T24727] kye 0003:0458:4018.0050: unbalanced delimiter at end of report description [ 1376.627210][T24727] kye 0003:0458:4018.0050: parse failed [ 1376.657854][T24727] kye 0003:0458:4018.0050: probe with driver kye failed with error -22 [ 1376.904822][T24727] usb 8-1: USB disconnect, device number 60 [ 1377.237591][T26063] tipc: Resetting bearer [ 1377.343035][T26063] tipc: Disabling bearer [ 1377.422976][T24727] usb 1-1: USB disconnect, device number 87 [ 1377.911157][T26094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5330'. [ 1377.920180][T24727] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1378.099275][T24727] usb 8-1: Using ep0 maxpacket: 32 [ 1378.108882][T24727] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1378.128521][T24727] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1378.151456][T24727] usb 8-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1378.168999][T24727] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.187657][T24727] usb 8-1: Product: syz [ 1378.284449][T24727] usb 8-1: Manufacturer:  [ 1378.299758][T24727] usb 8-1: SerialNumber: syz [ 1378.937470][T24727] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1378.954698][T24727] usb 8-1: MIDIStreaming interface descriptor not found [ 1379.222282][T26107] bond1: option ad_user_port_key: invalid value (2217) [ 1379.259914][T26107] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 1379.272219][T24727] usb 8-1: USB disconnect, device number 61 [ 1379.310736][T26108] netlink: 388 bytes leftover after parsing attributes in process `syz.5.5334'. [ 1379.407149][T26107] bond1 (unregistering): Released all slaves [ 1379.431494][T20284] udevd[20284]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1379.989452][ T55] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 1380.136380][T26140] netlink: 'syz.0.5345': attribute type 1 has an invalid length. [ 1380.151973][ T55] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1380.161263][ T55] usb 6-1: not running at top speed; connect to a high speed hub [ 1380.179823][ T55] usb 6-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 1380.189348][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.197438][ T55] usb 6-1: Product: syz [ 1380.202487][ T55] usb 6-1: Manufacturer: syz [ 1380.208271][ T55] usb 6-1: SerialNumber: syz [ 1380.279068][T24727] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1380.432373][T24727] usb 3-1: Using ep0 maxpacket: 16 [ 1380.440485][T24727] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 1380.448785][T24727] usb 3-1: config 0 has no interface number 0 [ 1380.455235][T24727] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1380.466964][T24727] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1380.477008][T24727] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1380.486462][T24727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.500788][T24727] usb 3-1: config 0 descriptor?? [ 1380.638311][ T55] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1380.707103][ T55] usb 6-1: MIDIStreaming interface descriptor not found [ 1380.839684][ T55] usb 6-1: USB disconnect, device number 43 [ 1380.927410][T24727] hid (null): bogus close delimiter [ 1380.934438][T24727] hid (null): unknown global tag 0xe5 [ 1381.143196][ T5923] usb 3-1: USB disconnect, device number 94 [ 1381.459031][T24727] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1381.610794][T24727] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1381.639265][T24727] usb 6-1: config 1 has an invalid descriptor of length 109, skipping remainder of the config [ 1381.664023][T24727] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1381.673138][ T5923] usb 1-1: new low-speed USB device number 88 using dummy_hcd [ 1381.682958][T24727] usb 6-1: config 1 has no interface number 1 [ 1381.708982][T24727] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1381.722451][T24727] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1381.755009][T24727] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1381.767451][T24727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.780987][T24727] usb 6-1: Product: syz [ 1381.787803][T24727] usb 6-1: Manufacturer: syz [ 1381.793047][T24727] usb 6-1: SerialNumber: syz [ 1381.819512][ T5923] usb 1-1: Invalid ep0 maxpacket: 16 [ 1382.039088][ T5923] usb 1-1: new low-speed USB device number 89 using dummy_hcd [ 1382.041933][T24727] usb 6-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 1382.063123][T24727] usb 6-1: MIDIStreaming interface descriptor not found [ 1382.200507][ T5923] usb 1-1: Invalid ep0 maxpacket: 16 [ 1382.221455][ T5923] usb usb1-port1: attempt power cycle [ 1382.223681][T24727] usb 6-1: USB disconnect, device number 44 [ 1382.609035][ T5923] usb 1-1: new low-speed USB device number 90 using dummy_hcd [ 1382.652846][ T5923] usb 1-1: Invalid ep0 maxpacket: 16 [ 1382.850768][ T5923] usb 1-1: new low-speed USB device number 91 using dummy_hcd [ 1382.880495][ T5923] usb 1-1: Invalid ep0 maxpacket: 16 [ 1382.906442][ T5923] usb usb1-port1: unable to enumerate USB device [ 1382.979186][T24727] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1382.987917][T26191] netlink: 388 bytes leftover after parsing attributes in process `syz.2.5359'. [ 1383.042280][T26189] bond2: option ad_user_port_key: invalid value (48714) [ 1383.052340][T26189] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 1383.082298][T26189] bond2 (unregistering): Released all slaves [ 1383.151006][T24727] usb 6-1: Using ep0 maxpacket: 8 [ 1383.159901][T24727] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 1383.190896][T24727] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1383.215071][T24727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.296846][T12085] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 1383.328620][T24727] usb 6-1: Product: syz [ 1383.333352][T24727] usb 6-1: Manufacturer: syz [ 1383.338147][T24727] usb 6-1: SerialNumber: syz [ 1383.380702][T24727] usb 6-1: config 0 descriptor?? [ 1383.400182][T24727] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1383.408692][T24727] usb 6-1: setting power ON [ 1383.414379][T24727] dvb-usb: bulk message failed: -22 (2/0) [ 1383.426803][T24727] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1383.453792][T24727] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1383.462677][T12085] usb 8-1: Using ep0 maxpacket: 16 [ 1383.468045][T24727] usb 6-1: media controller created [ 1383.476157][T12085] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1383.488134][T12085] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1383.510775][T12085] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1383.520125][T12085] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.528151][T12085] usb 8-1: Product: syz [ 1383.560811][T24727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1383.569355][T12085] usb 8-1: Manufacturer: syz [ 1383.573989][T12085] usb 8-1: SerialNumber: syz [ 1383.644452][T24727] usb 6-1: selecting invalid altsetting 6 [ 1383.691543][T24727] usb 6-1: digital interface selection failed (-22) [ 1383.700826][T24727] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1383.710903][T24727] usb 6-1: setting power OFF [ 1383.711162][T26202] fuse: Bad value for 'user_id' [ 1383.715583][T24727] dvb-usb: bulk message failed: -22 (2/0) [ 1383.727112][T26204] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5358'. [ 1383.739847][T26204] 0·: renamed from hsr_slave_1 (while UP) [ 1383.746713][T24727] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1383.746741][T26202] fuse: Bad value for 'user_id' [ 1383.774667][T26204] 0·: entered allmulticast mode [ 1383.786241][T24727] (NULL device *): no alternate interface [ 1383.786759][T26204] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1383.811736][T26194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.820629][T26194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.830340][T26193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.839900][T26193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.884930][T12085] cdc_ncm 8-1:1.0: bind() failure [ 1383.897988][T12085] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1383.911447][T12085] cdc_ncm 8-1:1.1: bind() failure [ 1383.930825][T12085] usb 8-1: USB disconnect, device number 62 [ 1383.937798][T24727] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1384.261087][T26217] 8021q: VLANs not supported on caif0 [ 1384.273036][T26216] tipc: Failed to remove unknown binding: 66,1,1/0:1958562148/1958562150 [ 1384.284754][T26216] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5364'. [ 1384.293966][T26216] netlink: 260 bytes leftover after parsing attributes in process `syz.6.5364'. [ 1385.326360][T26239] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5372'. [ 1385.339469][T24727] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 1385.504987][T24727] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1385.515755][T24727] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1385.546455][T24727] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1385.584685][T24727] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1385.596213][T24727] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1385.605478][T24727] usb 3-1: Product: syz [ 1385.610727][T24727] usb 3-1: Manufacturer: syz [ 1385.615544][T24727] usb 3-1: SerialNumber: syz [ 1385.636155][T24727] usb 3-1: config 0 descriptor?? [ 1385.669866][T24727] imon_raw 3-1:0.0: IR endpoint missing [ 1385.726971][T24727] usb 6-1: USB disconnect, device number 45 [ 1385.745536][T26254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.765577][T26254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.775438][T26242] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.5374'. [ 1385.842865][T26248] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5374'. [ 1385.859769][T26236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.868564][T26236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.883558][T12085] usb 3-1: USB disconnect, device number 95 [ 1386.159086][T24727] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1386.313598][T24727] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1386.332528][T24727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.341376][T24727] usb 6-1: Product: syz [ 1386.345914][T24727] usb 6-1: Manufacturer: syz [ 1386.352464][T24727] usb 6-1: SerialNumber: syz [ 1386.364709][T24727] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1386.381900][ T5879] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1386.493587][T26265] tipc: Failed to remove unknown binding: 66,1,1/0:3194197179/3194197181 [ 1386.507501][T26265] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5381'. [ 1386.516650][T26265] netlink: 260 bytes leftover after parsing attributes in process `syz.7.5381'. [ 1386.617340][ C0] usb 6-1: ath: unknown panic pattern! [ 1387.570569][ T5879] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1387.577727][ T5879] ath9k_htc: Failed to initialize the device [ 1387.620428][ T5879] usb 6-1: ath9k_htc: USB layer deinitialized [ 1387.699138][T24727] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1387.859047][T24727] usb 3-1: Using ep0 maxpacket: 8 [ 1387.867195][T24727] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1387.880526][T24727] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 1387.898897][T24727] usb 3-1: config 0 has no interface number 0 [ 1387.905281][T24727] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1387.953281][T24727] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1387.970113][T24727] usb 3-1: config 0 interface 88 has no altsetting 0 [ 1387.980634][T24727] usb 3-1: string descriptor 0 read error: -22 [ 1387.986991][T24727] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1388.025754][T24727] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1388.045566][ T5872] usb 6-1: USB disconnect, device number 46 [ 1388.055879][T24727] usb 3-1: config 0 descriptor?? [ 1388.056829][T26283] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5385'. [ 1388.092996][T24727] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input100 [ 1388.185747][T26286] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5386'. [ 1388.239849][T13806] udevd[13806]: Error opening device "/dev/input/event4": Input/output error [ 1388.248886][T13806] udevd[13806]: Unable to EVIOCGABS device "/dev/input/event4" [ 1388.277037][T13806] udevd[13806]: Unable to EVIOCGABS device "/dev/input/event4" [ 1388.462498][T26302] syzkaller1: entered promiscuous mode [ 1388.468084][T26302] syzkaller1: entered allmulticast mode [ 1388.505515][T26303] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1388.709789][ T5879] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1388.889618][ T5879] usb 1-1: Using ep0 maxpacket: 16 [ 1388.912677][ T5879] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 1388.963839][ T5879] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1389.022005][ T5879] usb 1-1: config 1 has no interface number 1 [ 1389.046105][ T5879] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1389.193743][ T5879] usb 1-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1389.215365][ T5879] usb 1-1: config 1 interface 105 has no altsetting 0 [ 1389.240340][ T5879] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1389.250166][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.258361][ T5879] usb 1-1: Product: syz [ 1389.273566][ T5879] usb 1-1: Manufacturer: syz [ 1389.284479][ T5879] usb 1-1: SerialNumber: syz [ 1389.307552][T26302] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1389.369679][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 1389.389780][ T5872] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 1389.609369][ T5872] usb 8-1: Using ep0 maxpacket: 8 [ 1389.620341][ T5872] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1389.638468][ T5872] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1389.657986][ T5872] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.681710][ T5872] usb 8-1: config 0 descriptor?? [ 1389.854334][T12085] usb 3-1: USB disconnect, device number 96 [ 1389.897513][ T5872] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1389.923089][T26324] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5398'. [ 1389.980566][T26326] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5399'. [ 1390.026531][T26328] syzkaller0: entered promiscuous mode [ 1390.032271][T26328] syzkaller0: entered allmulticast mode [ 1390.226419][T26334] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5402'. [ 1390.634154][T26339] 8021q: VLANs not supported on caif0 [ 1390.769841][ T5872] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1390.929135][ T5872] usb 6-1: Using ep0 maxpacket: 16 [ 1390.937211][ T5872] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1390.947242][ T5872] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.957534][ T5872] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1390.969192][ T5872] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1390.978777][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.987032][ T5872] usb 6-1: Product: syz [ 1390.991863][ T5872] usb 6-1: Manufacturer: syz [ 1390.997366][ T5872] usb 6-1: SerialNumber: syz [ 1391.216054][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 1391.216072][ T29] audit: type=1326 audit(1775581171.407:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26335 comm="syz.5.5403" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc7f079c819 code=0x0 [ 1391.423229][ T5879] aqc111 1-1:1.105: probe with driver aqc111 failed with error -22 [ 1391.448497][ T5879] usb 1-1: USB disconnect, device number 92 [ 1391.470678][ T5872] usb 6-1: 0:2 : does not exist [ 1391.762832][T26351] fuse: Invalid uid '0x000000000000000a' [ 1391.791084][T26354] ip6t_srh: unknown srh match flags 4000 [ 1391.791456][T26355] ip6t_srh: unknown srh match flags 4000 [ 1391.897723][T26357] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5407'. [ 1391.977348][T26359] binder: 26358:26359 ioctl c0306201 200000000540 returned -14 [ 1392.047867][ T5879] usb 8-1: USB disconnect, device number 63 [ 1392.073523][T26361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5409'. [ 1392.469039][ T5879] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 1392.628666][T26367] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5411'. [ 1392.657104][ T5879] usb 8-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1392.670231][ T5879] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1392.681914][ T5879] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1392.693633][ T5879] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1392.703136][ T5879] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.721865][T26365] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1392.891760][T26373] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5412'. [ 1393.678615][ T5872] usb 6-1: USB disconnect, device number 47 [ 1393.736060][T13803] udevd[13803]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1393.841228][ T55] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1393.884688][T26389] tipc: Failed to remove unknown binding: 66,1,1/0:2879333203/2879333205 [ 1393.895062][T26389] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5416'. [ 1393.917964][T26389] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5416'. [ 1393.997313][T26365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.007993][T26365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.202699][T26391] libceph: resolve '0..' (ret=-3): failed [ 1394.320485][ T5872] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1394.338721][ T5879] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 1394.353480][ T5879] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input101 [ 1394.571617][ T5872] usb 6-1: Using ep0 maxpacket: 16 [ 1394.591742][ T5872] usb 6-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=ba.e9 [ 1394.602502][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.612582][ T5872] usb 6-1: Product: syz [ 1394.628669][ T5872] usb 6-1: Manufacturer: syz [ 1394.644006][ T5872] usb 6-1: SerialNumber: syz [ 1394.666891][ T5872] usb 6-1: config 0 descriptor?? [ 1394.682896][ T5872] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 1394.825525][T26400] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5418'. [ 1395.376399][T26405] tipc: Failed to remove unknown binding: 66,1,1/2396244798:378639537/378639539 [ 1395.391501][T26405] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5419'. [ 1395.426085][T26405] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5419'. [ 1396.980453][ T55] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1396.989705][ T55] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1396.997393][ T55] usb 3-1: can't read configurations, error -71 [ 1397.302232][ T5872] pwc: send_video_command error -71 [ 1397.317794][ T5872] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1397.345952][ T5872] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1397.381693][ T5872] usb 6-1: USB disconnect, device number 48 [ 1397.485913][ T55] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 1397.683972][ T55] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1397.731807][ T29] audit: type=1326 audit(1775581177.927:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26414 comm="syz.5.5422" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc7f079c819 code=0x0 [ 1397.813156][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.858506][ T55] usb 3-1: config 0 descriptor?? [ 1397.887359][ T55] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1398.118478][T26425] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5423'. [ 1398.163033][T26425] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5423'. [ 1398.212440][ T5872] usb 8-1: USB disconnect, device number 64 [ 1398.212520][ C0] aiptek 8-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1398.359928][T26427] vlan0: entered promiscuous mode [ 1398.378465][T26427] team0: entered promiscuous mode [ 1398.394983][T26427] team_slave_0: entered promiscuous mode [ 1398.406566][T26427] team_slave_1: entered promiscuous mode [ 1398.486983][ T55] gp8psk: usb in 137 operation failed. [ 1398.501620][ T55] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1398.519243][ T55] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1398.539566][ T55] usb 3-1: USB disconnect, device number 98 [ 1398.656140][T26435] 8021q: VLANs not supported on caif0 [ 1399.199179][ T5872] usb 1-1: new low-speed USB device number 93 using dummy_hcd [ 1399.529222][T26279] Bluetooth: hci3: command 0x0406 tx timeout [ 1399.586999][ T5872] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1399.667778][ T5872] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1399.709639][ T5872] usb 1-1: config 0 has no interface number 0 [ 1399.716762][ T5872] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1399.740963][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.779441][ T5872] usb 1-1: config 0 descriptor?? [ 1399.807824][ T5872] ldusb 1-1:0.55: Interrupt in endpoint not found [ 1399.919656][ T43] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1399.952355][T26462] tipc: Failed to remove unknown binding: 66,1,1/0:2073608577/2073608579 [ 1399.969457][T26462] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5432'. [ 1399.978794][T26462] netlink: 260 bytes leftover after parsing attributes in process `syz.6.5432'. [ 1401.511168][T26482] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5437'. [ 1401.535347][T26482] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5437'. [ 1401.859106][ T5923] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1401.969555][ T55] usb 1-1: USB disconnect, device number 93 [ 1402.010188][ T5923] usb 6-1: Using ep0 maxpacket: 16 [ 1402.018869][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 26232, setting to 64 [ 1402.033110][ T5923] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1402.043923][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.060924][ T5923] usb 6-1: Product: syz [ 1402.067588][ T5923] usb 6-1: Manufacturer: syz [ 1402.074439][ T5923] usb 6-1: SerialNumber: syz [ 1402.084910][ T5923] usb 6-1: config 0 descriptor?? [ 1402.107547][ T5923] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1402.116285][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1402.128552][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1402.139727][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1402.148685][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1402.308767][ T55] usb 6-1: USB disconnect, device number 49 [ 1402.318186][T18495] usb 6-1: Failed to submit usb control message: -71 [ 1402.318274][T18495] usb 6-1: unable to send the bmi data to the device: -71 [ 1402.318286][T18495] usb 6-1: unable to get target info from device [ 1402.318295][T18495] usb 6-1: could not get target info (-71) [ 1402.318311][T18495] usb 6-1: could not probe fw (-71) [ 1402.366286][T26496] netlink: 'syz.0.5440': attribute type 10 has an invalid length. [ 1402.369929][T26496] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1402.972449][T26507] 8021q: VLANs not supported on caif0 [ 1402.988764][T24727] hid_parser_main: 28 callbacks suppressed [ 1402.988779][T24727] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 1403.007182][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1403.013942][T24727] hid-generic 0000:0000:0000.0052: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1403.034347][ T43] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1403.042123][ T43] usb 3-1: can't read configurations, error -71 [ 1403.119424][T26508] fido_id[26508]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1403.287270][T26515] tipc: Enabled bearer , priority 0 [ 1403.295897][T26515] syzkaller0: entered promiscuous mode [ 1403.322388][T26515] syzkaller0: entered allmulticast mode [ 1403.422634][T26515] tipc: Resetting bearer [ 1403.448523][T26514] tipc: Resetting bearer [ 1403.467418][T26514] tipc: Disabling bearer [ 1403.608148][T26528] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5451'. [ 1403.619104][ T5872] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1403.621147][T26528] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5451'. [ 1403.769156][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 1403.790783][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1403.817830][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1403.840681][ T5872] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1403.865802][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1403.896989][ T5872] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1403.929928][ T5872] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1403.939938][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.960933][ T5872] usb 1-1: config 0 descriptor?? [ 1403.970079][T26522] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1404.017400][T26532] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5453'. [ 1404.212496][ C0] Bluetooth: hci5: Unexpected continuation: 1 bytes [ 1404.219789][T26279] Bluetooth: hci5: unexpected event 0x10 length: 71 > 1 [ 1404.319040][ T5872] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 1404.499067][ T5872] usb 6-1: device descriptor read/64, error -71 [ 1405.254039][T19128] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1405.291525][T26547] tipc: Failed to remove unknown binding: 66,1,1/0:3723993998/3723994000 [ 1405.319196][ T5872] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 1405.354332][T26547] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5457'. [ 1405.368358][T26547] netlink: 260 bytes leftover after parsing attributes in process `syz.7.5457'. [ 1405.449064][ T5872] usb 6-1: device descriptor read/64, error -71 [ 1405.629221][ T5872] usb usb6-port1: attempt power cycle [ 1405.751377][ T43] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 1405.960999][ T43] usb 8-1: Using ep0 maxpacket: 16 [ 1406.018065][ T43] usb 8-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=ba.e9 [ 1406.027437][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.028836][ T5829] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1406.035573][ T43] usb 8-1: Product: syz [ 1406.047732][ T43] usb 8-1: Manufacturer: syz [ 1406.055380][ T5829] Bluetooth: hci5: hardware error 0x51 [ 1406.063112][ T43] usb 8-1: SerialNumber: syz [ 1406.068041][ T5872] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 1406.078673][ T5829] Bluetooth: hci5: Opcode 0x0c03 failed: -32 [ 1406.079786][ T43] usb 8-1: config 0 descriptor?? [ 1406.092593][ T5872] usb 6-1: device descriptor read/8, error -71 [ 1406.107191][ T43] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 1406.339087][ T5872] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 1406.359904][ T5872] usb 6-1: device descriptor read/8, error -71 [ 1406.453862][ T55] usb 1-1: USB disconnect, device number 94 [ 1406.489033][ T5872] usb usb6-port1: unable to enumerate USB device [ 1406.859112][ T55] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1407.039511][ T55] usb 1-1: Using ep0 maxpacket: 8 [ 1407.046771][ T55] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.058134][ T55] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1407.071271][ T55] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1407.081994][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.090780][ T55] usb 1-1: Product: syz [ 1407.095304][ T55] usb 1-1: Manufacturer: syz [ 1407.100904][ T55] usb 1-1: SerialNumber: syz [ 1407.237514][T19128] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1407.249374][T19128] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1407.273363][T19128] usb 3-1: can't read configurations, error -71 [ 1407.351052][ T55] usb 1-1: 0:2 : does not exist [ 1407.419431][ T55] usb 1-1: USB disconnect, device number 95 [ 1407.468641][T13806] udevd[13806]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1407.685873][T26564] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5462'. [ 1407.709215][T26564] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1407.716528][T26564] IPv6: NLM_F_CREATE should be set when creating new route [ 1407.797582][ T43] pwc: send_video_command error -71 [ 1407.809479][ T43] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1407.820414][ T43] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 1407.837374][ T43] usb 8-1: USB disconnect, device number 65 [ 1407.911547][T26567] 8021q: VLANs not supported on caif0 [ 1408.002551][T26569] team0: Device ipip0 is up. Set it down before adding it as a team port [ 1408.235815][T26572] fuse: Bad value for 'fd' [ 1408.341763][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1408.483607][T26581] bond2: (slave gretap0): Device is not bonding slave [ 1408.712659][T26581] bond2: option active_slave: invalid value (gretap0) [ 1408.744484][T26581] bond2 (unregistering): Released all slaves [ 1409.122240][T26591] netlink: 'syz.5.5469': attribute type 12 has an invalid length. [ 1409.359029][T19128] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1409.741167][T19128] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.751731][T19128] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1409.762099][T19128] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1409.801898][T19128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1409.816274][T19128] usb 3-1: SerialNumber: syz [ 1409.871197][T26602] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5472'. [ 1410.039673][T19128] usb 3-1: 0:2 : does not exist [ 1410.109368][T19128] usb 3-1: USB disconnect, device number 103 [ 1410.154353][T13803] udevd[13803]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1410.202998][T24727] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1410.228305][T26616] tipc: Failed to remove unknown binding: 66,1,1/0:1378921160/1378921162 [ 1410.239673][T26616] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5475'. [ 1410.259671][T26616] netlink: 260 bytes leftover after parsing attributes in process `syz.6.5475'. [ 1410.429087][ T55] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1410.449007][T24727] usb 1-1: Using ep0 maxpacket: 32 [ 1410.455696][T24727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1410.467113][T24727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1410.477659][T24727] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1410.497683][T24727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.594104][ T55] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1410.640396][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.658984][T24727] usb 1-1: config 0 descriptor?? [ 1410.667793][ T55] usb 6-1: Product: syz [ 1410.682819][T24727] hub 1-1:0.0: USB hub found [ 1410.694214][ T55] usb 6-1: Manufacturer: syz [ 1410.700493][ T55] usb 6-1: SerialNumber: syz [ 1410.738718][ T55] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1410.755862][ T5879] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1410.885852][T24727] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1411.177407][T26611] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5476'. [ 1411.189031][ T55] usb 3-1: new low-speed USB device number 104 using dummy_hcd [ 1411.309098][T19128] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 1411.348166][T12085] usb 6-1: USB disconnect, device number 54 [ 1411.358286][T24727] hid-generic 0003:046D:C31C.0053: unknown main item tag 0x0 [ 1411.380145][T24727] hid-generic 0003:046D:C31C.0053: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 1411.461057][T19128] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 1411.469658][T19128] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1411.488217][T19128] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1411.498880][T19128] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1411.502523][ T55] usb 3-1: device descriptor read/64, error -71 [ 1411.514040][T19128] usb 8-1: Manufacturer: syz [ 1411.521591][T19128] usb 8-1: config 0 descriptor?? [ 1411.589288][T19128] rc_core: IR keymap rc-hauppauge not found [ 1411.605643][T19128] Registered IR keymap rc-empty [ 1411.613654][T19128] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1411.629876][T19128] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input102 [ 1411.779070][ T55] usb 3-1: new low-speed USB device number 105 using dummy_hcd [ 1411.807601][T26636] fuse: Bad value for 'fd' [ 1411.821474][T19128] usb 1-1: USB disconnect, device number 96 [ 1411.850048][ T5879] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1411.857169][ T5879] ath9k_htc: Failed to initialize the device [ 1411.867167][T12085] usb 6-1: ath9k_htc: USB layer deinitialized [ 1411.930448][ T55] usb 3-1: device descriptor read/64, error -71 [ 1411.937551][ C1] igorplugusb 8-1:0.0: receive overflow invalid: 167 [ 1412.102367][T26642] sg_write: data in/out 262111/92 bytes for SCSI command 0x69-- guessing data in; [ 1412.102367][T26642] program syz.5.5483 not setting count and/or reply_len properly [ 1412.120278][ T55] usb usb3-port1: attempt power cycle [ 1412.183780][ T5879] usb 8-1: USB disconnect, device number 66 [ 1412.491799][ T55] usb 3-1: new low-speed USB device number 106 using dummy_hcd [ 1412.529796][ T55] usb 3-1: device descriptor read/8, error -71 [ 1412.879059][ T55] usb 3-1: new low-speed USB device number 107 using dummy_hcd [ 1412.959562][ T55] usb 3-1: device descriptor read/8, error -71 [ 1412.963261][T26653] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5488'. [ 1413.059110][T19128] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1413.069582][T26653] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5488'. [ 1413.073255][ T55] usb usb3-port1: unable to enumerate USB device [ 1413.209171][T19128] usb 1-1: device descriptor read/64, error -71 [ 1413.489030][T19128] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1413.501152][T26659] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 1413.515970][T26659] kvm: requested 99733 ns i8254 timer period limited to 200000 ns [ 1413.666705][T26670] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5493'. [ 1413.689156][T19128] usb 1-1: device descriptor read/64, error -71 [ 1413.814935][T19128] usb usb1-port1: attempt power cycle [ 1414.077573][T26674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1414.126698][T26674] 8021q: adding VLAN 0 to HW filter on device team0 [ 1414.174689][T26674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1414.205121][T19128] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1414.230008][T19128] usb 1-1: device descriptor read/8, error -71 [ 1414.449570][ T55] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1414.496318][T19128] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1414.525054][T19128] usb 1-1: device descriptor read/8, error -71 [ 1414.629076][ T55] usb 3-1: Using ep0 maxpacket: 32 [ 1414.636664][ T55] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1414.650964][ T55] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1414.651662][T19128] usb usb1-port1: unable to enumerate USB device [ 1414.661024][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.674842][ T55] usb 3-1: Product: syz [ 1414.679079][ T55] usb 3-1: Manufacturer: syz [ 1414.683685][ T55] usb 3-1: SerialNumber: syz [ 1414.789071][ T5872] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 1414.894087][T26682] delete_channel: no stack [ 1414.920608][ T55] usb 3-1: BAAD HEADPHONE p_chmask mismatch [ 1414.939025][ T5872] usb 8-1: Using ep0 maxpacket: 8 [ 1414.945701][ T5872] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1414.962429][ T5872] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1414.963672][ T55] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1414.973048][ T5872] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1414.992632][ T55] usb 3-1: USB disconnect, device number 108 [ 1415.001575][ T5872] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1415.013627][ T5872] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1415.016651][T13803] udevd[13803]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1415.027928][ T5872] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1415.055493][ T5872] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.272532][ T5872] usb 8-1: usb_control_msg returned -32 [ 1415.278300][ T5872] usbtmc 8-1:16.0: can't read capabilities [ 1415.545537][T26699] trusted_key: encrypted_key: key user:syz not found [ 1416.289240][ T5872] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1416.396234][T26726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.414683][T26726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.452856][T26725] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 1416.471007][ T5872] usb 1-1: config 0 has no interfaces? [ 1416.482593][ T5872] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1416.496078][ T5872] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1416.512277][ T5872] usb 1-1: Manufacturer: syz [ 1416.528905][ T5872] usb 1-1: config 0 descriptor?? [ 1416.532378][T12085] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1416.593156][ T5872] usb 8-1: USB disconnect, device number 67 [ 1416.729388][T12085] usb 3-1: Using ep0 maxpacket: 16 [ 1416.898118][T12085] usb 3-1: config 4 has an invalid interface number: 9 but max is 0 [ 1416.906683][T12085] usb 3-1: config 4 has no interface number 0 [ 1416.913508][T12085] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1416.924086][T12085] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64 [ 1416.934476][T12085] usb 3-1: config 4 interface 9 has no altsetting 0 [ 1416.950707][T12085] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 1416.960007][T12085] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.968210][T12085] usb 3-1: Product: syz [ 1416.973167][T12085] usb 3-1: Manufacturer: syz [ 1416.977881][T12085] usb 3-1: SerialNumber: syz [ 1416.990323][T26723] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1416.997665][T26732] netlink: 388 bytes leftover after parsing attributes in process `syz.5.5511'. [ 1417.007881][T26723] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1417.042775][T26730] bond1: option ad_user_port_key: invalid value (20565) [ 1417.050120][T26730] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 1417.061509][T26730] bond1 (unregistering): Released all slaves [ 1417.100381][T12085] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1417.419300][T12085] usb 1-1: USB disconnect, device number 101 [ 1418.169277][ T13] usb 3-1: Failed to submit usb control message: -110 [ 1418.176693][ T13] usb 3-1: unable to send the bmi data to the device: -110 [ 1418.201580][ T13] usb 3-1: unable to get target info from device [ 1418.203991][T26749] bond1: option mode: invalid value (255) [ 1418.208261][ T13] usb 3-1: could not get target info (-110) [ 1418.223593][ T13] usb 3-1: could not probe fw (-110) [ 1418.321673][T26749] bond1 (unregistering): Released all slaves [ 1418.488643][T26757] fuse: Bad value for 'group_id' [ 1418.517777][T26757] fuse: Bad value for 'group_id' [ 1418.534299][T26748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1418.552849][T26748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1418.653586][T26763] netlink: 'syz.5.5519': attribute type 2 has an invalid length. [ 1418.663229][T26761] netlink: 'syz.5.5519': attribute type 2 has an invalid length. [ 1418.673722][T26763] netlink: 'syz.5.5519': attribute type 8 has an invalid length. [ 1418.685368][T26761] netlink: 'syz.5.5519': attribute type 8 has an invalid length. [ 1418.693288][T26763] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5519'. [ 1418.702905][T26761] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5519'. [ 1418.760219][ T55] usb 8-1: new full-speed USB device number 68 using dummy_hcd [ 1418.898416][T26772] tipc: Failed to remove unknown binding: 66,1,1/0:2028059135/2028059137 [ 1418.914237][T26772] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5521'. [ 1418.923662][T26772] netlink: 260 bytes leftover after parsing attributes in process `syz.6.5521'. [ 1418.940703][ T55] usb 8-1: config 1 has an invalid interface number: 128 but max is 1 [ 1419.067742][ T55] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.078686][ T55] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1419.087672][ T55] usb 8-1: config 1 has no interface number 0 [ 1419.126071][T12085] usb 3-1: USB disconnect, device number 109 [ 1419.181969][ T55] usb 8-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1419.205808][ T55] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1419.248898][ T55] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.292734][ T55] usb 8-1: Product: syz [ 1419.312957][ T55] usb 8-1: Manufacturer: syz [ 1419.333230][ T55] usb 8-1: SerialNumber: syz [ 1419.343205][ T55] cdc_wdm 8-1:1.128: skipping garbage [ 1419.348798][ T55] cdc_wdm 8-1:1.128: probe with driver cdc_wdm failed with error -22 [ 1419.551621][ T5872] usb 8-1: USB disconnect, device number 68 [ 1419.908716][T26779] futex_wake_op: syz.2.5523 tries to shift op by 32; fix this program [ 1421.160296][T26808] netlink: 388 bytes leftover after parsing attributes in process `syz.2.5528'. [ 1421.170224][T26801] bond2: option ad_user_port_key: invalid value (14435) [ 1421.177914][T26801] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 1421.216158][T26801] bond2 (unregistering): Released all slaves [ 1422.486403][T26822] can: request_module (can-proto-3) failed. [ 1423.093717][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.106442][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.582262][T26849] batadv_slave_1: entered promiscuous mode [ 1424.652831][T26850] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:0 [ 1425.322707][T26863] xt_hashlimit: size too large, truncated to 1048576 [ 1425.478914][T26865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5543'. [ 1425.513814][T26853] batadv_slave_1: left promiscuous mode [ 1425.697011][T26865] tipc: Disabling bearer [ 1425.916739][T26870] bond1: option ad_user_port_key: invalid value (48448) [ 1425.927134][T26870] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 1425.967363][T26872] netlink: 388 bytes leftover after parsing attributes in process `syz.6.5544'. [ 1426.023845][T26870] bond1 (unregistering): Released all slaves [ 1426.549087][T12085] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 1426.712795][T12085] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1426.729002][T12085] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1426.759040][T12085] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1426.768363][T12085] usb 8-1: config 1 has no interface number 1 [ 1426.794387][T12085] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1426.843224][T12085] usb 8-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1426.899236][ T8352] wlan0: Trigger new scan to find an IBSS to join [ 1426.918196][T12085] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1426.939894][T12085] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.948230][T12085] usb 8-1: Product: syz [ 1426.965913][T12085] usb 8-1: Manufacturer: syz [ 1426.986000][T12085] usb 8-1: SerialNumber: syz [ 1427.019952][T26890] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1427.220226][T26881] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5547'. [ 1427.237552][T12085] usb 8-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1427.267896][T12085] usb 8-1: MIDIStreaming interface descriptor not found [ 1427.340453][T26899] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5552'. [ 1427.369784][T12085] usb 8-1: USB disconnect, device number 69 [ 1427.420924][T13638] udevd[13638]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1427.905316][ T55] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1428.179953][ T55] usb 6-1: Using ep0 maxpacket: 32 [ 1428.199935][ T55] usb 6-1: config 164 has an invalid interface number: 7 but max is 0 [ 1428.232811][ T55] usb 6-1: config 164 has no interface number 0 [ 1428.246285][ T55] usb 6-1: config 164 interface 7 altsetting 5 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1428.266071][ T55] usb 6-1: config 164 interface 7 has no altsetting 0 [ 1428.284859][ T55] usb 6-1: New USB device found, idVendor=045e, idProduct=0c5e, bcdDevice=98.d1 [ 1428.306398][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.322656][ T55] usb 6-1: Product: syz [ 1428.332430][ T55] usb 6-1: Manufacturer: syz [ 1428.343014][ T55] usb 6-1: SerialNumber: syz [ 1428.362214][ T55] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1428.471604][ T5872] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1428.603193][ T55] r8152 6-1:164.7: Expected endpoints are not found [ 1428.620890][ T55] r8152-cfgselector 6-1: USB disconnect, device number 55 [ 1428.703011][ T5872] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1428.712783][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.721261][ T5872] usb 3-1: Product: syz [ 1428.725577][ T5872] usb 3-1: Manufacturer: syz [ 1428.732011][ T5872] usb 3-1: SerialNumber: syz [ 1428.754655][ T5872] usb 3-1: config 0 descriptor?? [ 1429.287544][T26915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1429.297266][T26915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1429.337732][ T5872] usb 3-1: Firmware: major: 2, minor: 0, hardware type: ATUSB (0) [ 1429.482613][ T55] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1429.551727][ T5872] usb 3-1: failed to fetch extended address, random address set [ 1429.584001][T26923] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1429.598487][T26927] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5560'. [ 1429.609714][T26923] bond0: (slave bond2): Enslaving as an active interface with an up link [ 1429.643083][T26927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1429.658905][T26927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1429.675832][ T55] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1429.687220][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.688647][ T5872] usb 3-1: USB disconnect, device number 110 [ 1429.695395][ T55] usb 6-1: Product: syz [ 1429.695416][ T55] usb 6-1: Manufacturer: syz [ 1429.710911][ T55] usb 6-1: SerialNumber: syz [ 1429.716388][T26927] bond0 (unregistering): (slave team0): Releasing backup interface [ 1429.741863][T26927] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1429.751328][ T55] usb 6-1: config 0 descriptor?? [ 1429.777881][T26927] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1429.789257][T26927] bond0 (unregistering): (slave bond2): Releasing backup interface [ 1429.799755][T26927] bond0 (unregistering): Released all slaves [ 1430.799075][ T55] usb 6-1: unexpected transceiver, part 0xf6 version 0x03 [ 1430.838375][T26940] FAULT_INJECTION: forcing a failure. [ 1430.838375][T26940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1430.851767][T26940] CPU: 1 UID: 0 PID: 26940 Comm: syz.6.5564 Tainted: G L syzkaller #0 PREEMPT(full) [ 1430.851795][T26940] Tainted: [L]=SOFTLOCKUP [ 1430.851802][T26940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1430.851812][T26940] Call Trace: [ 1430.851819][T26940] [ 1430.851827][T26940] dump_stack_lvl+0xe8/0x150 [ 1430.851858][T26940] should_fail_ex+0x412/0x560 [ 1430.851885][T26940] _copy_from_user+0x2d/0xb0 [ 1430.851908][T26940] copy_from_sockptr+0x5e/0x90 [ 1430.851929][T26940] do_ipv6_setsockopt+0x1846/0x31c0 [ 1430.851965][T26940] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1430.851986][T26940] ? get_pid_task+0x20/0x1f0 [ 1430.852000][T26940] ? get_pid_task+0x20/0x1f0 [ 1430.852013][T26940] ? get_pid_task+0x20/0x1f0 [ 1430.852036][T26940] ? __lock_acquire+0x6b5/0x2cf0 [ 1430.852068][T26940] ? aa_sk_perm+0x6d5/0x900 [ 1430.852096][T26940] ? __pfx_aa_sk_perm+0x10/0x10 [ 1430.852121][T26940] ? __fget_files+0x2a/0x420 [ 1430.852135][T26940] ? aa_sock_opt_perm+0xff/0x1a0 [ 1430.852152][T26940] ipv6_setsockopt+0x59/0x170 [ 1430.852170][T26940] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1430.852191][T26940] do_sock_setsockopt+0x17c/0x1b0 [ 1430.852217][T26940] __x64_sys_setsockopt+0x13d/0x1b0 [ 1430.852243][T26940] do_syscall_64+0x14d/0xf80 [ 1430.852266][T26940] ? trace_irq_disable+0x3b/0x150 [ 1430.852280][T26940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.852297][T26940] ? clear_bhb_loop+0x40/0x90 [ 1430.852319][T26940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.852336][T26940] RIP: 0033:0x7f3592b9c819 [ 1430.852354][T26940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1430.852367][T26940] RSP: 002b:00007f3593985028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1430.852385][T26940] RAX: ffffffffffffffda RBX: 00007f3592e15fa0 RCX: 00007f3592b9c819 [ 1430.852396][T26940] RDX: 000000000000001c RSI: 0000000000000029 RDI: 0000000000000003 [ 1430.852406][T26940] RBP: 00007f3593985090 R08: 0000000000000014 R09: 0000000000000000 [ 1430.852416][T26940] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 1430.852426][T26940] R13: 00007f3592e16038 R14: 00007f3592e15fa0 R15: 00007f3592f3fa48 [ 1430.852451][T26940] [ 1430.854986][T26941] netlink: 388 bytes leftover after parsing attributes in process `syz.0.5561'. [ 1431.080188][ T55] usb 6-1: Firmware: major: 65, minor: 151, hardware type: UNKNOWN (198) [ 1431.115398][T26942] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5563'. [ 1431.270320][ T55] usb 6-1: failed to fetch extended address, random address set [ 1431.282967][ T55] usb 6-1: atusb_probe: initialization failed, error = -524 [ 1431.312539][T26932] bond0: option ad_user_port_key: invalid value (40734) [ 1431.322959][ T55] atusb 6-1:0.0: probe with driver atusb failed with error -524 [ 1431.373751][T26932] bond0: option ad_user_port_key: allowed values 0 - 1023 [ 1431.409447][ T55] usb 6-1: USB disconnect, device number 56 [ 1431.513535][T26932] bond0 (unregistering): Released all slaves [ 1431.630966][T26955] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1431.631378][T26958] netlink: 'syz.6.5569': attribute type 10 has an invalid length. [ 1431.660123][T26955] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1431.678261][T26955] kvm: requested 107276 ns i8254 timer period limited to 200000 ns [ 1431.686782][T26955] kvm: requested 33523 ns i8254 timer period limited to 200000 ns [ 1431.695531][T26955] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 1431.707601][T26955] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 1431.722253][T26962] netlink: 80 bytes leftover after parsing attributes in process `syz.6.5569'. [ 1431.819051][ T5879] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 1431.979431][ T5879] usb 8-1: Using ep0 maxpacket: 8 [ 1432.012298][ T5879] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1432.047309][ T5879] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1432.068130][ T5879] usb 8-1: can't read configurations, error -61 [ 1432.219066][ T5879] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 1432.589019][ T5879] usb 8-1: Using ep0 maxpacket: 8 [ 1432.605893][ T5879] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1432.865245][ T5879] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1432.909050][ T5879] usb 8-1: can't read configurations, error -61 [ 1432.921820][T26984] FAULT_INJECTION: forcing a failure. [ 1432.921820][T26984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1432.931005][ T5879] usb usb8-port1: attempt power cycle [ 1432.937697][T26984] CPU: 1 UID: 0 PID: 26984 Comm: syz.0.5576 Tainted: G L syzkaller #0 PREEMPT(full) [ 1432.937726][T26984] Tainted: [L]=SOFTLOCKUP [ 1432.937733][T26984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1432.937744][T26984] Call Trace: [ 1432.937752][T26984] [ 1432.937759][T26984] dump_stack_lvl+0xe8/0x150 [ 1432.937789][T26984] should_fail_ex+0x412/0x560 [ 1432.937828][T26984] _copy_to_user+0x31/0xb0 [ 1432.937851][T26984] simple_read_from_buffer+0xe1/0x170 [ 1432.937881][T26984] proc_fail_nth_read+0x1bb/0x230 [ 1432.937909][T26984] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1432.937937][T26984] ? rw_verify_area+0x2a6/0x4d0 [ 1432.937956][T26984] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1432.937981][T26984] vfs_read+0x20c/0xa70 [ 1432.937998][T26984] ? fdget_pos+0x246/0x320 [ 1432.938020][T26984] ? __pfx___mutex_lock+0x10/0x10 [ 1432.938044][T26984] ? __pfx_vfs_read+0x10/0x10 [ 1432.938063][T26984] ? __fget_files+0x2a/0x420 [ 1432.938082][T26984] ? __fget_files+0x3a0/0x420 [ 1432.938097][T26984] ? __fget_files+0x2a/0x420 [ 1432.938121][T26984] ksys_read+0x150/0x270 [ 1432.938142][T26984] ? __pfx_ksys_read+0x10/0x10 [ 1432.938169][T26984] do_syscall_64+0x14d/0xf80 [ 1432.938191][T26984] ? trace_irq_disable+0x3b/0x150 [ 1432.938206][T26984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1432.938225][T26984] ? clear_bhb_loop+0x40/0x90 [ 1432.938246][T26984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1432.938263][T26984] RIP: 0033:0x7f6a4dd5d04e [ 1432.938280][T26984] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1432.938294][T26984] RSP: 002b:00007f6a4ec19fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1432.938313][T26984] RAX: ffffffffffffffda RBX: 00007f6a4ec1a6c0 RCX: 00007f6a4dd5d04e [ 1432.938326][T26984] RDX: 000000000000000f RSI: 00007f6a4ec1a0a0 RDI: 0000000000000004 [ 1432.938336][T26984] RBP: 00007f6a4ec1a090 R08: 0000000000000000 R09: 0000000000000000 [ 1432.938347][T26984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1432.938357][T26984] R13: 00007f6a4e016038 R14: 00007f6a4e015fa0 R15: 00007f6a4e13fa48 [ 1432.938384][T26984] [ 1433.227976][T26988] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5578'. [ 1433.519296][ T5879] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 1433.539158][ T5872] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1433.578154][ T5879] usb 8-1: Using ep0 maxpacket: 8 [ 1433.584872][ T5879] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1433.594209][ T5879] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1433.601930][ T5879] usb 8-1: can't read configurations, error -61 [ 1433.622958][T19128] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1433.703225][ T5872] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1433.719122][ T5872] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1433.730990][ T5872] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1433.737027][T26998] netlink: 'syz.5.5583': attribute type 11 has an invalid length. [ 1433.740248][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.758304][ T5872] usb 3-1: Product: syz [ 1433.758762][T26998] netlink: 140 bytes leftover after parsing attributes in process `syz.5.5583'. [ 1433.762933][ T5872] usb 3-1: Manufacturer: syz [ 1433.772064][ T5879] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 1433.784713][ T5872] usb 3-1: SerialNumber: syz [ 1433.803097][ T5879] usb 8-1: Using ep0 maxpacket: 8 [ 1433.807469][T19128] usb 1-1: Using ep0 maxpacket: 16 [ 1433.821340][T19128] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1433.821465][ T5879] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1433.833223][ T5872] usb 3-1: config 0 descriptor?? [ 1433.849338][ T5879] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1433.852192][T19128] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1433.857167][ T5879] usb 8-1: can't read configurations, error -61 [ 1433.880409][T19128] usb 1-1: string descriptor 0 read error: -22 [ 1433.886768][T19128] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1433.890165][ T5879] usb usb8-port1: unable to enumerate USB device [ 1433.911369][T19128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.943100][T19128] snd-ua101 1-1:1.0: invalid num_altsetting [ 1434.133587][T26992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.147398][T26992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.159476][T27006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.172883][T27006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.206907][ T5879] usb 1-1: USB disconnect, device number 102 [ 1434.468412][T27012] bond0: option ad_user_port_key: invalid value (40556) [ 1434.476222][T27012] bond0: option ad_user_port_key: allowed values 0 - 1023 [ 1434.495668][T27014] netlink: 388 bytes leftover after parsing attributes in process `syz.0.5586'. [ 1434.517258][T27012] bond0 (unregistering): Released all slaves [ 1434.547761][T26985] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1434.610623][ T5872] mos7840 3-1:0.0: required endpoints missing [ 1434.649505][ T5872] usb 3-1: USB disconnect, device number 111 [ 1434.830662][T27021] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5588'. [ 1434.869530][T27021] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5588'. [ 1434.904223][T27019] netlink: 'syz.5.5587': attribute type 7 has an invalid length. [ 1434.923305][T27019] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1435.301583][ T5879] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 1435.452311][T27026] kvm: pic: level sensitive irq not supported [ 1435.452366][T27026] picdev_read: 77 callbacks suppressed [ 1435.452376][T27026] kvm: pic: non byte read [ 1435.468537][T27026] kvm: pic: level sensitive irq not supported [ 1435.468585][T27026] kvm: pic: non byte read [ 1435.469049][ T5879] usb 8-1: Using ep0 maxpacket: 16 [ 1435.485701][T27026] kvm: pic: level sensitive irq not supported [ 1435.485750][T27026] kvm: pic: non byte read [ 1435.486841][ T5879] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1435.550434][ T5879] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1435.571974][T27031] tipc: Failed to remove unknown binding: 66,1,1/0:1274264782/1274264784 [ 1435.585019][T27031] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5591'. [ 1435.594126][T27031] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5591'. [ 1435.650775][ T5879] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1435.668633][ T5879] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.704185][ T5879] usb 8-1: Product: syz [ 1435.719071][ T5879] usb 8-1: Manufacturer: syz [ 1435.723715][ T5879] usb 8-1: SerialNumber: syz [ 1436.010672][ T5879] usb 8-1: 0:2 : does not exist [ 1436.020914][ T5879] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1436.062313][ T5879] usb 8-1: USB disconnect, device number 74 [ 1436.087549][T13803] udevd[13803]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1436.109221][ T5823] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1436.131003][T12085] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1436.269989][ T5823] usb 3-1: Using ep0 maxpacket: 16 [ 1436.280879][ T5823] usb 3-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=ba.e9 [ 1436.297496][T12085] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1436.310820][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.324863][T12085] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1436.335562][ T5823] usb 3-1: Product: syz [ 1436.345286][ T5823] usb 3-1: Manufacturer: syz [ 1436.354056][ T5823] usb 3-1: SerialNumber: syz [ 1436.359915][T12085] usb 6-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 1436.375506][ T5823] usb 3-1: config 0 descriptor?? [ 1436.380552][T12085] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.392398][ T5823] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 1436.403840][T12085] usb 6-1: config 0 descriptor?? [ 1436.967292][T27047] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5597'. [ 1436.985897][T27047] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5597'. [ 1437.393773][T27043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.405553][T27043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1437.442155][T27043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.453892][T27043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1437.478077][T12085] stadia 0003:18D1:9400.0054: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.5-1/input0 [ 1437.497402][T12085] stadia 0003:18D1:9400.0054: no inputs found [ 1437.499411][ T5872] usb 8-1: new full-speed USB device number 75 using dummy_hcd [ 1437.504936][T12085] stadia 0003:18D1:9400.0054: force feedback init failed [ 1437.611478][T27059] xt_hashlimit: size too large, truncated to 1048576 [ 1437.659212][ T5872] usb 8-1: device descriptor read/64, error -71 [ 1437.969048][ T5872] usb 8-1: new full-speed USB device number 76 using dummy_hcd [ 1438.099068][ T5872] usb 8-1: device descriptor read/64, error -71 [ 1438.159039][T12085] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1438.211936][ T5872] usb usb8-port1: attempt power cycle [ 1438.319050][T12085] usb 1-1: Using ep0 maxpacket: 32 [ 1438.326777][T12085] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1438.336095][T12085] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1438.350101][T12085] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1438.359778][T12085] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.368273][T12085] usb 1-1: Product: syz [ 1438.372662][T12085] usb 1-1: Manufacturer:  [ 1438.377603][T12085] usb 1-1: SerialNumber: syz [ 1438.495521][ T5823] pwc: send_video_command error -71 [ 1438.501219][ T5823] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1438.521795][ T5823] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1438.536507][ T5823] usb 3-1: USB disconnect, device number 112 [ 1438.569051][ T5872] usb 8-1: new full-speed USB device number 77 using dummy_hcd [ 1438.610476][ T5872] usb 8-1: device descriptor read/8, error -71 [ 1438.613797][T12085] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1438.634103][T27068] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5602'. [ 1438.645176][T12085] usb 1-1: MIDIStreaming interface descriptor not found [ 1438.736380][T12085] usb 1-1: USB disconnect, device number 103 [ 1438.880043][ T5872] usb 8-1: new full-speed USB device number 78 using dummy_hcd [ 1438.920409][ T5872] usb 8-1: device descriptor read/8, error -71 [ 1438.965380][T27074] sctp: [Deprecated]: syz.2.5605 (pid 27074) Use of int in max_burst socket option. [ 1438.965380][T27074] Use struct sctp_assoc_value instead [ 1438.986145][T27074] sctp: [Deprecated]: syz.2.5605 (pid 27074) Use of int in max_burst socket option. [ 1438.986145][T27074] Use struct sctp_assoc_value instead [ 1439.049921][ T5872] usb usb8-port1: unable to enumerate USB device [ 1439.068713][T27080] syzkaller1: entered promiscuous mode [ 1439.075260][T27080] syzkaller1: entered allmulticast mode [ 1439.297604][ T5872] usb 6-1: USB disconnect, device number 57 [ 1439.445991][ T29] audit: type=1326 audit(1775581219.637:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27092 comm="syz.5.5610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f079c819 code=0x7fc00000 [ 1439.518586][T27097] vivid-004: disconnect [ 1439.543581][ T29] audit: type=1326 audit(1775581219.647:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27092 comm="syz.5.5610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc7f079c819 code=0x7fc00000 [ 1439.716828][T27095] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1440.092527][T27104] tipc: Failed to remove unknown binding: 66,1,1/0:1658441767/1658441769 [ 1440.102185][T27104] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5612'. [ 1440.214074][T27104] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5612'. [ 1440.357351][T27090] vivid-004: reconnect [ 1440.601374][T12085] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1440.709161][ T5823] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1440.760637][T12085] usb 1-1: config 0 has no interfaces? [ 1440.768043][T12085] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1440.789073][T12085] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1440.814125][T12085] usb 1-1: Manufacturer: syz [ 1440.844230][T12085] usb 1-1: config 0 descriptor?? [ 1440.869031][ T5823] usb 6-1: Using ep0 maxpacket: 16 [ 1440.869557][ T5872] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 1440.887460][ T5823] usb 6-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=ba.e9 [ 1440.898780][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.906984][ T5823] usb 6-1: Product: syz [ 1440.911291][ T5823] usb 6-1: Manufacturer: syz [ 1440.915969][ T5823] usb 6-1: SerialNumber: syz [ 1440.937505][ T5823] usb 6-1: config 0 descriptor?? [ 1440.945138][ T5823] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 1441.039201][ T5872] usb 8-1: Using ep0 maxpacket: 32 [ 1441.054553][ T5872] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1441.082504][T27111] FAULT_INJECTION: forcing a failure. [ 1441.082504][T27111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1441.097430][T27111] CPU: 0 UID: 0 PID: 27111 Comm: syz.0.5616 Tainted: G L syzkaller #0 PREEMPT(full) [ 1441.097458][T27111] Tainted: [L]=SOFTLOCKUP [ 1441.097464][T27111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1441.097478][T27111] Call Trace: [ 1441.097485][T27111] [ 1441.097492][T27111] dump_stack_lvl+0xe8/0x150 [ 1441.097531][T27111] should_fail_ex+0x412/0x560 [ 1441.097559][T27111] _copy_from_user+0x2d/0xb0 [ 1441.097580][T27111] do_sys_poll+0x2a9/0x1120 [ 1441.097610][T27111] ? __lock_acquire+0x6b5/0x2cf0 [ 1441.097634][T27111] ? __pfx_do_sys_poll+0x10/0x10 [ 1441.097657][T27111] ? is_bpf_text_address+0x26/0x2b0 [ 1441.097768][T27111] ? __pfx_timespec64_add_safe+0x10/0x10 [ 1441.097802][T27111] __x64_sys_poll+0x190/0x350 [ 1441.097828][T27111] ? __pfx___x64_sys_poll+0x10/0x10 [ 1441.097862][T27111] do_syscall_64+0x14d/0xf80 [ 1441.097883][T27111] ? trace_irq_disable+0x3b/0x150 [ 1441.097898][T27111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.097914][T27111] ? clear_bhb_loop+0x40/0x90 [ 1441.097934][T27111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.097952][T27111] RIP: 0033:0x7f6a4dd9c819 [ 1441.097970][T27111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1441.097984][T27111] RSP: 002b:00007f6a4ec1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 1441.098004][T27111] RAX: ffffffffffffffda RBX: 00007f6a4e015fa0 RCX: 00007f6a4dd9c819 [ 1441.098017][T27111] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 1441.098030][T27111] RBP: 00007f6a4ec1a090 R08: 0000000000000000 R09: 0000000000000000 [ 1441.098040][T27111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1441.098051][T27111] R13: 00007f6a4e016038 R14: 00007f6a4e015fa0 R15: 00007f6a4e13fa48 [ 1441.098079][T27111] [ 1441.297355][ T5872] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1441.320114][ T5872] usb 8-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1441.331365][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.345149][ T5872] usb 8-1: Product: syz [ 1441.352616][ T5872] usb 8-1: Manufacturer:  [ 1441.360918][ T5872] usb 8-1: SerialNumber: syz [ 1441.599813][ T5872] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1441.606836][ T5872] usb 8-1: MIDIStreaming interface descriptor not found [ 1441.744381][T12085] usb 1-1: USB disconnect, device number 104 [ 1441.854101][ T5872] usb 8-1: USB disconnect, device number 79 [ 1442.299103][ T5923] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1442.461855][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 1442.474770][ T5923] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1442.483667][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1442.504189][ T5923] usb 3-1: config 0 has no interface number 0 [ 1442.517804][ T5923] usb 3-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1442.564225][ T5923] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1442.590094][ T5923] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1442.599619][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.614702][ T5923] usb 3-1: Product: syz [ 1442.639024][ T5923] usb 3-1: Manufacturer: syz [ 1442.653246][ T5923] usb 3-1: SerialNumber: syz [ 1442.672304][ T5923] usb 3-1: config 0 descriptor?? [ 1442.694524][ T5923] f81534 3-1:0.12: required endpoints missing [ 1442.847388][ T5823] pwc: send_video_command error -71 [ 1442.855010][ T5823] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1442.919033][T12085] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 1443.142179][ T5823] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1443.244013][ T5823] usb 6-1: USB disconnect, device number 58 [ 1444.237456][T27164] tipc: Enabled bearer , priority 0 [ 1444.245052][T27164] syzkaller0: entered promiscuous mode [ 1444.250886][T27164] syzkaller0: entered allmulticast mode [ 1444.279412][T27164] tipc: Resetting bearer [ 1444.569104][ T5923] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 1444.699365][ T5923] usb 6-1: device descriptor read/64, error -71 [ 1444.899187][ T5872] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1444.949089][ T5923] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 1445.060846][ T5872] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.071834][ T5872] usb 1-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 1445.081246][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.089435][ T5923] usb 6-1: device descriptor read/64, error -71 [ 1445.098723][ T5872] usb 1-1: config 0 descriptor?? [ 1445.112558][ T5872] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1445.199771][ T5923] usb usb6-port1: attempt power cycle [ 1445.259147][ T5872] tipc: Node number set to 3408719657 [ 1445.310907][T27170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1445.320296][T27164] tipc: Resetting bearer [ 1445.322445][T27170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1445.328071][T27171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1445.358102][T27164] tipc: Disabling bearer [ 1445.365807][T27171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1445.387273][ T5872] usb 3-1: USB disconnect, device number 113 [ 1445.414910][T27170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1445.445579][T27171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1445.456364][T27170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1445.467094][T27171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1445.476612][ T43] usb 1-1: USB disconnect, device number 105 [ 1445.549011][ T5923] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 1445.580007][ T5923] usb 6-1: device descriptor read/8, error -71 [ 1445.829705][ T5923] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 1445.839137][ T5872] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1445.867693][T12085] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1445.870564][ T5923] usb 6-1: device descriptor read/8, error -71 [ 1445.929515][T12085] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1445.949077][T12085] usb 8-1: can't read configurations, error -71 [ 1445.960218][ T5879] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1445.989617][ T5872] usb 3-1: device descriptor read/64, error -71 [ 1446.000476][ T5923] usb usb6-port1: unable to enumerate USB device [ 1446.102940][T27190] ip6tnl1: entered allmulticast mode [ 1446.111906][T27190] netlink: 'syz.7.5638': attribute type 1 has an invalid length. [ 1446.129274][ T5879] usb 1-1: Using ep0 maxpacket: 8 [ 1446.147103][ T5879] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1446.160097][ T5879] usb 1-1: config 0 has no interface number 0 [ 1446.175936][ T5879] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1446.189005][ T5879] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1446.201791][ T5879] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1446.217939][ T5879] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1446.231630][ T5879] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1446.239830][ T5872] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1446.241034][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.262084][ T5879] usb 1-1: config 0 descriptor?? [ 1446.291806][ T5879] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1446.409051][ T5872] usb 3-1: device descriptor read/64, error -71 [ 1446.600389][ T5923] usb 1-1: USB disconnect, device number 106 [ 1446.640998][ T5872] usb usb3-port1: attempt power cycle [ 1446.653636][ T5923] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1446.778516][T27201] tipc: Failed to remove unknown binding: 66,1,1/0:2078746944/2078746946 [ 1446.793021][T27201] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5639'. [ 1446.802177][T27201] netlink: 260 bytes leftover after parsing attributes in process `syz.6.5639'. [ 1447.133490][T27198] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1447.169031][ T5872] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1447.190615][ T5872] usb 3-1: device descriptor read/8, error -71 [ 1447.370965][ T43] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1447.429163][ T5872] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1447.452560][ T5872] usb 3-1: device descriptor read/8, error -71 [ 1447.514114][T27210] [ 1447.516466][T27210] ===================================================== [ 1447.523649][T27210] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1447.531103][T27210] syzkaller #0 Tainted: G L [ 1447.537065][T27210] ----------------------------------------------------- [ 1447.543980][T27210] syz.5.5642/27210 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1447.551715][T27210] ffff8880511597f8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1447.560418][T27210] [ 1447.560418][T27210] and this task is already holding: [ 1447.567795][T27210] ffff888029758028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1447.577560][T27210] which would create a new lock dependency: [ 1447.583431][T27210] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1447.591517][T27210] [ 1447.591517][T27210] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1447.600957][T27210] (&client->buffer_lock){..-.}-{3:3} [ 1447.600989][T27210] [ 1447.600989][T27210] ... which became SOFTIRQ-irq-safe at: [ 1447.614129][T27210] lock_acquire+0xf0/0x2e0 [ 1447.618637][T27210] _raw_spin_lock+0x2e/0x40 [ 1447.623217][T27210] evdev_pass_values+0xb9/0xbd0 [ 1447.628146][T27210] evdev_events+0x1e6/0x340 [ 1447.632722][T27210] input_pass_values+0x288/0x890 [ 1447.637782][T27210] input_event_dispose+0x3e5/0x6b0 [ 1447.643147][T27210] input_inject_event+0x1dd/0x340 [ 1447.648251][T27210] led_trigger_event+0x138/0x210 [ 1447.653453][T27210] kbd_bh+0x1f3/0x300 [ 1447.657563][T27210] tasklet_action_common+0x2da/0x4b0 [ 1447.662930][T27210] handle_softirqs+0x22a/0x870 [ 1447.667780][T27210] run_ksoftirqd+0x36/0x60 [ 1447.672293][T27210] smpboot_thread_fn+0x541/0xa50 [ 1447.677338][T27210] kthread+0x388/0x470 [ 1447.681501][T27210] ret_from_fork+0x51e/0xb90 [ 1447.686190][T27210] ret_from_fork_asm+0x1a/0x30 [ 1447.691040][T27210] [ 1447.691040][T27210] to a SOFTIRQ-irq-unsafe lock: [ 1447.698080][T27210] (tasklist_lock){.+.+}-{3:3} [ 1447.698114][T27210] [ 1447.698114][T27210] ... which became SOFTIRQ-irq-unsafe at: [ 1447.710820][T27210] ... [ 1447.710831][T27210] lock_acquire+0xf0/0x2e0 [ 1447.717897][T27210] _raw_read_lock+0x36/0x50 [ 1447.722481][T27210] __do_wait+0xde/0x740 [ 1447.726714][T27210] do_wait+0x1e7/0x540 [ 1447.730871][T27210] kernel_wait+0xd6/0x1c0 [ 1447.735272][T27210] call_usermodehelper_exec_work+0xbe/0x230 [ 1447.741241][T27210] process_scheduled_works+0xb6e/0x18c0 [ 1447.746866][T27210] worker_thread+0xa53/0xfc0 [ 1447.751532][T27210] kthread+0x388/0x470 [ 1447.755808][T27210] ret_from_fork+0x51e/0xb90 [ 1447.760489][T27210] ret_from_fork_asm+0x1a/0x30 [ 1447.765435][T27210] [ 1447.765435][T27210] other info that might help us debug this: [ 1447.765435][T27210] [ 1447.775647][T27210] Chain exists of: [ 1447.775647][T27210] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 1447.775647][T27210] [ 1447.788759][T27210] Possible interrupt unsafe locking scenario: [ 1447.788759][T27210] [ 1447.797072][T27210] CPU0 CPU1 [ 1447.802512][T27210] ---- ---- [ 1447.807860][T27210] lock(tasklist_lock); [ 1447.812091][T27210] local_irq_disable(); [ 1447.818831][T27210] lock(&client->buffer_lock); [ 1447.826193][T27210] lock(&new->fa_lock); [ 1447.832946][T27210] [ 1447.836397][T27210] lock(&client->buffer_lock); [ 1447.841506][T27210] [ 1447.841506][T27210] *** DEADLOCK *** [ 1447.841506][T27210] [ 1447.849647][T27210] 7 locks held by syz.5.5642/27210: [ 1447.854837][T27210] #0: ffff88802bfbf118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 1447.863977][T27210] #1: ffff88801ef61230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1447.874077][T27210] #2: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1447.883731][T27210] #3: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1447.893292][T27210] #4: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1447.902416][T27210] #5: ffff888029758028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1447.912591][T27210] #6: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1447.921629][T27210] [ 1447.921629][T27210] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1447.932019][T27210] -> (&client->buffer_lock){..-.}-{3:3} { [ 1447.937785][T27210] IN-SOFTIRQ-W at: [ 1447.941747][T27210] lock_acquire+0xf0/0x2e0 [ 1447.947895][T27210] _raw_spin_lock+0x2e/0x40 [ 1447.954036][T27210] evdev_pass_values+0xb9/0xbd0 [ 1447.960524][T27210] evdev_events+0x1e6/0x340 [ 1447.966665][T27210] input_pass_values+0x288/0x890 [ 1447.973236][T27210] input_event_dispose+0x3e5/0x6b0 [ 1447.979988][T27210] input_inject_event+0x1dd/0x340 [ 1447.986656][T27210] led_trigger_event+0x138/0x210 [ 1447.993232][T27210] kbd_bh+0x1f3/0x300 [ 1447.998855][T27210] tasklet_action_common+0x2da/0x4b0 [ 1448.005868][T27210] handle_softirqs+0x22a/0x870 [ 1448.012271][T27210] run_ksoftirqd+0x36/0x60 [ 1448.018332][T27210] smpboot_thread_fn+0x541/0xa50 [ 1448.025001][T27210] kthread+0x388/0x470 [ 1448.030704][T27210] ret_from_fork+0x51e/0xb90 [ 1448.036935][T27210] ret_from_fork_asm+0x1a/0x30 [ 1448.043349][T27210] INITIAL USE at: [ 1448.047225][T27210] lock_acquire+0xf0/0x2e0 [ 1448.053192][T27210] _raw_spin_lock+0x2e/0x40 [ 1448.059243][T27210] evdev_pass_values+0xb9/0xbd0 [ 1448.065642][T27210] evdev_events+0x1e6/0x340 [ 1448.071689][T27210] input_pass_values+0x288/0x890 [ 1448.078183][T27210] input_event_dispose+0x330/0x6b0 [ 1448.084867][T27210] input_inject_event+0x1dd/0x340 [ 1448.091472][T27210] evdev_write+0x325/0x4c0 [ 1448.097543][T27210] vfs_write+0x29a/0xb90 [ 1448.103342][T27210] ksys_write+0x150/0x270 [ 1448.109251][T27210] do_syscall_64+0x14d/0xf80 [ 1448.115486][T27210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.122932][T27210] } [ 1448.125425][T27210] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1448.133616][T27210] [ 1448.133616][T27210] the dependencies between the lock to be acquired [ 1448.133625][T27210] and SOFTIRQ-irq-unsafe lock: [ 1448.147124][T27210] -> (tasklist_lock){.+.+}-{3:3} { [ 1448.152426][T27210] HARDIRQ-ON-R at: [ 1448.156568][T27210] lock_acquire+0xf0/0x2e0 [ 1448.162980][T27210] _raw_read_lock+0x36/0x50 [ 1448.169475][T27210] __do_wait+0xde/0x740 [ 1448.175627][T27210] do_wait+0x1e7/0x540 [ 1448.181686][T27210] kernel_wait+0xd6/0x1c0 [ 1448.188004][T27210] call_usermodehelper_exec_work+0xbe/0x230 [ 1448.195883][T27210] process_scheduled_works+0xb6e/0x18c0 [ 1448.203416][T27210] worker_thread+0xa53/0xfc0 [ 1448.209993][T27210] kthread+0x388/0x470 [ 1448.216043][T27210] ret_from_fork+0x51e/0xb90 [ 1448.222622][T27210] ret_from_fork_asm+0x1a/0x30 [ 1448.229463][T27210] SOFTIRQ-ON-R at: [ 1448.233605][T27210] lock_acquire+0xf0/0x2e0 [ 1448.240007][T27210] _raw_read_lock+0x36/0x50 [ 1448.246504][T27210] __do_wait+0xde/0x740 [ 1448.252641][T27210] do_wait+0x1e7/0x540 [ 1448.258690][T27210] kernel_wait+0xd6/0x1c0 [ 1448.265027][T27210] call_usermodehelper_exec_work+0xbe/0x230 [ 1448.272926][T27210] process_scheduled_works+0xb6e/0x18c0 [ 1448.280475][T27210] worker_thread+0xa53/0xfc0 [ 1448.287060][T27210] kthread+0x388/0x470 [ 1448.293119][T27210] ret_from_fork+0x51e/0xb90 [ 1448.299698][T27210] ret_from_fork_asm+0x1a/0x30 [ 1448.306456][T27210] INITIAL USE at: [ 1448.310514][T27210] lock_acquire+0xf0/0x2e0 [ 1448.316832][T27210] _raw_write_lock_irq+0x3d/0x50 [ 1448.323669][T27210] copy_process+0x247a/0x3cd0 [ 1448.330246][T27210] kernel_clone+0x248/0x8e0 [ 1448.336653][T27210] user_mode_thread+0x110/0x180 [ 1448.343406][T27210] rest_init+0x23/0x300 [ 1448.349455][T27210] start_kernel+0x385/0x3d0 [ 1448.355946][T27210] x86_64_start_reservations+0x24/0x30 [ 1448.363830][T27210] x86_64_start_kernel+0x143/0x1c0 [ 1448.370939][T27210] common_startup_64+0x13e/0x147 [ 1448.377862][T27210] INITIAL READ USE at: [ 1448.382351][T27210] lock_acquire+0xf0/0x2e0 [ 1448.389111][T27210] _raw_read_lock+0x36/0x50 [ 1448.396250][T27210] __do_wait+0xde/0x740 [ 1448.402749][T27210] do_wait+0x1e7/0x540 [ 1448.409269][T27210] kernel_wait+0xd6/0x1c0 [ 1448.415945][T27210] call_usermodehelper_exec_work+0xbe/0x230 [ 1448.424185][T27210] process_scheduled_works+0xb6e/0x18c0 [ 1448.432072][T27210] worker_thread+0xa53/0xfc0 [ 1448.439002][T27210] kthread+0x388/0x470 [ 1448.445403][T27210] ret_from_fork+0x51e/0xb90 [ 1448.452325][T27210] ret_from_fork_asm+0x1a/0x30 [ 1448.459429][T27210] } [ 1448.462089][T27210] ... key at: [] tasklist_lock+0x18/0x40 [ 1448.470047][T27210] ... acquired at: [ 1448.474009][T27210] _raw_read_lock+0x36/0x50 [ 1448.478848][T27210] send_sigurg+0x12b/0x420 [ 1448.483426][T27210] sk_send_sigurg+0x6c/0x2e0 [ 1448.488181][T27210] queue_oob+0x42c/0x4f0 [ 1448.492580][T27210] unix_stream_sendmsg+0xcb1/0xe80 [ 1448.497859][T27210] ____sys_sendmsg+0x972/0x9f0 [ 1448.502872][T27210] ___sys_sendmsg+0x2a5/0x360 [ 1448.507783][T27210] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1448.512884][T27210] do_syscall_64+0x14d/0xf80 [ 1448.517732][T27210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.523958][T27210] [ 1448.526267][T27210] -> (&f_owner->lock){....}-{3:3} { [ 1448.531552][T27210] INITIAL USE at: [ 1448.535514][T27210] lock_acquire+0xf0/0x2e0 [ 1448.541658][T27210] _raw_write_lock_irq+0x3d/0x50 [ 1448.548322][T27210] __f_setown+0x67/0x370 [ 1448.554294][T27210] f_setown+0x23a/0x300 [ 1448.560259][T27210] do_fcntl+0x6cd/0x1a20 [ 1448.566312][T27210] __se_sys_fcntl+0xc8/0x150 [ 1448.572626][T27210] do_syscall_64+0x14d/0xf80 [ 1448.578944][T27210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.586559][T27210] INITIAL READ USE at: [ 1448.590965][T27210] lock_acquire+0xf0/0x2e0 [ 1448.597555][T27210] _raw_read_lock_irqsave+0x48/0x60 [ 1448.604923][T27210] send_sigio+0x38/0x370 [ 1448.611339][T27210] dnotify_handle_event+0x169/0x440 [ 1448.618701][T27210] fsnotify+0x1831/0x1ae0 [ 1448.625198][T27210] path_openat+0x15c2/0x3860 [ 1448.631947][T27210] do_file_open+0x23e/0x4a0 [ 1448.638604][T27210] do_sys_openat2+0x113/0x200 [ 1448.645641][T27210] __x64_sys_openat+0x138/0x170 [ 1448.652719][T27210] do_syscall_64+0x14d/0xf80 [ 1448.659492][T27210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.667560][T27210] } [ 1448.670219][T27210] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1448.679154][T27210] ... acquired at: [ 1448.683040][T27210] _raw_read_lock_irqsave+0x48/0x60 [ 1448.688418][T27210] send_sigio+0x38/0x370 [ 1448.692833][T27210] kill_fasync+0x24d/0x4d0 [ 1448.697429][T27210] lease_break_callback+0x26/0x30 [ 1448.702635][T27210] __break_lease+0x81c/0x1e80 [ 1448.707492][T27210] try_break_deleg+0xfc/0x180 [ 1448.712337][T27210] vfs_link+0x481/0x6e0 [ 1448.716660][T27210] filename_linkat+0x273/0x600 [ 1448.721596][T27210] __se_sys_link+0x55/0x2c0 [ 1448.726276][T27210] do_syscall_64+0x14d/0xf80 [ 1448.731036][T27210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.737174][T27210] [ 1448.739479][T27210] -> (&new->fa_lock){....}-{3:3} { [ 1448.744591][T27210] INITIAL USE at: [ 1448.748467][T27210] lock_acquire+0xf0/0x2e0 [ 1448.754438][T27210] _raw_write_lock_irq+0x3d/0x50 [ 1448.760927][T27210] fasync_remove_entry+0xf1/0x1c0 [ 1448.767502][T27210] lease_modify+0x4f7/0x6c0 [ 1448.773560][T27210] locks_remove_file+0x5f0/0xf70 [ 1448.780155][T27210] __fput+0x3ae/0xa70 [ 1448.785835][T27210] task_work_run+0x1d9/0x270 [ 1448.791990][T27210] exit_to_user_mode_loop+0xed/0x480 [ 1448.798928][T27210] do_syscall_64+0x32d/0xf80 [ 1448.805186][T27210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.812649][T27210] INITIAL READ USE at: [ 1448.816978][T27210] lock_acquire+0xf0/0x2e0 [ 1448.823601][T27210] _raw_read_lock_irqsave+0x48/0x60 [ 1448.830801][T27210] kill_fasync+0x199/0x4d0 [ 1448.837221][T27210] lease_break_callback+0x26/0x30 [ 1448.844255][T27210] __break_lease+0x81c/0x1e80 [ 1448.850948][T27210] try_break_deleg+0xfc/0x180 [ 1448.857657][T27210] vfs_link+0x481/0x6e0 [ 1448.863829][T27210] filename_linkat+0x273/0x600 [ 1448.870720][T27210] __se_sys_link+0x55/0x2c0 [ 1448.877225][T27210] do_syscall_64+0x14d/0xf80 [ 1448.883821][T27210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.891795][T27210] } [ 1448.894298][T27210] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1448.902989][T27210] ... acquired at: [ 1448.906796][T27210] _raw_read_lock_irqsave+0x48/0x60 [ 1448.912167][T27210] kill_fasync+0x199/0x4d0 [ 1448.916758][T27210] evdev_pass_values+0x627/0xbd0 [ 1448.922040][T27210] evdev_events+0x1e6/0x340 [ 1448.926720][T27210] input_pass_values+0x288/0x890 [ 1448.931822][T27210] input_event_dispose+0x330/0x6b0 [ 1448.937118][T27210] input_inject_event+0x1dd/0x340 [ 1448.942454][T27210] evdev_write+0x325/0x4c0 [ 1448.947036][T27210] vfs_write+0x29a/0xb90 [ 1448.951442][T27210] ksys_write+0x150/0x270 [ 1448.955937][T27210] do_syscall_64+0x14d/0xf80 [ 1448.960742][T27210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.967517][T27210] [ 1448.969828][T27210] [ 1448.969828][T27210] stack backtrace: [ 1448.975732][T27210] CPU: 1 UID: 0 PID: 27210 Comm: syz.5.5642 Tainted: G L syzkaller #0 PREEMPT(full) [ 1448.975758][T27210] Tainted: [L]=SOFTLOCKUP [ 1448.975764][T27210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1448.975777][T27210] Call Trace: [ 1448.975786][T27210] [ 1448.975794][T27210] dump_stack_lvl+0xe8/0x150 [ 1448.975819][T27210] __lock_acquire+0x2a94/0x2cf0 [ 1448.975848][T27210] lock_acquire+0xf0/0x2e0 [ 1448.975866][T27210] ? kill_fasync+0x199/0x4d0 [ 1448.975887][T27210] _raw_read_lock_irqsave+0x48/0x60 [ 1448.975923][T27210] ? kill_fasync+0x199/0x4d0 [ 1448.975940][T27210] kill_fasync+0x199/0x4d0 [ 1448.975956][T27210] ? kill_fasync+0x53/0x4d0 [ 1448.975973][T27210] evdev_pass_values+0x627/0xbd0 [ 1448.975993][T27210] ? evdev_pass_values+0x661/0xbd0 [ 1448.976015][T27210] evdev_events+0x1e6/0x340 [ 1448.976030][T27210] ? evdev_events+0x79/0x340 [ 1448.976046][T27210] ? input_pass_values+0x8d/0x890 [ 1448.976060][T27210] input_pass_values+0x288/0x890 [ 1448.976077][T27210] ? input_handle_event+0x70c/0xf30 [ 1448.976098][T27210] input_event_dispose+0x330/0x6b0 [ 1448.976120][T27210] input_inject_event+0x1dd/0x340 [ 1448.976141][T27210] ? input_inject_event+0xb6/0x340 [ 1448.976163][T27210] evdev_write+0x325/0x4c0 [ 1448.976180][T27210] ? __pfx_evdev_write+0x10/0x10 [ 1448.976197][T27210] ? bpf_lsm_file_permission+0x9/0x20 [ 1448.976217][T27210] ? security_file_permission+0x75/0x260 [ 1448.976242][T27210] ? rw_verify_area+0x255/0x4d0 [ 1448.976260][T27210] ? __pfx_evdev_write+0x10/0x10 [ 1448.976276][T27210] vfs_write+0x29a/0xb90 [ 1448.976295][T27210] ? __pfx_vfs_write+0x10/0x10 [ 1448.976311][T27210] ? __fget_files+0x2a/0x420 [ 1448.976325][T27210] ? __fget_files+0x2a/0x420 [ 1448.976339][T27210] ? __fget_files+0x3a0/0x420 [ 1448.976352][T27210] ? __fget_files+0x2a/0x420 [ 1448.976371][T27210] ksys_write+0x150/0x270 [ 1448.976392][T27210] ? __pfx_ksys_write+0x10/0x10 [ 1448.976411][T27210] do_syscall_64+0x14d/0xf80 [ 1448.976432][T27210] ? trace_irq_disable+0x3b/0x150 [ 1448.976446][T27210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.976467][T27210] ? clear_bhb_loop+0x40/0x90 [ 1448.976484][T27210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.976500][T27210] RIP: 0033:0x7fc7f079c819 [ 1448.976516][T27210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1448.976530][T27210] RSP: 002b:00007fc7f1587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1448.976548][T27210] RAX: ffffffffffffffda RBX: 00007fc7f0a16180 RCX: 00007fc7f079c819 [ 1448.976560][T27210] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000007 [ 1448.976571][T27210] RBP: 00007fc7f0832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1448.976582][T27210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1448.976591][T27210] R13: 00007fc7f0a16218 R14: 00007fc7f0a16180 R15: 00007fc7f0b3fa48 [ 1448.976607][T27210] [ 1449.294563][ T5872] usb usb3-port1: unable to enumerate USB device [ 1449.341234][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1449.341275][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1449.341317][ T43] usb 1-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 1449.341339][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.409591][ T43] usb 1-1: config 0 descriptor?? [ 1449.417355][ T43] option 1-1:0.0: GSM modem (1-port) converter detected [ 1449.618469][ T43] usb 1-1: USB disconnect, device number 107 [ 1449.625420][ T43] option 1-1:0.0: device disconnected