last executing test programs: 33m42.379785299s ago: executing program 0 (id=998): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000036c0)=ANY=[@ANYBLOB="1400"/13], 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x40000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xfffffffffffffdc0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, 0x0) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, 0x0, 0x8001) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x20000000) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r8, 0x7b1, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x7}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000100fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 33m40.247954824s ago: executing program 0 (id=1003): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) socket(0x840000000002, 0x3, 0xfa) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000001780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x1, @local, 0x7fffffff}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)="b364df8706503b2c50b6d029a4207d929d330dcb8241a455144d3faf3c3d6f68e35707b1c7bd3db1ab0dafcf46838fd621bd4de96bc8eb9c83acdb1fa15d1aef60f5b5c3", 0x44}, {&(0x7f0000000140)="e06ce8b6555f05f306b96703928a849486726188dfd93ca8e0aa32bb2d06b3dd9f6494ac1f1ca06080451eda7a5eba09ab6a3edb", 0x34}, {&(0x7f00000001c0)="1ea8c6c115b9b39b4577bf54675458189cbbbadb3f3206fae635a582cebaaca6fd816691718e9813eabe1de2123f03b46531274d981a45bc1eb53dd9c9804bc72ae10d02f3c390e61dd760752fc0dd6e4b4d1e19509d06bd4b8f1a83629229a548429413808dda40962ba04641b5ad5314d95508f9e0af63b0a6e62fad24d75f656cda07c2681eaacde86cabb283af2537be3d698bc9a210a375eea8cfb171dd6c47540c6837dcc339ec4f9f64be042835fe50cd48f4a902", 0xb8}, {&(0x7f0000000280)="e45acaf14e1a0db8bda3f6acee4c252bac830eb7c514c5f8cb96728335a1", 0x1e}, {&(0x7f00000002c0)="236f496b7a73973ad9b8a1452cffc463763a249c9ec355509b285c", 0x1b}, {&(0x7f0000000300)="c3247d27765076bef25b4ce2822d2cbf65d514f9cede89383cdeb31d8b5473b829c4956989a8cde3e0bc7f364de354cee411e3508b8dc05d6e812ed7d095422e7490aea35f65eda5ff63f7448d82344b90881af649600dadbc28a5b8cee70618f574afb3243c2b74bae66581f7c00d280b25bb95af0f9166719413ac809964790b95dca6bd60c24dc6a15b7b8be76daa6476ccfe31d438a8d8033a7f4fdbdfbbfc29fcafdc25b693fde3", 0xaa}, {&(0x7f00000003c0)="a885c3754c8ee37401aa8d5010ccb4f87c81dfa369b1f7eb40491480de77cd6dbc6bd2ad03eb62b1e2e0fd36545ad0408380ddfbe99c53af5f3c9c028b3f124b78249af7bc04d9c5a8716e7a50a1dd4a2ccac08536c5ff1afdd847a30083565662932a4928b8294692f1d63f3879265ce0e8366bd013ef74e5f1c96fd0c3b08d053096ea464ed8e6e94ddae3", 0x8c}], 0x7, &(0x7f0000001b40)=[@rthdrdstopts={{0xd8, 0x29, 0x37, {0x29, 0x18, '\x00', [@generic={0x5c, 0xbe, "d4dc19f9929c6fb6c9653527a51b15ed5343490543245f6d09b475021440417488c3464afc6f95e9c9bef92e668c62035e517fb6a338a553ccf2a4a5754978dda7e7fd935151fb5bfb398bcd1169865c99ea606ef45cead5924a6768b57286cc6df5305802e7483ff6a91826278947f320bb0550508c250f1547eb42fd63e08d4e847bbf53cd629dd170f739583edc3948c42e3bcbaeb94a1e8d9380e57a918f7eec0ca79ef93fc99e080b4e7469ab5aa0858cd1d3803dc61548d52d7e79"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @hoplimit={{0x14, 0x29, 0x34, 0x400}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r1}}}, @dstopts={{0x108, 0x29, 0x37, {0x33, 0x1d, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x3, 0xcf4, [0x8001, 0x7f, 0x5, 0x4]}}, @ra={0x5, 0x2, 0x401}, @generic={0x2, 0x2c, "87579074889e431a13a91f1a3cf33ef741f053b531cb95e841ed0adf66f83db6ad9eb6ad9dda46582c369099"}, @ra={0x5, 0x2, 0x5}, @generic={0x2, 0x10, "d65b8d41f4b16049a039efc456f60891"}, @hao={0xc9, 0x10, @loopback}, @generic={0x3, 0x58, "bfa53b64ea153a21223a870b868599b3b064091606553527d9a835e84e69cb673191fea007e4c50d2b6014ae759eda229e3bf3fa9c3a0c53429f4d37f2b8103f0bcf35f86de7a02148887548a9242d35d3c05f7ad63c3ef1"}, @jumbo={0xc2, 0x4, 0x8000}, @pad1, @jumbo={0xc2, 0x4, 0x1}]}}}, @hoplimit={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x2}}], 0x280}}, {{&(0x7f00000007c0)={0xa, 0x4e20, 0x0, @empty, 0x3ff}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000800)="60b7f53f71a298e6f93372535d7a9c7c662724dac95763118962bc5bcfe1cd3a0d57c8e7306e75c83fc73e126d33a7684542b5141e5baf028d8372a2545a143eb6e87b40b6cfd735b59983ca63825389f47ea6ac35b8e4da169cf9e57437c7c8f6a000a5b103c6900a9ae47e2b507e79320ab0d930c1b1c11766bfd1c57f2c3359b84ce28b90901fb20133a8d4253587195ac641b757d4db4cd50ceeea3acfee2ab0ab7bc57fc7de0ad9434a4cdbebbd0ee859afff58421bd14fe3c9301ad0e7149d9ed5436499c98beeacdf5980ff6a62b139092745222fca", 0xd9}, {&(0x7f0000000900)="62ef5ae163975586fdebec48021b2f63ae07611d01f29f72d8ea2e1b08403137629f92eb1dec8dcd0e98582d789419160fe5b44b6586c60b875de59649dac1c0d8d93af04ac9c4f64ac190bb4f669c041ffe1d99e8c6a2e675c3ef5b42d156bcfe79da4562840c531d2aa9236b39dd1228e12ce7bef4ae91898bfc55ae8d751dc3763782c28efee88e68ca", 0x8b}], 0x2, &(0x7f0000001a00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x161ca0c8}}, @hopopts_2292={{0x110, 0x29, 0x36, {0x1, 0x1f, '\x00', [@generic={0x1, 0x46, "d3e3bc04b83e7f754227554f27cd95ebd027296971cf136f2ca9ba4634d62578648faab4592660197fcf1208bbf942445ce3fcc7cd2066a39d0829d10bf43f67ac1c932531a7"}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x50, {0x1, 0x12, 0x0, 0x8, [0x7, 0x5, 0x8, 0x7fffffff, 0x6, 0x101, 0x1, 0x80000000, 0x3f9]}}, @ra, @calipso={0x7, 0x8, {0x2, 0x0, 0x2, 0x5}}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xd7}, @pad1, @calipso={0x7, 0x38, {0x1, 0xc, 0x8, 0xb81b, [0x5, 0x8, 0x0, 0x9, 0x3, 0x2]}}]}}}], 0x128}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x32}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xe16}}], 0x30}}], 0x3, 0x20040011) r2 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0xe98}) 33m39.771184673s ago: executing program 0 (id=1005): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000054d56"]) 33m39.412824303s ago: executing program 0 (id=1006): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r1, 0x107, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x5199, 0x4) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file1\x00'}, 0x6e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "6d7ffc5ed7e1a984", "9262f787066c2566b4ed53416673b771", "04597bcc", "54fe9b6efd9256c5"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="74948dfc55f8"}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="00e9ae00937d7aedb323cc113d8a866e5f60e1b9d06a98aff875580b4ec869a60cd29cb0127f2b3a7af19b529a6e2f6e957548d99539cb8283f79842933e80e26db1c3ae08892c63784b477d30f5ad3dd867bad45246375f47da4b975ab3cdd6cc8e4c4e6b68c1278fdf5f5574d4c64beef7e62d55de8836799637c678b3461d869196dae8018d913ae2812f7d47ada5cd222e650c5a1c96e5380bde1b40bafc47e885025dab912022881fef8db27759be", @ANYRES16=r5, @ANYBLOB="000428bd7000ffdbdf21170000000c009900ffffffff040000000a001a0008021100000000000a000600ffffffffffff00000a00060008021100000000000a000600ffffffffffff0000"], 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x41}) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(r8, &(0x7f0000001200)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0}}], 0x1, 0x2000c054) 33m39.088282299s ago: executing program 0 (id=1008): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x2f126000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800000000000000, 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101288, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000010c0)={0x2, 0x0, 0x400000000000000, 0x201}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x40900) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) 33m38.490187031s ago: executing program 0 (id=1013): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000)=0x4, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) fanotify_init(0x200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$video(&(0x7f0000000180), 0x100000001, 0x82080) r1 = syz_open_dev$video(&(0x7f00000002c0), 0x86e9, 0x8100) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3, @ANYRESHEX], 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x100, 0x80, 0x0, 0x21e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x80, 0x0, 0x0, 0x202, 0x0, 0x1}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f7", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYRES16=r1], 0x18}], 0x1, 0x0) recvmmsg(r9, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000900)=""/82, 0x52}], 0x1}, 0x7f}], 0x1, 0x11102, 0x0) io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r11 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r11, 0xc040564a, &(0x7f0000000140)={0x1, 0x0, @value}) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r10, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1}) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)="5500000018007f5f00fe01b2a4a2809302060000ffc200f005020500120a0007003500281014000000190005407f0a4c6d0022de1338d54404009b84137faf0f9dacf52899e76ef75afb83de4411001600c43ab82202000000f2ff000000000c145cfedeb73ceb34bad0a3c8cb942d9d3ce908a1beec9f4a0120513c34f518369064d69b6ab62ea1db845e09d3e72e3891f7f6529b4761f811835b01af02772bb11e223c3afc68f044bee330176b3838a8f7d03c27ad522ac4400d4e", 0xbc}], 0x1}, 0x20000004) 33m23.156634846s ago: executing program 32 (id=1013): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000)=0x4, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) fanotify_init(0x200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$video(&(0x7f0000000180), 0x100000001, 0x82080) r1 = syz_open_dev$video(&(0x7f00000002c0), 0x86e9, 0x8100) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3, @ANYRESHEX], 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x100, 0x80, 0x0, 0x21e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x80, 0x0, 0x0, 0x202, 0x0, 0x1}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f7", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYRES16=r1], 0x18}], 0x1, 0x0) recvmmsg(r9, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000900)=""/82, 0x52}], 0x1}, 0x7f}], 0x1, 0x11102, 0x0) io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r11 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r11, 0xc040564a, &(0x7f0000000140)={0x1, 0x0, @value}) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r10, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1}) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)="5500000018007f5f00fe01b2a4a2809302060000ffc200f005020500120a0007003500281014000000190005407f0a4c6d0022de1338d54404009b84137faf0f9dacf52899e76ef75afb83de4411001600c43ab82202000000f2ff000000000c145cfedeb73ceb34bad0a3c8cb942d9d3ce908a1beec9f4a0120513c34f518369064d69b6ab62ea1db845e09d3e72e3891f7f6529b4761f811835b01af02772bb11e223c3afc68f044bee330176b3838a8f7d03c27ad522ac4400d4e", 0xbc}], 0x1}, 0x20000004) 13m17.160007565s ago: executing program 5 (id=5228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r1, @ANYBLOB="0500000000000000000001000000060006004e240000901008809005008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240001000000000000000000000000000000000000000000000000000000000002f0000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691cb40409807c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030000000000f4000080060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a00000014000200fc0200000000000000000000000000010500030000000000060001000200000008000200e00000020500030003000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a00000014000200fc0200000000000000000000000000000500030003000000340000800600010002000000080002000a0101010500030004000000060001000200000008000200ac1414aa050003000300000064000080060001000a00000014000200200100000000000000000000000000000500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff010000000000000000000000000001050003000200000094000080060001000200000008000200ac1e00010500030002000000060001000200000008000200e00000010500030002000000060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000200000008000200000000000500030003000000060001000a00000014000200fe80000000000000000000000000000e050003000000000040000080060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000200000008000200ac1414aa050003000000000064000080060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002000a010100050003000200000070000080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a0000001400020000000000000000000000000000000001050003000000000000010080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200000000000500030003000000060001000200000008000200640101000500030002000000060001000200000008000200640101010500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8000000000000000000000000000bb05000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000200000008000200640101010500030001000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e1803008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220600050005000000e802098058000080060001000200000008000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300010000007c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a000000140002000000000000000000000000000000000105000300020000000600010002000000080002000a0101010500030003000000f4000080060001000a0000001400020000000000000000000000ffffac1414aa0500030003000000060001000200000008000200ac1414aa05000300000000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc01000000000000000000000000000005000300010000000600010002000000080002000a0101000500030000000000060001000200000008000200ac1e0101050003000200000094000080060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ffffffff050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff02000000000000000000000000000105000300020000007c000080200004000a004e2100000006fc0100000000000000000000000000010400000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549780000800800030001000000080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000e4060080dc020980f4000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000200000008000200ffffffff0500030001000000060001000200000008000200ac1e00010500030001000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fc010000000000000000000000000001050003000300000034000080060001000200000008000200640101000500030001000000060001000200000008000200ac1414bb050003000200000000010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000010500030000000000940000800600010002000000080002006401010005000300010000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000200000008000200e00000020500030003000000060001000200000008000200ac1414120500030002000000060001000200000008000200ac14142d05000300020000001c000080060001000200000008000200ffffffff05000300030000000800030002000000200004000a004e2000000005fc010000000000000000000000000001000000009403098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030003000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe880000000000000000000000000101050003000100000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030001000000060001000a0000001400020000000000000000000000ffffe00000020500030003000000f4000080060001000200000008000200000000000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe80000000000000000000000000003e05000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000058000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414410500030010000000060001000200000008000200ac1e00010500030001000000f4000080060001000200000008000200640101000500030002000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414270500030000000000060001000a0000001400020020010000000000000000000000000002050003000100000058000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe8000000000000000000000000000140500030000000000060001000200000008000200e0000001050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030006000000060006004e24000008000100", @ANYRES32=r2, @ANYBLOB="240003"], 0x10e0}}, 0x0) 13m16.712006953s ago: executing program 5 (id=5230): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000005020010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) 13m16.421561372s ago: executing program 5 (id=5231): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000005000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033"], 0x23c}}, 0x0) 13m16.119533108s ago: executing program 5 (id=5233): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000380), &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f00000001c0)={0x0, 0x3}, 0x2) openat$iommufd(0xffffffffffffff9c, 0x0, 0x7c9102, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0xfffffffffffffff9, 0x0, 0xb}, 0x0) epoll_create(0x101) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe90, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800c004}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x10}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x31}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}]}], {0x14}}, 0xb4}}, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) socket(0x1e, 0x4, 0x0) 13m14.667895862s ago: executing program 5 (id=5236): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0xb, 0x4, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x4, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0x8, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x10000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xf7, 0xaa, 0x8, 0x0, 0x4}, {0xdddd0000, 0xddddf801, 0x8, 0x6, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c, 0x7d}, {0x0, 0x0, 0xf, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x40}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xfe}, {0x0, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc, 0x26, 0x3, 0x10}, {0xf000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xc, 0xf801, 0x0, [0x0, 0x0, 0x1]}) 13m14.298580274s ago: executing program 5 (id=5238): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c519c708330f8b694f27824412303401903e72092ff9623692040020000904090000df77d300000000000000000053cb314fd8325cc262cf196f8189e4fb1fd1c265f67db7b24b4d821e6e3488566f41aa68f6bf07f61966e89eb1330e5665ed5f3ae3b6d52a268b2c2e998a78307de064d662e3c4f6a264125ab6858c56f6ca6a44fcc1c7f8f7f3ed1e64a19e2e82d73ca918bdc99ec887b0fd7d7c79"], 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000001080)=""/4103, &(0x7f0000001040)=0xdf9226e557f1152d) socket$unix(0x1, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x111080, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) landlock_restrict_self(r2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) syz_usb_control_io(r0, 0x0, 0x0) 13m13.472292104s ago: executing program 33 (id=5238): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c519c708330f8b694f27824412303401903e72092ff9623692040020000904090000df77d300000000000000000053cb314fd8325cc262cf196f8189e4fb1fd1c265f67db7b24b4d821e6e3488566f41aa68f6bf07f61966e89eb1330e5665ed5f3ae3b6d52a268b2c2e998a78307de064d662e3c4f6a264125ab6858c56f6ca6a44fcc1c7f8f7f3ed1e64a19e2e82d73ca918bdc99ec887b0fd7d7c79"], 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000001080)=""/4103, &(0x7f0000001040)=0xdf9226e557f1152d) socket$unix(0x1, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x111080, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) landlock_restrict_self(r2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) syz_usb_control_io(r0, 0x0, 0x0) 13.193158787s ago: executing program 1 (id=8264): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="840000001000000429bd700000000000030000006e00018072d029e3955011e81ea7c10a03e5916a64d437531c7570e7b3c917224303a267fa87877f9aa731f3feef0ba4c01cb84d6c78beb0a800398ef5e367725908166d010000006b0a7dbfa4abe9e1c6e3685654f4ccd6e928c5b2e9d51451e7454cd685536d25b72853218a600000e2143184ea23918ce4753be602fd99e1eaa86be5c9291b5c012f7df8c78eb0fffc8d3ddcc8f14510f4ef173716edbeb94440c17610a37ea63a1df6651222109525d9af4019c518b22349147e9f59eea69cfca924ee527de2cce733b8952ff1dad4541095c4a31a5aa4e97eedbf8e0e39c5e6bf6ec024131509fdba9e3e9a0d528d00a1be98ce153d1c336a8152858450ae5a8f201b8771e243a9f993d9af7d734f2f805a2ce5641aa8f831cbc039"], 0x84}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) unshare(0x6020400) syz_open_procfs(0x0, &(0x7f00000006c0)='pagemap\x00') syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="e600000700b1a700000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) select(0x64, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}], 0x2, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) shutdown(r3, 0x2) syz_usb_control_io(r1, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', r5, 0x4, 0x4, 0x7d, 0x9, 0x58, @local, @loopback={0x1000000, 0xffff888101827518}, 0x0, 0x0, 0x80000, 0xfffdfffe}}) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in6={0x21, 0x3, 0x2, 0xffffffffffffff4c, {0xa, 0x4e24, 0x401, @remote, 0x6}}, 0x24) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0x260, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x214, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1ec, 0x1, [@m_simple={0x100, 0x1e, 0x0, 0x0, {{0xb}, {0xd4, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x587, 0x5, 0x81, 0xa}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x13b}}, @TCA_DEF_PARMS={0x18, 0x2, {0x178, 0x7, 0x10000000, 0xf65e, 0x1}}, @TCA_DEF_DATA={0x72, 0x3, '\xc1%yL\xa8\xe4\xfei\xee\xaeD\xd28dq\xfd\xf8^\xcc\xa3-\x91\xae\x1d\x85\x1a\xd5\x01*\xcd77O\x9c4\x7f\xdb_\xd5\xaar\f\x1e\xa7\xa0\xe0\xd4\xb9IcZ\x11\xd2\a)\xdfO\xc9\xaf\x80\'c\xe3\xc6\xa8\x00\xa1\r\x8cpGo\x0eu\xe5\xbe\xbd\xeb\xb9\x8c\xae\x15\xf1\xa6\xady\xdf\xda\x90\xed?\xf3b\xb0\xa1\xf5`q\xa7\xc4\\\xeb\xf5s\xed\t\xc4a\xf8\xe7'}, @TCA_DEF_DATA={0xa, 0x3, '[\\}()\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0xb0, 0x15, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x8, 0xc, 0x8}, 0xff21}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x20000000, 0x1, 0x6}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x1000, 0x20000000, 0xcdb, 0x305}, 0x5}}]}, {0x29, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaeded"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FD={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x260}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) socket(0x10, 0x803, 0x0) 10.953725006s ago: executing program 1 (id=8277): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r0 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r3, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) 8.229534132s ago: executing program 6 (id=8288): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file0\x00', 0x0, 0x100) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0x0, 0x7, {0x2, 0x2, 0x194, 0x9, 0x5, 0xa, {0x1, 0x8, 0xe, 0x9, 0x7, 0x0, 0x1, 0x401, 0x0, 0x1000, 0xfffffffd, r2, r3, 0x1, 0x7ff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r4, 0x0, 0x20000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r7, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r7, &(0x7f0000000280)=[{}, {0x4, 0x316, 0x1800}], 0x2) socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r10, 0x0, 0x0) fdatasync(r10) fsconfig$FSCONFIG_SET_FD(r10, 0x5, &(0x7f00000000c0)='\x00', 0x0, r5) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'syz1\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000010000304000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYBLOB='\b'], 0x40}}, 0x0) 7.874957766s ago: executing program 1 (id=8289): ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000100)={"b3aee8e2b88350b1ae4f58ecb2b0544b4fd0583d6365602686e26e6af453f262", 0xffffffffffffffff, 0xffffffffffffffff}) fcntl$notify(r0, 0x402, 0x4) r1 = epoll_create1(0x0) r2 = inotify_init1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x90000000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x3, r2, &(0x7f0000000000)) r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0xde, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0b88a82c00810000008848000008000000000000000000421f00bc00670005060690787f00000164010100441c3e53ac1414aa00000006ac1e0001000000817f00000100000009891bf5e0000001ac1414aa64010102e0000001e0000002ffffffff443c4a816401010200000200ac141411000000010a01010100000003ac1414bb00000003fffffffffffffffeac1414aa00000001ffffffff00000005004e244e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d180000b90780001fe06e2d4c3d901080a000000060000000afe0dcedd0d38cae3a162078698000079d7b7718a2b99033d58a13e02b0c2c94f2218ac83e0fa4ab289c3692711331e5e1e58a5bbc0963b"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="595329bd7000000000086b00000008000300", @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x28}}, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r9, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r10, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xbdf210f25e63a962, 0x8031, 0xffffffffffffffff, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYRESOCT=r2, @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000000c00000095ff010000000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x200040c0}, 0x84) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r11, 0x6) 7.444523625s ago: executing program 2 (id=8292): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_getnexthop={0x18, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xbd9}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x8cc6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c011}, 0x8001) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x5}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xb168}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14}}, 0x70}}, 0x4048010) 7.164609963s ago: executing program 2 (id=8294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30008000040601040000000000f75684786e8caefb40ff9abf1900000005000003090002007379080000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000804) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) (async, rerun: 32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 32) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='io_uring_queue_async_work\x00', r2, 0x0, 0x5}, 0x18) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000300)=0x4) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x8810}, 0x40040) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a00004000000000000000000500160000000000080017"], 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES8=r4, @ANYRES16, @ANYRES32=r3, @ANYRESHEX=r0, @ANYRES16=r4, @ANYRES8, @ANYRESDEC=r1, @ANYRESHEX=r0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x748fc9118b8c65b9}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0xc, 0xff2, &(0x7f0000002e00)=""/4082, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r7 = socket(0x10, 0x3, 0x0) (async) request_key(&(0x7f0000000040)='ceph\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f00000000c0)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\nT\xdd\xd1{\xff\xcb\xdb\xb1\xfc\xf4\xbc\xc3\x83\xdd31\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x14\x185\xa6- \xe6uK\xe1D\xa9\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\x06\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17Zf9\xcc\xdcR\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@', 0xffffffffffffffff) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000004ac0)={0x2020}, 0x2020) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x8}) (async, rerun: 32) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) (async, rerun: 32) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$inet(0x2, 0x4, 0x205) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r11, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r13}, 0x8) (async, rerun: 64) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) (async, rerun: 64) close(r9) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 7.15422093s ago: executing program 6 (id=8295): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) syz_emit_ethernet(0x206, &(0x7f0000000640)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021001d03a00fe8000000000000000000000000000bbff0200000000000000000000000000010400907800000000608bb91d00001100fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000032000000000200000000000000000000009da17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa37105020000008c65fd1a52737fa1ec91495f4d25a766a5dd36bc84606729892e08ffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e00328b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db145a1595bfbb418a0edc41397a2f639f9f6c3b3790720000000000600"/518], 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0xa0040, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000240), 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x28, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f0000000000), 0x4) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x393524b7fb26cb4b, 0x200000, 0x200000b, r11}}], 0x20, 0x6044}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000000000005010040"]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x2c, 0x6, 0x0, 0xfffffffc}, {0x6, 0x3, 0x0, 0x7fff7ffc}]}) 6.879455485s ago: executing program 2 (id=8297): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x452003, 0x0) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r5, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r5) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="250000001000030529bcfcffffff001000000000", @ANYRES32=0x0, @ANYBLOB="15830600000000002000128008000100767469001400028008000400ffffffff08000400ac1e0001"], 0x40}}, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0xfffffffd, 0x0, 0x8], [0x88000001, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00030d0000000d03d33333dc2458b2470cb6d86a570aebf7126e2a2719c16ab0a0414b194d10b311891ba48c0d74266006e8a558a00e9ae6f25880fbe7fe26429a645765cc4a5e09465b789f60d072cd6872fd43e94b3b6b32e5c738e9d285b4182fcc9fe6f3a6078548c393b444389e9b4b74ac3455b02809dec458007e95f0"], 0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') 6.795677513s ago: executing program 3 (id=8298): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x1003, 0xffffffffffffffff, 0x0, 0xa00369a4}, 0x38) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000080ffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 6.675862787s ago: executing program 3 (id=8299): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r0 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r3, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) 5.852044537s ago: executing program 6 (id=8300): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe80}, 0x800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x169a82, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x796, 0x0, 0x0, 0x7fff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000036000000", 0xfe60) sendfile(r2, r2, 0x0, 0xfff2) syz_io_uring_setup(0x6f29, &(0x7f00000001c0)={0x0, 0x108e, 0x2602, 0x1, 0x1d8, 0x0, r2}, &(0x7f0000000380), &(0x7f0000000240)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000002060108c080fad40000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x54002}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f00000002c0)=""/29) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x5, 0x1) syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xd072, 0x0, 0x2002, 0xbedffffc}, &(0x7f0000000000), &(0x7f00000002c0)) 4.152167626s ago: executing program 1 (id=8303): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x4, 0x4, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 4.034428169s ago: executing program 4 (id=8304): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x7) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000040)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x2, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000140)={0x7, 0x1, 0x5, 0x401, 0xc9, 0x4, "02f8ffff070000fbb4883d45f400", 0x8, 0xae, 0x6, 0x8, 0x2, 0x0, 0x40}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x0, 0x80) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.987816435s ago: executing program 2 (id=8305): r0 = mq_open(&(0x7f00000019c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_getsetattr(r0, 0x0, &(0x7f0000000180)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400220000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.684042609s ago: executing program 6 (id=8306): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x24, 0x3, "ec7110"}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000280)="00de11b13e64bbf6285132df64ee395565684d780a54b0643da95bd04f4564f10000000000000000ca6758ee", 0x2c, 0x400000000000000, 0x0, 0x0) pipe2(&(0x7f0000000080), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.463956141s ago: executing program 3 (id=8307): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="7c010000190001000000000000000000fc020000000000000000000000000000000000000000000000000000000000000000000300000000020000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000006c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000003e225e70b0277e420000000000000000000000000000000000000000000000000000000000000000000000000000c40005"], 0x17c}}, 0x0) 3.462459652s ago: executing program 2 (id=8308): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) (async) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@end]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) fcntl$getown(r0, 0x9) (async) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80c2, 0x0) fallocate(r7, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r7, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d8b000/0x4000)=nil, 0x800000}) ioctl$DRM_IOCTL_MODE_SETPLANE(r7, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3, 0x5bdc, 0x4000000, 0x0, 0x6, 0x5}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x3a, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.206791483s ago: executing program 3 (id=8309): socket$inet6(0xa, 0x80002, 0x88) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000006c0)=[{{&(0x7f0000000480)=@rc, 0x80, &(0x7f0000000680)=[{&(0x7f0000000500)=""/206, 0xce}, {&(0x7f00000000c0)=""/55, 0x37}, {&(0x7f0000000600)=""/104, 0x68}], 0x3}, 0x3}], 0x1, 0x2, 0x0) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fgetxattr(r2, 0x0, &(0x7f0000000040)=""/111, 0x6f) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) (async) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x22000, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r3 = io_uring_setup(0x5bde, &(0x7f0000000380)={0x0, 0x5f41, 0x10080}) (async) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200a8140900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000a0a050000001b0000000000020000040900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x2000c801}, 0x20000080) (async) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000001c0)) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000340), 0x14) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0xfffffd02, 0x0, 0x0, &(0x7f0000000140)=""/55, 0x37}, 0x202) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0', [{0x20, 'syzkaller0\x00'}, {0x20, '/dev/hwrng\x00'}, {0x20, '\\,{\xb8]'}, {0x20, '/dev/loop#\x00'}, {0x20, '#! '}, {0x20, 'syzkaller0\x00'}, {0x20, '#! '}, {0x20, '\x13q\'.8'}, {0x20, '-\x82)}+][,['}]}, 0x59) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2.748092126s ago: executing program 2 (id=8310): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x2119, 0x4}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r2, 0x6f58, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ac0100001000010028bd7000ffdbdf25000000000000000000000000000000007f0000010000000000000000000000004e2200004e218000000020000c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1ac}}, 0x200048f0) 2.745471501s ago: executing program 3 (id=8311): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00'}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="02070000000000000502fff9c91000100000000000000000ffff7f000001c20400000006072000000000068108000104000000000000"], 0x48) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) sendfile(r6, r6, 0x0, 0x1) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24, 0x1800}, 0x9c) 2.679483401s ago: executing program 6 (id=8312): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_buf(r2, 0x1, 0x1e, 0x0, &(0x7f0000000740)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x169a82, 0x0) sendfile(r3, r3, 0x0, 0xfff2) syz_io_uring_setup(0x6f29, &(0x7f00000001c0)={0x0, 0x108e, 0x2602, 0x1, 0x38a, 0x0, r3}, &(0x7f0000000140), &(0x7f00000000c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x801}, 0x14}, 0x1, 0x0, 0x0, 0x54002}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000005fc0)={@remote, @empty, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x103f, 0x10c0014}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bond0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001000000", @ANYRESHEX=r6, @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 2.501756667s ago: executing program 1 (id=8313): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa10905, 0x800d, '\x00', @value64=0xdd0}}) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) syz_open_procfs(r2, &(0x7f0000000180)='maps\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4102a}, [@IFLA_GROUP={0x8, 0x1b, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd0000ffff"}}}}}, 0x0) sendmsg(r0, &(0x7f0000000780)={&(0x7f00000001c0)=@qipcrtr={0x2a, 0x3, 0x8001}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000240)="35cdad14beab59ff44dc778f3a475c95866e5f2b716dc901b8dcee694cb1641f2d1173d96f2e68a403ecb2fae459928742514fc9bc97", 0x36}, {&(0x7f0000000280)="917e285c14fed24dd61e7d53165a970e2418dfa6de1bce5ff39e2c8169a5b2e09bb8a0abf36368381f9926150ff06a", 0x2f}, {&(0x7f00000002c0)="f9ece38d8e1cdf8a425f4bae679803f203c3ce66efa9582d0736386c9c953c7f5b40ef8cc768c78fbdaa5f046c7249a4d7befb9af45b1bf963cadcaf777cd8b26bfa9adcf4d9f31846ac07780cacb0d4df27d00afcdc209cd422e829b7721da97da26cb44cb47acaf79e7e1d6525a8451bce64ee0517c7c7c5c659fb078b0d94a8", 0x81}, {&(0x7f0000000380)="fbc774c2e016ceff2fe574129689b099562d5aa9ba567138b37275e93cf1b15cc6af4872e6dd2ca5d4f7b4868f2d063a5a7c2568e51c28c635526b27003e4d49d9f6b589ecdec94a825ab9daa2605412f3bb7418b82f1dbd486773886ff33573281cf6832c5ecc4f1ee022d2111bf94dd3a6a77aa45e0c23d0e1075446324a70affaf2d02242216e51c03ec979db1248bc2b7a0f2daee97ad99a803b9b7b3756a3a30e0d98e73cd6d4390cdaf772c68a83cf38e457e2a38e62ce16375f585a852160453665102301b14594f847b2ddd90d465a8ae04cedecff1a7bf5027347c9738cb058232b76741889a9a739", 0xed}], 0x4, &(0x7f00000004c0)=[{0x38, 0x101, 0x7, "5c9374fe7fa7776c4b13a2e21b74334ce8485a4b6a6030788f901cf70f246b2fcfd2"}, {0xe0, 0x115, 0xe, "aca3311cce795dd9c2d9afad7f7423e7e885a0037cc22de5cf6ed89359b932ca200ad7e2113cc4c528482542e4d0866cb3d79af5912422afa86fcc8b6dd23cdccd5d84ead4e9b76ca9f6c90a42d8b8cc93fa57b10c59788ed34206d3ec11270ddbaccf70a0f8966a9dc06ecb3f50abc5713d7239aed36d998a0d7b43ccc4dbb4aa6a19a998b07a0aa47ac28c60af42d3e5f952ec81d58d95ea766d6566c088556ffe87b6e353bbc2be41fa6c4c74008def0ac68de42a406cf6ecd19dea2cfa5485030d7fb9d1d93772cbb9b78f5c98"}, {0x110, 0x119, 0x8, "30ff93afade48def3fc63452709973029265afde7e9292f10cff5443f4275e392490d63c236f1bd01c04aefacaa724062af7f4a224a89a41c94cafbe3b2ea98d3da4a74cfd92880c91cbbcd2e0b132fd96369e5ab2b53a552d9e80230429c08c9d0b0559b3cfb65127e9307e41bd78dd031886e2de0bf04e4346c1dc85457d1bf169b0e76e7d8cc34881e7df1393d20af9abecef14d75d6047d4d0afed42706153495baa099b2d202a17159a03e56155ff263373ea82231b1ef3899ccd23a2269afdefea2dfe60b307cb63077a22603b91f112c372e358367652cee92dc36bbdb0121cae6ee3524e2ed44069f772fc9871fcfe4cd4a7d3ee053fa8fbf128"}, {0x60, 0x108, 0x6, "1530ff77aeb3c3c636155675523c475c0577258dacf6bad348c9cbbf017f43d78505460720ce34a494af712229106f364c11062142931ab1b6831a201998c123ea718562eed297196342f2"}], 0x288}, 0x20000000) 1.444038488s ago: executing program 1 (id=8314): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000380)='b', 0x1}], 0x1, 0x0, 0x0, 0x20040000}}], 0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x48}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000480)={0x0, 0x7}, 0x8) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.288768972s ago: executing program 4 (id=8315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000002000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) 909.384161ms ago: executing program 4 (id=8316): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000880)=0x2, 0x4) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmmsg$unix(r1, &(0x7f0000000e80)=[{{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000380)="0e0658aade86f9988e33e7971e7fc9eb0e9271cd71c5db9f0b0b973390c053ccdc17219deb7ecc441d5a8e93d16b57bf323fd541063d2f9146af9acf1c60f443b8bf21f509c3235807002b4d83839bfac19506f5c62595a9defefbc183a9ed55323f29aa80b80a460699597ab7b4b28e4aeee8715fa0dd0bacb5387c29b08cb4704a2892c228902e0de8117c8b58593277d4ea988e3d735aceb7ba31cd29020ba5c3d0e09b947604abb03edddad61fc27491b12c4b5ba9def6ec21f5ea11699ca5a1fae10fbfa9284365a8ccaffaca689dcf011d8f667d9cc8c7dd9c37377781527a00a66bdc9b9219725aeee6fc801b4b6f40fa0c6b", 0xf6}, {&(0x7f0000000480)="6f47295f53337d63a4f5584ae55cbf4d04341903a2a46e5e67c64d8306c0044627bf622759907fa2a57b0199158eb686b66492136f95d31e8cfefbd0ea2ef0c8884cec1ca5d766457f612a0db518cb37bc658bbb0007194b5749f6a0614c5c7b95d973adf08b3ec42e7feaa231842a84cd7d73c515f1ad1c409e06f3785244d8f602a3d4d39d6e97c8676a6d9b095eb5f1ff", 0x92}, {&(0x7f0000000540)="d036d8fd1577b6817269608985fbe16536b0f9f92d662464b489c45903d10e1a460e3178e009ab59d19a4218584ac18ca49482b34141fc04b1398a0d1a7e312714f4585e8db4e46dd19cb1ab90b3e604e78b474704ef5929bc028a1cae4be9f361445674f9d3fa240b247ec94fdf001f195dd8b6d6835ac574283edd8fe146e5025c6fc373c681aad3bc48df1d044f8b26", 0x91}, {&(0x7f00000002c0)="24b7b260ed89a23923507de8dcc5bf2e5a4473d0439e", 0x16}, {&(0x7f0000000600)="c43ee7339cefafcdd6560efa5a8a5bf38259bf6b022c135adf6ff71620a301287d99fada8f632df7f276dc99d136fcf0b07dd190361b000d3318e2cdc53ddd8a85bfbd709f6789d30f2c93cfae6d096da79c2d500d50c01ba20ede89f6f9f21e3ad9da79698cd6097e7d5ff845ffeff48bb90d9288c01a87474e117d4e8c62c2dbdc5421e068ab2f94bc39a4bf82b477f927cc3959cdfeddf1ceb074fb611cd0430e5f34fc05", 0xa6}], 0x5, &(0x7f0000000800)=[@cred={{0x1c}}], 0x20, 0x40}}, {{&(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000840)='N', 0x1}, {&(0x7f0000000940)="57c58f1cb3de4e5711f6417aa2e4180f2109d371", 0x14}, {&(0x7f0000000980)="a6d8df190c6f364617fc83de557ee7f1852f3d9d41014ec6555182f67e3f4c3895063f3357479aae147cc9ec0059c339ae75b4b085f8ec54a679e792d84f0f971623bf68650c73dc7c1caa2829e040f093808636550f42ff84f90abb2427c5ea912610e392600533e09c38fb2ebded93563b2e212d17e20c8002322bd16c26ec21130385822a58101978c205887110d8d251b577c0bd8201b64e1c2b10ded3ed6d9e82b0052ca2e4d9d27800c886c2f63cc65d08fbd08a633dfa29c356dbb42ff5d6372d7498b9c10f9dec9e30f5243d9e1d769f6281c5925d57db6386f94e4e198a", 0xe2}, {&(0x7f0000000a80)="d3d3d83da784ec363d8538938ef34d5457c31a810e7bd0b49a7c2d2d58310f9e5259ba9c69e67efcb07ce0c4ecbee1757b33a90d98a7569b9d923f1fe0f20194f318737e07b1707f2178708913ee1bf91775f5f3884d0d8a54a469fdec5ce74d75a7b92afc87e1ed63ab031a70e22b6a911fcdbcec13c149cde2686d2c7a60c6b93d", 0x82}, {&(0x7f0000000b40)="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", 0xfb}, {&(0x7f0000000c40)="ca3fca693f30be6897aacabc62157f928b74f155e3d994b8bcd9434fe8b45c748f30e57f5f84a549ecccc67d97ade8472f033f6e51e9d6", 0x37}, {&(0x7f0000000c80)="26a56007b067915d50812c3c72f8af99e2813e234c19848aefd33b36fb5fed8a0a3d753df826c6652312b23ce83fbf013a4896cb71fcbb2a250639a9c6b13f2ba2269be052b01075e3d6d2ab6be44636253e681e", 0x54}, {&(0x7f0000000d00)="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", 0xfe}], 0x8, 0x0, 0x0, 0x8000}}], 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_buf(r3, 0x1, 0x1e, 0x0, &(0x7f0000000740)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x16, 0x1004000, 0x0, 0xb49, 0x5, 0x9, 0x0, 0x3}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x169a82, 0x0) sendfile(r4, r4, 0x0, 0xfff2) syz_io_uring_setup(0x6f29, &(0x7f00000001c0)={0x0, 0x383a, 0x2602, 0x1, 0x38a, 0x0, r4}, &(0x7f0000000140), &(0x7f00000000c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000061ad000206010800"/20], 0x14}, 0x1, 0x0, 0x0, 0x54002}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000005fc0)={@remote, @empty, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) socket$nl_route(0x10, 0x3, 0x0) 666.027261ms ago: executing program 3 (id=8317): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r0 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r3, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) 484.397023ms ago: executing program 4 (id=8318): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000020000000b704000010000020720700fe000000008500000058000000200000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5f18b10cce8de3369300000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 342.417516ms ago: executing program 4 (id=8319): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="7c010000190001000000000000000000fc020000000000000000000000000000000000000000000000000000000000000000000300000000020000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000003e225e70b0277e420000000000000000000000000000000000000000000000000000000000000000000000000000c40005"], 0x17c}}, 0x0) 296.412666ms ago: executing program 6 (id=8320): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x0, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20, 0x40000}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x520f}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x24648}, @IFLA_WEIGHT={0x8, 0xf, 0x2}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x7fff}, @IFLA_PHYS_SWITCH_ID={0x16, 0x24, "314074f0380a91da60df21d857691084ba80"}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x9, 0x18}, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x3, 0x18ab, 0x31, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x10, 0x10, 0x8041, 0x7fffffff}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x4, [@struct={0x8, 0xa, 0x0, 0x4, 0x1, 0x400000, [{0x0, 0x3, 0x4}, {0x4, 0x3, 0x1}, {0xa, 0x2, 0x6}, {0x6, 0x3, 0x1}, {0xd, 0x5, 0x8}, {0xc, 0x3, 0x1b}, {0x0, 0x3, 0x23}, {0x9, 0x3, 0x1}, {0x4, 0x1, 0x7}, {0x10, 0x2, 0x3}]}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0xd, 0x4}, {0xe}, {0x2, 0x2}, {0xc, 0x5}, {0x8, 0x2}, {0x10, 0x2}, {0xa, 0x3}, {0x9, 0x5}, {0x4, 0x1}]}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x4e, 0x0, 0x3e, 0x6}, @float={0x3, 0x0, 0x0, 0x10, 0x2}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x41, 0x0, 0x6e}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000000380)=""/230, 0x120, 0xe6, 0x1, 0x3, 0x10000, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x5, '\x00', r2, r3, 0x0, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r4 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x30, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc0, 0x80, 0x54, [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x3, 0x1, 0x3, 0xa8, {0x9, 0x21, 0x3ff, 0x6, 0x1, {0x22, 0x19b}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0xef, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x86, 0x4, 0x5}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x250, 0xe1, 0x6, 0x3, 0xff, 0x94}, 0x3a, &(0x7f00000005c0)={0x5, 0xf, 0x3a, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "817ce86198da2b3a7533031e193eaf20"}, @generic={0x21, 0x10, 0x2, "ed1fcb9b90f994ed0b5eee76a658baf63ac5b9e9e31c77a1e4b2ddb5c71c"}]}, 0x1, [{0x79, &(0x7f0000000600)=@string={0x79, 0x3, "1c2f233df4b0017a343cb1532201af5fd5d0353066ad982b7bd5faa35da033e85f8b0f6e852772c807122038e687c7b104b401b31887139c8801e8a6477a841f74778bb744880674dca5d5d7d3d4c8f49d03d9c55eebced4ae184fdc5f9293689d9c038a5acb89184248d01ee66087d2691f33376f7ba2"}}]}) syz_usb_control_io$hid(r4, &(0x7f00000007c0)={0x24, &(0x7f00000006c0)={0x40, 0x3, 0x14, {0x14, 0x10, "35790df3f8eb2a5439a64e52b14591f532a8"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}, &(0x7f0000000740)={0x0, 0x22, 0x1, {[@local]}}, &(0x7f0000000780)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x8, 0x1, {0x22, 0x7ba}}}}, &(0x7f00000009c0)={0x2c, &(0x7f0000000800)={0x40, 0x36, 0x2e, "97efe26b720bc54d33b3bd58145d07bf1a9de39ff70e0165b3892bb8ba1cf5fb572039b1ce7ab563bcea28be5a06"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0xf9}, &(0x7f00000008c0)={0x20, 0x1, 0xba, "6a0ff1edf38ba77fd7ab12b3dc78ae77191f7c7c99b571266229649715be5a3cfdac637ceb56d9c0235c4f868d3486400f72c211d79cd10a3aeb99bcbaf83801ccb773d85f827ae1106fa3654fbb1966d59bfa4ab4a21064bcd729564cf6dc6c6a68a4f2758d16cb2f8469a35fc8bfc23677d09dc50f232188b4f493ee32ee8d4982a19105fbc18169ebd54f25e61c26e53754d0260e8f6f3d1415670d62297272c15a6ef5561f4e8d08d94aaee1e652dfd3875977029ccbcfe0"}, &(0x7f0000000980)={0x20, 0x3, 0x1, 0x9}}) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000a00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x0, 0xff, [{{0x9, 0x4, 0x0, 0x15, 0x1, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x3, 0x3, 0x1}}}}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x110, 0x3, 0x9, 0x3, 0x8, 0xf}, 0x35, &(0x7f0000000a80)={0x5, 0xf, 0x35, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x44, 0x3, 0x4, 0xfff, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x5, 0x6, 0x101}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x7, 0xb85d}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1, 0x9, 0xe, 0x47d}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x2, 0x6, 0x8}]}, 0x2, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x427}}, {0x72, &(0x7f0000000b00)=@string={0x72, 0x3, "61220e1595a22b51139a0278ea1abcebf8b8534707290ff73034bcdd71f42cda44fa8d2fa2af7af2184be1b1874a5d050d5392ac632bb7f1bf69f8edeeb6a6dfb57ff8fe449a5ec659154a5b24899a923501f172a3468dbb324b41c1fd6b9f245488fcad8a58609775a206f727954573"}}]}) r5 = memfd_secret(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000bc0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000d00)={0x0, 0x90, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e20, 0x80, @empty}, @in6={0xa, 0x4e22, 0x0, @remote, 0x8}, @in6={0xa, 0x4e21, 0xd, @dev={0xfe, 0x80, '\x00', 0x38}, 0xca8}, @in={0x2, 0x4e20, @rand_addr=0x64010100}, @in6={0xa, 0x4e21, 0x4c, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}]}, &(0x7f0000000d40)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000d80)={r6, @in6={{0xa, 0x4e21, 0x2, @empty, 0x1137}}, 0x0, 0x7, 0x800, 0x4187, 0x82, 0x816a}, &(0x7f0000000e40)=0x9c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000e80), 0x204200, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000ec0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)={0xf4, 0x1, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_FILTER={0x3c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xad}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x480}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x100}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x737}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x194}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x50}]}, @CTA_MARK_MASK={0x8}, @CTA_TUPLE_REPLY={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000880) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40103d0b, &(0x7f0000001100)={0x6, 0x3}) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000011c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x660, 0xe0, 0x338, 0x430, 0xe0, 0x430, 0x590, 0x590, 0x590, 0x590, 0x590, 0x6, &(0x7f0000001140), {[{{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x2, 0x2}, {0x4, 0x1, 0x4}, {0x0, 0x3, 0x2}, 0x8, 0x7}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0x10, "c4d3", 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10, 0x6}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@icmp6={{0x28}, {0xd, 'Q9', 0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x24, 0x9}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x5, "e9a7"}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3c}}}, {{@ipv6={@mcast2, @mcast2, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xff, 0xffffff00], 'xfrm0\x00', 'vcan0\x00', {}, {}, 0x0, 0x7, 0x4, 0x42}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x3b, 0xf7, 0x3, 0x8, 0x8000, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, [0x0, 0xffffffff, 0xff, 0xffffff00], [0xff000000, 0xffffff00], [0xff, 0xffffff00, 0xffffff00, 0xff], 0x48, 0x42}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0) getsockopt$inet_mreqsrc(r5, 0x0, 0x25, &(0x7f0000001880)={@local, @dev, @local}, &(0x7f00000018c0)=0xc) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000001900)={0x3, {{0xa, 0x4e22, 0xf, @loopback, 0xf}}, {{0xa, 0x4e23, 0x0, @mcast2, 0xed}}}, 0x108) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x10, r5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c40)={0x6, 0x1a, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x6}, @exit, @generic={0x3, 0xa, 0x1, 0x7, 0x2c6a}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000001b40)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x6, '\x00', r2, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001b80)={0x5, 0xe, 0x8, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001bc0)=[r5], &(0x7f0000001c00)=[{0x4, 0x2, 0xd, 0x2}, {0x0, 0x2, 0x4, 0x8}, {0x1, 0x4, 0x5, 0xa}, {0x5, 0x3, 0x3, 0xb}], 0x10, 0x2, @void, @value}, 0x94) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000001d00)={0x2, 0x4e21, @remote}, 0x10) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000001d40), 0x400800, 0x0) pwrite64(r8, &(0x7f0000001d80)="a0bd3c6711672673fff155df3c8f9220800ac80d97de45f7f8a50113d54844a2ed0dc1bf8a55268b33eccfc0053aafccc3efe350616bd0c6aff119a30f30765b26d9a15e99637c27c2560e52342de5bec9d0cba356e1874f3e337af499817e81d76273a7d58f00ec7e4f97bce2c387d991c434966cf33681b6c468e26669f967d19a0fd73de141350842a535133c44d862e455a772798ef9259f78e299a89e28ec80136e626aa7eda7", 0xa9, 0xffff) sendmsg$key(r5, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001e40)={0x2, 0x15, 0x4, 0x9, 0x11, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e22, 0xd8a6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10}}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d3}, @sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in=@multicast1, 0x28, 0x18, 0x10}, @sadb_x_nat_t_type={0x1, 0x14, 0x87}]}, 0x88}}, 0x4000080) r9 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r9, 0xe, &(0x7f0000001f80)=""/111) 0s ago: executing program 4 (id=8321): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x40086603, &(0x7f0000000040)) unshare(0x62040200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000100001000000001a0000000000000000", @ANYRES32=0x0, @ANYBLOB="010900000000000008001b00"], 0x28}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, 0x0, 0x20) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00(\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000ffcbdf2508000000140008006261746164765f736c6176655f300000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000003877f947ddb5cde202c639bf5d832421a2790399e72e23a43adb78621ed2a7a3d96a80866ee1ca1b3cd85d22e77e108e4111b909f990e80666ad35710c15958872f28fbfd619f06d457294be33c606bd8d260bdb34a29e8cbf8b8acd742fab4141c0ba410021a9b51a31832611a", @ANYBLOB="00022abd7000fbdbdf25060000000c0016000500000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x40010) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) eventfd2(0x40004, 0x80801) ioctl$KVM_HYPERV_EVENTFD(r8, 0x4018aebd, &(0x7f0000000080)={0x4, 0xffffffffffffffff, 0x1}) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0xfffffffc, 0x0, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x18, 0xffffffffffffffda, 0xe, {0xbd7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r3) socket$kcm(0x10, 0x2, 0x0) r10 = syz_open_dev$media(&(0x7f0000000080), 0x5, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r10, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x66666666666680e, 0x0, &(0x7f0000000fc0)=[{}, {}]}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x3, 0x0, [{0x1, 0x3, 0x0, 0x0, 0x8001, 0x502, 0x10001}, {0x40000000, 0x5, 0x0, 0x101, 0x14, 0x3, 0x3}, {0x40000001, 0x0, 0x0, 0x9c6, 0x3, 0x6, 0x1}]}) kernel console output (not intermixed with test programs): duct=0, SerialNumber=0 [ 2244.748998][ T5924] usb 2-1: config 0 descriptor?? [ 2244.766466][T21918] usb 4-1: USB disconnect, device number 117 [ 2244.861415][ T2432] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 2244.994684][ T2415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2245.066429][ T2415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2245.225700][ T5924] usbhid 2-1:0.0: can't add hid device: -71 [ 2245.231863][ T5924] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2245.299829][ T752] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2245.327972][ T5924] usb 2-1: USB disconnect, device number 86 [ 2245.450486][ T752] usb 3-1: Using ep0 maxpacket: 16 [ 2245.468418][ T752] usb 3-1: config index 0 descriptor too short (expected 1995, got 75) [ 2245.477052][ T752] usb 3-1: config 6 has too many interfaces: 36, using maximum allowed: 32 [ 2245.485910][ T752] usb 3-1: config 6 has an invalid descriptor of length 216, skipping remainder of the config [ 2245.509075][ T752] usb 3-1: config 6 has 0 interfaces, different from the descriptor's value: 36 [ 2245.535105][ T752] usb 3-1: New USB device found, idVendor=3285, idProduct=043c, bcdDevice=c2.54 [ 2245.544585][ T752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2245.553369][ T752] usb 3-1: Product: syz [ 2245.558527][ T752] usb 3-1: Manufacturer: syz [ 2245.563610][ T752] usb 3-1: SerialNumber: syz [ 2245.614308][ T2441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7626'. [ 2246.010971][ T2450] sg_write: data in/out 524252/17 bytes for SCSI command 0x1-- guessing data in; [ 2246.010971][ T2450] program syz.4.7627 not setting count and/or reply_len properly [ 2246.997528][ T2470] ucma_write: process 1217 (syz.3.7634) changed security contexts after opening file descriptor, this is not allowed. [ 2247.196696][ T2473] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 2247.204811][ T2473] pim6reg0: linktype set to 773 [ 2247.461852][ T2287] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 2247.726306][ T2287] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2247.737769][ T2287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2247.814771][ T5908] usb 3-1: USB disconnect, device number 43 [ 2247.859173][ T2482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7637'. [ 2247.873552][ T2287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2248.059768][ T2287] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2248.079609][ T2287] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 2248.090174][ T2287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2248.108817][ T2287] usb 4-1: config 0 descriptor?? [ 2248.526613][ T2287] usbhid 4-1:0.0: can't add hid device: -71 [ 2248.547303][ T2287] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2248.576421][ T2287] usb 4-1: USB disconnect, device number 118 [ 2249.006245][ T2499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7641'. [ 2249.642842][ T2504] xt_CT: No such helper "snmp" [ 2249.929401][ T3082] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 2250.089824][ T3082] usb 4-1: Using ep0 maxpacket: 16 [ 2250.106494][ T3082] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2250.207838][ T3082] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2250.290456][ T3082] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2250.298183][ T3082] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2250.308993][ T3082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2250.371088][ T3082] usb 4-1: config 0 descriptor?? [ 2250.788512][ T2504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2250.799075][ T2504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2250.974929][ T3082] hid (null): bogus close delimiter [ 2250.995534][ T3082] hid (null): report_id 0 is invalid [ 2251.004733][ T3082] hid (null): invalid report_size 4076 [ 2251.010542][ T3082] hid (null): unknown global tag 0xc [ 2251.016255][ T3082] hid (null): invalid report_size 59118 [ 2251.094511][ T3082] hid (null): unknown global tag 0xd [ 2251.116124][ T3082] hid (null): unknown global tag 0x55 [ 2251.133032][ T3082] hid (null): unknown global tag 0xe [ 2251.145155][ T3082] hid (null): unknown global tag 0xd [ 2251.157707][ T3082] hid (null): invalid report_size 460700670 [ 2251.179686][ T3082] hid (null): report_id 0 is invalid [ 2251.201115][ T3082] hid (null): unknown global tag 0x56 [ 2251.749657][ T2287] usb 4-1: USB disconnect, device number 119 [ 2252.803760][ T2585] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7662'. [ 2252.885693][ T2586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7663'. [ 2253.423977][ T2602] netlink: 312 bytes leftover after parsing attributes in process `syz.2.7667'. [ 2254.039482][ T5924] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2254.199276][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 2254.207768][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2254.207806][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2254.207849][ T5924] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 2254.207902][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2254.228180][ T5924] usb 3-1: config 0 descriptor?? [ 2254.444569][ T2622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2254.445140][ T2622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2254.530149][ T5924] usbhid 3-1:0.0: can't add hid device: -71 [ 2254.530276][ T5924] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2254.533389][ T5924] usb 3-1: USB disconnect, device number 44 [ 2255.416108][ T2644] netlink: 428 bytes leftover after parsing attributes in process `syz.3.7677'. [ 2255.443320][ T2644] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7677'. [ 2255.530155][ T30] audit: type=1400 audit(1749798172.417:5885): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=2642 comm="syz.3.7677" [ 2255.919757][ T3082] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2255.950743][ T2656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7679'. [ 2256.089317][ T3082] usb 3-1: Using ep0 maxpacket: 16 [ 2256.116722][ T3082] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 2256.133750][ T3082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2256.182422][ T2659] netlink: 312 bytes leftover after parsing attributes in process `syz.4.7681'. [ 2256.359456][ T3082] usb 3-1: config 0 descriptor?? [ 2256.368325][ T2660] dummy0: entered promiscuous mode [ 2256.433078][ T2660] dummy0: left promiscuous mode [ 2256.681073][ T2666] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2256.801053][ T3082] kye 0003:0458:0153.0079: invalid report_count -1266139595 [ 2256.808645][ T3082] kye 0003:0458:0153.0079: item 0 4 1 9 parsing failed [ 2256.834497][ T3082] kye 0003:0458:0153.0079: parse failed [ 2256.859633][ T3082] kye 0003:0458:0153.0079: probe with driver kye failed with error -22 [ 2257.032328][ T2673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7686'. [ 2257.046169][ T2673] fuse: Bad value for 'group_id' [ 2257.051238][ T2673] fuse: Bad value for 'group_id' [ 2257.061325][ T2674] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2257.095917][ T2674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2257.135210][ T2674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2258.556166][T28375] usb 3-1: USB disconnect, device number 45 [ 2258.679324][T28918] usb 5-1: new low-speed USB device number 89 using dummy_hcd [ 2258.706795][ T2708] SET target dimension over the limit! [ 2258.794091][ T2709] sctp: [Deprecated]: syz.2.7695 (pid 2709) Use of int in maxseg socket option. [ 2258.794091][ T2709] Use struct sctp_assoc_value instead [ 2258.822770][ T2709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7695'. [ 2258.837853][T28918] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 2258.847414][T28918] usb 5-1: config 0 has no interface number 0 [ 2258.857055][T28918] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2258.884799][T28918] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 2258.908008][T28918] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2258.933814][T28918] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2258.948105][T28918] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 2258.963923][T28918] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2258.978128][T28918] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2258.989556][ T5924] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 2259.002605][T28918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2259.016777][T28918] usb 5-1: config 0 descriptor?? [ 2259.049043][ T2694] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2259.065822][ T2694] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2259.098224][T28918] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2259.141252][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 2259.148820][ T5924] usb 4-1: too many configurations: 32, using maximum allowed: 8 [ 2259.167744][ T5924] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2259.176550][ T5924] usb 4-1: can't read configurations, error -61 [ 2259.340706][ T5924] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 2259.372337][ T2694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2259.427834][ T2694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2259.550182][ T2712] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7692'. [ 2259.592566][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 2259.610145][ T5924] usb 4-1: too many configurations: 32, using maximum allowed: 8 [ 2259.628640][ T5924] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2259.643668][ T2694] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7692'. [ 2259.658453][ T5924] usb 4-1: can't read configurations, error -61 [ 2259.665814][ T5924] usb usb4-port1: attempt power cycle [ 2259.783630][T28918] usb 5-1: USB disconnect, device number 89 [ 2259.811739][T28918] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 2260.029922][ T5924] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 2260.083230][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 2260.098443][ T5924] usb 4-1: too many configurations: 32, using maximum allowed: 8 [ 2260.119895][ T5924] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2260.128074][ T5924] usb 4-1: can't read configurations, error -61 [ 2260.369769][ T5924] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 2260.428421][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 2260.455442][ T5924] usb 4-1: too many configurations: 32, using maximum allowed: 8 [ 2260.476894][ T5924] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2260.521223][ T5924] usb 4-1: can't read configurations, error -61 [ 2260.532542][ T5924] usb usb4-port1: unable to enumerate USB device [ 2260.619537][T28375] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2261.012761][T28375] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2261.083270][T28375] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2261.112765][T28375] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2261.179092][T28375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2261.205198][T28375] usb 5-1: config 0 descriptor?? [ 2261.230756][ T2755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7708'. [ 2261.261871][ T2755] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7708'. [ 2261.524202][ T2745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7704'. [ 2262.085022][ T2770] usb usb8: usbfs: process 2770 (syz.2.7711) did not claim interface 0 before use [ 2262.709354][ T3082] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 2262.904096][ T3082] usb 4-1: Using ep0 maxpacket: 16 [ 2262.913135][ T3082] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 2262.956331][ T3082] usb 4-1: config 252 has no interface number 0 [ 2263.000529][ T3082] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 2263.066351][ T3082] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 2263.085457][ T3082] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2263.124753][ T3082] usb 4-1: Product: syz [ 2263.139622][ T3082] usb 4-1: Manufacturer: syz [ 2263.154707][ T3082] usb 4-1: SerialNumber: syz [ 2263.167192][T28375] usb 5-1: USB disconnect, device number 90 [ 2263.240553][ T5924] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2263.323411][ T3082] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2263.445842][ T5924] usb 3-1: config 0 has no interfaces? [ 2263.462340][ T5924] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2263.503347][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2263.521280][ T5924] usb 3-1: Product: syz [ 2263.525502][ T5924] usb 3-1: Manufacturer: syz [ 2263.558314][ T5924] usb 3-1: SerialNumber: syz [ 2263.587692][ T5924] usb 3-1: config 0 descriptor?? [ 2263.867466][ T2784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2263.877087][ T2784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2264.029687][ T5924] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2264.209596][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 2264.221751][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2264.254082][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2264.298545][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2264.371242][ T5924] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2264.383062][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2264.397259][ T9359] usb 4-1: Failed to submit usb control message: -110 [ 2264.409485][ T5924] usb 5-1: config 0 descriptor?? [ 2264.435469][ T9359] usb 4-1: unable to send the bmi data to the device: -110 [ 2264.463625][ T9359] usb 4-1: unable to get target info from device [ 2264.525456][ T9359] usb 4-1: could not get target info (-110) [ 2264.547193][ T9359] usb 4-1: could not probe fw (-110) [ 2265.024815][ T5924] shield 0003:0955:7214.007A: unknown main item tag 0x0 [ 2265.076189][ T5924] shield 0003:0955:7214.007A: unknown main item tag 0x0 [ 2265.089439][ T5924] shield 0003:0955:7214.007A: unknown main item tag 0x0 [ 2265.096939][ T5924] shield 0003:0955:7214.007A: unknown main item tag 0x0 [ 2265.107495][ T5924] shield 0003:0955:7214.007A: unknown main item tag 0x0 [ 2265.135414][ T5924] input: HID 0955:7214 Haptics as /devices/virtual/input/input112 [ 2265.196824][ T2805] random: crng reseeded on system resumption [ 2265.282472][ T5924] shield 0003:0955:7214.007A: Registered Thunderstrike controller [ 2265.305632][ T5924] shield 0003:0955:7214.007A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 2265.722329][ T3082] usb 4-1: USB disconnect, device number 124 [ 2266.327435][T28918] usb 3-1: USB disconnect, device number 46 [ 2266.355156][ T5924] shield 0003:0955:7214.007A: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 2266.423381][ T5924] shield 0003:0955:7214.007A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 2266.458814][ T5924] shield 0003:0955:7214.007A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 2266.470522][ T3082] usb 5-1: reset high-speed USB device number 91 using dummy_hcd [ 2266.497002][ T2823] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 2266.508903][ T5924] shield 0003:0955:7214.007A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2266.630422][ T3082] usb 5-1: device descriptor read/64, error -32 [ 2266.695390][ T2830] usb usb8: usbfs: process 2830 (syz.2.7726) did not claim interface 0 before use [ 2266.869918][ T3082] usb 5-1: reset high-speed USB device number 91 using dummy_hcd [ 2267.678763][T21918] usb 5-1: USB disconnect, device number 91 [ 2267.914678][ T2862] netlink: 312 bytes leftover after parsing attributes in process `syz.2.7734'. [ 2268.704109][T21918] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 2268.839598][T21918] usb 5-1: device descriptor read/64, error -71 [ 2269.099759][T21918] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 2269.292813][T21918] usb 5-1: device descriptor read/64, error -71 [ 2269.299155][ T5924] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2269.399995][T21918] usb usb5-port1: attempt power cycle [ 2269.469389][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 2269.479048][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2269.562428][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2269.592607][ T5924] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 2269.609138][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2269.676634][ T5924] usb 4-1: config 0 descriptor?? [ 2269.759294][T21918] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 2269.968496][ T2889] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7740'. [ 2270.131873][T21918] usb 5-1: device descriptor read/8, error -71 [ 2270.139795][ T2886] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2270.149571][ T2886] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2270.158329][ T2886] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2270.167220][ T2886] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2270.397265][ T5924] usbhid 4-1:0.0: can't add hid device: -71 [ 2270.413451][ T5924] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2270.439305][T21918] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 2270.481330][T21918] usb 5-1: device descriptor read/8, error -71 [ 2270.500899][ T5924] usb 4-1: USB disconnect, device number 125 [ 2270.658415][T21918] usb usb5-port1: unable to enumerate USB device [ 2271.152563][ T2893] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7741'. [ 2271.398310][ T2899] usb usb8: usbfs: process 2899 (syz.1.7743) did not claim interface 0 before use [ 2271.954017][ T2919] netlink: 312 bytes leftover after parsing attributes in process `syz.6.7747'. [ 2272.153866][ T2924] FAULT_INJECTION: forcing a failure. [ 2272.153866][ T2924] name failslab, interval 1, probability 0, space 0, times 0 [ 2272.167481][ T2924] CPU: 1 UID: 0 PID: 2924 Comm: syz.4.7749 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 2272.167511][ T2924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2272.167523][ T2924] Call Trace: [ 2272.167532][ T2924] [ 2272.167540][ T2924] dump_stack_lvl+0x189/0x250 [ 2272.167575][ T2924] ? __pfx____ratelimit+0x10/0x10 [ 2272.167606][ T2924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2272.167635][ T2924] ? __pfx__printk+0x10/0x10 [ 2272.167664][ T2924] ? __pfx___might_resched+0x10/0x10 [ 2272.167693][ T2924] ? fs_reclaim_acquire+0x7d/0x100 [ 2272.167722][ T2924] should_fail_ex+0x414/0x560 [ 2272.167754][ T2924] should_failslab+0xa8/0x100 [ 2272.167776][ T2924] __kmalloc_noprof+0xcb/0x4f0 [ 2272.167794][ T2924] ? kfree+0x4d/0x440 [ 2272.167819][ T2924] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2272.167853][ T2924] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2272.167883][ T2924] ? tomoyo_domain+0xd9/0x130 [ 2272.167918][ T2924] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2272.167940][ T2924] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2272.167967][ T2924] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2272.168012][ T2924] ? __lock_acquire+0xab9/0xd20 [ 2272.168060][ T2924] ? __fget_files+0x2a/0x420 [ 2272.168086][ T2924] ? __fget_files+0x2a/0x420 [ 2272.168106][ T2924] ? __fget_files+0x3a0/0x420 [ 2272.168126][ T2924] ? __fget_files+0x2a/0x420 [ 2272.168152][ T2924] security_file_ioctl+0xcb/0x2d0 [ 2272.168176][ T2924] __se_sys_ioctl+0x47/0x170 [ 2272.168208][ T2924] do_syscall_64+0xfa/0x3b0 [ 2272.168225][ T2924] ? lockdep_hardirqs_on+0x9c/0x150 [ 2272.168251][ T2924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2272.168269][ T2924] ? clear_bhb_loop+0x60/0xb0 [ 2272.168292][ T2924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2272.168311][ T2924] RIP: 0033:0x7fa6e638e929 [ 2272.168330][ T2924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2272.168347][ T2924] RSP: 002b:00007fa6e7260038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2272.168369][ T2924] RAX: ffffffffffffffda RBX: 00007fa6e65b5fa0 RCX: 00007fa6e638e929 [ 2272.168383][ T2924] RDX: 0000200000000140 RSI: 0000000040045010 RDI: 0000000000000003 [ 2272.168396][ T2924] RBP: 00007fa6e7260090 R08: 0000000000000000 R09: 0000000000000000 [ 2272.168409][ T2924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2272.168421][ T2924] R13: 0000000000000000 R14: 00007fa6e65b5fa0 R15: 00007fa6e66dfa28 [ 2272.168466][ T2924] [ 2272.168474][ T2924] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2272.779701][T28918] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2273.439498][T28918] usb 3-1: Using ep0 maxpacket: 16 [ 2273.451308][T28918] usb 3-1: config index 0 descriptor too short (expected 1828, got 36) [ 2273.467267][T28918] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 2273.489241][T28918] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 2273.499822][T28918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2273.568578][T28918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2273.644204][T28918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2273.682161][T28918] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 2273.700062][T28918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2273.708147][T28918] usb 3-1: Product: syz [ 2273.718898][T28918] usb 3-1: Manufacturer: syz [ 2273.728383][T28918] usb 3-1: SerialNumber: syz [ 2273.760405][T28918] usb 3-1: config 0 descriptor?? [ 2273.825437][T28918] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 2273.843768][T28918] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 2273.865064][T28918] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 2273.877740][T28918] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 2273.903578][T28918] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 2273.916880][T28918] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 2273.926548][T28918] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 2273.935094][T28918] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 2273.945967][T28918] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 2273.956786][T28918] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 2273.966030][T28918] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 2273.982848][ T2951] usb usb8: usbfs: process 2951 (syz.3.7756) did not claim interface 0 before use [ 2273.996621][T28918] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 2274.053907][T28918] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 2274.074977][T28918] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 2274.113808][T28918] usb 3-1: USB disconnect, device number 47 [ 2274.160789][T28918] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 2274.186058][T28918] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 2274.208530][T28918] keyspan 3-1:0.0: device disconnected [ 2274.765860][ T2956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7758'. [ 2274.949621][ T2956] bond2: entered promiscuous mode [ 2274.954817][ T2956] bond2: entered allmulticast mode [ 2275.015532][ T2959] geneve2: entered promiscuous mode [ 2275.035296][ T2959] geneve2: entered allmulticast mode [ 2275.080323][ T2959] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 2275.220340][ T2960] bond2 (unregistering): (slave geneve2): Releasing backup interface [ 2275.230319][ T2964] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7759'. [ 2275.266739][ T2960] geneve2: left promiscuous mode [ 2275.319594][ T2960] geneve2: left allmulticast mode [ 2275.326457][ T2960] bond2 (unregistering): Released all slaves [ 2275.589751][T28918] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2275.724129][ T2973] syz_tun: entered allmulticast mode [ 2275.730091][T28918] usb 3-1: device descriptor read/64, error -71 [ 2275.731719][ T2973] syz_tun: left allmulticast mode [ 2275.871171][ T2975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7761'. [ 2275.979629][T28918] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2276.129746][T28918] usb 3-1: device descriptor read/64, error -71 [ 2276.173907][ T2980] FAULT_INJECTION: forcing a failure. [ 2276.173907][ T2980] name failslab, interval 1, probability 0, space 0, times 0 [ 2276.232181][ T2980] CPU: 1 UID: 0 PID: 2980 Comm: syz.3.7764 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 2276.232207][ T2980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2276.232215][ T2980] Call Trace: [ 2276.232221][ T2980] [ 2276.232228][ T2980] dump_stack_lvl+0x189/0x250 [ 2276.232251][ T2980] ? __pfx____ratelimit+0x10/0x10 [ 2276.232270][ T2980] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2276.232293][ T2980] ? __pfx__printk+0x10/0x10 [ 2276.232308][ T2980] ? __pfx___might_resched+0x10/0x10 [ 2276.232325][ T2980] ? fs_reclaim_acquire+0x7d/0x100 [ 2276.232343][ T2980] should_fail_ex+0x414/0x560 [ 2276.232363][ T2980] should_failslab+0xa8/0x100 [ 2276.232377][ T2980] __kmalloc_noprof+0xcb/0x4f0 [ 2276.232388][ T2980] ? tomoyo_encode+0x28b/0x550 [ 2276.232413][ T2980] tomoyo_encode+0x28b/0x550 [ 2276.232433][ T2980] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2276.232457][ T2980] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2276.232471][ T2980] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2276.232487][ T2980] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2276.232512][ T2980] ? __lock_acquire+0xab9/0xd20 [ 2276.232541][ T2980] ? __fget_files+0x2a/0x420 [ 2276.232556][ T2980] ? __fget_files+0x2a/0x420 [ 2276.232568][ T2980] ? __fget_files+0x3a0/0x420 [ 2276.232580][ T2980] ? __fget_files+0x2a/0x420 [ 2276.232595][ T2980] security_file_ioctl+0xcb/0x2d0 [ 2276.232609][ T2980] __se_sys_ioctl+0x47/0x170 [ 2276.232628][ T2980] do_syscall_64+0xfa/0x3b0 [ 2276.232639][ T2980] ? lockdep_hardirqs_on+0x9c/0x150 [ 2276.232659][ T2980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2276.232679][ T2980] ? clear_bhb_loop+0x60/0xb0 [ 2276.232704][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2276.232720][ T2980] RIP: 0033:0x7ff617b8e929 [ 2276.232732][ T2980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2276.232744][ T2980] RSP: 002b:00007ff618ac2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2276.232758][ T2980] RAX: ffffffffffffffda RBX: 00007ff617db5fa0 RCX: 00007ff617b8e929 [ 2276.232768][ T2980] RDX: 0000200000000140 RSI: 0000000040045010 RDI: 0000000000000003 [ 2276.232776][ T2980] RBP: 00007ff618ac2090 R08: 0000000000000000 R09: 0000000000000000 [ 2276.232784][ T2980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2276.232791][ T2980] R13: 0000000000000000 R14: 00007ff617db5fa0 R15: 00007ff617edfa28 [ 2276.232810][ T2980] [ 2276.233092][ T2980] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2276.249935][T28918] usb usb3-port1: attempt power cycle [ 2276.864497][ T2987] tipc: Can't bind to reserved service type 0 [ 2276.909391][ T752] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 2276.919791][T28918] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2276.951692][T28918] usb 3-1: device descriptor read/8, error -71 [ 2277.066880][ T752] usb 4-1: Using ep0 maxpacket: 8 [ 2277.082699][ T752] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2277.092758][ T752] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2277.103602][ T752] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2277.113632][ T752] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2277.123940][ T752] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2277.137073][ T752] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2277.148119][ T752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2277.199808][T28918] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2277.220437][T28918] usb 3-1: device descriptor read/8, error -71 [ 2277.289346][ T2287] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2277.329777][T28918] usb usb3-port1: unable to enumerate USB device [ 2277.370080][ T752] usb 4-1: usb_control_msg returned -32 [ 2277.375774][ T752] usbtmc 4-1:16.0: can't read capabilities [ 2277.459544][ T2287] usb 2-1: Using ep0 maxpacket: 32 [ 2277.466646][ T2287] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2277.474891][ T2287] usb 2-1: config 0 has no interface number 0 [ 2277.483232][ T2287] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2277.492650][ T2287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2277.501068][ T2287] usb 2-1: Product: syz [ 2277.505299][ T2287] usb 2-1: Manufacturer: syz [ 2277.510041][ T2287] usb 2-1: SerialNumber: syz [ 2277.521348][ T2287] usb 2-1: config 0 descriptor?? [ 2277.535892][ T2287] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2277.545152][ T2287] usb 2-1: selecting invalid altsetting 1 [ 2277.551084][ T2287] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2277.562927][ T2287] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2277.573728][ T2287] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2277.582471][ T2287] usb 2-1: media controller created [ 2277.599438][ T5924] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 2277.604228][ T2287] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2277.739769][ T5924] usb 5-1: device descriptor read/64, error -71 [ 2277.753527][ T2991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2277.768069][ T2991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2277.778972][ T2287] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2277.788917][ T2287] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2277.800878][ T2287] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2277.853764][ T2287] usb 2-1: USB disconnect, device number 87 [ 2277.999406][ T5924] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 2278.150930][ T5924] usb 5-1: device descriptor read/64, error -71 [ 2278.274526][ T5924] usb usb5-port1: attempt power cycle [ 2278.588554][ T3011] usb usb8: usbfs: process 3011 (syz.1.7772) did not claim interface 0 before use [ 2278.659476][ T5924] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 2278.701191][ T5924] usb 5-1: device descriptor read/8, error -71 [ 2278.999325][ T5924] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 2279.019751][ T2287] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2279.031320][ T5924] usb 5-1: device descriptor read/8, error -71 [ 2279.142012][ T5924] usb usb5-port1: unable to enumerate USB device [ 2279.179570][ T2287] usb 3-1: Using ep0 maxpacket: 8 [ 2279.187477][ T2287] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2279.210407][ T2287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2279.230627][ T2287] usb 3-1: config 0 descriptor?? [ 2279.262520][ T30] audit: type=1326 audit(1749798196.157:5886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3014 comm="syz.1.7774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f0b8e929 code=0x7ffc0000 [ 2279.449821][ T2287] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2279.657052][ T752] usb 4-1: USB disconnect, device number 126 [ 2280.072822][ T1086] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 2280.154474][ T3026] binder: 3023:3026 ioctl 40046210 0 returned -14 [ 2281.790345][ T2287] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2281.809868][ T2287] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 2281.832348][ T2287] asix 3-1:0.0: probe with driver asix failed with error -71 [ 2281.918555][T28375] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2282.365477][ T2287] usb 3-1: USB disconnect, device number 52 [ 2282.489958][T28375] usb 2-1: config 0 has no interfaces? [ 2282.500313][T28375] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2282.509651][T28375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2282.537102][T28375] usb 2-1: Product: syz [ 2282.554155][T28375] usb 2-1: Manufacturer: syz [ 2282.584686][T28375] usb 2-1: SerialNumber: syz [ 2282.621814][T28375] usb 2-1: config 0 descriptor?? [ 2282.889728][ T3038] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.7778'. [ 2282.903086][ T3038] program syz.1.7778 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2282.913037][ T3038] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2283.028428][ T2287] IPVS: starting estimator thread 0... [ 2283.119324][ T3051] IPVS: using max 47 ests per chain, 112800 per kthread [ 2283.266170][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.279303][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.883164][ T3073] usb usb8: usbfs: process 3073 (syz.3.7784) did not claim interface 0 before use [ 2283.990722][ T1086] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 2284.044242][ T3078] binder: 3074:3078 ioctl 40046210 0 returned -14 [ 2284.319950][ T2287] usb 2-1: USB disconnect, device number 88 [ 2284.477915][ T3089] ipvlan2: entered promiscuous mode [ 2284.511378][ T3089] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 2284.524261][ T3089] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2285.015578][ T3095] netlink: 312 bytes leftover after parsing attributes in process `syz.1.7793'. [ 2286.969291][ T3082] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2287.120031][ T2287] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2287.137164][ T1086] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 2287.159376][ T3082] usb 2-1: Using ep0 maxpacket: 32 [ 2287.169880][ T3082] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 2287.182031][ T3082] usb 2-1: config 0 has no interface number 0 [ 2287.188138][ T3082] usb 2-1: config 0 interface 184 has no altsetting 0 [ 2287.210628][ T3127] binder: 3123:3127 ioctl 40046210 0 returned -14 [ 2287.259696][ T3082] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2287.276802][ T3082] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2287.285273][ T3082] usb 2-1: Product: syz [ 2287.289831][ T3082] usb 2-1: Manufacturer: syz [ 2287.294480][ T3082] usb 2-1: SerialNumber: syz [ 2287.303402][ T2287] usb 3-1: Using ep0 maxpacket: 16 [ 2287.304149][ T3082] usb 2-1: config 0 descriptor?? [ 2287.335715][ T2287] usb 3-1: config 0 has an invalid descriptor of length 142, skipping remainder of the config [ 2287.348411][ T2287] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2287.363904][ T2287] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2287.365351][ T3082] smsc75xx v1.0.0 [ 2287.387023][ T2287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2287.396239][ T3082] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 2287.420249][ T3082] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 2287.461282][ T2287] usb 3-1: config 0 descriptor?? [ 2287.926907][ T3138] usb usb8: usbfs: process 3138 (syz.4.7808) did not claim interface 0 before use [ 2288.102338][ T5924] IPVS: starting estimator thread 0... [ 2288.759309][ T3142] IPVS: using max 26 ests per chain, 62400 per kthread [ 2288.989828][ T3149] fuse: Bad value for 'group_id' [ 2288.994796][ T3149] fuse: Bad value for 'group_id' [ 2289.049318][ T5924] usb 3-1: USB disconnect, device number 53 [ 2289.652916][ T3161] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2290.113729][ T2287] usb 2-1: USB disconnect, device number 89 [ 2290.461933][ T3177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7818'. [ 2290.490585][ T3177] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7818'. [ 2290.730291][ T3180] netlink: 312 bytes leftover after parsing attributes in process `syz.4.7819'. [ 2290.758181][ T1086] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 2290.828343][ T3183] binder: 3179:3183 ioctl 40046210 0 returned -14 [ 2291.189324][ T3082] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2291.279426][ T5924] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 2291.329407][ T3082] usb 3-1: device descriptor read/64, error -71 [ 2291.430387][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 2291.437900][ T5924] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 2291.446508][ T5924] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2291.457503][ T5924] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2291.542780][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2291.598019][ T5924] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2291.619727][ T3082] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2291.627513][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2291.657152][ T5924] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2291.674390][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2291.696415][ T5924] usb 5-1: config 0 descriptor?? [ 2291.779809][ T3082] usb 3-1: device descriptor read/64, error -71 [ 2291.957203][ T5924] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 100 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2291.968721][ T3082] usb usb3-port1: attempt power cycle [ 2292.218503][ T3205] vivid-000: disconnect [ 2292.329368][ T3082] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2292.509433][ T3082] usb 3-1: device descriptor read/8, error -71 [ 2292.770777][ T3215] usb usb8: usbfs: process 3215 (syz.3.7829) did not claim interface 0 before use [ 2292.871134][ T3082] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2293.234354][ T3082] usb 3-1: device descriptor read/8, error -71 [ 2293.349658][ T3082] usb usb3-port1: unable to enumerate USB device [ 2294.204945][ T3205] vivid-000: reconnect [ 2294.262427][ T752] usb 5-1: USB disconnect, device number 100 [ 2294.299738][ T752] usblp0: removed [ 2294.599463][ T5908] usb 2-1: new low-speed USB device number 90 using dummy_hcd [ 2294.783070][ T5908] usb 2-1: Invalid ep0 maxpacket: 16 [ 2294.929354][ T5908] usb 2-1: new low-speed USB device number 91 using dummy_hcd [ 2295.029549][ T3241] SET target dimension over the limit! [ 2295.040694][ T3239] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7836'. [ 2295.064455][ T3242] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7836'. [ 2295.098347][ T3239] bridge1: entered promiscuous mode [ 2295.116136][ T5908] usb 2-1: Invalid ep0 maxpacket: 16 [ 2295.127749][ T3243] sctp: [Deprecated]: syz.2.7837 (pid 3243) Use of int in maxseg socket option. [ 2295.127749][ T3243] Use struct sctp_assoc_value instead [ 2295.145021][ T5908] usb usb2-port1: attempt power cycle [ 2295.195426][ T3242] bridge2: entered promiscuous mode [ 2295.255013][ T3246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7838'. [ 2295.345846][ T3246] vlan2: entered allmulticast mode [ 2295.352431][ T3246] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 2295.377374][ T3246] team0: Port device vlan2 added [ 2295.496724][ T5908] usb 2-1: new low-speed USB device number 92 using dummy_hcd [ 2295.551779][ T5908] usb 2-1: Invalid ep0 maxpacket: 16 [ 2295.749469][ T5908] usb 2-1: new low-speed USB device number 93 using dummy_hcd [ 2295.810219][ T5908] usb 2-1: Invalid ep0 maxpacket: 16 [ 2295.829768][ T5908] usb usb2-port1: unable to enumerate USB device [ 2296.147955][ T3264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2296.157356][ T3264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2296.359488][ T3082] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 2296.445111][ T3277] usb usb8: usbfs: process 3277 (syz.2.7846) did not claim interface 0 before use [ 2296.541304][ T3082] usb 5-1: Using ep0 maxpacket: 32 [ 2296.555110][ T3082] usb 5-1: config 23 has an invalid descriptor of length 122, skipping remainder of the config [ 2296.584393][ T3082] usb 5-1: config 23 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2296.614534][ T3082] usb 5-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 2296.657285][ T3082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=207 [ 2296.679055][ T3082] usb 5-1: SerialNumber: syz [ 2296.799337][ T5924] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 2296.911327][ T3082] usbhid 5-1:23.0: couldn't find an input interrupt endpoint [ 2296.956488][ T3082] usb 5-1: USB disconnect, device number 101 [ 2296.984504][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2297.013589][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2297.063026][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2297.101980][ T5924] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2297.136353][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2297.207692][ T5924] usb 4-1: config 0 descriptor?? [ 2297.642200][ T5924] plantronics 0003:047F:FFFF.007B: No inputs registered, leaving [ 2297.684618][ T5924] plantronics 0003:047F:FFFF.007B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2297.730995][ T3300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7857'. [ 2297.829439][ T3082] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2298.000115][ T3082] usb 2-1: too many configurations: 239, using maximum allowed: 8 [ 2298.020041][ T3082] usb 2-1: config index 0 descriptor too short (expected 65409, got 72) [ 2298.044877][ T3082] usb 2-1: config index 1 descriptor too short (expected 65409, got 72) [ 2298.058389][ T3082] usb 2-1: config index 2 descriptor too short (expected 65409, got 72) [ 2298.089119][ T3082] usb 2-1: config index 3 descriptor too short (expected 65409, got 72) [ 2298.117364][ T3082] usb 2-1: config index 4 descriptor too short (expected 65409, got 72) [ 2298.145254][ T3082] usb 2-1: config index 5 descriptor too short (expected 65409, got 72) [ 2298.187181][ T5908] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 2298.201375][ T3082] usb 2-1: config index 6 descriptor too short (expected 65409, got 72) [ 2298.225388][ T3082] usb 2-1: config index 7 descriptor too short (expected 65409, got 72) [ 2298.247696][ T3082] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2298.376187][ T5908] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2298.405165][ T5908] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 2298.415752][ T5908] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 2298.443102][ T5908] usb 5-1: config 63 has no interface number 0 [ 2298.462077][ T5908] usb 5-1: config 63 interface 66 has no altsetting 0 [ 2298.469011][ T3082] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2298.491340][ T5908] usb 5-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 2298.498293][ T3082] usb 2-1: Product: syz [ 2298.508258][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2298.526555][ T3082] usb 2-1: Manufacturer: syz [ 2298.533705][ T5908] usb 5-1: Product: syz [ 2298.546806][ T5908] usb 5-1: Manufacturer: syz [ 2298.555032][ T3082] usb 2-1: SerialNumber: syz [ 2298.559237][ T5908] usb 5-1: SerialNumber: syz [ 2298.596606][ T3082] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2298.633892][ T5924] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2298.920938][ T5908] usb 5-1: USB disconnect, device number 102 [ 2299.099060][ T3082] usb 4-1: reset high-speed USB device number 127 using dummy_hcd [ 2299.144686][ T752] usb 2-1: USB disconnect, device number 94 [ 2299.243571][ T3082] usb 4-1: device descriptor read/64, error -32 [ 2299.873657][ T5924] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2299.883993][ T5924] ath9k_htc: Failed to initialize the device [ 2299.939515][ T3082] usb 4-1: reset high-speed USB device number 127 using dummy_hcd [ 2300.129349][ T752] usb 2-1: ath9k_htc: USB layer deinitialized [ 2300.145558][ T3321] SET target dimension over the limit! [ 2300.151445][ T3082] usb 4-1: device descriptor read/64, error -32 [ 2300.299487][ T3325] sctp: [Deprecated]: syz.4.7862 (pid 3325) Use of int in maxseg socket option. [ 2300.299487][ T3325] Use struct sctp_assoc_value instead [ 2301.043038][T21918] usb 4-1: USB disconnect, device number 127 [ 2301.210446][ T3341] usb usb8: usbfs: process 3341 (syz.3.7864) did not claim interface 0 before use [ 2301.522606][ T3353] IPv6: sit1: Disabled Multicast RS [ 2301.959996][ T3361] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7870'. [ 2303.139901][ T752] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 2303.301959][ T752] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2303.331929][ T752] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2303.403275][ T752] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2303.471693][ T752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2303.545520][ T752] usb 5-1: config 0 descriptor?? [ 2303.788560][ T3357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7868'. [ 2304.656942][ T3380] x_tables: duplicate underflow at hook 1 [ 2305.169282][ T752] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 2305.330995][ T752] usb 2-1: config 0 has an invalid interface number: 91 but max is 0 [ 2305.344978][ T752] usb 2-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 2305.371294][ T752] usb 2-1: config 0 has no interface number 0 [ 2305.385639][ T752] usb 2-1: config 0 interface 91 altsetting 3 has an invalid endpoint descriptor of length 5, skipping [ 2305.411698][ T752] usb 2-1: config 0 interface 91 has no altsetting 0 [ 2305.421005][ T752] usb 2-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=60.41 [ 2305.443625][ T752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2305.460014][ T752] usb 2-1: config 0 descriptor?? [ 2305.534996][ T3398] SET target dimension over the limit! [ 2305.562777][T21918] usb 5-1: USB disconnect, device number 103 [ 2305.710750][ T3399] sctp: [Deprecated]: syz.6.7879 (pid 3399) Use of int in maxseg socket option. [ 2305.710750][ T3399] Use struct sctp_assoc_value instead [ 2305.730964][ T752] usb 2-1: string descriptor 0 read error: -71 [ 2305.763597][ T752] usb 2-1: USB disconnect, device number 95 [ 2306.479794][ T3413] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 2306.486382][ T3413] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2306.544896][ T3421] usb usb8: usbfs: process 3421 (syz.3.7883) did not claim interface 0 before use [ 2306.600304][ T3413] vhci_hcd vhci_hcd.0: Device attached [ 2306.707285][ T3428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2306.739951][ T3416] vhci_hcd: connection closed [ 2306.767355][T13003] vhci_hcd: stop threads [ 2306.790178][ T3428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2306.806781][T13003] vhci_hcd: release socket [ 2306.815819][T13003] vhci_hcd: disconnect device [ 2306.839437][ T752] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 2306.847526][ T752] usb 45-1: enqueue for inactive port 0 [ 2306.929519][ T752] vhci_hcd: vhci_device speed not set [ 2306.999474][ T5908] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 2308.598771][ T3451] SET target dimension over the limit! [ 2308.747113][ T3453] sctp: [Deprecated]: syz.1.7894 (pid 3453) Use of int in maxseg socket option. [ 2308.747113][ T3453] Use struct sctp_assoc_value instead [ 2309.811598][ T3465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7898'. [ 2309.850543][ T3465] netlink: 'syz.4.7898': attribute type 21 has an invalid length. [ 2309.883123][ T3465] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7898'. [ 2309.905484][ T3082] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 2309.925730][ T3465] netlink: 'syz.4.7898': attribute type 4 has an invalid length. [ 2309.944036][ T3465] netlink: 'syz.4.7898': attribute type 5 has an invalid length. [ 2310.120973][ T3465] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7898'. [ 2310.174311][ T3082] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 2310.205062][ T3082] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2310.321971][ T3082] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 2310.375076][ T3082] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 2310.478267][ T3082] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2310.505006][ T3082] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2310.588130][ T3082] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2310.597503][ T3082] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2310.606551][ T3082] usb 3-1: Product: syz [ 2310.623361][ T3082] usb 3-1: Manufacturer: syz [ 2310.628033][ T3082] usb 3-1: SerialNumber: syz [ 2310.660218][ T3082] usb 3-1: config 0 descriptor?? [ 2310.706953][ T3461] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2310.722190][ T3082] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2310.798801][ T3082] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2310.999605][T21918] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 2311.182389][T21918] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2311.207630][ T5908] usb 3-1: USB disconnect, device number 58 [ 2311.220131][ T5908] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 2311.253408][T21918] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2311.282941][T21918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2311.307082][T21918] usb 5-1: Product: syz [ 2311.319258][T21918] usb 5-1: Manufacturer: syz [ 2311.328156][T21918] usb 5-1: SerialNumber: syz [ 2311.564673][ T3490] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2311.599418][ T3490] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2311.933448][ T3502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7908'. [ 2311.948686][ T3504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2311.975709][ T3504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2312.012311][ T3500] usb usb8: usbfs: process 3500 (syz.1.7906) did not claim interface 0 before use [ 2312.032909][ T3502] netlink: 'syz.3.7908': attribute type 10 has an invalid length. [ 2312.049011][ T3508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2312.061679][ T3508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2312.284476][T21918] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 105 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 2312.489516][T21918] usb 5-1: USB disconnect, device number 105 [ 2312.507136][ T3514] SET target dimension over the limit! [ 2312.534326][T21918] usblp0: removed [ 2312.631646][ T3519] sctp: [Deprecated]: syz.1.7909 (pid 3519) Use of int in maxseg socket option. [ 2312.631646][ T3519] Use struct sctp_assoc_value instead [ 2315.849587][T28918] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 2316.125708][T21918] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2316.143169][T28918] usb 5-1: config 0 has no interfaces? [ 2316.309294][T21918] usb 3-1: Using ep0 maxpacket: 32 [ 2316.331001][T21918] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2316.359794][T21918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2316.434538][T21918] usb 3-1: config 0 descriptor?? [ 2316.533852][T28918] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2316.572483][T28918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2316.633226][T28918] usb 5-1: Product: syz [ 2316.637500][T28918] usb 5-1: Manufacturer: syz [ 2316.661710][T28918] usb 5-1: SerialNumber: syz [ 2316.694052][T28918] usb 5-1: config 0 descriptor?? [ 2316.771148][ T3558] usb usb8: usbfs: process 3558 (syz.3.7919) did not claim interface 0 before use [ 2317.059734][T28918] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 2317.229816][T28918] usb 2-1: Using ep0 maxpacket: 32 [ 2317.241044][T28918] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2317.261885][T28918] usb 2-1: config index 0 descriptor too short (expected 52032, got 27) [ 2317.299380][T28918] usb 2-1: config 33 has too many interfaces: 182, using maximum allowed: 32 [ 2317.343832][T28918] usb 2-1: config 33 has an invalid descriptor of length 89, skipping remainder of the config [ 2317.383135][T28918] usb 2-1: config 33 has 0 interfaces, different from the descriptor's value: 182 [ 2317.403435][T21918] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 2317.437873][T28918] usb 2-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 2317.457501][T28918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2317.470142][T21918] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 2317.501075][T28918] usb 2-1: Manufacturer: 璼ච⹏皶ᅝၴ㻠ⲁ貥鿽緼蜅솴墨ꕈ돌褁뻺蒝㢠ᱵ๔ቼ⍘䶅㸛犅癍关홃鯝︼椋ꬕ퓣蘊뽥㴽㺊˼ష챟ᾆ돳精㏅ᦣ鏉蹩쏶磐嬭ꦋ걕鯢ꇮْ켖饋䀍䦾兮鏽漬 [ 2317.524082][ C0] vkms_vblank_simulate: vblank timer overrun [ 2317.530682][T21918] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 2317.615543][T28918] usb 2-1: SerialNumber: syz [ 2318.255725][ T5924] usb 5-1: USB disconnect, device number 106 [ 2318.308996][ T3580] SET target dimension over the limit! [ 2318.373465][ T3581] sctp: [Deprecated]: syz.4.7923 (pid 3581) Use of int in maxseg socket option. [ 2318.373465][ T3581] Use struct sctp_assoc_value instead [ 2319.271974][ T3586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2319.872434][T28918] usb 2-1: USB disconnect, device number 96 [ 2320.195412][ T3594] netlink: 'syz.2.7927': attribute type 10 has an invalid length. [ 2320.322244][ T3601] netlink: 212 bytes leftover after parsing attributes in process `syz.6.7929'. [ 2320.438314][ T3603] usb usb8: usbfs: process 3603 (syz.4.7930) did not claim interface 0 before use [ 2321.320660][ T3622] SET target dimension over the limit! [ 2321.654808][ T3628] sctp: [Deprecated]: syz.4.7936 (pid 3628) Use of int in maxseg socket option. [ 2321.654808][ T3628] Use struct sctp_assoc_value instead [ 2321.684159][ T3625] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2321.705681][ T3625] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 2323.683415][ T3649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7942'. [ 2323.719712][ T3650] usb usb8: usbfs: process 3650 (syz.6.7943) did not claim interface 0 before use [ 2324.121771][ T3660] bond0: entered allmulticast mode [ 2324.132931][ T3660] bond_slave_0: entered allmulticast mode [ 2324.164740][ T3660] bond_slave_1: entered allmulticast mode [ 2324.374377][ T3665] SET target dimension over the limit! [ 2324.583327][ T3667] sctp: [Deprecated]: syz.2.7947 (pid 3667) Use of int in maxseg socket option. [ 2324.583327][ T3667] Use struct sctp_assoc_value instead [ 2325.213539][ T3678] bridge0: entered promiscuous mode [ 2325.248851][ T3678] bond0: entered promiscuous mode [ 2325.406610][ T3678] hsr0: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 2325.500222][ T3678] hsr0: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 2325.518676][ T3678] hsr0: entered allmulticast mode [ 2325.524701][ T3678] bridge0: entered allmulticast mode [ 2325.563066][ T3678] bond0: entered allmulticast mode [ 2326.028542][T28918] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 2326.219287][T28918] usb 2-1: device descriptor read/64, error -71 [ 2326.460901][T28918] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 2326.619458][T28918] usb 2-1: device descriptor read/64, error -71 [ 2326.746999][T28918] usb usb2-port1: attempt power cycle [ 2327.093997][T28918] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 2327.187542][T28918] usb 2-1: device descriptor read/8, error -71 [ 2327.429627][T28918] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 2327.654737][T28918] usb 2-1: device descriptor read/8, error -71 [ 2327.684681][ T3697] tc_dump_action: action bad kind [ 2327.771069][T28918] usb usb2-port1: unable to enumerate USB device [ 2327.956350][ T3700] usb usb8: usbfs: process 3700 (syz.3.7956) did not claim interface 0 before use [ 2328.118915][ T3704] x_tables: duplicate underflow at hook 3 [ 2328.497133][ T3717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7962'. [ 2328.516812][ T3717] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7962'. [ 2328.525876][ T3717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7962'. [ 2328.543205][ T3717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7962'. [ 2328.554553][ T3717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7962'. [ 2328.962307][ T3730] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 2329.153631][ T3733] gretap0: entered promiscuous mode [ 2329.177910][ T3730] gretap0: left promiscuous mode [ 2329.966483][ T3742] usb usb8: usbfs: process 3742 (syz.3.7967) did not claim interface 0 before use [ 2330.519595][ T5908] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 2330.701642][ T5908] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2330.761676][ T5908] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2330.789330][ T5908] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2330.815629][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2330.867241][ T3746] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2330.897796][ T5908] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2331.165803][ T3756] batadv0: entered allmulticast mode [ 2331.187688][ T3756] sctp: [Deprecated]: syz.6.7973 (pid 3756) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2331.187688][ T3756] Use struct sctp_sack_info instead [ 2331.279108][ T3759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2331.343288][ T3759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2331.700418][ T2287] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 2331.759530][ T5908] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 2331.874444][ T2287] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2331.885500][ T2287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2331.906253][ T2287] usb 5-1: Product: syz [ 2331.913119][ T2287] usb 5-1: Manufacturer: syz [ 2331.918092][ T2287] usb 5-1: SerialNumber: syz [ 2331.932956][ T2287] usb 5-1: config 0 descriptor?? [ 2331.938020][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 2331.954936][ T5908] usb 2-1: config 1 has an invalid descriptor of length 54, skipping remainder of the config [ 2331.969947][ T5908] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2331.981707][ T5908] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2331.997050][ T5908] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 56, changing to 7 [ 2332.047751][ T5908] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8512, setting to 1024 [ 2332.103502][ T5908] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2332.124114][ T5908] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2332.151074][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2332.183212][ T5908] usb 2-1: Product: syz [ 2332.187517][ T5908] usb 2-1: Manufacturer: syz [ 2332.211886][ T5908] usb 2-1: SerialNumber: syz [ 2332.406453][ T2287] airspy 5-1:0.0: Board ID: 00 [ 2332.412425][ T2287] airspy 5-1:0.0: Firmware version: [ 2332.447804][ T5908] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 2332.491552][ T5908] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 2332.565646][ T5908] usb 2-1: USB disconnect, device number 101 [ 2333.027407][ T2287] airspy 5-1:0.0: usb_control_msg() failed -32 request 12 [ 2333.064746][ T2287] airspy 5-1:0.0: Registered as swradio24 [ 2333.072238][ T2287] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2333.142681][ T3784] usb usb8: usbfs: process 3784 (syz.6.7979) did not claim interface 0 before use [ 2333.198340][ T5924] usb 4-1: USB disconnect, device number 2 [ 2333.399386][ T3762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2333.489770][ T3762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2334.333926][ T3801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7983'. [ 2335.010529][ T2287] usb 5-1: USB disconnect, device number 107 [ 2336.419871][ T3830] netlink: 204 bytes leftover after parsing attributes in process `syz.3.7992'. [ 2337.379624][ T5908] usb 5-1: new low-speed USB device number 108 using dummy_hcd [ 2337.554328][ T5908] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 2337.583525][ T5908] usb 5-1: config 0 has no interface number 0 [ 2337.612083][ T5908] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2337.642870][ T5908] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 2337.662889][ T5908] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2337.713514][ T5908] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2337.735234][ T5908] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2337.749838][ T5908] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2337.826489][ T5908] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2337.869706][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2337.921086][ T5908] usb 5-1: config 0 descriptor?? [ 2337.960261][ T3837] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2338.008797][ T5908] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2338.238777][ T3837] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90 [ 2338.302211][ T5908] usb 5-1: USB disconnect, device number 108 [ 2338.323635][ T3855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8002'. [ 2338.480807][ T5908] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 2341.695254][ T3901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2341.763278][ T3901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2341.929276][ T5924] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 2342.083012][ T5924] usb 5-1: device descriptor read/64, error -71 [ 2342.342050][ T5924] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 2342.479305][ T5924] usb 5-1: device descriptor read/64, error -71 [ 2342.590307][ T5924] usb usb5-port1: attempt power cycle [ 2342.939312][ T5924] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 2342.960262][ T5924] usb 5-1: device descriptor read/8, error -71 [ 2343.209296][ T5924] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 2343.249997][ T5924] usb 5-1: device descriptor read/8, error -71 [ 2343.329738][ T2287] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 2343.361794][ T5924] usb usb5-port1: unable to enumerate USB device [ 2343.489282][ T2287] usb 2-1: Using ep0 maxpacket: 8 [ 2343.515141][ T2287] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 2343.537498][ T2287] usb 2-1: config 179 has no interface number 0 [ 2343.569419][ T2287] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2343.602441][ T2287] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2343.626838][ T2287] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2343.639003][ T2287] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2343.656023][ T2287] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2343.675791][ T2287] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2343.699455][ T2287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2343.716938][ T3919] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2343.789853][ T5924] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 2343.938616][ T2287] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input118 [ 2343.955288][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 2343.977407][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2343.995285][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2344.027920][ T5924] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 2344.037770][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2344.084944][ T5924] usb 4-1: config 0 descriptor?? [ 2344.173924][ T8953] usb 2-1: USB disconnect, device number 102 [ 2344.173961][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2344.188496][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2344.213140][ T8953] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 2344.391271][ T3945] netlink: 'syz.1.8023': attribute type 1 has an invalid length. [ 2344.705459][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.712090][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.935059][ T5924] letsketch 0003:6161:4D15.007C: Device info: ࠇ [ 2345.075699][ T2287] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 2345.207459][ T5924] letsketch 0003:6161:4D15.007C: Device info: ဉ [ 2345.275972][ T2287] usb 5-1: Using ep0 maxpacket: 16 [ 2345.309849][ T2287] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2345.326586][ T2287] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2345.344175][ T2287] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2345.362773][ T2287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2345.382381][ T2287] usb 5-1: config 0 descriptor?? [ 2345.393662][ T5924] letsketch 0003:6161:4D15.007C: Device info: 豧 [ 2345.922642][ T3932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2345.933468][ T2287] nzxt-smart2 0003:1E71:2009.007D: unknown main item tag 0x0 [ 2345.954551][ T2287] nzxt-smart2 0003:1E71:2009.007D: unknown main item tag 0x0 [ 2345.963252][ T3932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2345.974286][ T2287] nzxt-smart2 0003:1E71:2009.007D: unknown main item tag 0x0 [ 2345.982472][ T2287] nzxt-smart2 0003:1E71:2009.007D: unknown main item tag 0x0 [ 2346.010973][ T2287] nzxt-smart2 0003:1E71:2009.007D: unknown main item tag 0x0 [ 2346.026051][ T5924] usb 4-1: Max retries (5) exceeded reading string descriptor 2 [ 2346.034307][ T5924] letsketch 0003:6161:4D15.007C: probe with driver letsketch failed with error -71 [ 2346.047627][ T2287] nzxt-smart2 0003:1E71:2009.007D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 2346.153036][ T3948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2346.169692][ T5924] usb 4-1: USB disconnect, device number 3 [ 2346.224509][ T3948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2346.259531][ T2287] usb 5-1: USB disconnect, device number 113 [ 2346.877951][ T3965] usb usb8: usbfs: process 3965 (syz.3.8027) did not claim interface 0 before use [ 2347.078457][ T3972] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2348.942359][ T3999] SET target dimension over the limit! [ 2349.039548][ T3082] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 2349.052868][ T4000] sctp: [Deprecated]: syz.2.8038 (pid 4000) Use of int in maxseg socket option. [ 2349.052868][ T4000] Use struct sctp_assoc_value instead [ 2349.226056][ T3082] usb 2-1: config 0 has an invalid interface number: 248 but max is 0 [ 2349.267152][ T3082] usb 2-1: config 0 has no interface number 0 [ 2349.303007][ T3082] usb 2-1: config 0 interface 248 has no altsetting 0 [ 2349.357722][ T3082] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=10.98 [ 2349.410064][ T3082] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2349.534684][ T3082] usb 2-1: Product: syz [ 2349.572329][ T3082] usb 2-1: Manufacturer: syz [ 2349.600432][ T3082] usb 2-1: SerialNumber: syz [ 2349.740037][ T3082] usb 2-1: config 0 descriptor?? [ 2349.985204][ T3992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8035'. [ 2350.056145][ T3082] usb 2-1: USB disconnect, device number 103 [ 2351.058401][ T4026] xt_hashlimit: size too large, truncated to 1048576 [ 2351.335008][ T4033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8046'. [ 2354.120214][ T752] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 2354.335605][ T752] usb 5-1: Using ep0 maxpacket: 16 [ 2354.388423][ T752] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2354.398190][ T752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2354.423701][ T752] usb 5-1: Product: syz [ 2354.427944][ T752] usb 5-1: Manufacturer: syz [ 2354.464224][ T752] usb 5-1: SerialNumber: syz [ 2354.500206][ T752] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2354.506532][ T752] r8152-cfgselector 5-1: config 0 descriptor?? [ 2354.674925][ T4045] input: syz0 as /devices/virtual/input/input119 [ 2354.793521][ T4069] program syz.3.8050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2354.815601][ T4069] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2354.873256][ T4070] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8050'. [ 2354.923572][ T4045] netlink: 'syz.1.8048': attribute type 6 has an invalid length. [ 2355.046843][ T752] r8152-cfgselector 5-1: USB disconnect, device number 114 [ 2358.130636][ T4109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8067'. [ 2359.732344][ T4131] FAULT_INJECTION: forcing a failure. [ 2359.732344][ T4131] name failslab, interval 1, probability 0, space 0, times 0 [ 2359.784749][ T4131] CPU: 0 UID: 0 PID: 4131 Comm: syz.3.8072 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 2359.784781][ T4131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2359.784793][ T4131] Call Trace: [ 2359.784798][ T4131] [ 2359.784804][ T4131] dump_stack_lvl+0x189/0x250 [ 2359.784828][ T4131] ? __pfx____ratelimit+0x10/0x10 [ 2359.784848][ T4131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2359.784866][ T4131] ? __pfx__printk+0x10/0x10 [ 2359.784882][ T4131] ? __pfx___might_resched+0x10/0x10 [ 2359.784900][ T4131] ? fs_reclaim_acquire+0x7d/0x100 [ 2359.784917][ T4131] should_fail_ex+0x414/0x560 [ 2359.784936][ T4131] should_failslab+0xa8/0x100 [ 2359.784950][ T4131] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 2359.784963][ T4131] ? __alloc_skb+0x112/0x2d0 [ 2359.784980][ T4131] __alloc_skb+0x112/0x2d0 [ 2359.784996][ T4131] netlink_ack+0x146/0xa50 [ 2359.785021][ T4131] netlink_rcv_skb+0x28c/0x470 [ 2359.785036][ T4131] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2359.785055][ T4131] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2359.785075][ T4131] ? bpf_lsm_capable+0x9/0x20 [ 2359.785087][ T4131] ? security_capable+0x7e/0x2e0 [ 2359.785106][ T4131] nfnetlink_rcv+0x26a/0x2520 [ 2359.785126][ T4131] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 2359.785145][ T4131] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 2359.785165][ T4131] ? __dev_queue_xmit+0x27e/0x3a70 [ 2359.785181][ T4131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2359.785200][ T4131] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2359.785217][ T4131] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2359.785242][ T4131] ? ref_tracker_free+0x63a/0x7d0 [ 2359.785258][ T4131] ? __copy_skb_header+0xa7/0x550 [ 2359.785274][ T4131] ? __pfx_ref_tracker_free+0x10/0x10 [ 2359.785301][ T4131] ? skb_clone+0x246/0x3a0 [ 2359.785319][ T4131] ? __netlink_deliver_tap+0x807/0x850 [ 2359.785333][ T4131] ? netlink_deliver_tap+0x2e/0x1b0 [ 2359.785350][ T4131] ? netlink_deliver_tap+0x2e/0x1b0 [ 2359.785364][ T4131] ? netlink_deliver_tap+0x2e/0x1b0 [ 2359.785381][ T4131] netlink_unicast+0x75b/0x8d0 [ 2359.785400][ T4131] netlink_sendmsg+0x805/0xb30 [ 2359.785420][ T4131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2359.785437][ T4131] ? aa_sock_msg_perm+0x94/0x160 [ 2359.785454][ T4131] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2359.785468][ T4131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2359.785483][ T4131] __sock_sendmsg+0x219/0x270 [ 2359.785503][ T4131] ____sys_sendmsg+0x505/0x830 [ 2359.785522][ T4131] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2359.785542][ T4131] ? import_iovec+0x74/0xa0 [ 2359.785557][ T4131] ___sys_sendmsg+0x21f/0x2a0 [ 2359.785574][ T4131] ? __pfx____sys_sendmsg+0x10/0x10 [ 2359.785611][ T4131] ? __fget_files+0x2a/0x420 [ 2359.785624][ T4131] ? __fget_files+0x3a0/0x420 [ 2359.785643][ T4131] __x64_sys_sendmsg+0x19b/0x260 [ 2359.785660][ T4131] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2359.785681][ T4131] ? __pfx_ksys_write+0x10/0x10 [ 2359.785691][ T4131] ? rcu_is_watching+0x15/0xb0 [ 2359.785712][ T4131] ? do_syscall_64+0xbe/0x3b0 [ 2359.785726][ T4131] do_syscall_64+0xfa/0x3b0 [ 2359.785743][ T4131] ? lockdep_hardirqs_on+0x9c/0x150 [ 2359.785760][ T4131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2359.785772][ T4131] ? clear_bhb_loop+0x60/0xb0 [ 2359.785787][ T4131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2359.785800][ T4131] RIP: 0033:0x7ff617b8e929 [ 2359.785812][ T4131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2359.785824][ T4131] RSP: 002b:00007ff618ac2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2359.785838][ T4131] RAX: ffffffffffffffda RBX: 00007ff617db5fa0 RCX: 00007ff617b8e929 [ 2359.785847][ T4131] RDX: 0000000024002800 RSI: 0000200000000040 RDI: 0000000000000003 [ 2359.785856][ T4131] RBP: 00007ff618ac2090 R08: 0000000000000000 R09: 0000000000000000 [ 2359.785863][ T4131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2359.785871][ T4131] R13: 0000000000000000 R14: 00007ff617db5fa0 R15: 00007ff617edfa28 [ 2359.785889][ T4131] [ 2360.174167][ C0] vkms_vblank_simulate: vblank timer overrun [ 2361.699484][ T2287] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 2361.885922][ T2287] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2361.908311][ T2287] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 2361.919554][ T2287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2361.927566][ T2287] usb 4-1: Product: syz [ 2361.992672][ T2287] usb 4-1: Manufacturer: syz [ 2362.004938][ T2287] usb 4-1: SerialNumber: syz [ 2362.055136][ T2287] usb 4-1: config 0 descriptor?? [ 2362.166615][ T1086] Bluetooth: hci2: urb ffff88805a4df900 submission failed (2) [ 2362.589305][ T3082] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 2362.791955][ T4159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2362.800938][ T3082] usb 2-1: Using ep0 maxpacket: 32 [ 2362.810956][ T4159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2362.838973][ T3082] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 2362.848864][ T3082] usb 2-1: config 0 has no interface number 0 [ 2362.857140][ T3082] usb 2-1: config 0 interface 184 has no altsetting 0 [ 2362.904377][ T3082] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2362.916410][ T3082] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2363.279250][ T3082] usb 2-1: Product: syz [ 2363.485052][ T3082] usb 2-1: Manufacturer: syz [ 2363.503775][ T3082] usb 2-1: SerialNumber: syz [ 2363.557146][ T3082] usb 2-1: config 0 descriptor?? [ 2363.593720][ T3082] smsc75xx v1.0.0 [ 2363.597564][ T3082] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 2363.616166][ T3082] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 2364.249025][ T4174] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8082'. [ 2364.703364][ T3082] usb 4-1: USB disconnect, device number 4 [ 2365.450772][ T752] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2365.641304][ T752] usb 4-1: config 0 has no interfaces? [ 2365.681392][ T4188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8088'. [ 2365.768796][ T752] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2365.820894][ T752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2365.831893][ T5924] usb 2-1: USB disconnect, device number 104 [ 2365.869229][ T752] usb 4-1: Product: syz [ 2365.880179][ T752] usb 4-1: Manufacturer: syz [ 2365.895061][ T752] usb 4-1: SerialNumber: syz [ 2365.948665][ T752] usb 4-1: config 0 descriptor?? [ 2367.276246][ T4207] netlink: 312 bytes leftover after parsing attributes in process `syz.4.8092'. [ 2367.724825][ T4210] No such timeout policy "syz1" [ 2367.994505][ T4210] sctp: [Deprecated]: syz.1.8094 (pid 4210) Use of int in maxseg socket option. [ 2367.994505][ T4210] Use struct sctp_assoc_value instead [ 2368.024377][ T4217] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2368.554563][ T5924] usb 4-1: USB disconnect, device number 5 [ 2369.905583][ T4240] netlink: 356 bytes leftover after parsing attributes in process `syz.1.8104'. [ 2370.031448][ T1086] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 2371.404541][ T4264] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8111'. [ 2371.447514][ T4264] : renamed from bond0 (while UP) [ 2371.618634][ T4267] FAULT_INJECTION: forcing a failure. [ 2371.618634][ T4267] name failslab, interval 1, probability 0, space 0, times 0 [ 2371.649991][ T4267] CPU: 0 UID: 0 PID: 4267 Comm: syz.3.8112 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 2371.650023][ T4267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2371.650036][ T4267] Call Trace: [ 2371.650044][ T4267] [ 2371.650053][ T4267] dump_stack_lvl+0x189/0x250 [ 2371.650089][ T4267] ? __pfx____ratelimit+0x10/0x10 [ 2371.650119][ T4267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2371.650150][ T4267] ? __pfx__printk+0x10/0x10 [ 2371.650176][ T4267] ? __pfx___might_resched+0x10/0x10 [ 2371.650207][ T4267] ? fs_reclaim_acquire+0x7d/0x100 [ 2371.650237][ T4267] should_fail_ex+0x414/0x560 [ 2371.650268][ T4267] should_failslab+0xa8/0x100 [ 2371.650291][ T4267] __kmalloc_cache_noprof+0x70/0x3d0 [ 2371.650311][ T4267] ? fwnode_create_software_node+0xeb/0x1f0 [ 2371.650338][ T4267] fwnode_create_software_node+0xeb/0x1f0 [ 2371.650362][ T4267] device_create_managed_software_node+0xdd/0x1f0 [ 2371.650383][ T4267] ? iommufd_test+0x2b8b/0x5170 [ 2371.650410][ T4267] iommufd_test+0x2f78/0x5170 [ 2371.650449][ T4267] ? __pfx_iommufd_test+0x10/0x10 [ 2371.650477][ T4267] ? __lock_acquire+0xab9/0xd20 [ 2371.650515][ T4267] ? __might_fault+0xb0/0x130 [ 2371.650570][ T4267] iommufd_fops_ioctl+0x449/0x520 [ 2371.650605][ T4267] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 2371.650650][ T4267] ? __fget_files+0x3a0/0x420 [ 2371.650672][ T4267] ? __fget_files+0x2a/0x420 [ 2371.650698][ T4267] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2371.650726][ T4267] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 2371.650756][ T4267] __se_sys_ioctl+0xf9/0x170 [ 2371.650789][ T4267] do_syscall_64+0xfa/0x3b0 [ 2371.650807][ T4267] ? lockdep_hardirqs_on+0x9c/0x150 [ 2371.650837][ T4267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2371.650857][ T4267] ? clear_bhb_loop+0x60/0xb0 [ 2371.650882][ T4267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2371.650902][ T4267] RIP: 0033:0x7ff617b8e929 [ 2371.650921][ T4267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2371.650940][ T4267] RSP: 002b:00007ff618ac2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2371.650964][ T4267] RAX: ffffffffffffffda RBX: 00007ff617db5fa0 RCX: 00007ff617b8e929 [ 2371.650980][ T4267] RDX: 0000200000000100 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 2371.650994][ T4267] RBP: 00007ff618ac2090 R08: 0000000000000000 R09: 0000000000000000 [ 2371.651007][ T4267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2371.651020][ T4267] R13: 0000000000000000 R14: 00007ff617db5fa0 R15: 00007ff617edfa28 [ 2371.651052][ T4267] [ 2371.651099][ T4267] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 2372.094892][ T4274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8113'. [ 2372.110024][ T4275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8115'. [ 2373.675139][ T4294] netlink: 'syz.3.8121': attribute type 3 has an invalid length. [ 2374.489836][ T4309] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 67108897, id = 0 [ 2374.723354][ T4321] netlink: 'syz.3.8131': attribute type 5 has an invalid length. [ 2374.768649][ T4321] ip6erspan0: entered promiscuous mode [ 2375.082048][ T4337] netlink: 312 bytes leftover after parsing attributes in process `syz.1.8136'. [ 2376.312417][ T8953] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 2376.566855][ T8953] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2376.980693][ T8953] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2377.042152][ T8953] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2377.073863][ T8953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2377.130182][ T8953] usb 2-1: config 0 descriptor?? [ 2377.378367][ T4348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8137'. [ 2378.343930][ T4370] netlink: 'syz.6.8145': attribute type 322 has an invalid length. [ 2378.658289][ T4378] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2378.919839][ T5924] usb 2-1: USB disconnect, device number 105 [ 2380.548660][T21918] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 2380.813982][T21918] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 2380.956337][T21918] usb 3-1: USB disconnect, device number 59 [ 2381.292339][ T4400] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 2381.299318][T21918] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2381.360430][ T752] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2381.515336][ T752] usb 4-1: Using ep0 maxpacket: 8 [ 2381.523395][ T752] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 2381.545764][ T752] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2381.579785][ T752] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 2381.643713][ T752] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2381.662258][ T752] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2381.680908][ T752] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 2381.690702][T21918] usb 3-1: device not accepting address 60, error -71 [ 2381.694357][ T752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2381.719816][ T752] usb 4-1: Product: syz [ 2381.724044][ T752] usb 4-1: Manufacturer: syz [ 2381.755125][ T752] usb 4-1: SerialNumber: syz [ 2381.817377][ T752] usb 4-1: config 0 descriptor?? [ 2381.847574][ T752] kvaser_usb 4-1:0.0: error -EMSGSIZE: Cannot get software info [ 2381.889686][ T752] kvaser_usb 4-1:0.0: probe with driver kvaser_usb failed with error -90 [ 2382.061027][ T2287] usb 4-1: USB disconnect, device number 6 [ 2382.249658][ T752] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 2382.399844][ T752] usb 2-1: device descriptor read/64, error -71 [ 2382.820961][ T752] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 2383.069485][ T752] usb 2-1: device descriptor read/64, error -71 [ 2383.198506][ T752] usb usb2-port1: attempt power cycle [ 2383.549548][ T752] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 2383.584275][ T752] usb 2-1: device descriptor read/8, error -71 [ 2383.759299][ T2287] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2383.859315][ T752] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 2383.903424][ T752] usb 2-1: device descriptor read/8, error -71 [ 2383.979294][ T2287] usb 3-1: device descriptor read/64, error -71 [ 2384.044303][ T752] usb usb2-port1: unable to enumerate USB device [ 2384.219593][ T2287] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2384.369555][ T2287] usb 3-1: device descriptor read/64, error -71 [ 2384.479529][ T2287] usb usb3-port1: attempt power cycle [ 2384.768731][ T4454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8171'. [ 2384.834606][ T4459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8172'. [ 2384.929456][ T2287] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2384.963672][ T2287] usb 3-1: device descriptor read/8, error -71 [ 2385.329647][ T2287] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2385.408561][ T2287] usb 3-1: device descriptor read/8, error -71 [ 2385.530071][ T2287] usb usb3-port1: unable to enumerate USB device [ 2386.013302][ T4477] x_tables: duplicate underflow at hook 2 [ 2386.036046][ T4477] x_tables: duplicate underflow at hook 1 [ 2386.279277][ T752] usb 2-1: new low-speed USB device number 110 using dummy_hcd [ 2386.614560][ T752] usb 2-1: Invalid ep0 maxpacket: 32 [ 2387.394755][ T752] usb 2-1: new low-speed USB device number 111 using dummy_hcd [ 2387.645511][ T752] usb 2-1: Invalid ep0 maxpacket: 32 [ 2387.662846][ T752] usb usb2-port1: attempt power cycle [ 2388.099679][ T752] usb 2-1: new low-speed USB device number 112 using dummy_hcd [ 2388.137312][ T752] usb 2-1: Invalid ep0 maxpacket: 32 [ 2388.299759][ T752] usb 2-1: new low-speed USB device number 113 using dummy_hcd [ 2388.344922][ T752] usb 2-1: Invalid ep0 maxpacket: 32 [ 2388.365196][ T752] usb usb2-port1: unable to enumerate USB device [ 2389.205786][ T4508] openvswitch: netlink: Duplicate or invalid key (type 0). [ 2389.218204][ T4508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2389.689356][T21918] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 2389.945884][T21918] usb 5-1: device descriptor read/64, error -71 [ 2390.232304][ T4523] syzkaller1: entered promiscuous mode [ 2390.249582][T21918] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 2390.308461][ T4523] syzkaller1: entered allmulticast mode [ 2390.308723][ T4526] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 2390.429307][T21918] usb 5-1: device descriptor read/64, error -71 [ 2390.461660][ T30] audit: type=1326 audit(1749798307.357:5887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4522 comm="syz.2.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37cd8e929 code=0x7ffc0000 [ 2390.551435][T21918] usb usb5-port1: attempt power cycle [ 2390.606563][ T30] audit: type=1326 audit(1749798307.407:5888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4522 comm="syz.2.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe37cd8e929 code=0x7ffc0000 [ 2390.629856][ T30] audit: type=1326 audit(1749798307.407:5889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4522 comm="syz.2.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37cd8e929 code=0x7ffc0000 [ 2390.652597][ T30] audit: type=1326 audit(1749798307.407:5890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4522 comm="syz.2.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37cd8e929 code=0x7ffc0000 [ 2390.746786][ T30] audit: type=1326 audit(1749798307.407:5891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4522 comm="syz.2.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe37cd8e929 code=0x7ffc0000 [ 2390.769561][ T30] audit: type=1326 audit(1749798307.407:5892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4522 comm="syz.2.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37cd8e929 code=0x7ffc0000 [ 2390.793179][ T30] audit: type=1326 audit(1749798307.407:5893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4522 comm="syz.2.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37cd8e929 code=0x7ffc0000 [ 2390.816513][ T30] audit: type=1326 audit(1749798307.407:5894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4522 comm="syz.2.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fe37cd8e929 code=0x7ffc0000 [ 2390.936734][ T30] audit: type=1326 audit(1749798307.407:5895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4522 comm="syz.2.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37cd8e929 code=0x7ffc0000 [ 2390.949427][T21918] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 2391.053901][T21918] usb 5-1: device descriptor read/8, error -71 [ 2391.228305][ T30] audit: type=1326 audit(1749798307.407:5896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4522 comm="syz.2.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37cd8e929 code=0x7ffc0000 [ 2391.384998][T21918] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 2391.520410][T21918] usb 5-1: device descriptor read/8, error -71 [ 2391.629915][T21918] usb usb5-port1: unable to enumerate USB device [ 2392.889489][T21918] usb 5-1: new low-speed USB device number 119 using dummy_hcd [ 2393.075006][T21918] usb 5-1: device descriptor read/64, error -71 [ 2393.166467][ T4558] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2393.252003][ T4562] SET target dimension over the limit! [ 2393.319242][T21918] usb 5-1: new low-speed USB device number 120 using dummy_hcd [ 2393.378478][ T4564] sctp: [Deprecated]: syz.3.8202 (pid 4564) Use of int in maxseg socket option. [ 2393.378478][ T4564] Use struct sctp_assoc_value instead [ 2393.499304][T21918] usb 5-1: device descriptor read/64, error -71 [ 2393.671037][T21918] usb usb5-port1: attempt power cycle [ 2393.979875][ T4574] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8204'. [ 2394.047186][T21918] usb 5-1: new low-speed USB device number 121 using dummy_hcd [ 2394.072372][ T4574] vlan0: entered promiscuous mode [ 2394.163385][T21918] usb 5-1: device descriptor read/8, error -71 [ 2394.449964][T21918] usb 5-1: new low-speed USB device number 122 using dummy_hcd [ 2394.469966][T21918] usb 5-1: device descriptor read/8, error -71 [ 2394.591029][T21918] usb usb5-port1: unable to enumerate USB device [ 2395.060655][T21918] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2395.209357][T21918] usb 4-1: device descriptor read/64, error -71 [ 2395.479565][T21918] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2395.677532][T21918] usb 4-1: device descriptor read/64, error -71 [ 2395.811150][T21918] usb usb4-port1: attempt power cycle [ 2396.039918][ T752] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2396.159221][T21918] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2396.204459][ T752] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2396.236125][T21918] usb 4-1: device descriptor read/8, error -71 [ 2396.238821][ T752] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2396.289715][ T752] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2396.304318][ T752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2396.328397][ T752] usb 2-1: config 0 descriptor?? [ 2396.460308][ T4620] hub 1-0:1.0: USB hub found [ 2396.466441][ T4620] hub 1-0:1.0: 1 port detected [ 2396.530429][T21918] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2396.553167][ T4604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8213'. [ 2396.630942][T21918] usb 4-1: device descriptor read/8, error -71 [ 2396.799692][T21918] usb usb4-port1: unable to enumerate USB device [ 2397.051522][ T4625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2398.137877][ T4632] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8220'. [ 2398.865040][ T8953] usb 2-1: USB disconnect, device number 114 [ 2399.259356][ T8953] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2399.304829][ T4653] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2399.425226][ T8953] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2399.449421][ T8953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2399.469397][ T8953] usb 2-1: config 0 descriptor?? [ 2399.503186][ T8953] cp210x 2-1:0.0: cp210x converter detected [ 2399.913914][ T8953] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2400.193431][ T8953] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2400.369322][ T8953] usb 2-1: USB disconnect, device number 115 [ 2400.393117][ T8953] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2400.401347][T21918] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 2400.441657][T28918] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 2400.502408][ T8953] cp210x 2-1:0.0: device disconnected [ 2400.622859][T28918] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2400.641036][T28918] usb 5-1: config 250 has an invalid interface number: 126 but max is 0 [ 2400.660419][T21918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2400.672467][T21918] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2400.682137][T28918] usb 5-1: config 250 has no interface number 0 [ 2400.688523][T28918] usb 5-1: config 250 interface 126 has no altsetting 0 [ 2400.712740][T28918] usb 5-1: New USB device found, idVendor=10b9, idProduct=5001, bcdDevice=3c.05 [ 2400.727881][T28918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2400.736121][T21918] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2400.736153][T21918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2400.757479][T21918] usb 4-1: config 0 descriptor?? [ 2400.807081][T28918] usb 5-1: Product: syz [ 2400.812375][T28918] usb 5-1: Manufacturer: syz [ 2400.829842][T28918] usb 5-1: SerialNumber: syz [ 2401.032672][ T4678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8234'. [ 2401.061694][T28918] dvb-usb: found a 'Humax/Coex DVB-T USB Stick 2.0 High Speed' in warm state. [ 2401.109529][T28918] dvb-usb: bulk message failed: -22 (3/0) [ 2401.125400][T28918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2401.137461][T28918] dvbdev: DVB: registering new adapter (Humax/Coex DVB-T USB Stick 2.0 High Speed) [ 2401.152447][T28918] usb 5-1: media controller created [ 2401.195459][T28918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2401.215566][T28918] dvb-usb: bulk message failed: -22 (6/0) [ 2401.232091][T28918] dvb-usb: bulk message failed: -22 (6/0) [ 2401.238145][T28918] dvb-usb: no frontend was attached by 'Humax/Coex DVB-T USB Stick 2.0 High Speed' [ 2401.257511][T28918] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input120 [ 2401.282527][T28918] dvb-usb: schedule remote query interval to 150 msecs. [ 2401.289675][T28918] dvb-usb: Humax/Coex DVB-T USB Stick 2.0 High Speed successfully initialized and connected. [ 2401.312409][T28918] usb 5-1: USB disconnect, device number 123 [ 2401.385883][T28918] dvb-usb: Humax/Coex DVB-T USB Stick 2.0 High Spe successfully deinitialized and disconnected. [ 2401.509736][ T5908] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2401.679477][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 2401.686927][ T5908] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 2401.695726][ T5908] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2401.707600][ T5908] usb 2-1: config 0 has no interface number 0 [ 2401.725307][ T5908] usb 2-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 2401.737621][T28918] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2401.776970][ T5908] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 2401.789863][ T5908] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 2401.801320][ T5908] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 49811, setting to 1024 [ 2401.812837][ T5908] usb 2-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 2401.825227][ T5908] usb 2-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 2401.838903][ T5908] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 2401.855022][ T4692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2401.881667][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2401.895251][ T5908] usb 2-1: config 0 descriptor?? [ 2401.902849][ T4689] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2401.911625][ T4689] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2401.945324][T28918] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2401.956916][T28918] usb 5-1: config 250 has an invalid interface number: 126 but max is 0 [ 2401.968179][ T5908] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2401.976089][T28918] usb 5-1: config 250 has no interface number 0 [ 2401.985877][T28918] usb 5-1: config 250 interface 126 has no altsetting 0 [ 2402.002943][T28918] usb 5-1: New USB device found, idVendor=10b9, idProduct=5001, bcdDevice=3c.05 [ 2402.012689][T28918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2402.021310][T28918] usb 5-1: Product: syz [ 2402.026817][T28918] usb 5-1: Manufacturer: syz [ 2402.057233][T28918] usb 5-1: SerialNumber: syz [ 2402.194134][T21918] usb 2-1: USB disconnect, device number 116 [ 2402.225020][ T4698] netlink: 'syz.2.8241': attribute type 1 has an invalid length. [ 2402.270666][ T4698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2402.348560][T28918] dvb-usb: found a 'Humax/Coex DVB-T USB Stick 2.0 High Speed' in warm state. [ 2402.385544][T28918] dvb-usb: bulk message failed: -22 (3/0) [ 2402.423414][T28918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2402.475765][T28918] dvbdev: DVB: registering new adapter (Humax/Coex DVB-T USB Stick 2.0 High Speed) [ 2402.616720][ T4702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8242'. [ 2402.684033][T28918] usb 5-1: media controller created [ 2402.732615][T28918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2402.764262][T28918] dvb-usb: bulk message failed: -22 (6/0) [ 2402.770486][T28918] dvb-usb: bulk message failed: -22 (6/0) [ 2402.776865][T28918] dvb-usb: no frontend was attached by 'Humax/Coex DVB-T USB Stick 2.0 High Speed' [ 2402.795473][T28918] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input121 [ 2402.815284][T28918] dvb-usb: schedule remote query interval to 150 msecs. [ 2402.825155][T28918] dvb-usb: Humax/Coex DVB-T USB Stick 2.0 High Speed successfully initialized and connected. [ 2402.850959][T28918] usb 5-1: USB disconnect, device number 124 [ 2403.067755][T28918] dvb-usb: Humax/Coex DVB-T USB Stick 2.0 High Spe successfully deinitialized and disconnected. [ 2403.168302][ T4713] IPv6: sit1: Disabled Multicast RS [ 2403.209317][ T4715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8244'. [ 2403.234738][ T4715] netlink: 'syz.1.8244': attribute type 30 has an invalid length. [ 2403.319834][ T4721] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.8247'. [ 2403.479679][ T5908] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 2403.514560][T28918] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2403.641348][ T5908] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 2403.652501][ T5908] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 2403.664184][ T5908] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2403.671124][ T5908] usb 2-1: New USB device found, idVendor=0471, idProduct=2088, bcdDevice=c6.66 [ 2403.680667][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2403.692339][ T5908] usb 2-1: config 0 descriptor?? [ 2403.703194][T28918] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 34190, setting to 1024 [ 2403.708902][ T4715] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2403.751372][T28918] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2403.769316][T28918] usb 5-1: New USB device found, idVendor=0b05, idProduct=196b, bcdDevice= 0.40 [ 2403.780043][T28918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2403.783779][T21918] usb 4-1: USB disconnect, device number 11 [ 2403.788086][T28918] usb 5-1: Product: syz [ 2403.808619][T28918] usb 5-1: Manufacturer: syz [ 2403.814227][T28918] usb 5-1: SerialNumber: syz [ 2403.849736][ T4716] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2403.941391][ T5908] usb 2-1: string descriptor 0 read error: -71 [ 2404.046796][ T4728] ptrace attach of "./syz-executor exec"[28416] was attempted by ""[4728] [ 2404.064979][ T5908] usb 2-1: USB disconnect, device number 117 [ 2404.284591][ T4713] syz.4.8245: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2404.310170][ T4713] CPU: 0 UID: 0 PID: 4713 Comm: syz.4.8245 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 2404.310202][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2404.310216][ T4713] Call Trace: [ 2404.310226][ T4713] [ 2404.310235][ T4713] dump_stack_lvl+0x189/0x250 [ 2404.310291][ T4713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2404.310323][ T4713] ? __pfx__printk+0x10/0x10 [ 2404.310347][ T4713] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2404.310370][ T4713] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2404.310396][ T4713] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 2404.310423][ T4713] warn_alloc+0x214/0x310 [ 2404.310448][ T4713] ? stack_depot_save_flags+0x40/0x900 [ 2404.310482][ T4713] ? __pfx_warn_alloc+0x10/0x10 [ 2404.310509][ T4713] ? kasan_save_track+0x4f/0x80 [ 2404.310542][ T4713] ? xskq_create+0x56/0x170 [ 2404.310572][ T4713] ? xsk_init_queue+0xb0/0x110 [ 2404.310597][ T4713] ? xsk_setsockopt+0x43f/0x710 [ 2404.310623][ T4713] ? do_sock_setsockopt+0x257/0x3e0 [ 2404.310646][ T4713] ? __x64_sys_setsockopt+0x18b/0x220 [ 2404.310670][ T4713] ? do_syscall_64+0xfa/0x3b0 [ 2404.310688][ T4713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2404.310720][ T4713] __vmalloc_node_range_noprof+0x125/0x12f0 [ 2404.310779][ T4713] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2404.310809][ T4713] ? __kasan_kmalloc+0x93/0xb0 [ 2404.310834][ T4713] vmalloc_user_noprof+0xad/0xf0 [ 2404.310857][ T4713] ? xskq_create+0xbf/0x170 [ 2404.310887][ T4713] xskq_create+0xbf/0x170 [ 2404.310920][ T4713] xsk_init_queue+0xb0/0x110 [ 2404.310953][ T4713] xsk_setsockopt+0x43f/0x710 [ 2404.310985][ T4713] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2404.311009][ T4713] ? __lock_acquire+0xab9/0xd20 [ 2404.311059][ T4713] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2404.311085][ T4713] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2404.311115][ T4713] do_sock_setsockopt+0x257/0x3e0 [ 2404.311145][ T4713] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2404.311177][ T4713] ? __fget_files+0x2a/0x420 [ 2404.311211][ T4713] __x64_sys_setsockopt+0x18b/0x220 [ 2404.311245][ T4713] do_syscall_64+0xfa/0x3b0 [ 2404.311270][ T4713] ? lockdep_hardirqs_on+0x9c/0x150 [ 2404.311300][ T4713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2404.311320][ T4713] ? clear_bhb_loop+0x60/0xb0 [ 2404.311346][ T4713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2404.311366][ T4713] RIP: 0033:0x7fa6e638e929 [ 2404.311387][ T4713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2404.311406][ T4713] RSP: 002b:00007fa6e7260038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2404.311431][ T4713] RAX: ffffffffffffffda RBX: 00007fa6e65b5fa0 RCX: 00007fa6e638e929 [ 2404.311447][ T4713] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 2404.311461][ T4713] RBP: 00007fa6e6410b39 R08: 0000000000000004 R09: 0000000000000000 [ 2404.311476][ T4713] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2404.311490][ T4713] R13: 0000000000000000 R14: 00007fa6e65b5fa0 R15: 00007fa6e66dfa28 [ 2404.311525][ T4713] [ 2404.311561][ T4713] Mem-Info: [ 2404.695164][ T4713] active_anon:9527 inactive_anon:0 isolated_anon:0 [ 2404.695164][ T4713] active_file:20781 inactive_file:40814 isolated_file:0 [ 2404.695164][ T4713] unevictable:768 dirty:178 writeback:0 [ 2404.695164][ T4713] slab_reclaimable:8898 slab_unreclaimable:112384 [ 2404.695164][ T4713] mapped:33492 shmem:2413 pagetables:1735 [ 2404.695164][ T4713] sec_pagetables:0 bounce:0 [ 2404.695164][ T4713] kernel_misc_reclaimable:0 [ 2404.695164][ T4713] free:1285356 free_pcp:10530 free_cma:0 [ 2404.775859][ T4713] Node 0 active_anon:38508kB inactive_anon:0kB active_file:82904kB inactive_file:163052kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133988kB dirty:712kB writeback:0kB shmem:8116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13404kB pagetables:6796kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2404.820114][ T4713] Node 1 active_anon:0kB inactive_anon:0kB active_file:220kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:80kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2404.851789][ C0] vkms_vblank_simulate: vblank timer overrun [ 2404.874605][ T4713] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2404.903646][T21918] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2404.932908][ T4713] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 2405.013521][ T4713] Node 0 DMA32 free:1203804kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38844kB inactive_anon:0kB active_file:82904kB inactive_file:161220kB unevictable:1536kB writepending:796kB present:3129332kB managed:2561032kB mlocked:0kB bounce:0kB free_pcp:35216kB local_pcp:19536kB free_cma:0kB [ 2405.075434][T21918] usb 3-1: config 5 has an invalid interface number: 13 but max is 0 [ 2405.084525][T21918] usb 3-1: config 5 has no interface number 0 [ 2405.109386][ T4713] lowmem_reserve[]: 0 0 1 1 1 [ 2405.123733][ T4713] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 2405.160433][T21918] usb 3-1: New USB device found, idVendor=2040, idProduct=b980, bcdDevice=4b.77 [ 2405.170398][ T4713] lowmem_reserve[]: 0 0 0 0 0 [ 2405.261561][ T4752] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.8255'. [ 2405.271075][ T4752] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2405.319502][T21918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2405.319509][ T4713] Node 1 [ 2405.327831][ T4713] Normal free:3922496kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:220kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:5224kB local_pcp:0kB free_cma:0kB [ 2405.361416][ C0] vkms_vblank_simulate: vblank timer overrun [ 2405.449906][ T4713] lowmem_reserve[]: 0 0 0 0 0 [ 2405.455393][ T4713] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2405.468966][ T4713] Node 0 DMA32: 3453*4kB (UME) 811*8kB (UME) 351*16kB (UME) 844*32kB (UME) 427*64kB (UME) 246*128kB (UME) 158*256kB (UME) 152*512kB (UME) 82*1024kB (UME) 16*2048kB (UME) 206*4096kB (M) = 1190524kB [ 2405.489884][ C0] vkms_vblank_simulate: vblank timer overrun [ 2405.617213][ T4713] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 2405.706717][ T4713] Node 1 Normal: 174*4kB (UME) 9*8kB (UME) 48*16kB (UME) 198*32kB (UME) 106*64kB (UME) 36*128kB (UME) 23*256kB (UME) 14*512kB (UM) 7*1024kB (UME) 10*2048kB (UME) 943*4096kB (M) = 3922496kB [ 2405.745835][ T4713] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2405.873435][ T4713] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2405.978583][ T4713] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2405.996892][ T4713] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2406.046396][ T4713] 66105 total pagecache pages [ 2406.085782][ T4713] 0 pages in swap cache [ 2406.092591][ T4713] Free swap = 124996kB [ 2406.146242][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.154248][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.167820][ T4713] Total swap = 124996kB [ 2406.206564][ T4713] 2097051 pages RAM [ 2406.226290][ T4713] 0 pages HighMem/MovableOnly [ 2406.239680][ T4713] 424687 pages reserved [ 2406.244112][ T4713] 0 pages cma reserved [ 2406.296875][T28918] usbhid 5-1:1.0: can't add hid device: -71 [ 2406.307124][T28918] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 2406.397554][T28918] usb 5-1: USB disconnect, device number 125 [ 2407.372472][T21918] usb 3-1: string descriptor 0 read error: -71 [ 2407.382554][T21918] smsusb:smsusb_probe: board id=8, interface number 13 [ 2407.408420][T21918] usb 3-1: USB disconnect, device number 66 [ 2408.539520][ T3082] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2408.696609][ T3082] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2408.707513][ T3082] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2408.716744][T21918] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2408.733341][ T3082] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2408.761202][ T3082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2408.849433][T21918] usb 3-1: device descriptor read/64, error -71 [ 2408.864366][ T3082] usb 4-1: config 0 descriptor?? [ 2409.089412][T21918] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2409.115503][ T4772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8260'. [ 2409.219424][T21918] usb 3-1: device descriptor read/64, error -71 [ 2409.239603][ T3082] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2409.339927][T21918] usb usb3-port1: attempt power cycle [ 2409.401005][ T3082] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2409.414599][ T3082] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2409.434619][ T3082] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 2409.446176][ T3082] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2409.625574][ T3082] usb 2-1: config 0 descriptor?? [ 2409.699959][T21918] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2409.725862][T21918] usb 3-1: device descriptor read/8, error -71 [ 2409.989615][T21918] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2410.052564][T21918] usb 3-1: device descriptor read/8, error -71 [ 2410.213142][T21918] usb usb3-port1: unable to enumerate USB device [ 2410.568550][ T4815] tipc: Started in network mode [ 2410.585035][ T4815] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 2410.595583][ T4815] tipc: Enabled bearer , priority 10 [ 2410.608986][ T4815] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8273'. [ 2410.621588][ T4815] tipc: Resetting bearer [ 2410.671648][ T4815] tipc: Disabling bearer [ 2410.681477][ T4818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2411.076985][T28918] usb 4-1: USB disconnect, device number 12 [ 2411.099739][ T5908] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2411.151528][ T3082] usbhid 2-1:0.0: can't add hid device: -71 [ 2411.171355][ T3082] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2411.194576][ T3082] usb 2-1: USB disconnect, device number 118 [ 2411.291890][ T5908] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 2411.307160][ T5908] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 2411.328836][ T5908] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2411.347077][ T5908] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 2411.361246][ T5908] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2411.370406][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2411.509736][T28918] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2411.571304][ T3082] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2411.595602][ T5908] ath6kl: Failed to submit usb control message: -71 [ 2411.609849][ T5908] ath6kl: unable to send the bmi data to the device: -71 [ 2411.617557][ T5908] ath6kl: Unable to send get target info: -71 [ 2411.638373][ T5908] ath6kl: Failed to init ath6kl core: -71 [ 2411.658628][ T5908] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 2411.688262][T28918] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2411.709655][ T5908] usb 5-1: USB disconnect, device number 126 [ 2411.715924][T28918] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2411.745241][T28918] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2411.757006][T28918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2411.778504][ T4822] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2411.793370][T28918] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2411.793599][ T3082] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2411.842839][ T3082] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2411.859001][ T3082] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2411.888451][ T4832] block device autoloading is deprecated and will be removed. [ 2411.899611][ T3082] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2411.923108][ T4824] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2411.943198][ T3082] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2412.073043][ T4836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2412.111490][ T4836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2412.202928][ T3082] usb 4-1: USB disconnect, device number 13 [ 2413.218327][ T4864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8286'. [ 2414.266478][T28918] usb 2-1: USB disconnect, device number 119 [ 2414.375324][ T4872] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8288'. [ 2414.699724][T28918] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2414.877194][T28918] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2414.934999][T28918] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2414.959899][T28918] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2414.973911][T28918] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2414.985895][T28918] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2415.000729][T28918] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2415.010355][T28918] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2415.018398][T28918] usb 2-1: Product: syz [ 2415.023883][T28918] usb 2-1: Manufacturer: syz [ 2415.060924][T28918] cdc_wdm 2-1:1.0: skipping garbage [ 2415.090561][T28918] cdc_wdm 2-1:1.0: skipping garbage [ 2415.106452][T28918] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 2415.119512][T28918] cdc_wdm 2-1:1.0: Unknown control protocol [ 2415.624255][ T5924] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2415.653038][ T4904] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8297'. [ 2415.671576][ T4904] input: syz0 as /devices/virtual/input/input122 [ 2415.723091][ T4905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8289'. [ 2415.823984][ T5924] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2415.838776][ T5924] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2415.866360][ T5924] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2415.877383][T21918] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2415.907774][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2415.929417][ T4894] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2415.943229][ T5924] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2416.052726][T21918] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2416.090067][T21918] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2416.162454][T21918] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2416.238269][T21918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2416.274623][ T4910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2416.289469][ T4903] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2416.321769][T21918] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2416.346127][ T4910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2416.741534][T21918] usb 5-1: USB disconnect, device number 127 [ 2417.613099][T28918] usb 2-1: USB disconnect, device number 120 [ 2418.336253][ T4928] netlink: 'syz.2.8305': attribute type 4 has an invalid length. [ 2418.359919][ T4928] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8305'. [ 2418.431662][ T4928] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2418.573239][ T4936] binder: 4935:4936 ioctl 40046210 0 returned -14 [ 2418.664929][T28918] usb 4-1: USB disconnect, device number 14 [ 2419.971398][ T4966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8311'. [ 2420.937069][ T4973] bridge0: entered promiscuous mode [ 2421.143708][ T4973] bond0: entered promiscuous mode [ 2421.150954][ T4973] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 2421.158599][ T4973] Cannot create hsr debugfs directory [ 2421.164659][ T4973] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 2421.174990][ T4973] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 2421.185587][ T4973] hsr1: entered allmulticast mode [ 2421.195907][ T4973] bridge0: entered allmulticast mode [ 2421.206028][ T4973] bond0: entered allmulticast mode [ 2421.839353][ T5924] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2421.990949][ T5924] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2422.004219][ T5924] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2422.199733][ T5924] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2422.214744][ T4992] lo: entered promiscuous mode [ 2422.232559][ T4992] tunl0: entered promiscuous mode [ 2422.249851][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2422.286706][ T4992] gre0: entered promiscuous mode [ 2422.321208][ T4992] gretap0: entered promiscuous mode [ 2422.356373][ T4981] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2422.356493][ T4992] erspan0: entered promiscuous mode [ 2422.380627][ T4992] ip_vti0: entered promiscuous mode [ 2422.386912][ T4992] ip6_vti0: entered promiscuous mode [ 2422.398260][ T4992] sit0: entered promiscuous mode [ 2422.409257][ T4992] ip6tnl0: entered promiscuous mode [ 2422.415328][ T4992] ip6gre0: entered promiscuous mode [ 2422.424463][ T4992] ip6gretap0: entered promiscuous mode [ 2422.435782][ T4992] vcan0: entered promiscuous mode [ 2422.445691][ T4992] team0: entered promiscuous mode [ 2422.465826][ T4992] vlan2: entered promiscuous mode [ 2422.468539][ T5924] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2422.473747][ T4992] [ 2422.480498][ T4992] ====================================================== [ 2422.487544][ T4992] WARNING: possible circular locking dependency detected [ 2422.494568][ T4992] 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 Not tainted [ 2422.501695][ T4992] ------------------------------------------------------ [ 2422.508704][ T4992] syz.4.8321/4992 is trying to acquire lock: [ 2422.514686][ T4992] ffff8880352c4d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 2422.525149][ T4992] [ 2422.525149][ T4992] but task is already holding lock: [ 2422.532506][ T4992] ffff888058be8e00 (team->team_lock_key#17){+.+.}-{4:4}, at: team_change_rx_flags+0x38/0x220 [ 2422.542725][ T4992] [ 2422.542725][ T4992] which lock already depends on the new lock. [ 2422.542725][ T4992] [ 2422.553125][ T4992] [ 2422.553125][ T4992] the existing dependency chain (in reverse order) is: [ 2422.562133][ T4992] [ 2422.562133][ T4992] -> #1 (team->team_lock_key#17){+.+.}-{4:4}: [ 2422.570397][ T4992] lock_acquire+0x120/0x360 [ 2422.575422][ T4992] __mutex_lock+0x182/0xe80 [ 2422.580441][ T4992] team_device_event+0x182/0xa20 [ 2422.585901][ T4992] notifier_call_chain+0x1b3/0x3e0 [ 2422.591537][ T4992] dev_close_many+0x29c/0x410 [ 2422.596765][ T4992] vlan_device_event+0x1748/0x1d00 [ 2422.602418][ T4992] notifier_call_chain+0x1b3/0x3e0 [ 2422.608061][ T4992] __dev_notify_flags+0x18d/0x2e0 [ 2422.613627][ T4992] netif_change_flags+0xe8/0x1a0 [ 2422.619088][ T4992] do_setlink+0xc55/0x41c0 [ 2422.624036][ T4992] rtnl_newlink+0x160b/0x1c70 [ 2422.629228][ T4992] rtnetlink_rcv_msg+0x7cc/0xb70 [ 2422.634685][ T4992] netlink_rcv_skb+0x208/0x470 [ 2422.639975][ T4992] netlink_unicast+0x75b/0x8d0 [ 2422.645865][ T4992] netlink_sendmsg+0x805/0xb30 [ 2422.651151][ T4992] __sock_sendmsg+0x219/0x270 [ 2422.656350][ T4992] ____sys_sendmsg+0x505/0x830 [ 2422.661633][ T4992] ___sys_sendmsg+0x21f/0x2a0 [ 2422.666856][ T4992] __x64_sys_sendmsg+0x19b/0x260 [ 2422.672327][ T4992] do_syscall_64+0xfa/0x3b0 [ 2422.677537][ T4992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2422.683977][ T4992] [ 2422.683977][ T4992] -> #0 (&dev_instance_lock_key#20){+.+.}-{4:4}: [ 2422.692516][ T4992] validate_chain+0xb9b/0x2140 [ 2422.697934][ T4992] __lock_acquire+0xab9/0xd20 [ 2422.703143][ T4992] lock_acquire+0x120/0x360 [ 2422.708170][ T4992] __mutex_lock+0x182/0xe80 [ 2422.713212][ T4992] dev_set_promiscuity+0x10e/0x260 [ 2422.718852][ T4992] __dev_set_promiscuity+0x534/0x740 [ 2422.724668][ T4992] netif_set_promiscuity+0x50/0xe0 [ 2422.730309][ T4992] dev_set_promiscuity+0x126/0x260 [ 2422.735936][ T4992] team_change_rx_flags+0x123/0x220 [ 2422.741659][ T4992] __dev_set_promiscuity+0x534/0x740 [ 2422.747491][ T4992] __dev_change_flags+0x41b/0x6d0 [ 2422.753034][ T4992] netif_change_flags+0x88/0x1a0 [ 2422.758490][ T4992] do_setlink+0xc55/0x41c0 [ 2422.763426][ T4992] rtnl_newlink+0x149f/0x1c70 [ 2422.768622][ T4992] rtnetlink_rcv_msg+0x7cc/0xb70 [ 2422.774108][ T4992] netlink_rcv_skb+0x208/0x470 [ 2422.779417][ T4992] netlink_unicast+0x75b/0x8d0 [ 2422.784729][ T4992] netlink_sendmsg+0x805/0xb30 [ 2422.790021][ T4992] __sock_sendmsg+0x219/0x270 [ 2422.795227][ T4992] ____sys_sendmsg+0x505/0x830 [ 2422.800528][ T4992] ___sys_sendmsg+0x21f/0x2a0 [ 2422.805726][ T4992] __x64_sys_sendmsg+0x19b/0x260 [ 2422.811188][ T4992] do_syscall_64+0xfa/0x3b0 [ 2422.816307][ T4992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2422.822721][ T4992] [ 2422.822721][ T4992] other info that might help us debug this: [ 2422.822721][ T4992] [ 2422.832941][ T4992] Possible unsafe locking scenario: [ 2422.832941][ T4992] [ 2422.840385][ T4992] CPU0 CPU1 [ 2422.845749][ T4992] ---- ---- [ 2422.851124][ T4992] lock(team->team_lock_key#17); [ 2422.856178][ T4992] lock(&dev_instance_lock_key#20); [ 2422.864074][ T4992] lock(team->team_lock_key#17); [ 2422.871633][ T4992] lock(&dev_instance_lock_key#20); [ 2422.876923][ T4992] [ 2422.876923][ T4992] *** DEADLOCK *** [ 2422.876923][ T4992] [ 2422.885062][ T4992] 2 locks held by syz.4.8321/4992: [ 2422.890185][ T4992] #0: ffffffff8f510108 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 2422.899245][ T4992] #1: ffff888058be8e00 (team->team_lock_key#17){+.+.}-{4:4}, at: team_change_rx_flags+0x38/0x220 [ 2422.909904][ T4992] [ 2422.909904][ T4992] stack backtrace: [ 2422.915792][ T4992] CPU: 0 UID: 0 PID: 4992 Comm: syz.4.8321 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 2422.915809][ T4992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2422.915817][ T4992] Call Trace: [ 2422.915823][ T4992] [ 2422.915829][ T4992] dump_stack_lvl+0x189/0x250 [ 2422.915850][ T4992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2422.915868][ T4992] ? __pfx__printk+0x10/0x10 [ 2422.915881][ T4992] ? print_lock_name+0xde/0x100 [ 2422.915893][ T4992] print_circular_bug+0x2ee/0x310 [ 2422.915907][ T4992] check_noncircular+0x134/0x160 [ 2422.915920][ T4992] validate_chain+0xb9b/0x2140 [ 2422.915932][ T4992] ? console_unlock+0x214/0x270 [ 2422.915943][ T4992] ? __pfx_console_unlock+0x10/0x10 [ 2422.915955][ T4992] ? irq_work_queue+0xbc/0x140 [ 2422.915973][ T4992] __lock_acquire+0xab9/0xd20 [ 2422.915991][ T4992] ? dev_set_promiscuity+0x10e/0x260 [ 2422.916005][ T4992] lock_acquire+0x120/0x360 [ 2422.916021][ T4992] ? dev_set_promiscuity+0x10e/0x260 [ 2422.916038][ T4992] __mutex_lock+0x182/0xe80 [ 2422.916050][ T4992] ? dev_set_promiscuity+0x10e/0x260 [ 2422.916065][ T4992] ? dev_set_promiscuity+0x10e/0x260 [ 2422.916079][ T4992] ? __pfx___mutex_lock+0x10/0x10 [ 2422.916090][ T4992] ? netdev_info+0x10a/0x160 [ 2422.916105][ T4992] ? __pfx_netdev_info+0x10/0x10 [ 2422.916118][ T4992] ? trace_contention_end+0x39/0x120 [ 2422.916130][ T4992] ? __mutex_lock+0x330/0xe80 [ 2422.916142][ T4992] dev_set_promiscuity+0x10e/0x260 [ 2422.916157][ T4992] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 2422.916173][ T4992] __dev_set_promiscuity+0x534/0x740 [ 2422.916189][ T4992] netif_set_promiscuity+0x50/0xe0 [ 2422.916203][ T4992] dev_set_promiscuity+0x126/0x260 [ 2422.916218][ T4992] team_change_rx_flags+0x123/0x220 [ 2422.916237][ T4992] ? __pfx_team_change_rx_flags+0x10/0x10 [ 2422.916255][ T4992] __dev_set_promiscuity+0x534/0x740 [ 2422.916271][ T4992] __dev_change_flags+0x41b/0x6d0 [ 2422.916286][ T4992] ? __pfx___dev_change_flags+0x10/0x10 [ 2422.916300][ T4992] ? netif_state_change+0x29e/0x3a0 [ 2422.916311][ T4992] ? finish_task_switch+0x18b/0x950 [ 2422.916327][ T4992] ? __pfx_netif_state_change+0x10/0x10 [ 2422.916340][ T4992] netif_change_flags+0x88/0x1a0 [ 2422.916355][ T4992] do_setlink+0xc55/0x41c0 [ 2422.916371][ T4992] ? trace_sched_exit_tp+0x38/0x120 [ 2422.916388][ T4992] ? __pfx_do_setlink+0x10/0x10 [ 2422.916401][ T4992] ? __lock_acquire+0xab9/0xd20 [ 2422.916418][ T4992] ? do_raw_spin_lock+0x121/0x290 [ 2422.916433][ T4992] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2422.916450][ T4992] ? lockdep_hardirqs_on+0x9c/0x150 [ 2422.916467][ T4992] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2422.916483][ T4992] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2422.916500][ T4992] ? rcu_is_watching+0x15/0xb0 [ 2422.916519][ T4992] ? __mutex_lock+0xa6d/0xe80 [ 2422.916530][ T4992] ? __mutex_lock+0x51b/0xe80 [ 2422.916541][ T4992] ? rtnl_newlink+0x8db/0x1c70 [ 2422.916554][ T4992] ? __pfx___mutex_lock+0x10/0x10 [ 2422.916566][ T4992] ? ns_capable+0x8a/0xf0 [ 2422.916584][ T4992] ? rtnl_link_get_net_capable+0x16a/0x350 [ 2422.916599][ T4992] rtnl_newlink+0x149f/0x1c70 [ 2422.916611][ T4992] ? netlink_sendmsg+0x805/0xb30 [ 2422.916627][ T4992] ? __pfx_rtnl_newlink+0x10/0x10 [ 2422.916645][ T4992] ? kasan_quarantine_put+0xdd/0x220 [ 2422.916662][ T4992] ? lockdep_hardirqs_on+0x9c/0x150 [ 2422.916680][ T4992] ? nlmon_xmit+0xb0/0x100 [ 2422.916697][ T4992] ? kmem_cache_free+0x18f/0x400 [ 2422.916710][ T4992] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2422.916728][ T4992] ? lockdep_hardirqs_on+0x9c/0x150 [ 2422.916745][ T4992] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2422.916761][ T4992] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2422.916779][ T4992] ? __dev_queue_xmit+0x27e/0x3a70 [ 2422.916803][ T4992] ? __lock_acquire+0xab9/0xd20 [ 2422.916824][ T4992] ? __pfx_rtnl_newlink+0x10/0x10 [ 2422.916836][ T4992] rtnetlink_rcv_msg+0x7cc/0xb70 [ 2422.916849][ T4992] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2422.916861][ T4992] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2422.916872][ T4992] ? ref_tracker_free+0x63a/0x7d0 [ 2422.916888][ T4992] ? __copy_skb_header+0xa7/0x550 [ 2422.916904][ T4992] ? __pfx_ref_tracker_free+0x10/0x10 [ 2422.916922][ T4992] netlink_rcv_skb+0x208/0x470 [ 2422.916936][ T4992] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2422.916949][ T4992] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2422.916964][ T4992] ? netlink_deliver_tap+0x2e/0x1b0 [ 2422.916978][ T4992] ? netlink_deliver_tap+0x2e/0x1b0 [ 2422.916992][ T4992] netlink_unicast+0x75b/0x8d0 [ 2422.917006][ T4992] netlink_sendmsg+0x805/0xb30 [ 2422.917023][ T4992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2422.917038][ T4992] ? aa_sock_msg_perm+0x94/0x160 [ 2422.917053][ T4992] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2422.917068][ T4992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2422.917082][ T4992] __sock_sendmsg+0x219/0x270 [ 2422.917102][ T4992] ____sys_sendmsg+0x505/0x830 [ 2422.917118][ T4992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2422.917134][ T4992] ? import_iovec+0x74/0xa0 [ 2422.917147][ T4992] ___sys_sendmsg+0x21f/0x2a0 [ 2422.917162][ T4992] ? __pfx____sys_sendmsg+0x10/0x10 [ 2422.917184][ T4992] ? __fget_files+0x2a/0x420 [ 2422.917197][ T4992] ? __fget_files+0x3a0/0x420 [ 2422.917212][ T4992] __x64_sys_sendmsg+0x19b/0x260 [ 2422.917227][ T4992] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2422.917244][ T4992] ? rcu_is_watching+0x15/0xb0 [ 2422.917263][ T4992] ? do_syscall_64+0xbe/0x3b0 [ 2422.917275][ T4992] do_syscall_64+0xfa/0x3b0 [ 2422.917286][ T4992] ? lockdep_hardirqs_on+0x9c/0x150 [ 2422.917302][ T4992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2422.917314][ T4992] ? clear_bhb_loop+0x60/0xb0 [ 2422.917327][ T4992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2422.917339][ T4992] RIP: 0033:0x7fa6e638e929 [ 2422.917352][ T4992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2422.917364][ T4992] RSP: 002b:00007fa6e723f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2422.917377][ T4992] RAX: ffffffffffffffda RBX: 00007fa6e65b6080 RCX: 00007fa6e638e929 [ 2422.917387][ T4992] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 2422.917395][ T4992] RBP: 00007fa6e6410b39 R08: 0000000000000000 R09: 0000000000000000 [ 2422.917403][ T4992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2422.917410][ T4992] R13: 0000000000000000 R14: 00007fa6e65b6080 R15: 00007fa6e66dfa28 [ 2422.917422][ T4992] [ 2423.654391][ T4992] nlmon0: entered promiscuous mode [ 2423.665339][ T4992] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 2423.782923][ T4992] caif:caif_disconnect_client(): nothing to disconnect [ 2423.793990][ T4992] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 2423.804327][ T4992] chnl_net:chnl_net_open(): state disconnected [ 2423.810754][ T4992] caif0: entered promiscuous mode [ 2423.815968][ T4992] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2424.892180][ T5924] usb 4-1: USB disconnect, device number 15