last executing test programs: 11.18000225s ago: executing program 0 (id=1777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$cec(&(0x7f0000000480), 0x0, 0x80) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f00000004c0)=0x750) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r7, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x1, 0x0) r10 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) read$nci(r10, &(0x7f0000002780)=""/3, 0x3) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) request_key(&(0x7f0000001000)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='\xa7x{8\xb8\x81\xae$\xbb\x17\x90\xaa\x96\xd4\x9b\xd8\x87\x84\xca\xf6\x03;\xd2!?,J\r\x94EA\x11\xc2\n\xc4t\xad\xc4\xe7*<\x87\xb5H\xfb\xf6j\x12\xed\x8f\x9caU^\xffW\xa1\x06\xcc\xc0\xc5\t\x86\xf9\xa5\x15\x95&\x8eF\xf3\x94A\xaf\xddY\x84\xe0\xde\nh\x11{\x05\xa4pW\xca\xec\xc4\x9e\xc0/\xf3\xcb.\x19\xcfM\xe8\xc9\x9e\x97S', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', 0x0, 0x0, 0x0) 8.891988127s ago: executing program 0 (id=1786): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000180)={0x0, 0x6}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000001c0)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) r10 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r10, 0x2, &(0x7f00000000c0)={0x3}, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x2fb71da98128d4bd, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 7.406596615s ago: executing program 0 (id=1796): socket$rxrpc(0x21, 0x2, 0x2) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) (async, rerun: 64) r2 = socket(0x10, 0x3, 0xc) (rerun: 64) write(r2, &(0x7f0000000040)="effd00001000ff00fd4344c007110000", 0x10) (async) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x5f) (async, rerun: 64) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (rerun: 64) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) (async, rerun: 32) sendmmsg$inet(r1, &(0x7f0000000e40)=[{{&(0x7f0000000540)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000580)="bcbb1c80e7d1518e549b7b9711db875cdf44310e4f28e9c5c2b57257fd46ddb970c62a1a24154da2c7b4eb48a928e0000d396e5b16307ca49d02da6d091d2e469d7eec58fdf848b0ae187345a026d0b7ddb2f75271ec6ba32dbe92181294bff374b2db9bdad3a924d584f1be48a598a852528262b8e109addd8fe3a05f80cde2b6162d49d9fe2bef8d4a313729f8fa2446d6a6fe29e2ed88c9145399bfe8bc1439f1f0d4a01051693ed3d7ab4f6021c029240ef751683ae308c139848916e197eb1bfc9ef196b1adf68df83465700dc45238359c9a2d463a038c5b", 0xdb}, {&(0x7f0000000b40)="c4399b314f929c47d8a6603c14092314f7af2f09b7d7de08fecf2517363be509edde32d707afad39176650ad81db520f8781a815ff60d4a9c88786b30daad71088f9e894a2963b1a3e68acb5fb34a13f7a8e7a97cba7d1c6fa3d51f4cc82b3c77be3c794917490c2e389836899a8c815358bc8c8d6305dc34487864286bcdb13c53c38cf17b0540da74ce7d436a4bc9b2debd5ff0853187c9399d7b91a2333012c9fcaf0f55f9413a50165014b4eb252ca44dca72670110be9afe900e614c5b47f01a9fffd73842bbe8f2e73dbe899f59527319eaf1d33e09e6f1230d39e8ef65af2a48d4175b9fd2b4ebdb3cc688e48d2", 0xf1}, {&(0x7f0000000c40)="2c98e9fde8d53a07924caf1e9803001038cb56930a9728e58e9b70e97b8647ac304ceb22abaf06fdcc4e0c22e238f5f167242fb4246a8b8748f9d9a3dee006f22e010e744563f9042e252d2c863e217b7fb088406ab8f5ac2131fa811908cb412b498c75d532c9f2bb95d64058c1317d2f33d79dc7aeb7ef0aabe7470c778a6079ddf525babe2c274ad740a3f0f147e448bd02af52982202d997986370a5806add66d83dd26a02592c34ea9a549eb2ff192d68661e5b4ec201c44c130239d8394b0b8f11b7", 0xc5}, {&(0x7f0000000680)="6f556be09968c2c9ff236859bc97c75d45873b956b5db4a0526f5fefceeb4dc18cee7c59e80ad90d3a89f0dd0573f303ee1c43269fad4526eff956c2aa08dda0", 0x40}, {&(0x7f0000000d40)="5c2a89154f0e059715ed761f6c3ebc44a942dedaa70f61ad441cd3ac7c7f4d842dfeb5783780d05d3c8be983dda91baf2de30c5c04e8b88c69972d2bc40bd210ba3acafb03902097bf213cf0f23894963bf0d876571819ddcf7a6e45516d0c23bebbb43a1ad3c891651c356eddfcdeaacef088cbe8540d3bd56decc5ee2bf0b5d5263f4f920f27160c8c0b6bad039ce6c724990746441d66ca36d84c2fadb0a8215d583a2300188017a57f1ffd8ecd746529cf357ea7ebf363a3704f1a44b48cc7f7c9ce6aaedccd739a3bab9de8376aa16c613099f95de7ace143d94e19219b01d1a42ccc51a67c06", 0xe9}], 0x5}}], 0x1, 0x200000c4) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf2505000000480001800e0001006574683a766c022eb995"], 0xa8}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) (async) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x250, r5, 0x300, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe96}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffbb14}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xee1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'pimreg\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xdb53}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ab9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa3c3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc30c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xef}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x900}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1658}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xdd}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x44000}, 0x40891) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x0, 0x0, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'hsr0\x00', 'wg0\x00', {}, {}, 0x88, 0x0, 0x11}, 0x0, 0x1c0, 0x220, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x7, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@recent0={{0xf8}, {0x1, 0xd95, 0x1, 0x1, 'syz0\x00', 0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x4, 0x3, 0x1, 0x1, 0x5], 0x0, 0x3}, {0xfffe, [0x6, 0x0, 0x5, 0x2, 0x4], 0x5, 0x2}}}}, {{@ip={@broadcast, @loopback, 0xffffff00, 0xffffff00, 'gretap0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x3, 0x62}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x70bd21, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x8}]}}}]}, 0x48}}, 0x24004040) (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r8, &(0x7f0000002140)={0x2020}, 0x2020) 7.055473955s ago: executing program 0 (id=1797): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4000068, 0x40008010) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xf) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) writev(r6, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r8, r8, &(0x7f0000000040)=0x2eb4, 0x2000007ff) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x9, 0x7ffffffb}]}) setreuid(0x0, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_ts_info}) socket$inet6_udplite(0xa, 0x2, 0x88) 5.780943976s ago: executing program 3 (id=1806): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x8e001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x88, 0x8f, 0xdb, 0x8, 0x1604, 0x8001, 0x37a3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xe6, 0xef, 0xe4, 0x0, [], [{{0x9, 0x5, 0x5}}]}}]}}]}}, 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x64, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x7f, {0x9, 0x21, 0x7105, 0x16, 0x1, {0x22, 0x7ed}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x69, 0x10}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xa, 0x7, 0x3}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x80, 0x3, 0x3, 0x20, 0x6}, 0x32, &(0x7f0000000080)={0x5, 0xf, 0x32, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x9, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0xb932065401bb9ae, 0x8, 0x0, 0x10, 0xd}, @generic={0x1c, 0x10, 0x3, "781a74a93af65bef8f9f792349bb35f832a8af037a2d7bb9a2"}]}, 0x4, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x80c}}, {0xe6, &(0x7f0000000100)=@string={0xe6, 0x3, "6ea013192b8eca05f4a9ca7756ed034317a04f3ae2799982ffa4a7b8e955fa9cb667e71f4b4abf1d8d7f318fedcbab861cf6163f47438afacf82c4eb475cd61c0c7021aa039e2b27e3402df1a7d01f456ab2078e89112318ac4c59e9a91ea74226922978b8a3fa02149ff3e0411168c7db7fcce88b93c211d5ac83771fbb9eccb86f974615543dd7a82641c56d982db01acbfd7c469370e4c3b6616a0e68bef43a6815348f19bbb5b1e15568472d8d37034832237b44a580b0660cd190a2c1590293d7d3baf07df9dc378d4b1f0b09cf9e56851c7861775d54151636fcea95c78a738bd3"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1009}}]}) 4.866144637s ago: executing program 1 (id=1808): r0 = shmget$private(0x0, 0x14000, 0x1000, &(0x7f0000fe9000/0x14000)=nil) r1 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x2108, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000021200000", @ANYRES32, @ANYBLOB="62afe224188d1600b23e1132b6de88e12b8ea60126873f55510b5e3878504e5e0b621f6e0b01ea52af65e632547936d0dbc5ae97405a93229bcb3bf4a3583d8cf6e52f4de9dde6d4e4b2d284fcd8aa89e2511c412d392c6c88da4d1e182fdc17fd6d82af", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) add_key(&(0x7f0000000000)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="963e3a03cf", 0x5, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0xfffffffffffffffe, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x0) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000002c0)=""/242) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r3, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c114}, 0x4040084) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) close(r4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) 4.61149888s ago: executing program 1 (id=1809): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, 0x0) 4.277333596s ago: executing program 1 (id=1811): socket$inet_tcp(0x2, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x1a}}}}}}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) bpf$MAP_CREATE(0xd00000000000000, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x1000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) 4.189587842s ago: executing program 2 (id=1812): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB="080004000001", @ANYRES8=r2, @ANYRESHEX=r2, @ANYRESDEC=r0], 0x4c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xfff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x2, 0x7, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) fanotify_init(0x200, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r3, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0x3, "cbe0"}, @global=@item_012={0x1, 0x1, 0x6, "e5"}]}}, 0x0}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300", @ANYRES32=0xffffffffffffffff], 0x68}}, 0x0) (async) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f0000000780)={0x81, "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"}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000004) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) set_mempolicy_home_node(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r7, @ANYRES64=r4, @ANYBLOB="ed"], 0x20) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 3.445949078s ago: executing program 2 (id=1813): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000180)={0x0, 0x6}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000001c0)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) r10 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r10, 0x2, &(0x7f00000000c0)={0x3}, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x2fb71da98128d4bd, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3.304154485s ago: executing program 4 (id=1814): r0 = socket$inet6(0xa, 0x3, 0x26) process_madvise(0xffffffffffffffff, &(0x7f0000000b00)=[{0xffffffffffffffff}], 0x1, 0x13, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) 3.117000289s ago: executing program 0 (id=1815): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) (async) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) (async) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) (async) munmap(&(0x7f000025d000/0x2000)=nil, 0x2000) 2.719331066s ago: executing program 4 (id=1816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x81}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x44, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x7}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x55fd}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xd4}}, 0x2400c800) 2.615264337s ago: executing program 4 (id=1817): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) (async) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket(0x22, 0x2, 0x24) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) close(0xffffffffffffffff) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) (async) umount2(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) write$cgroup_devices(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="1e030800dd5c9801288563a20dad001406"], 0xffdd) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) listen(0xffffffffffffffff, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, 0x0, 0x0) (async) shutdown(r6, 0x1) (async) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0, r8}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000"], 0x0) 2.42911363s ago: executing program 3 (id=1818): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xa9, 0x0, 0x8, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@offload={0xc, 0x1c, {0x0, 0x1}}]}, 0xc4}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x60}}, [@migrate={0x9c, 0x11, [{@in6=@remote, @in6=@local, @in6=@empty, @in6=@empty, 0xff, 0x1, 0x0, 0x3500, 0xa, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) r2 = socket$key(0xf, 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xee00}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xee00}}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000280)=0x60, 0x4) (async) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000280)=0x60, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x100010, r3, 0x0) syz_io_uring_setup(0x7fb0, &(0x7f0000001080)={0x0, 0x600, 0xa3597b07696e67ae, 0x4, 0x8b, 0x0, r3}, &(0x7f0000001100)=0x0, &(0x7f0000000200)=0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc008, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x0) futex_waitv(&(0x7f0000000080)=[{0xe, &(0x7f0000000000)=0x37a6, 0x2}], 0x1, 0x0, 0x0, 0x0) (async) futex_waitv(&(0x7f0000000080)=[{0xe, &(0x7f0000000000)=0x37a6, 0x2}], 0x1, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x114, &(0x7f0000000080)=0x57b, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x3a, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780, 0x12345}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000000)={0x9, 0xc1b, 0x1000, 0xf183, 0x2, "f9af0c74910fdcea"}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r9) (async) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000000040)={0xf, {"a2e3ad214fc752f90b5e094f4bf70e0dd038e7ff7fc6e5539b1b4d078b089b3b0838721a0890e0878f0e1ac6e7049b3d6c959b4c9a240d9b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d075d0736cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911afe40db6ebe8cac64289fd3da232f1b5dbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146680400416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d483d4675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb53682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516ab68032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d95f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e08d4db9d76864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251aec29b32f8210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ac015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67784f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a700d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) r11 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x3234564e, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x3, 0x0, 0x0, 0x4}}) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4004, @fd_index=0x7, 0x8, 0x0, 0x0, 0x2, 0x1, {0x1, r12}}) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x13, 0x2, 0x2, 0x3, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e21}]}, 0x18}}, 0x20040840) (async) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x13, 0x2, 0x2, 0x3, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e21}]}, 0x18}}, 0x20040840) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r13, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r14, 0x0, 0x2, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r13, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r14, 0x0, 0x2, 0x4}}, 0x20) socket$nl_route(0x10, 0x3, 0x0) (async) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x18, 0x70, 0x1}, 0x18}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r13, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3f}}, r14}}, 0x48) 2.224118155s ago: executing program 3 (id=1819): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x169802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0xb0581000) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) utimensat(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{r3, r4/1000+10000}, {0x77359400}}, 0x100) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x60}}, 0x0) (rerun: 64) 2.085613149s ago: executing program 2 (id=1820): r0 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff52647103d0fffffffffcc67af228004500002000000000002f907800000000e0000001320088be000c907801000000"], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 2.029474225s ago: executing program 3 (id=1821): openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x40, 0x0) r0 = syz_open_dev$cec(&(0x7f0000001d80), 0x0, 0x48400) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000001dc0)={0x0, 0x0, 0x0, @raw}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xfffffff9, 0xa68d7c519ec00fe1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000ea59e277000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r1) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000180)="bf4ca2", 0x3, 0xfffffffffffffffe) 1.876068445s ago: executing program 0 (id=1822): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b"], 0x0) 1.806459301s ago: executing program 3 (id=1823): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xe677}]}}}]}, 0x4c}}, 0x20000010) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000001044104d7a0000000000010902240001000000000904000001030000000921070000002204000905810300"], 0x0) 1.698739887s ago: executing program 4 (id=1824): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYRES8=r0], 0x18}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw\x00') r2 = socket$inet(0x2b, 0x801, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000200)={r4, 0x10, "4f49e9fb0847c1d18785472a41010e3a"}, &(0x7f00000001c0)=0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000080)={0xf0002004}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r8, 0x1, 0xffffffff, 0x25dfdbfc, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x4000000) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x4000, 0x100000001, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback={0x1000000}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast2, 0x0, 0x0, 'dh\x00', 0x8}, 0x2c) read(r1, &(0x7f0000001b00)=""/194, 0xc2) 1.5762846s ago: executing program 2 (id=1825): socketpair$unix(0x1, 0x3, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d411000000000000002900000004000000", 0xfe60) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1, 0x0, 0xffffffffffffff0a}, 0x41) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="40000000070a01050000000000000000020000000c0006400000002000000001090001007e797a301000000008000b40000000040900020073587a32a4605ad804f4606e06b199ee3268752bf2b4098e2c18e1143ac079ef0c29057739f6ec3dcc12729d01637a8d9e7c8fae9303ce8d816a7ddb104d1f0676b2c0c03ff782fa38fc4ed072cf307d"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x40000) sendmsg$inet(r2, 0x0, 0x41) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB=' \x00'], 0x38}}, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) r6 = semget$private(0x0, 0x4000000009, 0x42a) semctl$GETVAL(r6, 0x0, 0xc, &(0x7f0000000040)=""/119) semop(r6, &(0x7f00000002c0)=[{0x0, 0x9b6a}, {0x4, 0x202}, {0x0, 0x8, 0x1000}, {0x0, 0xfff, 0x1000}], 0x4) semop(r6, 0x0, 0x0) semctl$GETNCNT(r6, 0x0, 0xe, 0x0) semctl$SEM_INFO(r6, 0x1, 0x13, &(0x7f00000002c0)=""/160) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = memfd_create(&(0x7f0000000200)='[\v\xdb\xb3\x94\x00\x00\x00\x00\x00\x00\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6\xe1\x9f\xe8\xf1\xb3\b\xe2q\xda\xd8\xb1\x82\x1eb;(\xb5\xe1nS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc6\xd7\x89\xf8a\xc3\xcf\xd3\xae\x80G\"\xbc(\x95\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xc1\f\xd0\x99E\xd7\xab\x86\x04\xd3\xb0\xa7V\x97^8T&\xd1o9\xe7\x02\xc7\f\xdd\xa8T\xa2,\x1b\xf3j\xa3\xb0\xa4\xd5r\x0e=\x992w\x7fa\xbdR\x9aT\x9d\x04:\xb8\xe3\xe4\xe5\x8e;9\x97\xf3|\xfe\x81\xd1\t\a\x8e\x99\xbe\x06?\x89\xc0D\xaa\xdeT\x1d\xf0PA\xf8\xad\xf4\xfb_\xf0\x10\xd8\xcb\xaf\x0eb5\xc3\x89\x17r\x00\x00\xc8\x00\x02f\x03\x1b\x15\x1d\x02\x94/\xcc\xd5\xbfNI\xc1\x9c\xa7X\x01|\x8e:\x83O\xc46\xb3s\xeb\xfb\x9d\x83\xdf\xec\xbfS\xa6\xd8\x03\x95\x9e\xf5\xba\x01W\xd7V\xa1\xf6D\xf8\xd1\xcf\xe8\b\x94l\x00\x00\x00\x00\x00\x00\x00\x00\x7f\'r\x17\xa1\xfe{\xe2\x8cd\x03\t\x10O\xdf\xcf\xc6\xc1\x94;\x84\xfe\x88\xdf\xe5\x83\xc7T@\xb1t\xf5\xeb\xbc\xe5}\x80\x9f\xe2\x15\xe8\x8fy\xfc\x0f\xb1\xc5\x1a\xa2\xdb\x99\x11`\xf0\xf2W/\xc2\xb5\x94\x11\x84\x98\xb1V\xb0l;\x8a_\xf4\x16([f/\xd4J\xd3\x03\xb3t\t*K\x83\xa0\x832\xea\xe6\f\x89\x15~{d\xd9\xc8\xebh\xcc\x82\f\xcc}\xb0\x03Q\x8f\xff&cS\x9f\xbb\xb6\xc8\xc2@#\xc0m\x83\x93a\xbd!\xcfO\xa9\xf05\x9f\xc1T\xac\x84q\x8f\xd8\x90[p\x15l%\xfb\xf1\x96ui_\x018+#\x1f\xd6\xb6\xf1\xed\xbb_\xec\x1b\x9bN\x04\xd1f\xa5\xb9m\x19_v\xb9\x0e\xbdP\x8d\x8c\x1c{\xd8\x90\x8f\xef\xea\r\xdb\xb1\xder\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8e\x8cX\x82:\xf8{\xed\xdajiF\x15\xa5u \xe7\xf9o\xc2 t\vM\xa8\x80z\xf7\b\xcb\\:\xd8C\xf8/\xcc\x1f\xa7\x02\x9e-\x83?R1@0\xb4\xfb;]\x9d\x01\"{\xd9\x9b\x12Pk^\x9fy\xba~\r\xbe\x1a\xa7\xa7k\xa8\xf4s>\xfcr\xa2,\xa9d\xbf\xb2\x97\xe1\x85\x88\x1a4\xe56\xaf=\x89\xe6\x13\xf0\xf5\xd7\f\xa1\b\xed=\x12-}N\xca%\x11\x0e\xb3\xba\xb2T\x9a.\xf4\xb2\xaej\xfaM\x1b`\xe3\x96i\xc4\xe9&\x00\x94X\xbd;w\xc6\x87\xff\x15n\xd9l\x10\x0e\aT1=\x03\x03\xd4t\xf1\xbf8\x8c\x83\x8f3\xf6\x93\xd1Z\xfd\xf5a\f\xf4\xb7J\x878\x12\x86G\xea\x9c\x02a', 0x1) write$binfmt_script(r7, &(0x7f0000000080)={'#! ', './file0', [{}]}, 0xc) 1.562797969s ago: executing program 4 (id=1826): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x6}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d00040000000000e5e97de789544e14cd3e01df2428983186c9c0c88621039b284c3ff45c52995560a99956bed40cf5a8c1dfd3db7e2378d5afd35f4c16827f55b3af4d07fce7fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af915600020000000000000003000000210000004900", 0xc}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00', {0x2}}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'team_slave_1\x00', 'vxcan1\x00', {0xff}, {}, 0x29, 0x3, 0x3}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffe, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRESDEC=r0], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @local, 0x10001}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000290000000400000073000000000000030000000000000000290000003e0000001000000000000000"], 0x30}, 0x4010) write$char_usb(r1, &(0x7f0000000000)="a90f", 0x2) 1.23708268s ago: executing program 1 (id=1827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x81}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x44, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x7}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x55fd}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xd4}}, 0x2400c800) 1.180603657s ago: executing program 1 (id=1828): r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) close_range(r0, r1, 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x38, r4, 0x1, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xa, 0x4, 0x8}]}]}, 0x38}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000003c0)={r6, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x10) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000340)={0x0, r7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x3, 0x4, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000040)=[0x0], 0x1, r8, r9, 0xa, 0xb, 0x1, 0xb, {0x7f, 0xe65, 0xa, 0x100, 0x0, 0x0, 0x101, 0x4, 0x800, 0x8, 0x8, 0x2000000, 0x3, 0x5, "0b00c8c3ff49989ea9553c2eb1b0617e06baba927c9e6567c0fccff30ab1e036"}}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r10, 0x6, 0x21, 0x0, 0x0) 1.136099577s ago: executing program 3 (id=1829): syz_clone3(&(0x7f0000000400)={0x2000180, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58) fsopen(&(0x7f0000000000)='udf\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = syz_open_dev$loop(0x0, 0x1054c3b7, 0x40801) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x40000007, &(0x7f0000006680)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) readv(r3, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close_range(r3, r3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x340, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a857000) statx(0xffffffffffffffff, 0x0, 0x6000, 0x4, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_usb_connect(0x5, 0x34, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x98, 0x63, 0x34, 0x10, 0x408, 0x4034, 0xddcd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x11, 0x0, 0x0, 0xe, 0x1, 0x1, 0x0, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x28, 0x3, 0x1, 0x18}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x2, 0xd, 0x27}]}]}}]}}]}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r6}) syz_emit_ethernet(0x28a, &(0x7f0000000800)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @generic={0x7, 0x6, "9bfa4c", 0x250, 0x29, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, {[@dstopts={0x1d, 0x40, '\x00', [@ra={0x5, 0x2, 0x9}, @enc_lim, @enc_lim={0x4, 0x1, 0xc0}, @generic={0xa, 0xfb, "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"}, @jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0x1}, @generic={0x0, 0xf3, "66f15f014fa2ed9bc70f2568f7f4e74dc43b8cf25161ce6de3b1a564d74588c74c4b3dbf8dd78823ce2517ba18482f1b6ad06769fdc4ef876c8d001cfb0a88a3f8251a9fb1b1a6a6a91b988adff065070b2058b4645b7bbd921dd26d043b8430a3fdf1e239c5490df179ab4d336a62a7c41a7281cd8674ea3f27b2da1da24adfb708420be0b9dbdd723c7f06a87c62db1af6755818a01ac8b2a0002b486fd12a2d9535d76a9570e4d82cf21c9cc83772f4c9a71f1e24ea5979d3eca713f9d01eb2cadcb5632c8f6ab0633ca1f2c5e9fcf0e42108e057bf54d62e012066f0226b0705b64a6c8069467b029ed7eb7c27cfce2682"}]}, @fragment={0x3d, 0x0, 0x0, 0x1, 0x0, 0x7, 0x3}], "5c253b95157767efba5ccc293d677baeaec06435872035db3ec0267bf69f6fcfe8565f7d8c71bc35c8d1a61eec708daf04412fe3da5d57a5"}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[], 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000007c0), 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.04415648s ago: executing program 1 (id=1830): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x52, 0x39, 0x53, 0x10, 0xe41, 0x5057, 0x6ad, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xed, 0x5, 0x0, 0xeb, 0x24, 0xe0}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x5ee, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xa0, 0xbe, 0xd5, 0x8, 0xbfd, 0x117, 0xbd89, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5dc, 0x1, 0x2, 0xfa, 0xa0, 0xbf, [{{0x9, 0x4, 0x6b, 0x8, 0x10, 0xce, 0xe9, 0xfd, 0x0, [], [{{0x9, 0x5, 0xf, 0x10, 0x20, 0x8, 0x3, 0xff, [@generic={0x69, 0x4, "52598ecb4cafdabb465525b7f49ba53599e6404f67e6bebb3db120fe96e07b158525d00a7a26659e48fc0f1a12391417cae40f97e5eb297e4629c667845831d53f1e79cf949608bc4dea2ae02f29c5254d4e374553583093d423ef8b137e64896b6da60bae947f"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x9}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x0, 0x80, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xf7, 0x3200}, @generic={0x30, 0xc, "6d8bc371abdf2c25c0acb5ad12299260c337489d53cec34bd70e884f2b47f04dda561c10aa43c1ca2ddf436fccfc"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x400, 0x4, 0x4, 0xa, [@generic={0xb7, 0x8, "50cc6db6f527d0fff19bdf40ab9684d22385b9821263286e53c9fc7cf47865a448327c93e7573cf61508dda2a61dcff3009b208e4cc3618ac1fa3d942d7a13d678c222365d61cf39a2313d706a9e58c68c9d2e8d07138be67cb85370bda11562020185e7295aa7fb279a6a4135fdd3b46afdb38abf46f304144ef6ca8a614d69699c3c047b1da1bb5b21a30d2244d7d08d85547aa686c4ed165df4f2b2ee1954b5eede0031b58f1d7102e6479af5979a596575a51a"}, @generic={0x59, 0x22, "54c31fd50a4b23a65851ec7ba34d74caed35bf43723722cbe5e0d646c93ffb36a2baaf5c8fd12bf8f03a4665547eb7fea3b7c0445a14967b908d4ca4d653544f36c3609c1ee3a9300304eae1555c792de08c62a3a81a06"}]}}, {{0x9, 0x5, 0x9a, 0x2, 0x20, 0x6, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x6}, @generic={0x2a, 0x1, "172cb1f37d7e8038d3c2a1facc36e39e122cfa52366099e100fdaf807705a1c1cfe07dfae2cf7c37"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x8, 0xfd, 0x5}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0xd5, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xc}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0xc, 0x9, 0x7b, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x2}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x0, 0x21, 0x6, [@generic={0xec, 0x3f, "132d6d46f2c716df4b421026f635d851631433339288185aaeacf9e4308baeb083160337034a36eb0f4e953260928b919f9a69dc2dc95839a6957fe34468ecb071fb7df00a848b0413ebfdda8e679a5ba603d7f22452cfa9f4df4cc76023492236bb9ede4ab62d2bda51b487da72c69ae8150a65b0979e319849d19361cc63fd60052a1670d538f33e975cfdecfced35591726a931b887d5d6b4273cc6b80df2457f652343654e8b00507a161f4748bbc0ca635615c2bb4de1cf9bc0cc4606e8bedfd434a7baa29e87299cf83ca053f89b318f5775724e24afdf6c6f9fbd9c7eb06fd7a84ec32b2edd8f"}, @generic={0x20, 0x11, "23f378acc268e8d43893d054a0e314ed46b8eb7c9e0a571361043ef1d782"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x32, 0x6, 0x5, [@generic={0x25, 0x21, "68741edc9454c21449f8d4d015c10c07044fef7233a46887afde63a944fd8f322652c7"}, @generic={0xbc, 0xa, "920e4f9da86cd8eca3141ec3c89df60c70c6ff316eede1849f6d49d7e05e54e2280b70f65282d80a6447e6ac2324d792065bded0a81e1c4b1e58cb132e3e95021e54ebb0addada57ed11c4625622183e11dea65094b07a47c444e8373e975025028e1af3174a7cefaf748580ff892bbd01c1bddce15ee5d9ac3359e9acd5c92992dfeb09eb406834f91e2a394bf78cf33be7973457e1eef6be60f9e6d660cc44a17eac3315fbfe344942bebe87ebcace85372950b402da36b267"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x10, 0x3, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa, 0x5}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x7f, 0x2, 0x1, [@generic={0xde, 0x10, "2f3ba4ce5ac4a192d0999f5fde830aee3225f7f1a11421c4eb26a7f426ab8d4c0e8523910181085fcbc0aa8ea72a49980138b9328e5d7f38967015d7654bffbdc267e4e48978336fb5f8366f2002c25ae4a321782653d3efe63ad43f75052f7aa902736d33073d021747c2e62fe3eb578b1ce81440c92533b59387b0cd04a2221ff23386bca713d90fdb97168dc0aa6d1812764b7cbcba160d1481595dfee48e0a286faf77d6b24482f93d311210ce57b5a08f87bf73f59e71f2fc09b03601ddfeb88d3d5754a3eb3f21e8f867768d4295e525970cb33926ddb5bee6"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x80}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xff, 0x5, 0x31, [@generic={0x4f, 0x4, "34c15f9b33be088a380a7359ea18a7b19184487f655b51855eb946ab770dc2a37bfbbfa0d7b6c616dd0aaf9fa553db898578b48351ef9d82272aaa093606270796a1dc72c69fa127b749566b09"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x8, 0x0, 0x2, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x5}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x0, 0x12, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x8}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x2, 0x7a, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x4}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x8, 0x8, 0x1}}]}}]}}]}}, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000001000010009081000000000000c040000", 0x58}], 0x1) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x20, 0x9, 0x2, "ccfc"}, 0x0, 0x0}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=@newlink={0x5c, 0x10, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x1000}}]}]}]}, 0x5c}}, 0x20048040) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000780)={@loopback, @multicast1, 0x0}, &(0x7f00000007c0)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000840)={0x0, @multicast1, @broadcast}, &(0x7f0000000880)=0xc) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'dvmrp0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000a40)={'tunl0\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x8, 0x8000, 0x7, 0x9, {{0x3d, 0x4, 0x3, 0x9, 0xf4, 0x65, 0x0, 0x3, 0x4, 0x0, @empty, @broadcast, {[@ssrr={0x89, 0x13, 0x71, [@rand_addr=0x64010101, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @lsrr={0x83, 0x27, 0x8d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @broadcast, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x1a, 0x3, 0x4, [{@broadcast, 0x200}, {@local, 0x7}, {@remote, 0x10}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x8}, {@broadcast, 0x3}]}, @lsrr={0x83, 0x7, 0x37, [@remote]}, @timestamp_addr={0x44, 0x1c, 0x7b, 0x1, 0x9, [{@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x7}, {@local, 0xa88}]}, @timestamp={0x44, 0xc, 0xb0, 0x0, 0x5, [0x1, 0x80000000]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x44, 0x26, 0x3, 0xe, [{@empty, 0x7}, {@local, 0xfffffff7}, {@remote, 0x9}, {@rand_addr=0x64010102, 0x9}, {@private=0xa010102, 0x9bf}, {@local, 0x12}, {@multicast2, 0xffffff81}, {@remote, 0xdf6c}]}, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000a80)={'syztnl2\x00', 0x0, 0x7, 0x10, 0xffff, 0x53, {{0x18, 0x4, 0x1, 0x5, 0x60, 0x65, 0x0, 0x5, 0x2f, 0x0, @multicast2, @rand_addr=0x64010100, {[@ssrr={0x89, 0x23, 0xa, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x26}, @remote, @multicast1]}, @timestamp={0x44, 0x8, 0xc8, 0x0, 0x7, [0x5]}, @timestamp={0x44, 0xc, 0x97, 0x0, 0x8, [0x6, 0x0]}, @ssrr={0x89, 0x13, 0xbb, [@private=0xa010102, @multicast2, @rand_addr=0x64010101, @private=0xa010100]}]}}}}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r12, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r15, {0x0, 0x3}, {}, {0x3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0xffffffffffffffff, 0xea, 0x100004}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r16 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r18 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r18, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r17, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x6], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000b80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x6e39ae0a37dba6ca}, 0xc, &(0x7f0000000b40)={&(0x7f0000000f00)=@newchain={0x1b7c, 0x64, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0x9}, {0xb, 0x3}, {0xf, 0x15}}, [@filter_kind_options=@f_matchall={{0xd}, {0x19f8, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xa}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_ACT={0x368, 0x2, [@m_vlan={0xbc, 0x4, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x80000000, 0x5, 0x0, 0x9}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xd07}]}, {0x64, 0x6, "f2bed14547930713b0a27e99a0edc7124776d1d4b63f5bb2ce68add52358e14f12a6fc400a05f8d8ca8def3976302b895793b6e1306e74759d9b71b420aa719e570519f9f0f2bed1771e49e41276a8af1eafb30b7bb0a53dc4ec629258e3084d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0x178, 0x1a, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xf, 0x10000000, 0x80, 0x2}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x80000000, 0x20000000, 0x8, 0x6}, 0x4ea}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x7, 0x16c, 0xa00}, 0x401}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x0, 0x2, 0x58000, 0x8}, 0x9}}]}, {0xd5, 0x6, "bd23eb732322f32611d87500b3b163781041af8dd296f0166f9892a074f5835248488b2772021555edae41c3026e6e2655e7b57f05976d354403764ba994a14e0add9ff3d86486ca5fb4de1c606969ad35be9e28a1e65493a8a78f18fccf4f771c073c2281958e998052a223683ec036ff6e4c89b33ca4279a5cc649bb9af7ac6d964e5d7f43ef6a0310f67af9a7318800f55cad93ef564f538925dbc19ba9073dd4737c4f888fe0a9cdee24990dc8757da0aa6ba2172746186631447f6951d9c823d32c53b0c342819f59f63a53be9cfc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0xf8, 0x15, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @local}]}, {0xae, 0x6, "53a481a21355cded8ebac272e0e01571c369b37cd80a8afc4b123aeff8a5b23b4e355b819e0f91eac9173fd08da0ee3a47e3949daea068e38abf88ed4c32c579144c70caefc718c104af7457aadfebe1b9559d188c1b97c1d9e3dbbee33ffe7b2ef7fbe6b4b5343ee60ac3e0e4feaa5ffe50635f74dff877efaebccee18ca296fde4eeadae0bc4c8d30ffba8f975d908d38ada3c6e220b885b68d9abe61faf03ee34bfd4b330530b6e5a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0x38, 0x6, 0x0, 0x0, {{0xf}, {0x4}, {0x7, 0x6, "77e8a2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x77f3ad44daab89a5}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x9}}, @TCA_MATCHALL_ACT={0x1664, 0x2, [@m_gact={0x1048, 0x1f, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8b99, 0x3, 0xffffffffffffffff, 0x8, 0x1}}]}, {0x1004, 0x6, "9fc2424e412781801a72842a5e532c2f4f155d67dc07d17874a5c78f69391f0bb2ca872f2a055c0c29e5834fee99a18ed8c42b6228eeb95ed7176202f857afc4d1169da8943f827f0ca091b391f90aef8ddbc8c766cac30b040d382596644150d27402890a0e69f5832815adfa243703b8dea67f07d570f9439ef3f35838cfcb2e2afa3cf65b5ce1e121b0c3fa8ea5a9030240651c506905ec0c5ccffc2bcef2b52e8bb89dc010bee3c4cde82f389b6d3e90d15450b0c5c8939e48cc66689d45e33a4e92e0910c379bce2dc5bbf1daeb38c67020f6de0756f1f81fb71b7eb57619dbf4fc941ec08de484539b56fc69f5e21bdc6cf8f1da09579e4a8f89c42c996fd0fe60cb1a5e6bcf2f67106c236eeeea65b6f8bd96c47091bb08bb0a9a4be000fd3e611bc0b4b50f1ef96c100c4d74d9a05842f29ce53d229ba8ec026b71ac19d4103e9d17e75e101266985d7af6be55bbdfb4e864cd236d47e874482fa8ab58716587505317f6d07d228596605408689379b2fd61b849e164e16a4a12b1539a79b7895bc6b9aff8bfcdebee3eec84006d100500d7405a8b402001265a0384a27bf1ef21eb32f6a8830940bda9d9dab67e029ab346b98598eb9757c36ca6be78c7ec3a2efb97e478978c7c8b3b1ccd98eea9a9f966c59af7087a69e0401a1a90f5db83b5884dc42a3213a1b81f0f4af40904386ca896e242a56c73cf92f77a5de592c40eed5825a15fc2318d74b02c94431594b0ed7a305970ad91e19b11a1909df5d315e3e332efb21a6aeebe8a19246554e716a48780cf6ee65ef4283d084cb61d28debfa6d5a66b2d2453a219f0f2877c2d0efbf25426e640dbdf90709581980a21dc69e5e795f27246c7755ff8c0b5d8418e21cb8b9c980d8cbfb56c07d2f0c3a4b75a6ee22e64b3d004eca18a17c6dbe078152490c75ac1c6439d03bd9b9d15a54582574cfa1df4b1fb314a905f6b4257bae5f63603e1a9a0a5fef9ac4fb8070ca81d3c3dadad98927cfb6f5e9c1e47f4109ef5db836b8ae5b45a064af8932aa0045548a6bca8cb75f885ea1d1dd15af8d31f8e39d086020fcc8711c4797fc1a2f87c6779a70f8e9bab6b00360a2f3ae275d3b5ebc3ea2b28992ab99467e2d6f626bc2415ff87356883bb864a6701bdebb11c39d52a0e6936e9a435a4f51961e906d7316c0423093c5b5d1e1f2328231519b8c9fd73f0fab6e9803b89c1f0e847486d67c1838ef6acff4e7f5bfa3790c7b8a0d977a39ead7ce1135560f6ff17f30242d6dbaa95041e990d2a45a72b32b5419d97907dd750b53b7698ba5e280579f8607435a22df31f40395c58797b52fe0a12a5c493e2913ce1a3dda202c4f292aad1dcc7b326673f01f907623fc86b056d61661da18f18e3a42e4e09d854a8a3bac94eed9b50577924a1df07b709982a7744afd4e7dcaaf2d0fb098d980ec07ce3051537bddac7c0b8a662c8427c1a75e9b20100653f675107522979fdf76a68de0db82d825067b763b5f85282108bcf5cec561c1d79f016a99dd5174043847374fee164073eaf2255f8ef2aadfa51cd929cba73117096d9cf52d87c04b6ed310271dd6a5d3521872a99acd0ccd6859835c29ec0323020d84811ef10f9f00ba6aa9bd3c929bd099b3b6b2d7ac54be62d988ac3a54990f4f946d61576fcc4541175e7723dfbaafba35855678a42da561474eab49b1be209d3afb1cfdef0849d2e68effa3bb6062859b2409c9d58da0681b3765d785fc0b227f56d01da52026c225fdb43958154601dcf45b866d0b43421b8de5a15485c179a17275f7aa4cdaedeadce91aaf1db8ea5241a8c69f8db667a61d93b1919667b6cbfb252b1814988c39225efaeaefed1e34c77b1c59845eb7a07d3e83c990d351c116a00f0e5adb19024a49313c5e9efe89b93bbf3e89a3b58920238b2eb0a4e7caa67bc68aa6f9c4949fa1662839f0c4244cf88e3ab3e996205b85da154885ebab1e42e14b2a2ccab555ad89d476799a493cf5b5611b7dbbcc2e470fed793f4f240701022932635ec05caf6c7c852cd4f5664f5399f1fda6eca3ee4e52df560e42494de287b2a229e81dbac3729128f08212f0cc916814b55ce42669dd964820a6c07a1929d6fce08c48951070e64de4b3420b2a80684b8aebff66cc16cd10a9b936700168ed52d2d812c14fc433b7b57d47480d9f6f7cbb8f05393258c82186f4901bd8e2eeb6d114c3ea1ef3f80a57c66c614927aec4ef624f843913ec6e176119a81891a41e8a54456c0838df1865abdf171b7fa7ed829d4d4787aef6fdcbfe4a5205301a9171e5da73af68cb2ca07220c30ffe4c4e486fc4afa7ba1eaf114956e4985da16a7776fbee6dff1bb40c170aa36b1253e712997ac76f617387d424169e69c9a962a50bba449773c86b54aea2f9bbd1ce4f4c789bf3e07375f2b9da12ee0f9f08c51dddfa7a9411b4f7d8b7ed164abfe00c358611f9cde684aead819104006b92127f6f0a20b905be200bd75998166dd839d6692872f9a98025d25224a97af6d5a962e953134686b687563f1faf242f1e5e9a21736c82fdf4c0f2b08a352715d932533a8ea8e4a2bb5dccab0e59f1568346c2187a9b600b0f2a89bea67a16695e70faed2688ec4e59ee4b1bcca00513e4f62a1849e6b09e0a48b9d811d6c1685a85c85f7667e69567d1501d9700e182f682379f899c1535c071f89b975beb1496d8776abecf9a87a73cd3d8b4634e1cbc590af4a58fa80ed27d7522c709a1c5ed6ce96cd2bbf3cdf062019d6fc5ccf37d5eebc52f35634818a0360b2a798452db92e3dc29f21c1a744a1706d2a128c3889ef57953d49fdca790a2f70ade5164ecbac18b239bde34502ee7ea7756652bd95ddeadb60a0e2234fd4402d86bc158d1270a231884ef8ed6652b48a178436ce47c8606c7a17625ecc4d9af7d0236d6d14846b7ec36ef2416e55305b156d68f2a9e8f4750e8768afadbf48d251773c84373d31abd9b1c5658f3eddbb9d10a7eb4d95cea53f29fb96f03a7819bce18f266b7ce4ce989bae455cfc5f1202f6620d51614dd88b8b0bec6fed5f0296fe3c049c796fb7998900d40284864fcd07389e9764ac6fef7d376f5ceadfd80cd04e22b36ad5050bdc8871738195439e28949a36ffa36a46a6aeacbcc504bef7505e784ef44c648de9e3e64c92266ce2a67d09113f2a88bd1bc3ab985836deb6afeca2df005e157c1d3ab90a3b7ad9a65e0a54bff444c5292fd41bc34530e78e1100e8e7e6988f24d8dd69d999bf6fc844d9f981daf9626f9086571803f3e36a1174c21f24a80815bc33b1db57cc6b5b7b216d306ce58b1aa1d63c2c466e409b1c27891aa0d896809fe34aaf6a35e254b854c0229ed0b9da7349c7c3b46027524c7d01817c2b00d9a795630c532b720bfed274100d941b96c87afb54880403647354f53384093767d6b7c0c93a9e44a2ac677171be00196e9a39f37c9d6eeef0349d1fad463714feb463d6530da6a9d95e0f9d8554ef747115bc2cfc1103b2b0b4ad3df7bcf709e8b0fc2cc1bd9f75cd1080c69bc8ede625e046eb06d54b9b2a94efea9088eb178165953779d6e47d12977bb1338f4bb710fc0a62915d67eb74c3bde02356c26f84650fdb3cdd1b2d435d48d6d7a4388ce5585a686c394b67070e719227bf9c98843037caf888701df5f74afdb277bae5511387acbc0bc7795072c9ed19491f1f48fee7d92aaaeee4a7eed9bc67057b393763c2321fef98bb9f69456730c5cf5808d260b019773e78ab891ac5cae2e8a5183c0661b1a64afc95796be7f87c8c5789880ae85084e41a70cd66fdde27fa18bfcf856580110defbcdf319eafa269d9ca3300c83259590bfe981febb47ceb763ef94b5310cb27628a68857a1a6a22870f1f5a19285c2305a913c2fe9e44958295f39d6c1a20c035730a141c400b7f876f26b4486f8c2519a36232874f3cf8da94b9d5f12159aff04e61ba2e1c09945793986d7ee327a00613095df4dfc6c009153311cca0419b127ea2d597ca2309c676c93fa6fa93a62e0d841783d2524759b448dcd0232f6726cde19929fe118c36028ccc92e836e46ed75bc789e15d0e484f1d1aab1e5b917cf6a8d6c1a300949f1114cc9bccdf5f61ff7863c64129273ee98f2a79b30d5ba98a204c3ae973eafd624beee1b87d12a678b7e79c53de07a6f960c4362fbec580369756809eb6be7bb7a21a34d0b6f462a7119f533c7f5c444d14fbc37d9281ac577b99a167df7dc51ed35c57a73c3e32615ddd9588ae85b94f891bafa12d608878fd09f583a87bfc594cb466a6b86562e2db7b85db4024ee21a91a31e6dd7a154d4082dfce8651f68ef79029ffc803884e5dff3f830b7d056d50c56a8fe6da51bac04655b0d7cfa8ba125fd3893fb66823fe68715fb7092fa6bcb4457b452fd0c2fd6fa80bbe69c9bf497f56a707ad7abe4893cdb94ac89d320dee5eef50215831953beadfa4cd92ae5ef956883a88d5d93f7ead66db8c7af86b7c39d51846676f710b8a85ddc2ac6e21592302232b50a0d41dfeb1a4583b11e9f8aaed80f6621942a401e572fd50a4e139efe11da36c6e1054be8619eff5df7ad53a24687293cced78d0180bd86417aec4143bbc0b2d35724164834f85950124350dfef239d4accd44d61214060f415a726b348548d055defbe71c7ec03bccdeb23578b4a7224213792a28441aee2122724c8b3fe978ae6d2c365cb9fc90efd94ba0f4262a8df1d3d819aaa5938c25c869edc7b3eb83647cbfe5994559659c577e79f449752a73371ba87ddf3f79565b0523d2a05ed233f485bee50498fd83943ba1af57f7fcdb7977b0d64da25c36a08bd185905634618f891bb0a0aee2c5bf2a9998244d0678afd649d170a10343371276cc7b4654ec87f4dedccd3676f44bf17d52694af9323afe1c0f3eda5bc8de7be0e0d1eecebde0cc865ff4bb4c6ebe8c584a7399991444d2f7be1bb90109ac16a21983ca710c2fb4b9f94049c1f3412877229665954d81ac2ad76d4de7e1ef06ee8b1098b18c936998b419bbff6f0690a12af9067f68ac5f9a9edbfa77dee61382eb6d164f33e266b6aa848868021ce5efdf0ceb40f4470e9316d97e1b644c31f3dd33598cebcf6961c72f5ee31640770b1b273b63816d72428d1542b3b250be253159ac5805eebcf6e9a2cd6122708deb014cb6ac13b5d4544536fa27f513bd3a69b2df465adab8fabc53530facfb0a1ab85fe111f5a8e439f2804868f42593b4d94e8c7004e1213601db9f48bff77d8dbcfb4c08525b2fff9c4596f6c074a1998400e40941c607b766d7dc0d68b63c6b31022a2064f9cbab2b2c8769ab67151492d34973d893f238d34b95b16d86e5ebba60ea3ae318b93a96bcedb8e24d642b9b4de706696b7f5ecf30a95ed1da99f36e8173b1f330944f0bb26a5fe1a9f571bfcd65748fbc6ae5b38ed0d9f1b42037ea5d01e23cabb27fc182e8a017c73120abea3a20b235ac92e29c6f803f995a30e5160805592fa57b76cd3fa03d88abab9163f891427d548ec14d500e91648537d9d97bef6b7f19e43a0490ef8394bd182aeac564193fec300d42c7ea0141b4b2619440d11a32f363a04fe079d716e8d1cea3e3468db48d7d7f4ce5e5c0739f87fe4f79ffa7208a9e154054f6a4c51b4f2e1ace7ffdd81a140335431a8afc1550f07cfcbf82b976dd05093312adf388c2fb87378bafed157c4cd90f4d29d601ad38dfd9c122afdcc4a8754ed8e97ffcb26601b4d6c1d7f69607cd33e104d4cab794e64619406787"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}, @m_mirred={0x214, 0x8, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x3, 0x20000002, 0x7, 0x4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x4f, 0x7, 0x4, 0x7f}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x873e4c7, 0x6, 0xffffffffffffffff, 0x0, 0xfc000000}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x4, 0x5, 0xe, 0x1f9}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x6, 0x2, 0x7, 0x5}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xfffffffc, 0x7, 0x79, 0x718e998e}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffff30, 0x4, 0x20000000, 0x3, 0x2c0000}, 0x1, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1000, 0xc8e6, 0x7, 0x8000, 0x8}, 0x2, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x10, 0x4, 0x5, 0x200}, 0x3, r15}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x200, 0x0, 0x5, 0x2, 0x8c73}, 0x1, r17}}]}, {0xa5, 0x6, "97e52f072e0c8b13ec3caac692c7d5d5fded1e15d46cb8300929636f3ab24d65f8d6010a5a89333dd7c3fede895a0351bbcd371a7787d80060da6767095e34533e708639190d7bf4d982c523380351565bbdf5222b2448157141462dfcf7751db112fce52f449a212d50649e3d50d1f6e04ab9ec298b7a25e436e7ea80464c1266fb4d17d9000025ddc422127fbf90fc4c254757704dd7bdc0cae3908b71225b83"}, {0xc}, {0xc, 0x8, {0xe1bbb568630a3413, 0x1}}}}, @m_xt={0x404, 0x3, 0x0, 0x0, {{0x7}, {0x31c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xba, 0x6, {0x6, 'mangle\x00', 0xfa, 0xb, "f842225c5a04ba7070a9209caa3d98d9f3fc6578898b33263a638d81dedb39abeef1e2c96d852fc2761c3f13858895426ed1082a9565f6d7c0d5d541c88b8d3b183519f0495b4497077c5a1cf31160570e9fa1e936bb065235f2e555e8a2fa18be7a7b5dc0caaae3bed6841c8c6a05843d7762796c48b35096adf224c67d3095484a0b6f346e393ea0b6307a6270bf0d"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x96, 0x6, {0xa, 'nat\x00', 0x7f, 0xb, "15b0fc4f738377df580f4d3fbf276b32057bd6d47e4459dcc216f7f99e7fca17598b2b434170ff9ff20556e9e0a9b4f9f34159747332ca7a70bd3bb54a2525d0e9ffac6ee168a32f0f510efe2e830417fd7733e2cf29db08c6111b42f13394ef68fad69de394bceac1476294"}}, @TCA_IPT_TARG={0xab, 0x6, {0x80, 'filter\x00', 0x2, 0x30c4, "b95f0a8777eef01803d87cb285db60d6c0abc40a7e7de1cbe540b18c317c8d9b85f20015e89c737c4a1b214a39fc3ff24ea8b4d2f3cdd8145c17af862caab72523529280b9bbc4a33161d6bdb446a0c6e8a6fa00b68f84f42f210664d21f0d0a4ebdc93d8f5b846794daf8970ec0e8713cf3a637e4a0d38c720a89563d57534884"}}, @TCA_IPT_TARG={0xea, 0x6, {0x0, 'filter\x00', 0x8, 0xfff, "5f3ba556b0cc26a927391d82aaadb8f641b38aa855927f6f622b2cf045ec056b5236f782b4f9191e1d9686b18a0b6d0a61fca19572a7a6c0775172f315516bd53e4e4ea30f08fcd4ba49d1840870be96bd0d109c276f106cc3b68813cabfd95f2366a28cd0e9de8850da6c3312476044ef6cc8ef9ae986fdc3ad869d7e8ca4754984a0516e2f98958825a395d3a47ea12df65dbdd0a9cf54d9e8a03f6270bf09391dbae3f514469e74c87d82cfef35804eb7f096c39e780f7425ab5315099cf9"}}]}, {0xc1, 0x6, "71352bde7dbbd58bd14c7fbc5c1f99eb1057659255d0b9ea787779f5310637afa91f2d4345dc2ac9f6bc2f6d2348d1b9b413132e5ea1e83831784187a3512b8d9baadd53d0050168e526b9d5ecf81631195ba857c14b63e871a42449b5b5a089444c732f81a74f0ba543b2d2cc32ca9b806075460f43394e6a55ec0eab23a3f533fac8524c249eaa9465ba80a88bded153fea3ad461e68b8343dd828f5b29b54ae34b62805cf16c23fcd1b9c80124252fc83a5e7a3d082168f149298d9"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x124, 0x2, [@TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0x60}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xf4, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xa}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfc}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x78c4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x800}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x44, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x23a}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8001}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe0f6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x400}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffff001}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3ff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}]}]}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0xffff}, @TCA_FLOWER_KEY_SCTP_DST={0x6}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0xa}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6d}}, @TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @TCA_CHAIN={0x8}]}, 0x1b7c}, 0x1, 0x0, 0x0, 0x8010}, 0x4040000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r2) 518.820565ms ago: executing program 2 (id=1831): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}, &(0x7f0000000040)='GPL\x00', 0x8, 0xff5, &(0x7f0000001840)=""/4085, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 289.912877ms ago: executing program 2 (id=1832): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000180)={0x0, 0x6}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000001c0)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r10, 0x2, &(0x7f00000000c0)={0x3}, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x2fb71da98128d4bd, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=1833): syz_usb_connect(0x4, 0x36, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x684000, 0x79) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) syz_usb_connect$cdc_ncm(0x6, 0xa4, &(0x7f0000000100)={{0x12, 0x1, 0x111, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x2, 0x1, 0xff, 0x40, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "d1"}, {0x5, 0x24, 0x0, 0x3e20}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xffff, 0x4}, {0x6, 0x24, 0x1a, 0x9, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0xff, 0x2, 0x2}, @country_functional={0xa, 0x24, 0x7, 0x7, 0x2, [0xffff, 0x8]}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x3f, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x3}, @country_functional={0x6, 0x24, 0x7, 0x1, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0xc, 0x4e}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x9, 0xaa}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x1, 0x5}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x9c, 0xe2, 0x7, 0x20, 0xfe}, 0x37, &(0x7f00000001c0)={0x5, 0xf, 0x37, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x8, 0x9e, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "49cf5c63937efaaf4aebc1f4dcdfcc9f"}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "20502cc7fe93743cadc5fa2e8991e291"}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x340a}}]}) kernel console output (not intermixed with test programs): ptor read/8, error -71 [ 426.323106][ T47] usb usb1-port1: unable to enumerate USB device [ 426.575105][ T5930] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 426.725041][ T5930] usb 3-1: Using ep0 maxpacket: 8 [ 426.922362][ T5930] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 426.978758][T11520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.987408][ T5930] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 427.095194][ T5930] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 427.109181][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.338605][ T5930] usbtmc 3-1:16.0: bulk endpoints not found [ 427.377918][T11520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.401536][ T47] usb 5-1: USB disconnect, device number 119 [ 427.555541][T11533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1494'. [ 427.613547][T11535] loop2: detected capacity change from 0 to 7 [ 427.646034][T11535] Dev loop2: unable to read RDB block 7 [ 427.654653][T11535] loop2: unable to read partition table [ 427.662302][T11535] loop2: partition table beyond EOD, truncated [ 427.673545][T11535] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 427.764710][ T5204] Dev loop2: unable to read RDB block 7 [ 427.778030][ T5204] loop2: unable to read partition table [ 427.790074][ T5204] loop2: partition table beyond EOD, truncated [ 428.304121][ T5204] Dev loop2: unable to read RDB block 7 [ 428.341227][ T5204] loop2: unable to read partition table [ 428.363590][ T5204] loop2: partition table beyond EOD, truncated [ 428.563001][T11556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.586855][ T5879] usb 2-1: USB disconnect, device number 4 [ 428.597090][T11555] bridge2: entered promiscuous mode [ 428.624205][T11556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.700414][T11556] syzkaller1: entered allmulticast mode [ 428.806353][T11561] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1504'. [ 429.224986][ T5930] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 429.623115][ T10] usb 3-1: USB disconnect, device number 121 [ 429.769215][ T5930] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 429.785375][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.804577][ T5930] usb 2-1: Product: syz [ 429.821029][ T5930] usb 2-1: Manufacturer: syz [ 429.833722][ T5930] usb 2-1: SerialNumber: syz [ 429.852255][ T5930] usb 2-1: config 0 descriptor?? [ 430.043396][T11580] netlink: 'syz.2.1509': attribute type 4 has an invalid length. [ 430.051689][T11580] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1509'. [ 430.070402][T11580] fuse: Unknown parameter 'obj_role' [ 430.100184][T11565] input: syz1 as /devices/virtual/input/input48 [ 430.167598][ T24] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 430.316013][ T24] usb 5-1: device descriptor read/64, error -71 [ 430.569652][ T24] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 430.705035][ T24] usb 5-1: device descriptor read/64, error -71 [ 430.815712][ T24] usb usb5-port1: attempt power cycle [ 431.026403][ T47] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 431.255149][ T24] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 431.546109][ T24] usb 5-1: device descriptor read/8, error -71 [ 431.574456][ T47] usb 3-1: config 0 has no interfaces? [ 431.595361][ T47] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 431.621682][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.738433][ T47] usb 3-1: Product: syz [ 431.742680][ T47] usb 3-1: Manufacturer: syz [ 431.751827][T11613] FAULT_INJECTION: forcing a failure. [ 431.751827][T11613] name failslab, interval 1, probability 0, space 0, times 0 [ 431.785193][T11613] CPU: 0 UID: 0 PID: 11613 Comm: syz.3.1518 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 431.785211][T11613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 431.785217][T11613] Call Trace: [ 431.785222][T11613] [ 431.785226][T11613] dump_stack_lvl+0x189/0x250 [ 431.785247][T11613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.785261][T11613] ? __pfx__printk+0x10/0x10 [ 431.785274][T11613] ? __pfx___might_resched+0x10/0x10 [ 431.785288][T11613] ? fs_reclaim_acquire+0x7d/0x100 [ 431.785304][T11613] should_fail_ex+0x414/0x560 [ 431.785322][T11613] should_failslab+0xa8/0x100 [ 431.785335][T11613] __kmalloc_noprof+0xcb/0x4f0 [ 431.785346][T11613] ? kfree+0x4d/0x440 [ 431.785355][T11613] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 431.785369][T11613] tomoyo_realpath_from_path+0xe3/0x5d0 [ 431.785381][T11613] ? tomoyo_domain+0xda/0x130 [ 431.785395][T11613] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 431.785409][T11613] tomoyo_path_number_perm+0x1e8/0x5a0 [ 431.785425][T11613] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 431.785447][T11613] ? __lock_acquire+0xaac/0xd20 [ 431.785470][T11613] ? __fget_files+0x2a/0x420 [ 431.785484][T11613] ? __fget_files+0x3a0/0x420 [ 431.785494][T11613] ? __fget_files+0x2a/0x420 [ 431.785507][T11613] security_file_ioctl+0xcb/0x2d0 [ 431.785523][T11613] __se_sys_ioctl+0x47/0x170 [ 431.785534][T11613] do_syscall_64+0xf6/0x210 [ 431.785545][T11613] ? clear_bhb_loop+0x45/0xa0 [ 431.785557][T11613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.785566][T11613] RIP: 0033:0x7f080c78e969 [ 431.785576][T11613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.785585][T11613] RSP: 002b:00007f080d6c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.785596][T11613] RAX: ffffffffffffffda RBX: 00007f080c9b5fa0 RCX: 00007f080c78e969 [ 431.785603][T11613] RDX: 0000200000000140 RSI: 0000000000008946 RDI: 0000000000000003 [ 431.785609][T11613] RBP: 00007f080d6c4090 R08: 0000000000000000 R09: 0000000000000000 [ 431.785615][T11613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.785621][T11613] R13: 0000000000000000 R14: 00007f080c9b5fa0 R15: 00007f080cadfa28 [ 431.785636][T11613] [ 431.785641][T11613] ERROR: Out of memory at tomoyo_realpath_from_path. [ 432.023043][ T24] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 432.030948][ T47] usb 3-1: SerialNumber: syz [ 432.049899][ T47] usb 3-1: config 0 descriptor?? [ 432.075763][ T24] usb 5-1: device descriptor read/8, error -71 [ 432.103047][T11615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1519'. [ 432.168819][ T5879] usb 2-1: USB disconnect, device number 5 [ 432.197968][ T24] usb usb5-port1: unable to enumerate USB device [ 432.411278][T11629] FAULT_INJECTION: forcing a failure. [ 432.411278][T11629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.631539][T11629] CPU: 1 UID: 0 PID: 11629 Comm: syz.0.1523 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 432.631565][T11629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 432.631575][T11629] Call Trace: [ 432.631582][T11629] [ 432.631588][T11629] dump_stack_lvl+0x189/0x250 [ 432.631613][T11629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.631631][T11629] ? __pfx__printk+0x10/0x10 [ 432.631652][T11629] should_fail_ex+0x414/0x560 [ 432.631676][T11629] _copy_to_user+0x31/0xb0 [ 432.631694][T11629] simple_read_from_buffer+0xe1/0x170 [ 432.631713][T11629] proc_fail_nth_read+0x1df/0x250 [ 432.631732][T11629] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 432.631751][T11629] ? rw_verify_area+0x258/0x650 [ 432.631764][T11629] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 432.631782][T11629] vfs_read+0x1fd/0x980 [ 432.631800][T11629] ? __pfx___mutex_lock+0x10/0x10 [ 432.631814][T11629] ? __pfx_vfs_read+0x10/0x10 [ 432.631828][T11629] ? __fget_files+0x2a/0x420 [ 432.631847][T11629] ? __fget_files+0x3a0/0x420 [ 432.631861][T11629] ? __fget_files+0x2a/0x420 [ 432.631892][T11629] ksys_read+0x145/0x250 [ 432.631905][T11629] ? rcu_is_watching+0x15/0xb0 [ 432.631924][T11629] ? __pfx_ksys_read+0x10/0x10 [ 432.631940][T11629] ? do_syscall_64+0xba/0x210 [ 432.631957][T11629] do_syscall_64+0xf6/0x210 [ 432.631973][T11629] ? clear_bhb_loop+0x45/0xa0 [ 432.631990][T11629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.632002][T11629] RIP: 0033:0x7f530e98d37c [ 432.632015][T11629] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 432.632027][T11629] RSP: 002b:00007f530f7b0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 432.632041][T11629] RAX: ffffffffffffffda RBX: 00007f530ebb5fa0 RCX: 00007f530e98d37c [ 432.632051][T11629] RDX: 000000000000000f RSI: 00007f530f7b00a0 RDI: 0000000000000004 [ 432.632059][T11629] RBP: 00007f530f7b0090 R08: 0000000000000000 R09: 000000000000001c [ 432.632068][T11629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.632075][T11629] R13: 0000000000000000 R14: 00007f530ebb5fa0 R15: 00007f530ecdfa28 [ 432.632096][T11629] [ 433.126428][T11638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.136331][T11638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.515260][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 433.695316][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 433.706745][ T24] usb 3-1: USB disconnect, device number 122 [ 433.713854][ T10] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 433.727735][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.736269][ T5930] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 433.746533][ T10] usb 2-1: Product: syz [ 433.750820][ T10] usb 2-1: Manufacturer: syz [ 433.772621][ T10] usb 2-1: SerialNumber: syz [ 433.783192][ T10] usb 2-1: config 0 descriptor?? [ 433.796404][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 434.130311][ T5930] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 434.145030][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.155935][ T5930] usb 5-1: Product: syz [ 434.160116][ T5930] usb 5-1: Manufacturer: syz [ 434.180126][ T5930] usb 5-1: SerialNumber: syz [ 434.232393][ T5930] usb 5-1: config 0 descriptor?? [ 434.328384][ T10] gspca_se401: Bayer format not supported! [ 434.517594][T11650] input: syz1 as /devices/virtual/input/input49 [ 434.544761][ T10] usb 2-1: USB disconnect, device number 6 [ 436.674823][ T5879] usb 5-1: USB disconnect, device number 124 [ 436.864975][ T30] kauditd_printk_skb: 119 callbacks suppressed [ 436.864992][ T30] audit: type=1326 audit(1745753355.859:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.4.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac518e969 code=0x7ffc0000 [ 436.928165][T11675] netlink: 'syz.2.1536': attribute type 3 has an invalid length. [ 436.936007][ T30] audit: type=1326 audit(1745753355.859:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.4.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac518e969 code=0x7ffc0000 [ 436.936049][ T30] audit: type=1326 audit(1745753355.859:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.4.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8ac518e969 code=0x7ffc0000 [ 436.990704][T11675] xt_socket: unknown flags 0x4 [ 437.255121][ T30] audit: type=1326 audit(1745753355.859:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.4.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac518e969 code=0x7ffc0000 [ 437.364592][ T30] audit: type=1326 audit(1745753355.859:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.4.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ac518e969 code=0x7ffc0000 [ 437.547623][ T30] audit: type=1326 audit(1745753355.859:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.4.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac518e969 code=0x7ffc0000 [ 437.719147][ T30] audit: type=1326 audit(1745753355.859:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.4.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8ac518e969 code=0x7ffc0000 [ 437.938842][ T30] audit: type=1326 audit(1745753355.859:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.4.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac518e969 code=0x7ffc0000 [ 438.214998][ T30] audit: type=1326 audit(1745753355.859:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.4.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f8ac518e969 code=0x7ffc0000 [ 438.272029][ T30] audit: type=1326 audit(1745753355.859:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.4.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac518e969 code=0x7ffc0000 [ 438.375094][ T5930] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 438.472502][T11710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.493148][T11710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.584982][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 438.661419][ T5930] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 438.688339][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.886311][ T5930] usb 2-1: config 0 descriptor?? [ 438.976561][ T5930] as10x_usb: device has been detected [ 438.993037][ T5930] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 439.150973][ T5930] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 439.236928][ T5930] as10x_usb: error during firmware upload part1 [ 439.256708][T11716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.276612][ T5930] Registered device nBox DVB-T Dongle [ 439.286269][ T5930] usb 2-1: USB disconnect, device number 7 [ 439.298237][T11716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.360673][ T5930] Unregistered device nBox DVB-T Dongle [ 439.367419][ T5930] as10x_usb: device has been disconnected [ 439.425170][ T5896] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 439.633463][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.649191][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 439.679176][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 439.701001][ T5896] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 439.728358][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.751019][ T5896] usb 5-1: config 0 descriptor?? [ 439.935742][T11722] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 439.962915][T11722] syz.3.1548 (11722): drop_caches: 0 [ 439.976104][ T5879] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 440.002987][T11714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.027134][T11714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.042664][ T5896] ath6kl: Failed to submit usb control message: -71 [ 440.059457][ T5896] ath6kl: unable to send the bmi data to the device: -71 [ 440.081187][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.087670][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.095872][ T5896] ath6kl: Unable to send get target info: -71 [ 440.112365][ T5896] ath6kl: Failed to init ath6kl core: -71 [ 440.123394][ T5896] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 440.151521][ T5896] usb 5-1: USB disconnect, device number 125 [ 440.173005][ T5879] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 440.192724][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.207741][ T5879] usb 1-1: Product: syz [ 440.212148][ T5879] usb 1-1: Manufacturer: syz [ 440.220675][ T5879] usb 1-1: SerialNumber: syz [ 440.238150][ T5879] usb 1-1: config 0 descriptor?? [ 440.456939][T11719] input: syz1 as /devices/virtual/input/input50 [ 441.673984][T11744] loop2: detected capacity change from 0 to 7 [ 441.756019][T11745] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.1552'. [ 441.775316][T11744] Dev loop2: unable to read RDB block 7 [ 441.795931][T11744] loop2: unable to read partition table [ 441.806365][T11746] tap0: tun_chr_ioctl cmd 1074025677 [ 441.811971][T11746] tap0: linktype set to 773 [ 441.829303][T11744] loop2: partition table beyond EOD, truncated [ 442.014230][T11744] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 442.260754][T11748] FAULT_INJECTION: forcing a failure. [ 442.260754][T11748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.335298][T11748] CPU: 1 UID: 0 PID: 11748 Comm: syz.1.1555 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 442.335326][T11748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 442.335337][T11748] Call Trace: [ 442.335346][T11748] [ 442.335355][T11748] dump_stack_lvl+0x189/0x250 [ 442.335394][T11748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.335419][T11748] ? __pfx__printk+0x10/0x10 [ 442.335448][T11748] should_fail_ex+0x414/0x560 [ 442.335479][T11748] _copy_to_user+0x31/0xb0 [ 442.335505][T11748] simple_read_from_buffer+0xe1/0x170 [ 442.335531][T11748] proc_fail_nth_read+0x1df/0x250 [ 442.335559][T11748] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 442.335584][T11748] ? rw_verify_area+0x258/0x650 [ 442.335602][T11748] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 442.335627][T11748] vfs_read+0x1fd/0x980 [ 442.335650][T11748] ? __pfx___mutex_lock+0x10/0x10 [ 442.335671][T11748] ? __pfx_vfs_read+0x10/0x10 [ 442.335698][T11748] ? __fget_files+0x2a/0x420 [ 442.335723][T11748] ? __fget_files+0x3a0/0x420 [ 442.335742][T11748] ? __fget_files+0x2a/0x420 [ 442.335768][T11748] ksys_read+0x145/0x250 [ 442.335784][T11748] ? rcu_is_watching+0x15/0xb0 [ 442.335806][T11748] ? __pfx_ksys_read+0x10/0x10 [ 442.335831][T11748] ? do_syscall_64+0xba/0x210 [ 442.335851][T11748] do_syscall_64+0xf6/0x210 [ 442.335873][T11748] ? clear_bhb_loop+0x45/0xa0 [ 442.335902][T11748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.335918][T11748] RIP: 0033:0x7f5f1a58d37c [ 442.335935][T11748] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 442.335950][T11748] RSP: 002b:00007f5f1b456030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 442.335970][T11748] RAX: ffffffffffffffda RBX: 00007f5f1a7b5fa0 RCX: 00007f5f1a58d37c [ 442.335984][T11748] RDX: 000000000000000f RSI: 00007f5f1b4560a0 RDI: 0000000000000004 [ 442.335995][T11748] RBP: 00007f5f1b456090 R08: 0000000000000000 R09: 0000000000000000 [ 442.336007][T11748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.336017][T11748] R13: 0000000000000000 R14: 00007f5f1a7b5fa0 R15: 00007f5f1a8dfa28 [ 442.336046][T11748] [ 442.984840][ T24] usb 1-1: USB disconnect, device number 26 [ 443.385020][ T5878] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 443.563151][ T5878] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 443.577881][ T5878] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 443.586646][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.698554][ T5878] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 443.708239][ T5878] usb 2-1: config 0 has no interface number 0 [ 443.714588][ T5878] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 443.737663][ T5878] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 443.748352][ T5878] usb 2-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 443.761784][ T5878] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 443.782436][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.803320][ T5878] usb 2-1: config 0 descriptor?? [ 443.818173][ T5878] gspca_main: spca561-2.14.0 probing abcd:cdee [ 443.835380][ T5879] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 444.075394][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 444.089178][ T5879] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 444.109010][ T5879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 444.121427][ T5879] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1568, setting to 1024 [ 444.156107][T11785] trusted_key: encrypted_key: insufficient parameters specified [ 444.165938][T11784] trusted_key: encrypted_key: insufficient parameters specified [ 444.177305][ T5879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 444.188126][ T5879] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 444.201723][ T5879] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 444.211590][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.337735][ T5878] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 444.407248][ T5878] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 444.414308][ T5878] usb 2-1: MIDIStreaming interface descriptor not found [ 444.542311][ T5879] usb 3-1: GET_CAPABILITIES returned 0 [ 444.565602][ T47] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 444.591623][ T5879] usbtmc 3-1:16.0: can't read capabilities [ 444.655020][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 444.735705][ T47] usb 5-1: device descriptor read/64, error -71 [ 444.828922][ T24] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 444.840020][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.849290][ T24] usb 1-1: Product: syz [ 444.853741][ T24] usb 1-1: Manufacturer: syz [ 444.859650][ T24] usb 1-1: SerialNumber: syz [ 444.869227][ T24] usb 1-1: config 0 descriptor?? [ 444.996745][ T47] usb 5-1: new full-speed USB device number 127 using dummy_hcd [ 445.031413][T11803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.043389][T11803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.053964][T11803] usb usb8: usbfs: process 11803 (syz.3.1571) did not claim interface 0 before use [ 445.079868][T11804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.096658][T11804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.124371][T11790] input: syz1 as /devices/virtual/input/input51 [ 445.155124][ T47] usb 5-1: device descriptor read/64, error -71 [ 445.228942][T11763] @ÿ: renamed from bond_slave_0 [ 445.275676][ T47] usb usb5-port1: attempt power cycle [ 445.779293][ T47] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 445.805686][ T47] usb 5-1: device descriptor read/8, error -71 [ 446.075038][ T47] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 446.097627][ T47] usb 5-1: device descriptor read/8, error -71 [ 446.225653][ T47] usb usb5-port1: unable to enumerate USB device [ 446.576945][ T47] usb 3-1: USB disconnect, device number 123 [ 446.841764][T11818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1576'. [ 446.935628][ T5878] usb 2-1: USB disconnect, device number 8 [ 447.093513][T11827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.109021][T11827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.355583][ T5878] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 447.473299][T11831] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 447.480018][T11831] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 447.490262][T11831] vhci_hcd vhci_hcd.0: Device attached [ 447.509857][ T978] usb 1-1: USB disconnect, device number 27 [ 447.515172][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 447.540677][ T5878] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 447.577541][ T5878] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 447.601738][ T5878] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 447.629644][ T5878] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 447.642993][ T5878] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 447.656471][ T5878] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 447.664131][ T5878] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 447.676333][ T5878] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 447.685759][ T47] vhci_hcd: vhci_device speed not set [ 447.703526][ T5878] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 447.726544][ T5878] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 447.732556][T11840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.752750][ T5878] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 447.753238][T11840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.771400][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 447.779908][ T47] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 447.791725][ T5878] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 447.806280][ T5878] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 447.819173][ T5878] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 447.830606][ T5878] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 447.848707][ T5878] usb 2-1: string descriptor 0 read error: -22 [ 447.867991][T11843] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 447.896302][ T5879] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 448.205063][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 448.245156][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 448.255116][ T5878] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 448.265832][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.269166][ T5879] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 448.294411][ T24] usb 5-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 448.308786][ T5879] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 448.319462][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 448.326401][ T5878] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 448.346864][ T5879] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 448.359651][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 448.374930][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.390103][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.407926][ T24] usb 5-1: Product: syz [ 448.415220][ T5879] usb 3-1: Product: syz [ 448.495924][ T24] usb 5-1: Manufacturer: syz [ 448.500571][ T24] usb 5-1: SerialNumber: syz [ 448.505543][ T5879] usb 3-1: Manufacturer: syz [ 448.510168][ T5879] usb 3-1: SerialNumber: syz [ 448.518137][ T24] usb 5-1: config 0 descriptor?? [ 448.640419][T11846] fuse: Unknown parameter 'grou¿ì«00000000000000000000' [ 448.740599][ T5879] usb 3-1: 0:2 : does not exist [ 448.751718][ T5879] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 448.785854][ T5878] usb 5-1: USB disconnect, device number 4 [ 448.807872][T11832] usb 41-1: recv xbuf, -104 [ 448.839842][ T36] vhci_hcd: stop threads [ 448.852685][ T36] vhci_hcd: release socket [ 448.889116][ T36] vhci_hcd: disconnect device [ 448.905157][ T47] vhci_hcd: vhci_device speed not set [ 448.940393][ T5879] usb 3-1: USB disconnect, device number 124 [ 450.085818][ T24] usb 2-1: USB disconnect, device number 9 [ 450.376180][ T5878] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 450.660341][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 450.675446][ T5878] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.687637][ T5878] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 450.842473][ T5878] usb 1-1: config 0 interface 0 has no altsetting 0 [ 450.875003][ T5878] usb 1-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 450.920266][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.947919][ T5878] usb 1-1: config 0 descriptor?? [ 451.296863][T11878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.328562][T11878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.367961][T11871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.374288][T11878] input: syz1 as /devices/virtual/input/input52 [ 451.385384][T11871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.469317][ T5878] vrc2 0003:07C0:1125.001F: fixing up VRC-2 report descriptor [ 451.502501][ T5878] input: HID 07c0:1125 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:07C0:1125.001F/input/input53 [ 451.615127][ T5878] vrc2 0003:07C0:1125.001F: input,hidraw0: USB HID v0.00 Joystick [HID 07c0:1125] on usb-dummy_hcd.0-1/input0 [ 451.662324][ T24] usb 1-1: USB disconnect, device number 28 [ 451.935083][ T5878] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 452.097361][ T5878] usb 2-1: config 0 has no interfaces? [ 452.105964][ T5878] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 452.115674][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.123721][ T5878] usb 2-1: Product: syz [ 452.129860][ T5878] usb 2-1: Manufacturer: syz [ 452.134522][ T5878] usb 2-1: SerialNumber: syz [ 452.142296][ T5878] usb 2-1: config 0 descriptor?? [ 452.317629][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 452.317645][ T30] audit: type=1326 audit(1745753371.319:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530e98e969 code=0x7ffc0000 [ 452.449706][ T30] audit: type=1326 audit(1745753371.419:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f530e98e969 code=0x7ffc0000 [ 452.703233][T11918] loop2: detected capacity change from 0 to 7 [ 452.706458][ T30] audit: type=1326 audit(1745753371.419:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530e98e969 code=0x7ffc0000 [ 452.809065][ T30] audit: type=1326 audit(1745753371.419:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530e98e969 code=0x7ffc0000 [ 452.868356][T11918] Dev loop2: unable to read RDB block 7 [ 452.909332][T11918] loop2: unable to read partition table [ 452.982402][T11918] loop2: partition table beyond EOD, truncated [ 453.025969][ T30] audit: type=1326 audit(1745753371.439:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f530e98e969 code=0x7ffc0000 [ 453.055772][T11925] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1603'. [ 453.058961][T11918] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 453.108560][ T30] audit: type=1326 audit(1745753371.439:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530e98e969 code=0x7ffc0000 [ 453.228617][ T30] audit: type=1326 audit(1745753371.439:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530e98e969 code=0x7ffc0000 [ 453.457588][ T30] audit: type=1326 audit(1745753371.439:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f530e98e969 code=0x7ffc0000 [ 453.671244][ T30] audit: type=1326 audit(1745753371.439:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f530e98e9a3 code=0x7ffc0000 [ 453.743797][T11933] af_packet: tpacket_rcv: packet too big, clamped from 510 to 4294967286. macoff=82 [ 453.805202][ T24] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 453.892875][ T30] audit: type=1326 audit(1745753371.449:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530e98e969 code=0x7ffc0000 [ 453.893825][T11923] syz.3.1603 (11923): drop_caches: 2 [ 453.975277][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 453.985442][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 453.994663][ T24] usb 1-1: config 8 has an invalid interface number: 24 but max is 1 [ 454.002919][ T24] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 454.048923][ T24] usb 1-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 454.081566][ T24] usb 1-1: config 8 has no interface number 0 [ 454.127378][ T24] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 454.205106][ T47] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 454.258047][ T24] usb 1-1: config 8 interface 24 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 454.310598][ T24] usb 1-1: config 8 interface 24 has no altsetting 0 [ 454.344969][ T47] usb 5-1: device descriptor read/64, error -71 [ 454.693123][ T24] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 454.715729][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.731708][ T24] usb 1-1: Product: syz [ 454.751699][ T24] usb 1-1: Manufacturer: syz [ 454.762021][ T24] usb 1-1: SerialNumber: syz [ 454.819567][ T47] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 454.985056][ T47] usb 5-1: device descriptor read/64, error -71 [ 455.017046][T11929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.030547][T11929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.144684][ T47] usb usb5-port1: attempt power cycle [ 455.342915][ T5879] usb 2-1: USB disconnect, device number 10 [ 455.515063][ T47] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 455.535974][ T47] usb 5-1: device descriptor read/8, error -71 [ 455.865092][ T47] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 455.898635][ T47] usb 5-1: device descriptor read/8, error -71 [ 456.075609][ T47] usb usb5-port1: unable to enumerate USB device [ 456.115265][ T978] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 456.279289][ T978] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 456.305597][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.405442][ T24] vmk80xx 1-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 456.430347][ T24] usb 1-1: USB disconnect, device number 29 [ 456.498266][ T978] usb 3-1: Product: syz [ 456.502446][ T978] usb 3-1: Manufacturer: syz [ 456.524456][ T978] usb 3-1: SerialNumber: syz [ 456.556047][ T978] usb 3-1: config 0 descriptor?? [ 456.747208][ T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 456.792155][T11952] input: syz1 as /devices/virtual/input/input54 [ 457.015196][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 457.035091][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.088428][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.115706][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 457.152662][ T5930] usb 3-1: USB disconnect, device number 125 [ 457.175208][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 457.184297][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.259458][ T24] usb 1-1: config 0 descriptor?? [ 457.335162][ T978] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 457.585709][ T978] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 457.606325][ T978] usb 2-1: config index 0 descriptor too short (expected 50, got 18) [ 457.614818][ T978] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 457.628135][ T978] usb 2-1: config 0 has no interface number 0 [ 457.648783][ T978] usb 2-1: config index 1 descriptor too short (expected 50, got 18) [ 457.657703][ T978] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 457.675314][ T978] usb 2-1: config 0 has no interface number 0 [ 457.696410][ T978] usb 2-1: config index 2 descriptor too short (expected 50, got 18) [ 457.745026][ T978] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 457.800234][ T978] usb 2-1: config 0 has no interface number 0 [ 457.847300][ T978] usb 2-1: config index 3 descriptor too short (expected 50, got 18) [ 457.855744][ T978] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 457.874386][ T978] usb 2-1: config 0 has no interface number 0 [ 457.890555][ T978] usb 2-1: config index 4 descriptor too short (expected 50, got 18) [ 457.898963][ T978] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 457.922840][ T978] usb 2-1: config 0 has no interface number 0 [ 457.943137][ T978] usb 2-1: config index 5 descriptor too short (expected 50, got 18) [ 457.951768][ T978] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 457.960257][ T978] usb 2-1: config 0 has no interface number 0 [ 457.979712][ T978] usb 2-1: config index 6 descriptor too short (expected 50, got 18) [ 457.993836][ T978] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 458.016936][ T978] usb 2-1: config 0 has no interface number 0 [ 458.034161][ T978] usb 2-1: config index 7 descriptor too short (expected 50, got 18) [ 458.050047][ T978] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 458.068784][ T978] usb 2-1: config 0 has no interface number 0 [ 458.091307][ T978] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 458.115785][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.140484][ T978] usb 2-1: Product: syz [ 458.153293][ T978] usb 2-1: Manufacturer: syz [ 458.166723][ T978] usb 2-1: SerialNumber: syz [ 458.189338][ T978] usb 2-1: config 0 descriptor?? [ 458.205829][ T978] hub 2-1:0.217: Invalid hub with more than one config or interface [ 458.214259][ T978] hub 2-1:0.217: probe with driver hub failed with error -22 [ 458.616143][T12004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 458.660339][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'. [ 458.693821][ T24] microsoft 0003:045E:07DA.0020: No inputs registered, leaving [ 458.723018][ T24] microsoft 0003:045E:07DA.0020: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 458.764475][ T24] microsoft 0003:045E:07DA.0020: no inputs found [ 458.771853][ T24] microsoft 0003:045E:07DA.0020: could not initialize ff, continuing anyway [ 458.837236][T12008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.866864][T12008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.911490][ T5930] usb 1-1: USB disconnect, device number 30 [ 460.076288][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 460.129792][ T978] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 460.213951][ T978] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 460.229653][ T978] dib0700: firmware download failed at 7 with -22 [ 460.238127][ T24] usb 1-1: device descriptor read/64, error -71 [ 460.259876][ T978] usb 2-1: USB disconnect, device number 11 [ 460.289750][T12029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.305831][T12029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.495082][ T24] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 460.635004][ T978] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 460.719234][ T24] usb 1-1: device descriptor read/64, error -71 [ 460.817593][ T978] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 460.828004][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.837830][ T24] usb usb1-port1: attempt power cycle [ 460.878392][ T978] usb 2-1: Product: syz [ 460.883680][ T978] usb 2-1: Manufacturer: syz [ 460.890990][ T978] usb 2-1: SerialNumber: syz [ 460.898915][ T978] usb 2-1: config 0 descriptor?? [ 461.130667][T12032] input: syz1 as /devices/virtual/input/input56 [ 461.216352][ T24] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 461.278353][ T24] usb 1-1: device descriptor read/8, error -71 [ 461.381945][ T978] usb 2-1: USB disconnect, device number 12 [ 461.532745][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 461.532763][ T30] audit: type=1326 audit(1745753380.529:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.4.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac518e969 code=0x7ffc0000 [ 461.547268][ T24] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 461.572123][ T30] audit: type=1326 audit(1745753380.529:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.4.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac518e969 code=0x7ffc0000 [ 461.595877][ T30] audit: type=1326 audit(1745753380.529:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.4.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ac518e969 code=0x7ffc0000 [ 461.597059][ T24] usb 1-1: device descriptor read/8, error -71 [ 461.619400][ T30] audit: type=1326 audit(1745753380.529:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.4.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac518e969 code=0x7ffc0000 [ 461.653109][ T30] audit: type=1326 audit(1745753380.529:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.4.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac518e969 code=0x7ffc0000 [ 461.653153][ T30] audit: type=1326 audit(1745753380.529:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.4.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8ac5190887 code=0x7ffc0000 [ 461.653190][ T30] audit: type=1326 audit(1745753380.539:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.4.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8ac51907fc code=0x7ffc0000 [ 461.653223][ T30] audit: type=1326 audit(1745753380.539:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.4.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8ac5190734 code=0x7ffc0000 [ 461.653258][ T30] audit: type=1326 audit(1745753380.539:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.4.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8ac5190734 code=0x7ffc0000 [ 461.653296][ T30] audit: type=1326 audit(1745753380.539:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.4.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8ac518d5ca code=0x7ffc0000 [ 461.738345][ T24] usb usb1-port1: unable to enumerate USB device [ 462.133576][T12065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1643'. [ 462.305153][ T978] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 462.465528][ T978] usb 2-1: Using ep0 maxpacket: 8 [ 462.478007][ T978] usb 2-1: config 6 has an invalid interface number: 113 but max is 0 [ 462.490544][ T978] usb 2-1: config 6 has no interface number 0 [ 462.498194][ T978] usb 2-1: config 6 interface 113 has no altsetting 0 [ 462.522667][ T978] usb 2-1: New USB device found, idVendor=03f0, idProduct=070c, bcdDevice= 0.00 [ 462.532029][ T47] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 462.546648][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.554798][ T978] usb 2-1: Product: syz [ 462.576934][ T978] usb 2-1: Manufacturer: syz [ 462.582597][ T978] usb 2-1: SerialNumber: syz [ 462.684978][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 462.802502][ T978] usb-storage 2-1:6.113: USB Mass Storage device detected [ 462.925426][ T978] usb-storage 2-1:6.113: Quirks match for vid 03f0 pid 070c: 8000 [ 462.964550][T12084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.039696][ T978] usb 2-1: USB disconnect, device number 13 [ 463.068287][T12084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.520899][ T24] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 463.830407][ T24] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 463.840055][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.856847][ T24] usb 1-1: Product: syz [ 463.865428][ T24] usb 1-1: Manufacturer: syz [ 463.874832][ T24] usb 1-1: SerialNumber: syz [ 463.986219][ T24] usb 1-1: config 0 descriptor?? [ 464.240212][T12091] input: syz1 as /devices/virtual/input/input57 [ 464.473267][ T5930] usb 1-1: USB disconnect, device number 35 [ 464.735998][T12113] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1652'. [ 465.073365][T12122] netlink: 'syz.0.1655': attribute type 29 has an invalid length. [ 465.096999][T12122] netlink: 'syz.0.1655': attribute type 29 has an invalid length. [ 465.112351][T12122] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1655'. [ 465.244997][ T24] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 465.397265][ T24] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 465.405683][ T24] usb 5-1: config 0 has no interface number 0 [ 465.411829][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 465.423607][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 465.447528][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 465.459302][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 465.470430][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 465.481435][ T24] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 465.494797][ T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 465.618801][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.639031][ T24] usb 5-1: config 0 descriptor?? [ 465.649430][T12118] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 465.671171][T12118] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 465.710235][ T24] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 465.835128][ T5930] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 465.998915][T12118] input: syz1 as /devices/virtual/input/input58 [ 466.018539][ T5930] usb 2-1: Using ep0 maxpacket: 8 [ 466.053539][ T24] usb 5-1: USB disconnect, device number 9 [ 466.062348][ T24] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 466.162990][ T5930] usb 2-1: unable to get BOS descriptor or descriptor too short [ 466.215453][ T5930] usb 2-1: config 8 has an invalid interface number: 24 but max is 1 [ 466.223573][ T5930] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 466.274470][ T47] usb 3-1: unable to get BOS descriptor or descriptor too short [ 466.283217][ T47] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 466.288613][ T5930] usb 2-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 466.310158][ T5930] usb 2-1: config 8 has no interface number 0 [ 466.317399][ T47] usb 3-1: can't read configurations, error -71 [ 466.346915][ T5930] usb 2-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 466.386759][ T5930] usb 2-1: config 8 interface 24 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 466.416236][ T5930] usb 2-1: config 8 interface 24 has no altsetting 0 [ 466.436246][ T5930] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 466.458957][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.475348][ T5880] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 466.554989][ T5930] usb 2-1: Product: syz [ 466.582789][ T5930] usb 2-1: Manufacturer: syz [ 466.613150][ T5930] usb 2-1: SerialNumber: syz [ 466.627458][ T5880] usb 1-1: device descriptor read/64, error -71 [ 467.042259][T12135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.068379][T12135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.076322][ T5880] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 467.225066][ T5880] usb 1-1: device descriptor read/64, error -71 [ 467.355511][ T5880] usb usb1-port1: attempt power cycle [ 467.593950][ T5878] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 467.935626][ T5878] usb 5-1: device descriptor read/64, error -71 [ 468.445070][ T5880] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 468.467928][ T5878] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 468.485647][ T5880] usb 1-1: device descriptor read/8, error -71 [ 468.606206][ T5878] usb 5-1: device descriptor read/64, error -71 [ 468.724269][ T5878] usb usb5-port1: attempt power cycle [ 468.753029][ T5880] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 469.075847][ T5880] usb 1-1: device descriptor read/8, error -71 [ 469.205410][ T5880] usb usb1-port1: unable to enumerate USB device [ 469.306654][ T5878] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 469.325756][ T5878] usb 5-1: device descriptor read/8, error -71 [ 469.575018][ T5878] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 469.615024][ T5878] usb 5-1: device descriptor read/8, error -71 [ 469.709881][T12177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.719057][ T5880] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 469.728166][ T5878] usb usb5-port1: unable to enumerate USB device [ 469.731092][T12177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.764760][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 469.764778][ T30] audit: type=1326 audit(1745753388.749:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12150 comm="syz.4.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac518e969 code=0x7fc00000 [ 469.881425][ T5880] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 469.897737][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.915652][ T5880] usb 1-1: Product: syz [ 469.926619][ T5880] usb 1-1: Manufacturer: syz [ 469.945513][ T5880] usb 1-1: SerialNumber: syz [ 470.008752][ T5880] usb 1-1: config 0 descriptor?? [ 470.122584][T12183] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1669'. [ 470.179502][T12183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1669'. [ 470.188939][T12183] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744072321207297) [ 470.203533][T12183] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 470.249036][T12173] input: syz1 as /devices/virtual/input/input59 [ 470.446835][ T5878] usb 1-1: USB disconnect, device number 40 [ 470.922701][ T47] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 471.079891][T12206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1675'. [ 471.094003][T12206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1675'. [ 471.107559][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 471.114588][ T47] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 471.139936][ T47] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 471.180389][ T47] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 471.199288][ T47] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 471.225165][ T47] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 471.242381][ T47] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 471.251831][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.395305][T12214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.411219][T12214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.468212][ T47] usb 5-1: usb_control_msg returned -32 [ 471.474010][ T47] usbtmc 5-1:16.0: can't read capabilities [ 471.727736][T12216] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1678'. [ 471.742011][T12216] 0ªX¹¦À: renamed from caif0 [ 471.777221][ T5930] vmk80xx 2-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 471.796968][T12216] 0ªX¹¦À: entered allmulticast mode [ 471.802328][T12216] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 471.897501][T12218] usbtmc 5-1:16.0: control status returned 5 [ 472.014094][T12218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1672'. [ 472.035144][T12218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1672'. [ 472.087814][T12221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.097772][T12218] team0: entered promiscuous mode [ 472.103122][T12221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.113738][T12218] team0: left promiscuous mode [ 472.125012][ T47] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 472.168781][ T24] usb 5-1: USB disconnect, device number 14 [ 472.274971][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 472.289273][ T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.308310][ T47] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 472.324921][ T47] usb 1-1: New USB device strings: Mfr=0, Product=251, SerialNumber=3 [ 472.353923][ T47] usb 1-1: Product: syz [ 472.369946][ T47] usb 1-1: SerialNumber: syz [ 472.412890][ T47] usb 1-1: config 0 descriptor?? [ 472.623628][ T24] usb 1-1: USB disconnect, device number 41 [ 472.713633][T12223] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1680'. [ 472.742760][T12223] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1680'. [ 472.742970][T12223] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744072321207297) [ 472.742991][T12223] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 472.805466][T12227] x_tables: duplicate underflow at hook 2 [ 472.928519][ T5878] usb 2-1: USB disconnect, device number 14 [ 472.971317][T12226] tty tty3: ldisc open failed (-12), clearing slot 2 [ 473.326926][ T5930] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 473.365123][ T5878] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 473.489300][ T5930] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 473.504444][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.522163][ T5930] usb 5-1: Product: syz [ 473.529847][ T5930] usb 5-1: Manufacturer: syz [ 473.540435][ T5930] usb 5-1: SerialNumber: syz [ 473.545052][ T47] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 473.557211][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 473.576298][ T5930] usb 5-1: config 0 descriptor?? [ 473.596055][ T5878] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 473.669564][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.694996][ T5878] usb 2-1: Product: syz [ 473.699237][ T5878] usb 2-1: Manufacturer: syz [ 473.703846][ T5878] usb 2-1: SerialNumber: syz [ 473.725163][ T47] usb 1-1: too many configurations: 127, using maximum allowed: 8 [ 473.739296][ T5878] r8152-cfgselector 2-1: Unknown version 0x0000 [ 473.745606][ T47] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 473.761148][ T47] usb 1-1: can't read configurations, error -61 [ 473.787245][ T5878] r8152-cfgselector 2-1: config 0 descriptor?? [ 473.809750][T12236] input: syz1 as /devices/virtual/input/input60 [ 473.896120][ T5877] usb 5-1: USB disconnect, device number 15 [ 473.925057][ T47] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 474.095338][ T47] usb 1-1: too many configurations: 127, using maximum allowed: 8 [ 474.121393][ T47] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 474.140813][ T47] usb 1-1: can't read configurations, error -61 [ 474.148737][ T47] usb usb1-port1: attempt power cycle [ 474.256494][ T5878] r8152-cfgselector 2-1: Unknown version 0x0000 [ 474.280353][ T5878] r8152-cfgselector 2-1: bad CDC descriptors [ 474.299784][ T5878] r8152-cfgselector 2-1: USB disconnect, device number 15 [ 474.425229][ T5880] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 474.484773][T12253] netlink: 'syz.4.1690': attribute type 21 has an invalid length. [ 474.516849][T12253] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1690'. [ 474.535284][ T47] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 474.567102][ T47] usb 1-1: too many configurations: 127, using maximum allowed: 8 [ 474.582926][ T47] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 474.591824][ T47] usb 1-1: can't read configurations, error -61 [ 474.603255][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 474.622837][ T5880] usb 3-1: too many configurations: 46, using maximum allowed: 8 [ 474.641960][ T5880] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 474.652168][ T5880] usb 3-1: can't read configurations, error -61 [ 474.745195][ T47] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 474.791141][ T47] usb 1-1: too many configurations: 127, using maximum allowed: 8 [ 474.799321][ T5880] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 474.829802][ T47] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 474.840586][ T47] usb 1-1: can't read configurations, error -61 [ 474.849858][ T47] usb usb1-port1: unable to enumerate USB device [ 474.874070][T12259] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744072321207297) [ 474.896073][T12259] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 474.965115][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 474.986167][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 475.003560][ T5880] usb 3-1: too many configurations: 46, using maximum allowed: 8 [ 475.039388][ T5880] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 475.056700][ T5880] usb 3-1: can't read configurations, error -61 [ 475.073387][ T5880] usb usb3-port1: attempt power cycle [ 475.115361][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 475.129115][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 475.144359][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.169375][ T24] usb 5-1: Product: syz [ 475.173806][ T24] usb 5-1: Manufacturer: syz [ 475.179520][ T24] usb 5-1: SerialNumber: syz [ 475.191123][ T24] usb 5-1: config 0 descriptor?? [ 475.416618][ T24] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 475.428201][ T5880] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 475.455656][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 475.461437][ T5880] usb 3-1: too many configurations: 46, using maximum allowed: 8 [ 475.474558][ T5880] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 475.483042][ T5880] usb 3-1: can't read configurations, error -61 [ 475.509555][T12268] __nla_validate_parse: 2 callbacks suppressed [ 475.509570][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1694'. [ 475.715036][ T5880] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 475.730954][ T24] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 475.795692][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 475.855142][ T24] usb 5-1: USB disconnect, device number 16 [ 475.871093][ T5880] usb 3-1: too many configurations: 46, using maximum allowed: 8 [ 475.919416][ T5880] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 475.940154][ T5880] usb 3-1: can't read configurations, error -61 [ 475.963163][ T5880] usb usb3-port1: unable to enumerate USB device [ 476.239983][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 476.304981][ T5877] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 476.322307][T12279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.341268][T12279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.379419][ T24] usb 5-1: device descriptor read/64, error -71 [ 476.485079][ T5877] usb 2-1: Using ep0 maxpacket: 16 [ 476.492106][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.503374][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.513825][ T5877] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 476.526776][ T5877] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 476.535885][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.546576][ T5877] usb 2-1: config 0 descriptor?? [ 476.625138][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 476.664970][ T5880] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 476.765073][ T24] usb 5-1: device descriptor read/64, error -71 [ 476.815085][ T5880] usb 1-1: Using ep0 maxpacket: 16 [ 476.822007][ T5880] usb 1-1: unable to get BOS descriptor or descriptor too short [ 476.830855][ T5880] usb 1-1: config 1 interface 0 has no altsetting 0 [ 476.839665][ T5880] usb 1-1: New USB device found, idVendor=04f3, idProduct=214d, bcdDevice= 0.40 [ 476.848908][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.857072][ T5880] usb 1-1: Product: syz [ 476.861282][ T5880] usb 1-1: Manufacturer: syz [ 476.866001][ T5880] usb 1-1: SerialNumber: syz [ 476.875276][ T24] usb usb5-port1: attempt power cycle [ 477.009194][ T5877] usbhid 2-1:0.0: can't add hid device: -71 [ 477.021373][ T5877] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 477.036093][ T5877] usb 2-1: USB disconnect, device number 16 [ 477.153740][T12286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.165274][T12286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.177246][ T5880] usbhid 1-1:1.0: can't add hid device: -71 [ 477.178605][T12286] input: syz1 as /devices/virtual/input/input61 [ 477.196920][ T5880] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 477.212032][ T5880] usb 1-1: USB disconnect, device number 46 [ 477.221766][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 477.256762][ T24] usb 5-1: device descriptor read/8, error -71 [ 477.505085][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 477.766178][ T24] usb 5-1: device descriptor read/8, error -71 [ 477.875083][ T5880] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 477.897453][ T24] usb usb5-port1: unable to enumerate USB device [ 477.984999][ T5877] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 478.044983][ T5880] usb 1-1: Using ep0 maxpacket: 16 [ 478.077849][ T5880] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 478.099946][ T5880] usb 1-1: config 0 has no interface number 0 [ 478.114192][ T5880] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 478.141471][ T5880] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 478.143592][T12298] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 478.179454][ T5880] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 478.202647][T12298] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 478.203732][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.210830][T12298] bridge1: left promiscuous mode [ 478.230162][ T5877] usb 2-1: config 0 has no interfaces? [ 478.241027][T12298] gtp0: left promiscuous mode [ 478.248532][ T5877] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 478.253563][ T5880] usb 1-1: Product: syz [ 478.257826][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.270884][T12298] bond0: left promiscuous mode [ 478.275783][T12298] geneve2: left promiscuous mode [ 478.281946][T12298] bond0: left allmulticast mode [ 478.287021][ T5877] usb 2-1: Product: syz [ 478.291319][ T5877] usb 2-1: Manufacturer: syz [ 478.303631][T12298] geneve2: left allmulticast mode [ 478.309339][ T5877] usb 2-1: SerialNumber: syz [ 478.315688][T12298] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.324674][ T5880] usb 1-1: Manufacturer: syz [ 478.327604][ T5877] usb 2-1: config 0 descriptor?? [ 478.333280][ T5880] usb 1-1: SerialNumber: syz [ 478.353460][T12298] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.363758][ T5880] usb 1-1: config 0 descriptor?? [ 478.410591][T12297] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 478.425239][T12298] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.438849][T12298] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.455200][T12297] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 480.167005][T12298] ip6erspan0: left promiscuous mode [ 480.183493][T12297] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 480.205439][T12297] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 480.474328][T12311] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1707'. [ 480.490332][ T5843] cgroup: fork rejected by pids controller in /syz4 [ 480.498026][T12311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1707'. [ 480.528431][T12311] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744072321207297) [ 480.553853][T12311] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 480.857581][ T978] usb 2-1: USB disconnect, device number 17 [ 480.927546][T12319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.952032][T12319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.178207][ T3454] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.350095][ T3454] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.367940][ T5878] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 481.527619][ T3454] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.545977][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 481.558891][ T5878] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 481.811653][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.842862][ T5878] usb 2-1: config 0 has no interface number 0 [ 481.865543][ T5878] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 481.889055][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.932742][ T5878] usb 2-1: config 0 descriptor?? [ 481.949023][ T5878] usb 2-1: Found UVC 0.00 device (0bd3:0555) [ 481.969759][ T5878] usb 2-1: No valid video chain found. [ 482.023548][T12333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.034085][T12333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.080323][ T3454] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.162884][ T5878] usb 2-1: USB disconnect, device number 18 [ 482.557346][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 482.599180][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 482.634940][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 482.688009][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 482.735368][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 482.979998][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 483.016686][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 483.039943][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 483.103195][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 483.144129][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 483.290852][T12353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.409709][T12353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.443463][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 483.468531][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 483.507267][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 483.520876][T12359] input: syz1 as /devices/virtual/input/input62 [ 483.580669][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 483.621989][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 483.671207][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 483.885041][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 483.930468][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 484.745685][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 484.995666][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 485.055233][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 485.121440][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 485.231797][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 485.267497][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 485.345085][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 485.421243][ T5144] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 485.435343][ T5144] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 485.445140][ T5144] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 485.459951][ T5144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 485.469102][ T5144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 485.506716][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 485.523512][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 485.544714][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 485.555670][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 485.566033][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 485.578016][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 485.588761][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 485.610975][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 485.631111][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 485.642205][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 485.653022][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 485.773836][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 485.823188][T12374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1720'. [ 485.833717][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 485.862009][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 485.872246][T12374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1720'. [ 485.905292][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 485.924335][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 485.949163][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 485.994413][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 486.039002][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 486.051590][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 486.064236][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 486.079452][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 486.090090][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 486.137001][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 486.157496][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 486.168130][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 486.197912][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 486.216594][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 486.250989][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 486.271207][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 486.291069][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 486.301704][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 486.322184][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 486.348091][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 486.358517][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 486.393333][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 486.420638][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 486.444767][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 486.461846][ T3454] bond0 (unregistering): Released all slaves [ 486.468330][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 486.500148][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 486.513995][T12374] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744072321207297) [ 486.534388][T12374] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 486.545753][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 486.564694][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 486.603301][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 486.613668][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 486.649898][ T3454] tipc: Disabling bearer [ 486.659648][ T3454] tipc: Left network mode [ 486.666880][ T5878] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 486.668828][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 486.720045][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 486.745166][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 486.768756][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 486.790793][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 486.807672][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 486.821383][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 486.832051][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 486.844116][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 486.845935][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 486.855893][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 486.874779][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 486.895592][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 486.908963][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 486.925689][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 486.926449][ T5878] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 486.954978][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 486.990070][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.993958][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 487.020305][ T5878] usb 3-1: Product: syz [ 487.022164][T12400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.035693][T12400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.067112][ T5878] usb 3-1: Manufacturer: syz [ 487.071793][ T5878] usb 3-1: SerialNumber: syz [ 487.077512][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 487.089726][T12400] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1726'. [ 487.113436][ T5878] usb 3-1: config 0 descriptor?? [ 487.132570][ T5878] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 487.168061][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 487.210372][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 487.318760][ T5880] asix 1-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 487.333659][ T5880] asix 1-1:0.251: probe with driver asix failed with error -5 [ 487.349845][ T5878] usb 3-1: clie_3_5_startup: get config number bad return length: 0 [ 487.365189][ T5880] usb 1-1: USB disconnect, device number 47 [ 487.371459][ T5878] visor 3-1:0.0: probe with driver visor failed with error -5 [ 487.480959][T12372] chnl_net:caif_netlink_parms(): no params data found [ 487.575028][ T5878] usb 3-1: USB disconnect, device number 6 [ 487.595056][ T5838] Bluetooth: hci2: command tx timeout [ 487.705149][ T5880] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 487.823744][ T3454] hsr_slave_0: left promiscuous mode [ 487.867319][ T3454] hsr_slave_1: left promiscuous mode [ 487.875137][ T5880] usb 1-1: Using ep0 maxpacket: 16 [ 487.898285][ T5880] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 487.953220][ T5880] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 487.976061][ T5880] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 487.993623][ T3454] macsec0: left allmulticast mode [ 487.995043][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.019002][ T3454] veth1_macvtap: left allmulticast mode [ 488.035712][ T3454] veth1_macvtap: left promiscuous mode [ 488.036509][ T5880] usb 1-1: Product: syz [ 488.048333][ T3454] veth0_macvtap: left promiscuous mode [ 488.080474][ T5880] usb 1-1: Manufacturer: syz [ 488.096345][ T5880] usb 1-1: SerialNumber: syz [ 488.337154][T12396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.354704][T12396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.373712][ T5880] usb 1-1: 0:2 : does not exist [ 488.399749][ T5880] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 488.436012][ T5880] usb 1-1: USB disconnect, device number 48 [ 488.449942][ T5930] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 488.482981][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 488.617352][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 488.631891][ T5930] usb 3-1: unable to get BOS descriptor or descriptor too short [ 488.657364][ T5930] usb 3-1: config 254 has an invalid interface number: 109 but max is 0 [ 488.665887][ T5878] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 488.690265][ T5930] usb 3-1: config 254 has no interface number 0 [ 488.696857][ T5930] usb 3-1: config 254 interface 109 has no altsetting 0 [ 488.730088][ T5930] usb 3-1: New USB device found, idVendor=0856, idProduct=ac22, bcdDevice=2f.64 [ 488.739774][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.757832][ T5930] usb 3-1: Product: syz [ 488.762022][ T5930] usb 3-1: Manufacturer: syz [ 488.767096][ T5930] usb 3-1: SerialNumber: syz [ 488.851727][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.863940][ T5878] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 488.874084][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 488.889076][ T5878] usb 2-1: SerialNumber: syz [ 488.901803][ T5878] usb 2-1: config 0 descriptor?? [ 488.921427][ T5878] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 488.929990][ T5878] usb 2-1: No valid video chain found. [ 489.001317][T12432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.021060][T12432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.043611][ T5930] mos7840 3-1:254.109: required endpoints missing [ 489.060617][ T5930] usb 3-1: USB disconnect, device number 7 [ 489.150334][T12429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.175352][T12429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.190531][T12429] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 489.218544][ T5878] usb 2-1: USB disconnect, device number 19 [ 489.675033][ T5838] Bluetooth: hci2: command tx timeout [ 489.720777][T12451] loop2: detected capacity change from 0 to 7 [ 489.739220][T12451] Dev loop2: unable to read RDB block 7 [ 489.746635][T12455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1738'. [ 489.749806][T12451] loop2: unable to read partition table [ 489.766973][T12372] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.774840][T12372] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.782240][T12372] bridge_slave_0: entered allmulticast mode [ 489.787861][T12451] loop2: partition table beyond EOD, truncated [ 489.788340][T12455] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1738'. [ 489.795267][T12451] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 489.806339][T12372] bridge_slave_0: entered promiscuous mode [ 489.822274][T12372] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.829711][T12372] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.838055][T12372] bridge_slave_1: entered allmulticast mode [ 489.846022][T12372] bridge_slave_1: entered promiscuous mode [ 489.859119][ T24] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 489.967112][T12455] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744072321207297) [ 489.982767][T12455] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 490.038037][T12372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.068890][T12459] netlink: 'syz.1.1739': attribute type 12 has an invalid length. [ 490.071198][ T24] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 490.091927][T12457] tipc: Enabling of bearer rejected, media not registered [ 490.108098][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.117845][ T24] usb 1-1: Product: syz [ 490.122531][ T24] usb 1-1: Manufacturer: syz [ 490.127666][ T24] usb 1-1: SerialNumber: syz [ 490.146981][ T24] usb 1-1: config 0 descriptor?? [ 490.152268][T12372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.325450][T12372] team0: Port device team_slave_0 added [ 490.354035][T12372] team0: Port device team_slave_1 added [ 490.517974][T12476] input: syz1 as /devices/virtual/input/input64 [ 490.654413][T12372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.684394][T12372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.790734][T12372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.893693][T12372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.938230][T12372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.314278][T12372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.758369][ T5838] Bluetooth: hci2: command tx timeout [ 492.022019][T12372] hsr_slave_0: entered promiscuous mode [ 492.046160][T12372] hsr_slave_1: entered promiscuous mode [ 492.102842][T12372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 492.129992][T12372] Cannot create hsr debugfs directory [ 493.039751][ T5930] usb 1-1: USB disconnect, device number 49 [ 493.151638][T12525] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1751'. [ 493.164465][T12523] loop2: detected capacity change from 0 to 7 [ 493.184569][T12523] Dev loop2: unable to read RDB block 7 [ 493.192308][T12523] loop2: unable to read partition table [ 493.201646][T12525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1751'. [ 493.211927][T12523] loop2: partition table beyond EOD, truncated [ 493.220286][T12523] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 493.303100][T12521] lo: entered allmulticast mode [ 493.308709][T12521] tunl0: entered allmulticast mode [ 493.314518][T12521] gre0: entered allmulticast mode [ 493.320474][T12521] gretap0: entered allmulticast mode [ 493.326433][T12521] erspan0: entered allmulticast mode [ 493.332372][T12521] ip_vti0: entered allmulticast mode [ 493.338358][T12521] ip6_vti0: entered allmulticast mode [ 493.344347][T12521] sit0: entered allmulticast mode [ 493.350121][T12521] ip6tnl0: entered allmulticast mode [ 493.356083][T12521] ip6gre0: entered allmulticast mode [ 493.362739][T12521] ip6gretap0: entered allmulticast mode [ 493.369111][T12521] bridge0: entered allmulticast mode [ 493.375377][T12521] vcan0: entered allmulticast mode [ 493.381131][T12521] : entered allmulticast mode [ 493.386112][T12521] bond_slave_0: entered allmulticast mode [ 493.392826][T12521] team0: entered allmulticast mode [ 493.398168][T12521] team_slave_0: entered allmulticast mode [ 493.404162][T12521] team_slave_1: entered allmulticast mode [ 493.413257][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 493.425218][T12521] bridge2: entered allmulticast mode [ 493.437925][T12521] dummy0: entered allmulticast mode [ 493.451938][T12521] nlmon0: entered allmulticast mode [ 493.458313][T12521] caif0: entered allmulticast mode [ 493.490526][T12521] batadv0: entered allmulticast mode [ 493.607279][T12521] vxcan0: entered allmulticast mode [ 493.613929][T12521] vxcan1: entered allmulticast mode [ 493.687279][T12521] veth0: entered allmulticast mode [ 493.697096][T12521] veth1: entered allmulticast mode [ 493.707473][T12521] wg0: entered allmulticast mode [ 493.714264][T12521] wg1: entered allmulticast mode [ 493.722437][T12521] wg2: entered allmulticast mode [ 493.730474][T12521] veth0_to_bridge: entered allmulticast mode [ 493.758026][T12521] veth1_to_bridge: entered allmulticast mode [ 493.777148][T12521] veth0_to_bond: entered allmulticast mode [ 493.784123][T12521] veth0_to_team: entered allmulticast mode [ 493.859074][ T5144] Bluetooth: hci2: command tx timeout [ 493.903253][T12521] veth1_to_team: entered allmulticast mode [ 494.006718][T12516] delete_channel: no stack [ 494.016765][T12521] veth0_to_batadv: entered allmulticast mode [ 494.023017][T12521] batadv_slave_0: entered allmulticast mode [ 494.033738][T12521] veth1_to_batadv: entered allmulticast mode [ 494.043912][T12521] batadv_slave_1: entered allmulticast mode [ 494.050668][T12521] xfrm0: entered allmulticast mode [ 494.061199][T12521] veth0_to_hsr: entered allmulticast mode [ 494.067810][T12521] hsr_slave_0: entered allmulticast mode [ 494.073862][T12521] veth1_to_hsr: entered allmulticast mode [ 494.085591][T12521] hsr_slave_1: entered allmulticast mode [ 494.091548][T12521] hsr0: entered allmulticast mode [ 494.102084][T12521] veth1_virt_wifi: entered allmulticast mode [ 494.108821][T12521] veth0_virt_wifi: entered allmulticast mode [ 494.121062][T12521] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 494.129165][T12521] veth1_vlan: entered allmulticast mode [ 494.135457][T12521] veth0_vlan: entered allmulticast mode [ 494.141422][T12521] vlan0: entered allmulticast mode [ 494.153620][T12521] vlan1: entered allmulticast mode [ 494.160095][T12521] macvlan0: entered allmulticast mode [ 494.170405][T12521] macvlan1: entered allmulticast mode [ 494.176724][T12521] ipvlan0: entered allmulticast mode [ 494.182445][T12521] ipvlan1: entered allmulticast mode [ 494.192868][T12521] veth1_macvtap: entered allmulticast mode [ 494.199410][T12521] veth0_macvtap: entered allmulticast mode [ 494.210054][T12521] macvtap0: entered allmulticast mode [ 494.217064][T12521] macsec0: entered allmulticast mode [ 494.222772][T12521] geneve0: entered allmulticast mode [ 494.233069][T12521] geneve1: entered allmulticast mode [ 494.239028][T12521] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 494.251185][T12521] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 494.261689][T12521] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 494.273919][T12521] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 494.282155][T12521] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 494.294573][T12521] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 494.302689][T12521] bridge1: entered allmulticast mode [ 494.313350][T12521] gtp0: entered allmulticast mode [ 494.322735][T12521] syztnl2: entered allmulticast mode [ 494.333427][T12521] gre1: entered allmulticast mode [ 494.338999][T12521] bridge3: entered allmulticast mode [ 494.344722][T12521] vlan2: entered allmulticast mode [ 494.355647][T12521] bond0: entered allmulticast mode [ 494.360900][T12521] geneve2: entered allmulticast mode [ 494.373309][T12521] ip6erspan0: entered allmulticast mode [ 494.379559][T12521] batadv1: entered allmulticast mode [ 494.389800][T12521] mac80211_hwsim hwsim17 wlan2: entered allmulticast mode [ 494.397675][T12521] bridge4: entered allmulticast mode [ 494.403410][T12521] bridge5: entered allmulticast mode [ 494.414233][T12521] bond2: entered allmulticast mode [ 494.420934][T12525] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744072321207297) [ 494.438404][T12525] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 495.574996][ T5880] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 495.795055][ T5877] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 496.036086][ T5880] usb 1-1: device descriptor read/64, error -71 [ 496.055043][ T5877] usb 2-1: Using ep0 maxpacket: 32 [ 496.080496][ T5877] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 496.100774][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.174149][ T5877] usb 2-1: config 0 descriptor?? [ 496.213324][ T5877] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 496.229695][T12560] FAULT_INJECTION: forcing a failure. [ 496.229695][T12560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.252176][T12560] CPU: 1 UID: 0 PID: 12560 Comm: syz.3.1759 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 496.252201][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 496.252212][T12560] Call Trace: [ 496.252220][T12560] [ 496.252227][T12560] dump_stack_lvl+0x189/0x250 [ 496.252257][T12560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.252278][T12560] ? __pfx__printk+0x10/0x10 [ 496.252304][T12560] should_fail_ex+0x414/0x560 [ 496.252332][T12560] _copy_to_user+0x31/0xb0 [ 496.252354][T12560] simple_read_from_buffer+0xe1/0x170 [ 496.252378][T12560] proc_fail_nth_read+0x1df/0x250 [ 496.252402][T12560] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 496.252425][T12560] ? rw_verify_area+0x258/0x650 [ 496.252442][T12560] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 496.252464][T12560] vfs_read+0x1fd/0x980 [ 496.252481][T12560] ? __pfx_aa_sk_perm+0x10/0x10 [ 496.252513][T12560] ? do_sock_setsockopt+0x267/0x3e0 [ 496.252532][T12560] ? __pfx_vfs_read+0x10/0x10 [ 496.252546][T12560] ? do_sock_setsockopt+0x267/0x3e0 [ 496.252562][T12560] ? kfree+0x4d/0x440 [ 496.252578][T12560] ? sock_common_setsockopt+0x36/0xc0 [ 496.252598][T12560] ? tcp_setsockopt+0x3d/0xe0 [ 496.252618][T12560] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 496.252642][T12560] ? do_sock_setsockopt+0x267/0x3e0 [ 496.252660][T12560] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 496.252684][T12560] ksys_read+0x145/0x250 [ 496.252704][T12560] ? __pfx_ksys_read+0x10/0x10 [ 496.252725][T12560] ? do_syscall_64+0xba/0x210 [ 496.252746][T12560] do_syscall_64+0xf6/0x210 [ 496.252764][T12560] ? clear_bhb_loop+0x45/0xa0 [ 496.252784][T12560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.252800][T12560] RIP: 0033:0x7f080c78d37c [ 496.252816][T12560] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 496.252830][T12560] RSP: 002b:00007f080d6c4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 496.252848][T12560] RAX: ffffffffffffffda RBX: 00007f080c9b5fa0 RCX: 00007f080c78d37c [ 496.252861][T12560] RDX: 000000000000000f RSI: 00007f080d6c40a0 RDI: 0000000000000004 [ 496.252872][T12560] RBP: 00007f080d6c4090 R08: 0000000000000000 R09: 0000000000000000 [ 496.252882][T12560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.252892][T12560] R13: 0000000000000000 R14: 00007f080c9b5fa0 R15: 00007f080cadfa28 [ 496.252920][T12560] [ 496.597586][T12372] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 496.671155][T12550] delete_channel: no stack [ 496.729275][T12372] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 496.786627][ T5880] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 496.824382][T12372] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 496.916729][T12372] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 496.934978][ T5880] usb 1-1: device descriptor read/64, error -71 [ 497.045610][ T5880] usb usb1-port1: attempt power cycle [ 497.261378][T12571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.275483][T12571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.425266][ T5880] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 497.455343][T12578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.477624][T12578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.504510][ T5880] usb 1-1: device descriptor read/8, error -71 [ 497.563006][T12372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.679042][ T978] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 497.736755][T12372] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.745093][ T5880] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 497.767239][ T5880] usb 1-1: device descriptor read/8, error -71 [ 497.779724][ T3454] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.786942][ T3454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.813624][ T3454] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.820882][ T3454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.845961][ T978] usb 3-1: Using ep0 maxpacket: 32 [ 497.857593][ T978] usb 3-1: config 1 interface 0 has no altsetting 0 [ 497.872572][ T978] usb 3-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 497.911885][ T5880] usb usb1-port1: unable to enumerate USB device [ 497.929879][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.962850][ T978] usb 3-1: Product: syz [ 497.980696][ T978] usb 3-1: Manufacturer: syz [ 498.005852][ T5877] gspca_nw80x: reg_w err -110 [ 498.010728][ T5877] nw80x 2-1:0.0: probe with driver nw80x failed with error -110 [ 498.010978][ T978] usb 3-1: SerialNumber: syz [ 498.114023][T12372] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 498.220831][T12372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.286279][ T978] usbhid 3-1:1.0: can't add hid device: -71 [ 498.298416][ T978] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 498.353204][ T978] usb 3-1: USB disconnect, device number 8 [ 498.406950][T12372] veth0_vlan: entered promiscuous mode [ 498.491506][T12372] veth1_vlan: entered promiscuous mode [ 498.628420][T12372] veth0_macvtap: entered promiscuous mode [ 498.673387][T12372] veth1_macvtap: entered promiscuous mode [ 498.735900][ T978] usb 2-1: USB disconnect, device number 20 [ 498.814195][T12372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.851905][T12372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.899603][T12372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.942891][T12372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.000711][T12372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.030780][T12372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.063084][T12372] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.081901][T12372] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.115754][T12372] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.142690][T12372] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.195089][ T5880] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 499.284237][T12602] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1766'. [ 499.341479][ T5880] usb 3-1: device descriptor read/64, error -71 [ 499.361643][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.394514][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.507774][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.545030][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.615604][ T5880] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 499.775304][ T5880] usb 3-1: device descriptor read/64, error -71 [ 499.966029][ T5880] usb usb3-port1: attempt power cycle [ 500.188932][ T30] audit: type=1326 audit(1745753419.189:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12629 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1a58e969 code=0x7ffc0000 [ 500.329236][ T30] audit: type=1326 audit(1745753419.219:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12629 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1a58e969 code=0x7ffc0000 [ 500.375003][ T978] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 500.382970][ T30] audit: type=1326 audit(1745753419.229:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12629 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f1a58e969 code=0x7ffc0000 [ 500.415119][ T5880] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 500.466708][ T5880] usb 3-1: device descriptor read/8, error -71 [ 500.566396][ T5879] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 500.600671][ T30] audit: type=1326 audit(1745753419.229:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12629 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1a58e969 code=0x7ffc0000 [ 500.602786][ T30] audit: type=1326 audit(1745753419.229:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12629 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1a58e969 code=0x7ffc0000 [ 500.606128][ T30] audit: type=1326 audit(1745753419.229:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12629 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f1a590887 code=0x7ffc0000 [ 500.606170][ T30] audit: type=1326 audit(1745753419.229:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12629 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5f1a5907fc code=0x7ffc0000 [ 500.606204][ T30] audit: type=1326 audit(1745753419.229:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12629 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5f1a590734 code=0x7ffc0000 [ 500.606238][ T30] audit: type=1326 audit(1745753419.229:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12629 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5f1a590734 code=0x7ffc0000 [ 500.606271][ T30] audit: type=1326 audit(1745753419.229:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12629 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5f1a58d5ca code=0x7ffc0000 [ 500.715583][ T5880] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 500.735896][ T5880] usb 3-1: device descriptor read/8, error -71 [ 500.927939][ T5879] usb 5-1: config 0 has no interfaces? [ 500.943339][T12653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.999566][T12653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.065759][ T5879] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 501.088021][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.129839][ T5879] usb 5-1: Product: syz [ 501.145025][ T5879] usb 5-1: Manufacturer: syz [ 501.149702][ T5879] usb 5-1: SerialNumber: syz [ 501.161439][T12660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.175634][ T5879] usb 5-1: config 0 descriptor?? [ 501.279332][ T5880] usb usb3-port1: unable to enumerate USB device [ 501.423083][T12665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.436189][T12665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.535435][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.541932][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.656606][T12676] qrtr: Invalid version 56 [ 501.813217][T12635] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 501.835325][ T5930] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 501.985120][ T5930] usb 2-1: Using ep0 maxpacket: 16 [ 501.992311][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.078321][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.190082][ T5930] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 502.217500][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.313888][ T5930] usb 2-1: config 0 descriptor?? [ 502.341331][T12690] netlink: 'syz.3.1784': attribute type 2 has an invalid length. [ 502.772531][ T5930] savu 0003:1E7D:2D5A.0021: unknown main item tag 0x0 [ 502.790531][ T5930] savu 0003:1E7D:2D5A.0021: unknown main item tag 0x0 [ 502.891269][ T5930] savu 0003:1E7D:2D5A.0021: item fetching failed at offset 4/5 [ 502.933098][ T5930] savu 0003:1E7D:2D5A.0021: parse failed [ 502.962422][ T5930] savu 0003:1E7D:2D5A.0021: probe with driver savu failed with error -22 [ 503.022509][T12703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.047830][ T5930] usb 2-1: USB disconnect, device number 21 [ 503.066793][T12703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.580634][T12723] netlink: 'syz.1.1787': attribute type 10 has an invalid length. [ 503.610921][T12723] team0: left promiscuous mode [ 503.656260][T12723] batman_adv: batadv0: Adding interface: team0 [ 503.740149][T12723] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.740411][T12728] netlink: 'syz.1.1787': attribute type 10 has an invalid length. [ 503.765386][ C0] vkms_vblank_simulate: vblank timer overrun [ 503.799714][T12727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.948592][ T5880] usb 5-1: USB disconnect, device number 21 [ 503.956448][T12727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.971259][T12723] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 504.006450][T12728] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1787'. [ 504.019350][T12728] team0: entered promiscuous mode [ 504.041731][T12728] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.081358][T12728] batman_adv: batadv0: Interface activated: team0 [ 504.088827][T12728] batman_adv: batadv0: Interface deactivated: team0 [ 504.119866][T12728] batman_adv: batadv0: Removing interface: team0 [ 504.239980][T12728] bridge0: port 1(team0) entered blocking state [ 504.283954][T12728] bridge0: port 1(team0) entered disabled state [ 504.310692][T12728] team0: entered allmulticast mode [ 505.386132][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 505.386149][ T30] audit: type=1326 audit(1745753424.389:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12776 comm="syz.3.1799" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f080c78e969 code=0x0 [ 505.414170][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.495120][ T5870] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 505.707407][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 505.741574][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.772423][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.785030][ T5930] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 505.843316][ T5870] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 505.876935][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.920129][ T5870] usb 1-1: config 0 descriptor?? [ 505.987529][ T5930] usb 2-1: config 0 has an invalid interface number: 241 but max is 0 [ 506.089541][ T5930] usb 2-1: config 0 has no interface number 0 [ 506.112909][ T5930] usb 2-1: config 0 interface 241 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 506.174244][ T5930] usb 2-1: New USB device found, idVendor=ea6a, idProduct=daa1, bcdDevice=f1.60 [ 506.193680][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.248117][ T5930] usb 2-1: Product: syz [ 506.252342][ T5930] usb 2-1: Manufacturer: syz [ 506.271991][ T5930] usb 2-1: SerialNumber: syz [ 506.351576][ T5930] usb 2-1: config 0 descriptor?? [ 506.399908][T12780] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1797'. [ 506.432700][T12790] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 506.473350][ T5930] rndis_host 2-1:0.241: skipping garbage [ 506.504520][ T5930] usb 2-1: bad CDC descriptors [ 506.698711][ T5930] usb 2-1: USB disconnect, device number 22 [ 506.709207][T12819] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1806'. [ 506.726539][ T5879] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 506.739944][T12819] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1806'. [ 506.780078][ T5877] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 506.836307][T12818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.853136][T12819] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1806'. [ 506.882142][T12818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.885083][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 506.900464][T12819] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1806'. [ 506.929191][ T5879] usb 3-1: config 0 has an invalid interface number: 14 but max is 0 [ 506.941914][ T5879] usb 3-1: config 0 has no interface number 0 [ 506.964078][ T5879] usb 3-1: config 0 interface 14 has no altsetting 0 [ 506.964967][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 506.981591][ T5877] usb 5-1: config 0 has an invalid interface number: 202 but max is 1 [ 506.991953][ T5877] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.007996][ T5879] usb 3-1: New USB device found, idVendor=050d, idProduct=825a, bcdDevice=8b.c5 [ 507.017950][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.026236][ T5879] usb 3-1: Product: syz [ 507.053403][ T5879] usb 3-1: Manufacturer: syz [ 507.058411][ T5879] usb 3-1: SerialNumber: syz [ 507.079439][ T5877] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 507.080072][ T5879] usb 3-1: config 0 descriptor?? [ 507.111642][ T5877] usb 5-1: config 0 has no interface number 0 [ 507.123743][ T5877] usb 5-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30 [ 507.145373][ T5877] usb 5-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 507.190621][ T5877] usb 5-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 507.222138][ T5877] usb 5-1: config 0 interface 202 has no altsetting 0 [ 507.258623][ T5877] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 507.283943][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.305111][ T5877] usb 5-1: Product: syz [ 507.331927][ T5877] usb 5-1: Manufacturer: syz [ 507.344214][ T5879] usb 3-1: USB disconnect, device number 13 [ 507.350420][ T5877] usb 5-1: SerialNumber: syz [ 507.383296][T12825] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1808'. [ 507.393872][ T5877] usb 5-1: config 0 descriptor?? [ 507.400616][ T30] audit: type=1326 audit(1745753426.379:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1a58e969 code=0x7ffc0000 [ 507.454364][ T5877] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 507.475554][ T30] audit: type=1326 audit(1745753426.379:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1a58e969 code=0x7ffc0000 [ 507.515052][ T30] audit: type=1326 audit(1745753426.379:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f5f1a58e969 code=0x7ffc0000 [ 507.545140][ T30] audit: type=1326 audit(1745753426.379:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1a58e969 code=0x7ffc0000 [ 507.567932][ T30] audit: type=1326 audit(1745753426.379:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f5f1a58e969 code=0x7ffc0000 [ 507.591099][ T30] audit: type=1326 audit(1745753426.379:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1a58e969 code=0x7ffc0000 [ 507.642463][T12813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.662706][T12813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.680413][ T30] audit: type=1326 audit(1745753426.379:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1a58e969 code=0x7ffc0000 [ 507.734358][ T36] usb 5-1: Failed to submit usb control message: -71 [ 507.734778][ T978] usb 5-1: USB disconnect, device number 22 [ 507.741787][ T36] usb 5-1: unable to send the bmi data to the device: -71 [ 507.755007][ T30] audit: type=1326 audit(1745753426.379:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f5f1a58e969 code=0x7ffc0000 [ 507.778013][ T36] usb 5-1: unable to get target info from device [ 507.790425][ T36] usb 5-1: could not get target info (-71) [ 507.811758][ T36] usb 5-1: could not probe fw (-71) [ 507.819657][ T30] audit: type=1326 audit(1745753426.379:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1a58e969 code=0x7ffc0000 [ 507.980933][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1812'. [ 508.124938][ T5896] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 508.225405][ T5877] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 508.255110][ T5896] usb 2-1: device descriptor read/64, error -71 [ 508.384969][ T5877] usb 3-1: Using ep0 maxpacket: 16 [ 508.391843][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.403272][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.414382][ T5877] usb 3-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 508.426846][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.438846][ T5877] usb 3-1: config 0 descriptor?? [ 508.505032][ T5896] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 508.647115][ T5896] usb 2-1: device descriptor read/64, error -71 [ 508.676398][ T5877] usbhid 3-1:0.0: can't add hid device: -71 [ 508.690217][ T5877] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 508.716397][ T5877] usb 3-1: USB disconnect, device number 14 [ 508.775098][ T5896] usb usb2-port1: attempt power cycle [ 508.986316][ T5870] usbhid 1-1:0.0: can't add hid device: -71 [ 509.034991][ T5870] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 509.081856][ T5870] usb 1-1: USB disconnect, device number 55 [ 509.195711][ T5896] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 509.258412][ T5896] usb 2-1: device descriptor read/8, error -71 [ 509.515253][ T5896] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 509.547465][ T5896] usb 2-1: device descriptor read/8, error -71 [ 509.787331][ T5896] usb usb2-port1: unable to enumerate USB device [ 510.391193][T12880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.409339][T12880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.504129][T12882] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1824'. [ 510.530954][ T5877] IPVS: starting estimator thread 0... [ 510.536601][ T5930] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 510.630843][T12891] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 510.630843][T12891] The task syz.2.1825 (12891) triggered the difference, watch for misbehavior. [ 510.649384][T12885] IPVS: using max 54 ests per chain, 129600 per kthread [ 510.726594][ T5930] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 510.734968][ T5930] usb 1-1: config 0 has no interface number 0 [ 510.741101][ T5930] usb 1-1: config 0 interface 98 has no altsetting 0 [ 510.750050][ T5930] usb 1-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 510.759243][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.767991][ T5930] usb 1-1: Product: syz [ 510.772191][ T5930] usb 1-1: Manufacturer: syz [ 510.776833][ T5930] usb 1-1: SerialNumber: syz [ 510.783465][ T5930] usb 1-1: config 0 descriptor?? [ 510.834982][ T5877] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 510.986187][T12896] netlink: 'syz.1.1828': attribute type 4 has an invalid length. [ 511.004635][ T5877] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 511.013393][ T5877] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 511.030586][ T5930] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 511.041292][ T5877] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 511.057013][ T5877] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 511.064629][ T5877] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 511.076375][ T5877] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 511.090334][ T5877] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 511.098035][ T5877] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 511.114113][ T5877] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 511.139739][ T5877] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 511.154370][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.165731][ T5877] usb 5-1: Product: syz [ 511.170026][ T5877] usb 5-1: Manufacturer: syz [ 511.177139][ T5877] usb 5-1: SerialNumber: syz [ 511.303910][T12902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.313822][T12902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.540558][ T5877] adutux 5-1:168.0: interrupt endpoints not found [ 511.555373][ T5877] usb 5-1: USB disconnect, device number 23 [ 511.607011][ T5878] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 511.712046][T12905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1831'. [ 511.740148][T12905] vxlan0: entered allmulticast mode [ 511.767566][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 511.780048][ T5878] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 511.791002][ T5878] usb 2-1: config 0 has no interface number 0 [ 511.806100][ T5930] usb 1-1: reset high-speed USB device number 56 using dummy_hcd [ 511.823304][ T5878] usb 2-1: config 0 interface 237 has no altsetting 0 [ 511.853301][ T5878] usb 2-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 511.872045][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.894684][ T5878] usb 2-1: Product: syz [ 511.908753][ T5878] usb 2-1: Manufacturer: syz [ 511.916871][ T5878] usb 2-1: SerialNumber: syz [ 511.932126][ T5878] usb 2-1: config 0 descriptor?? [ 511.959034][ T5878] snd_usb_podhd 2-1:0.237: Line 6 POD HD300 found [ 512.155821][ T5878] snd_usb_podhd 2-1:0.237: cannot get proper max packet size [ 512.191254][ T5878] snd_usb_podhd 2-1:0.237: Line 6 POD HD300 now disconnected [ 512.223930][T12878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.227517][ T5878] snd_usb_podhd 2-1:0.237: probe with driver snd_usb_podhd failed with error -22 [ 512.232955][T12878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.260729][ T5930] usb 1-1: failed to restore interface 98 altsetting 4 (error=-71) [ 512.283206][ T5930] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 512.311368][ T5930] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 512.322122][ T10] usb 1-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 512.353611][ T10] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 512.367428][T12901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.376354][ T5930] usb 1-1: USB disconnect, device number 56 [ 512.454279][T12915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.480420][ T10] ------------[ cut here ]------------ [ 512.486393][ T10] WARNING: CPU: 0 PID: 10 at fs/kernfs/dir.c:537 kernfs_get+0x72/0x90 [ 512.494620][ T10] Modules linked in: [ 512.498326][T12901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.499017][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 512.518743][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 512.528841][ T10] Workqueue: events request_firmware_work_func [ 512.535045][ T10] RIP: 0010:kernfs_get+0x72/0x90 [ 512.539993][ T10] Code: e8 53 b4 64 ff 48 89 df be 04 00 00 00 e8 e6 ab c6 ff f0 ff 03 eb 05 e8 3c b4 64 ff 5b 5d c3 cc cc cc cc cc e8 2f b4 64 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 e5 [ 512.559906][ T10] RSP: 0018:ffffc900000f7680 EFLAGS: 00010293 [ 512.566437][ T10] RAX: ffffffff825b0aa1 RBX: ffff88805cb00b40 RCX: ffff88801b681e00 [ 512.574418][ T10] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 512.582492][ T10] RBP: 0000000000000000 R08: ffff88805cb00b43 R09: 1ffff1100b960168 [ 512.590510][ T10] R10: dffffc0000000000 R11: ffffed100b960169 R12: ffff88801f2cfc28 [ 512.598514][ T10] R13: 1ffff11003e59f86 R14: ffff88801f2cfc30 R15: 1ffff11003e59f85 [ 512.606500][ T10] FS: 0000000000000000(0000) GS:ffff8881260cc000(0000) knlGS:0000000000000000 [ 512.615513][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 512.622090][ T10] CR2: 00002000000d9030 CR3: 00000000349b0000 CR4: 00000000003526f0 [ 512.630094][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000005325 [ 512.638163][ T10] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 512.646269][ T10] Call Trace: [ 512.649536][ T10] [ 512.652451][ T10] kobject_add_internal+0x632/0xb40 [ 512.657800][ T10] kobject_add+0x155/0x220 [ 512.662209][ T10] ? __pfx_kobject_add+0x10/0x10 [ 512.667178][ T10] ? kobject_init+0x83/0x1e0 [ 512.671753][ T10] get_device_parent+0x316/0x3a0 [ 512.676786][ T10] device_add+0x2e1/0xb50 [ 512.681107][ T10] firmware_fallback_sysfs+0x2e4/0x9b0 [ 512.686586][ T10] _request_firmware+0xf83/0x15b0 [ 512.691607][ T10] ? __pfx__request_firmware+0x10/0x10 [ 512.697088][ T10] ? process_scheduled_works+0x9ec/0x17a0 [ 512.702797][ T10] request_firmware_work_func+0xaf/0x1c0 [ 512.708470][ T10] ? process_scheduled_works+0x9ec/0x17a0 [ 512.714183][ T10] process_scheduled_works+0xadb/0x17a0 [ 512.719796][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 512.725824][ T10] worker_thread+0x8a0/0xda0 [ 512.730414][ T10] kthread+0x70e/0x8a0 [ 512.734466][ T10] ? __pfx_worker_thread+0x10/0x10 [ 512.739595][ T10] ? __pfx_kthread+0x10/0x10 [ 512.744171][ T10] ? __pfx_kthread+0x10/0x10 [ 512.748908][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 512.754099][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.759440][ T10] ? __pfx_kthread+0x10/0x10 [ 512.764019][ T10] ret_from_fork+0x4b/0x80 [ 512.768506][ T10] ? __pfx_kthread+0x10/0x10 [ 512.773084][ T10] ret_from_fork_asm+0x1a/0x30 [ 512.777892][ T10] [ 512.780926][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 512.788203][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 512.800066][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 512.810115][ T10] Workqueue: events request_firmware_work_func [ 512.816264][ T10] Call Trace: [ 512.819530][ T10] [ 512.822444][ T10] dump_stack_lvl+0x99/0x250 [ 512.827023][ T10] ? __asan_memcpy+0x40/0x70 [ 512.831594][ T10] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.836794][ T10] ? __pfx__printk+0x10/0x10 [ 512.841417][ T10] panic+0x2db/0x790 [ 512.845328][ T10] ? __pfx_panic+0x10/0x10 [ 512.849748][ T10] ? show_trace_log_lvl+0x4fb/0x550 [ 512.854954][ T10] ? ret_from_fork_asm+0x1a/0x30 [ 512.859886][ T10] __warn+0x31b/0x4b0 [ 512.863862][ T10] ? kernfs_get+0x72/0x90 [ 512.868185][ T10] ? kernfs_get+0x72/0x90 [ 512.872504][ T10] report_bug+0x2be/0x4f0 [ 512.876818][ T10] ? kernfs_get+0x72/0x90 [ 512.881140][ T10] ? kernfs_get+0x72/0x90 [ 512.885462][ T10] ? kernfs_get+0x74/0x90 [ 512.889782][ T10] handle_bug+0x84/0x160 [ 512.894012][ T10] exc_invalid_op+0x1a/0x50 [ 512.898504][ T10] asm_exc_invalid_op+0x1a/0x20 [ 512.903337][ T10] RIP: 0010:kernfs_get+0x72/0x90 [ 512.908263][ T10] Code: e8 53 b4 64 ff 48 89 df be 04 00 00 00 e8 e6 ab c6 ff f0 ff 03 eb 05 e8 3c b4 64 ff 5b 5d c3 cc cc cc cc cc e8 2f b4 64 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 e5 [ 512.927861][ T10] RSP: 0018:ffffc900000f7680 EFLAGS: 00010293 [ 512.933915][ T10] RAX: ffffffff825b0aa1 RBX: ffff88805cb00b40 RCX: ffff88801b681e00 [ 512.941876][ T10] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 512.949837][ T10] RBP: 0000000000000000 R08: ffff88805cb00b43 R09: 1ffff1100b960168 [ 512.957801][ T10] R10: dffffc0000000000 R11: ffffed100b960169 R12: ffff88801f2cfc28 [ 512.965766][ T10] R13: 1ffff11003e59f86 R14: ffff88801f2cfc30 R15: 1ffff11003e59f85 [ 512.973733][ T10] ? kernfs_get+0x71/0x90 [ 512.978063][ T10] kobject_add_internal+0x632/0xb40 [ 512.983260][ T10] kobject_add+0x155/0x220 [ 512.987667][ T10] ? __pfx_kobject_add+0x10/0x10 [ 512.992600][ T10] ? kobject_init+0x83/0x1e0 [ 512.997183][ T10] get_device_parent+0x316/0x3a0 [ 513.002110][ T10] device_add+0x2e1/0xb50 [ 513.006430][ T10] firmware_fallback_sysfs+0x2e4/0x9b0 [ 513.011889][ T10] _request_firmware+0xf83/0x15b0 [ 513.016926][ T10] ? __pfx__request_firmware+0x10/0x10 [ 513.022378][ T10] ? process_scheduled_works+0x9ec/0x17a0 [ 513.028091][ T10] request_firmware_work_func+0xaf/0x1c0 [ 513.033714][ T10] ? process_scheduled_works+0x9ec/0x17a0 [ 513.039431][ T10] process_scheduled_works+0xadb/0x17a0 [ 513.044997][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 513.050985][ T10] worker_thread+0x8a0/0xda0 [ 513.055582][ T10] kthread+0x70e/0x8a0 [ 513.059648][ T10] ? __pfx_worker_thread+0x10/0x10 [ 513.064748][ T10] ? __pfx_kthread+0x10/0x10 [ 513.069329][ T10] ? __pfx_kthread+0x10/0x10 [ 513.073906][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.079097][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.084281][ T10] ? __pfx_kthread+0x10/0x10 [ 513.088860][ T10] ret_from_fork+0x4b/0x80 [ 513.093264][ T10] ? __pfx_kthread+0x10/0x10 [ 513.097846][ T10] ret_from_fork_asm+0x1a/0x30 [ 513.102609][ T10] [ 513.105854][ T10] Kernel Offset: disabled [ 513.110173][ T10] Rebooting in 86400 seconds..