last executing test programs: 10.091685344s ago: executing program 1 (id=1107): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r0, r0) (async) setpgid(0x0, r0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) (async) wait4(r0, 0x0, 0x2, 0x0) (async) setpgid(0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 9.143467824s ago: executing program 2 (id=1110): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x3, 0xa, 0x2}) (async) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x400, 0x130, 0x0, 0x2c8, 0x230, 0x130, 0x368, 0x368, 0x368, 0x368, 0x368, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x6}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x1d}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x40}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x60, 0x52, 0x1}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) (async) ioctl$VIDIOC_REQBUFS(r4, 0xc0585609, &(0x7f0000000040)={0x0, 0xa, 0x0, 0x0, 0x20}) (async) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x2, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r6, 0x200, &(0x7f0000000080)={0x0, 0x30}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r8) 7.403310863s ago: executing program 1 (id=1114): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) close_range(r0, r0, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) (async) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r2, 0x0, 0x0) madvise(&(0x7f0000e63000/0x4000)=nil, 0x4000, 0x12) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) (async) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000002900)=0x5, 0x2) (async) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000002900)=0x5, 0x2) memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c\x87\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) (async) r4 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c\x87\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc2038"], 0xfebe) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x503d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x90, 0xfe, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x1, 0xd8, {0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0x935}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x9, 0xa}}}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x1, 0x9, 0x7, 0x8, 0x7}, 0x1f, &(0x7f00000001c0)={0x5, 0xf, 0x1f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x5, 0x7, 0x7, 0x2}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0xf, 0x0, 0x6, 0xf0f, 0x9}]}, 0x8, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4001}}, {0xb9, &(0x7f0000000640)=ANY=[@ANYBLOB="b9030c14e75835b193ee78688053fe4ad7f20d236adccd7d779233918fcd9ad6218819f24b05fd4b4b56de9f5bf78bd06ff19955daf2854902c51802346a01906a30359aa6dced9fd5ea23b51bc2d108919eb751fff4f2af2f0b3dbc71727203501bd47ded20c5b7dc952d939b5117dc1218bb8bcb03ec5dc345a9bd4156b55e2781bdebf6a30b2705a372e9fe0aeb111494a2b033b41b17ddb8d67a493a97da3f7f26095edc1ddfd1e7ba7a3b202eaa8d6f238bc08432886a"]}, {0x7a, &(0x7f0000000440)=@string={0x7a, 0x3, "0234b3b0e38e6229fae61724217ac2fbab617050dccc15073f3b3ff062510718cb42f88371407521aeadf5c0c804bef4641099a13710a00cd7e7f2118430cd71e05e6e2331a6864ad0975115dcf0372db1571cd0e440c6dd9d0b61433739445095a6d5d8732afee9b8e1d2a45de4895b8083b9159a9242dd"}}, {0x21, &(0x7f0000000340)=@string={0x21, 0x3, "95848f637744766cc84f1b3fe81995c3db98cea3525d20f8182b5ec95b9534"}}, {0x24, &(0x7f0000000500)=@string={0x24, 0x3, "f76bd05dc9220f529fae3fcdab4d03a90e348713b1601e36883ac63ecf5c8001d5a1"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x100c}}, {0xfc, &(0x7f0000000700)=@string={0xfc, 0x3, "b679b976b26b630b2a37a34cfd240f5f08515e25bc69503cd77f1247df17238ef1af4b085a6d71a4c4a96cfe48ef78fe4a086c50c9d5c888911cae1cd8914b29363cb6d906d976640f752af60c9e9386dc39a67a6c3febd02ba384b3596bef5efcba46002040cad3f505320faa975e454bc978d31b7e3b3cb30267ac016e287ddbbc175d46c0305fe4ef7329659d43d61386f2616e30cbde725ece9e7c81047c7e982277867bf85bdf60e50c41a30f50f427fa3ea76627f77df2cd91fe28905fa9e889678440cd7b1078064d95087165d6c60af2db6a34df71600f5d490e9ce461f4c0b6ea79f3c7a6ef8cca31e2d05d79e8dacb964e795eb35e"}}, {0xa2, &(0x7f0000000880)=@string={0xa2, 0x3, "99c6e75070c63bc8b02930fd40d2d72e5e25b70923a6e8050ae818d6793720da2a21d95aefc474bb4f30c92f42521dd3950063b29b242eea5fc58a6149947683134f61e57f698560938b7d7a7161824e8d80eb9bde5bc4c56c071b9c30997e889290c84bba0f0ff31f8547bb626b2fe538999394857f474a29b012e503f6641299667a7306423f0afbc0e68ad195fa5c89eddef0cb0d294f9388ded68b4e8618"}}]}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) r5 = fsopen(0x0, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) (async) accept4(r6, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a0000000000000000000000080010000000000008000300", @ANYRESOCT=r7], 0x2c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a0000000000000000000000080010000000000008000300", @ANYRESOCT=r7], 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000001b00)={'syzkaller1\x00', &(0x7f0000000380)=@ethtool_rxnfc={0x29, 0x9, 0x2c, {0x5, @sctp_ip4_spec={@multicast1, @empty, 0x4e20, 0x4e21, 0x80}, {0x0, @broadcast, 0x1, 0xff, [0x80, 0x9]}, @ether_spec={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, 0x3877}, {0x0, @remote, 0x2, 0xd, [0x1, 0x8]}, 0x401, 0x7}}}) 7.020089137s ago: executing program 1 (id=1115): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x4}}, 0x20) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000000000000}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0xfffffffd}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1c5) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000700, 0xee00, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x3, {0xa, 0x4e22, 0xec73, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x7}, r3}}, 0x38) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000700)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r7 = dup(r5) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x4}}, 0x651, 0xd}, 0x90) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x50, 0x1, 0x2, 0x6}, {0x6, 0x0, 0xff, 0x2}]}) write$ppp(r4, &(0x7f0000000200)="620f", 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 6.779613433s ago: executing program 0 (id=1117): io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x2}) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x40000000005, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0x0, 0x0, 0x5}, 0x4, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in=@multicast2, 0x20003502, 0x1, 0x8, 0x0, 0x9075}}, 0xe4) (async) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x6}}}, 0x1c) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @local}, 0x10) (async) setsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000080)="5ec78db485c534bdf7a2172f3f1f30da", 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611251000000000061134c0000000000bf2000000000000015000200000000103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) ppoll(&(0x7f0000000040)=[{r3, 0x10026}], 0x1, 0x0, 0x0, 0x0) close(r2) 6.530448442s ago: executing program 0 (id=1118): r0 = userfaultfd(0x80001) (async) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f00000000c0)=0x1) (async) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0xffff, 0x8000, 0x5, 0x722, 0xe72, 0xb0c, 0x8, 0x38, 0xf7b5aa9ce17490a9, {0xefff945a, 0x1}, 0x3, 0xed}}) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) (async) r4 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x62, 0x5, 0x528, 0x0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x4f00, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) bind$packet(r6, &(0x7f0000000500)={0x11, 0x18, r7, 0x1, 0x2, 0x6, @random="d06169e20420"}, 0x14) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) get_mempolicy(0x0, 0x0, 0x8f3f, &(0x7f0000fff000/0x1000)=nil, 0x4) (async, rerun: 64) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000ca91191b7f44c4c373fda900ff7f0000000000000d"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) (async, rerun: 64) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') (rerun: 64) lseek(r9, 0x100, 0x4) (async, rerun: 32) io_uring_setup(0x322c, &(0x7f0000000240)={0x0, 0x6c9c, 0x4000, 0x2, 0x234}) (async, rerun: 32) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010300000000fedbdf250500000008000300", @ANYRES32=r11], 0x1c}, 0x1, 0x0, 0x0, 0x4044041}, 0x20000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) (async) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket(0x2b, 0x3, 0x9) 5.899774714s ago: executing program 2 (id=1119): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) ptrace$peek(0x2, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$mice(0xffffffffffffff9c, 0x0, 0x101) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000340)=0x23) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = socket(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x0, @mcast1, @loopback, [@fragment={0x84, 0x0, 0xa, 0x0, 0x0, 0x7, 0x65}]}}}}}}}, 0x0) (fail_nth: 3) 5.723582516s ago: executing program 2 (id=1120): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180200000800000000000000000000008500000027000000180100002020642500000000002000207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000009b00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x5, 0x0) (async) r1 = socket$kcm(0x10, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000040)='./file0\x00', 0x11e) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014001800000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec5c2ee5a7cef4000000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0xfffffffffffffef5}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014001800000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec5c2ee5a7cef4000000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0xfffffffffffffef5}, 0x0) 5.650675907s ago: executing program 1 (id=1121): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') (async) memfd_create(0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) (async) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) (async) prlimit64(0x0, 0xd, &(0x7f0000000280)={0x9, 0x4000008b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x57e, 0x2019, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0x9, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_usb_ep_write(r3, 0x81, 0x2, &(0x7f0000000100)="817e") (rerun: 32) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async, rerun: 64) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x15}], 0x1}}], 0x1, 0x20008000) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) (async) socket$kcm(0x10, 0xe90d7e3c28e7031, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (async) creat(&(0x7f00000001c0)='./file0\x00', 0x8) 5.560027381s ago: executing program 2 (id=1122): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) pipe2$9p(0x0, 0x4000) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RGETLOCK(r5, &(0x7f0000000480)=ANY=[@ANYRES16=r2], 0x47) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r6, 0x400455c8, 0x2) ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000280)=0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0xff) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000380)=0xff) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000001c0)=0xfe) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.775306766s ago: executing program 2 (id=1123): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) copy_file_range(0xffffffffffffffff, &(0x7f00000008c0)=0xfffffffffffffffc, r2, 0x0, 0x3, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000bc0)="d18a876f8f46c153dde8db040cc7e763ba2fab29aca1a1a2e0a38bc757e61b5aab090000000000000051ed697ff263589940cf437f1efae8e2342bb1adc1c9d8febaecb3aef2d7650869408a287d92d06f5d660a68f3f0a39e926d8dbd6f8d9de335fe4c520feaffc62c3435ab63a2f77234987d3b1130d31bd78fb28883050a1b8dd4ea2cdc62703eb86600dba7da620ad621c21b75893f334cfc82a3931e8cf3", 0xa1}, {0x0}], 0x2) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x8, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) listen(r5, 0x0) 3.711683622s ago: executing program 0 (id=1124): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0800000000000008000000060d000001000000b713d787eb7980055668aac127ce4491572496b0567cf4c251d08dc043189c16ac61d6ae970742", @ANYRES32, @ANYBLOB="00000000000000007be8b0940000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4, @ANYBLOB="080004000001"], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc227, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0xa, "cace"}, @global=@item_4={0x3, 0x1, 0xb, "192ccbb6"}]}}, 0x0}, 0x0) 3.692693209s ago: executing program 3 (id=1125): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) (async) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r1, 0x225, 0x68020}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="0a00180003030303030300002c00700004000500040004000500010001000000040007"], 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r2, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xd, 0x26}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x2004050) 3.43572649s ago: executing program 3 (id=1127): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000540)="c1188e99b95d02ff4284860186dd", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect$uac1(0x2, 0xb2, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902a000030156c0020904000000010100000a24010101bb02010211240601040507000a00080003000200050524050e0f0f2406000504020002000a000900010a24040201039fcc79120924060502010600000924030303030505f50904010000010200000904010101010200000905010920009301090725010003480f0904020000010200000904020101010210000905820920"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x180, 0x0, 0x0) 3.183704171s ago: executing program 4 (id=1128): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x14, 0x2, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4004014}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000d40)) socket$igmp(0x2, 0x3, 0x2) 3.07183385s ago: executing program 4 (id=1129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x40}, 0x10) bind$tipc(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x8}}, 0x10, 0x0}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) fchdir(r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b0f, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='stat\x00') read$FUSE(r6, &(0x7f0000004180)={0x2020}, 0x2020) 1.927534735s ago: executing program 4 (id=1130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, 0x0, 0x40000) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x3}, 0x1c) listen(r1, 0xbf2d) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) (async, rerun: 32) accept4(r1, 0x0, 0x0, 0x0) (rerun: 32) 1.428697957s ago: executing program 1 (id=1131): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0xb7ce0000) r4 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000040)=0xfffffffd, 0x4) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) recvmmsg(r4, &(0x7f0000005100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)=""/4096, 0x1000}, 0x5661}], 0x1, 0x100, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e21, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x6, 0x4f14}, 0x90) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r5, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xc5) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000280)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r0, 0xde34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x12, r7, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="000088640105060003008000060046bf003c00640000020190780a010102f33544be8fac1414bb890384000308907800ae0006471900014404d4900703c400"/79], 0x4a) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 1.320323663s ago: executing program 3 (id=1132): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x39b0, 0x4) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000200)={{0x2, 0x4e20, @local}, {0x6, @remote}, 0x20, {0x2, 0x4e24, @broadcast}, 'xfrm0\x00'}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d8, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfffc, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [0x0, 0xffffff00], [], 'veth1\x00', 'wlan1\x00', {}, {}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.25146819s ago: executing program 0 (id=1133): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x0) (async) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) (async) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x240048cc) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x240048cc) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6}, 0x94) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r7, 0x40046210, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d}, 0x24}}, 0x0) write$vhost_msg(r5, &(0x7f0000000300)={0x1, {&(0x7f00000001c0), 0x0, 0x0, 0x3, 0x3}}, 0x48) (async) write$vhost_msg(r5, &(0x7f0000000300)={0x1, {&(0x7f00000001c0), 0x0, 0x0, 0x3, 0x3}}, 0x48) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="0422100100000000000004090b13aa8d0282051138b86fc717d7e61595b7a08c39c76ae159bec3f923c9b7eb90d82cd6f74cae84f53740409426abf20113fb0074973759e330423d98208de549ca1e859b2f9162ecc21bc743df21b80a0cc37fdd3d399a02d9fea87b832e29109a4e60ea7f2b3934b67f8aa5c06603c536099a147b67a93b51a6cf042610f1b4cb975cb1043500000000000000"], 0x13) 1.111117537s ago: executing program 3 (id=1134): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0xc) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000009cca268c9962ec0b81568b9e74a4f08cdb0d21c5ca34ffe899bc03dab81284db1abfef6358f9218bd15e624bade2373bcd5137c7292f466f860cc2a6", @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="08002201ab02000008002600b81500002c003300e0109e00ffffffffffff08021100000095c2978aa78b08010f037206030303030303750400000300"], 0x58}, 0x1, 0x0, 0x0, 0x40440d5}, 0x0) 942.130911ms ago: executing program 3 (id=1135): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x58, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x30000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x404800d) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 795.623892ms ago: executing program 4 (id=1136): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002080)={r3, &(0x7f0000001000), 0x0}, 0x20) r4 = add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000001240)="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", 0x5c1, r0) keyctl$update(0x2, r4, &(0x7f0000000240)="acb8fb8c9d1e141b4f27961496efdabf0855919880cfadeb8c5991ce880391c8f447ac3053576d71c0d8a0954164aef81534c7532f881ced306549c914db95e1543dd1d0e53cf7fc283e3828918640f2be989fd99c1f386d50990a529138a2fb7881467b52d52b35625018702a3a6158aaa251dea4022ca0205897a8259c8ed82bd77b691113793d9780c4fdcf7465e7f5e9d02ab90c1c6397b47a0b5e895f93a5615910bebfa7f4beb72d8aa6f9aeba2132d6bda9dae72f029b409d16e466ef6e8dc82e624eafe7e9ea7eae87b983bca2c176fdc0dd8fa3106452edcaf39cec79b3b309cf290c652b97a0d1335c11d6dad8510bc65625afad72ac190bdffed1fe565d2a1c3bf80a8aa3c73c553ec83b4d22b5fbb615e8dad256557647ec7df18d4977ee488342b459581045b2aec89aef08086fe107daffbf2fc8eabe397b913a7a8c0b42d7be0531e50d28cfdbdeea433daea16e0d8eda13895c0f59c28fec28750c37ea292b5a77aedbef1ff6d1c6c772ec16d3c8cb122ff4adcb12a95dc72d9f1c43db90f1c89405823b0220bbd84ada37628b729e8f82ba05368d0c1819107df1a1b94e82f6ad7d9029a7a851293d10b7bd090fa61c474a9e4ac831d5f11e5213a70e67d1a113c1804fd3271765da6f3e3b198ec81cc3b9a28e6911444f9dd4be976aaa41bd14096d5346990ec83f320f22877a16edcaca1d3d6c49514560a19218a12b21786f8a8cc66aa936496622ba1232bc7613b5319efde5ec858ca27cc1402750f198241faa46257b94b072d7deeadca73f912a2bea963404ae83f38156d776ce5b6ab5354be8e6c73bdff445fe88aabe3fe4b7734138253dff8aa23eca4bc08328de02aa9ef3ff34829742ba0e8c079714b8b4087d63f2b1bfc60d74a2406e40398cebcf8aee30c1a273fcf4f24ccbf87d222eddce971698010f151cab1d9e826fc6cdbae397bdceffd6b2b0578ec0f2bcd28fb7d0216149a4c9ab848c09933545096d5fbac9852a8980937031b7a93a07f1faaa6aa5eb61ff433c55d9504e93cb609c87b77102cff939386dff77a3860ed8728f14ccdda62cb42a9843cee12e6ed4a5f854c3361b037377365e3bf2885a2413af27a2aad098a5d62e501c61e1a360fd33e026b769a8284d1879811db6f302fd770d743ac2670e6326e0ad14e90c6a28cbfd1ef345db885b458d1c2e9b7e08dc624f57c8e5983a36516f1bc4a2c9c9887fb09677ee794cac583a8061a95dfb355720e5df7d250fe1b9a8560f494c6d10c44e3012bb4baece16e383484940f8bcb3ba4928ab52ddee880035248afdae083b069e72f582444dc4bd192a2d5d83502aca3c594cbb274cbfe741b7ec4c33816aa7ef18330f6c3c989b60d15e4875fd1a2bcd72e2f1b61fafb30c489b039bf67de66cc5a73a4a1d74b764c2ed224d1ba1bd447e1ae90ab62a0eb8c6267cbc5502b9bc742ed06ac5e1564dde874ab61f44421df40c0c22c68bdd6da2c42a6de593fffbcac236721515696aab29fd6619a0c14938fbb945fd0bafe42c5e74080c6acb530d498aa640734867272ad7d63446086967458b3b29ee5d2e474f13ed926928ba00ff2eff5cf164a1d73ab57efb277d9683fd7a1bc96d9861d05341821adf9e4660742d97e7bfa485fd4eda7699fb5b8234c03e3f2f25ed5a52a4b3f62e079ba110638b4622ed11aaf4636eb52249742cdb717f258318107e9c520b5f2eee1dca71dce4fde15a4beed9cca5003cffce9aa1d7fa1de1dfd80aa10beb334488085b8e1556edaa12fc7f05c6be3279c414fd04c6b74f66c89156e732b3f008fe397b137df19cba0eb9cfab82f90c7325241a0519f77cef51ebe9822491b716d90dc7477d8c9f92f74386a8aab524184f38eb5dca0573c8ee65b8fd768999eed112c4193234f2b3fd83536b3a36e6972136a8fa3afdb43f8442299696ff7cce89093e846bb80372882950b7a273279dba0bd38b98a4052dad0ec5827b9bb3b1db4d34002c26c83343efb518c4563ff92753d908c88291bdc76db86e09b9034296194fc80f499a85bc411bf5d0ac8f597d5e6386a99dc1989108d54cbd2cf735d3e0eb1b55be2c7dbd987227fa4d40b74ed3fd4796ebc6b78ab15a38253ab6c58b2fe055ed85c933c4632153e103a7e7ffd23106e1f24476ab4720090274c66e806387f2870b051324e2bb8444b6031ad33b93c8cea53d5ba24f71bcf7b67a771b153c4e158633148bb2bc48ca998fd141a780aa3834ab4f46048b22ac45aba1ffbcfe93971423e8805328a520c4a53bac1590de023ceb1cc2b54a79e8f68ce850ddabd6cba5c39695d120b1e04d1ec111a6fe4b918d7f8e4ff6cc15e11058bb9db5d696c10bba1b9717b9ee7fe2b5537325862fb97223d4e3271b148ccc62a9c57b6122926fc205062f95e345e0ee494aff8094544b7388e3eb896a09be3ff982375f62b5a8f9b3fc33e010023b271eb26964e89570879a161f69c5697c671f55943471752ed3865b0fafa9139cd3b1210e64a1942cb5ee211eb5c506d832af83a0e2949127143187553b8378b8970fe2ac3ff872ac8e1d24a27f0e8fa3e4f1389dac6faccc8798a691283d62f8f37a46b5b61449326712ed9553c834fede17da9c35950026dfbd4bc50951e0debe70b5fcc0c44be67aeb79d73a5b5910cda37427290ed09ef7fad69161cc72f46ab20d6be2c5ce479514817f5345429863f8ced9ed7cd7302076d1d69e76ca0529a8f48912a09b35d4a9815015307819d08666373eb864ab2520583793564a726384e06d759c2047ae47472fc52ce3c2ae77538984ec4d57bdfcb234a32bde305cfa0455c2f807bbd6a7c1c1b55cabb6ed026ce669900f5ea4ca89cc372d1ba8758f732f9cfcf307ec9af3147db86317de69cb70d673eb2fb172303c1486729631af0ee6278b3153c0a63a5da2f8af6fed6bf0cec794b79e2a4cb696ca795bcf5b32c535e5425b7283114901ca4e7818bd7eaa270ba39912662c750ee835cbdce5dde90ba31687459c8a056cce0cc6a64c3ed33cee48cf50fa9ece345b7f115d2aa0df07eff7b30dfa9949474e5883ed6c85c849b9f84b015b20c63ec81eded16aa4a04e8426b08380667a5df84abc76a62864f21ca9b5bf1d54fca9f635f41d547d9cf61641f450c8e7d6a2b17b4dd75bb4618b444142e3de441868e1a6790283c01e51d41579cce50cf37f49843b36ecf9afdbeb8404c2d66dbe7bb0353e610a6027f2162302323388f2a5e0c3fa7e523a0ad5522f6bb60cf2ca89f8c399516129694c052bbe5fb8955eb9a71e44b28fb3e76d49dc342b07bcd91a6ea534d78e9fd454b75d043e39416b205b34f5c3eeb1c7faa75a712ef9de21f8abddea4bcadf8c0ec8a0d04f01874b2bd4ef0dfe8b687ecca0353e9c7624df40ef47c45eb62feb123560f55e6e1f414d42ea23f54e633d8b769cc33ba6a02b7285b0517668b23b7f5d032ab21448b51a06fd1cbce94441d5e4844d8f41cb2b83afd9297be75c2425b667902faa972b36044f45c2c1c8a4c505e6e0eb4a9e79376f2470b789681f44501288d7f85fc46cad233edcfb52990ccdac469943b7e391f6138a64dfe082c27c87bad86b57bdd3ab284e0fe7709866aa7ace28538bc085fb2b355e0232a8807173771afd532290b5dc8548c9b4b2ee3853827c5b6ac901e5854fa0ac9409aa6551970ad2c87e8f761a5b21d9fb863ee4c6bca908c30da24e77dd6b5262e064f69b615dc9edf39fb10ef4c9b4954f6382b4cf82c231c35fb146853ead994fa558d189fe43b08181399fb7b2c9a6fdb2a7ecff1faa24b50cc79eb97e28149823ced10f474df0a2f5c0fdc90ef412d94623f71591df8a579e4fd2d9019ad250e5ec6bcae9194638fa8f757f76b9bb99136e86b78bce79cc86b616ac7062a0cf94bdb9f4da8594e6c890f212dc3d52b2d93c9c14e4f7bf9e8c8a8bf5a8819ba01d327e2fc6ffbd14dcdcb28a318d44d29e6c3146d82c6701b309a046a38c8367afa79fcb9710292d71004902901264beecc1b356555e16bb03362fde0808e7068704b11f68884eea128621bc3b9a5c6ff52f69136e7791432ec5b57b658101ee9c62e7f8ef31fa68ed6648f62fa65d37329362526e509376eb624a6055f21ee1558e4113871720eb6b7ef6f814f2950699828cfd90bb1dcbf0266d7646529efab410ab2b386016441140bc61a82fef0e407d3fff08256ee94dd2ab4893ee8121a2e7f34717182ab52b8d5dd0646a189ff11b2b08400df887274154d436a5a4cecf7463e525aa10c60f71d90cfbd3a02b463081f49b7bb0066b78e1687a8f79d10fdc674f282daddaa48aa748deedc37184a27f0d70922b41c3b5062d718eb1698906fd61f16f589e06034f62076c31496c96878b153589619d9670018cf931a80ffe4a8b4fb523826927750cd95aa2f3d4334a4b621f6ce0e12511869b1b1d1feb7de9427fc53564ef5714c562d51a679917300f4b7bf28064189ba6f9624edea9a60b7d50c172242cc7e792290aa50c19a811bd6ff2e122d1f0cd97a4a9fc3f6ceb1996cf5939ad420a828e5041d8dddf7acc5534fb6eb892881d28b40b105405dcdf9dc8f5180d9a5cc774fd293ee4a356b6760949dc8a6772129c7efdb9bef7c2a4294bf18f7ac0c6f9069ddca25775bb73828f4a601c8dad2b5734106cc3fa173fc8418b1da5c66941f05d8d68bff407f2f82eb3844b297763a9e2b13ea95df06c6927b7ca25d039357ce72c27c4d710be89306b3bdf541cafc0c5a83bc506258b6110a91c51f18fa84d3edeab0ae4ab132e830e53b00df41d1e8e75fbc0265262114b203448bd93b04213dfeebc8b1dc3c16ee6c6e96e8f9db851e63cc90e38e2c81f75a96380ad1b2cb95d213b9f5dfc60dc667d765b5ba6f09b11102c10cbc87a46beddf3a8f2ac08310118f16ed6ff870d609d6872f785e7105130753fc673bc862e645b1edb7f4dce124243e8682e4ded5c6b046fe5bc1d671b0b9373e56a3e8e2a3448085e6a278e1304534083c035e469bc7fa12d3d3f593cd7576820e6ace3a58f715d4a0fd387241ead41391747eeb0746b7872b2d5dedeae0ba6e84f09115969b0d98647c713fb502fc488f9ad77203ef267250e6b218cfaf6383bf5e43440314a502e28ab9365d382f6871a26dcc1af87cad3f823dcb8afbbe74cfb3b5b30e8f73ab43dfc0c52e68062a660d3a37661f8fec3c121d1c44977c2897eb531c784ccecbdf2a524832fa95f96c3f7fda9d746faf1aea725ea05313aeae84c16ffe8e69ed068804b3d04e4605a172b99b29fbe19b97848234e20046e58187e4d43c58cbf87bce8bd2ab8c98c6fd6bf3779afc874ba8278b01df0ebe9f3e57e0f608098cc5778e6270c28253b85a2d9306f4c0638d5f50fd08a53713e5a19908e1e16ff8a23bb8d813219b7d235761aa8515e21fa7b72c4de9778238921d7df3c06bd0fc840e6b0fe1cc352615d5f5853eee3d122eb22c5c5cdb947f269b2459e069afeb9602bab48c4e46fb2acbe842e945dbff87b855cbb0029ce9936505cb1fa6776f10bc355b14578a4c2d94529efe07c126f9d5d1fad4afb4471cf0f878a6e9c32323440a94df88921878012ae206ca6d9e89c7db74d5f4936cfeaf8d4a119fbc9d5a33eed86d0f5eadd4d186b5b69aff6dbbbeff6f547fd2b37c36c624bcefb5c52c9fc8c28120aac21321a8764132c341c5d3f0ecff9f3c7026e38f535e0dc2f7690e73bd5d2589048e554c1e48dd7dbf4724814f7383938f004ffe8970e", 0x1000) 794.422813ms ago: executing program 2 (id=1137): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@empty, 0x0}, &(0x7f0000000140)=0x14) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="a00000001100000125bd7000f1dbdf2507000000", @ANYRES32=r1, @ANYBLOB="00800000809000000800200000000000080029002e0602000800280072d0000008001300", @ANYRES32=r2, @ANYBLOB="24001280110001006272696467655f736c617665000000000c000580050006000100000008000f000f000000140003007663616e3000000000000000000000001d002400aea66d99fc0bb72376a1add8a40a1b66f307d7964de44f9c28000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4048011}, 0x8d0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) r3 = mq_open(&(0x7f00000002c0)='\x00', 0x0, 0x141, &(0x7f0000000300)={0xb, 0x7f, 0xf74, 0xfffffffffffffff7}) mq_timedreceive(r3, &(0x7f0000000340)=""/238, 0xee, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004", @ANYRES32, @ANYBLOB="000000174c926462e3", @ANYRES32], 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x3, 0xa, 0x0, 'queue0\x00'}) r5 = syz_io_uring_setup(0x3d81, &(0x7f00000000c0)={0x0, 0x2818, 0x80, 0x2, 0x36f}, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x4c7c, &(0x7f0000000140)={0x0, 0xfec9, 0x80, 0x2, 0x8, 0x0, r5}, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f000001aa40)=""/102400, 0x19000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x0, 0x0) sendmmsg$inet(r8, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 595.44486ms ago: executing program 4 (id=1138): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xd, 0x5, 0x6, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r6, 0x0) (async) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_SET_FPU(r6, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) (async) r8 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x101000) ioctl$MEDIA_IOC_DEVICE_INFO(r8, 0xc1007c00, &(0x7f0000000100)) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r9 = socket(0x11, 0x2, 0xb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17) pselect6(0x40, &(0x7f0000000080)={0x0, 0x7, 0x0, 0x0, 0x8000, 0x0, 0x9, 0x7}, &(0x7f00000000c0)={0x1f, 0x0, 0x8, 0x2, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x4010000004, 0x10000000}, 0x0, 0x0, 0x0) r10 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0x9, 0x5, 0x38, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x20, 0x40, 0x643da162, 0x5}}) sendmsg$nl_route(r9, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv4_getnetconf={0x2c, 0x52, 0x5, 0x70bd27, 0x25dfdbfd, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x6}, @NETCONFA_IFINDEX={0x8, 0x1, r11}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x95e8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_usb_control_io(r10, &(0x7f00000002c0)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 417.857442ms ago: executing program 0 (id=1139): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r1 = syz_io_uring_setup(0x628e, &(0x7f0000000580)={0x0, 0xe7b9, 0x13500}, &(0x7f0000000240), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000940)={&(0x7f00000008c0)=""/103, 0x100000, 0x800, 0x10000, 0x2}, 0x20) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f0000000040)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r8, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x20000084}}, {{&(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f00000006c0)}, {&(0x7f0000001400)="54861b33e72e969c2e614213dc379b0176a5cf527b0ae9414ae69899fea128aaa0535e7860d4c538bc26758eefe800f558ca2947e7b2e728927eb48b3ece777d59bbb82afbbd0f615f98ab39cc2775990ca6b947f3a219a51c14942080cd1cf3126da2ae42c5b91e82031d75d03709190ffd6ddb912d626526cdab03f695a15cabf50f88db2a63d7ebd06bb0217d5077ed4a07", 0x93}], 0x2, &(0x7f0000001740)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c, 0x1, 0x2, {r6}}}], 0x50, 0x10004000}}, {{&(0x7f00000017c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000280), 0x0, &(0x7f0000001ac0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x24, 0x1, 0x1, [r5, r4, r1, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa0, 0x20000011}}, {{&(0x7f0000001b80)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000001c00)="b704e2c27af66a60917fd7e15ced2b085f6040e0e56f763ac417b662980eed7deab6f2e1e8186381bfdcc28f9ed40f1f5d4ea0615e78074136bf083c0f0f4b60cee965db89af0e27084848b1cb330c90f90a742d3e09934684bac7eaed0ad1af47027285408eeca230ba195d80cf02a8d40669425d9a92931cb2c59ebc9bc6b5424552a2274b601d388507fd95c5a94b79da94017ce599ae526b866a32e5c6a47f403ec223090ee6a484496620d5d50fa2bb012ea2c1a75f2ae568f16a68e945ab58264db30b74b7cfab8d7c7f8fb3fd94a67a", 0xd3}, {&(0x7f0000001d00)="21d9035e0b455d71b8baf6675db260e4f503f78ee97ce3e9ccbbd75f57e6ba2505341e2c9b4f", 0x26}, {&(0x7f0000001d40)="bdd7364a0c7e724b2ed37e45bc8f8b039cb2ac9033ad90d31ab91027e869758d97739e91f81b89d511dce91545108aa7bb9413e91c8b2cc9e50d12ef69bd67a78dfed28ed037cea3f463f9ebbf27a48e6d0f91e67cfce75408e828bc93bcabbf8a0160d1c3c88e16539e1e6b7b9bc36a0da85c084275c34ee21683045e16f16824739458ceff6ef06ee58279bd7a62227a0b60641bffcd3a32a0af4900be84a82122da871c970dbc2f1052af7444bc866ef769bdd131290893b0f00172a5325e1ac072015d15d5bb", 0xc8}, {&(0x7f0000001e40)="cf6c2b90c723b03af2aa56d9558d8239a1ea05da9d3663ea5477cbe2c698befe60cf6d6d831cbeb51a933e27df48a447b311c566b13a5ce79a86866a4047e1b4c95489bbe06151e3614671bdc63f5d73bc12ccb73529cafaf4c35984363398cb952b24a414568fceb3bc243bcce1d1aaf9bb16742e4f107f488cfe000cf75c72e13a19f94f266059b209917029ddfc68b674fd51784671f25361726648e687c0091880e7b31fea4141b6333ec8da6b5480048a894054c39a3df05bd9450dbfd813a3322510c57313f6b64707b0262dedbf88cdc5c2f164713ceeca0df4437be9601533ca14a12c9607c6262b5441ea", 0xef}, {&(0x7f0000001f40)="7e156cce706aeffe5f1ecb394eca4d8141a7da332129b45ef8a769d8467c8e8c08f1450a6903dc19f6b7f68d128a3737b0ae251611f8ebd15c64901803456993b43412025dfd773e9c4c0d83cdedadd4e69b7653f65e163d482dc96a2c49a633bc73008cb978311552e67595ebebef3ca27fb5c9d0440f68e97a5e3991a310f29ddc5f0bbded8113a11a3fc370ba26dca5e22f05ae676602b203352b", 0x9c}, {&(0x7f0000002000)="4beae1b6275caa65307bdd9ffc5c4125450001ed2af3022500f1468101f7afa9728e0e7e27bd7c3a5d40094fa5c48099918e3145d568acb6c91c25be5220ae42d00bdab30e9801e42d85eafb132019ade72d5c33d2824aed39d51f15dd6b377d1dc0f3551602fd59cf553c7ff25f5553d85fe922142a78ad65c2ad01e2bd53286472a9cb4dc779f8b4cde8154e5abf3908ee2a6c516bce1fdce631e9973d5c8af5bb58d047f0991583de1994a16bb3b9ad4f3ba2096c1acea967a5e0be74ce605206", 0xc2}], 0x6, &(0x7f0000002280)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r7, 0xffffffffffffffff, r2]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r4, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x20, 0x1, 0x1, [r4, r1, r0, 0xffffffffffffffff]}}], 0x100, 0x40040}}, {{&(0x7f0000002380)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000002400)="eaddbd20583e257059897fd750ce8a38a0bf68c9aca1861c6d30f000b17dabbc9522a1404e77c30d607542ef22535bbcdb8a0cd2ba6713a4ddd186da67d0429e64578dcd77daf9fc8e1c440ff74db7c7c56d8a3ddb0bf09f35b7d6d0619307dfa7db8abdc11e73c5279417e1a87e1207556ee5616caea8bfed865abd172c9158432dbf", 0x83}, {&(0x7f00000024c0)="f867f79ffcf5a5167276a29838e542d2ff8d2764bde0a9f228902987c48cfcce47617427675ef6966d1c43d637ec1919b39dc20e713c3fc746c4d78848b0076b2080bad14a9b70f8f1504eebf054356960c9a805bc47ba9a45ec385fbe652f5a2921da2a7af52ba67c9e9bed00db3c5e4a83c732a56d4db4f65d341182db52b19e00421b8ae7546b06da577e455a82b726b8062c97480f1cb5d3b2", 0x9b}, {&(0x7f0000002580)="ec45d19b141e041f7053d775d9b89582dd319aa257a65e51d92c18924b041037f88760ce2f5521db6fab1ee96165ff6dd32a8bea3dcbf43d6fde6b2abb315dc162d25ce5eb54eb4e7001e3c0d8608862d1c3282b69cfac1f6e641a282d955b254d09b0dc9f6b854029b7a34244f96233bf348b04173430861a9198d77b816952df5697a95bca2b184d54a98c25f4a5ba6a759a9521be67505ae17046b75973afad874b134e67a3c64fd33ac6748e457768774c691af21475e5a4b99d7bd9d64da2ad5920d74639c5f031abe78ef850680a6013c9402012c5aa9322b0f1d185a534545cc357ece74e7185d5c0455be64093b9c7f8a9281682", 0xf8}, {&(0x7f0000002680)="18ffc9c430c937370b56b51e641811abfa60c7a0d4d629e9767010a74e6d56fe95937e8de481f929c5f533b5c2d86549bafc", 0x32}, {&(0x7f00000026c0)="14cf1d464fa0955036fd2e09c61f8657acf99ae474bda3450cf9160ce923fa0963e8eec916db549dcc1cbd78e37aa0d7da95d088a0acbece73c920f6b33967158c61ae8dad2645ed116b55079ad2c6d90eb93119215b4428d3d2595d4506be445dcff5cd61329a8dab54335168b0b166d8de3ac22a389f10cf6de9c5b49dbadf5e55473999a925bbf2e02b7ef43346561260df440816e7b98c581b5c35b4be191fa13b80859526e2b718c1d56f52854c3751c187f1a77e085b18af668629bd9fbee8f11ed1c9292716b849ad498e0ceeacb33982caf3c3877be5968004ef1ef99a2a00df1012fcd8fe5efde459", 0xed}], 0x5, &(0x7f0000002880)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c}}], 0x40, 0x4014}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000028c0)="b3073ffc148ea2c82017bab5e1214c800a8e8f150cb1f013832a000aa491d6580d74e996165b10c208e90e32e7a41fea4e73952370775666058b9e65f778399c024b242f96dd9e069e6fb74b964bb1ad743761a4e7c9140cf0c2d2e7e34558f8d9eacb5e66bff9d96a260afb4086759078fa517ebe3b8f057465f91c5374df69a92c34821159db3cc0a6f34bd8254ad8ed0aaa468bdca98836", 0x99}, {&(0x7f0000002980)="8be3b3b0b066179ae66a08398d1e9f8fd5dddfe912884c8f08dab2bfcd3d66ac7988785d7b2fee56d64e4c3c434045de08562f6f1ec30dbc2e90d42df11038abf5139068681cef392515bf5c7e77323a2c5ce3c1d5fd444657cb2bb1852fba33807e772038b2c73a1bd6f2f0eb939e7e172c895ba6ad1e4be63789ac2b090584cbbc76ea4c264c08f88651c8ed18fb88ab5050a5ccd695df4a50c2254f6a979be00dea0dfcbac89dbd423e3074bebcb78753bd6170d4a482759d9ce3646e6584acc8e53e59c96bb2", 0xc8}, {&(0x7f0000002a80)="7be5cefc94111ce568c747d39113047ad937c06e4394eaab31835926cf73f182e518d5453d256a5c98f5024790b8c518f45c62e174d06d4c2d8f05cb7fb5de62f6c088f3caba3262bc0bc8167d210f28a7f77510bd619f0606ffcad2f9d896e6a06b8177e8766c4cffd861c56f5ac66d45d76d4025ef1b53086e7c", 0x7b}], 0x3, &(0x7f0000002c00)=[@cred={{0x1c, 0x1, 0x2, {r6}}}], 0x20, 0x801}}, {{&(0x7f00000014c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000006c0), 0x0, &(0x7f0000001680)=[@rights={{0x1c, 0x1, 0x1, [r5, r3, r2]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x18, 0x1, 0x1, [r2, r8]}}], 0x58, 0x4000000}}, {{&(0x7f0000001a40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000060c0)=[{&(0x7f0000002180)="e00190caca75ecf7f4c4f2fca73fdaca0011b0116e8433c89dc496d4ecb6e578a30db78290cbcc609c0e64933c459b4e96bf9150ffc926a977546d4581340c831bfd4e2157ca29def8f8ce0247049d7b809b6c23e6e49e8acd05c048517d6e1af3f6d048526d672a57fc476e6dd38d795726f8931e86fab7f19ac490c6ffa2ef031be3951718f0d7feb5c69916a16e84f1758d40c97290283baf4916ec5ae1d362d3c1d1b46db639da85f9cd462c6dc19073c07732889ca77b09393124c9975a40a5bf748acfa3b74ac446d021b52781f2f57bf2837a683a81b7f41f533c45063bef08b2d82720", 0xe7}, {&(0x7f0000004e00)="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", 0x1000}, {&(0x7f0000001700)="86bd5251e2c7bbc65af65581f095bf7138c126c1150d1e0d95766c86803eb127398e547519d88fedb95b5a36a28cd3d0959c544d", 0x34}, {&(0x7f0000002b40)="4e31a6c254649cbeaf18990bea21e7e22c64c32fdec35215fda5c35a4f5802f52b4c766637728a27a6f08ab3e931053a0f19e1418a18bb0dc645c69e31e8a7ed5b90201772058c26dd52e58436a95330c4119c949faeea863572205607cb57359b64e9c4f9e5f68d34eb61931fec581016977f6d100a4d1c847312", 0x7b}, {&(0x7f0000002840)="517eea173dc8b791", 0x8}, {&(0x7f0000005e00)="adff212acc3abcdf0e2222baf1838b608c215a6a0fb344b3e6beb4136ce4b07498d84fcac379db711f2176c3c0ad82e585a8474e983ed85f7615bf88c982a7e5d3c0ff2f4f2c91235a46bfee62397ec227b6be6882e837", 0x57}, {&(0x7f0000005e80)="08649c82d41a4e4c56f8a0930cb9a1df7a2a093dfae2203425f319408de941e28694cdc55d8b267f4984698c74bb3136adaa77a01fdbad3b19cbc5964559f22a283a4717a4786c88c5ebe2d8469bf2d4ab9053038baf288a3570c9cdb96fdd4fa4840486e78af4d9a2286c5595a277219b7946a57b4c6e93966007cfdaab197e33829521f4cc56db573fb07c119901a96ffdf0cb63ae067e28aa6d1287b478a17e02a82233f06c11bdfaca99d555100a8603ac1b52b608afc3ddc5ecfb07b78fb6781a41e2", 0xc5}, {&(0x7f0000005f80)="c1ecd8d1ddc30eece39cd51983ce6012bab2f87cb73225b4ba27c3f8cd9dceb09d1efe82235e8c3f5499e63f90887c077f26838eaf21211f217d6338effaaef15b290694c6a6bf6e76258bf62f6675666f6af162341dc69877fc5e3eb949611d3368e789773fd978fe59e81db44b0562073027fac73230c59ddc7b93d4a699ff8dfb93805ca05047ac19cf0789dc39924adaf901e5db125f5b2bce052ac53e7c004e4958ba72cb38854611", 0xab}, {&(0x7f0000006040)="274926e8a1e7a3c6493a76ff15045493e57a7db747eafb3f6e485cf6d4aa1e998fb12baf42a5a75e1067e1e18718725438b96859afa821a096b92c97bdb6e979b60b43a5a2b7f46575277d8b90d3f8a59c8de66d31f6b00da34b2f6562a07755beddb38c430d6d41acd3e6c992634d6e30f331a60a08924fb192c4c574", 0x7d}], 0x9, &(0x7f0000001540)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r1, r3, 0xffffffffffffffff, r2, r2, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r2, r3, r5]}}, @rights={{0x18, 0x1, 0x1, [r7, r1]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, r3, r1, r4, r5, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}], 0xd0, 0x14}}, {{&(0x7f00000062c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000007500)=[{&(0x7f0000006340)="7f23ca9cc87b0116869dd9c6b44b7e8c50f98c503e628cd07b70b4c16952ad7cc613961e35e935e0c081cececa6b3dcb7a4c823aa290397662d22f05462f6a22e7d41ff5ac94519c1ec1c841038d110ff9fa1431b2c39357ed8b29eaa7bde240dbc499facd90d5458d2b069a3acbcd4ca48aa890061228545eadeaf391b1ee07bd7cd14dcf33bbe7d17ac83e8c125711f22d93522303f1611edf71e9258d2659ab5c13d8e5198f9bd5057a25266740f5a6d5831a47e2854b36ab47e743a67532baecd40bc032f35a843ba49e8115deb1ff0a686c8853072c8a1682b87aa0ead0dbbed69c8f49fac03dd6e3ac8509a229f3c241a5400a4c5d084ffd131ae5df0d34158c65ddf5d3eb73c0013515f57d08b2e6c90af0e765462ed873f4d792f632bae3b867c7cb0de9a362baa8aa89ab427a639a405c14de74d29519c63d2e57692ce657f510ad88f22819237320db2eaf88810ed1106b86be813f608421ca6473738823bf781e5790ab7882b287d5f365c05e5e1b2f37ac05874b252e88007bc14afd5524552af86a1cce685cd63bcfa067bf943bff1cf6f3b92ca3ee8ec4c3ab1522d149d8fc420f5cd3784f8233aa0bd02b621bbb59552d7af2d1af027a2f070dfcbda49ea8de31c5e93126df6ef3958a74068ce9487f3f9d4fb43d27f4e556e58951762ed3eb04f8cb39df35d500aec357cae242b50949c51d15add3866fa111a5c0bf3b44a41321a38d86d6c8f974512581b2c1d09ef51e6f9a678f0e00421f39527f93ed45ac9824de63272de939b724ea74bc95b048046e9279d285ddc77fa40fb3628af8aafd4fcd7266559fa9688e791f103c55085054e862d4a338aed2521ed74d12810c5b5a0515d09f56b56c00d8612205eed2015f39eb053551ba79577d940465176c86561aef9ac5ccf50dcc37f8b48ea15a3d4bd3af8b415eb77486b441d050b815b4826ea77ba0d4bda62a54840c6b54309a86be200d657485d0692630ac919ee258808d0c7ad0c6d492b68dc3b6c7fc3ddeafdcc3d8ce75b1125bc2d5bfa52f50b9668d404f7f06d78378db757a1f3409e46ab45e6c5b2eab0bd62faffbd151df4f3f423c15137b167694c008a1c18fdabf688ad02c4cfbb460263041e4b52a2330c20e1c7c6ebf004c88a5dad39b1acfc21adc580312fdc5f78dc17abeb656ed1ee81b178374aed18ac04a50bdafe700fafb62e7584562d3bef4f35615e428c9c9528afe5752abeb949c5d0fbfb259afe5cf4edda8c7d211992568a02d30ee9135bc07e475b077cb1d1397daa9e3d9e9029f1c571df22ff8dc65c248a53d81c97360bff38abaf0e7398358c5ac560f395415078f71df134845c9eacca363fcffa81d3845f501cb34e42f8556675896262e7eaf150cf69110d1e7dae2edaf32190b470cb3ffa86edd70a697c2f1b698e97d5d541c05132a1cfa55c1b372bd2e91dd5cba37921766fed76ef2eb0951ffcbd220ee45b6451b891333385eb080f255c4f08f6a3f20e2852966b21a8a64f4c872e5ff351161c4a4899dffd4aebfa0139afbfa122e03c0c11cc270042fc8001b0b3496ee9ef316c0774b7f869562c208a4878139b051b9b4f83fa6b526b3d9473964b91a0c5894cb25e61cf1fc045ff1d4c332760a9200893583992435dd78f300c836da695378f6702dc7fa64a18ed738cf1182acbc9b97875585d285fb46d11e5cc39497c368c33a585ba5d72e636a935a2ad72fc79480481d2a0cd19136fe5fe2083e7b46bb448c62c38abb7ec51d7d496d4adbd8ec9fdd09e08f718e096f65dff697f55e5fe26425e86713aacb4c6cec04cfbddad1d0464ed9ce1fc6edc9179b7dc79c069d3768fe9e9e7da834584c5f2d69167d19ad3fa1f6ef26adbdd004a1b46738b5d1f4e1eb3c72bfbab5ae2f00264fb41739481c641279f3e3c8847d4f5a666d5dafcb984c726cd681a74f5a4e70ab02190a8c5437532147243d81712e58ae85ab061adb29818b6b51d70a0a47803588cc58e153cbc1ef8d17d4210cb11c36880857f817f7fd58da8ccb97db1be0ba4f182403b7ba7e85a94ba288d29bb76ac80f8f5a8c7bab9ab6aec40f23a85a1be642affd5f98671a5830dd483ae237d39e01d92da5b0be573cc0236cba67c67eeef211d958233c6c6d9468c8bc9aa08a3c0ad1c8049f5185ccf2577dd025d38152e5459966bcea94be22e31f62737c75afd0221699301a7c321cc696e650e072c9673b8166ed5405f713cf63d6fc75395fa78eea951a84e39e58c6c9171055b30fa693419b78ad2e2858a3330c831d2c63df33349dde1784362274a5e13887ed7ed45c87398a377cbdd54d7a70499427f01da21ec08d9603a239790172009997ce67302f818e440bf0601a4aef0a7c92974c70e17f529f6fae2d2a6f1d06c34a3a48c973ba87fb2d20daa7d7cb710a7eae65d89b4e364013e76b54461054d467bc82c388993330d24e90f6fe74ddc267747b0ed4e47b8a641fb722b20b6d5841659f8b0eb13fd4f335b5b32334f14130d267e882061f1ea10efc6ca197ce1d4d47d8a2581d8a72d78112c476d994b96a45bba87ff1c162c2c2218d777a8d4aab3d44516a34c43dec0e681a2578ef8e5cb885acc7e42a770f84bd304cac444650114b476bf375aaf572a8c82ca90ea84a116f89f76683dfc1d8f3a50f1f1153da0634af7a8277ac374b24ec8b405eff24f31b0bc485d729b524f22d9ad99db2aaa40acbe2bfb67dbcb060097ea22667d14c9f5c111abd0003c5a60f494a155931a9d1948d4592cc925377b2a8be786d30a7ea1462c02df3d1afc82902253c1d0c98b8f22dd3a158883724ecc57568025913c29c9fb21bbf9c24259a0045f5124b33cc5c619fa66b177bf3d92e6327a4e14abc97a206af97ae80004c8f3f14ab9048f66a9f3c85a4c7edb0853f3c4f38e55dd7322ed3c92429864522e81f34b0a0adf4b9081859dbbbf3a069c759b260e9ad1672f71af21c79ac32d5d58c3f6e7c4eca5e05eb2196e5a4ec85ede74dcf835be2134b0b45fb77e7ca2599517c8ffb2f5708efb451189de3bc1307839c8703ab284b49aa9df4df5311bad3db21d0c98c2f9d72b2dadd21c8f45504964fd6115233f461fc439a1b157729218ff8da7678dfe1f78ac8ec285c69d91ccd6742bd11dd05326c5d1602b5c71c93e04665eb0503724dedf8a9b1a7fc42994bba630e2a3bd7b2ba69a5fac1b1265fc50effd0c144f11d2df627affc3e6f890ac287aa97a4aedbb43e161a45a562f6342772de291330522a02ddb88827d71801499359f62192b8d67d988c3241f6959311b7f4672160cc62049c73b97c4397c5e29c241bbbc89d83a2bdfb7215537535b2f4c68938252336eee6512f5f5609c7ce6f40e4374c652409c2a5e2118e1cbb049b165bfe3b31d67e1d7c89ac40ff2d0be6d4b6d8d7fab01713dbbf71338d94ce48c447fc92800de78a02486e3633c2697d894e38f7819d2aea61def9410248dca0e85d999fe8d6a6390dc4dea4d32f3842ebe501d7487a6a8ac41c0179f92d204248f2c15888a919946227a1525df2e06a590611c8f72517adcea4d4961c37fe640818f61d96693725565acb2fc9852de04c701d550cdb2dfaed550b87ba9f64f4317b2c32f46d80d16991f74e216ea2571ac93e76f0801ed38c80b22afd541e552b12e84e665a2e06d0b01f076cfe966bcab704c012e721a0c199547c898cd82dcff0781d6844efba39ef4c44b79dd9933e8221db2cd3ce9c66517cee951e725fb8374ed789eac9d0af556850cb6bf4e9f8ee8d2d0efbfba7a3c2ac945f34ddab93c96fe1ef548cd2067c28388d40f5b7f5dbbaf3ac73296136351d43c37231e6cb54ac3de3a234108e4e63e6284f175ffbcb70e5ab2ed21d21d7ea77f64fbf337243eef18b9993086d802f08fc95b424ed703d0a03269df8e873e2752e7ec3a9f688a4837bd2033876c2f9d82d6b0d0fb63b0d571ada04533bce84edbec160a4582c5115e0d5c85656562f275522e121050f815f9e5184838730ae8b2e67d38d5d1e3b8c63e829cf7a89c24c76b7b82c8066e99b09cf0029c781d77fcd7afd662c0ea822ee090fd19dff08de864b1483c5749f54d1a65a09ffdf524279de0fb8bd52b373052eb087258e2894efdfb1cc55d9ca07ad07835503f14cfee3dc22e9511a4e5a8f12976e611f06445941d002c64f910d65911288451ccf9d6d3f34bb412e01de2a9a597b91958b270a91e171ca03a11262ec65d9f3a0dd80a22ceb2ebbf906a2bb294b4fa7cd17e9a5013694ea4b1ae9a2a2ad6ec7deb4bd9dcade796cea02bd18ebb0a04056aa153898fc4cf72e802520a5bc64166f03fc21090bf66c4fdaf52ec01411181972571df6044c8a590499904a5f8d7257d0285575642a13c6670908b7e6e7ab29830b7d0ed22d946ee633b27a95f7734f20df83741bc0457684800441f5578393b0a005fa5b4ad74a64b5fe1b03fc27a987c37eeb3f45fef1a693c25278c49bf72d73b11b362981fcc8a3f323023c07d8b926e90e35dddf3e283062dc0e530623f8b8fc7a47eda056da6141b1b35807b69b8fd0326e9ff23f6cf952544b4b779160863a46d3723e62092db1f937c0cc0d8421467df19aa919da2bfc2cbd142e5bf0a8ec9716e31c4826159db6d1ee115461771d83acca5d5a2c093e2f74b3eaef1741fd9282d35526deaf31424ce6d55e9a6d87697ec8a0a46c63c855b64bb37a562c4b386907c1dd35852300de35e8029169a7dc2a768f794b8f322352cd0ea260ccbe0a9a529a51d06a30a5afcf5a8d9eb18a40b8c8b638f26205b5b30bba6d284d4a9184d2fb52cd9e5b0895302508806f62659eb377285f448bc6725a5356d1dce5600c4455805044e547d6fff549835bdb85a99348bd882c8b1df37dc6ca242fdda13bb544c8d932ff6206d5d4dda3c533fae174fc4978c86a51825058109422dbe5b5331392933da0ad5e4b2ac9d3da644afe91c4f1d50e5b61805d4ff5a27400f84a4674732088338081c1057b5ad4850f8168fe6aa2b6283524330d1898bbb9ed857319ef68919b50b7bad0ba8d8581324ec3015604084a8bbdde7c6185a4ff69db49cb42b6cf4f2d2ea9eb90fbf95936662401c880f0af6f4f860300ec376add7114c1a962ed32e09119acc260fd979c84063c9d0fe955e046f02505a2d649868daff7365e1308c219c97bbe6949575688f122d648fb5f6f19ad4a985f9d6666b1290d7bc1ef8eea54e4b2247f26524a8a200bbd8a59fbcc2e81297855016aadb23d012ef03aa6211567cce6a9a8a3f861802cc849dd74f4ba8a68857ea8c08e45b8be61ff76e46e4ea9f9e0d4120d1a2bb325ba2555901971f943583d85f59a74808d8c95c9325d9e8735081b8b8236d529859da3836541d388e5fd34564ecdfd22bed8cbe467db8d2ce9a9a769ed288d78b285e9bae6e79b2e4b3140c8cc54a48d250b83b601814b8aeb0183cb22f0038462a56db3fb0d425d05db39e7916f1a836d28dd1da6805d61da647809bb17a8cf6feeb3a01ca7947c08c3035e901a70d92c1a4d402ca2c71c4ebf722a3fc84e2e5464992768be0dcd44d2eab582c05e49ce575b6bfc3da502b0dc01067991dc41a2580bf412e1b8628712f13d30ed9c2472dc27baffab9b890ec72adf4122766876f391f6ef592ccfd5f534f43a28cb5dd2f966a4e60925df92e9f5e10d5f42bce01ea58a3d56c8a100cabcb9721a5f803476fe0b9c66196643c6b4180b9e2ebc3d16b820e626da65525938f82dbdeb19f25ecfa3e5", 0x1000}, {&(0x7f0000007340)="6688c368512f41f96c36a13636e92be63d7dcc834ea25ca10a46c38a674433c6f81f0ba512cbe6687ffb1adf1882de9b7f8d7584c36c3778f7832ea0337dcf47d85fafbef612d818ee0fde0552cbb36b79732031f7408bc2bed7804ff1d461643695498590dfdd7230312397cbe980437dd46472941b121a700a33e9549668f85e3fcb43ece9e45f124f470bdb4cc3a8029c136be4eba69eea04463dd5a4fa6424e71088d9b4f3d9", 0xa8}, {&(0x7f0000007400)="7d9b459cc08eb19d7465cfd26d9fd50799b80923a88e3f3e8b4bc219ed331af5c513ffb77078f1865c47bf884f38a20e3475913b7bc67ff00f04fc3a6b3dbecffad7cbe842df98c71ec6bddc2feb2e505f42fc8ea74cfc02dcf18f3e17e13b3c4398a0f57f2ee53183f796e7005a6bad86a4849324c61190d99e7956815b309c54a3d93e761f35a40040874b74f514c54d3db70a14a49b19f8ba9996bd159b0693e10705b4450cb5fe8bf33496f1baf445e1e0f89d1521dc0d5985b93e48a79167368d02ac", 0xc5}], 0x3, &(0x7f0000007540)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r3, r4]}}], 0x58, 0x40851}}], 0x9, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f0000000280), 0x0, 0x5, 0x0) (async) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r9, 0xc0045006, &(0x7f0000000080)=0x48) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c000701000000000000000001000000040400800c00018008000600ffff0000080002800400728008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) 235.739665ms ago: executing program 1 (id=1140): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES64=r1, @ANYRES64=0x0, @ANYRES16=r0, @ANYRESDEC=r0], 0x48) r2 = socket$unix(0x1, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1400"/11, @ANYRES64=r2], 0x20) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x10000000, 0x2, 0x4, 0x4000, 0x0, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0xff, 0x20, 0x29, "fafc00"}, 0x0, 0x1, {0x0}}) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$inet6_int(r4, 0x29, 0x3c, 0x0, 0x1b) (async) setsockopt$inet6_int(r4, 0x29, 0x3c, 0x0, 0x1b) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x2, 0x6, &(0x7f0000000040)=[{&(0x7f0000000700)=""/240}, {&(0x7f0000000880)=""/162}], 0x0, 0xd}) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{0x0}], 0x1) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x1) listen(r2, 0x5) (async) listen(r2, 0x5) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0100e1", @ANYRES16=r8, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x20000084}, 0x8000) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0100e1", @ANYRES16=r8, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x20000084}, 0x8000) pselect6(0x40, &(0x7f0000000240)={0x2, 0xfffffffffffffffe, 0x7, 0x3, 0x3, 0x1, 0x100, 0x5}, &(0x7f00000000c0)={0x1d, 0xfffffffffffffffe, 0x40, 0x42007eff, 0x1000000000000000, 0x1, 0x0, 0x8}, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) 135.686218ms ago: executing program 0 (id=1141): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x40384708, &(0x7f0000000080)={0x8, 0x1, 0x609152b0, 0x10000000, 0xe, "3eccd2000500"}) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x0, r2}) syz_usb_connect(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x3e, 0x8, 0x3f, 0x10, 0x4cc, 0x2533, 0xfc58, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x5, 0x9, 0x40, 0x19, [{{0x9, 0x4, 0xa8, 0x7, 0x2, 0x8, 0x55, 0xfe, 0x98, [], [{{0x9, 0x5, 0x67037027c940c0eb, 0x2, 0x400, 0x2, 0x2, 0x5}}, {{0x9, 0x5, 0x4, 0x12, 0x3ff, 0x8, 0x9, 0x23}}]}}]}}]}}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) fchdir(r0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSETS(r1, 0x40384708, &(0x7f0000000080)={0x8, 0x1, 0x609152b0, 0x10000000, 0xe, "3eccd2000500"}) (async) eventfd2(0x1, 0x1) (async) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x0, r2}) (async) syz_usb_connect(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x3e, 0x8, 0x3f, 0x10, 0x4cc, 0x2533, 0xfc58, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x5, 0x9, 0x40, 0x19, [{{0x9, 0x4, 0xa8, 0x7, 0x2, 0x8, 0x55, 0xfe, 0x98, [], [{{0x9, 0x5, 0x67037027c940c0eb, 0x2, 0x400, 0x2, 0x2, 0x5}}, {{0x9, 0x5, 0x4, 0x12, 0x3ff, 0x8, 0x9, 0x23}}]}}]}}]}}, 0x0) (async) 129.756214ms ago: executing program 4 (id=1142): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002140)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x4000102, 0x407, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xb, 0x5}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r12}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r13, 0x108, 0xe, 0x2f, &(0x7f0000000200)="63eced8e46dc3f13df33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010027bd7000000000000c000000180001801400020076657468315f746f5f626174616476006800038064000380100001800800010002000000040003"], 0x94}}, 0x804) syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6900000000140600fe80000000000000000000000000c8dfc6"], 0x0) 0s ago: executing program 3 (id=1143): syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3) sched_setscheduler(r1, 0xf1d57a79276f54a5, &(0x7f0000000180)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x40000002, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x101c, 0x3, 0xc, 0x2, 0x0, 0x5}}) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r4, 0x8949, &(0x7f0000000000)) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x400000000, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 4 [ 293.967199][ T5979] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 295.667977][ T8036] tipc: New replicast peer: 172.30.0.4 [ 295.691176][ T5979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.702008][ T8036] tipc: Enabled bearer , priority 10 [ 295.751325][ T5979] usb 1-1: config 0 descriptor?? [ 295.768798][ T5979] usb 1-1: can't set config #0, error -71 [ 295.785056][ T5979] usb 1-1: USB disconnect, device number 13 [ 296.836296][ T5979] tipc: Node number set to 1406247262 [ 298.427557][ T5923] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 298.646382][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 298.679325][ T5923] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 298.748684][ T5923] usb 5-1: config 0 has no interface number 0 [ 298.776950][ T5923] usb 5-1: config 0 interface 184 has no altsetting 0 [ 298.805130][ T5923] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 298.827964][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.840780][ T5923] usb 5-1: Product: syz [ 298.845000][ T5923] usb 5-1: Manufacturer: syz [ 298.857607][ T5923] usb 5-1: SerialNumber: syz [ 298.868121][ T5923] usb 5-1: config 0 descriptor?? [ 298.875764][ T5923] smsc75xx v1.0.0 [ 299.447606][ T5923] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 299.515125][ T5923] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 299.563315][ T5923] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 299.617206][ T5923] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 299.953979][ T8096] xt_CT: You must specify a L4 protocol and not use inversions on it [ 301.470476][ T5979] usb 5-1: USB disconnect, device number 21 [ 301.571180][ T8104] tipc: Started in network mode [ 301.597695][ T8104] tipc: Node identity ac14140f, cluster identity 4711 [ 301.609734][ T8104] tipc: New replicast peer: 172.30.0.3 [ 301.623815][ T8104] tipc: Enabled bearer , priority 10 [ 301.645500][ T8109] input: syz1 as /devices/virtual/input/input14 [ 301.659722][ T8108] netlink: 'syz.0.553': attribute type 29 has an invalid length. [ 301.717526][ T8108] netlink: 'syz.0.553': attribute type 29 has an invalid length. [ 301.746178][ T8109] tipc: Enabled bearer , priority 0 [ 301.760474][ T8109] syzkaller0: entered promiscuous mode [ 301.783492][ T8109] syzkaller0: entered allmulticast mode [ 301.991582][ T8109] tipc: Resetting bearer [ 302.041905][ T8105] tipc: Resetting bearer [ 302.514144][ T8105] tipc: Disabling bearer [ 302.567963][ T5979] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 302.617487][ T5897] tipc: Node number set to 2886997007 [ 302.719728][ T8124] ISOFS: Unable to identify CD-ROM format. [ 302.732072][ T8123] ISOFS: Unable to identify CD-ROM format. [ 302.776990][ T5979] usb 3-1: config 0 has an invalid interface number: 176 but max is 0 [ 302.796466][ T5979] usb 3-1: config 0 has no interface number 0 [ 302.823165][ T5979] usb 3-1: config 0 interface 176 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.347511][ T5979] usb 3-1: config 0 interface 176 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.357903][ T5979] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 303.371820][ T5979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.382614][ T5979] usb 3-1: config 0 descriptor?? [ 303.398713][ T8135] IPv6: addrconf: prefix option has invalid lifetime [ 303.407481][ T5897] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 303.448794][ T8135] max out of range [ 303.617488][ T5897] usb 1-1: Using ep0 maxpacket: 32 [ 303.641726][ T5897] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 303.690295][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.733393][ T5897] usb 1-1: config 0 descriptor?? [ 303.768219][ T5897] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 303.961636][ T5897] gspca_nw80x: reg_w err -71 [ 303.966530][ T5897] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 303.994949][ T5897] usb 1-1: USB disconnect, device number 14 [ 304.019201][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 304.031595][ T5979] usbhid 3-1:0.176: can't add hid device: -71 [ 304.039355][ T5979] usbhid 3-1:0.176: probe with driver usbhid failed with error -71 [ 304.227526][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 304.256687][ T5979] usb 3-1: USB disconnect, device number 25 [ 304.438579][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 304.539432][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 304.665584][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 304.685928][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 304.728376][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 304.765855][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 304.795557][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.310092][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 305.516116][ T10] usbtmc 5-1:16.0: can't read capabilities [ 305.673557][ T8158] loop2: detected capacity change from 0 to 7 [ 305.693802][ T8158] loop2: p1 [ 305.697622][ T8158] loop2: partition table partially beyond EOD, truncated [ 305.705148][ T8158] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 305.719392][ T8160] netlink: 'syz.1.570': attribute type 39 has an invalid length. [ 306.139357][ T5923] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 306.426198][ T5923] usb 2-1: config 1 has an invalid descriptor of length 246, skipping remainder of the config [ 306.715520][ T8177] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 306.746108][ T43] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 306.784327][ T5923] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 306.833052][ T5923] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 306.900435][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.923829][ T5923] usb 2-1: Product: syz [ 306.938931][ T5923] usb 2-1: Manufacturer: syz [ 306.952136][ T5923] usb 2-1: SerialNumber: syz [ 306.963348][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 306.993577][ T5923] cdc_ether 2-1:1.0: skipping garbage [ 307.011332][ T43] usb 4-1: config 1 has an invalid interface number: 88 but max is 1 [ 307.027594][ T5923] usb 2-1: bad CDC descriptors [ 307.045193][ T43] usb 4-1: config 1 has no interface number 1 [ 307.198374][ T2151] usb 2-1: USB disconnect, device number 20 [ 307.272166][ T43] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 307.287042][ T43] usb 4-1: config 1 interface 0 has no altsetting 0 [ 307.297644][ T43] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 307.317494][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.325853][ T43] usb 4-1: Product: syz [ 307.347437][ T43] usb 4-1: Manufacturer: syz [ 307.352186][ T43] usb 4-1: SerialNumber: syz [ 307.458847][ T2151] usb 5-1: USB disconnect, device number 22 [ 307.482246][ T8191] netlink: 'syz.2.577': attribute type 49 has an invalid length. [ 307.643693][ T8196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.578'. [ 307.659061][ T8196] chnl_net:caif_netlink_parms(): no params data found [ 308.057501][ T8208] loop2: detected capacity change from 0 to 7 [ 308.090315][ T8208] loop2: p1 [ 308.095483][ T8208] loop2: partition table partially beyond EOD, truncated [ 308.109554][ T8208] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 308.421232][ T8216] netlink: 'syz.2.584': attribute type 21 has an invalid length. [ 308.430343][ T8216] netlink: 6 bytes leftover after parsing attributes in process `syz.2.584'. [ 309.085363][ T43] smsusb:smsusb_probe: board id=8, interface number 0 [ 309.177117][ T43] smsusb:smsusb_probe: board id=8, interface number 88 [ 309.232433][ T43] usb 4-1: USB disconnect, device number 24 [ 309.350086][ T8226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.585'. [ 309.557718][ T1209] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 310.180561][ T1209] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 310.202143][ T1209] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 310.228626][ T1209] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 310.249842][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.281694][ T8225] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 310.301507][ T1209] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 312.328246][ T5979] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 312.353625][ T10] usb 3-1: USB disconnect, device number 26 [ 312.537796][ T5979] usb 2-1: Using ep0 maxpacket: 16 [ 312.570278][ T5979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.596664][ T5979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.617627][ T5979] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 312.664921][ T5979] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 312.692630][ T5979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.745940][ T5979] usb 2-1: config 0 descriptor?? [ 313.224002][ T5979] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 313.244462][ T5979] microsoft 0003:045E:07DA.0009: no inputs found [ 313.251226][ T5979] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 313.359036][ T8258] FAULT_INJECTION: forcing a failure. [ 313.359036][ T8258] name failslab, interval 1, probability 0, space 0, times 0 [ 313.372479][ T8258] CPU: 1 UID: 0 PID: 8258 Comm: syz.3.597 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 313.372509][ T8258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 313.372536][ T8258] Call Trace: [ 313.372546][ T8258] [ 313.372556][ T8258] dump_stack_lvl+0x189/0x250 [ 313.372588][ T8258] ? __pfx____ratelimit+0x10/0x10 [ 313.372613][ T8258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.372638][ T8258] ? __pfx__printk+0x10/0x10 [ 313.372674][ T8258] ? __pfx___might_resched+0x10/0x10 [ 313.372698][ T8258] ? fs_reclaim_acquire+0x7d/0x100 [ 313.372730][ T8258] should_fail_ex+0x414/0x560 [ 313.372760][ T8258] should_failslab+0xa8/0x100 [ 313.372787][ T8258] kmem_cache_alloc_noprof+0x73/0x3c0 [ 313.372808][ T8258] ? alloc_empty_file+0x55/0x1d0 [ 313.372841][ T8258] alloc_empty_file+0x55/0x1d0 [ 313.372870][ T8258] alloc_file_pseudo+0x13d/0x210 [ 313.372901][ T8258] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 313.372927][ T8258] ? evm_inode_alloc_security+0x40/0xb0 [ 313.372955][ T8258] ? security_inode_alloc+0xd5/0x330 [ 313.373000][ T8258] sock_alloc_file+0xb8/0x2e0 [ 313.373030][ T8258] do_accept+0x34b/0x680 [ 313.373065][ T8258] ? __pfx_do_accept+0x10/0x10 [ 313.373120][ T8258] __sys_accept4+0x11c/0x1c0 [ 313.373153][ T8258] ? __pfx___sys_accept4+0x10/0x10 [ 313.373183][ T8258] ? __pfx_ksys_write+0x10/0x10 [ 313.373201][ T8258] ? rcu_is_watching+0x15/0xb0 [ 313.373233][ T8258] __x64_sys_accept4+0x9a/0xb0 [ 313.373265][ T8258] do_syscall_64+0xfa/0x3b0 [ 313.373296][ T8258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.373318][ T8258] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 313.373339][ T8258] ? clear_bhb_loop+0x60/0xb0 [ 313.373374][ T8258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.373395][ T8258] RIP: 0033:0x7f783558eb69 [ 313.373415][ T8258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.373435][ T8258] RSP: 002b:00007f783637e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 313.373459][ T8258] RAX: ffffffffffffffda RBX: 00007f78357b6160 RCX: 00007f783558eb69 [ 313.373475][ T8258] RDX: 00002000000000c0 RSI: 0000200000000240 RDI: 0000000000000008 [ 313.373490][ T8258] RBP: 00007f783637e090 R08: 0000000000000000 R09: 0000000000000000 [ 313.373504][ T8258] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 313.373517][ T8258] R13: 0000000000000000 R14: 00007f78357b6160 R15: 00007fffa83eb1f8 [ 313.373552][ T8258] [ 314.140857][ T43] usb 2-1: USB disconnect, device number 21 [ 315.616185][ T8271] xt_CT: You must specify a L4 protocol and not use inversions on it [ 315.625921][ T8259] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 316.719779][ T10] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 317.007133][ T8293] netlink: 60 bytes leftover after parsing attributes in process `syz.4.607'. [ 317.018417][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.607'. [ 317.028418][ T8293] Device name cannot be null; rc = [-22] [ 317.792368][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.881817][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.606'. [ 317.914578][ T8299] FAULT_INJECTION: forcing a failure. [ 317.914578][ T8299] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 317.928497][ T8299] CPU: 0 UID: 0 PID: 8299 Comm: syz.2.606 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 317.928527][ T8299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 317.928540][ T8299] Call Trace: [ 317.928549][ T8299] [ 317.928559][ T8299] dump_stack_lvl+0x189/0x250 [ 317.928589][ T8299] ? __pfx____ratelimit+0x10/0x10 [ 317.928614][ T8299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.928640][ T8299] ? __pfx__printk+0x10/0x10 [ 317.928683][ T8299] should_fail_ex+0x414/0x560 [ 317.928712][ T8299] _copy_to_user+0x31/0xb0 [ 317.928747][ T8299] simple_read_from_buffer+0xe1/0x170 [ 317.928777][ T8299] proc_fail_nth_read+0x1df/0x250 [ 317.928808][ T8299] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 317.928840][ T8299] ? rw_verify_area+0x258/0x650 [ 317.928881][ T8299] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 317.928911][ T8299] vfs_read+0x200/0x980 [ 317.928952][ T8299] ? __pfx___mutex_lock+0x10/0x10 [ 317.928978][ T8299] ? __pfx_vfs_read+0x10/0x10 [ 317.929014][ T8299] ? __fget_files+0x2a/0x420 [ 317.929045][ T8299] ? __fget_files+0x3a0/0x420 [ 317.929069][ T8299] ? __fget_files+0x2a/0x420 [ 317.929104][ T8299] ksys_read+0x145/0x250 [ 317.929128][ T8299] ? __pfx_ksys_read+0x10/0x10 [ 317.929145][ T8299] ? rcu_is_watching+0x15/0xb0 [ 317.929177][ T8299] ? do_syscall_64+0xbe/0x3b0 [ 317.929206][ T8299] do_syscall_64+0xfa/0x3b0 [ 317.929229][ T8299] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.929252][ T8299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.929275][ T8299] ? clear_bhb_loop+0x60/0xb0 [ 317.929303][ T8299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.929324][ T8299] RIP: 0033:0x7fd78358d57c [ 317.929344][ T8299] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 317.929363][ T8299] RSP: 002b:00007fd784446030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 317.929386][ T8299] RAX: ffffffffffffffda RBX: 00007fd7837b6160 RCX: 00007fd78358d57c [ 317.929402][ T8299] RDX: 000000000000000f RSI: 00007fd7844460a0 RDI: 000000000000000c [ 317.929416][ T8299] RBP: 00007fd784446090 R08: 0000000000000000 R09: 0000000000000000 [ 317.929430][ T8299] R10: 0000000000000042 R11: 0000000000000246 R12: 0000000000000001 [ 317.929443][ T8299] R13: 0000000000000000 R14: 00007fd7837b6160 R15: 00007ffd93bdc988 [ 317.929478][ T8299] [ 318.168679][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.410702][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 318.419798][ T10] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 318.436980][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.449973][ T10] usb 2-1: config 0 descriptor?? [ 318.463075][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 318.475447][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 318.484663][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 318.667706][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 319.407546][ T8282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.416326][ T8282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.437591][ T10] usb 2-1: media controller created [ 319.483020][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 319.522502][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 319.545468][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 319.610179][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 319.684942][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 319.987417][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 319.997610][ T10] usb 2-1: USB disconnect, device number 22 [ 320.128129][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 320.342097][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.613'. [ 320.351492][ T30] audit: type=1400 audit(1754231419.449:217): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8319 comm="syz.0.613" saddr=172.30.0.1 daddr=172.20.20.170 netif=wpan0 [ 322.512066][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.519747][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.064021][ T8342] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 325.964611][ T8355] autofs4:pid:8355:validate_dev_ioctl: path string terminator missing for cmd(0xc0189374) [ 326.783680][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'. [ 326.968005][ T43] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 327.137453][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 327.188537][ T43] usb 3-1: config 130 has an invalid interface number: 240 but max is 1 [ 327.244059][ T43] usb 3-1: config 130 contains an unexpected descriptor of type 0x2, skipping [ 327.467681][ T43] usb 3-1: config 130 has an invalid interface number: 7 but max is 1 [ 327.519086][ T43] usb 3-1: config 130 has no interface number 0 [ 327.562539][ T43] usb 3-1: config 130 has no interface number 1 [ 327.623847][ T43] usb 3-1: config 130 interface 240 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 327.669256][ T43] usb 3-1: config 130 interface 240 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 327.773422][ T43] usb 3-1: config 130 interface 240 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 327.831085][ T43] usb 3-1: config 130 interface 240 altsetting 1 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 327.847781][ T8385] netlink: 161716 bytes leftover after parsing attributes in process `syz.3.629'. [ 327.906787][ T43] usb 3-1: config 130 interface 240 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 328.020556][ T43] usb 3-1: config 130 interface 240 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 328.114908][ T43] usb 3-1: config 130 interface 240 altsetting 1 has a duplicate endpoint with address 0x89, skipping [ 328.146583][ T43] usb 3-1: config 130 interface 240 altsetting 1 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 328.181338][ T43] usb 3-1: config 130 interface 240 altsetting 1 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 328.228334][ T43] usb 3-1: config 130 interface 7 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 328.242529][ T43] usb 3-1: config 130 interface 7 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 328.254358][ T43] usb 3-1: config 130 interface 7 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 328.270108][ T43] usb 3-1: config 130 interface 240 has no altsetting 0 [ 328.285486][ T43] usb 3-1: config 130 interface 7 has no altsetting 0 [ 328.304204][ T43] usb 3-1: New USB device found, idVendor=0856, idProduct=ac02, bcdDevice=3d.49 [ 328.316169][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.326042][ T43] usb 3-1: Product: 핵ஜîŸè¨éº’阽꾔䇖苿å…뾘籟⃣퓱㨎♑㶶檆튋뉉혬䡯ⳉꂧ濫˥䙘肣顦机袃좵뱋쒑묉䖵脌鉘㮂烫é»î“°äꦶ蚽﫥쫭ä«åš½é°¶ç½¦áŽ¬ãš‘êºèŽ±ã²¼ï«¸ì²“様檠궂⩃䣦í›á¤­à¾ [ 328.326081][ T43] usb 3-1: Manufacturer: ä Š [ 328.326100][ T43] usb 3-1: SerialNumber: à¡  [ 328.348998][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.478335][ T8407] netlink: 'syz.0.634': attribute type 1 has an invalid length. [ 329.502937][ T43] ftdi_sio 3-1:130.240: FTDI USB Serial Device converter detected [ 329.512402][ T43] ftdi_sio ttyUSB0: unknown device type: 0x3d49 [ 329.573566][ T8407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.589142][ T43] ftdi_sio 3-1:130.7: FTDI USB Serial Device converter detected [ 329.612206][ T43] ftdi_sio ttyUSB1: unknown device type: 0x3d49 [ 329.676565][ T43] usb 3-1: USB disconnect, device number 27 [ 329.678538][ T8407] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 329.721190][ T43] ftdi_sio 3-1:130.240: device disconnected [ 329.775960][ T8409] bond0: (slave veth3): Enslaving as an active interface with a down link [ 329.824491][ T8412] vlan2: entered allmulticast mode [ 329.851820][ T8412] veth0_to_bond: entered allmulticast mode [ 329.879337][ T8412] bond0: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 329.956016][ T43] ftdi_sio 3-1:130.7: device disconnected [ 329.982385][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.637'. [ 330.006702][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.637'. [ 330.583379][ T5897] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 330.591478][ T30] audit: type=1400 audit(1754231429.109:218): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8414 comm="syz.1.637" saddr=172.30.0.2 daddr=172.20.20.170 netif=gre0 [ 330.611688][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.617839][ T5979] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 330.903380][ T5979] usb 5-1: Using ep0 maxpacket: 16 [ 330.919208][ T5897] usb 1-1: unable to get BOS descriptor or descriptor too short [ 330.931585][ T5897] usb 1-1: not running at top speed; connect to a high speed hub [ 331.652690][ T5897] usb 1-1: config 3 has an invalid interface number: 29 but max is 0 [ 331.671231][ T5979] usb 5-1: device descriptor read/all, error -71 [ 331.701835][ T5897] usb 1-1: config 3 has no interface number 0 [ 331.741621][ T5897] usb 1-1: config 3 interface 29 has no altsetting 0 [ 331.770902][ T5897] usb 1-1: New USB device found, idVendor=2639, idProduct=0017, bcdDevice=fe.6f [ 331.798630][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.817086][ T5897] usb 1-1: Product: syz [ 331.833615][ T5897] usb 1-1: Manufacturer: syz [ 331.856941][ T5897] usb 1-1: SerialNumber: syz [ 332.366799][ T5897] usb 1-1: USB disconnect, device number 15 [ 332.666752][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.641'. [ 334.137582][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 335.217687][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 335.300296][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 335.318440][ T8458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'. [ 335.327798][ T9] usb 5-1: can't read configurations, error -61 [ 335.518272][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 335.707468][ T5979] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 336.707673][ T5979] usb 3-1: Using ep0 maxpacket: 32 [ 336.725788][ T5979] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 336.741996][ T5979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.812916][ T5979] usb 3-1: config 0 descriptor?? [ 336.840272][ T5979] gspca_main: sunplus-2.14.0 probing 041e:400b [ 337.247543][ T9] usb 5-1: device descriptor read/64, error -71 [ 337.295859][ T5979] gspca_sunplus: reg_w_riv err -71 [ 337.318848][ T5979] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 337.357994][ T9] usb usb5-port1: attempt power cycle [ 337.476699][ T5979] usb 3-1: USB disconnect, device number 28 [ 337.877440][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 337.911291][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 337.942946][ T9] usb 5-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 337.971799][ T9] usb 5-1: New USB device strings: Mfr=249, Product=255, SerialNumber=3 [ 337.980902][ T9] usb 5-1: Product: syz [ 338.000011][ T9] usb 5-1: Manufacturer: syz [ 338.033703][ T9] usb 5-1: SerialNumber: syz [ 338.078527][ T9] usb 5-1: config 0 descriptor?? [ 338.676497][ T9] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 342.338213][ T9] usb 5-1: reset high-speed USB device number 27 using dummy_hcd [ 344.260969][ T8525] loop2: detected capacity change from 0 to 7 [ 344.287264][ T9] usb 5-1: [UEAGLE-ATM] interface 1 not found [ 344.307457][ T9] ueagle-atm 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 344.307780][ T8525] loop2: p1 [ 344.319006][ T9] usb 5-1: USB disconnect, device number 27 [ 344.374198][ T8525] loop2: partition table partially beyond EOD, truncated [ 344.442237][ T8525] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 344.587880][ T7815] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 344.737787][ T7815] usb 1-1: device descriptor read/64, error -71 [ 345.007441][ T7815] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 345.987525][ T7815] usb 1-1: device descriptor read/64, error -71 [ 346.137874][ T7815] usb usb1-port1: attempt power cycle [ 346.537405][ T7815] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 347.669005][ T8556] program syz.0.673 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.748944][ T8561] 9pnet_fd: Insufficient options for proto=fd [ 347.820074][ T7815] usb 1-1: device not accepting address 18, error -71 [ 348.944964][ T8571] loop2: detected capacity change from 0 to 7 [ 348.972057][ T8573] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.679'. [ 348.988818][ T8571] loop2: p1 [ 348.994411][ T8571] loop2: partition table partially beyond EOD, truncated [ 348.997726][ T8575] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.679'. [ 349.015632][ T8571] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 349.157723][ T30] audit: type=1400 audit(1754231448.219:219): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8564 comm="syz.3.677" saddr=172.30.0.4 daddr=172.20.20.170 netif=wpan0 [ 350.393350][ T5979] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 350.457449][ T5897] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 350.597080][ T8590] netlink: 48 bytes leftover after parsing attributes in process `syz.0.683'. [ 350.631106][ T8590] netlink: 48 bytes leftover after parsing attributes in process `syz.0.683'. [ 350.651146][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 350.710984][ T5897] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.776359][ T5897] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 350.842537][ T5897] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 350.895790][ T5897] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 350.980240][ T5897] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 351.023578][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 351.050812][ T5897] usb 2-1: SerialNumber: syz [ 351.092129][ T8587] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 351.109853][ T8587] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 351.153512][ T5897] hub 2-1:1.0: bad descriptor, ignoring hub [ 351.180664][ T5897] hub 2-1:1.0: probe with driver hub failed with error -5 [ 351.459090][ T8587] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 352.348029][ T8587] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 352.749610][ T5897] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 352.988389][ T7815] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 353.212901][ T7815] usb 5-1: Using ep0 maxpacket: 8 [ 353.402304][ T7815] usb 5-1: config 0 has an invalid interface number: 130 but max is 0 [ 353.434752][ T7815] usb 5-1: config 0 has no interface number 0 [ 353.452574][ T7815] usb 5-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 353.464822][ T7815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.479860][ T7815] usb 5-1: Product: syz [ 353.480385][ T8605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.687'. [ 353.484471][ T7815] usb 5-1: Manufacturer: syz [ 353.502505][ T7815] usb 5-1: SerialNumber: syz [ 353.507911][ T2151] usb 2-1: USB disconnect, device number 23 [ 353.521215][ T2151] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 353.522462][ T7815] usb 5-1: config 0 descriptor?? [ 353.573973][ T7815] as10x_usb: device has been detected [ 353.592074][ T7815] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 353.665072][ T7815] usb 5-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 353.715906][ T7815] as10x_usb: error during firmware upload part1 [ 353.731832][ T7815] Registered device PCTV Systems picoStick (74e) [ 354.247575][ T7815] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 355.712755][ T7815] usb 4-1: Using ep0 maxpacket: 16 [ 355.738503][ T7815] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.762437][ T7815] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 355.834986][ T43] usb 5-1: USB disconnect, device number 28 [ 355.869882][ T7815] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 355.905220][ T8626] afs: Unknown parameter 'autoc÷¢3H•EÏΧó ell' [ 355.911802][ T7815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.923561][ T43] Unregistered device PCTV Systems picoStick (74e) [ 355.927890][ T43] as10x_usb: device has been disconnected [ 355.961551][ T7815] usb 4-1: Product: syz [ 355.965796][ T7815] usb 4-1: Manufacturer: syz [ 356.010432][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'. [ 356.018414][ T7815] usb 4-1: SerialNumber: syz [ 356.912202][ T8611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.986210][ T8611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.987922][ T8643] netlink: 144 bytes leftover after parsing attributes in process `syz.4.694'. [ 357.043072][ T8631] team0: Port device team_slave_0 removed [ 357.145587][ T7815] usb 4-1: 0:2 : does not exist [ 357.217840][ T7815] usb 4-1: USB disconnect, device number 27 [ 357.295477][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.696'. [ 357.567436][ T5979] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 357.831873][ T5979] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 357.851743][ T5979] usb 3-1: config 0 has no interface number 0 [ 357.872640][ T8665] netlink: 'syz.0.700': attribute type 21 has an invalid length. [ 357.880877][ T8665] netlink: 6 bytes leftover after parsing attributes in process `syz.0.700'. [ 357.881974][ T8664] xt_CT: You must specify a L4 protocol and not use inversions on it [ 358.448861][ T5979] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 358.516878][ T5979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.546941][ T5979] usb 3-1: Product: syz [ 358.551190][ T5979] usb 3-1: Manufacturer: syz [ 358.556132][ T5979] usb 3-1: SerialNumber: syz [ 358.567130][ T5979] usb 3-1: config 0 descriptor?? [ 358.807792][ T5979] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 358.826350][ T5979] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 358.837431][ T5979] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 358.845645][ T5979] usb 3-1: media controller created [ 358.908117][ T5979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 359.036867][ T7815] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 359.196924][ T7815] usb 1-1: Using ep0 maxpacket: 32 [ 359.221162][ T7815] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 359.234600][ T7815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.282948][ T7815] usb 1-1: config 0 descriptor?? [ 360.249004][ T5979] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 360.277734][ T7815] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 360.334409][ T7815] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 360.338906][ T5979] usb 3-1: USB disconnect, device number 30 [ 360.362933][ T7815] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 360.386943][ T7815] usb 1-1: media controller created [ 360.500309][ T7815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 360.916766][ T7815] az6027: usb out operation failed. (-71) [ 360.928038][ T7815] az6027: usb out operation failed. (-71) [ 360.947803][ T7815] stb0899_attach: Driver disabled by Kconfig [ 360.954699][ T7815] az6027: no front-end attached [ 360.954699][ T7815] [ 360.969723][ T7815] az6027: usb out operation failed. (-71) [ 360.992702][ T8702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 361.005173][ T7815] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 361.041044][ T7815] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 361.082079][ T7815] dvb-usb: schedule remote query interval to 400 msecs. [ 361.092872][ T7815] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 361.105555][ T7815] usb 1-1: USB disconnect, device number 20 [ 361.202738][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.713'. [ 361.276352][ T7815] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 361.720945][ T8709] mmap: syz.3.709 (8709) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 363.491954][ T8728] netlink: 'syz.2.715': attribute type 21 has an invalid length. [ 363.501868][ T8728] netlink: 6 bytes leftover after parsing attributes in process `syz.2.715'. [ 364.017579][ T8735] fuse: blksize only supported for fuseblk [ 364.678845][ T30] audit: type=1326 audit(1754234041.136:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8723 comm="syz.0.718" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff53958eb69 code=0x0 [ 364.736452][ T10] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 364.844916][ T8726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.720'. [ 365.008111][ T10] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 365.026270][ T10] usb 2-1: config 0 has no interface number 0 [ 365.058598][ T8738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.720'. [ 365.074724][ T10] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 365.105293][ T10] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 365.140172][ T10] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 365.196248][ T10] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 365.323280][ T10] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 365.350160][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'. [ 365.374753][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.401429][ T8752] netlink: 'syz.2.726': attribute type 2 has an invalid length. [ 365.409620][ T8752] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.726'. [ 365.419041][ T8752] nbd: must specify a device to reconfigure [ 365.433788][ T10] usb 2-1: config 0 descriptor?? [ 365.445468][ T10] hub 2-1:0.3: bad descriptor, ignoring hub [ 365.451630][ T10] hub 2-1:0.3: probe with driver hub failed with error -5 [ 365.470358][ T10] sierra 2-1:0.3: Sierra USB modem converter detected [ 365.518741][ T8746] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 365.694907][ T10] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 365.754240][ T10] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 365.839904][ T10] usb 2-1: USB disconnect, device number 24 [ 365.982757][ T10] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 366.024659][ T10] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 366.064231][ T10] sierra 2-1:0.3: device disconnected [ 366.216633][ T7815] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 366.403835][ T7815] usb 5-1: Using ep0 maxpacket: 16 [ 366.472354][ T7815] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.531194][ T7815] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.562137][ T7815] usb 5-1: config 0 interface 0 has no altsetting 0 [ 366.590222][ T7815] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 366.630251][ T7815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.664608][ T7815] usb 5-1: config 0 descriptor?? [ 367.135962][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 367.155167][ T8780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.192146][ T8780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.297782][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 367.330786][ T9] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 367.344319][ T9] usb 4-1: config 0 has no interface number 0 [ 367.354361][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 367.364485][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.372784][ T9] usb 4-1: Product: syz [ 367.377484][ T9] usb 4-1: Manufacturer: syz [ 367.383547][ T9] usb 4-1: SerialNumber: syz [ 367.395453][ T9] usb 4-1: config 0 descriptor?? [ 367.466541][ T2151] usb 5-1: USB disconnect, device number 29 [ 367.619942][ T9] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 367.628579][ T9] usb 4-1: No streaming interface found for terminal 6. [ 367.645567][ T9] usb 4-1: USB disconnect, device number 28 [ 367.823376][ T8782] sp0: Synchronizing with TNC [ 368.903534][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.737'. [ 368.940600][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.737'. [ 369.010072][ T8801] netlink: 'syz.1.742': attribute type 9 has an invalid length. [ 369.022851][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'. [ 369.043972][ T8801] hsr0: entered promiscuous mode [ 369.051577][ T8802] tmpfs: Bad value for 'mpol' [ 369.061691][ T8801] macvlan0: entered promiscuous mode [ 369.094604][ T8802] tmpfs: Bad value for 'mpol' [ 369.165826][ T8801] macvlan0: entered allmulticast mode [ 369.212445][ T8801] hsr0: entered allmulticast mode [ 369.235337][ T8801] hsr_slave_0: entered allmulticast mode [ 369.263511][ T8801] hsr_slave_1: entered allmulticast mode [ 370.795983][ T8828] bond_slave_0: entered promiscuous mode [ 370.801823][ T8828] bond_slave_1: entered promiscuous mode [ 370.807679][ T8828] macvlan4: entered promiscuous mode [ 370.813071][ T8828] bond0: entered promiscuous mode [ 370.822741][ T8828] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 371.085901][ T8816] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 371.135550][ T8816] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 371.238127][ T8816] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 371.287825][ T8816] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 371.304411][ T8816] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 371.324052][ T8816] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 371.345717][ T8816] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 371.373576][ T8816] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 371.505314][ T5923] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 371.665328][ T5923] usb 1-1: Using ep0 maxpacket: 8 [ 371.684833][ T5923] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 371.734863][ T5923] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.828746][ T5923] usb 1-1: config 0 has no interface number 0 [ 371.872645][ T5923] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 371.917743][ T5923] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 371.981692][ T5923] usb 1-1: config 0 interface 52 has no altsetting 0 [ 372.022701][ T5923] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 372.089602][ T5923] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 372.125373][ T5923] usb 1-1: Manufacturer: syz [ 372.171974][ T5923] usb 1-1: config 0 descriptor?? [ 372.217500][ T5923] hub 1-1:0.52: bad descriptor, ignoring hub [ 372.236018][ T5923] hub 1-1:0.52: probe with driver hub failed with error -5 [ 372.372680][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.753'. [ 373.138926][ T5923] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input19 [ 373.262442][ T8860] loop2: detected capacity change from 0 to 7 [ 373.271784][ T2151] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 373.348542][ T8860] loop2: p1 [ 373.359000][ T8860] loop2: partition table partially beyond EOD, truncated [ 373.415676][ T5979] usb 1-1: USB disconnect, device number 21 [ 373.435099][ T2151] usb 4-1: device descriptor read/64, error -71 [ 373.494851][ T8860] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 374.025549][ T5923] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 374.255077][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 374.282604][ T2151] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 374.303884][ T5923] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 374.334908][ T5923] usb 3-1: config 0 has no interface number 0 [ 374.372176][ T5923] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 374.378794][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'. [ 374.438834][ T2151] usb 4-1: device descriptor read/64, error -71 [ 374.449302][ T5923] usb 3-1: config 0 interface 85 has no altsetting 0 [ 374.613717][ T2151] usb usb4-port1: attempt power cycle [ 374.629294][ T5923] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 374.701375][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.764663][ T5923] usb 3-1: Product: syz [ 374.795148][ T5923] usb 3-1: Manufacturer: syz [ 374.828020][ T5923] usb 3-1: SerialNumber: syz [ 375.008718][ T5923] usb 3-1: config 0 descriptor?? [ 375.054945][ T2151] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 375.093554][ T2151] usb 4-1: device descriptor read/8, error -71 [ 375.234400][ T8887] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 375.260784][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.278737][ T8887] CIFS mount error: No usable UNC path provided in device string! [ 375.278737][ T8887] [ 375.289272][ T8887] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 375.494238][ T30] audit: type=1326 audit(1754234052.597:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8893 comm="syz.3.763" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f783558eb69 code=0x0 [ 375.533577][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'. [ 375.545248][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 375.735525][ T5923] appletouch 3-1:0.85: Geyser mode initialized. [ 375.752305][ T5923] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input20 [ 375.827862][ T30] audit: type=1400 audit(1754234052.637:222): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8890 comm="syz.1.762" saddr=172.30.0.2 daddr=172.20.20.170 netif=gre0 [ 375.877789][ T10] usb 5-1: device descriptor read/64, error -71 [ 376.268527][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 376.435261][ T10] usb 5-1: device descriptor read/64, error -71 [ 376.545127][ T10] usb usb5-port1: attempt power cycle [ 376.897084][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 377.016236][ T5822] usb 3-1: USB disconnect, device number 31 [ 377.045129][ T10] usb 5-1: device descriptor read/8, error -71 [ 377.302060][ T5822] appletouch 3-1:0.85: input: appletouch disconnected [ 378.064528][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 378.095225][ T10] usb 5-1: device descriptor read/8, error -71 [ 378.168492][ T8923] netlink: 240 bytes leftover after parsing attributes in process `syz.3.767'. [ 378.257116][ T10] usb usb5-port1: unable to enumerate USB device [ 378.370107][ T8926] loop2: detected capacity change from 0 to 7 [ 378.402504][ T8926] loop2: p1 [ 378.408974][ T8926] loop2: partition table partially beyond EOD, truncated [ 378.451965][ T8926] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 378.694396][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 378.914492][ T5822] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 378.987664][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 379.099918][ T9] usb 4-1: config 0 has an invalid interface number: 226 but max is 0 [ 379.299639][ T9] usb 4-1: config 0 has no interface number 0 [ 379.371551][ T9] usb 4-1: config 0 interface 226 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.095282][ T5822] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 380.157496][ T5822] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 380.168149][ T5822] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 380.182358][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 380.190932][ T5822] usb 3-1: SerialNumber: syz [ 380.204218][ T9] usb 4-1: config 0 interface 226 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.236353][ T9] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 380.278793][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.331683][ T9] usb 4-1: config 0 descriptor?? [ 380.410752][ T8934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.770'. [ 380.426661][ T8935] netlink: 20 bytes leftover after parsing attributes in process `syz.2.770'. [ 380.523190][ T8952] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.974244][ T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 380.991913][ T5822] usb 3-1: 0:2 : does not exist [ 380.996249][ T2151] usb 4-1: USB disconnect, device number 33 [ 381.011486][ T5822] usb 3-1: unit 5: unexpected type 0x0a [ 381.046827][ T5822] usb 3-1: USB disconnect, device number 32 [ 381.160410][ T24] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 381.182883][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.202150][ T24] usb 5-1: Product: syz [ 381.217347][ T24] usb 5-1: Manufacturer: syz [ 381.236205][ T24] usb 5-1: SerialNumber: syz [ 381.409301][ T24] usb 5-1: config 0 descriptor?? [ 381.422590][ T24] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 382.061337][ T24] gspca_sunplus: reg_r err -110 [ 382.377741][ T8983] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 382.435270][ T8984] netlink: 'syz.1.779': attribute type 1 has an invalid length. [ 382.691638][ T30] audit: type=1400 audit(1754234059.798:223): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8989 comm="syz.0.783" saddr=172.30.0.1 daddr=172.20.20.170 netif=wpan0 [ 382.693430][ T8986] bond1: (slave bridge1): making interface the new active one [ 382.740319][ T8990] support for the xor transformation has been removed. [ 382.885482][ T8986] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 383.753265][ T9006] sctp: [Deprecated]: syz.3.788 (pid 9006) Use of int in max_burst socket option deprecated. [ 383.753265][ T9006] Use struct sctp_assoc_value instead [ 383.870104][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.788'. [ 383.919759][ T2151] usb 5-1: USB disconnect, device number 34 [ 383.952971][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.959408][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.485255][ T9019] FAULT_INJECTION: forcing a failure. [ 384.485255][ T9019] name failslab, interval 1, probability 0, space 0, times 0 [ 384.564049][ T9019] CPU: 0 UID: 0 PID: 9019 Comm: syz.1.787 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 384.564081][ T9019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 384.564101][ T9019] Call Trace: [ 384.564112][ T9019] [ 384.564122][ T9019] dump_stack_lvl+0x189/0x250 [ 384.564145][ T9019] ? __pfx____ratelimit+0x10/0x10 [ 384.564161][ T9019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.564179][ T9019] ? __pfx__printk+0x10/0x10 [ 384.564215][ T9019] ? __pfx___might_resched+0x10/0x10 [ 384.564239][ T9019] ? fs_reclaim_acquire+0x7d/0x100 [ 384.564271][ T9019] should_fail_ex+0x414/0x560 [ 384.564301][ T9019] should_failslab+0xa8/0x100 [ 384.564327][ T9019] __kmalloc_noprof+0xcb/0x4f0 [ 384.564355][ T9019] ? kfree+0x4d/0x440 [ 384.564384][ T9019] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 384.564420][ T9019] tomoyo_realpath_from_path+0xe3/0x5d0 [ 384.564451][ T9019] ? tomoyo_domain+0xda/0x130 [ 384.564487][ T9019] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 384.564511][ T9019] tomoyo_path_number_perm+0x1e8/0x5a0 [ 384.564538][ T9019] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 384.564579][ T9019] ? __lock_acquire+0xab9/0xd20 [ 384.564625][ T9019] ? __fget_files+0x2a/0x420 [ 384.564653][ T9019] ? __fget_files+0x2a/0x420 [ 384.564675][ T9019] ? __fget_files+0x3a0/0x420 [ 384.564698][ T9019] ? __fget_files+0x2a/0x420 [ 384.564727][ T9019] security_file_ioctl+0xcb/0x2d0 [ 384.564755][ T9019] __se_sys_ioctl+0x47/0x170 [ 384.564792][ T9019] do_syscall_64+0xfa/0x3b0 [ 384.564816][ T9019] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.564838][ T9019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.564860][ T9019] ? clear_bhb_loop+0x60/0xb0 [ 384.564886][ T9019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.564908][ T9019] RIP: 0033:0x7f505fb8eb69 [ 384.564927][ T9019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.564946][ T9019] RSP: 002b:00007f506099f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 384.564970][ T9019] RAX: ffffffffffffffda RBX: 00007f505fdb5fa0 RCX: 00007f505fb8eb69 [ 384.564986][ T9019] RDX: 0000200000000d40 RSI: 000000000000541b RDI: 0000000000000004 [ 384.565000][ T9019] RBP: 00007f506099f090 R08: 0000000000000000 R09: 0000000000000000 [ 384.565014][ T9019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.565027][ T9019] R13: 0000000000000000 R14: 00007f505fdb5fa0 R15: 00007ffe06ff23f8 [ 384.565061][ T9019] [ 384.565069][ T9019] ERROR: Out of memory at tomoyo_realpath_from_path. [ 384.946278][ T9025] loop2: detected capacity change from 0 to 7 [ 384.956229][ T9025] loop2: p1 [ 384.985069][ T9027] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 385.003824][ T5822] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 385.025972][ T9025] loop2: partition table partially beyond EOD, truncated [ 385.033198][ T9025] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 385.199643][ T5822] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 385.220777][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.268257][ T5822] usb 3-1: Product: syz [ 385.313835][ T5822] usb 3-1: Manufacturer: syz [ 385.318498][ T5822] usb 3-1: SerialNumber: syz [ 385.364404][ T5822] usb 3-1: config 0 descriptor?? [ 385.397417][ T5822] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 386.119107][ T5822] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 386.143914][ T5822] sq905c 3-1:0.0: probe with driver sq905c failed with error -71 [ 386.182476][ T5822] usb 3-1: USB disconnect, device number 33 [ 386.188570][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 386.336971][ T9] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 386.380265][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.444285][ T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 386.481720][ T9] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 386.522377][ T9] usb 4-1: Manufacturer: syz [ 386.539469][ T9] usb 4-1: config 0 descriptor?? [ 386.777444][ T9] rc_core: IR keymap rc-hauppauge not found [ 386.795039][ T9] Registered IR keymap rc-empty [ 386.835959][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 386.881781][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input21 [ 386.962406][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 387.009316][ T5822] kernel write not supported for file /sequencer (pid: 5822 comm: kworker/1:3) [ 387.031095][ T9064] netlink: 192 bytes leftover after parsing attributes in process `syz.0.800'. [ 387.213742][ T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 387.222569][ T5822] usb 4-1: USB disconnect, device number 34 [ 387.373793][ T9079] FAULT_INJECTION: forcing a failure. [ 387.373793][ T9079] name failslab, interval 1, probability 0, space 0, times 0 [ 387.392279][ T24] usb 3-1: too many configurations: 79, using maximum allowed: 8 [ 387.434297][ T9079] CPU: 0 UID: 0 PID: 9079 Comm: syz.3.804 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 387.434329][ T9079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 387.434343][ T9079] Call Trace: [ 387.434352][ T9079] [ 387.434361][ T9079] dump_stack_lvl+0x189/0x250 [ 387.434392][ T9079] ? __pfx____ratelimit+0x10/0x10 [ 387.434415][ T9079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.434435][ T9079] ? __pfx__printk+0x10/0x10 [ 387.434467][ T9079] ? __pfx___might_resched+0x10/0x10 [ 387.434490][ T9079] ? fs_reclaim_acquire+0x7d/0x100 [ 387.434526][ T9079] should_fail_ex+0x414/0x560 [ 387.434554][ T9079] should_failslab+0xa8/0x100 [ 387.434579][ T9079] __kmalloc_noprof+0xcb/0x4f0 [ 387.434599][ T9079] ? tomoyo_encode+0x28b/0x550 [ 387.434632][ T9079] tomoyo_encode+0x28b/0x550 [ 387.434667][ T9079] tomoyo_realpath_from_path+0x58d/0x5d0 [ 387.434698][ T9079] ? tomoyo_domain+0xda/0x130 [ 387.434733][ T9079] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 387.434757][ T9079] tomoyo_path_number_perm+0x1e8/0x5a0 [ 387.434782][ T9079] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 387.434825][ T9079] ? __lock_acquire+0xab9/0xd20 [ 387.434868][ T9079] ? __fget_files+0x2a/0x420 [ 387.434908][ T9079] ? __fget_files+0x2a/0x420 [ 387.434930][ T9079] ? __fget_files+0x3a0/0x420 [ 387.434953][ T9079] ? __fget_files+0x2a/0x420 [ 387.434982][ T9079] security_file_ioctl+0xcb/0x2d0 [ 387.435010][ T9079] __se_sys_ioctl+0x47/0x170 [ 387.435046][ T9079] do_syscall_64+0xfa/0x3b0 [ 387.435070][ T9079] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.435093][ T9079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.435116][ T9079] ? clear_bhb_loop+0x60/0xb0 [ 387.435143][ T9079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.435165][ T9079] RIP: 0033:0x7f783558eb69 [ 387.435185][ T9079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.435204][ T9079] RSP: 002b:00007f78363c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.435228][ T9079] RAX: ffffffffffffffda RBX: 00007f78357b5fa0 RCX: 00007f783558eb69 [ 387.435245][ T9079] RDX: 0000200000000d40 RSI: 000000000000541b RDI: 0000000000000004 [ 387.435259][ T9079] RBP: 00007f78363c0090 R08: 0000000000000000 R09: 0000000000000000 [ 387.435273][ T9079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.435286][ T9079] R13: 0000000000000000 R14: 00007f78357b5fa0 R15: 00007fffa83eb1f8 [ 387.435320][ T9079] [ 387.435842][ T9079] ERROR: Out of memory at tomoyo_realpath_from_path. [ 387.439095][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 387.439145][ T24] usb 3-1: can't read configurations, error -61 [ 387.815815][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 387.873533][ T7815] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 387.911699][ T9082] nbd0: detected capacity change from 0 to 1024 [ 387.994579][ T30] audit: type=1400 audit(1754234065.109:224): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=9090 comm="syz.3.807" saddr=172.30.0.4 daddr=172.20.20.170 netif=wpan0 [ 388.015183][ C0] vkms_vblank_simulate: vblank timer overrun [ 388.165849][ T24] usb 3-1: too many configurations: 79, using maximum allowed: 8 [ 388.184276][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 388.192193][ T24] usb 3-1: can't read configurations, error -61 [ 388.201601][ T7815] usb 2-1: unable to get BOS descriptor or descriptor too short [ 388.213698][ T24] usb usb3-port1: attempt power cycle [ 388.220233][ T7815] usb 2-1: not running at top speed; connect to a high speed hub [ 388.242827][ T7815] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 388.258235][ T7815] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 388.286245][ T7815] usb 2-1: config 4 has no interface number 0 [ 388.297212][ T7815] usb 2-1: string descriptor 0 read error: -22 [ 388.310253][ T9082] block nbd0: shutting down sockets [ 388.320480][ T7815] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 388.362907][ T7815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.680185][ T7815] usb 2-1: Found UVC 0.00 device (04f2:b746) [ 388.707143][ T7815] usb 2-1: No valid video chain found. [ 388.743338][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 388.926983][ T24] usb 3-1: too many configurations: 79, using maximum allowed: 8 [ 388.952130][ T9] usb 2-1: USB disconnect, device number 25 [ 389.205959][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 389.231877][ T24] usb 3-1: can't read configurations, error -61 [ 389.373390][ T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 389.425532][ T24] usb 3-1: too many configurations: 79, using maximum allowed: 8 [ 389.455978][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 389.484543][ T24] usb 3-1: can't read configurations, error -61 [ 389.499487][ T24] usb usb3-port1: unable to enumerate USB device [ 390.552955][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 390.743274][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 392.655990][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 392.665164][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.673356][ T24] usb 1-1: Product: syz [ 392.677584][ T24] usb 1-1: Manufacturer: syz [ 392.682203][ T24] usb 1-1: SerialNumber: syz [ 392.742257][ T9136] tipc: Enabling of bearer rejected, already enabled [ 392.751144][ T24] usb 1-1: config 0 descriptor?? [ 392.934366][ T24] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 392.984249][ T24] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 393.187236][ T24] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 393.879169][ T24] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 393.932342][ T24] usb 1-1: USB disconnect, device number 22 [ 393.933232][ T2151] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 393.968804][ T9148] loop2: detected capacity change from 0 to 7 [ 393.981495][ T9148] loop2: p1 [ 393.990491][ T9148] loop2: partition table partially beyond EOD, truncated [ 394.005017][ T9148] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 394.027166][ T9153] xt_CT: You must specify a L4 protocol and not use inversions on it [ 394.122671][ T2151] usb 2-1: Using ep0 maxpacket: 32 [ 394.144997][ T2151] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 394.167304][ T2151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.190268][ T2151] usb 2-1: config 0 descriptor?? [ 394.209624][ T2151] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 394.442648][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 394.602619][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 394.620794][ T24] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 394.648671][ T24] usb 5-1: config 0 has no interface number 0 [ 394.673249][ T24] usb 5-1: New USB device found, idVendor=22b8, idProduct=2d93, bcdDevice=a3.15 [ 394.683128][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.694811][ T24] usb 5-1: Product: syz [ 394.704397][ T24] usb 5-1: Manufacturer: syz [ 394.712453][ T24] usb 5-1: SerialNumber: syz [ 394.725725][ T24] usb 5-1: config 0 descriptor?? [ 394.732753][ T2151] gspca_nw80x: reg_w err -110 [ 394.745702][ T2151] nw80x 2-1:0.0: probe with driver nw80x failed with error -110 [ 394.949556][ T9158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.960720][ T9158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.980931][ T24] usb 5-1: USB disconnect, device number 35 [ 395.180774][ T9174] tipc: Enabling of bearer rejected, already enabled [ 395.258508][ T9177] netlink: 248 bytes leftover after parsing attributes in process `syz.3.831'. [ 395.876031][ T9189] batadv0: entered promiscuous mode [ 396.327218][ T9196] loop2: detected capacity change from 0 to 7 [ 396.346969][ T9196] loop2: p1 [ 396.350272][ T9196] loop2: partition table partially beyond EOD, truncated [ 396.384435][ T9196] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 397.316498][ T9200] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 397.323355][ T9200] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 397.344387][ T9200] vhci_hcd vhci_hcd.0: Device attached [ 397.526608][ T9201] vhci_hcd: connection closed [ 397.529697][ T1088] vhci_hcd: stop threads [ 397.572555][ T1209] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 398.257591][ T1088] vhci_hcd: release socket [ 398.293998][ T1088] vhci_hcd: disconnect device [ 398.515391][ T2151] usb 2-1: USB disconnect, device number 26 [ 398.910201][ T9213] netlink: 'syz.2.840': attribute type 21 has an invalid length. [ 398.918922][ T9213] netlink: 6 bytes leftover after parsing attributes in process `syz.2.840'. [ 399.657045][ T9222] netlink: 32 bytes leftover after parsing attributes in process `syz.1.842'. [ 402.478802][ T9234] loop2: detected capacity change from 0 to 7 [ 402.486449][ T9234] loop2: p1 [ 402.489859][ T9234] loop2: partition table partially beyond EOD, truncated [ 402.498318][ T9234] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 402.699524][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.849'. [ 403.844390][ T1209] vhci_hcd: vhci_device speed not set [ 404.386086][ T9242] tipc: Enabling of bearer rejected, already enabled [ 404.531113][ T9255] netlink: 'syz.1.854': attribute type 21 has an invalid length. [ 404.541527][ T9255] netlink: 6 bytes leftover after parsing attributes in process `syz.1.854'. [ 406.433768][ T9272] 9pnet_fd: Insufficient options for proto=fd [ 407.161833][ T9276] x_tables: duplicate entry at hook 3 [ 408.503020][ T9288] loop2: detected capacity change from 0 to 7 [ 408.519000][ T9288] loop2: p1 [ 408.550816][ T9288] loop2: partition table partially beyond EOD, truncated [ 408.558045][ T9288] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 408.712268][ T9286] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 408.861881][ T9298] xt_hashlimit: size too large, truncated to 1048576 [ 409.637126][ T9315] netlink: 'syz.0.867': attribute type 21 has an invalid length. [ 409.648716][ T9315] netlink: 6 bytes leftover after parsing attributes in process `syz.0.867'. [ 409.846895][ T2151] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 409.995613][ T9321] tmpfs: Unknown parameter 'õsrquota' [ 410.115488][ T2151] usb 2-1: Using ep0 maxpacket: 16 [ 410.250559][ T2151] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.310005][ T2151] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.346097][ T2151] usb 2-1: config 0 interface 0 has no altsetting 0 [ 410.384771][ T2151] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 410.483143][ T2151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.591539][ T2151] usb 2-1: config 0 descriptor?? [ 411.103698][ T2151] usbhid 2-1:0.0: can't add hid device: -71 [ 411.110041][ T2151] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 411.139146][ T2151] usb 2-1: USB disconnect, device number 27 [ 416.202633][ T9364] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.882'. [ 416.551666][ T9375] trusted_key: encrypted_key: hex blob is missing [ 421.126556][ T9394] tipc: Can't bind to reserved service type 1 [ 421.340648][ T9402] netlink: 'syz.2.891': attribute type 21 has an invalid length. [ 421.349041][ T9402] netlink: 6 bytes leftover after parsing attributes in process `syz.2.891'. [ 421.396122][ T9396] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 421.527221][ T9383] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 421.726629][ T9396] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 421.812763][ T9396] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 421.820857][ T9396] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 421.827567][ T9396] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 421.834487][ T9396] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 421.993260][ T9383] usb 5-1: Using ep0 maxpacket: 8 [ 422.013487][ T9383] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.049197][ T9383] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.074312][ T9383] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 422.453889][ T9416] netlink: 176 bytes leftover after parsing attributes in process `syz.1.896'. [ 423.055274][ T9383] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 423.064906][ T9383] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.075955][ T9383] usb 5-1: config 0 descriptor?? [ 423.251490][ T5923] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 423.453938][ T5923] usb 2-1: unable to get BOS descriptor or descriptor too short [ 423.473746][ T5923] usb 2-1: config 0 has no interfaces? [ 423.514885][ T5923] usb 2-1: language id specifier not provided by device, defaulting to English [ 423.748958][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.898'. [ 424.237334][ T9383] logitech 0003:046D:C293.000C: nested delimiters [ 424.244055][ T9383] logitech 0003:046D:C293.000C: item 0 4 2 10 parsing failed [ 424.244056][ T5923] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 424.244087][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.262849][ T9383] logitech 0003:046D:C293.000C: parse failed [ 424.276113][ T9383] logitech 0003:046D:C293.000C: probe with driver logitech failed with error -22 [ 424.279993][ T9430] cgroup: Unknown subsys name 'noxattr' [ 424.344969][ T5923] usb 2-1: config 0 descriptor?? [ 424.345927][ T9432] netlink: 292 bytes leftover after parsing attributes in process `syz.0.899'. [ 424.390253][ T5923] usb 5-1: USB disconnect, device number 36 [ 424.483080][ T9437] netlink: 'syz.0.901': attribute type 4 has an invalid length. [ 424.764977][ T5923] usb 2-1: USB disconnect, device number 28 [ 425.744699][ T9448] misc userio: Begin command sent, but we're already running [ 425.783566][ T9445] misc userio: Invalid payload size [ 426.056033][ T9456] netlink: 'syz.1.906': attribute type 21 has an invalid length. [ 426.064224][ T9456] netlink: 6 bytes leftover after parsing attributes in process `syz.1.906'. [ 427.854694][ T9383] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 428.218378][ T9383] usb 5-1: Using ep0 maxpacket: 16 [ 428.503117][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.910'. [ 428.518559][ T30] audit: type=1400 audit(1754234105.614:225): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=9472 comm="syz.1.910" saddr=172.30.0.2 daddr=172.20.20.170 netif=gre0 [ 428.523041][ T9383] usb 5-1: config 0 interface 0 has no altsetting 0 [ 428.579148][ T9383] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 428.603170][ T9383] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.620516][ T9383] usb 5-1: Product: syz [ 428.625039][ T9383] usb 5-1: Manufacturer: syz [ 428.630618][ T9383] usb 5-1: SerialNumber: syz [ 428.638746][ T9383] usb 5-1: config 0 descriptor?? [ 429.306540][ T9383] usb 5-1: USB disconnect, device number 37 [ 429.508375][ T5890] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 429.898149][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 430.498532][ T5890] usb 2-1: config 0 has an invalid interface number: 130 but max is 0 [ 430.506964][ T5890] usb 2-1: config 0 has no interface number 0 [ 430.516024][ T5890] usb 2-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 430.525451][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.535830][ T5890] usb 2-1: Product: syz [ 430.540093][ T5890] usb 2-1: Manufacturer: syz [ 430.544932][ T5890] usb 2-1: SerialNumber: syz [ 430.552766][ T5890] usb 2-1: config 0 descriptor?? [ 430.563297][ T5890] as10x_usb: device has been detected [ 430.569736][ T5890] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 430.595434][ T5890] usb 2-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 430.610501][ T5890] as10x_usb: error during firmware upload part1 [ 430.617524][ T5890] Registered device PCTV Systems picoStick (74e) [ 430.888386][ T9502] netlink: 'syz.4.919': attribute type 21 has an invalid length. [ 430.900867][ T5922] usb 2-1: USB disconnect, device number 29 [ 430.915397][ T9502] netlink: 6 bytes leftover after parsing attributes in process `syz.4.919'. [ 431.262889][ T5922] Unregistered device PCTV Systems picoStick (74e) [ 431.268591][ T5922] as10x_usb: device has been disconnected [ 431.437041][ T9305] Bluetooth: hci5: Frame reassembly failed (-84) [ 431.469740][ T9305] Bluetooth: hci5: Frame reassembly failed (-84) [ 431.658208][ T9383] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 431.777153][ T5890] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 431.808233][ T9383] usb 4-1: Using ep0 maxpacket: 16 [ 431.816415][ T9383] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.827996][ T9383] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 431.846674][ T9383] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 431.856866][ T9383] usb 4-1: New USB device strings: Mfr=0, Product=251, SerialNumber=3 [ 431.869137][ T9383] usb 4-1: Product: syz [ 431.873427][ T9383] usb 4-1: SerialNumber: syz [ 431.931543][ T5890] usb 2-1: device descriptor read/64, error -71 [ 432.029836][ T9383] usb 4-1: config 0 descriptor?? [ 432.178426][ T5890] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 432.596384][ T5890] usb 2-1: device descriptor read/64, error -71 [ 433.457817][ T51] Bluetooth: hci5: command 0xfc11 tx timeout [ 433.505413][ T5890] usb usb2-port1: attempt power cycle [ 434.459247][ T5847] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 434.993743][ T9541] FAULT_INJECTION: forcing a failure. [ 434.993743][ T9541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.026399][ T9541] CPU: 0 UID: 0 PID: 9541 Comm: syz.2.928 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 435.026432][ T9541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 435.026446][ T9541] Call Trace: [ 435.026455][ T9541] [ 435.026465][ T9541] dump_stack_lvl+0x189/0x250 [ 435.026495][ T9541] ? irqentry_exit+0x74/0x90 [ 435.026521][ T9541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.026569][ T9541] should_fail_ex+0x414/0x560 [ 435.026598][ T9541] _copy_from_user+0x2d/0xb0 [ 435.026630][ T9541] do_tcp_setsockopt+0x42f/0x1f10 [ 435.026662][ T9541] ? vfs_write+0x8d8/0xa90 [ 435.026687][ T9541] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 435.026720][ T9541] ? __pfx___mutex_lock+0x10/0x10 [ 435.026761][ T9541] ? sock_common_setsockopt+0x36/0xc0 [ 435.026788][ T9541] ? tcp_setsockopt+0x3d/0xe0 [ 435.026816][ T9541] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 435.026848][ T9541] smc_setsockopt+0x232/0xab0 [ 435.026879][ T9541] ? __pfx_smc_setsockopt+0x10/0x10 [ 435.026904][ T9541] ? __fget_files+0x2a/0x420 [ 435.026928][ T9541] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 435.026950][ T9541] ? __pfx_smc_setsockopt+0x10/0x10 [ 435.026975][ T9541] do_sock_setsockopt+0x179/0x1b0 [ 435.027014][ T9541] __x64_sys_setsockopt+0x13f/0x1b0 [ 435.027054][ T9541] do_syscall_64+0xfa/0x3b0 [ 435.027078][ T9541] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.027101][ T9541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.027123][ T9541] ? clear_bhb_loop+0x60/0xb0 [ 435.027150][ T9541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.027172][ T9541] RIP: 0033:0x7fd78358eb69 [ 435.027191][ T9541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.027211][ T9541] RSP: 002b:00007fd784446038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 435.027234][ T9541] RAX: ffffffffffffffda RBX: 00007fd7837b6160 RCX: 00007fd78358eb69 [ 435.027251][ T9541] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000008 [ 435.027264][ T9541] RBP: 00007fd784446090 R08: 0000000000000020 R09: 0000000000000000 [ 435.027279][ T9541] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 435.027299][ T9541] R13: 0000000000000000 R14: 00007fd7837b6160 R15: 00007ffd93bdc988 [ 435.027335][ T9541] [ 435.865303][ T5922] usb 4-1: USB disconnect, device number 35 [ 435.955488][ T9551] netlink: 28 bytes leftover after parsing attributes in process `syz.0.931'. [ 436.849106][ T9562] loop2: detected capacity change from 0 to 7 [ 436.876214][ T9562] loop2: p1 [ 436.894827][ T9562] loop2: partition table partially beyond EOD, truncated [ 436.977803][ T9562] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 437.209018][ T9579] syz.3.937: attempt to access beyond end of device [ 437.209018][ T9579] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 437.238703][ T9579] syz.3.937: attempt to access beyond end of device [ 437.238703][ T9579] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 437.278552][ T9579] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 437.292337][ T9579] syz.3.937: attempt to access beyond end of device [ 437.292337][ T9579] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 437.306666][ T9579] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 437.356369][ T9579] syz.3.937: attempt to access beyond end of device [ 437.356369][ T9579] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 437.370169][ T9579] syz.3.937: attempt to access beyond end of device [ 437.370169][ T9579] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 437.408535][ T9579] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 437.420082][ T9579] syz.3.937: attempt to access beyond end of device [ 437.420082][ T9579] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 437.435203][ T9579] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 437.447808][ T9579] syz.3.937: attempt to access beyond end of device [ 437.447808][ T9579] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 437.478284][ T9579] syz.3.937: attempt to access beyond end of device [ 437.478284][ T9579] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 437.492846][ T9579] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 437.505827][ T9579] syz.3.937: attempt to access beyond end of device [ 437.505827][ T9579] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 437.530557][ T9579] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 437.591023][ T9579] syz.3.937: attempt to access beyond end of device [ 437.591023][ T9579] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 439.824840][ T9579] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 439.904805][ T9579] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 439.935047][ T9579] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 440.293738][ T9611] netlink: 36 bytes leftover after parsing attributes in process `syz.0.946'. [ 440.306671][ T9613] loop2: detected capacity change from 0 to 7 [ 440.322757][ T9613] loop2: p1 [ 440.326064][ T9613] loop2: partition table partially beyond EOD, truncated [ 440.333696][ T9613] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 440.376918][ T9383] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 440.536881][ T9383] usb 3-1: Using ep0 maxpacket: 16 [ 440.552820][ T9383] usb 3-1: config 255 has too many interfaces: 236, using maximum allowed: 32 [ 440.554577][ T9624] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 440.572284][ T9383] usb 3-1: config 255 has 1 interface, different from the descriptor's value: 236 [ 440.594172][ T9383] usb 3-1: config 255 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.613619][ T9383] usb 3-1: config 255 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.762969][ T9628] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 440.856905][ T9383] usb 3-1: config 255 interface 0 has no altsetting 0 [ 440.864152][ T9383] usb 3-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 440.873533][ T9629] netlink: 60 bytes leftover after parsing attributes in process `syz.3.951'. [ 440.882879][ T9383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.891243][ T9629] netlink: 60 bytes leftover after parsing attributes in process `syz.3.951'. [ 440.901169][ T9629] netlink: 60 bytes leftover after parsing attributes in process `syz.3.951'. [ 440.911751][ T9629] netlink: 16 bytes leftover after parsing attributes in process `syz.3.951'. [ 441.926607][ T9383] wacom 0003:056A:00B3.000D: unknown main item tag 0x0 [ 441.936168][ T9383] wacom 0003:056A:00B3.000D: unknown main item tag 0x0 [ 441.943665][ T9383] wacom 0003:056A:00B3.000D: unknown main item tag 0x0 [ 441.997442][ T9383] wacom 0003:056A:00B3.000D: unknown main item tag 0x0 [ 442.163056][ T5923] usb 3-1: USB disconnect, device number 38 [ 442.333115][ T9647] netlink: 'syz.1.956': attribute type 29 has an invalid length. [ 442.347815][ T9647] netlink: 'syz.1.956': attribute type 29 has an invalid length. [ 442.363451][ T9647] netlink: 508 bytes leftover after parsing attributes in process `syz.1.956'. [ 444.453547][ T9659] netlink: 'syz.3.959': attribute type 21 has an invalid length. [ 444.536488][ T9659] netlink: 'syz.3.959': attribute type 6 has an invalid length. [ 444.550108][ T9659] netlink: 64 bytes leftover after parsing attributes in process `syz.3.959'. [ 444.717172][ T9661] loop2: detected capacity change from 0 to 7 [ 444.782028][ T9661] loop2: p1 [ 444.789025][ T9661] loop2: partition table partially beyond EOD, truncated [ 444.804035][ T9667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.962'. [ 444.852996][ T9665] (syz.3.959,9665,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 444.862517][ T9665] (syz.3.959,9665,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 444.926664][ T9661] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 445.067311][ T9670] nftables ruleset with unbound chain [ 445.327624][ T9674] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 445.382113][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.388983][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.076499][ T9383] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 446.356606][ T9383] usb 1-1: Using ep0 maxpacket: 16 [ 446.576374][ T9383] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 446.645737][ T9383] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 446.680925][ T9383] usb 1-1: Product: syz [ 446.694770][ T9383] usb 1-1: Manufacturer: syz [ 446.702644][ T9383] usb 1-1: SerialNumber: syz [ 446.717588][ T9383] usb 1-1: config 0 descriptor?? [ 446.896378][ T1209] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 447.046200][ T1209] usb 3-1: Using ep0 maxpacket: 16 [ 447.221858][ T5979] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 447.241086][ T1209] usb 3-1: config index 0 descriptor too short (expected 2336, got 36) [ 447.251326][ T1209] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.276941][ T1209] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 4 [ 447.286423][ T1209] usb 3-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 447.305549][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.317737][ T1209] usb 3-1: config 0 descriptor?? [ 447.398316][ T5979] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.408818][ T5979] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 447.421506][ T5979] usb 2-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 447.444364][ T5979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.452934][ T5979] usb 2-1: Product: syz [ 447.545215][ T5979] usb 2-1: Manufacturer: syz [ 447.551983][ T5979] usb 2-1: SerialNumber: syz [ 447.564473][ T5979] usb 2-1: config 0 descriptor?? [ 447.619901][ T9700] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 448.983168][ T5979] usb 1-1: USB disconnect, device number 23 [ 449.183946][ T9383] usb 2-1: USB disconnect, device number 33 [ 449.525856][ T5979] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 449.546703][ T9717] loop2: detected capacity change from 0 to 7 [ 449.554880][ T9717] loop2: p1 [ 449.570169][ T9717] loop2: partition table partially beyond EOD, truncated [ 449.578632][ T9717] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 449.699575][ T5979] usb 1-1: Using ep0 maxpacket: 32 [ 449.717503][ T5979] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 449.787487][ T5979] usb 1-1: config 0 has no interface number 0 [ 449.797858][ T5979] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 449.818875][ T5979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.845884][ T5979] usb 1-1: Product: syz [ 449.860316][ T5979] usb 1-1: Manufacturer: syz [ 449.880686][ T5979] usb 1-1: SerialNumber: syz [ 449.942937][ T5979] usb 1-1: config 0 descriptor?? [ 449.967227][ T5979] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 450.006910][ T9722] exFAT-fs (nullb0): invalid boot record signature [ 450.065899][ T9722] exFAT-fs (nullb0): failed to read boot sector [ 450.133897][ T5923] usb 3-1: USB disconnect, device number 39 [ 450.178401][ T9722] exFAT-fs (nullb0): failed to recognize exfat type [ 450.195330][ T5979] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 450.262654][ T5979] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 450.586866][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 450.599125][ T5979] usb 1-1: USB disconnect, device number 24 [ 450.620364][ T5979] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 450.652357][ T5979] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 450.682153][ T5979] quatech2 1-1:0.51: device disconnected [ 450.725544][ T9721] 9pnet_fd: p9_fd_create_tcp (9721): problem connecting socket to 127.0.0.1 [ 450.861695][ T9733] netlink: 36 bytes leftover after parsing attributes in process `syz.1.980'. [ 450.977463][ T9735] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 450.985102][ T9735] IPv6: NLM_F_CREATE should be set when creating new route [ 451.287285][ T9740] lo: entered allmulticast mode [ 451.480502][ T9740] tunl0: entered allmulticast mode [ 451.973059][ T9740] gre0: entered allmulticast mode [ 452.009499][ T9740] gretap0: entered allmulticast mode [ 452.202934][ T9740] erspan0: entered allmulticast mode [ 452.217222][ T9740] ip_vti0: entered allmulticast mode [ 452.377652][ T9740] ip6_vti0: entered allmulticast mode [ 452.408619][ T9740] sit0: entered allmulticast mode [ 452.419244][ T9740] ip6tnl0: entered allmulticast mode [ 452.522473][ T9740] ip6gre0: entered allmulticast mode [ 452.566216][ T9740] syz_tun: entered allmulticast mode [ 452.605814][ T9740] ip6gretap0: entered allmulticast mode [ 452.637618][ T9758] loop2: detected capacity change from 0 to 7 [ 452.649688][ T9740] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.658663][ T9740] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.669452][ T9740] bridge0: entered allmulticast mode [ 452.682770][ T9758] loop2: p1 [ 452.692943][ T9758] loop2: partition table partially beyond EOD, truncated [ 452.710472][ T9740] vcan0: entered allmulticast mode [ 452.724765][ T9758] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 452.741460][ T9740] bond0: entered allmulticast mode [ 452.747402][ T9740] bond_slave_0: entered allmulticast mode [ 452.753171][ T9740] bond_slave_1: entered allmulticast mode [ 452.765997][ T9740] team0: entered allmulticast mode [ 452.771218][ T9740] team_slave_0: entered allmulticast mode [ 452.777151][ T9740] team_slave_1: entered allmulticast mode [ 452.787678][ T9740] dummy0: entered allmulticast mode [ 452.874967][ T9740] nlmon0: entered allmulticast mode [ 452.909442][ T9740] caif0: entered allmulticast mode [ 452.915581][ T9740] batadv0: entered allmulticast mode [ 452.982797][ T9740] vxcan0: entered allmulticast mode [ 453.033461][ T9740] vxcan1: entered allmulticast mode [ 453.072781][ T9740] veth0: entered allmulticast mode [ 453.107871][ T9740] veth1: entered allmulticast mode [ 453.176483][ T9740] wg0: entered allmulticast mode [ 453.245823][ T9383] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 453.260252][ T9740] wg1: entered allmulticast mode [ 453.322488][ T9740] wg2: entered allmulticast mode [ 453.373189][ T9740] veth0_to_bridge: entered allmulticast mode [ 453.685551][ T9383] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 453.707430][ T9383] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.735265][ T9383] usb 5-1: Product: syz [ 453.752208][ T9383] usb 5-1: Manufacturer: syz [ 453.767545][ T9383] usb 5-1: SerialNumber: syz [ 453.805954][ T9383] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 453.839163][ T9740] veth1_to_bridge: entered allmulticast mode [ 453.867206][ T5979] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 453.984068][ T9740] veth0_to_bond: entered allmulticast mode [ 454.091825][ T9740] veth1_to_bond: entered allmulticast mode [ 454.123130][ T9740] veth0_to_team: entered allmulticast mode [ 454.323902][ T9774] netlink: 148 bytes leftover after parsing attributes in process `syz.1.989'. [ 455.007152][ T5979] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 455.335664][ T9740] veth1_to_team: entered allmulticast mode [ 455.380943][ T9740] veth0_to_batadv: entered allmulticast mode [ 455.411517][ T5979] ath9k_htc: Failed to initialize the device [ 455.535693][ T5979] usb 5-1: ath9k_htc: USB layer deinitialized [ 455.554371][ T9740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.562626][ T9740] batadv_slave_0: entered allmulticast mode [ 455.784155][ T9740] veth1_to_batadv: entered allmulticast mode [ 455.848165][ T9740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.856659][ T9740] batadv_slave_1: entered allmulticast mode [ 455.909953][ T9740] xfrm0: entered allmulticast mode [ 455.978792][ T9740] veth0_to_hsr: entered allmulticast mode [ 456.043109][ T9740] hsr_slave_0: entered allmulticast mode [ 456.077576][ T9740] veth1_to_hsr: entered allmulticast mode [ 456.088315][ T9740] hsr_slave_1: entered allmulticast mode [ 456.098097][ T9740] hsr0: entered allmulticast mode [ 456.107580][ T9740] veth1_virt_wifi: entered allmulticast mode [ 456.118078][ T9740] veth0_virt_wifi: entered allmulticast mode [ 456.128871][ T9740] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 456.137805][ T9740] veth1_vlan: entered allmulticast mode [ 456.141771][ T9802] overlayfs: failed to resolve './file1': -2 [ 456.287500][ T9740] veth0_vlan: entered allmulticast mode [ 456.398630][ T9740] vlan0: entered allmulticast mode [ 456.404209][ T9740] vlan1: entered allmulticast mode [ 456.447363][ T9740] macvlan0: entered allmulticast mode [ 456.488042][ T9740] macvlan1: entered allmulticast mode [ 456.517471][ T9383] usb 5-1: USB disconnect, device number 38 [ 456.587461][ T9740] ipvlan0: entered allmulticast mode [ 456.593038][ T9740] ipvlan1: entered allmulticast mode [ 456.599575][ T9740] veth1_macvtap: entered allmulticast mode [ 456.648516][ T9740] veth0_macvtap: entered allmulticast mode [ 456.700086][ T9740] macvtap0: entered allmulticast mode [ 456.742669][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.995'. [ 456.848846][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'. [ 456.890751][ T9740] macsec0: entered allmulticast mode [ 457.010574][ T9740] geneve0: entered allmulticast mode [ 457.024316][ T9740] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.033346][ T9740] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.042253][ T9740] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.051319][ T9740] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.060477][ T9740] geneve1: entered allmulticast mode [ 457.074027][ T9740] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 457.116648][ T9740] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 457.145040][ T9740] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 457.187344][ T9740] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 457.263791][ T9740] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 457.271188][ T9740] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 457.278653][ T9740] macvlan2: entered allmulticast mode [ 457.284241][ T9740] macvlan3: entered allmulticast mode [ 457.290521][ T9740] bond0: left promiscuous mode [ 457.295359][ T9740] bond_slave_0: left promiscuous mode [ 457.300941][ T9740] bond_slave_1: left promiscuous mode [ 457.315095][ T9740] macvlan4: left promiscuous mode [ 457.320174][ T9740] macvlan4: entered allmulticast mode [ 457.525169][ T9790] pim6reg1: entered promiscuous mode [ 457.575189][ T9790] pim6reg1: entered allmulticast mode [ 457.880106][ T9821] loop2: detected capacity change from 0 to 7 [ 457.902020][ T9821] loop2: p1 [ 457.933060][ T9821] loop2: partition table partially beyond EOD, truncated [ 458.010763][ T9821] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 458.044820][ T2151] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 458.214819][ T2151] usb 4-1: Using ep0 maxpacket: 8 [ 458.250099][ T2151] usb 4-1: unable to get BOS descriptor or descriptor too short [ 458.262001][ T2151] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 458.284814][ T2151] usb 4-1: can't read configurations, error -71 [ 458.469526][ T9833] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 458.505858][ T9833] PKCS7: Only support pkcs7_signedData type [ 458.714993][ T9383] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 458.775493][ T9845] netlink: 'syz.1.1005': attribute type 11 has an invalid length. [ 458.870869][ T9846] can0: slcan on ttyS3. [ 458.886660][ T9383] usb 3-1: Using ep0 maxpacket: 16 [ 458.894460][ T9383] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 458.940411][ T9383] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 458.956978][ T9383] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.987601][ T9383] usb 3-1: Product: syz [ 459.006165][ T9845] can0 (unregistered): slcan off ttyS3. [ 459.016866][ T9383] usb 3-1: Manufacturer: syz [ 459.037077][ T30] audit: type=1326 audit(1754234136.157:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9849 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783558eb69 code=0x7ffc0000 [ 459.037410][ T9383] usb 3-1: SerialNumber: syz [ 459.058594][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.119531][ T30] audit: type=1326 audit(1754234136.157:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9849 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783558eb69 code=0x7ffc0000 [ 459.141086][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.150642][ T9383] usb 3-1: config 0 descriptor?? [ 459.157011][ T30] audit: type=1326 audit(1754234136.197:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9849 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f783558eb69 code=0x7ffc0000 [ 459.185082][ T30] audit: type=1326 audit(1754234136.197:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9849 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783558eb69 code=0x7ffc0000 [ 459.206738][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.255509][ T30] audit: type=1326 audit(1754234136.197:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9849 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f783558eb69 code=0x7ffc0000 [ 459.278684][ T9383] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 459.294170][ T30] audit: type=1326 audit(1754234136.197:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9849 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783558eb69 code=0x7ffc0000 [ 459.402186][ T9383] usb 3-1: USB disconnect, device number 40 [ 459.414666][ T3517] usb 3-1: Failed to submit usb control message: -71 [ 459.414735][ T30] audit: type=1326 audit(1754234136.197:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9849 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783558eb69 code=0x7ffc0000 [ 459.445143][ T3517] usb 3-1: unable to send the bmi data to the device: -71 [ 459.470160][ T30] audit: type=1326 audit(1754234136.197:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9849 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f783558eb69 code=0x7ffc0000 [ 459.470847][ T3517] usb 3-1: unable to get target info from device [ 459.491621][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.513763][ T3517] usb 3-1: could not get target info (-71) [ 459.520446][ T3517] usb 3-1: could not probe fw (-71) [ 459.566785][ T9858] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 460.315438][ T9864] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1009'. [ 460.578689][ T9870] loop2: detected capacity change from 0 to 7 [ 460.619885][ T9870] loop2: p1 [ 460.694742][ T9870] loop2: partition table partially beyond EOD, truncated [ 460.794738][ T9870] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 461.914385][ T9888] tmpfs: Unknown parameter 'õsrquota' [ 462.724509][ T7815] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 462.915015][ T7815] usb 4-1: Using ep0 maxpacket: 32 [ 462.950285][ T7815] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 462.998429][ T7815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.252961][ T7815] usb 4-1: config 0 descriptor?? [ 463.412528][ T7815] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 463.604569][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1020'. [ 464.077555][ T7815] gspca_nw80x: reg_w err -110 [ 464.138453][ T7815] nw80x 4-1:0.0: probe with driver nw80x failed with error -110 [ 465.261454][ T2151] usb 4-1: USB disconnect, device number 38 [ 465.645509][ T9383] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 465.834551][ T9383] usb 1-1: device descriptor read/64, error -71 [ 465.870922][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1029'. [ 466.073851][ T9383] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 466.258247][ T9383] usb 1-1: device descriptor read/64, error -71 [ 466.482699][ T9937] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.547048][ T9383] usb usb1-port1: attempt power cycle [ 466.759239][ T9937] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.794011][ T9781] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 466.894152][ T9383] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 466.949638][ T9383] usb 1-1: device descriptor read/8, error -71 [ 466.986447][ T9781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 466.987484][ T9937] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.014266][ T9781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 8 [ 467.142671][ T9949] NILFS (nullb0): couldn't find nilfs on the device [ 467.173997][ T9781] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 467.183122][ T9781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.193764][ T9383] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 467.194973][ T9781] usb 5-1: config 0 descriptor?? [ 467.208562][ T9947] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 467.217032][ T9947] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 467.288470][ T9383] usb 1-1: device descriptor read/8, error -71 [ 467.358895][ T9937] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.415793][ T9383] usb usb1-port1: unable to enumerate USB device [ 467.560665][ T9937] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.626459][ T9937] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.705110][ T9781] aquacomputer_d5next 0003:0C70:F0B6.000E: hidraw0: USB HID v8.da Device [HID 0c70:f0b6] on usb-dummy_hcd.4-1/input0 [ 467.720246][ T9937] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.749558][ T9937] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.630116][ T9781] usb 5-1: USB disconnect, device number 39 [ 468.692285][ T5890] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 468.715260][ T5890] hid-generic 0000:0000:0000.000F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 468.748687][ T9969] loop2: detected capacity change from 0 to 7 [ 468.945292][ T9969] loop2: p1 [ 468.954639][ T9969] loop2: partition table partially beyond EOD, truncated [ 468.961866][ T9969] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 469.761940][ T7815] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 469.866940][ T9976] overlay: Bad value for 'workdir' [ 470.077718][ T7815] usb 4-1: Using ep0 maxpacket: 32 [ 470.107970][ T7815] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 470.117015][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'. [ 470.123370][ T7815] usb 4-1: config 0 has no interface number 0 [ 470.145025][ T7815] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 470.163456][ T7815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.189894][ T7815] usb 4-1: Product: syz [ 470.197609][ T7815] usb 4-1: Manufacturer: syz [ 470.202284][ T7815] usb 4-1: SerialNumber: syz [ 470.204347][ T9989] loop6: detected capacity change from 0 to 1 [ 470.214780][ T7815] usb 4-1: config 0 descriptor?? [ 470.223046][ T7815] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 470.237830][ T9989] Dev loop6: unable to read RDB block 1 [ 470.244226][ T9989] loop6: unable to read partition table [ 470.250684][ T9989] loop6: partition table beyond EOD, truncated [ 470.257942][ T9989] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 470.293538][ T2151] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 470.458213][ T7815] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 470.551201][ T2151] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.562307][ T2151] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 470.562314][ T7815] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 470.562341][ T2151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.613888][ T9383] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 470.879371][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 471.000772][ T9383] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.085825][ T2151] usb 5-1: config 0 descriptor?? [ 471.090994][ T9383] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 471.136371][ T9383] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 471.148939][ T9383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 471.157275][ T9383] usb 3-1: SerialNumber: syz [ 471.307169][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 471.313988][ T5890] usb 4-1: USB disconnect, device number 39 [ 471.348361][ T5890] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 471.381148][ T9993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.390291][ T9993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.454109][ T5890] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 471.475376][ T5890] quatech2 4-1:0.51: device disconnected [ 471.482304][T10008] netlink: 'syz.0.1053': attribute type 16 has an invalid length. [ 471.496187][T10008] netlink: 'syz.0.1053': attribute type 17 has an invalid length. [ 471.505939][ T9383] usb 3-1: 0:2 : does not exist [ 471.529754][ T9383] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 471.571158][ T9383] usb 3-1: USB disconnect, device number 41 [ 471.747061][T10014] netlink: 'syz.1.1055': attribute type 9 has an invalid length. [ 471.785146][T10014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 473.167092][ T5979] usb 5-1: USB disconnect, device number 40 [ 473.329265][T10013] sctp: [Deprecated]: wÞ£ÿ (pid 10013) Use of int in max_burst socket option deprecated. [ 473.329265][T10013] Use struct sctp_assoc_value instead [ 473.586221][T10033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1060'. [ 473.826979][T10027] delete_channel: no stack [ 473.889488][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'. [ 473.898805][ T30] audit: type=1400 audit(1754234151.009:234): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=10029 comm="syz.0.1060" saddr=172.30.0.1 daddr=172.20.20.170 netif=wpan0 [ 475.297633][T10056] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 10056 comm: syz.0.1066) [ 476.062777][ T30] audit: type=1800 audit(1754234152.429:235): pid=10056 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1066" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=25202 res=0 errno=0 [ 476.329082][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1064'. [ 476.417236][T10060] netlink: 'syz.2.1064': attribute type 30 has an invalid length. [ 476.645608][T10060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1064'. [ 479.854801][T10090] ALSA: mixer_oss: invalid OSS volume 'LI' [ 479.956850][T10097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1076'. [ 479.965955][ T30] audit: type=1400 audit(1754234157.070:236): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=10094 comm="syz.1.1076" saddr=172.30.0.2 daddr=172.20.20.170 netif=gre0 [ 480.156133][T10102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1077'. [ 480.902177][ T9778] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 481.042130][ T9778] usb 4-1: device descriptor read/64, error -71 [ 481.382836][ T9778] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 481.883245][T10121] sctp: [Deprecated]: syz.0.1072 (pid 10121) Use of int in max_burst socket option. [ 481.883245][T10121] Use struct sctp_assoc_value instead [ 481.992196][ T9778] usb 4-1: device descriptor read/64, error -71 [ 482.112300][ T9778] usb usb4-port1: attempt power cycle [ 482.471968][ T5979] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 482.491895][ T9778] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 482.512617][ T9778] usb 4-1: device descriptor read/8, error -71 [ 482.561924][ T5922] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 482.656022][ T5979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 482.704842][ T5979] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 482.721842][ T5979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.730282][ T5979] usb 1-1: Product: syz [ 482.740623][ T5979] usb 1-1: Manufacturer: syz [ 482.745793][ T5979] usb 1-1: SerialNumber: syz [ 482.759933][ T5979] usb 1-1: config 0 descriptor?? [ 482.781853][ T9778] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 482.802000][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 482.813267][ T9778] usb 4-1: device descriptor read/8, error -71 [ 482.833612][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.868220][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.879541][ T5922] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 482.892005][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.929200][ T5922] usb 3-1: config 0 descriptor?? [ 482.972204][ T9778] usb usb4-port1: unable to enumerate USB device [ 482.992890][ T5922] hub 3-1:0.0: USB hub found [ 483.067770][ T5979] usb 1-1: USB disconnect, device number 29 [ 483.239972][ T5922] hub 3-1:0.0: 1 port detected [ 483.868391][T10150] loop2: detected capacity change from 0 to 7 [ 483.879865][T10150] loop2: p1 [ 483.896235][ T5922] hub 3-1:0.0: activate --> -90 [ 483.897467][T10150] loop2: partition table partially beyond EOD, truncated [ 483.984394][T10150] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 484.521813][ T9383] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 484.560208][ T5922] usb 3-1-port1: config error [ 484.746983][ T9383] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.753934][ T5922] usb 3-1-port1: cannot disable (err = -71) [ 484.758647][ T5890] usb 3-1: USB disconnect, device number 42 [ 484.783472][ T9383] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 484.807070][ T5922] usb 3-1-port1: attempt power cycle [ 484.837162][ T9383] usb 1-1: config 0 interface 0 has no altsetting 0 [ 484.862976][ T9383] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 484.909114][ T9383] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.947759][ T9383] usb 1-1: config 0 descriptor?? [ 485.042789][ T30] audit: type=1326 audit(1754234162.150:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10165 comm="syz.1.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505fb8eb69 code=0x7ffc0000 [ 485.111651][ T30] audit: type=1326 audit(1754234162.150:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10165 comm="syz.1.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f505fb8d4d0 code=0x7ffc0000 [ 485.166701][T10146] netlink: 'syz.0.1089': attribute type 5 has an invalid length. [ 485.176322][T10168] netlink: 'syz.0.1089': attribute type 5 has an invalid length. [ 485.182037][T10146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1089'. [ 485.184420][T10168] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1089'. [ 485.196742][ T30] audit: type=1326 audit(1754234162.150:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10165 comm="syz.1.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f505fb90397 code=0x7ffc0000 [ 485.441553][ T5922] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 485.450960][ T30] audit: type=1326 audit(1754234162.150:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10165 comm="syz.1.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f505fb8eb69 code=0x7ffc0000 [ 485.473279][ T30] audit: type=1326 audit(1754234162.150:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10165 comm="syz.1.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f505fb90397 code=0x7ffc0000 [ 485.495939][ T30] audit: type=1326 audit(1754234162.150:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10165 comm="syz.1.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f505fb8d7ca code=0x7ffc0000 [ 485.502544][ T9781] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 485.517845][ T30] audit: type=1326 audit(1754234162.150:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10165 comm="syz.1.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505fb8eb69 code=0x7ffc0000 [ 485.517942][ T30] audit: type=1326 audit(1754234162.160:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10165 comm="syz.1.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f505fb8eb69 code=0x7ffc0000 [ 485.588511][ T30] audit: type=1326 audit(1754234162.160:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10165 comm="syz.1.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505fb8eb69 code=0x7ffc0000 [ 485.641552][ T30] audit: type=1326 audit(1754234162.160:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10165 comm="syz.1.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f505fb8eb69 code=0x7ffc0000 [ 485.667299][ T5922] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 485.679283][ T5922] usb 5-1: config 0 has no interface number 0 [ 485.688543][ T5922] usb 5-1: config 0 interface 122 has no altsetting 0 [ 485.744059][ T5922] usb 5-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 485.756835][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.792504][ T9781] usb 4-1: Using ep0 maxpacket: 8 [ 485.801346][ T5922] usb 5-1: Product: syz [ 485.821956][ T9781] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 485.835811][ T5922] usb 5-1: Manufacturer: syz [ 485.842448][ T5922] usb 5-1: SerialNumber: syz [ 485.850958][ T9781] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 485.860872][ T9781] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 485.886680][ T9781] usb 4-1: Product: syz [ 485.892087][ T5922] usb 5-1: config 0 descriptor?? [ 485.906560][ T9781] usb 4-1: Manufacturer: syz [ 485.912233][ T9781] usb 4-1: SerialNumber: syz [ 486.311681][ T9781] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 486.353302][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1096'. [ 486.392587][T10171] openvswitch: netlink: IP tunnel TTL not specified. [ 486.413532][ T9781] visor 4-1:1.0: probe with driver visor failed with error -110 [ 486.466996][T10185] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 487.224040][T10189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1101'. [ 487.415920][ T5922] usb 4-1: USB disconnect, device number 44 [ 487.630650][ T9383] usb 1-1: string descriptor 0 read error: -71 [ 487.652901][ T9383] usbhid 1-1:0.0: can't add hid device: -71 [ 487.681948][ T9383] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 487.713439][T10169] tipc: Enabling of bearer rejected, failed to enable media [ 487.733148][ T9383] usb 1-1: USB disconnect, device number 30 [ 488.006611][T10201] loop2: detected capacity change from 0 to 7 [ 488.019884][T10201] loop2: p1 [ 488.023479][T10201] loop2: partition table partially beyond EOD, truncated [ 488.033024][ T9383] usb 5-1: USB disconnect, device number 41 [ 488.039911][ T9383] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 488.049606][T10201] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 488.504180][ T5890] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 488.882475][ T5890] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.921949][ T5890] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 488.946860][ T5890] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 488.975194][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 488.992969][ T5890] usb 1-1: SerialNumber: syz [ 489.036054][T10207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.049882][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'. [ 489.059584][T10207] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 489.067317][T10207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.626419][ T5890] usb 1-1: 0:2 : does not exist [ 490.647575][ T5890] usb 1-1: USB disconnect, device number 31 [ 490.987277][T10240] netlink: 'syz.4.1112': attribute type 21 has an invalid length. [ 491.004871][T10240] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1112'. [ 491.676598][T10248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1115'. [ 491.893110][ T9383] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 492.091138][ T9383] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 492.115509][ T9383] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.143574][ T9383] usb 4-1: config 0 descriptor?? [ 492.154195][ T9383] cp210x 4-1:0.0: cp210x converter detected [ 492.250803][ T9781] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 492.420861][ T9781] usb 1-1: Using ep0 maxpacket: 8 [ 492.428471][ T9781] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 492.449308][ T9781] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 492.460153][ T9781] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 492.473033][ T9781] usb 1-1: Product: syz [ 492.477367][ T9781] usb 1-1: Manufacturer: syz [ 492.482359][ T9781] usb 1-1: SerialNumber: syz [ 492.569775][ T9383] usb 4-1: cp210x converter now attached to ttyUSB0 [ 492.709422][T10261] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 492.752580][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 492.752603][ T30] audit: type=1326 audit(1754234169.871:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.0.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53958eb69 code=0x7ffc0000 [ 492.828530][ T9781] usb 1-1: palm_os_3_probe - error -110 getting connection information [ 492.838631][ T30] audit: type=1326 audit(1754234169.871:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.0.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7ff53958eb69 code=0x7ffc0000 [ 492.860002][ T9781] visor 1-1:1.0: probe with driver visor failed with error -110 [ 492.889032][ T30] audit: type=1326 audit(1754234169.871:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.0.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7ff53958eb69 code=0x7ffc0000 [ 492.962971][ T30] audit: type=1326 audit(1754234169.871:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.0.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7ff53958eb69 code=0x7ffc0000 [ 492.985058][ T30] audit: type=1326 audit(1754234169.871:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.0.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7ff53958eb69 code=0x7ffc0000 [ 493.007656][ T30] audit: type=1326 audit(1754234169.871:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.0.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7ff53958eb69 code=0x7ffc0000 [ 493.030021][ T30] audit: type=1326 audit(1754234169.871:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.0.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7ff53958eb69 code=0x7ffc0000 [ 493.052161][ T30] audit: type=1326 audit(1754234169.871:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.0.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7ff53958eb69 code=0x7ffc0000 [ 493.227397][ T30] audit: type=1326 audit(1754234169.871:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.0.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7ff53958eb69 code=0x7ffc0000 [ 493.255304][ T30] audit: type=1326 audit(1754234169.871:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.0.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7ff53958eb69 code=0x7ffc0000 [ 493.352879][T10276] Bluetooth: (null): Invalid header checksum [ 494.300696][ T9383] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 494.402237][ T2151] usb 1-1: USB disconnect, device number 32 [ 494.690906][ T9781] usb 4-1: USB disconnect, device number 45 [ 494.706931][ T9781] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 494.754889][ T9781] cp210x 4-1:0.0: device disconnected [ 494.778757][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1124'. [ 494.822898][ T9383] usb 2-1: Using ep0 maxpacket: 16 [ 494.844511][ T9383] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.904390][ T9383] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 494.932803][ T9383] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 494.944202][ T9383] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.959216][ T9383] usb 2-1: config 0 descriptor?? [ 495.120727][ T2151] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 495.300480][ T2151] usb 1-1: Using ep0 maxpacket: 16 [ 495.314468][ T2151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.348402][ T2151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.400583][ T5890] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 495.413919][ T2151] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 495.440750][ T9383] nintendo 0003:057E:2019.0010: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 495.474951][ T2151] usb 1-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 495.671464][ T2151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.713296][ T5890] usb 4-1: unable to get BOS descriptor or descriptor too short [ 495.725153][ T2151] usb 1-1: config 0 descriptor?? [ 495.909965][ T5890] usb 4-1: not running at top speed; connect to a high speed hub [ 496.068914][ T5890] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.122356][ T5890] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 496.138591][ T5890] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 496.171740][ T5890] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 496.184084][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.198347][ T5890] usb 4-1: Product: syz [ 496.214918][ T5890] usb 4-1: Manufacturer: syz [ 496.226056][ T5890] usb 4-1: SerialNumber: syz [ 496.329649][ T2151] lg-g15 0003:046D:C227.0011: hidraw1: USB HID v0.00 Device [HID 046d:c227] on usb-dummy_hcd.0-1/input0 [ 496.465637][ T5890] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 496.525847][ T5922] usb 1-1: USB disconnect, device number 33 [ 496.585120][ T5890] usb 4-1: USB disconnect, device number 46 [ 496.921267][ T9383] nintendo 0003:057E:2019.0010: Failed to get joycon info; ret=-71 [ 496.949656][ T9383] nintendo 0003:057E:2019.0010: Failed to retrieve controller info; ret=-71 [ 496.990155][ T9383] nintendo 0003:057E:2019.0010: Failed to initialize controller; ret=-71 [ 497.020696][ T9383] nintendo 0003:057E:2019.0010: probe - fail = -71 [ 497.048703][ T9383] nintendo 0003:057E:2019.0010: probe with driver nintendo failed with error -71 [ 497.112044][ T9383] usb 2-1: USB disconnect, device number 34 [ 497.176855][T10319] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not 'ethtool' [ 497.493478][T10324] vlan0: left allmulticast mode [ 498.095610][T10340] netlink: 'syz.2.1137': attribute type 21 has an invalid length. [ 498.103709][T10340] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1137'. [ 498.399326][T10353] tipc: Enabled bearer , priority 0 [ 498.438952][T10353] syzkaller0: entered promiscuous mode [ 498.458231][T10353] syzkaller0: entered allmulticast mode [ 498.550040][ T9781] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 498.657836][ T7387] BUG: assuming non migratable context at ./include/linux/filter.h:703 [ 498.692699][ T7387] in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 7387, name: kworker/u8:15 [ 498.707524][ T7387] 5 locks held by kworker/u8:15/7387: [ 498.715226][ T7387] #0: ffff888030685148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 498.733356][ T7387] #1: ffffc90003d8fbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 498.749349][ T7387] #2: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 498.819937][ T9781] usb 1-1: Using ep0 maxpacket: 16 [ 498.828257][ T7387] #3: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x208/0x1400 [ 498.848383][ T9781] usb 1-1: config 5 has an invalid interface number: 168 but max is 0 [ 498.873305][ T9781] usb 1-1: config 5 has no interface number 0 [ 498.880036][ T7387] #4: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0x9d/0x380 [ 498.896533][ T9781] usb 1-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 498.916919][ T9781] usb 1-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 498.917042][ T7387] CPU: 0 UID: 0 PID: 7387 Comm: kworker/u8:15 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 498.917071][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 498.917088][ T7387] Workqueue: ipv6_addrconf addrconf_dad_work [ 498.917126][ T7387] Call Trace: [ 498.917137][ T7387] [ 498.917150][ T7387] dump_stack_lvl+0x189/0x250 [ 498.917186][ T7387] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.917226][ T7387] ? print_lock_name+0xde/0x100 [ 498.917264][ T7387] __cant_migrate+0x238/0x2e0 [ 498.917296][ T7387] ? __pfx___cant_migrate+0x10/0x10 [ 498.917320][ T7387] ? __local_bh_enable_ip+0x12d/0x1c0 [ 498.917354][ T7387] ? ip6table_mangle_hook+0x2a2/0x6c0 [ 498.917393][ T7387] ? nf_nat_ipv6_fn+0xe7/0x2d0 [ 498.917428][ T7387] nf_hook_run_bpf+0x8f/0x1f0 [ 498.917453][ T7387] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 498.917491][ T7387] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 498.917522][ T7387] ? nf_nat_ipv6_out+0x21d/0x380 [ 498.917551][ T7387] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 498.917578][ T7387] nf_hook_slow+0xc5/0x220 [ 498.917639][ T7387] nf_hook+0x217/0x380 [ 498.917683][ T7387] ? nf_hook+0x9d/0x380 [ 498.917717][ T7387] ? __pfx_nf_hook+0x10/0x10 [ 498.917755][ T7387] ? __pfx_ip6_finish_output+0x10/0x10 [ 498.917803][ T7387] ip6_output+0x27d/0x3e0 [ 498.917834][ T7387] ? __pfx_ip6_finish_output+0x10/0x10 [ 498.917904][ T7387] ndisc_send_skb+0xb47/0x1400 [ 498.917932][ T7387] ? ndisc_send_skb+0x208/0x1400 [ 498.917973][ T7387] ? __pfx_ndisc_send_skb+0x10/0x10 [ 498.918002][ T7387] ? __pfx_dst_output+0x10/0x10 [ 498.918062][ T7387] addrconf_dad_completed+0x7ae/0xd60 [ 498.918108][ T7387] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 498.918154][ T7387] addrconf_dad_work+0xc36/0x14b0 [ 498.918184][ T7387] ? __lock_acquire+0xab9/0xd20 [ 498.918217][ T7387] ? __pfx_addrconf_dad_work+0x10/0x10 [ 498.918249][ T7387] ? process_scheduled_works+0x9ef/0x17b0 [ 498.918284][ T7387] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.918306][ T7387] ? process_scheduled_works+0x9ef/0x17b0 [ 498.918331][ T7387] ? process_scheduled_works+0x9ef/0x17b0 [ 498.918359][ T7387] process_scheduled_works+0xade/0x17b0 [ 498.918427][ T7387] ? __pfx_process_scheduled_works+0x10/0x10 [ 498.918477][ T7387] worker_thread+0x8a0/0xda0 [ 498.918545][ T7387] kthread+0x70e/0x8a0 [ 498.918584][ T7387] ? __pfx_worker_thread+0x10/0x10 [ 498.918612][ T7387] ? __pfx_kthread+0x10/0x10 [ 498.918646][ T7387] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.918667][ T7387] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.918691][ T7387] ? __pfx_kthread+0x10/0x10 [ 498.918724][ T7387] ret_from_fork+0x3fc/0x770 [ 498.918755][ T7387] ? __pfx_ret_from_fork+0x10/0x10 [ 498.918787][ T7387] ? __switch_to_asm+0x39/0x70 [ 498.918816][ T7387] ? __switch_to_asm+0x33/0x70 [ 498.918842][ T7387] ? __pfx_kthread+0x10/0x10 [ 498.918887][ T7387] ret_from_fork_asm+0x1a/0x30 [ 498.918940][ T7387] [ 499.218130][ T9781] usb 1-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 499.228608][ T9781] usb 1-1: config 5 interface 168 has no altsetting 0 [ 499.239330][ T9781] usb 1-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 499.243427][T10353] tipc: Resetting bearer [ 499.255466][ T9781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.263861][ T9781] usb 1-1: Product: syz [ 499.268329][ T9781] usb 1-1: Manufacturer: syz [ 499.273232][ T9781] usb 1-1: SerialNumber: syz [ 499.273638][T10352] tipc: Resetting bearer [ 499.283143][T10351] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 499.291874][T10351] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 499.353086][T10352] tipc: Disabling bearer [ 499.525529][T10364] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 499.632525][ C1] usb 1-1: NFC: Urb failure (status -71) [ 499.638863][ C1] usb 1-1: NFC: Urb failure (status -71) [ 499.661465][ T9781] usb 1-1: NFC: Unable to get FW version [ 499.667927][ T9781] pn533_usb 1-1:5.168: probe with driver pn533_usb failed with error -71 [ 499.722422][ T9781] usb 1-1: USB disconnect, device number 34 [ 506.813151][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.820430][ T1300] ieee802154 phy1 wpan1: encryption failed: -22