last executing test programs: 15m24.408871513s ago: executing program 32 (id=2332): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2, 0x3, 0xf8) sendto$unix(r2, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008045}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)={'#! ', './cgroup'}, 0xc) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) unshare(0x6020400) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) unshare(0x22020600) ioctl$TIOCGPTPEER(r5, 0x5441, 0x2076) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0xd4, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x3a}}, r6, 0x40099d}}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0)}], 0x3) 14m52.117696051s ago: executing program 33 (id=2422): syz_open_dev$dri(&(0x7f0000000080), 0xf6, 0x101200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000380), 0xfffffffffffffffa, 0x1c400) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0xd, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x8800) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0xc0, 0x1, 0x4, 0x0, 0x9}) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405668, &(0x7f0000000180)={0x5, 0x1, 0x1, "0000087aba10fdffff15675fa4751bc53051a300", 0x34565559}) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x10010, 0xffffffffffffffff, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r6 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r6, r4, 0x14, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) setsockopt$packet_int(r6, 0x107, 0x3, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x140000) getpid() syz_io_uring_setup(0x400cac, &(0x7f0000000200)={0x0, 0xb612, 0x4000, 0x6, 0x4008032c}, &(0x7f00000002c0), &(0x7f00000000c0), &(0x7f0000000000)) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 13m19.778152117s ago: executing program 34 (id=2734): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0xa0000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2002, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket(0x840000000002, 0x3, 0x100) socket(0x9, 0xa, 0xfffffff9) socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0xfffe) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) 12m13.531083334s ago: executing program 35 (id=2907): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x800000000001e8, 0x12) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, 0x0, &(0x7f0000000140)) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 11m8.696373504s ago: executing program 36 (id=3105): openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3942, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x88, 0x4, 0x3, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x54, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x20, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0x80000c74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x3fd, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x5, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0xfe, 0x4, 0x40, 0x9, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x3042c26b, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffff0000, 0x7, 0x5, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x4, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7ffffffb, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0x2, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x80000004, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x5, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x8, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x100, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0xe, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0xb, 0x4, 0x8000005, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x0, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x5, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb8, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0b0, 0x9, 0x6, 0x2, 0x80, 0x9, 0x1, 0x81, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0x9, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc488, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0x10, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x0, 0x7f, 0x6, 0x8, 0x40, 0x2, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x2, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa958, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x6, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x5, 0xffff8000, 0xe0, 0xfffffffb, 0x85, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x101, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x8, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x1, 0x2, 0xfb4, 0xbf9, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x8, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0x8, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x10001, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0xffffffff, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0x7, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0xb, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0x65, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x7, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) close(r2) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0], 0x2c2) socket$netlink(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_ENDIAN(0x13, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = fsopen(&(0x7f0000000300)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x6, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) socket$nl_netfilter(0x10, 0x3, 0xc) 9m52.027202067s ago: executing program 37 (id=3321): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002080), 0x284e83, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote, 0x0, 0x0, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r9 = dup3(r8, r6, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002e00090027bd70b8030000000400000004001d0004001f"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) read$FUSE(r9, &(0x7f0000000040)={0x2020}, 0x2020) bind$inet6(r0, 0x0, 0x0) 9m16.258854665s ago: executing program 38 (id=3395): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000002080), 0x284e83, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote, 0x0, 0x0, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002e00090027bd70b8030000000400000004001d0004001f"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) bind$inet6(r0, 0x0, 0x0) 9m6.938189773s ago: executing program 39 (id=3413): syz_open_dev$dri(&(0x7f0000000080), 0xf6, 0x101200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000380), 0xfffffffffffffffa, 0x1c400) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0xd, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x8800) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0xc0, 0x1, 0x4, 0x0, 0x9}) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405668, &(0x7f0000000180)={0x5, 0x1, 0x1, "0000087aba10fdffff15675fa4751bc53051a300", 0x34565559}) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x10010, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x3, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x140000) getpid() syz_io_uring_setup(0x400cac, &(0x7f0000000200)={0x0, 0xb612, 0x4000, 0x6, 0x4008032c}, &(0x7f00000002c0), &(0x7f00000000c0), &(0x7f0000000000)) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) close(0xffffffffffffffff) 7m3.125038426s ago: executing program 40 (id=3593): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x800) ioctl$I2C_TIMEOUT(r1, 0x702, 0xfffffffffffff95f) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r8, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r8}}, 0x1c) socket(0x840000000002, 0x3, 0xff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) ptrace(0x10, r0) ptrace$peekuser(0x3, r0, 0x32e3) 6m38.805717209s ago: executing program 8 (id=3674): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004cb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000067c000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000778000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ba1000/0x1000)=nil, &(0x7f0000eb4000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000dc1000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) 6m37.314678635s ago: executing program 8 (id=3678): socket$nl_route(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000), 0x80000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) 6m31.49580463s ago: executing program 1 (id=3692): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0x6, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m30.985154377s ago: executing program 1 (id=3697): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x30, 0x28044854}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f0000000200)=""/61, 0x3d}], 0x2}, 0x151) 6m29.959801344s ago: executing program 8 (id=3698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x7, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r2, 0x407, 0x0) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x2000000) socket$nl_route(0x10, 0x3, 0x0) 6m29.676467904s ago: executing program 1 (id=3702): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x3001411, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) 6m27.622738083s ago: executing program 1 (id=3706): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5919308017321d06, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000300000000000000f7ffffff18110000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000ad7992e48cc7c46c5b170bc03af44d7c6315e5a229ee35e40b2a569fd8023e58fcb8f8b19ab34ad0e06e28430cc1931964713ff69e946e426f741182fc9d196dfdbaed6c8aa446daa46f67a0d9e9d1ab7d69215ee5f5080f1c6df215a0ffe17ff4045301f42fc5eca64c75d486b0c95d297e01d3a6fb582ee9be79a798dbb53da635c67427eb68ff15a90f613ae2cc9dbc1fe8c5d3d42c6a7d111c0a9edf6ff794bf45d5c9"], &(0x7f0000000440)='syzkaller\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001380)={0x9, {"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", 0x1000}}, 0x1006) 6m23.60327426s ago: executing program 1 (id=3718): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0ccb84000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000100000000"], 0x48) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000013c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x29, 0x2, 0x40, "100000df00000000000000000000000000000000001000", 0x30314752}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ptrace$peek(0x7, 0x0, &(0x7f0000000280)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) r7 = socket(0x2, 0x80805, 0x0) flistxattr(r7, &(0x7f0000000240)=""/53, 0x35) sendmmsg$inet(r7, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000380), &(0x7f00000000c0)=0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a01010000000000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r3, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}}, 0x4084) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 6m23.175572706s ago: executing program 8 (id=3719): openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x1, 0xe59fe33) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xda53, 0x0, 0x3, 0xffffdf00, 0x5}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0x2, 0x4, 0x8}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x88}}, 0x0) 6m21.226000394s ago: executing program 1 (id=3723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff82}, {0x0, 0x3, 0x78, 0x4, 0x6}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r2, 0x4003e}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="a2", 0x1}], 0x1}, 0x4) 6m20.416046948s ago: executing program 8 (id=3725): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, 0x0) 6m17.3604941s ago: executing program 8 (id=3732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 6m6.022861101s ago: executing program 41 (id=3723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff82}, {0x0, 0x3, 0x78, 0x4, 0x6}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r2, 0x4003e}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="a2", 0x1}], 0x1}, 0x4) 6m1.876836047s ago: executing program 42 (id=3732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 5m7.337583505s ago: executing program 5 (id=3884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) eventfd2(0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)=0x7) read$dsp(r2, &(0x7f0000000280)=""/79, 0x4f) 5m5.171119922s ago: executing program 5 (id=3888): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x5, 0xe, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005040)=[{&(0x7f00000001c0)="06f2da4cc04d8670c1f0dcc422b856d751a2e787a1c36180a266ae4c4a0a4c690b65bde00f84cc89feb2ec3cf512ca83dc60ad19dcb62cb8eac74990d9feb2bf3085592cd871918bb814a81ee86077fd1e63850498cb77b8bd532dd3f30022cd9231ae0db79499f43e08a0dcb4d6f6091044a9e424f2e8cef7e584dd6e2fed55117a1209c2920ea8d639f2342a62e31b9f9e1f617c64baaf68440c940ebde60272840941e79839bcbf05b79f1d1f", 0xae}, {&(0x7f0000001300)="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", 0x6ff}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) 4m58.671738044s ago: executing program 5 (id=3902): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x3001411, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) 4m58.313675159s ago: executing program 5 (id=3903): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f0000000340)=[{0x6, 0x4a11, 0x0, 0x0}], 0x1}) 4m55.202794131s ago: executing program 5 (id=3910): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{0x3}, 0x3, 0x2, 0x0, 0x0, "ee0d702fac00008a"}, 0x10}, 0x1, 0x0, 0x0, 0x801}, 0xd209f6d83486bb56) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000002500)=""/4096, 0x1000}, {0x0}], 0x2}, 0x101}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) 4m51.435913209s ago: executing program 5 (id=3917): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x800) ioctl$I2C_TIMEOUT(r0, 0x702, 0xfffffffffffff95f) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r9, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r9}}, 0x1c) socket(0x840000000002, 0x3, 0xff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) 4m35.638848148s ago: executing program 43 (id=3917): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x800) ioctl$I2C_TIMEOUT(r0, 0x702, 0xfffffffffffff95f) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r9, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r9}}, 0x1c) socket(0x840000000002, 0x3, 0xff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) 2m37.216487877s ago: executing program 2 (id=4155): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) open(0x0, 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) fsetxattr(0xffffffffffffffff, &(0x7f0000000240)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='user.incfs.id\x00') r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, r3, 0x2, 0x0) close(r5) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x1000) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) close(0x3) 2m33.740345568s ago: executing program 2 (id=4165): r0 = io_uring_setup(0x4822, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x3, 0xfb}) socket$inet6_sctp(0xa, 0x801, 0x84) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x80002, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m33.10603335s ago: executing program 2 (id=4167): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000000) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 2m31.507964427s ago: executing program 2 (id=4169): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000440)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa69", 0x33}], 0x2, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x30, 0x28044854}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f0000000200)=""/61, 0x3d}], 0x2}, 0x151) 2m31.136168714s ago: executing program 2 (id=4171): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m30.230161129s ago: executing program 2 (id=4174): ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, 0x0) prlimit64(0xffffffffffffffff, 0xe, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r5, 0x0, 0xff00) memfd_create(&(0x7f0000000780)='\x03 Ad\xff\xda\x00\x01m% \xc2I\xb9\xccC\xe6\x1f\xc7\xba\xfbC\xef\xc2\x14;.\xd3L\xd8\x95R\x9f\xbb4)A\xf6\xa3\x06\xd1\xe6\xefq4\x9b\x10\xfc{\x12sD\x98\xc6\x13T\xb8\x11\x92\aD\xb1\xb3z\xeb\x94n\xfb8~\x1b\x85\xfc\xb5L5y\xae\xcc\x9e-\x98\xdf\xd9\x8c\x8a\xf7\xfc\xe8\xb1\vv\xd4\xcb~d[<%i(\xa1<\\\x10\xc0\xa3\xdd\x9b2&{}(\xb4(W\xe4i\xf9^\xaa\x93C\x8c-|c\xfeEe\x9c\xcc1:gx\x8d$\xc2\x00\xf9\xdf<\x00\x00\x00\x00<\x8aU\xd6S\\\xd0C\xa1\x0e\xab\xdd\xa3\xa4\x933\xab\x04\xcf\xa9\x1e\xa1\xbc\x1e\xb9x9\xc8\x90\xf3Q\xb3\xdb\xf8\nu\xcf\xbe\xeeY\x9a)\x90\x84\xe2C\xf6!\xe8b\\;8S\xee\xaa\xe1d\xe0\xc6b\xc2L\xea.\x12\xf3hh\xe8z\xdc\xe4\x14\xd2\'\x00\x00\x00\x00', 0x2) unshare(0x2c060000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x1f, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x21, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000100)={0x40000000, 0x100, "1e126781ca7f64c0cdd68849d8e85f0130b1fb723f0eb0064ba12fd500025269", 0x5, 0xfffffffffffffffb, 0x4a10875b, 0x0, 0x4, 0xf, 0x8002, 0x7, [0x0, 0x400, 0x7, 0x936d]}) pread64(r0, &(0x7f0000000380)=""/140, 0x8c, 0x200000000000000) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) 2m15.160507128s ago: executing program 44 (id=4174): ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, 0x0) prlimit64(0xffffffffffffffff, 0xe, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r5, 0x0, 0xff00) memfd_create(&(0x7f0000000780)='\x03 Ad\xff\xda\x00\x01m% \xc2I\xb9\xccC\xe6\x1f\xc7\xba\xfbC\xef\xc2\x14;.\xd3L\xd8\x95R\x9f\xbb4)A\xf6\xa3\x06\xd1\xe6\xefq4\x9b\x10\xfc{\x12sD\x98\xc6\x13T\xb8\x11\x92\aD\xb1\xb3z\xeb\x94n\xfb8~\x1b\x85\xfc\xb5L5y\xae\xcc\x9e-\x98\xdf\xd9\x8c\x8a\xf7\xfc\xe8\xb1\vv\xd4\xcb~d[<%i(\xa1<\\\x10\xc0\xa3\xdd\x9b2&{}(\xb4(W\xe4i\xf9^\xaa\x93C\x8c-|c\xfeEe\x9c\xcc1:gx\x8d$\xc2\x00\xf9\xdf<\x00\x00\x00\x00<\x8aU\xd6S\\\xd0C\xa1\x0e\xab\xdd\xa3\xa4\x933\xab\x04\xcf\xa9\x1e\xa1\xbc\x1e\xb9x9\xc8\x90\xf3Q\xb3\xdb\xf8\nu\xcf\xbe\xeeY\x9a)\x90\x84\xe2C\xf6!\xe8b\\;8S\xee\xaa\xe1d\xe0\xc6b\xc2L\xea.\x12\xf3hh\xe8z\xdc\xe4\x14\xd2\'\x00\x00\x00\x00', 0x2) unshare(0x2c060000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x1f, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x21, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000100)={0x40000000, 0x100, "1e126781ca7f64c0cdd68849d8e85f0130b1fb723f0eb0064ba12fd500025269", 0x5, 0xfffffffffffffffb, 0x4a10875b, 0x0, 0x4, 0xf, 0x8002, 0x7, [0x0, 0x400, 0x7, 0x936d]}) pread64(r0, &(0x7f0000000380)=""/140, 0x8c, 0x200000000000000) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) 21.721702898s ago: executing program 0 (id=4489): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, 0x0) 18.48695034s ago: executing program 0 (id=4500): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_team\x00', 0x1000}) socket$unix(0x1, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffdcd}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000200)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a497090000009b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e80c00000000000000e9c6ad7d2a8103ef2f4f93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef5911cee26d7b48241847bf9e343ef4674c45e2a085060f1119b0527fe5ff48fea9860fe68aa12fbc2e4212fade0ce1bbe83cd44a1f4bbe", 0xed}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r4, 0x0, 0x0) 13.936750264s ago: executing program 7 (id=4506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x40000006, 0x3, 0x1, {0x1, 0x5, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x40003ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080)=0x2, 0x7f03) 13.07622705s ago: executing program 4 (id=4507): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0018004500001c0064020000029078ac1eff01e000000116009078e0000002d3581e87a383a35ea71df4959f75cdbb6364a557fc1384e80626ded137c9f67ee7a2cccad04caac1a458967646cb4ffdccc8570de4d4d50b710705b79e9e26f863"], 0x0) syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc07000259610505"], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, 0x0, &(0x7f00000001c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ppoll(&(0x7f0000000140)=[{r2, 0x283}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000080)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x18) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000140)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r4, 0x0, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000200)={r4, r5, r7, 0x80000003, 0x1000a2a, 0xfffffffc, 0x0, 0x200, 0x7, 0xc, 0x2000000, 0x31e}) r8 = ioctl$TIOCGPTPEER(r2, 0x5441, 0xb3d) ioctl$TCXONC(r8, 0x540a, 0x2) socketpair$unix(0x1, 0x59b97f8f8940e4cb, 0x0, &(0x7f0000000200)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r9) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10], 0x5c}, 0x1, 0x6c}, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r12, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r13, 0x0, 0x0, 0x0, 0x0, 0x0, r13}]) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000015000100fdffffff0000000802180000", @ANYRES32=r14, @ANYBLOB="140003007665"], 0x2c}}, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xffffffffffff056d, 0x4000000000008a, 0xff, 0x2000000000009, 0x7, 0x43, 0x52e6ac5d, 0x2000ffffffff, 0x9655, 0xffdffffffffffffe, 0xa, 0x9, 0x5, 0x7, 0x80100000000000, 0xcc3, 0x1, 0x85, 0x17, 0x3, 0x100000000, 0x8, 0x200000005, 0xfffffffffffffffe, 0x3, 0xa}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) 13.033487882s ago: executing program 3 (id=4508): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000700)="ebe3a0e9796cfd0600e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730c5af785f0b6acb07f73e6b493e177d0f41ea9f444c9b1c759e26c0a0fcb0fc7811b38c9f091a22dfbb6cea5b13d08c3b788ee1eeb9d5262bd5797e23f4868a3083f4c7bfa5b81c2e33a2b0b0e0a7d1eae3ad4ded905ec7e8632a505d6dbbb25bf4b8477920d42ac30a4358b5fbbba7fb8bc83456b5ce33a9e65a171f57dbb97d44090fd6622d8d62dc4649ece8b2", 0xda}, {&(0x7f0000000300)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8c0795a70f158c443", 0x67}], 0x3, &(0x7f0000000440)=[@assoc={0x18, 0x117, 0x4, 0x3}], 0x18, 0x20040890}], 0x1, 0x20000090) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 12.291101505s ago: executing program 3 (id=4509): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x5, 0x6, 0x5, 0x70bd2c, 0x25dfdbfe, {0x14, 0x0, 0xc2a4}, [@typed={0x14, 0x68, 0x0, 0x0, @ipv6=@local}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x800, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000000)=[@register_looper, @register_looper, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x3}], 0xf26, 0x0, &(0x7f00000014c0)="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"}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640), 0x0, 0x0, 0x0, 0x1f000801}, 0x4040844) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f00000003c0)="dd8a5acd4817d8d1adb0a637df115f9bc8af7e137ffcb12d153b8e4aca54cb8069e388a92fe6b1d3998797ff80cd4ef4d0fa03a43012cd68759ca8922f239e095bdcb9ba3616192f8b58205b5f8736e5bda03ba9b9c8813cc37600002a5868c3cff065e0467619", 0x67}, {0x0}, {&(0x7f0000000640)="5615dd7d4f587b7f415c62f3fd04906c0e0d687ffa6959ce52b9aecff9bf33c9cf390b600b79f124fc6631f7bcf0cb812b355fcb1bab05516b029823b82866043d8c858fb45a9b4fa88856727b3f829b28020b20f5332e03cd10d534891198535f2c2feee5d2dccc9bad8cd112dad1bfc89e081e96c7597774c2da5a6846a7cdba423cf026d9002857051b998e9e5527ab804d577b616917dfa8c77d9d9d661bc456acc71fae37bb679e256832cbb9e3a850d0c807465dc7be5415bdbcf0000fc221cd06c4ffa6dc95d1ff02e8", 0xcd}], 0x3}}, {{0x0, 0x0, &(0x7f0000000900)}}, {{&(0x7f0000000580)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000003640)=[{&(0x7f0000002400)="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", 0x1000}, {&(0x7f0000003400)="387a2bdc95dbcb72069213d3d11cda1bf6aabe65fc0e0196e5c083cce6107483c6833bdde3216ab342c361ac907207bf3d000d80ec2985a84d6d8022936680eca269396929188a094c0eff4e04cf6dc8340389221311fcd3b401dd47bbe267989dbd3815db1e290e57422380a6a94e75a9ed2a4e704d6923c4523334af1eb3ed8ff989a91e4d05707015cb7bdfa4ba0d1243301e42b0e027813c480270f1fbfbfcae60c08a3fac65df4d982eefa9f9c89831671541c0f5c7ca0ea0fe23fb1ccf8c1e378196fea6e65cb018363f4abc922f19685759", 0xd5}, {&(0x7f0000003500)="1739886e66d47ce5b7ab017b4eb8f0e0651ebc4e35ce3e160ebca1ef0a446e71a9159322ec6c8acc3a607f883d11184f4f592c7454611217fb62141222d20c3da2893097231b100afe2243a0fd3892a090c77fd9a832111629bacda2051e23a57b982affe8c054282ad7d2c791185e1b0eea", 0x72}, {&(0x7f0000003580)="2cdad85b8d344328e31524f6ced984f1272d03984197e654fa36653485df", 0x1e}, {&(0x7f00000035c0)="6b895b6878f84eb83ab599a7ce7ec0edea466b2c2896e1d6ddb0ee5d3ebdc9c6266f839394a0f3242e9ce459598a30db970f206dcab5a0a2347f5f264e3d9150cf6dcbc7914646d9fd3ee8a4f73de966d3b14f8377b2a144be0571273627e49cc2b74eee9f0b70508628c8939afa1219", 0x70}], 0x5}}], 0x3, 0x20008811) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2840) 12.19972012s ago: executing program 9 (id=4510): socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 12.153652292s ago: executing program 7 (id=4511): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x0, 0x0}) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x0, 0x5, 0x12, 0x110}, 0x50) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) 11.187477272s ago: executing program 3 (id=4512): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, 0x0) 9.820383412s ago: executing program 7 (id=4513): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b9000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000000780)=[{0x9, 0x5a00, 0x59, &(0x7f0000000400)="e4826e0128f62b463e7827aaea454191124ed25ab5b3a1ffb55afdedc6dbe76606ae733ac2f020498e50a6b1dc625470c1e1466de02d9f3c8901d30544abd14e4a2fa2cad486c551d3bdbfe2afb9aacf045f63f3ecca26a235"}], 0x1}) 9.795148247s ago: executing program 9 (id=4514): socket$nl_generic(0x10, 0x3, 0x10) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001680)={0x1d0, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x54, 0x3, "74d9656f5902e36fd6e61e4cb14e072715c90b084ddb907c59329793e47d7bd2853ad4b4a6247ff4728a313a541745d93755c863dd2391264134d30bd889a3a23d5139ad1f5e1f2724b0124fca7a9bd4"}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf71}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf78}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x18000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x37695dc9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}]}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20000800}, 0x40010) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB], 0x18, 0x20040040}}], 0x1, 0x4040) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39000, 0x0) 8.599479986s ago: executing program 9 (id=4515): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x208802, 0x0) close(r7) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.536805904s ago: executing program 6 (id=4516): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x3, 0xf8) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_create1(0x80000) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x9295, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) pipe2(&(0x7f0000000000), 0x880) 8.313934138s ago: executing program 0 (id=4517): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) epoll_create1(0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000), 0x80000) syz_usb_connect(0x3, 0x36, 0x0, 0x0) 8.311704276s ago: executing program 4 (id=4518): r0 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x40000006, 0x3, 0x1, {0x1, 0x5, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x40003ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080)=0x2, 0x7f03) 8.08360917s ago: executing program 4 (id=4519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000008c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000bbb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000300)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x14, 0x30, 0x25}, 0x14}}, 0x0) socket$netlink(0x10, 0x3, 0x0) listen(r4, 0x4) accept4$unix(r4, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x80000) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 7.852080582s ago: executing program 9 (id=4520): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e6400"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b000100", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000884}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x884) 7.60844655s ago: executing program 6 (id=4521): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000700)="ebe3a0e9796cfd0600e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730c5af785f0b6acb07f73e6b493e177d0f41ea9f444c9b1c759e26c0a0fcb0fc7811b38c9f091a22dfbb6cea5b13d08c3b788ee1eeb9d5262bd5797e23f4868a3083f4c7bfa5b81c2e33a2b0b0e0a7d1eae3ad4ded905ec7e8632a505d6dbbb25bf4b8477920d42ac30a4358b5fbbba7fb8bc83456b5ce33a9e65a171f57dbb97d44090fd6622d8d62dc4649ece8b2", 0xda}, {&(0x7f0000000300)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8c0795a70f158c443", 0x67}], 0x3, &(0x7f0000000440)=[@assoc={0x18, 0x117, 0x4, 0x3}], 0x18, 0x20040890}], 0x1, 0x20000090) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 7.378354043s ago: executing program 6 (id=4522): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x3, 0xf8) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_create1(0x80000) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x880) 6.841000753s ago: executing program 3 (id=4523): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0ccb84000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000100000000"], 0x48) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000013c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x29, 0x2, 0x40, "100000df00000000000000000000000000000000001000", 0x30314752}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ptrace$peek(0x7, 0x0, &(0x7f0000000280)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) r7 = socket(0x2, 0x80805, 0x0) flistxattr(r7, &(0x7f0000000240)=""/53, 0x35) sendmmsg$inet(r7, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000380), &(0x7f00000000c0)=0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r3, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}}, 0x4084) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 6.765047792s ago: executing program 9 (id=4524): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsmount(r1, 0x1, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x40000006, 0x3, 0x1, {0x1, 0x5, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x40003ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080)=0x2, 0x7f03) 5.378711352s ago: executing program 7 (id=4525): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000d9c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@local}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x68801, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000180)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @empty}}}], 0x38}, 0x0) write$binfmt_elf64(r2, 0x0, 0xffbd) 5.375658525s ago: executing program 6 (id=4526): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000480)={0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="20cfdd0000005d04d005bb4b4dc1642c1dfc1946bfb25fd5850b49de8e3aa81a0df6974fe8b85ea686a52dd02fa261d27147866588c2afc93fcd32220f700a661b2aa72f682bae80d02070180bda85ed6896851396d4d6176665639c7893267bba97f9a6c50e791ee20924ac8757516980f41d81f82b0fe478"], &(0x7f0000000300)={0x0, 0x3, 0xde, @string={0xde, 0x3, "2431daa7dc448f65496993b81809abb673b5b261eaf377172e6227c75ab1a276ac22a3c586f71cd770b83ecb0ded87b95acdf5fa641e5e2c01855a8b6f920795c87875c5085dddcedab4bd4c0314c0223b01ab4641d687c55107b88b7085fbf88e7242c86b431321bd7e1a4e5d3fadeac86cc4a7d030ec8154748be563cbdce38113aaf6f70aada4b98e057e40ba028aa848c58e4c6175f7549f3b8bd7d1a9455a2588211a07be98c07f86973e5939fa8d89723b4a68533ac19372e43ef6ecd084475fe7db236474cf523e7d7628da5b989791a322dccfcdb9800b30"}}, 0x0, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xd, 0x1, {0x22, 0x669}}}}, &(0x7f0000000980)={0x2c, &(0x7f0000000580)={0x0, 0xc, 0xe3, "ff06b79759e8eac970f17c6874af30b60f5dea268e5b74a7aa9d788ae091c71c80d09fd3b049176f33f4cdd96be18dea78e64590bd00e11a48a9295c8b51ec4b7257c9dd5b057ca347e53d659ad5a7f479b58e2af53e1f4f41694307e52f71f1355507e63a4c131c1496fa75e0ef01159e7443d5f806bc32ca1283cc6a659dfbd841852232f9cba621e29ba39cefd8dfd36132e910048b1af2d3d9c866c4512d6886471553f971914284f13e24d717f09fbc9efcee66d0d40961b6912ce30d0cef8062e9846596cf883cfc7857c36ba9a625f5b8dedf749a61718de9c866895b9b5d40"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x2}, 0x0, &(0x7f0000000740)={0x20, 0x1, 0x70, "5c65384872b72263760a08ec524da4c53a5102f87ed3a19534a67d46490fce44d8f4504d04011481290f99e10a5eeba1798bd8c50760c2a623415346797d6bc417ebdeac3f368ea57050180330b0ffde62672db920e65696b015e61fe145d77628095c8bd62eb77745fb624d1dba8113"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x7}}) r4 = gettid() r5 = socket(0x2, 0x3, 0x5) sendmmsg$unix(r5, &(0x7f0000004640)=[{{&(0x7f0000002140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000004540)=[@rights={{0xc}}], 0xc}}], 0x1, 0x800) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0xe, 0x3, 0x0, 0xff, "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", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, '\t\x00'}, 0x1}}]}, 0x14c}}, 0x4c0c8) tkill(r4, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x66, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 5.343815963s ago: executing program 3 (id=4527): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0018004500001c0064020000029078ac1eff01e000000116009078e0000002d3581e87a383a35ea71df4959f75cdbb6364a557fc1384e80626ded137c9f67ee7a2cccad04caac1a458967646cb4ffdccc8570de4d4d50b710705b79e9e26f863"], 0x0) syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc07000259610505"], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, 0x0, &(0x7f00000001c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ppoll(&(0x7f0000000140)=[{r2, 0x283}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000080)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x18) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000140)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r4, 0x0, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000200)={r4, r5, r7, 0x80000003, 0x1000a2a, 0xfffffffc, 0x0, 0x200, 0x7, 0xc, 0x2000000, 0x31e}) r8 = ioctl$TIOCGPTPEER(r2, 0x5441, 0xb3d) ioctl$TCXONC(r8, 0x540a, 0x2) socketpair$unix(0x1, 0x59b97f8f8940e4cb, 0x0, &(0x7f0000000200)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r9) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000"], 0x5c}, 0x1, 0x6c}, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r12, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r13, 0x0, 0x0, 0x0, 0x0, 0x0, r13}]) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000015000100fdffffff0000000802180000", @ANYRES32=r14, @ANYBLOB="140003007665"], 0x2c}}, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xffffffffffff056d, 0x4000000000008a, 0xff, 0x2000000000009, 0x7, 0x43, 0x52e6ac5d, 0x2000ffffffff, 0x9655, 0xffdffffffffffffe, 0xa, 0x9, 0x5, 0x7, 0x80100000000000, 0xcc3, 0x1, 0x85, 0x17, 0x3, 0x100000000, 0x8, 0x200000005, 0xfffffffffffffffe, 0x3, 0xa}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) 5.287312555s ago: executing program 4 (id=4528): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cd", 0x69}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78b", 0x3f}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)}], 0x2}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c6", 0x3}], 0x1}}], 0x3, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.028310935s ago: executing program 9 (id=4529): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_team\x00', 0x1000}) socket$unix(0x1, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffdcd}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000200)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a497090000009b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e80c00000000000000e9c6ad7d2a8103ef2f4f93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef5911cee26d7b48241847bf9e343ef4674c45e2a085060f1119b0527fe5ff48fea9860fe68aa12fbc2e4212fade0ce1bbe83cd44a1f4bbe", 0xed}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r4, 0x0, 0x0) 4.706551088s ago: executing program 0 (id=4530): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="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", 0x12c}, {&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295499abbcb388d291aa83e93db6cf9ab0954e6a8dfc19c3c1533a11d81e0382999bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09f782e1f6a996f0756604847689d37ee3047e61531a8672447cb501b2", 0xf6}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000002c0)="b176d469f40900e206a2134ae64fde53dc0e68188d001032aa45811c0070fe4e0669fcec46606f53f7b1ba5275d354803f68b717d4af8adeec8b70", 0x3b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000440)="7cc9483e0b2212b8b5d0ab5223f9b22b4b5bd5036f55b4568dbffe5662e5c329dd834e", 0x23}, {&(0x7f0000000480)="92c8794113d179ef42460476d9b70f8462246800935f34795e1aeb9f22", 0x1d}, {&(0x7f0000000880)="fb70b4c3828979137f8e899a032064ee15287cc8803ecee7b6203553b506e26c7d9d0bf628b2580352c6639716dcf515e2c2064edfd15755838f79f931eb9c11172d52729c2254544f874aae59c290a952e0ecc77fc3a0de141c9d400d745477bab96a1e7761f848770256982aca14bb8fa9c1376b86efb6b64f5659dd789559a0efb98f0ebd2742cbae22991d78c791f3c09542a7d7d72ec89d5222fefd5a8d582e5bd519708451504bf200358d6e6e2398c9063da16015b379f2904a2b18133b487cdcae86f4a2914350da88ee170fffdd97e5e02dc39c07e2174e5577", 0xde}, {&(0x7f0000000a40)="1b0e3813e98aa526313cd7628ccf3dd14f99127dc0efc5e66a5fad6b007e372ba5aaabbaabb6d4768d026ecd632dbb36eef65f51cc27d8b0dc415eeb5af46108cd4532c6ab1226eb33835b7d71d30fbac14f6af5c434", 0x56}], 0x4}}], 0x3, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.449194381s ago: executing program 4 (id=4531): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40), 0x0, 0x20000044) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 4.243139202s ago: executing program 0 (id=4532): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsmount(0xffffffffffffffff, 0x0, 0x8) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getgid() 4.008851553s ago: executing program 7 (id=4533): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x3, 0xf8) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_create1(0x80000) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x9295, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) pipe2(&(0x7f0000000000), 0x880) 3.911864112s ago: executing program 6 (id=4534): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000700)="ebe3a0e9796cfd0600e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730c5af785f0b6acb07f73e6b493e177d0f41ea9f444c9b1c759e26c0a0fcb0fc7811b38c9f091a22dfbb6cea5b13d08c3b788ee1eeb9d5262bd5797e23f4868a3083f4c7bfa5b81c2e33a2b0b0e0a7d1eae3ad4ded905ec7e8632a505d6dbbb25bf4b8477920d42ac30a4358b5fbbba7fb8bc83456b5ce33a9e65a171f57dbb97d44090fd6622d8d62dc4649ece8b2", 0xda}, {&(0x7f0000000300)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8c0795a70f158c443", 0x67}], 0x3, &(0x7f0000000440)=[@assoc={0x18, 0x117, 0x4, 0x3}], 0x18, 0x20040890}], 0x1, 0x20000090) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 974.470961ms ago: executing program 4 (id=4535): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000480)={0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)={0x0, 0x3, 0xde, @string={0xde, 0x3, "2431daa7dc448f65496993b81809abb673b5b261eaf377172e6227c75ab1a276ac22a3c586f71cd770b83ecb0ded87b95acdf5fa641e5e2c01855a8b6f920795c87875c5085dddcedab4bd4c0314c0223b01ab4641d687c55107b88b7085fbf88e7242c86b431321bd7e1a4e5d3fadeac86cc4a7d030ec8154748be563cbdce38113aaf6f70aada4b98e057e40ba028aa848c58e4c6175f7549f3b8bd7d1a9455a2588211a07be98c07f86973e5939fa8d89723b4a68533ac19372e43ef6ecd084475fe7db236474cf523e7d7628da5b989791a322dccfcdb9800b30"}}, 0x0, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xd, 0x1, {0x22, 0x669}}}}, &(0x7f0000000980)={0x2c, &(0x7f0000000580)={0x0, 0xc, 0xe3, "ff06b79759e8eac970f17c6874af30b60f5dea268e5b74a7aa9d788ae091c71c80d09fd3b049176f33f4cdd96be18dea78e64590bd00e11a48a9295c8b51ec4b7257c9dd5b057ca347e53d659ad5a7f479b58e2af53e1f4f41694307e52f71f1355507e63a4c131c1496fa75e0ef01159e7443d5f806bc32ca1283cc6a659dfbd841852232f9cba621e29ba39cefd8dfd36132e910048b1af2d3d9c866c4512d6886471553f971914284f13e24d717f09fbc9efcee66d0d40961b6912ce30d0cef8062e9846596cf883cfc7857c36ba9a625f5b8dedf749a61718de9c866895b9b5d40"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x2}, 0x0, &(0x7f0000000740)={0x20, 0x1, 0x70, "5c65384872b72263760a08ec524da4c53a5102f87ed3a19534a67d46490fce44d8f4504d04011481290f99e10a5eeba1798bd8c50760c2a623415346797d6bc417ebdeac3f368ea57050180330b0ffde62672db920e65696b015e61fe145d77628095c8bd62eb77745fb624d1dba8113"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x7}}) r4 = gettid() r5 = socket(0x2, 0x3, 0x5) sendmmsg$unix(r5, &(0x7f0000004640)=[{{&(0x7f0000002140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000004540)=[@rights={{0xc}}], 0xc}}], 0x1, 0x800) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0xe, 0x3, 0x0, 0xff, "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", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, '\t\x00'}, 0x1}}]}, 0x14c}}, 0x4c0c8) tkill(r4, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x66, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 847.200502ms ago: executing program 0 (id=4536): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, 0x0) 589.311999ms ago: executing program 6 (id=4537): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b900000000109021200"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000000780)=[{0x9, 0x5a00, 0x59, &(0x7f0000000400)="e4826e0128f62b463e7827aaea454191124ed25ab5b3a1ffb55afdedc6dbe76606ae733ac2f020498e50a6b1dc625470c1e1466de02d9f3c8901d30544abd14e4a2fa2cad486c551d3bdbfe2afb9aacf045f63f3ecca26a235"}], 0x1}) 401.346178ms ago: executing program 3 (id=4538): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fsmount(0xffffffffffffffff, 0x0, 0x8) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getgid() 0s ago: executing program 7 (id=4539): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x58, 0x30, 0x9, 0x0, 0x0, {}, [{0x44, 0x1, [@m_bpf={0x40, 0x1, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x35, 0x0, 0x5}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@deltaction={0x40, 0x31, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7a3}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002300)={0x2, &(0x7f0000000140)=[{0x30, 0x80, 0xff, 0xfffff004}, {0x6, 0x24, 0x4, 0x775a}]}, 0x10) kernel console output (not intermixed with test programs): d, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1620.820738][T14172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.831984][T14172] usb 5-1: config 0 descriptor?? [ 1621.273765][ T5869] team0 (unregistering): Port device team_slave_1 removed [ 1621.383458][ T5869] team0 (unregistering): Port device team_slave_0 removed [ 1621.452534][T14172] usbhid 5-1:0.0: can't add hid device: -71 [ 1621.458750][T14172] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1621.499510][T14172] usb 5-1: USB disconnect, device number 90 [ 1621.755103][ T5282] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1623.012176][ T1297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1623.043570][ T1297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1623.437546][T23014] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4026'. [ 1624.288634][ T1297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1624.315305][ T1297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1625.031352][T23028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4028'. [ 1625.158664][T22629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1625.312363][T23028] nbd: socks must be embedded in a SOCK_ITEM attr [ 1627.996378][T22629] 8021q: adding VLAN 0 to HW filter on device team0 [ 1628.046583][T22681] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1628.137143][T22681] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1628.194336][ T5282] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1628.201289][T22495] udevd[22495]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1628.244276][T22681] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1628.320846][T22506] udevd[22506]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1628.332286][T22681] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1628.392755][T22681] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1628.442720][T22681] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1628.446126][ T1297] bridge0: port 1(bridge_slave_0) entered blocking state [ 1628.446207][ T1297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1628.534389][T22681] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1628.569552][T22681] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1628.623186][ T6253] bridge0: port 2(bridge_slave_1) entered blocking state [ 1628.623304][ T6253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1629.634688][T22681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1629.785013][T22681] 8021q: adding VLAN 0 to HW filter on device team0 [ 1629.950112][ T1297] bridge0: port 1(bridge_slave_0) entered blocking state [ 1629.950206][ T1297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1629.984854][ T1297] bridge0: port 2(bridge_slave_1) entered blocking state [ 1629.984951][ T1297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1630.950924][T14162] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1631.151517][T14162] usb 1-1: Using ep0 maxpacket: 32 [ 1631.203201][T14162] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1631.277629][T14162] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.389037][T14162] usb 1-1: config 0 descriptor?? [ 1631.638557][T14162] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1631.707785][T14162] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1631.771708][T14162] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1631.816475][T14162] usb 1-1: media controller created [ 1631.972234][T14162] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1632.308729][T23096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1632.377862][T23096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1632.513199][T14162] az6027: usb out operation failed. (-71) [ 1632.552739][T14162] stb0899_attach: Driver disabled by Kconfig [ 1632.576906][T14162] az6027: no front-end attached [ 1632.576906][T14162] [ 1632.669785][T14162] az6027: usb out operation failed. (-71) [ 1632.697585][T23103] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4037'. [ 1632.759474][T14162] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1633.046418][T14162] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input122 [ 1633.411780][T14162] dvb-usb: schedule remote query interval to 400 msecs. [ 1633.499807][T14162] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1633.659915][T14162] usb 1-1: USB disconnect, device number 118 [ 1633.723735][T22629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1634.405350][T22629] veth0_vlan: entered promiscuous mode [ 1634.424378][T22629] veth1_vlan: entered promiscuous mode [ 1634.547073][T22629] veth0_macvtap: entered promiscuous mode [ 1634.651339][T22629] veth1_macvtap: entered promiscuous mode [ 1634.732066][T14162] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1635.016679][T22629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1635.067360][T22629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1635.131873][T11696] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.209117][T11696] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.274656][T11696] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.295611][T11696] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.578283][T11696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.370737][T11696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1636.384585][T23129] bridge0: port 3(netdevsim0) entered blocking state [ 1636.391409][T23129] bridge0: port 3(netdevsim0) entered disabled state [ 1636.398273][T23129] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1636.419864][T23129] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1636.429742][T23129] bridge0: port 3(netdevsim0) entered blocking state [ 1636.436582][T23129] bridge0: port 3(netdevsim0) entered forwarding state [ 1636.658434][T20304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.704582][T20304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1636.744805][T22681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1637.450555][T23152] loop5: detected capacity change from 0 to 7 [ 1637.519263][T23152] Dev loop5: unable to read RDB block 7 [ 1637.525213][T23152] loop5: AHDI p1 [ 1637.529217][T23152] loop5: partition table partially beyond EOD, truncated [ 1638.438113][T23158] netlink: 'syz.3.4045': attribute type 4 has an invalid length. [ 1640.676538][ T5738] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1640.810610][ T5834] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 1641.040639][ T5738] usb 7-1: Using ep0 maxpacket: 32 [ 1641.064215][ T5834] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1641.091427][ T5738] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1641.138728][ T5834] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 1641.148450][ T5738] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.189910][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.277327][ T5738] usb 7-1: config 0 descriptor?? [ 1641.289570][ T5834] usb 3-1: Product: syz [ 1641.314045][ T5834] usb 3-1: Manufacturer: syz [ 1641.440334][ T5834] usb 3-1: SerialNumber: syz [ 1641.867201][ T5834] usb 3-1: config 0 descriptor?? [ 1641.915549][ T5834] ums_eneub6250 3-1:0.0: USB Mass Storage device detected [ 1642.002876][ T5738] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1642.095151][ T5738] usb 7-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1642.202933][ T5834] usb 3-1: USB disconnect, device number 91 [ 1642.218417][ T5738] usb 7-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1642.507234][T23190] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4051'. [ 1642.559092][T23195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4051'. [ 1642.721103][T14162] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1643.140620][T14162] usb 5-1: Using ep0 maxpacket: 8 [ 1643.174784][T14162] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1643.263782][T14162] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1643.290057][T22681] veth0_vlan: entered promiscuous mode [ 1643.317372][T14162] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1643.342414][T22681] veth1_vlan: entered promiscuous mode [ 1643.360213][T14162] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1643.417633][T14162] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1643.457697][T14162] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1643.472515][T22681] veth0_macvtap: entered promiscuous mode [ 1643.482841][T14162] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.496426][T22681] veth1_macvtap: entered promiscuous mode [ 1643.594897][T22681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1643.615860][T22681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1643.617474][ T5282] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1643.622496][ T6094] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 1643.694287][ T5869] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.727594][ T5869] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.727667][ T5869] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.727717][ T5869] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.760108][T14162] usb 5-1: usb_control_msg returned -32 [ 1643.760152][T14162] usbtmc 5-1:16.0: can't read capabilities [ 1643.824054][ T6253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1643.824080][ T6253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1643.828250][ T6094] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 1643.828278][ T6094] usb 4-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1643.828297][ T6094] usb 4-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 1643.828318][ T6094] usb 4-1: config 150 has no interface number 0 [ 1643.828344][ T6094] usb 4-1: config 150 interface 204 has no altsetting 0 [ 1643.880679][ T6094] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1643.880720][ T6094] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.880747][ T6094] usb 4-1: Product: syz [ 1643.880766][ T6094] usb 4-1: Manufacturer: syz [ 1643.880794][ T6094] usb 4-1: SerialNumber: syz [ 1644.007358][ T6253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1644.007379][ T6253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1644.193638][T23211] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4057'. [ 1644.423849][T23211] nbd: socks must be embedded in a SOCK_ITEM attr [ 1644.582622][T23218] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 1644.646313][ T6094] xr_serial 4-1:150.204: skipping garbage [ 1644.692999][ T6094] usb 4-1: USB disconnect, device number 65 [ 1644.728488][T14171] usb 5-1: USB disconnect, device number 91 [ 1644.941754][T23229] loop5: detected capacity change from 0 to 7 [ 1645.614561][T23229] Dev loop5: unable to read RDB block 7 [ 1645.620262][T23229] loop5: AHDI p1 [ 1645.624021][T23229] loop5: partition table partially beyond EOD, truncated [ 1646.384859][ T5834] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1647.450505][ T5834] usb 5-1: Using ep0 maxpacket: 8 [ 1647.459828][ T5834] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1647.475745][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.431598][T14171] IPVS: starting estimator thread 0... [ 1648.460091][ T5834] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1648.466574][T14166] IPVS: starting estimator thread 0... [ 1648.475835][ T5834] pvrusb2: ********** [ 1648.486617][ T5834] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1648.528106][ T5834] pvrusb2: Important functionality might not be entirely working. [ 1648.572078][ T5834] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1648.600518][T23254] IPVS: using max 26 ests per chain, 62400 per kthread [ 1648.600546][T23255] IPVS: using max 25 ests per chain, 60000 per kthread [ 1648.609485][ T5834] pvrusb2: ********** [ 1648.664514][ T2358] pvrusb2: Invalid write control endpoint [ 1648.811815][ T2358] pvrusb2: Invalid write control endpoint [ 1648.811850][ T2358] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1648.811866][ T2358] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1648.811879][ T2358] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1648.811894][ T2358] pvrusb2: Device being rendered inoperable [ 1648.811939][ T2358] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1648.812009][ T2358] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1648.820175][ T2358] pvrusb2: Attached sub-driver cx25840 [ 1648.820200][ T2358] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1648.820215][ T2358] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1648.959340][ T6094] usb 5-1: USB disconnect, device number 92 [ 1649.012614][T23263] syz.6.4067 (23263): drop_caches: 2 [ 1649.294412][ T5282] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1650.160489][ T5862] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1650.330660][ T5862] usb 5-1: Using ep0 maxpacket: 8 [ 1650.350230][ T5862] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1650.360878][T14180] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1650.385994][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.467973][ T5862] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1650.518802][ T5862] pvrusb2: ********** [ 1650.536935][ T5862] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1650.551109][T14180] usb 1-1: Using ep0 maxpacket: 8 [ 1650.575797][T14180] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1650.586247][ T5862] pvrusb2: Important functionality might not be entirely working. [ 1650.613859][T14180] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1650.624036][ T5862] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1650.693759][T14180] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1650.715952][ T5862] pvrusb2: ********** [ 1650.743653][ T2358] pvrusb2: Invalid write control endpoint [ 1650.756523][T14180] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1650.821732][T14180] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1651.674131][T14180] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1651.685063][T14180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.827611][T23284] pvrusb2: Killing an I2C write to 9 that is too large (desired=89 limit=61) [ 1651.939528][ T6094] usb 5-1: USB disconnect, device number 93 [ 1652.095757][T14180] usb 1-1: usb_control_msg returned -32 [ 1652.099360][ T2358] pvrusb2: Invalid write control endpoint [ 1652.145461][T14180] usbtmc 1-1:16.0: can't read capabilities [ 1652.154209][ T2358] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1652.366938][ T2358] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1652.375620][ T2358] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1652.402111][ T2358] pvrusb2: Device being rendered inoperable [ 1652.426208][ T2358] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1652.468376][ T2358] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1653.259352][ T2358] pvrusb2: Attached sub-driver cx25840 [ 1653.331801][ T2358] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1653.399835][ T2358] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1653.429082][T14171] usb 1-1: USB disconnect, device number 119 [ 1653.990579][T23322] tipc: Started in network mode [ 1654.192433][T23322] tipc: Node identity aa96152ef1dd, cluster identity 4711 [ 1654.307752][T23322] tipc: Enabled bearer , priority 0 [ 1654.498743][T23327] syzkaller0: entered promiscuous mode [ 1654.510734][T23327] syzkaller0: entered allmulticast mode [ 1654.604752][T23329] syz.4.4080 (23329): drop_caches: 2 [ 1654.628878][T23332] tipc: Resetting bearer [ 1654.668535][T23319] tipc: Resetting bearer [ 1654.779701][T23319] tipc: Disabling bearer [ 1654.960722][T14180] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 1655.592178][T14180] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 1655.634639][T14180] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1655.634672][T14180] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 1655.634700][T14180] usb 3-1: config 150 has no interface number 0 [ 1655.634737][T14180] usb 3-1: config 150 interface 204 has no altsetting 0 [ 1655.655168][T14180] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1655.655203][T14180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.655229][T14180] usb 3-1: Product: syz [ 1655.655249][T14180] usb 3-1: Manufacturer: syz [ 1655.655269][T14180] usb 3-1: SerialNumber: syz [ 1655.759169][ T5282] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1657.682239][T23363] binder: 23359:23363 ioctl c0306201 2000000007c0 returned -14 [ 1657.993435][T14180] xr_serial 3-1:150.204: skipping garbage [ 1658.062609][T14180] usb 3-1: USB disconnect, device number 92 [ 1658.233128][T14171] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1658.361417][T14172] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1658.380619][T14171] usb 4-1: Using ep0 maxpacket: 32 [ 1658.409260][T14171] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1658.446713][T14171] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1658.495270][T14171] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1658.533019][T14171] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1658.668289][T14172] usb 8-1: Using ep0 maxpacket: 8 [ 1658.704264][T14172] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1658.713081][T14172] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1658.723344][T14172] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1658.741613][T14171] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1658.755876][T14172] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1658.766082][T14171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.782687][T14171] usb 4-1: Product: syz [ 1658.787026][T14172] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1658.803000][T14171] usb 4-1: Manufacturer: syz [ 1658.807739][T14171] usb 4-1: SerialNumber: syz [ 1658.814701][T14172] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1658.824392][T14172] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.839339][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1658.860251][T14171] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input123 [ 1659.045012][T23392] syz.4.4096 (23392): drop_caches: 2 [ 1659.080547][T14171] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1659.104447][T14171] (id 0x00) [ 1659.116249][T14172] usb 8-1: usb_control_msg returned -32 [ 1659.133816][T14172] usbtmc 8-1:16.0: can't read capabilities [ 1659.385934][T23404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4099'. [ 1659.393859][T14171] rc_core: IR keymap rc-imon-pad not found [ 1659.393880][T14171] Registered IR keymap rc-empty [ 1659.393961][T14171] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1659.393985][T14171] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1659.424985][T14171] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 1659.426857][T14171] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input124 [ 1659.466632][T14171] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:66> initialized [ 1659.664976][T23404] nbd: socks must be embedded in a SOCK_ITEM attr [ 1659.936795][T23410] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 1659.999439][ T5282] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1660.069581][ T5834] usb 8-1: USB disconnect, device number 29 [ 1660.138942][T22601] udevd[22601]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1660.168344][T22506] udevd[22506]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1660.400065][T23418] syz.4.4101 (23418): drop_caches: 2 [ 1660.482048][T23421] loop5: detected capacity change from 0 to 7 [ 1661.166961][ T5834] usb 4-1: USB disconnect, device number 66 [ 1661.200590][T23421] Dev loop5: unable to read RDB block 7 [ 1661.206247][T23421] loop5: AHDI p1 [ 1661.209897][T23421] loop5: partition table partially beyond EOD, truncated [ 1662.461303][T14170] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1662.680604][T14170] usb 8-1: Using ep0 maxpacket: 8 [ 1663.184686][T14170] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1663.205350][T14170] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.315309][T14170] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1663.379229][T14170] pvrusb2: ********** [ 1663.446338][T14170] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1663.546665][T23448] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4109'. [ 1663.597326][T14170] pvrusb2: Important functionality might not be entirely working. [ 1663.690020][T14170] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1663.901240][T14170] pvrusb2: ********** [ 1664.227943][ T2358] pvrusb2: Invalid write control endpoint [ 1664.595196][T23448] nbd: socks must be embedded in a SOCK_ITEM attr [ 1664.725536][T14170] usb 8-1: USB disconnect, device number 30 [ 1666.553333][ T2358] pvrusb2: Invalid write control endpoint [ 1666.639445][ T2358] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1666.652727][T14184] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1666.711297][ T2358] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1666.712609][T23472] syzkaller0: entered promiscuous mode [ 1666.752366][ T2358] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1666.784197][T23472] syzkaller0: entered allmulticast mode [ 1666.856884][ T2358] pvrusb2: Device being rendered inoperable [ 1666.856939][ T2358] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1666.856998][ T2358] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1666.870811][ T2358] pvrusb2: Attached sub-driver cx25840 [ 1666.870833][ T2358] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1666.870848][ T2358] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1666.872535][T14184] usb 5-1: Using ep0 maxpacket: 32 [ 1666.889548][T14184] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x1 has invalid maxpacket 2015, setting to 1024 [ 1666.889590][T14184] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1666.889622][T14184] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1666.889654][T14184] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1666.894191][T14184] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1666.894227][T14184] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.894251][T14184] usb 5-1: Product: 鐮꒗폞㇍㊊䜡束鶁』ꗫȮ숇৪ [ 1666.894274][T14184] usb 5-1: Manufacturer: А [ 1666.894294][T14184] usb 5-1: SerialNumber: Ϫዂ琄嚢٩쀽径ꗿﻹ䪮꾤钉츕푘ࢆڟ繉찓⺹촀䜹㧏ﱬ柖ὁ鶞湔龿従ઇ继､묛䝽낗ꃍ量烶ⴡ넻㞳魒䗤㔻ḯ炌汣ꁡ䷜퇆֪를ꠐ♜鈆ꖐ⧐⇅摏䖃췍煑텁ꤒ䱳氙࿨彺䱠븄춦陿㲁뷧홭烵뼢䊟܋贚㓆⁺胟틆忇홈⅙̗ዤ죣⫋䣃ʦ督釁⮈ൂꡘ啗㪁킢둫枙뜖浲 [ 1667.104030][T23464] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1667.239292][T14166] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 1667.271427][T23193] udevd[23193]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1667.288983][T23476] udevd[23476]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1667.889621][T14166] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 1667.889656][T14166] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1667.920769][T14166] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 1667.952138][T14166] usb 3-1: config 150 has no interface number 0 [ 1667.952231][T14166] usb 3-1: config 150 interface 204 has no altsetting 0 [ 1667.956715][T14166] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1668.055704][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.055756][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.066624][T14166] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.066680][T14166] usb 3-1: Product: syz [ 1668.066719][T14166] usb 3-1: Manufacturer: syz [ 1668.066758][T14166] usb 3-1: SerialNumber: syz [ 1668.202412][T23462] loop4: detected capacity change from 0 to 256 [ 1668.248373][T23462] FAT-fs (loop4): bogus sectors per cluster 0 [ 1668.267599][T23462] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1668.376631][T14184] usb 5-1: USB disconnect, device number 94 [ 1668.757146][ T5282] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1669.064321][T23508] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4118'. [ 1669.868298][T23508] nbd: socks must be embedded in a SOCK_ITEM attr [ 1669.918605][T23517] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4122'. [ 1670.395104][T14166] xr_serial 3-1:150.204: skipping garbage [ 1670.423588][T14166] usb 3-1: USB disconnect, device number 93 [ 1670.620513][T14172] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1670.854841][T14172] usb 8-1: Using ep0 maxpacket: 32 [ 1670.875435][T14172] usb 8-1: config 1 interface 0 altsetting 8 endpoint 0x1 has invalid maxpacket 2015, setting to 1024 [ 1670.899350][T14172] usb 8-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1670.964391][T23542] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4126'. [ 1671.688458][T14172] usb 8-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1671.726295][T14172] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1671.737092][T14172] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1671.747672][T14172] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.758882][T14172] usb 8-1: Product: 鐮꒗폞㇍㊊䜡束鶁』ꗫȮ숇৪ [ 1671.767567][T14172] usb 8-1: Manufacturer: А [ 1671.777594][T14172] usb 8-1: SerialNumber: Ϫዂ琄嚢٩쀽径ꗿﻹ䪮꾤钉츕푘ࢆڟ繉찓⺹촀䜹㧏ﱬ柖ὁ鶞湔龿従ઇ继､묛䝽낗ꃍ量烶ⴡ넻㞳魒䗤㔻ḯ炌汣ꁡ䷜퇆֪를ꠐ♜鈆ꖐ⧐⇅摏䖃췍煑텁ꤒ䱳氙࿨彺䱠븄춦陿㲁뷧홭烵뼢䊟܋贚㓆⁺胟틆忇홈⅙̗ዤ죣⫋䣃ʦ督釁⮈ൂꡘ啗㪁킢둫枙뜖浲 [ 1672.373053][T23529] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1673.142563][T23524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1673.277640][T23529] loop7: detected capacity change from 0 to 256 [ 1673.355396][T23529] FAT-fs (loop7): bogus sectors per cluster 0 [ 1673.390700][T23529] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1673.446071][T14172] usb 8-1: USB disconnect, device number 31 [ 1674.230503][T23567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4132'. [ 1674.533285][T23567] nbd: socks must be embedded in a SOCK_ITEM attr [ 1677.184383][T23581] loop5: detected capacity change from 0 to 7 [ 1677.803670][T23581] Dev loop5: unable to read RDB block 7 [ 1677.809352][T23581] loop5: AHDI p1 [ 1677.813274][T23581] loop5: partition table partially beyond EOD, truncated [ 1678.040750][T23193] udevd[23193]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1678.432209][ T5282] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1678.441845][T23476] udevd[23476]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1678.470650][T19598] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1678.675452][T19598] usb 1-1: Using ep0 maxpacket: 32 [ 1678.709196][T19598] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1679.786545][T19598] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1679.846464][T19598] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1679.902247][T19598] usb 1-1: Product: syz [ 1679.920602][T19598] usb 1-1: Manufacturer: syz [ 1679.944019][T19598] usb 1-1: SerialNumber: syz [ 1680.025119][T19598] usb 1-1: config 0 descriptor?? [ 1680.069232][T23586] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1681.078263][T14170] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1681.125268][ T6094] usb 1-1: USB disconnect, device number 120 [ 1681.281564][T14170] usb 4-1: Using ep0 maxpacket: 32 [ 1681.295714][T14170] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1681.330906][T14170] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1681.376554][T14170] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1681.450311][T14170] usb 4-1: config 1 has no interface number 0 [ 1681.495865][T14170] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1681.609719][T23636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4147'. [ 1681.685379][T11696] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1681.702586][T14170] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1681.812100][T11696] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1681.895162][T14170] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1681.956368][T11696] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1682.014961][T14170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.070235][T11696] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1682.427077][T14170] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1682.583637][T14170] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1683.208827][T19598] usb 4-1: USB disconnect, device number 67 [ 1683.217853][T23648] 9p: Bad value for 'rfdno' [ 1683.261556][T19598] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1683.334805][T23616] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1683.923870][T14172] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1684.131310][T14172] usb 3-1: Using ep0 maxpacket: 32 [ 1685.033621][T14172] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1685.077646][T14172] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1685.098585][T14172] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1685.426497][T14172] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1685.735937][T14172] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1685.746189][T14172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.754343][T14172] usb 3-1: Product: syz [ 1685.758770][T14172] usb 3-1: Manufacturer: syz [ 1685.900525][T14172] usb 3-1: SerialNumber: syz [ 1686.314277][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1686.452246][T23682] netlink: 'syz.0.4161': attribute type 4 has an invalid length. [ 1686.908151][T14172] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input125 [ 1687.083428][T14172] imon:send_packet: packet tx failed (-71) [ 1687.193029][T14172] imon 3-1:155.0: panel buttons/knobs setup failed [ 1687.234697][T14172] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1687.620690][T14172] (id 0x00) [ 1687.710195][T23696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4164'. [ 1688.871521][T23696] nbd: socks must be embedded in a SOCK_ITEM attr [ 1688.980491][ T5834] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 1689.005507][T14172] rc_core: IR keymap rc-imon-pad not found [ 1689.052168][T14172] Registered IR keymap rc-empty [ 1689.080222][T14172] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1689.144715][ T5834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1689.163648][T14172] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1689.198019][T14172] imon:send_packet: packet tx failed (-71) [ 1689.215170][ T5834] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 31, using maximum allowed: 30 [ 1689.254315][T14172] imon 3-1:155.0: remote input dev register failed [ 1689.264230][ T5834] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 1689.337089][ T5834] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 1689.341863][T14172] imon 3-1:155.0: imon_init_intf0: rc device setup failed [ 1689.374807][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.428538][ T5834] usb 1-1: Product: syz [ 1689.449117][ T5834] usb 1-1: Manufacturer: syz [ 1689.464113][ T5834] usb 1-1: SerialNumber: syz [ 1689.576524][ T5834] usb 1-1: config 0 descriptor?? [ 1689.597661][ T5834] ums_eneub6250 1-1:0.0: USB Mass Storage device detected [ 1689.599094][T22506] udevd[22506]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1689.793846][T23731] netlink: 'syz.2.4171': attribute type 1 has an invalid length. [ 1690.200259][T23734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4170'. [ 1690.312953][T14172] imon 3-1:155.0: unable to initialize intf0, err 0 [ 1690.326865][T23731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1690.344990][T14172] imon:imon_probe: failed to initialize context! [ 1690.363202][T14172] imon 3-1:155.0: unable to register, err -19 [ 1690.408089][T14172] usb 3-1: USB disconnect, device number 94 [ 1690.571400][T23734] nbd: socks must be embedded in a SOCK_ITEM attr [ 1690.628345][T22495] block nbd64: NBD_DISCONNECT [ 1690.736336][T23745] netlink: 'syz.3.4173': attribute type 1 has an invalid length. [ 1690.833200][T23745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1690.851401][T13178] Bluetooth: hci6: command 0x0406 tx timeout [ 1690.921126][ T10] usb 1-1: USB disconnect, device number 121 [ 1691.182426][T23750] vlan2: entered allmulticast mode [ 1691.309758][T14180] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1691.994139][T23750] bond1: entered allmulticast mode [ 1692.184615][T23759] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1692.191147][T23759] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1692.198793][T23759] vhci_hcd vhci_hcd.0: Device attached [ 1692.213671][T23760] vhci_hcd: connection closed [ 1692.257914][T14180] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1692.280603][ T6253] vhci_hcd vhci_hcd.7: stop threads [ 1692.299756][ T6253] vhci_hcd vhci_hcd.7: release socket [ 1692.351716][ T6253] vhci_hcd vhci_hcd.7: disconnect device [ 1692.365069][T14180] usb 3-1: config 0 has no interface number 0 [ 1692.503028][T14180] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1692.590543][T14172] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1692.695714][T14180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.715313][T14180] usb 3-1: Product: syz [ 1692.725274][T14180] usb 3-1: Manufacturer: syz [ 1692.737254][T23476] udevd[23476]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1692.751037][T14172] usb 4-1: Using ep0 maxpacket: 32 [ 1692.756389][T14180] usb 3-1: SerialNumber: syz [ 1692.765960][T14180] usb 3-1: config 0 descriptor?? [ 1692.827441][T14172] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1692.915003][T14172] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1692.986109][T23773] binder: BINDER_SET_CONTEXT_MGR already set [ 1693.006280][T14172] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1693.025318][T23773] binder: 23772:23773 ioctl 4018620d 200000000040 returned -16 [ 1693.071106][T23775] syz.4.4181 (23775): drop_caches: 2 [ 1693.084857][T14172] usb 4-1: config 1 has no interface number 0 [ 1693.123890][T14172] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1693.182192][T14172] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1693.182256][T14172] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1693.182287][T14172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.381010][T14172] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1693.434333][T14180] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1693.446498][T14180] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1693.451882][T14180] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1693.451940][T14180] usb 3-1: media controller created [ 1693.509315][T14180] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1693.528532][T14172] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1694.494481][T14172] usb 4-1: USB disconnect, device number 68 [ 1694.522607][T14172] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1694.691084][T14180] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1695.451539][ T5862] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1695.710703][ T5862] usb 8-1: Using ep0 maxpacket: 8 [ 1696.044950][T23811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4188'. [ 1696.120740][ T5862] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1696.181370][ T5862] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.259908][ T5862] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1696.280108][ T5862] pvrusb2: ********** [ 1696.296386][ T5862] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1696.323002][ T5862] pvrusb2: Important functionality might not be entirely working. [ 1696.330966][ T5862] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1696.342356][ T5862] pvrusb2: ********** [ 1696.479170][ T2358] pvrusb2: Invalid write control endpoint [ 1696.482946][T23811] nbd: socks must be embedded in a SOCK_ITEM attr [ 1696.687996][T23824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4192'. [ 1696.697421][T23824] nbd: nbd64 already in use [ 1696.933829][T14166] usb 8-1: USB disconnect, device number 32 [ 1697.485582][T22495] block nbd64: NBD_DISCONNECT [ 1697.752607][ T2358] pvrusb2: Invalid write control endpoint [ 1697.798768][ T2358] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1697.894453][ T2358] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1697.959982][ T2358] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1698.004214][T23831] loop8: detected capacity change from 0 to 7 [ 1698.022884][ T2358] pvrusb2: Device being rendered inoperable [ 1698.034500][T23831] Dev loop8: unable to read RDB block 7 [ 1698.054329][ T2358] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1698.069713][T23831] loop8: unable to read partition table [ 1698.095063][T23831] loop8: partition table beyond EOD, truncated [ 1698.101813][ T2358] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1698.146877][T23831] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1698.168141][ T2358] pvrusb2: Attached sub-driver cx25840 [ 1698.252731][ T2358] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1698.662603][ T2358] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1698.768590][T22495] udevd[22495]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1699.738682][T23852] loop5: detected capacity change from 0 to 7 [ 1699.790902][T23852] Dev loop5: unable to read RDB block 7 [ 1699.796804][T23852] loop5: AHDI p1 [ 1699.800993][T23852] loop5: partition table partially beyond EOD, truncated [ 1701.982390][T23872] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1701.988927][T23872] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1701.996828][T23872] vhci_hcd vhci_hcd.0: Device attached [ 1702.250952][ T5834] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1702.295187][T23875] vhci_hcd: connection closed [ 1702.342510][T21576] vhci_hcd vhci_hcd.3: stop threads [ 1702.870545][T21576] vhci_hcd vhci_hcd.3: release socket [ 1703.379313][T21576] vhci_hcd vhci_hcd.3: disconnect device [ 1704.026319][ T5738] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1704.050744][T14166] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1704.062623][ T5738] dvb_usb_az6027 7-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1704.097025][ T5738] usb 7-1: USB disconnect, device number 28 [ 1704.237882][T14166] usb 4-1: Using ep0 maxpacket: 8 [ 1704.434898][T14166] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1704.444947][T14166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.467448][T14166] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1704.538904][T14166] pvrusb2: ********** [ 1704.580852][T14166] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1704.605384][T14166] pvrusb2: Important functionality might not be entirely working. [ 1704.614226][T14166] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1704.626936][T14166] pvrusb2: ********** [ 1704.752877][ T2358] pvrusb2: Invalid write control endpoint [ 1705.007083][ T2358] pvrusb2: Invalid write control endpoint [ 1705.026655][ T5862] usb 4-1: USB disconnect, device number 69 [ 1705.048202][ T2358] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1705.083149][ T2358] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1705.109290][ T2358] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1705.139929][ T2358] pvrusb2: Device being rendered inoperable [ 1705.163395][ T2358] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1705.225646][ T2358] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1705.253437][ T2358] pvrusb2: Attached sub-driver cx25840 [ 1705.270075][ T2358] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1705.304294][ T2358] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1706.099207][T23916] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1706.136624][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1706.151039][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1706.160807][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1706.170219][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1706.181567][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1706.840555][ T10] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1707.016145][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1707.038859][ T10] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.051916][ T10] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1707.064283][ T10] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1707.098235][ T10] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1707.143970][ T10] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1707.154721][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.163128][ T10] usb 8-1: Product: syz [ 1707.167462][ T10] usb 8-1: Manufacturer: syz [ 1707.169690][T23892] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1707.184409][ T10] usb 8-1: SerialNumber: syz [ 1707.223753][ C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1707.249275][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input127 [ 1707.480642][ T5834] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1707.501560][ T10] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1707.562005][ T10] (id 0x00) [ 1707.996047][ T10] rc_core: IR keymap rc-imon-pad not found [ 1708.014396][ T10] Registered IR keymap rc-empty [ 1708.040112][ T10] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1708.075585][ T10] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1708.173902][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0 [ 1708.235899][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0/input128 [ 1708.301797][T13178] Bluetooth: hci3: command tx timeout [ 1708.361072][ T10] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:33> initialized [ 1709.754874][T14171] usb 8-1: USB disconnect, device number 33 [ 1710.288166][T23914] bridge0: port 1(bridge_slave_0) entered blocking state [ 1710.336374][T23914] bridge0: port 1(bridge_slave_0) entered disabled state [ 1710.380610][T13178] Bluetooth: hci3: command tx timeout [ 1710.428961][T23914] bridge_slave_0: entered allmulticast mode [ 1711.061428][T23914] bridge_slave_0: entered promiscuous mode [ 1711.118320][T23914] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.180618][T23914] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.218985][T23914] bridge_slave_1: entered allmulticast mode [ 1711.279752][T23914] bridge_slave_1: entered promiscuous mode [ 1711.786311][T23914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1712.452547][T13178] Bluetooth: hci3: command tx timeout [ 1712.630226][T23914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1714.512385][T23995] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1714.530742][T13178] Bluetooth: hci3: command tx timeout [ 1714.899553][T23914] team0: Port device team_slave_0 added [ 1714.944101][T23914] team0: Port device team_slave_1 added [ 1715.127574][T23914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1715.159224][T23914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1715.298308][T23914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1715.446777][T23914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1715.517835][T23914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1715.558950][T24031] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4232'. [ 1715.889345][T23914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1716.146181][T24031] nbd: socks must be embedded in a SOCK_ITEM attr [ 1717.722169][T23914] hsr_slave_0: entered promiscuous mode [ 1717.747812][T23914] hsr_slave_1: entered promiscuous mode [ 1717.787439][T23914] debugfs: 'hsr0' already exists in 'hsr' [ 1717.883900][T23914] Cannot create hsr debugfs directory [ 1718.130660][ T5862] usb 8-1: new full-speed USB device number 34 using dummy_hcd [ 1718.399495][ T5862] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1718.477387][ T5862] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 31, using maximum allowed: 30 [ 1718.530728][T24062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4238'. [ 1718.554732][ T5862] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 1718.684430][ T5862] usb 8-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 1718.712653][ T5862] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.751830][ T5862] usb 8-1: Product: syz [ 1718.781565][ T5862] usb 8-1: Manufacturer: syz [ 1718.812388][ T5862] usb 8-1: SerialNumber: syz [ 1718.883743][ T5862] usb 8-1: config 0 descriptor?? [ 1718.922295][ T5862] ums_eneub6250 8-1:0.0: USB Mass Storage device detected [ 1718.983488][T24062] nbd: socks must be embedded in a SOCK_ITEM attr [ 1719.185958][T14172] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1719.397370][T14172] usb 7-1: Using ep0 maxpacket: 32 [ 1719.432439][T14172] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1719.475390][T14172] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1719.508978][T14172] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1719.549417][T22601] udevd[22601]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1719.560693][T14172] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1719.591824][T14172] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1719.611432][T23476] udevd[23476]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1719.625259][T14172] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.692319][T14172] usb 7-1: Product: syz [ 1719.711269][T14172] usb 7-1: Manufacturer: syz [ 1719.725491][T14172] usb 7-1: SerialNumber: syz [ 1719.768346][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1719.830763][T14172] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input129 [ 1719.985036][T14172] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1719.998065][T14172] (id 0x00) [ 1720.040879][T19598] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1720.160513][T14172] rc_core: IR keymap rc-imon-pad not found [ 1720.166535][T14172] Registered IR keymap rc-empty [ 1720.195565][T14172] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1720.202472][T19598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1720.230002][T14172] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1720.256087][T19598] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1720.270232][T19598] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1720.280123][T19598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.306369][T14172] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 1720.349170][T19598] usb 4-1: config 0 descriptor?? [ 1720.378955][T19598] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1720.394939][T14172] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input130 [ 1720.456901][T14172] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:29> initialized [ 1720.762345][T14172] usb 8-1: USB disconnect, device number 34 [ 1720.865487][T24096] tipc: Enabling of bearer rejected, failed to enable media [ 1721.337341][T13178] Bluetooth: hci7: command 0x0406 tx timeout [ 1721.423789][T24096] syzkaller0: entered promiscuous mode [ 1721.446226][T24096] syzkaller0: entered allmulticast mode [ 1721.530929][ T5834] usb 7-1: USB disconnect, device number 29 [ 1721.537125][T24119] imon:send_packet: packet tx failed (-71) [ 1721.561297][T24119] imon:vfd_write: send packet #2 failed [ 1722.871459][T14172] usb 4-1: USB disconnect, device number 70 [ 1723.486858][T24145] syz.6.4249 (24145): drop_caches: 2 [ 1725.126007][ T5622] Bluetooth: Frame is too long (len 12, expected len 4) [ 1726.530594][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 1728.205134][ T5862] libceph: connect (1)[c::]:6789 error -101 [ 1728.217808][ T5862] libceph: mon0 (1)[c::]:6789 connect error [ 1728.237592][T24198] ceph: No mds server is up or the cluster is laggy [ 1729.493098][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.499535][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1729.509267][T24161] tipc: Enabling of bearer rejected, failed to enable media [ 1729.520515][ T10] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1729.874569][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1730.521653][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1730.531501][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1730.544948][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1730.555157][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.696834][ T10] usb 1-1: config 0 descriptor?? [ 1731.170708][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 1731.224524][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1731.297947][ T10] usb 1-1: USB disconnect, device number 122 [ 1731.510094][ T1297] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.741753][ T10] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1731.947809][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1731.984671][ T10] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x1 has invalid maxpacket 2015, setting to 1024 [ 1732.074004][ T10] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1732.122837][ T10] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1732.179049][ T1297] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.237198][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1732.260984][T14172] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1732.304231][ T10] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1732.677918][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.719029][ T10] usb 5-1: Product: 鐮꒗폞㇍㊊䜡束鶁』ꗫȮ숇৪ [ 1732.760298][ T10] usb 5-1: Manufacturer: А [ 1732.793218][ T10] usb 5-1: SerialNumber: Ϫዂ琄嚢٩쀽径ꗿﻹ䪮꾤钉츕푘ࢆڟ繉찓⺹촀䜹㧏ﱬ柖ὁ鶞湔龿従ઇ继､묛䝽낗ꃍ量烶ⴡ넻㞳魒䗤㔻ḯ炌汣ꁡ䷜퇆֪를ꠐ♜鈆ꖐ⧐⇅摏䖃췍煑텁ꤒ䱳氙࿨彺䱠븄춦陿㲁뷧홭烵뼢䊟܋贚㓆⁺胟틆忇홈⅙̗ዤ죣⫋䣃ʦ督釁⮈ൂꡘ啗㪁킢둫枙뜖浲 [ 1732.861093][T14172] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1732.897557][T14172] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1732.927950][T14172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.980582][T24238] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1733.009974][T14172] usb 1-1: config 0 descriptor?? [ 1733.126082][T14172] pwc: Askey VC010 type 2 USB webcam detected. [ 1733.371546][ T1297] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.487886][T24236] loop4: detected capacity change from 0 to 256 [ 1733.505365][T14172] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1733.529534][T24236] FAT-fs (loop4): bogus sectors per cluster 0 [ 1733.538924][T14172] pwc: recv_control_msg error -32 req 02 val 2700 [ 1733.564327][T24236] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1733.582758][T14172] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1733.642332][T14172] pwc: recv_control_msg error -32 req 04 val 1000 [ 1733.716646][T14172] pwc: recv_control_msg error -32 req 04 val 1300 [ 1733.744662][ T10] usb 5-1: USB disconnect, device number 95 [ 1733.766011][T14172] pwc: recv_control_msg error -32 req 04 val 1400 [ 1733.788498][ T1297] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.827164][T14172] pwc: recv_control_msg error -32 req 02 val 2000 [ 1733.886121][T14172] pwc: recv_control_msg error -32 req 02 val 2100 [ 1733.933663][T14172] pwc: recv_control_msg error -32 req 04 val 1500 [ 1733.972417][T14172] pwc: recv_control_msg error -32 req 02 val 2500 [ 1733.998084][T14172] pwc: recv_control_msg error -32 req 02 val 2400 [ 1734.041860][T14172] pwc: recv_control_msg error -32 req 02 val 2600 [ 1734.065879][T23914] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1734.090017][T14172] pwc: recv_control_msg error -32 req 02 val 2900 [ 1734.121835][T23914] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1734.133607][T14172] pwc: recv_control_msg error -32 req 02 val 2800 [ 1734.161491][T23914] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1734.174246][T14172] pwc: recv_control_msg error -71 req 04 val 1100 [ 1734.193560][T14172] pwc: recv_control_msg error -71 req 04 val 1200 [ 1734.228356][T23914] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1734.258457][T14172] pwc: Registered as video103. [ 1734.301897][T14172] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input132 [ 1734.324927][T23914] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1734.409630][T14172] usb 1-1: USB disconnect, device number 123 [ 1734.433962][T23914] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1734.496960][T23914] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1734.608948][T23914] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1735.577750][ T1297] bridge_slave_1: left allmulticast mode [ 1735.602297][ T1297] bridge_slave_1: left promiscuous mode [ 1735.627606][ T1297] bridge0: port 2(bridge_slave_1) entered disabled state [ 1735.688064][ T1297] bridge_slave_0: left allmulticast mode [ 1735.716182][ T1297] bridge_slave_0: left promiscuous mode [ 1735.741979][ T1297] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.304116][ T1297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1736.319126][ T1297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1736.330154][ T1297] bond0 (unregistering): Released all slaves [ 1736.508764][T23914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1737.006605][T23914] 8021q: adding VLAN 0 to HW filter on device team0 [ 1737.127010][T24308] tipc: Enabled bearer , priority 0 [ 1737.249158][T24307] syzkaller0: entered promiscuous mode [ 1737.261109][T24307] syzkaller0: entered allmulticast mode [ 1737.313346][T24316] tipc: Resetting bearer [ 1737.350478][T19598] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 1737.405330][ T6253] bridge0: port 1(bridge_slave_0) entered blocking state [ 1737.412615][ T6253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1737.469038][T24306] tipc: Resetting bearer [ 1737.536812][T24306] tipc: Disabling bearer [ 1737.556251][T19598] usb 7-1: config 150 has an invalid interface number: 204 but max is 2 [ 1737.569281][T19598] usb 7-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1737.584296][T19598] usb 7-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 1737.598701][T19598] usb 7-1: config 150 has no interface number 0 [ 1737.626618][T19598] usb 7-1: config 150 interface 204 has no altsetting 0 [ 1737.638139][T19598] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1737.658555][T19598] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1737.690722][T19598] usb 7-1: Product: syz [ 1737.696921][T19598] usb 7-1: Manufacturer: syz [ 1737.708614][T23300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1737.715834][T23300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1737.736372][T19598] usb 7-1: SerialNumber: syz [ 1737.878052][ T1297] hsr_slave_0: left promiscuous mode [ 1737.970178][ T1297] hsr_slave_1: left promiscuous mode [ 1737.990656][ T1297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1738.010110][ T1297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1738.037784][ T1297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1738.054829][ T1297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1738.142488][ T1297] veth1_macvtap: left promiscuous mode [ 1738.167743][ T1297] veth0_macvtap: left promiscuous mode [ 1738.181474][ T1297] veth1_vlan: left promiscuous mode [ 1738.203750][ T1297] veth0_vlan: left promiscuous mode [ 1738.259080][T19598] xr_serial 7-1:150.204: skipping garbage [ 1738.344715][T19598] usb 7-1: USB disconnect, device number 30 [ 1738.823621][T24341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4282'. [ 1739.196858][T24341] nbd: socks must be embedded in a SOCK_ITEM attr [ 1739.303967][T24350] loop8: detected capacity change from 0 to 8 [ 1739.365896][T24350] Dev loop8: unable to read RDB block 8 [ 1739.402977][T24350] loop8: unable to read partition table [ 1739.567942][T24354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4286'. [ 1739.815735][T24350] loop8: partition table beyond EOD, truncated [ 1739.903735][T24350] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1741.010930][T24360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4288'. [ 1741.245424][ T1297] team0 (unregistering): Port device team_slave_1 removed [ 1741.297049][T24360] nbd: socks must be embedded in a SOCK_ITEM attr [ 1741.374059][ T1297] team0 (unregistering): Port device team_slave_0 removed [ 1741.793584][T23476] udevd[23476]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1742.268294][T11696] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1742.630492][T11696] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1743.293722][T24394] vivid-005: kernel_thread() failed [ 1743.419078][T11697] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1743.449818][T11697] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1743.472739][T14170] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1743.692393][T14170] usb 7-1: Using ep0 maxpacket: 32 [ 1743.706577][T14170] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1743.754826][T14170] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1743.819371][T14170] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1743.866099][T14170] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1743.907570][T14170] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1743.916914][T14171] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1743.951360][T14170] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.960007][T14170] usb 7-1: Product: syz [ 1743.965069][T14170] usb 7-1: Manufacturer: syz [ 1743.995167][T14170] usb 7-1: SerialNumber: syz [ 1744.015580][ T1297] IPVS: stop unused estimator thread 0... [ 1744.042033][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1744.078143][T14170] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input134 [ 1744.112603][T14171] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1744.324180][T14171] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1744.350415][T14171] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.360423][T14170] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1744.368715][T14170] (id 0x00) [ 1744.379493][T14171] usb 8-1: config 0 descriptor?? [ 1744.405290][T14171] pwc: Askey VC010 type 2 USB webcam detected. [ 1744.482128][T14170] rc_core: IR keymap rc-imon-pad not found [ 1744.509725][T14170] Registered IR keymap rc-empty [ 1744.544780][T14170] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1744.615382][T14170] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1744.733803][T14170] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 1744.811291][T14170] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input135 [ 1744.859525][T14171] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1744.887199][T14171] pwc: recv_control_msg error -32 req 02 val 2700 [ 1744.898329][T14170] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:31> initialized [ 1744.931235][T14184] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1744.952865][T14171] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1744.995392][T14171] pwc: recv_control_msg error -32 req 04 val 1000 [ 1745.035432][T14171] pwc: recv_control_msg error -32 req 04 val 1300 [ 1745.069417][T14171] pwc: recv_control_msg error -32 req 04 val 1400 [ 1745.118838][T14184] usb 5-1: Using ep0 maxpacket: 32 [ 1745.122467][T14171] pwc: recv_control_msg error -32 req 02 val 2000 [ 1745.167136][T14184] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1745.181343][T14171] pwc: recv_control_msg error -32 req 02 val 2100 [ 1745.223825][T14171] pwc: recv_control_msg error -32 req 04 val 1500 [ 1745.246123][T14184] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1745.282608][T14171] pwc: recv_control_msg error -32 req 02 val 2500 [ 1745.309796][T14184] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1745.345866][T14171] pwc: recv_control_msg error -32 req 02 val 2400 [ 1745.386116][T14184] usb 5-1: Product: syz [ 1745.406793][T14171] pwc: recv_control_msg error -32 req 02 val 2600 [ 1745.410714][T14184] usb 5-1: Manufacturer: syz [ 1745.443289][T14184] usb 5-1: SerialNumber: syz [ 1745.450621][T14171] pwc: recv_control_msg error -32 req 02 val 2900 [ 1745.476560][T14184] usb 5-1: config 0 descriptor?? [ 1745.483557][T14171] pwc: recv_control_msg error -32 req 02 val 2800 [ 1745.506005][T24422] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1745.519423][T14171] pwc: recv_control_msg error -32 req 04 val 1100 [ 1745.550932][T14171] pwc: recv_control_msg error -71 req 04 val 1200 [ 1745.610439][ T5834] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1745.613624][T14171] pwc: Registered as video103. [ 1745.667617][T14171] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input136 [ 1745.725357][T14171] usb 8-1: USB disconnect, device number 35 [ 1745.765749][T24422] imon:display_open: display port is already open [ 1745.790850][ T5834] usb 4-1: Using ep0 maxpacket: 32 [ 1745.818988][ T5834] usb 4-1: config 0 has no interfaces? [ 1745.845595][T14170] usb 5-1: USB disconnect, device number 96 [ 1745.856360][ T5834] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1745.890596][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.944140][ T5834] usb 4-1: config 0 descriptor?? [ 1745.984286][T23914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1746.042497][T24447] imon:send_packet: packet tx failed (-71) [ 1746.044320][ T5834] usb 7-1: USB disconnect, device number 31 [ 1746.072602][T24447] imon:vfd_write: send packet #2 failed [ 1746.214743][T24435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1746.248838][T24435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1746.464133][T24456] tipc: Started in network mode [ 1746.476333][T24456] tipc: Node identity 6612774931d5, cluster identity 4711 [ 1746.495554][T24456] tipc: Enabled bearer , priority 0 [ 1746.529662][T24456] syzkaller0: entered promiscuous mode [ 1746.547435][T24456] syzkaller0: entered allmulticast mode [ 1746.589345][T24456] tipc: Resetting bearer [ 1746.614771][T24455] tipc: Resetting bearer [ 1746.758561][T24455] tipc: Disabling bearer [ 1747.027257][T23914] veth0_vlan: entered promiscuous mode [ 1747.081049][T23914] veth1_vlan: entered promiscuous mode [ 1747.197078][T23914] veth0_macvtap: entered promiscuous mode [ 1747.263038][T23914] veth1_macvtap: entered promiscuous mode [ 1747.376949][T23914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1747.451512][T23914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1747.564850][T18045] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1748.122801][T14184] usb 4-1: USB disconnect, device number 71 [ 1748.191500][ T5834] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1748.217623][T21576] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1748.260500][T21576] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1748.351635][ T5834] usb 1-1: Using ep0 maxpacket: 32 [ 1748.367531][T15558] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1748.387742][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1748.442015][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1748.493974][ T5834] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1748.549278][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1748.646086][ T5834] usb 1-1: config 0 descriptor?? [ 1748.751980][T24507] ubi31: attaching mtd0 [ 1748.768858][T24507] ubi31: scanning is finished [ 1748.916101][T13178] Bluetooth: Frame is too long (len 12, expected len 4) [ 1749.768026][ T5834] ft260 0003:0403:6030.0059: unknown main item tag 0x0 [ 1749.768525][T24507] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1749.835054][ T5834] ft260 0003:0403:6030.0059: unknown main item tag 0x0 [ 1749.990218][ T5834] ft260 0003:0403:6030.0059: chip code: 0000 0000 [ 1750.020782][T11696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1750.044222][T11696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1750.154581][ T5834] ft260 0003:0403:6030.0059: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 1750.162835][T11696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1750.361963][ T5834] ft260 0003:0403:6030.0059: failed to retrieve status: -32, no wakeup [ 1750.379188][T24516] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1750.383569][T11696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1750.572757][ T5834] ft260 0003:0403:6030.0059: failed to retrieve status: -5 [ 1750.751342][T24522] binder: 24520:24522 ioctl 4018620d 0 returned -22 [ 1750.775438][ T5834] ft260 0003:0403:6030.0059: failed to reset I2C controller: -71 [ 1750.787118][T24522] syz.6.4319 (24522): drop_caches: 2 [ 1750.907453][ T5834] usb 1-1: USB disconnect, device number 124 [ 1753.288737][T24554] syzkaller0: entered promiscuous mode [ 1753.317076][T24554] syzkaller0: entered allmulticast mode [ 1753.480790][ T5834] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1753.495474][T19598] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1753.660457][ T5834] usb 10-1: Using ep0 maxpacket: 32 [ 1753.670584][T19598] usb 5-1: Using ep0 maxpacket: 32 [ 1753.671435][T14170] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1753.685777][ T5834] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1753.713320][ T5834] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1753.732648][T19598] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1753.751487][ T5834] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1753.765090][ T5862] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1753.772948][T19598] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1753.790496][ T5834] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1753.804008][T19598] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1753.840401][T19598] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1753.862083][ T5834] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1753.867205][T14170] usb 1-1: Using ep0 maxpacket: 32 [ 1753.871835][ T5834] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.884984][ T5834] usb 10-1: Product: syz [ 1753.889356][ T5834] usb 10-1: Manufacturer: syz [ 1753.896306][T19598] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1753.905613][T14170] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1753.908857][T19598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.928910][ T5834] usb 10-1: SerialNumber: syz [ 1753.935112][T14170] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1753.943581][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1753.977811][T14170] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1753.977842][T14170] usb 1-1: config 1 has no interface number 0 [ 1753.977879][T14170] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1753.977903][T14170] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1753.977943][T14170] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1753.977965][T14170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.989063][T19598] usb 5-1: Product: syz [ 1753.989089][T19598] usb 5-1: Manufacturer: syz [ 1753.989108][T19598] usb 5-1: SerialNumber: syz [ 1753.989256][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1753.989288][ T5862] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1753.989338][ T5862] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1753.989367][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.995225][ T5862] usb 4-1: config 0 descriptor?? [ 1754.014876][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1754.030135][T19598] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input137 [ 1754.093269][ C1] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1754.098842][T14170] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1754.099233][ T5834] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/input/input138 [ 1754.200707][ T5834] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1754.200735][ T5834] (id 0x00) [ 1754.280462][T19598] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1754.280489][T19598] (id 0x00) [ 1754.308646][T14170] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1754.390779][ T5834] rc_core: IR keymap rc-imon-pad not found [ 1754.390808][ T5834] Registered IR keymap rc-empty [ 1754.390920][ T5834] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1754.390943][ T5834] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1754.413557][ T5834] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0 [ 1754.416339][ T5834] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0/input140 [ 1754.452356][ T5862] usbhid 4-1:0.0: can't add hid device: -71 [ 1754.452466][ T5862] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1754.455074][ T5862] usb 4-1: USB disconnect, device number 72 [ 1754.460789][T19598] rc_core: IR keymap rc-imon-pad not found [ 1754.460807][T19598] Registered IR keymap rc-empty [ 1754.460876][T19598] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1754.460899][T19598] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1754.468371][ T5834] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:30> initialized [ 1754.482382][T19598] rc rc1: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc1 [ 1754.487647][T19598] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc1/input139 [ 1754.511353][T19598] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:97> initialized [ 1754.810592][T14170] usb 1-1: USB disconnect, device number 125 [ 1754.950030][T14170] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1755.282076][T24597] 9p: Bad value for 'rfdno' [ 1755.797388][T24601] imon:display_open: display port is already open [ 1756.014884][T24603] imon:send_packet: packet tx failed (-71) [ 1756.015417][ T5834] usb 10-1: USB disconnect, device number 30 [ 1756.040815][T24603] imon:vfd_write: send packet #2 failed [ 1756.330677][T14171] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 1756.364201][T24615] ubi31: attaching mtd0 [ 1756.389799][T24615] ubi31: scanning is finished [ 1756.512295][T13178] Bluetooth: Frame is too long (len 12, expected len 4) [ 1756.531890][T24566] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1756.982412][ T5862] usb 5-1: USB disconnect, device number 97 [ 1757.122415][T14171] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 1757.142179][T14171] usb 1-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1757.198284][T14171] usb 1-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 1757.218544][T24615] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1757.386712][T14171] usb 1-1: config 150 has no interface number 0 [ 1757.436093][T14171] usb 1-1: config 150 interface 204 has no altsetting 0 [ 1757.500544][T14171] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1757.555040][T14171] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.599916][T14171] usb 1-1: Product: syz [ 1757.624344][T14171] usb 1-1: Manufacturer: syz [ 1757.635144][T14171] usb 1-1: SerialNumber: syz [ 1757.880658][ T10] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1757.970319][T14171] xr_serial 1-1:150.204: skipping garbage [ 1758.001814][T14171] usb 1-1: USB disconnect, device number 126 [ 1758.062247][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1758.084088][ T10] usb 8-1: config 1 interface 0 altsetting 8 endpoint 0x1 has invalid maxpacket 2015, setting to 1024 [ 1758.098505][ T10] usb 8-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1758.111597][ T10] usb 8-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1758.139740][ T10] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1758.157370][ T10] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1758.176486][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.193371][ T10] usb 8-1: Product: 鐮꒗폞㇍㊊䜡束鶁』ꗫȮ숇৪ [ 1758.215378][ T10] usb 8-1: Manufacturer: А [ 1758.234845][ T10] usb 8-1: SerialNumber: Ϫዂ琄嚢٩쀽径ꗿﻹ䪮꾤钉츕푘ࢆڟ繉찓⺹촀䜹㧏ﱬ柖ὁ鶞湔龿従ઇ继､묛䝽낗ꃍ量烶ⴡ넻㞳魒䗤㔻ḯ炌汣ꁡ䷜퇆֪를ꠐ♜鈆ꖐ⧐⇅摏䖃췍煑텁ꤒ䱳氙࿨彺䱠븄춦陿㲁뷧홭烵뼢䊟܋贚㓆⁺胟틆忇홈⅙̗ዤ죣⫋䣃ʦ督釁⮈ൂꡘ啗㪁킢둫枙뜖浲 [ 1758.421692][T24625] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1758.545575][T24644] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1758.552147][T24644] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1758.560046][T24644] vhci_hcd vhci_hcd.0: Device attached [ 1758.851389][T14171] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 1759.415866][T24645] vhci_hcd: connection reset by peer [ 1759.430830][T24625] loop7: detected capacity change from 0 to 256 [ 1759.562366][ T1297] vhci_hcd vhci_hcd.4: stop threads [ 1759.709033][ T1297] vhci_hcd vhci_hcd.4: release socket [ 1759.933641][ T1297] vhci_hcd vhci_hcd.4: disconnect device [ 1759.952565][T24625] FAT-fs (loop7): bogus sectors per cluster 0 [ 1760.050310][T24625] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1760.236627][ T10] usb 8-1: USB disconnect, device number 36 [ 1760.481053][ T5862] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1760.634360][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1760.634401][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1760.634430][ T5862] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1760.634477][ T5862] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1760.634506][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.669341][ T5862] usb 4-1: config 0 descriptor?? [ 1760.677095][T24662] 9p: Bad value for 'rfdno' [ 1761.548107][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 1761.580962][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 1761.591182][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 1761.598618][ T5862] usbhid 4-1:0.0: can't add hid device: -32 [ 1761.606455][ T5862] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1761.657804][ T5862] usb 4-1: USB disconnect, device number 73 [ 1761.925989][T24682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4353'. [ 1762.102055][ T6094] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1762.254774][T24688] binder: BINDER_SET_CONTEXT_MGR already set [ 1762.278204][T24682] nbd: socks must be embedded in a SOCK_ITEM attr [ 1762.285081][ T6094] usb 8-1: Using ep0 maxpacket: 32 [ 1762.299434][T24688] binder: 24687:24688 ioctl 4018620d 200000000040 returned -16 [ 1762.317000][T23193] block nbd64: NBD_DISCONNECT [ 1762.335043][ T6094] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 1762.366983][ T6094] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1762.417540][T24690] syz.6.4356 (24690): drop_caches: 2 [ 1762.424824][ T6094] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1762.475619][ T6094] usb 8-1: config 1 has no interface number 0 [ 1762.515665][ T6094] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1762.615341][ T6094] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1763.155003][ T6094] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1763.228854][ T6094] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.386322][ T6094] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 1764.384188][ T6094] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached [ 1764.440487][T14171] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1764.575029][T24587] udevd[24587]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1764.614743][T19598] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 1764.721967][T24708] tipc: Enabled bearer , priority 0 [ 1764.755534][T24708] syzkaller0: entered promiscuous mode [ 1764.793331][T24708] syzkaller0: entered allmulticast mode [ 1764.802991][T19598] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1764.860234][T19598] usb 10-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 1764.897957][T19598] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.897993][T19598] usb 10-1: Product: syz [ 1764.898012][T19598] usb 10-1: Manufacturer: syz [ 1764.898032][T19598] usb 10-1: SerialNumber: syz [ 1764.916776][T19598] usb 10-1: config 0 descriptor?? [ 1764.926333][T19598] ums_eneub6250 10-1:0.0: USB Mass Storage device detected [ 1764.952887][T24708] tipc: Resetting bearer [ 1764.972370][T24706] tipc: Resetting bearer [ 1764.992355][ T10] usb 8-1: USB disconnect, device number 37 [ 1765.018187][ T10] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 1765.108358][T24706] tipc: Disabling bearer [ 1765.782225][T24730] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1765.788793][T24730] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1765.832664][T24730] vhci_hcd vhci_hcd.0: Device attached [ 1766.182129][T19598] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 1767.091362][T24732] vhci_hcd: connection closed [ 1767.163986][T23300] vhci_hcd vhci_hcd.6: stop threads [ 1767.178839][ T5862] usb 10-1: USB disconnect, device number 31 [ 1767.180703][T24735] tipc: Enabled bearer , priority 0 [ 1767.259748][T23300] vhci_hcd vhci_hcd.6: release socket [ 1767.279591][T24735] syzkaller0: entered promiscuous mode [ 1767.298382][T23300] vhci_hcd vhci_hcd.6: disconnect device [ 1767.304160][T24735] syzkaller0: entered allmulticast mode [ 1767.332229][T24742] xt_hashlimit: size too large, truncated to 1048576 [ 1767.346361][T24735] tipc: Resetting bearer [ 1767.405711][T24731] tipc: Resetting bearer [ 1767.651800][T14171] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1767.755029][T24731] tipc: Disabling bearer [ 1767.843870][T14171] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1767.881150][T14171] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1767.902105][T14171] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1767.937612][T14171] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1767.972967][T14171] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1768.012237][T14171] usb 4-1: config 0 descriptor?? [ 1768.578058][T14171] usbhid 4-1:0.0: can't add hid device: -71 [ 1768.596447][T14171] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1768.620225][T14171] usb 4-1: USB disconnect, device number 74 [ 1768.687785][T24777] dns_resolver: Unsupported server list version (6) [ 1770.993966][T24759] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1771.362362][T14184] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1771.520578][T14184] usb 4-1: device descriptor read/64, error -71 [ 1772.580477][T19598] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1773.454273][T24802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4385'. [ 1774.081804][T14184] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1774.747849][T24802] nbd: socks must be embedded in a SOCK_ITEM attr [ 1774.984375][T24587] udevd[24587]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1775.290729][T14184] usb 4-1: device descriptor read/64, error -71 [ 1775.350840][T24820] dns_resolver: Unsupported server list version (6) [ 1776.771356][T24587] udevd[24587]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1776.880089][T14184] usb usb4-port1: attempt power cycle [ 1777.042221][ T6094] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1777.080464][T14170] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1777.208810][ T6094] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1777.229518][ T6094] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1777.244041][T14170] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1777.257134][T14170] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1777.304884][ T6094] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1777.320460][T14170] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1777.362784][ T6094] usb 10-1: config 0 descriptor?? [ 1777.370286][T14170] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1777.392984][ T6094] pwc: Askey VC010 type 2 USB webcam detected. [ 1777.402371][T14170] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1777.487193][T14170] usb 5-1: config 0 descriptor?? [ 1777.811414][ T6094] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1777.824697][T14184] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1777.826960][ T6094] pwc: recv_control_msg error -32 req 02 val 2700 [ 1777.867288][ T6094] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1777.900025][ T6094] pwc: recv_control_msg error -32 req 04 val 1000 [ 1777.915016][T14184] usb 4-1: Using ep0 maxpacket: 32 [ 1777.923100][ T6094] pwc: recv_control_msg error -32 req 04 val 1300 [ 1777.978760][ T6094] pwc: recv_control_msg error -32 req 04 val 1400 [ 1778.062137][ T6094] pwc: recv_control_msg error -32 req 02 val 2000 [ 1778.116149][T14170] usbhid 5-1:0.0: can't add hid device: -71 [ 1778.189349][T14170] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1778.212944][ T6094] pwc: recv_control_msg error -32 req 02 val 2100 [ 1778.306956][ T6094] pwc: recv_control_msg error -32 req 04 val 1500 [ 1778.393754][ T6094] pwc: recv_control_msg error -32 req 02 val 2500 [ 1778.444326][T14170] usb 5-1: USB disconnect, device number 98 [ 1778.531639][ T6094] pwc: recv_control_msg error -32 req 02 val 2400 [ 1778.657277][ T6094] pwc: recv_control_msg error -32 req 02 val 2600 [ 1778.684365][T14184] usb 4-1: unable to read config index 0 descriptor/all [ 1778.850087][ T6094] pwc: recv_control_msg error -32 req 02 val 2900 [ 1779.081600][ T6094] pwc: recv_control_msg error -32 req 02 val 2800 [ 1779.566074][ T6094] pwc: recv_control_msg error -71 req 04 val 1200 [ 1779.931170][T14184] usb 4-1: can't read configurations, error -71 [ 1780.764834][ T6094] pwc: Registered as video103. [ 1780.965736][ T6094] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input142 [ 1781.289975][ T6094] usb 10-1: USB disconnect, device number 32 [ 1781.693930][T24862] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1781.700491][T24862] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1781.708296][T24862] vhci_hcd vhci_hcd.0: Device attached [ 1782.373545][T24866] vhci_hcd: connection closed [ 1782.376317][ T1296] vhci_hcd vhci_hcd.4: stop threads [ 1782.520779][T14184] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1782.570805][T14162] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 1782.731961][ T1296] vhci_hcd vhci_hcd.4: release socket [ 1782.869138][ T1296] vhci_hcd vhci_hcd.4: disconnect device [ 1783.000482][T14184] usb 7-1: Using ep0 maxpacket: 32 [ 1783.018696][T24876] syzkaller0: entered promiscuous mode [ 1783.057820][T24876] syzkaller0: entered allmulticast mode [ 1783.067800][T14184] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1783.157673][T14184] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1783.216904][T14184] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1783.288447][T14184] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1783.502674][T14184] usb 7-1: config 0 descriptor?? [ 1783.596598][T24892] dns_resolver: Unsupported server list version (6) [ 1785.106156][T14184] usbhid 7-1:0.0: can't add hid device: -71 [ 1785.139455][T14184] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1785.239019][T13178] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1785.262422][T13178] CPU: 0 UID: 0 PID: 13178 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1785.262463][T13178] Tainted: [L]=SOFTLOCKUP [ 1785.262473][T13178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1785.262492][T13178] Workqueue: hci0 hci_rx_work [ 1785.262535][T13178] Call Trace: [ 1785.262546][T13178] [ 1785.262557][T13178] dump_stack_lvl+0xe8/0x150 [ 1785.262591][T13178] sysfs_create_dir_ns+0x271/0x2a0 [ 1785.262626][T13178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.262660][T13178] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1785.262697][T13178] ? do_raw_spin_unlock+0xf5/0x210 [ 1785.262744][T13178] kobject_add_internal+0x62b/0xd00 [ 1785.262791][T13178] kobject_add+0x163/0x240 [ 1785.262826][T13178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.262864][T13178] ? __pfx_kobject_add+0x10/0x10 [ 1785.262899][T13178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.262931][T13178] ? _raw_spin_unlock+0x28/0x50 [ 1785.262955][T13178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.262991][T13178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.263022][T13178] ? get_device_parent+0x366/0x3a0 [ 1785.263058][T13178] device_add+0x408/0xbb0 [ 1785.263094][T13178] hci_conn_add_sysfs+0xd5/0x210 [ 1785.263132][T13178] le_conn_complete_evt+0x10e6/0x16b0 [ 1785.263174][T13178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.263217][T13178] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1785.263257][T13178] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1785.263289][T13178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.263320][T13178] ? __asan_memcpy+0x40/0x70 [ 1785.263359][T13178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.263390][T13178] ? skb_pull_data+0xfb/0x200 [ 1785.263439][T13178] hci_le_conn_complete_evt+0x187/0x470 [ 1785.263490][T13178] hci_event_packet+0x659/0xef0 [ 1785.263539][T13178] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1785.263578][T13178] ? __pfx_hci_event_packet+0x10/0x10 [ 1785.263618][T13178] ? kcov_remote_start+0x49a/0x7a0 [ 1785.263661][T13178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.263692][T13178] ? hci_send_to_monitor+0xe2/0x590 [ 1785.263723][T13178] hci_rx_work+0x3ee/0x1040 [ 1785.263760][T13178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.263797][T13178] ? process_scheduled_works+0xa70/0x1860 [ 1785.263830][T13178] process_scheduled_works+0xb5d/0x1860 [ 1785.263858][T13178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.263926][T13178] ? __pfx_process_scheduled_works+0x10/0x10 [ 1785.263963][T13178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.263995][T13178] ? assign_work+0x3d5/0x5e0 [ 1785.264030][T13178] worker_thread+0xa53/0xfc0 [ 1785.264062][T13178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.264111][T13178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.264154][T13178] kthread+0x388/0x470 [ 1785.264190][T13178] ? __pfx_worker_thread+0x10/0x10 [ 1785.264217][T13178] ? __pfx_kthread+0x10/0x10 [ 1785.264255][T13178] ret_from_fork+0x514/0xb70 [ 1785.264288][T13178] ? __pfx_ret_from_fork+0x10/0x10 [ 1785.264317][T13178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.264348][T13178] ? __switch_to+0xc79/0x1410 [ 1785.264392][T13178] ? __pfx_kthread+0x10/0x10 [ 1785.264430][T13178] ret_from_fork_asm+0x1a/0x30 [ 1785.264483][T13178] [ 1785.266946][T13178] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1785.672461][T13178] Bluetooth: hci0: failed to register connection device [ 1786.132007][T14170] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1786.547682][T14170] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1786.780100][T14170] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1787.083770][T14170] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1787.257785][T14184] usb 7-1: USB disconnect, device number 32 [ 1787.437209][T14170] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1787.642799][T14170] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.810527][ T5622] Bluetooth: hci0: command 0x0406 tx timeout [ 1788.116773][T14170] usb 8-1: config 0 descriptor?? [ 1788.170478][T14162] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1789.337855][T14170] usb 8-1: can't set config #0, error -71 [ 1789.352121][T14184] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1789.402232][T14170] usb 8-1: USB disconnect, device number 38 [ 1789.487472][T24923] tipc: Started in network mode [ 1789.506642][T24923] tipc: Node identity be8b5c0c0739, cluster identity 4711 [ 1789.527064][T24923] tipc: Enabled bearer , priority 0 [ 1789.554990][T24923] syzkaller0: entered promiscuous mode [ 1789.570608][T14184] usb 7-1: Using ep0 maxpacket: 32 [ 1789.576017][T24923] syzkaller0: entered allmulticast mode [ 1789.587761][T14184] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1789.609431][T14184] usb 7-1: config 0 has no interface number 0 [ 1789.652822][T24923] tipc: Resetting bearer [ 1789.680559][T14184] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1789.744981][T14184] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.784460][T24921] tipc: Resetting bearer [ 1789.803993][T14184] usb 7-1: Product: syz [ 1789.825458][T14184] usb 7-1: Manufacturer: syz [ 1789.845092][T14184] usb 7-1: SerialNumber: syz [ 1789.894451][ T5622] Bluetooth: hci0: command 0x0406 tx timeout [ 1790.019658][T14184] usb 7-1: config 0 descriptor?? [ 1790.105381][T24948] dns_resolver: Unsupported server list version (6) [ 1790.792705][T14184] usb 7-1: can't set config #0, error -71 [ 1790.945209][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.040956][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.384433][T14184] usb 7-1: USB disconnect, device number 33 [ 1791.800772][T19598] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1791.860273][T24921] tipc: Disabling bearer [ 1792.180076][T19598] usb 10-1: Using ep0 maxpacket: 32 [ 1792.319864][T19598] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1792.434098][T19598] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1793.336283][T24961] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 1793.342825][T24961] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1793.351916][T24961] vhci_hcd vhci_hcd.0: Device attached [ 1793.352669][T24970] vhci_hcd: connection closed [ 1793.366275][ T5869] vhci_hcd vhci_hcd.6: stop threads [ 1793.482865][T24738] tipc: Node number set to 3115473932 [ 1793.493095][ T5869] vhci_hcd vhci_hcd.6: release socket [ 1793.600449][T14184] usb 45-1: new low-speed USB device number 4 using vhci_hcd [ 1793.601245][ T5869] vhci_hcd vhci_hcd.6: disconnect device [ 1793.973294][T14184] usb 45-1: enqueue for inactive port 0 [ 1793.978973][T19598] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1793.991832][T19598] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1794.003945][T19598] usb 10-1: config 0 descriptor?? [ 1794.070570][T14184] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1794.708243][T19598] usbhid 10-1:0.0: can't add hid device: -71 [ 1794.737576][T19598] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1794.996583][T19598] usb 10-1: USB disconnect, device number 33 [ 1795.018014][T24977] syzkaller0: entered promiscuous mode [ 1795.035436][T24977] syzkaller0: entered allmulticast mode [ 1796.890457][T14170] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1798.857799][T25014] 9p: Bad value for 'rfdno' [ 1799.031183][T24738] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1799.230439][T24738] usb 4-1: Using ep0 maxpacket: 8 [ 1799.247044][T24738] usb 4-1: config 0 has no interfaces? [ 1799.314602][T24738] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1799.343165][T24738] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1799.415761][T24738] usb 4-1: Product: syz [ 1799.547787][T24738] usb 4-1: Manufacturer: syz [ 1799.891801][T24738] usb 4-1: SerialNumber: syz [ 1799.960989][T24738] usb 4-1: config 0 descriptor?? [ 1800.015711][T14170] usb 10-1: device descriptor read/64, error -71 [ 1800.205093][T24738] usb 4-1: USB disconnect, device number 79 [ 1800.440816][T14170] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1800.630414][T14170] usb 10-1: Using ep0 maxpacket: 32 [ 1800.647914][T14170] usb 10-1: config 1 interface 0 altsetting 8 endpoint 0x1 has invalid maxpacket 2015, setting to 1024 [ 1800.660056][T14170] usb 10-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1800.680639][T14170] usb 10-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1800.706631][T14170] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1800.727815][T14170] usb 10-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1800.741410][T14170] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.749526][T14170] usb 10-1: Product: 鐮꒗폞㇍㊊䜡束鶁』ꗫȮ숇৪ [ 1800.756959][T14170] usb 10-1: Manufacturer: А [ 1800.762130][T14170] usb 10-1: SerialNumber: Ϫዂ琄嚢٩쀽径ꗿﻹ䪮꾤钉츕푘ࢆڟ繉찓⺹촀䜹㧏ﱬ柖ὁ鶞湔龿従ઇ继､묛䝽낗ꃍ量烶ⴡ넻㞳魒䗤㔻ḯ炌汣ꁡ䷜퇆֪를ꠐ♜鈆ꖐ⧐⇅摏䖃췍煑텁ꤒ䱳氙࿨彺䱠븄춦陿㲁뷧홭烵뼢䊟܋贚㓆⁺胟틆忇홈⅙̗ዤ죣⫋䣃ʦ督釁⮈ൂꡘ啗㪁킢둫枙뜖浲 [ 1800.829253][T25024] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1801.325443][T25024] loop9: detected capacity change from 0 to 256 [ 1801.339242][T25024] FAT-fs (loop9): bogus sectors per cluster 0 [ 1801.348635][T25024] FAT-fs (loop9): Can't find a valid FAT filesystem [ 1801.410457][ T6094] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1801.595188][ T6094] usb 1-1: Using ep0 maxpacket: 32 [ 1801.615580][ T6094] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1801.640644][ T6094] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1801.670601][ T6094] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1801.684981][ T6094] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1801.721963][ T6094] usb 1-1: config 0 descriptor?? [ 1802.190051][ T6094] ft260 0003:0403:6030.005A: unknown main item tag 0x0 [ 1802.202882][ T6094] ft260 0003:0403:6030.005A: unknown main item tag 0x0 [ 1802.392656][ T6094] ft260 0003:0403:6030.005A: chip code: 0000 0000 [ 1802.596738][ T6094] ft260 0003:0403:6030.005A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 1802.810960][ T6094] ft260 0003:0403:6030.005A: failed to retrieve status: -32, no wakeup [ 1802.856703][ T6094] ft260 0003:0403:6030.005A: failed to retrieve status: -5 [ 1803.041791][ T6094] ft260 0003:0403:6030.005A: failed to reset I2C controller: -71 [ 1803.098306][ T6094] usb 1-1: USB disconnect, device number 127 [ 1803.779701][T25056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4445'. [ 1803.873964][T25056] nbd: socks must be embedded in a SOCK_ITEM attr [ 1803.919634][T23476] block nbd64: NBD_DISCONNECT [ 1804.555915][T14170] usb 10-1: USB disconnect, device number 35 [ 1804.841404][T25070] tipc: Enabled bearer , priority 0 [ 1804.895380][T25070] syzkaller0: entered promiscuous mode [ 1804.916474][T25070] syzkaller0: entered allmulticast mode [ 1804.972630][T25073] tipc: Resetting bearer [ 1805.034676][T25079] 9p: Bad value for 'rfdno' [ 1805.045426][T25069] tipc: Resetting bearer [ 1805.743464][T25069] tipc: Disabling bearer [ 1805.861514][T25089] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4455'. [ 1805.925651][T25091] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4455'. [ 1806.138680][T25095] macvlan2: entered promiscuous mode [ 1806.164557][T25095] macvlan2: entered allmulticast mode [ 1806.184706][T25095] bond2: entered promiscuous mode [ 1806.200175][T25095] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1806.221255][T14172] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1806.233191][T25095] bond2: left promiscuous mode [ 1806.360673][T14172] usb 5-1: device descriptor read/64, error -71 [ 1806.440549][T19598] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1806.527977][T25111] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4460'. [ 1806.621449][T19598] usb 8-1: Using ep0 maxpacket: 32 [ 1806.627710][T25112] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1806.634233][T25112] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1806.642301][T25112] vhci_hcd vhci_hcd.0: Device attached [ 1806.796812][T19598] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1806.899390][T19598] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1806.965546][T14172] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1807.049703][T19598] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1807.062297][T14184] usb 45-1: new low-speed USB device number 5 using vhci_hcd [ 1807.186615][T19598] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1807.343888][T19598] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1807.422935][T19598] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.498476][T19598] usb 8-1: Product: syz [ 1807.539379][T19598] usb 8-1: Manufacturer: syz [ 1807.553850][T25113] vhci_hcd: connection reset by peer [ 1807.604888][T19598] usb 8-1: SerialNumber: syz [ 1807.650132][ T135] vhci_hcd vhci_hcd.6: stop threads [ 1807.716524][ T135] vhci_hcd vhci_hcd.6: release socket [ 1807.821272][ T135] vhci_hcd vhci_hcd.6: disconnect device [ 1808.081493][T25111] nbd: socks must be embedded in a SOCK_ITEM attr [ 1808.097389][ C1] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1808.138302][T19598] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input144 [ 1808.190443][T14172] usb 5-1: device descriptor read/64, error -71 [ 1808.304373][T14172] usb usb5-port1: attempt power cycle [ 1808.361086][T19598] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1808.384613][T19598] (id 0x00) [ 1808.453660][T23476] udevd[23476]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1808.500875][T24587] udevd[24587]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1808.534690][T19598] rc_core: IR keymap rc-imon-pad not found [ 1808.546910][T19598] Registered IR keymap rc-empty [ 1808.554833][T19598] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1808.573629][T19598] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1808.626622][T19598] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0 [ 1808.660583][T14172] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1808.664473][T19598] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0/input145 [ 1808.687338][T19598] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:39> initialized [ 1808.702131][T14172] usb 5-1: device descriptor read/8, error -71 [ 1808.970536][T14172] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1809.111201][T14172] usb 5-1: device descriptor read/8, error -71 [ 1809.274810][T14172] usb usb5-port1: unable to enumerate USB device [ 1809.710594][T19598] libceph: connect (1)[c::]:6789 error -101 [ 1809.742540][T25145] ceph: No mds server is up or the cluster is laggy [ 1809.798393][T19598] libceph: mon0 (1)[c::]:6789 connect error [ 1810.111994][T25151] imon:send_packet: packet tx failed (-71) [ 1810.119728][T14162] usb 8-1: USB disconnect, device number 39 [ 1810.173656][T25151] imon:vfd_write: send packet #2 failed [ 1810.599842][T25156] syzkaller0: entered promiscuous mode [ 1810.641313][T25156] syzkaller0: entered allmulticast mode [ 1811.518203][T19598] libceph: connect (1)[c::]:6789 error -101 [ 1811.546643][T25167] ceph: No mds server is up or the cluster is laggy [ 1811.659042][T19598] libceph: mon0 (1)[c::]:6789 connect error [ 1812.893924][T25186] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4474'. [ 1813.833337][T14184] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1814.840526][T19598] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1815.040555][T19598] usb 8-1: Using ep0 maxpacket: 16 [ 1815.125893][T25201] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4477'. [ 1815.194319][T25200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4477'. [ 1815.234694][T19598] usb 8-1: config 0 has an invalid interface number: 68 but max is 0 [ 1815.431495][T19598] usb 8-1: config 0 has no interface number 0 [ 1815.559464][T19598] usb 8-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 87 [ 1816.018827][T19598] usb 8-1: string descriptor 0 read error: -71 [ 1816.066867][T19598] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1816.129280][T19598] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.203116][T19598] usb 8-1: config 0 descriptor?? [ 1816.244994][T19598] usb 8-1: can't set config #0, error -71 [ 1816.256006][T25210] netlink: 'syz.9.4479': attribute type 25 has an invalid length. [ 1816.298220][T19598] usb 8-1: USB disconnect, device number 40 [ 1816.484608][T22508] udevd[22508]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1816.541619][T25223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4482'. [ 1816.690606][T19598] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1816.804709][T25223] nbd: socks must be embedded in a SOCK_ITEM attr [ 1816.883179][T19598] usb 8-1: device descriptor read/64, error -71 [ 1817.150902][T19598] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1817.310432][T19598] usb 8-1: device descriptor read/64, error -71 [ 1817.431066][T19598] usb usb8-port1: attempt power cycle [ 1817.493881][T22508] udevd[22508]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1817.687107][T25243] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4487'. [ 1817.788079][T25242] netlink: 'syz.0.4487': attribute type 2 has an invalid length. [ 1817.834217][T19598] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1817.993914][T19598] usb 8-1: device descriptor read/8, error -71 [ 1818.320917][T19598] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1818.523297][T19598] usb 8-1: device descriptor read/8, error -71 [ 1818.661135][T19598] usb usb8-port1: unable to enumerate USB device [ 1819.401333][T14167] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1819.471928][T14172] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1819.603960][T14167] usb 5-1: Using ep0 maxpacket: 8 [ 1819.623134][T25261] syz.3.4492 (25261): drop_caches: 2 [ 1819.631977][T14167] usb 5-1: no configurations [ 1819.639906][T14167] usb 5-1: can't read configurations, error -22 [ 1819.640446][T14162] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1819.951635][T14167] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1820.420774][T14167] usb 5-1: Using ep0 maxpacket: 8 [ 1820.442105][T14162] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1820.445120][T14167] usb 5-1: no configurations [ 1820.486679][T14162] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1820.527788][T14167] usb 5-1: can't read configurations, error -22 [ 1820.541196][T14162] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1820.559483][T14167] usb usb5-port1: attempt power cycle [ 1820.593477][T14162] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1820.624115][T14162] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.676991][T14162] usb 1-1: config 0 descriptor?? [ 1821.150541][T14167] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1821.202651][T14167] usb 5-1: Using ep0 maxpacket: 8 [ 1821.282196][T14167] usb 5-1: no configurations [ 1821.287287][T14167] usb 5-1: can't read configurations, error -22 [ 1821.346477][T14162] usbhid 1-1:0.0: can't add hid device: -71 [ 1821.435439][T14167] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1821.642059][T14184] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1821.686649][T14162] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1821.754662][T14162] usb 1-1: USB disconnect, device number 2 [ 1821.785406][T14167] usb 5-1: Using ep0 maxpacket: 8 [ 1821.813018][T14167] usb 5-1: no configurations [ 1821.875976][T14167] usb 5-1: can't read configurations, error -22 [ 1821.932839][T14172] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1821.948726][T14167] usb usb5-port1: unable to enumerate USB device [ 1821.968957][T14172] usb 10-1: no configurations [ 1822.045243][T14172] usb 10-1: can't read configurations, error -22 [ 1824.031242][ T5834] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1824.218016][ T5834] usb 5-1: device descriptor read/64, error -71 [ 1824.520818][ T5834] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1824.781104][T25316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4504'. [ 1824.802797][ T5834] usb 5-1: device descriptor read/64, error -71 [ 1825.061878][ T5834] usb usb5-port1: attempt power cycle [ 1825.144521][T25316] nbd: socks must be embedded in a SOCK_ITEM attr [ 1825.638407][ T5834] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1825.901139][ T5834] usb 5-1: device descriptor read/8, error -71 [ 1826.377171][ T5834] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1827.591730][T19598] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1827.647731][ T5834] usb 5-1: device descriptor read/8, error -71 [ 1827.842870][ T5834] usb usb5-port1: unable to enumerate USB device [ 1827.870515][T19598] usb 10-1: Using ep0 maxpacket: 16 [ 1827.896819][T14184] usb 7-1: device descriptor read/all, error -110 [ 1827.967242][T19598] usb 10-1: config 0 has an invalid interface number: 68 but max is 0 [ 1828.273516][T19598] usb 10-1: config 0 has no interface number 0 [ 1828.384906][T14184] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1828.387219][T24587] udevd[24587]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1828.430843][T19598] usb 10-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 87 [ 1828.467642][T22508] udevd[22508]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1828.512366][ T5834] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 1828.548249][T19598] usb 10-1: string descriptor 0 read error: -71 [ 1828.574329][T19598] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1828.583940][T14184] usb 7-1: device descriptor read/64, error -32 [ 1828.618727][T19598] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.703455][ T5834] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 1828.714186][T19598] usb 10-1: config 0 descriptor?? [ 1828.724234][T14184] usb usb7-port1: attempt power cycle [ 1828.757398][T19598] usb 10-1: can't set config #0, error -71 [ 1828.772985][ T5834] usb 5-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1828.856746][T25340] loop5: detected capacity change from 0 to 7 [ 1828.875903][T13178] Bluetooth: hci3: command 0x0406 tx timeout [ 1829.538889][T14184] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1829.550502][T25340] Dev loop5: unable to read RDB block 7 [ 1829.556587][T25340] loop5: AHDI p1 [ 1829.560292][T25340] loop5: partition table partially beyond EOD, truncated [ 1829.617213][T19598] usb 10-1: USB disconnect, device number 38 [ 1829.631959][ T5834] usb 5-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 1829.648239][ T5834] usb 5-1: config 150 has no interface number 0 [ 1829.654675][ T5834] usb 5-1: config 150 interface 204 has no altsetting 0 [ 1829.662448][T14184] usb 7-1: device descriptor read/8, error -32 [ 1829.671061][ T5834] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1829.680692][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.688748][ T5834] usb 5-1: Product: syz [ 1829.693302][ T5834] usb 5-1: Manufacturer: syz [ 1829.697956][ T5834] usb 5-1: SerialNumber: syz [ 1830.981505][T14184] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1831.020685][T14184] usb 7-1: device descriptor read/8, error -32 [ 1831.120439][T24738] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1831.161606][T14184] usb usb7-port1: unable to enumerate USB device [ 1831.173655][ T5834] xr_serial 5-1:150.204: skipping garbage [ 1831.424145][T25284] raw-gadget.1 gadget.6: failed to queue disconnect event [ 1831.441083][ T5834] usb 5-1: USB disconnect, device number 111 [ 1831.441608][ T6094] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1832.077818][T24738] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1832.212211][T24738] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1832.230685][T24738] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1832.243676][T24738] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1832.290554][ T6094] usb 8-1: Using ep0 maxpacket: 8 [ 1832.291080][T24738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.312570][ T6094] usb 8-1: no configurations [ 1832.340576][ T6094] usb 8-1: can't read configurations, error -22 [ 1832.369430][T24738] usb 4-1: config 0 descriptor?? [ 1832.433483][T25363] tipc: Started in network mode [ 1832.451512][T25363] tipc: Node identity e679cbd3953f, cluster identity 4711 [ 1832.474827][T25363] tipc: Enabled bearer , priority 0 [ 1832.492168][ T6094] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1832.518019][T25363] syzkaller0: entered promiscuous mode [ 1832.537721][T25363] syzkaller0: entered allmulticast mode [ 1832.574979][T25363] tipc: Resetting bearer [ 1832.624903][T25362] tipc: Resetting bearer [ 1832.681485][ T6094] usb 8-1: Using ep0 maxpacket: 8 [ 1832.692495][ T6094] usb 8-1: no configurations [ 1832.705814][ T6094] usb 8-1: can't read configurations, error -22 [ 1832.728238][ T6094] usb usb8-port1: attempt power cycle [ 1832.842346][T25362] tipc: Disabling bearer [ 1833.035838][T24738] usbhid 4-1:0.0: can't add hid device: -71 [ 1833.049540][T24738] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1833.074851][T24738] usb 4-1: USB disconnect, device number 80 [ 1833.092991][T25380] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4520'. [ 1833.111102][ T6094] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1833.142429][ T6094] usb 8-1: Using ep0 maxpacket: 8 [ 1833.154155][ T6094] usb 8-1: no configurations [ 1833.161652][T25383] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4520'. [ 1833.163645][ T6094] usb 8-1: can't read configurations, error -22 [ 1833.239738][T25383] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4520'. [ 1833.299223][T25384] macvlan2: entered promiscuous mode [ 1833.310703][ T6094] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1833.325991][T25384] macvlan2: entered allmulticast mode [ 1833.353571][T25384] bond1: entered promiscuous mode [ 1833.363182][ T6094] usb 8-1: Using ep0 maxpacket: 8 [ 1833.365896][T25384] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1833.399133][ T6094] usb 8-1: no configurations [ 1833.410244][T25384] bond1: left promiscuous mode [ 1833.425316][ T6094] usb 8-1: can't read configurations, error -22 [ 1833.450128][ T6094] usb usb8-port1: unable to enumerate USB device [ 1834.866252][T25402] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4523'. [ 1836.042087][ T6094] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 1836.082471][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 1836.088606][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 1836.095638][T25416] ceph: No mds server is up or the cluster is laggy [ 1836.173714][T25422] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1836.354052][ T6094] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 1836.428869][ T6094] usb 4-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1836.471585][ T6094] usb 4-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 1836.506457][ T6094] usb 4-1: config 150 has no interface number 0 [ 1836.526251][ T6094] usb 4-1: config 150 interface 204 has no altsetting 0 [ 1836.608875][ T6094] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1836.646931][ T6094] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.689907][ T6094] usb 4-1: Product: syz [ 1836.736789][ T6094] usb 4-1: Manufacturer: syz [ 1836.736816][ T6094] usb 4-1: SerialNumber: syz [ 1840.220409][T14184] libceph: connect (1)[c::]:6789 error -101 [ 1840.248968][T14184] libceph: mon0 (1)[c::]:6789 connect error [ 1840.255327][T25445] ceph: No mds server is up or the cluster is laggy [ 1840.378336][ T6094] xr_serial 4-1:150.204: skipping garbage [ 1840.412241][ T6094] usb 4-1: USB disconnect, device number 81 [ 1840.494086][T24738] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1840.672515][T24738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1840.701812][T24738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1840.722860][T14167] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1840.733697][T24738] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1840.779721][T24738] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1840.815927][T24738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.847714][T24738] usb 1-1: config 0 descriptor?? [ 1841.041062][T14167] usb 7-1: Using ep0 maxpacket: 8 [ 1841.079698][T14167] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1841.834117][ T31] INFO: task kworker/1:13:14180 blocked for more than 143 seconds. [ 1841.890368][ T31] Tainted: G L syzkaller #0 [ 1841.899699][T14167] usb 7-1: config 0 has no interfaces? [ 1841.914290][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1841.925113][T14167] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1841.942440][ T31] task:kworker/1:13 state:D stack:22392 pid:14180 tgid:14180 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1841.968421][T14167] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.019446][ T31] Workqueue: usb_hub_wq hub_event [ 1842.025007][T14167] usb 7-1: config 0 descriptor?? [ 1842.044241][ T31] Call Trace: [ 1842.053769][T24738] usbhid 1-1:0.0: can't add hid device: -71 [ 1842.059956][T24738] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1842.065307][ T31] [ 1842.074284][T24738] usb 1-1: USB disconnect, device number 3 [ 1842.097889][ T31] __schedule+0x17b4/0x5680 [ 1842.124826][ T31] ? kasan_save_stack+0x3e/0x60 [ 1842.174555][ T31] ? device_initial_probe+0xa1/0xd0 [ 1842.211436][ T31] ? device_add+0x7e9/0xbb0 [ 1842.224431][ T31] ? __device_attach+0x2c5/0x450 [ 1842.240569][ T31] ? bus_probe_device+0x12a/0x220 [ 1842.259429][ T31] ? look_up_lock_class+0x57/0x110 [ 1842.276643][ T31] ? __pfx___schedule+0x10/0x10 [ 1842.295962][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1842.302214][ T31] ? schedule+0x90/0x360 [ 1842.311417][ T31] schedule+0x164/0x360 [ 1842.325280][ T31] schedule_timeout+0xc3/0x2c0 [ 1842.339217][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1842.356306][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1842.372690][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1842.383404][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1842.399000][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1842.407920][ T31] ? wait_for_completion+0x274/0x5e0 [ 1842.419579][ T31] wait_for_completion+0x2cc/0x5e0 [ 1842.429453][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1842.448051][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1842.462039][ T31] i2c_del_adapter+0x5c0/0x790 [ 1842.471747][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1842.483954][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 1842.497457][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1842.509240][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1842.514837][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1842.521829][ T31] ? dvb_usbv2_exit+0x94c/0xb80 [ 1842.526788][ T31] dvb_usbv2_probe+0x4c3/0x3d40 [ 1842.538451][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 1842.545286][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1842.551795][ T31] usb_probe_interface+0x659/0xc70 [ 1842.557030][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 1842.567374][ T31] really_probe+0x267/0xaf0 [ 1842.584855][ T31] __driver_probe_device+0x1ef/0x380 [ 1842.595700][ T31] driver_probe_device+0x4f/0x240 [ 1842.611455][ T31] __device_attach_driver+0x279/0x430 [ 1842.619770][ T31] bus_for_each_drv+0x258/0x2f0 [ 1842.631838][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1842.648031][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1842.654914][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1842.660978][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 1842.667582][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1842.673937][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1842.680016][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1842.693304][ T31] __device_attach+0x2c5/0x450 [ 1842.698287][ T31] ? __pfx___device_attach+0x10/0x10 [ 1842.708434][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1842.714753][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1842.719887][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1842.727249][ T31] device_initial_probe+0xa1/0xd0 [ 1842.732807][ T31] bus_probe_device+0x12a/0x220 [ 1842.738009][ T31] device_add+0x7e9/0xbb0 [ 1842.743815][ T31] usb_set_configuration+0x1a87/0x2110 [ 1842.749593][ T31] usb_generic_driver_probe+0x8d/0x150 [ 1842.762408][ T31] usb_probe_device+0x1c4/0x3b0 [ 1842.767434][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 1842.773514][ T31] really_probe+0x267/0xaf0 [ 1842.792993][ T31] __driver_probe_device+0x1ef/0x380 [ 1842.798604][ T31] driver_probe_device+0x4f/0x240 [ 1842.812561][ T31] __device_attach_driver+0x279/0x430 [ 1842.819471][ T31] bus_for_each_drv+0x258/0x2f0 [ 1842.824824][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1842.831554][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1842.837163][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1842.843272][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 1842.848621][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1842.856126][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1842.866532][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1842.875360][ T31] __device_attach+0x2c5/0x450 [ 1842.880515][ T31] ? __pfx___device_attach+0x10/0x10 [ 1842.885984][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1842.892255][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1842.898652][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1842.903910][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1842.913640][ T31] device_initial_probe+0xa1/0xd0 [ 1842.924897][ T31] bus_probe_device+0x12a/0x220 [ 1842.929905][ T31] device_add+0x7e9/0xbb0 [ 1842.943966][ T31] usb_new_device+0xa08/0x16f0 [ 1842.948980][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 1842.954973][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1842.961854][ T31] hub_event+0x2a1c/0x4f30 [ 1842.966621][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1842.976366][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 1842.983855][ T31] ? __pfx_hub_event+0x10/0x10 [ 1842.988899][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1842.995268][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.001424][ T31] ? process_scheduled_works+0xa70/0x1860 [ 1843.007477][ T31] ? process_scheduled_works+0xa70/0x1860 [ 1843.017946][ T31] process_scheduled_works+0xb5d/0x1860 [ 1843.023842][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.031617][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1843.038318][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.044370][ T31] ? assign_work+0x3d5/0x5e0 [ 1843.050582][ T31] worker_thread+0xa53/0xfc0 [ 1843.056240][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.062612][ T31] kthread+0x388/0x470 [ 1843.066852][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1843.073543][ T31] ? __pfx_kthread+0x10/0x10 [ 1843.078306][ T31] ret_from_fork+0x514/0xb70 [ 1843.087998][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1843.101472][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.107421][ T31] ? __switch_to+0xc79/0x1410 [ 1843.118736][ T31] ? __pfx_kthread+0x10/0x10 [ 1843.123723][ T31] ret_from_fork_asm+0x1a/0x30 [ 1843.128843][ T31] [ 1843.132342][ T31] [ 1843.132342][ T31] Showing all locks held in the system: [ 1843.146284][ T31] 1 lock held by khungtaskd/31: [ 1843.151659][ T31] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1843.203524][ T31] 2 locks held by getty/5375: [ 1843.210605][ T31] #0: ffff888035f3f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1843.224890][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1843.235870][ T31] 5 locks held by kworker/1:13/14180: [ 1843.241785][ T31] #0: ffff888021ee2540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1843.253692][ T31] #1: ffffc90003757c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1843.266109][ T31] #2: ffff8880299a31d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1843.275791][ T31] #3: ffff888029c5e1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1843.285896][ T31] #4: ffff8880648c21a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1843.295716][ T31] 4 locks held by udevd/22506: [ 1843.313529][ T31] #0: ffff88805be7be18 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 1843.324974][ T31] #1: ffff88803188a080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 1843.336936][ T31] #2: ffff888022b1c2d8 (kn->active#26){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1843.348669][ T31] #3: ffff888029c5e1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1843.358556][ T31] 2 locks held by syz.2.4174/23754: [ 1843.364128][ T31] 3 locks held by dhcpcd-run-hook/25486: [ 1843.372950][ T31] [ 1843.375407][ T31] ============================================= [ 1843.375407][ T31] [ 1843.384440][ T31] NMI backtrace for cpu 0 [ 1843.384466][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1843.384509][ T31] Tainted: [L]=SOFTLOCKUP [ 1843.384519][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1843.384535][ T31] Call Trace: [ 1843.384545][ T31] [ 1843.384556][ T31] dump_stack_lvl+0xe8/0x150 [ 1843.384591][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1843.384631][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1843.384662][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1843.384704][ T31] sys_info+0x135/0x170 [ 1843.384736][ T31] watchdog+0xfd3/0x1030 [ 1843.384784][ T31] ? watchdog+0x1c9/0x1030 [ 1843.384830][ T31] kthread+0x388/0x470 [ 1843.384866][ T31] ? __pfx_watchdog+0x10/0x10 [ 1843.384901][ T31] ? __pfx_kthread+0x10/0x10 [ 1843.384938][ T31] ret_from_fork+0x514/0xb70 [ 1843.384970][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1843.384997][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.385028][ T31] ? __switch_to+0xc79/0x1410 [ 1843.385070][ T31] ? __pfx_kthread+0x10/0x10 [ 1843.385107][ T31] ret_from_fork_asm+0x1a/0x30 [ 1843.385157][ T31] [ 1843.385172][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1843.511088][ C1] NMI backtrace for cpu 1 [ 1843.511111][ C1] CPU: 1 UID: 0 PID: 25486 Comm: cmp Tainted: G L syzkaller #0 PREEMPT(full) [ 1843.511141][ C1] Tainted: [L]=SOFTLOCKUP [ 1843.511151][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1843.511165][ C1] RIP: 0010:try_to_wake_up+0x4a1/0x1380 [ 1843.511206][ C1] Code: 00 00 00 e9 3e 03 00 00 b3 01 e9 1a 03 00 00 41 bd 08 00 00 00 eb 5d 4c 8d b5 08 03 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 <74> 08 4c 89 f7 e8 35 55 9c 00 4d 8b 36 49 83 c6 50 4c 89 f0 48 c1 [ 1843.511226][ C1] RSP: 0018:ffffc90000a08d40 EFLAGS: 00000046 [ 1843.511247][ C1] RAX: 1ffff1100ee18be9 RBX: 1ffff1100ee18b95 RCX: 0000000080010002 [ 1843.511264][ C1] RDX: 0000000000000000 RSI: ffffffff8e217007 RDI: ffffffff8c28aa60 [ 1843.511281][ C1] RBP: ffff8880770c5c40 R08: ffffffff903096f7 R09: 1ffffffff20612de [ 1843.511299][ C1] R10: dffffc0000000000 R11: fffffbfff20612df R12: dffffc0000000000 [ 1843.511316][ C1] R13: 1ffff1100ee18b8b R14: ffff8880770c5f48 R15: 0000000000000001 [ 1843.511336][ C1] FS: 00007f238a58ac80(0000) GS:ffff888125393000(0000) knlGS:0000000000000000 [ 1843.511356][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1843.511372][ C1] CR2: 00007f238a600008 CR3: 00000000505c7000 CR4: 0000000000350ef0 [ 1843.511391][ C1] Call Trace: [ 1843.511400][ C1] [ 1843.511412][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1843.511447][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.511478][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1843.511511][ C1] hrtimer_wakeup+0x4e/0x60 [ 1843.511545][ C1] __hrtimer_run_queues+0x3c0/0xa20 [ 1843.511588][ C1] hrtimer_interrupt+0x44b/0x950 [ 1843.511639][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1843.511672][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1843.511698][ C1] [ 1843.511706][ C1] [ 1843.511716][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1843.511741][ C1] RIP: 0010:filter_irq_stacks+0x40/0xa0 [ 1843.511782][ C1] Code: f4 31 db 49 bd 00 00 00 00 00 fc ff df 49 89 ff 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 d4 f9 7f 00 49 8b 04 de <48> 3d 30 02 00 81 0f 93 c1 48 3d 90 16 00 81 0f 92 c2 84 d1 75 27 [ 1843.511801][ C1] RSP: 0018:ffffc90004077238 EFLAGS: 00000246 [ 1843.511819][ C1] RAX: ffffffff821b9f0a RBX: 0000000000000008 RCX: 0000000000000001 [ 1843.511835][ C1] RDX: 0000000000000c00 RSI: 000000000000000d RDI: ffffc900040772c0 [ 1843.511851][ C1] RBP: ffffc900040774f0 R08: ffffffff81d59666 R09: ffffffff8e95cd60 [ 1843.511869][ C1] R10: dffffc0000000000 R11: ffffffff81b0d880 R12: 000000000000000d [ 1843.511885][ C1] R13: dffffc0000000000 R14: ffffc900040772c0 R15: ffffc90004077300 [ 1843.511906][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1843.511943][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1843.511967][ C1] ? mprotect_fixup+0x62a/0xb60 [ 1843.512008][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1843.512042][ C1] ? mas_alloc_nodes+0x291/0x350 [ 1843.512070][ C1] stack_depot_save_flags+0x33/0x810 [ 1843.512100][ C1] ? kernel_text_address+0xa5/0xe0 [ 1843.512136][ C1] ? mas_alloc_nodes+0x291/0x350 [ 1843.512159][ C1] kasan_save_track+0x4f/0x80 [ 1843.512190][ C1] ? kasan_save_track+0x3e/0x80 [ 1843.512220][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 1843.512252][ C1] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 1843.512282][ C1] ? mas_alloc_nodes+0x291/0x350 [ 1843.512303][ C1] ? mas_preallocate+0x2d6/0x640 [ 1843.512326][ C1] ? __split_vma+0x318/0xa40 [ 1843.512350][ C1] ? vma_modify+0x97e/0x1e10 [ 1843.512372][ C1] ? vma_modify_flags+0x24b/0x330 [ 1843.512394][ C1] ? mprotect_fixup+0x62a/0xb60 [ 1843.512427][ C1] ? do_mprotect_pkey+0x8d5/0xd20 [ 1843.512448][ C1] ? __x64_sys_mprotect+0x80/0x90 [ 1843.512482][ C1] ? do_syscall_64+0x15f/0xf80 [ 1843.512507][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1843.512560][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.512590][ C1] __kasan_slab_alloc+0x6c/0x80 [ 1843.512624][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1843.512654][ C1] ? mas_alloc_nodes+0x291/0x350 [ 1843.512676][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 1843.512711][ C1] mas_alloc_nodes+0x291/0x350 [ 1843.512737][ C1] mas_preallocate+0x2d6/0x640 [ 1843.512768][ C1] ? rcu_is_watching+0x15/0xb0 [ 1843.512798][ C1] ? __pfx_mas_preallocate+0x10/0x10 [ 1843.512830][ C1] ? __mas_set_range+0x12f/0x3c0 [ 1843.512860][ C1] __split_vma+0x318/0xa40 [ 1843.512885][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.512921][ C1] ? __pfx___split_vma+0x10/0x10 [ 1843.512946][ C1] ? change_protection+0x4a7f/0x4c70 [ 1843.512988][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.513017][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.513044][ C1] ? can_vma_merge_left+0x191/0x3e0 [ 1843.513068][ C1] vma_modify+0x97e/0x1e10 [ 1843.513103][ C1] vma_modify_flags+0x24b/0x330 [ 1843.513129][ C1] ? __pfx_vma_modify_flags+0x10/0x10 [ 1843.513162][ C1] ? __pfx_native_flush_tlb_one_user+0x10/0x10 [ 1843.513198][ C1] ? aa_file_perm+0x192/0x15e0 [ 1843.513234][ C1] ? mprotect_fixup+0xfb/0xb60 [ 1843.513273][ C1] mprotect_fixup+0x62a/0xb60 [ 1843.513313][ C1] ? __pfx_mprotect_fixup+0x10/0x10 [ 1843.513347][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.513377][ C1] ? mas_next_slot+0xc3b/0xd10 [ 1843.513403][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.513433][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.513470][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.513497][ C1] ? apparmor_file_mprotect+0x2f7/0x400 [ 1843.513530][ C1] do_mprotect_pkey+0x8d5/0xd20 [ 1843.513562][ C1] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 1843.513602][ C1] ? exc_page_fault+0x6a/0xc0 [ 1843.513629][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.513661][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1843.513686][ C1] __x64_sys_mprotect+0x80/0x90 [ 1843.513722][ C1] do_syscall_64+0x15f/0xf80 [ 1843.513753][ C1] ? trace_irq_disable+0x3b/0x140 [ 1843.513792][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1843.513816][ C1] RIP: 0033:0x7f238a9212c7 [ 1843.513835][ C1] Code: 89 3d fd 3f 01 00 eb 90 0f 1f 00 f7 d8 89 05 f0 3f 01 00 48 c7 c0 ff ff ff ff eb 91 0f 1f 80 00 00 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d c9 3f 01 00 f7 d8 89 01 48 83 [ 1843.513854][ C1] RSP: 002b:00007ffee7796748 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 1843.513876][ C1] RAX: ffffffffffffffda RBX: 00007f238a8f6580 RCX: 00007f238a9212c7 [ 1843.513893][ C1] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 00007f238a637000 [ 1843.513909][ C1] RBP: 00007ffee7796a10 R08: 0000000000000000 R09: 00007f238a68b2e0 [ 1843.513924][ C1] R10: 00007f238a8f6580 R11: 0000000000000206 R12: 0000000000000020 [ 1843.513940][ C1] R13: 0000041fbc8517de R14: 0000000000000000 R15: 00007f238a935310 [ 1843.513969][ C1] [ 1844.234504][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1844.241398][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1844.252085][ T31] Tainted: [L]=SOFTLOCKUP [ 1844.256405][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1844.266456][ T31] Call Trace: [ 1844.269737][ T31] [ 1844.272669][ T31] vpanic+0x56c/0xa60 [ 1844.276665][ T31] ? __pfx___schedule+0x10/0x10 [ 1844.281534][ T31] ? __pfx_vpanic+0x10/0x10 [ 1844.286049][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1844.291736][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1844.297920][ T31] panic+0xc5/0xd0 [ 1844.301654][ T31] ? __pfx_panic+0x10/0x10 [ 1844.306078][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1844.311727][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1844.317370][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1844.322771][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1844.328421][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1844.334622][ T31] watchdog+0x102c/0x1030 [ 1844.338983][ T31] ? watchdog+0x1c9/0x1030 [ 1844.343524][ T31] kthread+0x388/0x470 [ 1844.347619][ T31] ? __pfx_watchdog+0x10/0x10 [ 1844.352410][ T31] ? __pfx_kthread+0x10/0x10 [ 1844.357035][ T31] ret_from_fork+0x514/0xb70 [ 1844.361634][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1844.366738][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1844.372369][ T31] ? __switch_to+0xc79/0x1410 [ 1844.377051][ T31] ? __pfx_kthread+0x10/0x10 [ 1844.381664][ T31] ret_from_fork_asm+0x1a/0x30 [ 1844.386437][ T31] [ 1844.389721][ T31] Kernel Offset: disabled [ 1844.394038][ T31] Rebooting in 86400 seconds..