last executing test programs: 8m45.325316558s ago: executing program 2 (id=231): syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r2, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x2, {0x3, 0x4, 0xc, 0x5, 0x0, 0x1000, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0xf5, 0x0, 0x4, 0x0, 0x7, 0xc000, 0x2, r3, r4, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r1, 0x2, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffde6}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 8m44.99586723s ago: executing program 2 (id=232): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x18, r1, 0x211, 0xfffffffd, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) 8m44.486184308s ago: executing program 2 (id=234): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0xd}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000004c0)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000280)=ANY=[@ANYRESDEC]) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r4, &(0x7f0000000440)="37ea86043a10d7a4c5c289e5373ab8254a040000000000000031f7729f1cb28acf27162fed84ab000000000000000000", 0x0}, 0x20) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xfc}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@ipv4_newrule={0x48, 0x20, 0x400, 0x70bd27, 0x25dfdbfd, {0x2, 0x80, 0x0, 0xa, 0xb5, 0x0, 0x0, 0x8, 0x10000}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'vlan0\x00'}, @FRA_SRC={0x8, 0x2, @local}, @FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_FLOW={0x8, 0xb, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x9, @private0, 0x8}]}, &(0x7f0000000140)=0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) close(0xffffffffffffffff) 8m44.389764064s ago: executing program 1 (id=235): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$kcm(0x2d, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r2}) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs_stats\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000140)=0xf6, 0x4) madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xc) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/154, 0x9a, 0x51) pipe2$watch_queue(0x0, 0x80) set_mempolicy(0x3, 0x0, 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) unshare(0xe060400) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = landlock_create_ruleset(&(0x7f0000000080)={0xc77a, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) listen(r4, 0xa) landlock_restrict_self(r5, 0x0) listen(r4, 0x0) userfaultfd(0x80001) 8m44.080320153s ago: executing program 4 (id=236): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140)) gettid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000400c) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b9000000001090212"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$cdc_ncm(0x6, 0x77, &(0x7f0000000d40)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x24, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "60d7d66e86"}, {0x5, 0x24, 0x0, 0xf58}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1c00, 0xb, 0xa}, {0x6, 0x24, 0x1a, 0x0, 0x50}, [@acm={0x4, 0x24, 0x2, 0xa}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xa, 0x16, 0x32}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x2, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x10, 0x7f, 0xb}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x4, 0x2, 0x8, 0x8, 0xca}, 0x12, &(0x7f0000000c40)=ANY=[], 0x6, [{0x65, &(0x7f0000000900)=@string={0x65, 0x3, "38bd8b295aa1d47b02e7f02689a11fa82df5477a560b550672619b2428b287624e1818af256dc89c06e05e8d152d461b2baeb7166b8429feeb8189a2e88136b0b78764658b36453eb6bf1ee70da1f87bc071f6eac77cc2afe2e1c508595db46319584f"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x42b}}, {0xe9, &(0x7f00000003c0)=ANY=[@ANYBLOB="e9031a2ce7568646390c8a679d81fd3a9f4f6d2bf573d2a0e145bcb736a0241d2397003f3c918ac3e2fbfc6aa73643fd5d50053fb9f51c58054515f211e74283759878f8eb85ae8acf5a2b8cc75943c6df01c43ddc7c84cdb3be1ae35d96d498f38b7fcc6d16f0ee9c5c87af6c0c81b88c12587bc89077a402bb3a32b7b975237e9662d1acf9618db2b072ab91f51444f0f2ca1a450200000000000000200a1d982409faa163277b500a5081e35435d41afa29bce2435820d2ea76d93680a162fc0838601df6a49c5bba933f39ec180e8c1c6394b052a8b0fa8bd752fc16ad28e3c8883ed9cf0e106f391dc77729e1"]}]}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x62, &(0x7f0000000200)=0xad52, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r3, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff, 0x3}) socket$inet6(0xa, 0xeee1f5804a5b0510, 0x3) socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') futimesat(r5, 0x0, 0x0) write$apparmor_current(r4, &(0x7f0000000100)=@hat={'changehat ', 0x2, 0x5e, ['/dev/ttyS3\x00', ']\x99D!/ttyS3\x00', '/dev/ttyS3\x00', '\xce\xb5', '\x00']}, 0x41) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x383940, 0x0) epoll_create(0x4000100) 8m43.04111582s ago: executing program 0 (id=240): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r6 = msgget$private(0x0, 0x6c2) msgsnd(r6, &(0x7f0000000340)={0x3}, 0x2000, 0x0) syz_open_dev$sg(0x0, 0x1a, 0x20000) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @private=0xa010102}, 0x10) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r7, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x23, 0x30, 0x0, 0x20, 0xfd, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300, {[@end, @ssrr={0x89, 0x7, 0x13, [@rand_addr=0x64010100]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x3, 0x200, 0x2, 0x2, 0x1}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x1d, 0x3, @private=0xa010102, @local}}}}}}, 0x0) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000300)={&(0x7f00000002c0)=[{0x100, 0x2400, 0x44, &(0x7f0000000180)="1bf6fc5d12b23b21ab65e90bfcf87fbf10f4ec084420feed8e9e8c82bc9f4e83c42929eb426124254fc2ef491d79a88efe6ba6572141dfda71600a84c89b70af536b60ca"}, {0xff, 0x210, 0xac, &(0x7f0000000200)="af1e5aaa4c8149ae77789173df172e7868de43c07b2c2391bfd658a2cfe0c6eafbf7e73522bd8b2368a0ec2a64ec67e75374d54037086feeb3a108295a96991b30ab86fedb0553d95d5cafee894a15273cea0d40c08752f68f5a8908cf317afd96c100e7c0f9120366f0f5481848084d9094a863b4ba1dccfb585124f667bc763221658d7a58df03a5d197f10f59c4a714d1b86b67e238be2bbf2645c60cf7ae9fb292c0da499ea08089fccb"}, {0x81, 0xd400, 0x30, &(0x7f0000000080)="243c4f27f1dc6f8d5c7d1a58bf2075de9c049fec8563c95e61534023ceb6ef10911dececa19f9a34602f92e60b53dd4b"}], 0x3}) r9 = socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x800) prctl$PR_SCHED_CORE(0x35, 0x2, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) bind$rds(r10, &(0x7f00000003c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "fc79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 8m42.211881517s ago: executing program 1 (id=241): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x102, 0x0) sendfile(r0, r0, 0x0, 0x6) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x2000, 0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_fuse_handle_req(r2, &(0x7f0000000100)="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", 0x2000, &(0x7f0000004e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x2, 0x1, 0x0, 0x946, 0x490}, &(0x7f0000000100)=0x14) unshare(0x8040480) rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0xa}, 0x20, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) setitimer(0x0, 0x0, &(0x7f00000002c0)) 8m41.253544271s ago: executing program 0 (id=242): r0 = socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c010000190001000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c400050000000000000000000000000000000000000000003200000000000000ac14141d000000000000000000000000000000000000ff00000000000000000001000000fc020000000000000000000000000000000000003200000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000000000000100000000000000000000000000300"/308], 0x17c}}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x7c61d607c6d94c11, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r4, 0x0, 0x0, 0xc9100121, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x184, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x0, 0xb4}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000020601020000000000000000000000000500010006000000050005000a00000005000400000000000900020073797a31000040000c000300686173683a697000"], 0x44}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c00f5ff0906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x9}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 8m40.673595816s ago: executing program 4 (id=243): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_IV'}]}}}]}, 0x44}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@ipv6_getanyicast={0x14, 0x3e, 0x100, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x11) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r4 = gettid() tkill(r4, 0x7) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000300)=0x3) write$tun(r1, &(0x7f0000000100)={@val={0x0, 0xf8}, @val={0x0, 0x80, 0x0, 0x40, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@generic={0x0, 0x2}]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x4, 0xfff8, 0x66, 0x7, 0x0, 0x6, 0x6, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0xfd, 0x0}}}}}, 0x42) 8m40.432076342s ago: executing program 4 (id=244): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x18, r1, 0x211, 0xfffffffd, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) 8m40.294961951s ago: executing program 4 (id=245): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x20004000}}], 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x0, 0xb4, 0x8c, 0xbb}}]}}]}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 8m39.737520499s ago: executing program 2 (id=247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r1, 0x3b84, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000880)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r4, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000000) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000080)={{r2}, 0xadf2, 0x6, 0x9}) syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960400000001030200010006000609240305050306058109240306010104050507240405"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e1c, @remote}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/rcu_expedited', 0x50100, 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 8m39.06560023s ago: executing program 0 (id=248): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c0002800500010000000000140001"], 0xe4}}, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x5c1cde45781b5b85, 0x808000, 0x0, 0x0, 0x2080, 0x65f40}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) write$cgroup_int(r4, &(0x7f0000000080)=0xffefffffffffff05, 0x12) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f00000000c0)) 8m38.534492356s ago: executing program 1 (id=249): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0xc}, {0xffff, 0xffff}, {0x0, 0x8abf833ddfa404b6}}, [@TCA_CHAIN={0x8, 0xb, 0x401}]}, 0x2c}}, 0x4c844) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd700100000000030000005800018044000400200001000a00000000200000fe800000000000000000000000000010f8000000200002000a004e2300000005ff010000000000000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x8000) 8m38.229642054s ago: executing program 0 (id=250): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x42, 0x1fe) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000a00)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="8d7fee", 0x3}, {&(0x7f0000000740)="d627fe", 0x3}], 0x2, &(0x7f0000000ac0)=ANY=[], 0x70}, 0x4) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000040000003003e00ebffffff940200000000e62c0e880000000000000000000000000000000000002c8f380001"], 0x78) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 8m38.138225393s ago: executing program 0 (id=252): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x2000, @fd_index=0x3, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000700)={0x2, 0x0, [{0x2, 0x7f, &(0x7f00000001c0)=""/127}, {0x11000, 0x89, &(0x7f0000000580)=""/137}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'vlan0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r8 = syz_open_dev$dri(0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0x7fff0000}]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, 0x0) r9 = fsopen(0x0, 0x1) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0xe, 0x3000, 0x0, r9, 0xb}) bind$packet(r10, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 8m38.089454495s ago: executing program 2 (id=253): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040040) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0xb, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4844}, 0x4800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8m38.00550801s ago: executing program 4 (id=254): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x200) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x1, 0x1, "fd"}, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000280)=""/239, 0xef) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00'], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000740)=""/51, 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000b40)) r7 = dup(r6) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1, r7}) ioctl$VHOST_NET_SET_BACKEND(r5, 0xaf02, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) r8 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = gettid() sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0xffffffffffffffe3, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008080) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0) unshare(0x26020480) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) 8m37.540274488s ago: executing program 1 (id=255): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r1, 0x211, 0xfffffffd, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) 8m37.312038369s ago: executing program 1 (id=256): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r3], 0x3c}}, 0x0) close(r3) getsockopt$inet6_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000100)=0x53e999e7a9993618) 8m36.552359823s ago: executing program 1 (id=257): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xe9) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) r3 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ed:cb2e') r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{}, {0x4}]}) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x2, 0x101, 0x5, 0x5, 0xfffb, 0x8001, 0x4, {0x0, @in6={{0xa, 0x4e20, 0x7, @loopback, 0x4}}, 0x20000000, 0xf4, 0x9, 0x0, 0x4}}, &(0x7f00000001c0)=0xb0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r4, 0xffffffffffffffff, 0x0, 0x20000023893) 8m35.8614209s ago: executing program 0 (id=258): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl1\x00', 0x0}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x8004, 0x0, 0xb49, 0x200000000001, 0x6, 0x8, 0x3}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r3, r3, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0xe00, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) close_range(r4, r5, 0x200000000000000) r6 = syz_open_dev$media(&(0x7f00000006c0), 0x4, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0x541b, 0x0) fchdir(0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x84}, 0x0) userfaultfd(0x801) openat$kvm(0x0, &(0x7f0000000040), 0x10b500, 0x0) 8m35.512615134s ago: executing program 2 (id=259): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) accept(r0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000000)={0xf, {"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", 0x1000}}, 0x1006) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)) 8m26.697504224s ago: executing program 4 (id=260): r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) utimes(&(0x7f0000000340)='./bus\x00', &(0x7f0000000180)={{0x0, 0xea60}}) sendfile(r0, r0, 0x0, 0x800000009) socket$nl_netfilter(0x10, 0x3, 0xc) lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0xb9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unshare(0x2c020400) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000100)=0x28) 8m10.782135878s ago: executing program 32 (id=258): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl1\x00', 0x0}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x8004, 0x0, 0xb49, 0x200000000001, 0x6, 0x8, 0x3}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r3, r3, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0xe00, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) close_range(r4, r5, 0x200000000000000) r6 = syz_open_dev$media(&(0x7f00000006c0), 0x4, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0x541b, 0x0) fchdir(0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x84}, 0x0) userfaultfd(0x801) openat$kvm(0x0, &(0x7f0000000040), 0x10b500, 0x0) 8m10.612466435s ago: executing program 33 (id=257): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xe9) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) r3 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ed:cb2e') r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{}, {0x4}]}) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x2, 0x101, 0x5, 0x5, 0xfffb, 0x8001, 0x4, {0x0, @in6={{0xa, 0x4e20, 0x7, @loopback, 0x4}}, 0x20000000, 0xf4, 0x9, 0x0, 0x4}}, &(0x7f00000001c0)=0xb0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r4, 0xffffffffffffffff, 0x0, 0x20000023893) 8m10.419854658s ago: executing program 34 (id=259): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) accept(r0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000000)={0xf, {"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", 0x1000}}, 0x1006) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)) 8m10.312668912s ago: executing program 35 (id=260): r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) utimes(&(0x7f0000000340)='./bus\x00', &(0x7f0000000180)={{0x0, 0xea60}}) sendfile(r0, r0, 0x0, 0x800000009) socket$nl_netfilter(0x10, 0x3, 0xc) lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0xb9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unshare(0x2c020400) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000100)=0x28) 2m20.18404106s ago: executing program 5 (id=1557): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0xfffffffd, 0x10002, 0x8, 0x7fffffff, 0x1d, "58b52d9abf3991ab5ba90fd2ee26ed2ee2f419"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000026c0)=0x3d) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xffffffff, 0xee3, 0x6, 0x7fff, 0xe, "99212c0155b6056ee613657266ec62b016d5a9"}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x9, 0x1, 0x2, 0xfffffffe, 0x12, "f1b71acfe1f4ec544995249da3350749295c0c"}) syz_usb_connect(0x3, 0x58f, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r7, 0x1, 0x70bd28, 0x25dbdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x78}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x292aa3c7e7cc70c}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x29}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c090}, 0x44000) 2m18.161319217s ago: executing program 5 (id=1562): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000000, 0x7, &(0x7f0000006680)) recvmmsg(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/194, 0xc2}, {&(0x7f00000004c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/178, 0xb2}, {&(0x7f00000005c0)=""/144, 0x90}, {&(0x7f00000000c0)=""/52, 0x34}], 0x5, &(0x7f0000000680)=""/210, 0xd2}}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000800)=""/12, 0xc}, {&(0x7f0000000840)=""/234, 0xea}, {&(0x7f0000000940)=""/64, 0x40}], 0x3, &(0x7f00000009c0)=""/101, 0x65}, 0x2}, {{&(0x7f0000000a40)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000ac0)=""/139, 0x8b}, {&(0x7f0000000b80)=""/161, 0xa1}, {&(0x7f0000000c40)=""/143, 0x8f}, {&(0x7f0000000d00)=""/240, 0xf0}, {&(0x7f0000000e00)=""/56, 0x38}], 0x5, &(0x7f0000000ec0)=""/200, 0xc8}, 0x7ff}, {{&(0x7f0000000fc0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001040)=""/185, 0xb9}, {&(0x7f0000001100)=""/2, 0x2}], 0x2, &(0x7f0000001180)=""/171, 0xab}, 0x7}, {{&(0x7f0000001240)=@x25, 0x80, &(0x7f0000001300)=[{&(0x7f00000012c0)=""/60, 0x3c}], 0x1}, 0xbc7}], 0x5, 0x40010102, &(0x7f0000001480)={0x0, 0x3938700}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) sendmmsg$inet(r1, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}], 0x2, 0x20000010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000080)=""/64, 0x40) 2m17.297802144s ago: executing program 5 (id=1566): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x284a00, 0x0) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000240)=0xfff, 0x4) io_uring_enter(r0, 0x5717, 0xa5d9, 0x4, &(0x7f0000000180)={[0x6]}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000280)={0x0, r4}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000000)={0x4, r4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) unshare(0x2c020400) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, 0x0, 0x0) unshare(0x10060280) 2m17.065279657s ago: executing program 5 (id=1569): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) r2 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x8, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 2m16.042428484s ago: executing program 5 (id=1574): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x1) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x20, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x4c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x4, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0xc, "17020000000000000000"}, @sack_perm={0x4, 0x2}]}}, {"49727adcd9d067506f360ea9101982811547367b"}}}}}}, 0x0) 2m15.72949076s ago: executing program 5 (id=1577): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x204) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000100)="f3440fc7b729000000f20f5f0d00000080c4c17d72d500470f38c9403736460fc7b10f240000660f3881078fa9189021da820001c0fef3440f0966b881000f4300d9", 0x42}], 0x1, 0x1c, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) copy_file_range(r3, 0x0, r3, 0x0, 0x4, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$evdev(r4, &(0x7f0000000400)=[{{}, 0x3, 0x9, 0x9}, {{0x77359400}, 0x0, 0x3, 0x7ff}, {{0x77359400}, 0x14, 0x1}, {{0x0, 0x2710}, 0x17, 0xd, 0xffffffff}, {{0x0, 0x2710}, 0x5, 0xe92b}], 0x78) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f00000001c0)={0x0, 0x0, 0x0}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x12d8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m15.368256093s ago: executing program 36 (id=1577): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x204) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000100)="f3440fc7b729000000f20f5f0d00000080c4c17d72d500470f38c9403736460fc7b10f240000660f3881078fa9189021da820001c0fef3440f0966b881000f4300d9", 0x42}], 0x1, 0x1c, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) copy_file_range(r3, 0x0, r3, 0x0, 0x4, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$evdev(r4, &(0x7f0000000400)=[{{}, 0x3, 0x9, 0x9}, {{0x77359400}, 0x0, 0x3, 0x7ff}, {{0x77359400}, 0x14, 0x1}, {{0x0, 0x2710}, 0x17, 0xd, 0xffffffff}, {{0x0, 0x2710}, 0x5, 0xe92b}], 0x78) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f00000001c0)={0x0, 0x0, 0x0}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x12d8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.436594206s ago: executing program 7 (id=2062): syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) syz_open_dev$sndpcmp(0x0, 0x9, 0x800) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x289, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_pidfd_open(0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2e, 0x0, @fd, 0x80000001, 0x0, 0x0, 0x4, 0x0, {0x1}}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) (fail_nth: 3) 10.774706152s ago: executing program 7 (id=2073): sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="020501090b0000002bbd7000fbdbdf25010015004e230000080012000400000000000000fffffff40600ff004f0700000a00000000000000ac00fe88000000000000000000000000000100000000000000000000000000006677cb8a39c3bcd64ac1ca9336105bda9f83a5307c046d7a994daad83566320cbf5b803b39533a2aa8237091ae75314f9d3e05c39f1778b298cbd8d20559f44b2133aee58948214628084671be5dccc8acb49d1f64125428a01fc49319ca0beb92ca6df4d95bb6d1c1d7a22da6b5794798914917dd68cb7d2bbff50f69"], 0x58}}, 0x40004) r0 = syz_io_uring_setup(0x2b74, &(0x7f00000004c0)={0x0, 0x6d8a, 0x40, 0x20040000, 0x10b4}, &(0x7f0000000040), &(0x7f0000000180)) mbind(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x4001, &(0x7f0000000000)=0x3, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/reserved_size', 0x149a82, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r3, 0x4bfb, 0x10000000000ed9) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10001, 0x45}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xcb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) mbind(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x4001, &(0x7f0000000040)=0x1, 0xbab, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000001c0)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x24}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, 0x0, 0x1) lremovexattr(0x0, &(0x7f00000004c0)=ANY=[]) r5 = io_uring_setup(0x1213, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x63, 0x0, r0}) poll(&(0x7f0000000540)=[{r5}, {r0, 0x4}], 0x2, 0x72) flock(0xffffffffffffffff, 0x5) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x1000) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r6, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x4000) ioctl$SNDCTL_DSP_POST(r6, 0x5008, 0x0) r10 = syz_usb_connect(0x0, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000773604202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) 9.681351458s ago: executing program 8 (id=2077): syz_emit_ethernet(0x29, &(0x7f0000000000)={@multicast, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0x99ca, 0x0, 0x1}, {0x6}, {0x8000, 0x0, 0x1}, {}, {0x9, 0x0, 0x1}], @generic="04bb4b"}}}}, &(0x7f0000000040)={0x0, 0x3, [0x74f, 0xb55, 0x765, 0x86e]}) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x40000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0xa1b5d36e167d2b9a}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x4e22, 0x40, @rand_addr=' \x01\x00', 0xd2a}}}, 0x90) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000003c0)={'ip6tnl0\x00', 0x1}) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000400)=0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000440)={r0, 0x4, 0x6, 0x4}) write$tun(r4, &(0x7f0000000480)={@val={0x0, 0x888e}, @void, @eth={@remote, @local, @void, {@arp={0x806, @generic={0x10e, 0x8, 0x6, 0xf, 0x3, @multicast, "3e8c0746ce63a52eaea6c089b8671f", @multicast, "400312a2"}}}}}, 0x39) r5 = accept4$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000500)=0x14, 0x80000) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000540)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000000, 0x30, r0, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, r6, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xba}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x48854}, 0x800) sendmsg$nl_route(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@ipv6_newaddr={0x30, 0x14, 0x200, 0x70bd27, 0x25dfdbff, {0xa, 0x36, 0x2, 0xfe, r3}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_FLAGS={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000800)={{r4}, "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"}) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000001840)={0x2, &(0x7f0000001800)=[{}, {}]}) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000001880), 0x22a00, 0x0) ioctl$UI_GET_SYSNAME(r7, 0x8040552c, &(0x7f00000018c0)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0xc0}, 0xc, &(0x7f0000001a00)={&(0x7f0000001940)={0xbc, r6, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x53}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x2000c09d) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001a80), &(0x7f0000001ac0)=0x4) r8 = socket(0x2a, 0x3, 0x80) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000001b00)={0x1d, @dev={0xac, 0x14, 0x14, 0x25}, 0x4e24, 0x0, 'lblcr\x00', 0x44, 0x7, 0x41}, 0x2c) r9 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) setns(r9, 0x40000000) r10 = syz_open_dev$audion(&(0x7f0000001b40), 0x9a, 0x400241) ioctl$SNDCTL_DSP_GETOPTR(r10, 0x800c5012, &(0x7f0000001b80)) syz_emit_ethernet(0x30, &(0x7f0000001bc0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@llc_tr={0x11, {@llc={0x6, 0xfc, '\"', "37490bc4ea73cff9dc5c835f1358482642d4496e4869335c75c9f7b84b23a5"}}}}}, &(0x7f0000001c00)={0x1, 0x3, [0x2c5, 0x65a, 0x949, 0x2fc]}) 9.417032197s ago: executing program 8 (id=2078): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0x10, 0x4, 0x3, 0x12, @private2, @rand_addr=' \x01\x00', 0x7, 0x8000, 0xc69868b8, 0x1c00000}}) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0xe40ca4f7c51e5624}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r7}, 0x10, &(0x7f0000000100)={0x0, 0x43}, 0x2}, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x5c0fc1, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000280)={0x7, @pix_mp={0x100, 0x3800000, 0x3032344d, 0x4, 0xc, [{0x400, 0xf46}, {0x80000000, 0x31}, {0x5, 0x2}, {0x0, 0x4}, {0xfffffff7, 0x3}, {0xe85, 0x8}, {0x70, 0x1}, {0x5, 0x6}], 0x9, 0xc, 0x6, 0x0, 0x2}}) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32=r8], 0xb0}, 0x1, 0x0, 0x0, 0x2000c005}, 0x4044040) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xfff3, 0x7}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_EMATCHES={0x40, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x30, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x5, 0x5, 'b'}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40010) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x1, 0x10, 0x6, 0x4, {{0x1d, 0x4, 0x2, 0x1, 0x74, 0x64, 0x0, 0xf, 0x2f, 0x0, @multicast1, @private=0xa010102, {[@timestamp_prespec={0x44, 0x1c, 0x18, 0x3, 0x6, [{@broadcast}, {@rand_addr=0x64010101, 0x4}, {@broadcast, 0x1}]}, @timestamp_addr={0x44, 0x44, 0xd5, 0x1, 0xa, [{@empty, 0xffffffff}, {@private=0xa010101, 0x6a}, {@local, 0xffff}, {@rand_addr=0x64010101, 0x80}, {@multicast1, 0x6}, {@private=0xa010102, 0x100}, {@broadcast, 0x7}, {@rand_addr=0x64010101, 0x4}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000540)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x58, &(0x7f0000000580)}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000640)) 9.28791001s ago: executing program 8 (id=2079): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8e2443) ioctl$EVIOCGRAB(r3, 0x40044590, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_ep_write(r5, 0x8d, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000c40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f00000000c0)={r7}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000080)={r8, 0x3, r6, 0x5}) writev(r4, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000440)="3b7f3cca627900a9106eb4b5779662483f44039f98cd4a84cdabdcde4b20d89f8f91ee1179d9a874c425a3a313b220d2eeda0006a41c7375fac167140992d428728fff74c67b17c10333ff84b88747610ea06a2f00729d20b78833f1d2eb5dd003fcb19f439b9045281c6b23d2f5b39b58decaf63f4d88bc3a568c9d554c7093f1cd2883a3b9fea259e238ea828b9fb13a01c196b8a109f8eedf9300bd4f1d7bd6da8e6fadd2c2677299099c8d8d880421340dc5a1954f226c90b43bb4a0ffe2a3949f76fbb2e9630c0a5a671ab928895c451355953221472cde60e7476d6f0e29372f", 0xe3}, {&(0x7f00000002c0)}, {&(0x7f0000000380)="2be8e9f9a39f677e6a6ed0c292838334aca57076a8b1c6fba8cfadfc6fb6c5714fc39eafc9806527d5d13ec7fc2896d3fb991b075ef4e0460ea0463964ec610b8b4e27f3cafb6a35f50f10d41de8407084220dacdfa36896e7f6aa08eaa766ce05", 0x61}], 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) r9 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000000)) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20}, 0x181) r10 = syz_io_uring_setup(0x3a65, &(0x7f0000000280)={0x0, 0xa011, 0x1, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r13, &(0x7f0000000640)=ANY=[@ANYBLOB="59635215775e678bfc4415a6efa421e8fcc9c8882cfa295fbf60996c5ed718862eb660835696193d6ddcba84d46c3311df74b345f17102cea873f6e1bac12fc8425e82c7dd8a42f2b400d43b5e7f223090a560d8670c64a7e7c57914c6a1aa4ac58e17bc31ba3de1b85866"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r13, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2a, 0x0, r13, 0x0, 0x0, 0x0, 0x12001, 0x1}) io_uring_enter(r10, 0x5d62, 0x0, 0x0, 0x0, 0x0) 8.476328756s ago: executing program 6 (id=2080): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x9, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}, @generic='V']}]}, 0x30}, 0x1, 0x700000000000000, 0x0, 0x4048011}, 0xc000) 8.43555245s ago: executing program 6 (id=2081): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x13af55b74e162d0e}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2]}, [@TCA_MQPRIO_MIN_RATE64={0x4}]}}}]}, 0x8c}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x34, 0x0, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xa00000, 0x0, 0x152, 0xffffffffffffffff, 0x0, 0x0}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.260544607s ago: executing program 9 (id=2082): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x55}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x8804) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001200)={{{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000001300)=0xe8) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001340)={'wg2\x00', 0x0}) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001380)={0x6, 0x4, {}, {0xee00}, 0x800, 0x6}) sendmsg$nl_xfrm(r2, &(0x7f00000016c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001680)={&(0x7f00000013c0)=@updsa={0x290, 0x1a, 0x400, 0x70bd29, 0x25dfdbfb, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@empty, 0x4e21, 0x3, 0x4e21, 0xc0dd, 0xa, 0x80, 0x80, 0x0, 0x0, r4}, {@in=@broadcast, 0x4d5, 0x2b}, @in=@private=0xa010101, {0xa, 0x1, 0x9, 0x9, 0x5, 0x1, 0x7f, 0x8}, {0x8, 0x9, 0xb3f, 0x7fffffff}, {0x0, 0x6, 0x8}, 0x70bd2b, 0x34ff, 0x2, 0x1, 0xd, 0x3}, [@algo_auth_trunc={0x75, 0x14, {{'blake2b-384\x00'}, 0x148, 0x200, "313f13dbd16ea8445f5fabeaf416cf19f1aa94ab02486058ee28425714b593b8502d073ff262fd457d"}}, @srcaddr={0x14, 0xd, @in6=@dev={0xfe, 0x80, '\x00', 0x31}}, @replay_esn_val={0x38, 0x17, {0x7, 0x70bd2d, 0x70bd29, 0x70bd2b, 0x70bd29, 0x81, [0x3, 0x1, 0x57, 0x1, 0xffffffff, 0x8000, 0x2]}}, @coaddr={0x14, 0xe, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @coaddr={0x14, 0xe, @in6=@private1}, @policy={0xac, 0x7, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x661, 0x4e21, 0x7ff, 0xa, 0x80, 0xa0, 0x0, r5, r6}, {0x7fff, 0x6, 0xffffffff7fffffff, 0x100000001, 0x40, 0x7, 0xfffffffffffffff7, 0x8000}, {0x2, 0x7, 0x7, 0x40}, 0x6, 0x7, 0x0, 0x1, 0x0, 0x3}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}]}, 0x290}, 0x1, 0x0, 0x0, 0x8000}, 0x91) (async, rerun: 32) read$FUSE(r2, &(0x7f0000001700)={0x2020}, 0x2020) (rerun: 32) r7 = open(&(0x7f0000004940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80800, 0x106) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000005940)={&(0x7f0000003740)="29a4d86ae40ab4edb3b41678f19b072c31036afbe6", &(0x7f0000003780)=""/220, &(0x7f0000003880)="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", &(0x7f0000004880)="cde9b909d275e82a98411bcb029f9f0d3947a2d6db0f3c165906ac2ed8505f414d0a1ebb507199a19795a02d100ff28e01529b9cfdd31a243b1b350154762ec05be731bb75a2edae5995aa15eaf664862f3cd09d26abebedbe977c3db2f1830dc85e7ab7aebe5970b298cd62605c643da0022cd6fff8ccd2bb251fa4502551ff1df8d824110dd1116ffca15b305b807ca74a0a6318d473bc70ff6708792d3caf4effef75d0844723174159dd51f070b0d31785f7e598b3cb", 0x400, r7}, 0x38) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r7, 0x0, 0x42, &(0x7f0000005980)={'IDLETIMER\x00'}, &(0x7f00000059c0)=0x1e) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x4010, r2, 0x0) (async) io_uring_enter(r7, 0x5f04, 0xef54, 0x38, &(0x7f0000005a00)={[0x6]}, 0x8) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000005a40)=@x={0x94, 0x5, "4684c912eafe"}) (async, rerun: 64) sendmsg$NL80211_CMD_START_NAN(r7, &(0x7f0000005b40)={&(0x7f0000005a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005b00)={&(0x7f0000005ac0)={0x28, r1, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x248f6678, 0x70}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (rerun: 64) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000005c80)={&(0x7f0000005b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005c40)={&(0x7f0000005bc0)={0x64, 0x2, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20042094) (async) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000005cc0)={0x0, 0x9}, 0x8) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000005d00)={0x0, 0x28f}, &(0x7f0000005d40)=0x8) (rerun: 64) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000005d80)={r8, 0xffff}, 0x8) (async) sendmsg$nl_generic(r7, &(0x7f0000005f40)={&(0x7f0000005dc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000005f00)={&(0x7f0000005e00)={0xfc, 0x38, 0x200, 0x70bd27, 0x25dfdbff, {0x1}, [@generic="f11662a44f0853e23940b870797658711e98ca9161b67236b6eb4371eec683df35cb66cbd8a44cc3e140cfda7c587fa4002a2145270371658c02164648058583d546a7e55d73ef5c9bebcb9c1d1b338fbfc796a566bc53927867cfa56f570c9da14386991c6be9e9ddb49b54f4b6d1b5344eec5e54cd0f62ade9cf6162a6f37faa310db5460827236b157b59d177a68fc9abb8e132fd1a46cde55b987ff887934299b597cb331afca786ab6c87158f8be9635ada6e7609aaea82659c0300920a75fd0c98ba3945cea2daf94874af568c6026e52bcf85502867", @typed={0xc, 0x6, 0x0, 0x0, @str='nl80211\x00'}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008805}, 0x20000000) (async) recvfrom$inet(r7, &(0x7f0000005f80)=""/78, 0x4e, 0x40, &(0x7f0000006000)={0x2, 0x4e21, @remote}, 0x10) (async) r9 = syz_genetlink_get_family_id$team(&(0x7f0000006080), 0xffffffffffffffff) getsockname$packet(r2, &(0x7f00000060c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000006100)=0x14) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000006600)={&(0x7f0000006040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000065c0)={&(0x7f0000006140)={0x478, r9, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x99}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r3}, {0xfc, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8, 0x1, r3}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8, 0x1, r3}, {0xe8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xf, 0x5, 0x7, 0x8}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x8844}, 0x40) (async) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r11, 0x29, 0xcb, &(0x7f0000006640)={0x0, 0x1, 0x2, r10}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000006880)={&(0x7f0000006680)="90e1fe0b4f9c8be2183a20686f1b6838aa", &(0x7f00000066c0)=""/128, &(0x7f0000006740)="c89374aef410b259437c270857edeafe80ee0751c73cf169f358f7bb0df83c29501aa9cc7b9da74393f6b853db02a1271418e59c17404cfcc100b5cc4d7f0999ec0c9153d7433cee3af49f97cd12530dc221c394bc4efe401fb1f1de3911b795c9b8e07124c26a4c8ca1d5ee349fdba84b818eec90358da8f3284d67adffa693ef5c1d15073cb958da6d1dcfbd5bcd8c7c12910e0d152f0c512b894a6fa8a85322fb8223e3bc22e6be5367a4b6a9", &(0x7f0000006800)="9364af459d4ea016d44cf4a1fdafcd876924a568ad822811c282d014c3c56ad619861ee4efc2a8b6ddf16375b5273905a4f5e8564a7b16b5b61202f0e927dc24dab6819322ad894d203dc0e638c6eeb036358b3a562029f57ba3f1aa9a02", 0xfffffffa, r2}, 0x38) (async) openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000069c0)={&(0x7f0000006900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006980)={&(0x7f0000006940)={0x1c, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x44084) (rerun: 32) 8.194125985s ago: executing program 6 (id=2083): r0 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x44}, 0x1, 0xd}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r3, r3, 0x0, 0x68) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='1', &(0x7f0000000200)='PCI:', 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b, 0x25, 0x0, 0x0, 0x8dff}, 0x49d32d254ae22f79}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="746172676574205043493a303a383a31662e3100811faee540d35c1db7d4d634951b838b8122b49435fbd1401a17db03aabcc23ea4cc149681153151ff9b9e2678dcf5fd3a"], 0x14) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x92, 0xea, 0x8, 0x545, 0x800c, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x79, 0xe6, 0x1}}]}}]}}, 0x0) readv(r6, &(0x7f00000013c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000001440)=""/202, 0xca}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000001540)=""/83, 0x53}], 0x4) faccessat2(0xffffffffffffffff, &(0x7f0000001400)='\x00', 0x0, 0x1100) 8.085482304s ago: executing program 9 (id=2084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x24000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) 7.953284054s ago: executing program 9 (id=2085): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="c4000000100019002cbd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="f119b210699207001400030069703667726574617030000000000000180012800e0001006970366772657461700000000400020478001980720002"], 0xc4}, 0x1, 0x0, 0x0, 0xcc93f1266b7358bf}, 0x8040) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) shutdown(0xffffffffffffffff, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) gettid() r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r5, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, r7, 0x7, &(0x7f0000019080)=""/33}) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r8, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r9, 0x2afd, 0x308b, 0xc, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="540100001a00ffff0000000000000000ff020000000000000000000000000001000000000000000000000000000000010000000000000000000000002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff) 7.513288817s ago: executing program 7 (id=2086): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x15, 0x7, 0x0, 0x0, 0x4, 0x101, 0xf1, 0x1650, 0x400007ff, 0x5, 0x2, 0x9, 0xe7fe, 0x5, 0x0, 0xbdb], 0x1, 0x2cd380}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0xf, 0x8, 0x0, 0xc08, 0xffffffffffffffff, 0x1}, 0x50) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x2000, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0) 7.283066048s ago: executing program 3 (id=2087): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ipv6_route\x00') lseek(r0, 0x10001, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_usb_connect(0x5, 0x3f, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000b215f4404c05c10687be0000000109022d0001000000000904f90003600d180009050802"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000180)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\a\x00\x00\x00\x00\x00\x00\x00\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\xf3\x00\xfc\xd1\xb5\xfd\xec@\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xbd\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfKn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92$\x14a\xf4\x15_\x19Kt\r\xe3\xd9\xb4\x15mWl\xeb', 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004a80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010328bd7000fbdbdf251c00000020000180080001"], 0x34}}, 0x2404c816) pwritev(r2, 0x0, 0x0, 0x4, 0x3) syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0xc2ae, 0x800}, 0x0, 0x0) 7.121569675s ago: executing program 7 (id=2088): r0 = socket(0x1, 0x5, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045515, &(0x7f0000002a40)) link(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs/../file0\x00', 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f00000001c0)={0x80000002}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x82, &(0x7f0000000340)={r5, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={r5, @in6={{0xa, 0x4e22, 0xe497, @empty, 0x1}}, 0x280000, 0x3, 0x81, 0x4, 0x43, 0x3, 0x5}, 0x9c) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x60203) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000140)={&(0x7f0000000100)=[{0x4, 0x4a00, 0x0, 0x0}, {0x0, 0x1a10, 0x0, 0x0}], 0x2}) 6.2400851s ago: executing program 8 (id=2089): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x1, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r7, @ANYBLOB="7684f222bdac5555d8f51a8fb1fe230b889c89ce4fe5dd5a3a77b6514a454d127a5906203b8dcb063d12821a8e133f6d3e70d7d4c300ac1c7f81af3ccf8b841cc8e29bf0532c557b3bed6a3c6564b74b8b6505628a2e4fc69dbf90ba8acc545f3c6de0799e1dd28ce62b36b7aeade006a764cac0724515244a909ade98177a986d0b815a781c70b411d0138a74e6adeff49f6f5b8445145faa75279e2ef81b2d36cd54397117a596b6b3202896cc70fec826530d582aa98314"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r13, @ANYBLOB="68e0abcd19fa1b6bb3d8af9287b065da6347cb244e2390596a5e69f6dffbfc", @ANYRES32=r11, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000900)={'wlan1\x00', @random="e80300"}) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 5.283221902s ago: executing program 3 (id=2090): mq_open(0x0, 0x42, 0x1f0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x6}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r8 = fcntl$dupfd(r7, 0x0, r7) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x1) read$FUSE(r8, &(0x7f0000000f00)={0x2020}, 0x2020) 5.108611616s ago: executing program 6 (id=2091): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x200006}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r2, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"}) r3 = syz_open_dev$vim2m(&(0x7f0000000380), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r4, &(0x7f0000007100)={0x2020}, 0x941f) socket(0x10, 0x4, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7e3c, 0x3, 0x9, 0xfffffff9, 0x4bb, 0xfffffffe, 0x7, 0x1, 0xfefffffd}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x7, 0x9, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0], 0x4, 0x6, 0x2, 0x1}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r7, 0xc01464a6, &(0x7f0000000a00)) 4.436442912s ago: executing program 3 (id=2092): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000003ac0)={0xa35, [[0x3, 0x443, 0x0, 0x0, 0x0, 0xffffffff], [0x7f7f, 0x40, 0x0, 0xfffffffe, 0x0, 0x0, 0xff], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]], '\x00', [{0x3, 0x20, 0x0, 0x1}, {0x0, 0x1ff}, {0x0, 0x1000, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0xfffffffc}, {0x0, 0xfffffffd}, {0x0, 0x1}, {}, {0x10}, {0xd4}], '\x00', 0x10ff}) sched_setattr(0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000a00)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf60x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000071400090525bd70000003000002180d00", @ANYRES32=r2, @ANYBLOB="08000b000000000008000200ac14"], 0x54}}, 0x0) 4.065030419s ago: executing program 6 (id=2094): r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x7ffd, 0x32c, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r4, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r7, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/2, 0x2}, {&(0x7f0000000d40)}, {&(0x7f0000000380)=""/127, 0x7f}], 0x3}, 0x8}, {{&(0x7f0000000400)=@isdn, 0x80, &(0x7f0000000480), 0x0, &(0x7f00000005c0)=""/163, 0xa3}, 0x3}, {{&(0x7f0000000740)=@sco={0x1f, @none}, 0x80, &(0x7f0000000680)=[{&(0x7f00000007c0)=""/205, 0xcd}], 0x1, &(0x7f00000008c0)=""/147, 0x93}, 0x8}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a40)=""/164, 0xa4}, {&(0x7f0000000b00)=""/237, 0xed}, {&(0x7f0000000980)=""/102, 0x66}], 0x3, &(0x7f0000000c40)=""/226, 0xe2}, 0xd}, {{&(0x7f0000001900)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000e80)=""/183, 0xb7}, {&(0x7f0000000f40)=""/186, 0xba}, {&(0x7f0000001000)=""/74, 0x4a}, {&(0x7f0000001080)=""/212, 0xd4}, {&(0x7f0000000300)=""/59, 0x3b}, {&(0x7f00000011c0)=""/70, 0x46}, {&(0x7f0000001240)=""/2, 0x2}], 0x7, &(0x7f0000001300)=""/28, 0x1c}, 0x7}, {{&(0x7f0000001440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000016c0)=[{0x0}, {&(0x7f00000015c0)=""/239, 0xef}], 0x2}, 0x7}], 0x6, 0x2042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) mq_unlink(&(0x7f0000000340)='eth0\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) 4.021503791s ago: executing program 9 (id=2095): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x805301) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000380), 0x0, 0x4000040) recvmmsg(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f0000000240)=@can, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/190, 0xbe}, {&(0x7f0000001b00)=""/72, 0x48}, {&(0x7f0000000580)=""/92, 0x5c}], 0x3, &(0x7f0000000640)=""/25, 0x19}, 0x1}, {{&(0x7f0000000680)=@ax25={{0x3, @bcast}, [@netrom, @netrom, @bcast, @remote, @bcast, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)=""/205, 0xcd}], 0x1, &(0x7f0000000840)=""/135, 0x87}, 0x401}, {{&(0x7f0000000900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000004c00)=[{&(0x7f0000000980)=""/4083, 0xff3}, {&(0x7f0000001980)}, {&(0x7f0000004e00)=""/227, 0xe3}, {&(0x7f0000004940)=""/177, 0xb1}, {&(0x7f0000004a00)=""/148, 0x94}, {&(0x7f0000004ac0)=""/191, 0xbf}, {&(0x7f0000004b80)=""/100, 0x64}], 0x7, &(0x7f0000001c00)=""/4096, 0x1000}, 0x3ff}, {{&(0x7f0000002c00)=@tipc=@name, 0x80, &(0x7f0000001a00)=[{&(0x7f0000002c80)=""/150, 0x96}], 0x1, &(0x7f0000002d40)}, 0xa2}, {{&(0x7f0000002d80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000004240)=[{&(0x7f0000002e00)=""/220, 0xdc}, {&(0x7f0000002f00)=""/203, 0xcb}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000004000)=""/219, 0xdb}, {&(0x7f0000004100)=""/228, 0xe4}, {&(0x7f0000001980)=""/61, 0x3d}], 0x6, &(0x7f00000042c0)=""/58, 0x3a}, 0x2}, {{0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f0000004340)=""/228, 0xe4}, {&(0x7f0000004440)=""/71, 0x47}, {&(0x7f00000044c0)=""/84, 0x54}, {&(0x7f0000004540)=""/101, 0x65}], 0x4, &(0x7f0000004600)=""/11, 0xb}, 0xffffff42}, {{0x0, 0x0, &(0x7f0000004740)=[{&(0x7f0000004640)=""/223, 0xdf}], 0x1}, 0x3e908382}], 0x7, 0x2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000440)={0x0, 0x25b5, 0x20000, 0x100, 0x354}, &(0x7f0000000040)=0x0, &(0x7f0000000400)=0x0) r9 = openat$nullb(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$BLKTRACESTART(r9, 0x1274, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000002d40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000004d80)={0x7c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x211}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x50}, 0x4000090) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0xecf86c37d5304807) write$binfmt_script(r10, 0x0, 0x0) close(r10) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r6, 0x3516, 0x483, 0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x7fffffffffffffff, 0x6, 0x6, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000300)="0d0087ca01a5", 0x0, 0x400, 0x20004, 0x81, 0x0}) r11 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r11, 0x708, 0x2) ioctl$I2C_SMBUS(r11, 0x720, &(0x7f00000000c0)={0x1, 0x1, 0x3, &(0x7f0000000000)={0x12, "0400000000f3c9f1bd0c00000000000000000000018001000001000000008000"}}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000004c80)=ANY=[@ANYBLOB="500000001300010000000000800000d94bc4b0d3aa5ee85d07e987b6e501ac6ebacc04cc586532000000003b22598a91431850fa619f5c30f123e15f9fe70000000000c56ef19e8f898e3161374d43440aee6335fd779e3e3f54f0cc8a449732961e4c56d32afc", @ANYRESHEX=r10, @ANYBLOB="000200000842000014003500776c616e3100000000000000000000001c001a8018000a8014000700fc00000000000000000000000000000007d2304e0f3f7e248ba36f614ba9c3f80aa747cb53e3cb422eb9d8040000000000000d5e5809a3645004d83cb634f4731d8367749cfdc8a6bbcebe5919"], 0x50}}, 0x0) 4.020350336s ago: executing program 7 (id=2096): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_clone(0x9cfdaa7c58b8bd70, &(0x7f0000000400)="1bcdffeda9e9c0e64ab53003301941bbeb88eb563314aafa43300466c4903a572cdc7339b50ff0960981448126008227f4da625c7bde48c2be65e090f4127c87a3284c7652e1af88ef78dac0d949668e09b31a5571c08f1d27b8b1b1eef3bd78485bdde818b5a764070f44ebbfa229db11871f45788aefef8c5b7ebdc8e6ebaeedf5d91f2c0aad7f3d396a4e238d", 0x8e, 0x0, 0x0, &(0x7f00000004c0)="9f99a1775f6c74226cc7a6463c75887260ba0c761c96f0746bc373fa14ea48b03769ba99d27a43cd794806b914f8eb9dd996e43c88024e5fb55ecf9d39f420cef43e591258266e6bc5f442389d0cd76ac9f980017ad20717f90615fd65bfb302ee4a34147881912fb823241012c4b6ebefa029ee54543d8e76a8482957424eb1cf8859ccb778ed4ea7fbd7694b5c6be16af9b285f1f20fec22b73d3414166e2221f6c8300cfff9bc4512518a161a14722393a261d8b5838fbff41fa1b4549b79f70548078999") ptrace$peek(0x1, r1, &(0x7f00000005c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xb9) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80080) syz_io_uring_setup(0x765f, &(0x7f0000000240)={0x0, 0x85c, 0x6, 0x3, 0x40000187}, &(0x7f0000000180), &(0x7f0000000080)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x1ce) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r3, 0x0, 0xff2e) ioctl$TCFLSH(r3, 0x540b, 0x0) socket(0x2a, 0x80001, 0x6) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) io_setup(0x6, &(0x7f0000000540)=0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r4, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r5, 0x0}]) socket$nl_netfilter(0x10, 0x3, 0xc) 3.153121878s ago: executing program 8 (id=2097): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x8, 0x0, 0x1, 0xfffffffffffffffe, 0xfffffffd, 0x8000000}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x101001a, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmod\a=00000000000040000,user_id=\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00'], 0xfb, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x5b6) read$FUSE(r4, &(0x7f0000004100)={0x2020}, 0x2020) write$vga_arbiter(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="746172676574205043493a5b89d9f46ac070df4e31642e3100"], 0x14) syz_usb_disconnect(0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000300)) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x1, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3deb, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x22820adc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) syz_open_dev$dri(&(0x7f00000000c0), 0x4d9, 0x2) 2.628285978s ago: executing program 3 (id=2098): unshare(0x2c020400) r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x2, 0x4e1d, @private=0xa010102}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x20000000) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000340)=ANY=[@ANYRES16=r6, @ANYRES32=0x0, @ANYRESHEX=r4, @ANYRES16], 0x144}, 0x1, 0x0, 0x0, 0x28000014}, 0x800) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r5, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe2, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7}) r8 = socket(0xb, 0x5, 0x7) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r8, 0x6b, 0x8, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket(0x10, 0x3, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4800) splice(r11, 0x0, r10, &(0x7f0000000500), 0x1db08b19, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r13 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r13, 0x84, 0x1b, &(0x7f0000000080)={r12}, &(0x7f00000000c0)=0x8) 2.157528844s ago: executing program 9 (id=2099): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8e2443) ioctl$EVIOCGRAB(r3, 0x40044590, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_ep_write(r5, 0x8d, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000c40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f00000000c0)={r7}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000080)={r8, 0x3, r6, 0x5}) writev(r4, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000440)="3b7f3cca627900a9106eb4b5779662483f44039f98cd4a84cdabdcde4b20d89f8f91ee1179d9a874c425a3a313b220d2eeda0006a41c7375fac167140992d428728fff74c67b17c10333ff84b88747610ea06a2f00729d20b78833f1d2eb5dd003fcb19f439b9045281c6b23d2f5b39b58decaf63f4d88bc3a568c9d554c7093f1cd2883a3b9fea259e238ea828b9fb13a01c196b8a109f8eedf9300bd4f1d7bd6da8e6fadd2c2677299099c8d8d880421340dc5a1954f226c90b43bb4a0ffe2a3949f76fbb2e9630c0a5a671ab928895c451355953221472cde60e7476d6f0e29372f", 0xe3}, {&(0x7f00000002c0)}, {&(0x7f0000000380)="2be8e9f9a39f677e6a6ed0c292838334aca57076a8b1c6fba8cfadfc6fb6c5714fc39eafc9806527d5d13ec7fc2896d3fb991b075ef4e0460ea0463964ec610b8b4e27f3cafb6a35f50f10d41de8407084220dacdfa36896e7f6aa08eaa766ce05", 0x61}], 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) r9 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000000)) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20}, 0x181) r10 = syz_io_uring_setup(0x3a65, &(0x7f0000000280)={0x0, 0xa011, 0x1, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r13, &(0x7f0000000640)=ANY=[@ANYBLOB="59635215775e678bfc4415a6efa421e8fcc9c8882cfa295fbf60996c5ed718862eb660835696193d6ddcba84d46c3311df74b345f17102cea873f6e1bac12fc8425e82c7dd8a42f2b400d43b5e7f223090a560d8670c64a7e7c57914c6a1aa4ac58e17bc31ba3de1b85866"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r13, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2a, 0x0, r13, 0x0, 0x0, 0x0, 0x12001, 0x1}) io_uring_enter(r10, 0x5d62, 0x0, 0x0, 0x0, 0x0) 2.001084689s ago: executing program 7 (id=2100): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') socket(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x400000000000003, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x0, 0x3, 0x49, 0x2}}]}}]}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c040000100001040000001f0000000000480000", @ANYRES32=r0, @ANYBLOB="10100000000000000800200005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) 1.636215945s ago: executing program 3 (id=2101): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x208, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x2}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0x0, 0xffffffff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0xa1}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x17c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x60, 0x1, [@m_mirred={0x5c, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}]}, {0xd, 0x6, "d527360c37d81b077c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x108, 0x1, [@m_ctinfo={0x104, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffff}]}, {0xcd, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa2634cbcdbba1c88eea89d70023a7b9d8d2a94daf79fa1e5bffdc60fbea174f1aa7372acb7f356da638e68d8cc0dfa35b1ef1879e8526f439300c841829ae601a7811d02b21fcc5aaa7951b03466f8a1800a4b912630d3eb9f282786ef340f4e3cb08280f71f4ee2941ec13001a2c7884372e6ba0fb2f0aaa4766f88f4e7f768d299cf02a379f46bdc6682f28a257745a6d3ef46b8f9de69a946"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x208}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2044000, &(0x7f0000003700)={0x77359400}) 1.425401261s ago: executing program 3 (id=2102): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) r1 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f00000000c0)=0x1000007, 0x4) sendmmsg$inet(r2, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="3000000000000000000100000700000000830b4be0000001e0000001008911e44833856ee8b25633f47d13d5e4aa00001c000000000000000000000008000000", @ANYRES32], 0x50}}], 0x1, 0x0) fstatfs(r1, &(0x7f00000003c0)=""/146) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$RTC_WIE_OFF(r4, 0x7010) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f0000001780)={0x0, 0x1, 0x5}) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x0, 0x2, 0x45, 0x0, "00000000000000000000000000000000000000f300000000000000000000000000000000350d0000000000000000000083c0d55760b2d13d000c00cbcd00800000000000000000080000008000"}, 0xd8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004040)=ANY=[@ANYBLOB="682400003e000701feffffff00000000017c000008004280040008000c0001"], 0x2468}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xec0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594012124fc60", 0x14}], 0x15}, 0x1000000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, &(0x7f00000000c0)=""/111) syz_usb_connect$uac1(0x0, 0x9c, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0xf, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x6}, [@feature_unit={0x13, 0x24, 0x6, 0x1, 0x3, 0x6, [0x8, 0x8, 0x1, 0x0, 0xa, 0xa], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xfd, 0x1, 0xff, 0xad}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x9, 0x2, 0x3d}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x6, 0xb0, 0x5, {0x7, 0x25, 0x1, 0x2, 0x3, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x4, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x40, 0xfb, {0x7, 0x25, 0x1, 0x0, 0xed, 0x1}}}}}}}]}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r0, &(0x7f0000000000), 0x0, 0x4, 0x0, 0x2}]) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) r9 = syz_io_uring_setup(0x3, &(0x7f0000000140)={0x0, 0x8b0, 0x2, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r9, 0x21, &(0x7f0000000440), 0x1) signalfd4(r8, &(0x7f0000000080)={[0x6]}, 0x8, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc00070080190000000700000000fae90000af1e4ccfb7b304010400", [0x1, 0x2000000000001]}}) 985.721457ms ago: executing program 6 (id=2103): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000001e40)={0x0, [{0x2, 0x310, 0x1, &(0x7f0000000140)="fd4f89f797376df1dc2a4567c1ab47d95349d0cc4a015c4daedf459660e1a5c64260d246b200d7ca4dbbf9231b034464eaf9352809228067ab7515bc9763e8e2e2428b713feb5cd93067ea339d9ecead743b7072db9de2c10b5e20e6b6da69ab802c"}, {0x2, 0x10, 0x1, &(0x7f0000000080)="d964"}, {0x3, 0x610, 0x8, &(0x7f0000001580)="969e32efc48884e948cb5431315f3d45d7b93df3061ae5a9e2a94d4fece7a49517acbd8a9151fee755ff9acfda549d58e5b693cc90b15de100b344a255eecae8aeaf6f5a2f87cd24d060dab8b88a9f347b941b3ca164a680b73553c26a1128c8e47e6b43a22552d3c8522ba35aaed1814d9d6336be868d63e7d653587e92f2817be00094205f1687e421c18eb852a15c8e6b2ecd5d9aefdf8d7c4008fcccfaf2d519384d931f263c4391f57ebe5ff6d476f66a85536a053d359b430bd63f84191d64"}, {0x2, 0x7b8, 0x9, &(0x7f0000001680)="162882e5e020e3406d120847d39293bd9972e74ef0700fff789562461a4f523933704dc7c156c51600f5ba2dee218dd73f90bb5ce8501b11ff556a3208538b75127ff9a28eef3f26fe557963a19009dad1ddacc00aa9fc9c5777710a014bb37207c38fb15e8b79693d2c1b66b7208aff78f8ad1412b379372c302161d2dabea4d16b4d49edfffafb60835d22312181f8d93bb2f2733decd5bf84a52d22270094cbfffac0d6bceaa20a3821101065c7b2520f65232c05644078ef303ef0d3eaca7d60b726b659c3688c02a1143d039e938670b7c969f1400f57414eee2f2ea30c96813013bf6de46ea931694e5ba1c39ba3624a355f76bf"}, {0x3, 0x538, 0x0, &(0x7f0000000380)="2fbd4f2027dc648ae373449c9f4f5596d977070d5db02580e57124920e11be3a1cf8fe92d81ac3ff48b33cc493c531ce96b85314eb9616e7516a557cbe57295a9cf4471116cc7a4dad7a8f8115081d830d51dab68277dc0e159c420c2096970ec6229b02b9faefd62a756601e1defc70e47c1d5cf990803a6f9d3d0e7584e4442cd78f53905ec7cf9278a5f88d2296b768d2f41a09cb96ab78bd855128bbd1f709d2f0eb650220"}, {0x2, 0x3c8, 0x3f957fc7, &(0x7f0000001780)="2ccf12563e26e838ecdc5acdc8a3d20e1b8bf36acd97c0c68d95105940576cf115ec73b6e5c0b737fc5c0da90a7245e840c680f4e60322bf676d05e926cfcdeeeb56e9111561cc5b83dab75d73c17b605bdd2c4c71ad2ab52370c64ced22ce3aa31cc0d7bbc58c9828cef5c66d53859c7750f677fd134ff4d6"}, {0x0, 0x3a8, 0xb, &(0x7f0000001800)="f3386bae55d9225ce3ad3e6a374a755ffec43c63e3c7daa5d466ed35fb6bff911580b2e5546c2a09bbaa4d5bdd5e99d137968cc9f310bc9091398092865db61cf2dd51da178570e86ea3ff33122b2c4d9c8339bd9079205d6b30a47c52834ff52a790d2873d340cd7cd3593b291b10ca92f8fe1370"}, {0x0, 0x720, 0x1, &(0x7f0000001880)="2d158f76628d06ac52836f3ec676bd12503a876b960e0d7b4fc07c0ec10efe3057a356446bbab7375ad5226becd5c330a087caf0580c6d7271bcc5544d64f28659267c12efa55dd8d3f14d2ea6120d42d47deecefc9818bafb0647eb1724461d8c81046c04129ff5f0fab84f6ab7dc2ebc296fbd02762a978a08f7e7e6acaf6d37d5a469a040f4e12145678a35547f2505ec5550945276f9402ed25b9e590e08c088a6f4f9b204efb6095f49617a970a4fe6ac5929ed62c9da2f3b90be80706cab8f72b285c786e9d753908133cf4af17b4ec1740a2d2b7007ff56f56a898eea8377f71f"}, {0x0, 0x60, 0x2, &(0x7f0000000200)="d4995813ad875f032955b7aa"}, {0x1, 0x398, 0xff, &(0x7f0000001980)="f37feaff3dd2bededc03843397357eb34225629dda17900f8767078c52ee5abf1660d4c103f0819b287227eceb727fd4c249f7d2759153cff87f17d0e99f67a946c2393d76a76a7afdb9684c69bdb6daaa5665e05dce1563770a8e13b54d479101146ce04c5cebce3cdd6dc1ee74606c190f1f"}, {0x3d11cb0a397dce7c, 0x388, 0x5, &(0x7f0000001a00)="59950cd6a52a1bb0ef3452e01f659487d147d82b4cafe9babc8f2d38cba680b5eb3eca64c0fff11185430366225253d0db7ed4281fb4cf1d5fcbb2e0b5f86d80fa844812899c58460b33f44b0e8fc0e5b4b96fcae44f8853b43dc02cb5feeee948b35a03f5df476453c5eed98a0c66aed9"}, {0x0, 0x780, 0x1, &(0x7f0000001a80)="d26ee0d2f2f10730d2cf1a6f3c44bc45bf090abb0d620ab6fcb6ccfc8332e9a0a23dd74abcc44482f27ee47192454c5b6d37f0aa98edad6444e57815c9374c6f8bc0e5e631f0bacbb986f1294ce9b7d2b5a1daddd671763be6b60b91b34bb94cc6b56ec7d8a4000e0e49b964b978878290f0cf243f9ca1edfabced6b85b2347efd0cfe1dda64ee623a12769f44704307abf002a7a7527fe93302b95742dd04b5efeccad5aeba42500e7c4098814a52b63ed71447b15f90232f4325642489076abd9dae956949ca3495ad3a054ec240dd90b72610dc193bbdbf768f3dad0d07e59550c39c266971955c4c5a33ef803d96"}, {0x5, 0x638, 0x508, &(0x7f0000001b80)="1a9c76dddd8a4b14868db6e9f7d1c4d63c7b7ff2b44ac7399c41e64b3297c2e8db1937a30f1064535b875c3f584cc8c0403bfa8129541ea39140b89067d3729539430c44276e6bec0849214cac5e7fc4c23575ee62ee05a56c714c55accc31ea643d78028ed411cba814207a50b63609f04acbecf980c88e27037059f722439e1cbeb471d6992496b247eb71f4a577781b94cd3accf7c851499bd623657a06651eb2e1929e80494b595749e4014cd898128b27033f82ddacb2906a86c00ec84df51900269489d9"}, {0x3, 0x600, 0xfffffffd, &(0x7f0000001c80)="bc72abb559a16d0df9f61b94c60349bcc46537cb2f5b0f340db3672d00d26b5fa441be1b2f03fdcd91614d8a5a12282c37c39243bade6add3f3cac0f8402f17a6edbfdfd213d92202db0855db1c266269d52e8d6f72f28b49050ba43af87945202f567438856c2abbb65acba40c125a549cdc7eacb778139f4ba8d3171b5ca6648bd7d5d41e928b70c5eb6883f4c6ff475b85ad095fe92b4c2b72700f3ce35cdbd6adef15bd3745ede91e8cddc8cca22f8574fafedcdfeb77732da8ca968d660"}, {0x3, 0x128, 0x8, &(0x7f0000001d40)="3912fb77903208e99706fae381f55fe46f48b12e19caac6564ebe8713206398373a21d1b99"}, {0xf0ebd7ee7db09360, 0x530, 0x1ff, &(0x7f0000001d80)="22fde5c0f042814599ca41a6d04c79aec573e5c8afdf5f638e8ee8672240b90a678b2e0fe2f4a3dd5dc2e4fd97927d1f476df763bcec9e3eaf3ae56a3aaa2f4477b67e7422841a34fb82e9ad1bc5786dbebcf29dacf916be541699dc58b7b98fdded12ca74d4dd370282d318dc71582e6a31c67f636eed35bc1a9285b7fa82cf74e9a3209f6459831303851dae2c1c5bd10c0f80e8402ec9b6f7128981839c8b04c6b1047e06"}]}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x44041) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000002000)=0x3ff, 0x4) ioctl$sock_ifreq(r1, 0x8990, &(0x7f00000001c0)={'veth0_to_bridge\x00', @ifru_hwaddr=@remote}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_MM_EXE_FILE(0x2a, 0xd, 0xffffffffffffffff) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0xe4, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "d7ff00", 0xae, 0x11, 0x0, @remote, @local, {[@srh={0xf, 0x10, 0x4, 0x8, 0x7f, 0x48, 0x0, [@dev={0xfe, 0x80, '\x00', 0xf}, @private1, @remote, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback]}, @dstopts={0x67, 0x0, '\x00', [@pad1]}], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '8]i\'Np'}}}}}}}, 0x0) recvmmsg(r4, &(0x7f0000004940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x142, 0x0) r5 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net\x00') symlinkat(&(0x7f00000000c0)='./file0\x00', r6, &(0x7f0000000100)='./control\x00') write$UHID_INPUT(r6, &(0x7f0000000540)={0x8, {"0511941e0bce574dc9e1c407d06553bb3e9b020fa191d86119421d64f63f6a6eb2c9e9a58581b8afe86d7966e9e9349983ecfff672528af9c36c51090d76be43ba2bb720e4aa7d92b40506ff835955e6aee45676c10c90a3205b710647b0a9650bb4562403c0bb2e8b35e2042158e7a3efc67e9172503189e1b50ce581a12419bd9aad0ab2a26d82515cc8cc8b6a429329cf5a4a549f9663e2934a0ad9e6cb3f801d7af5500c607b8e2aa9f5c570124ebcf15842e9283ed5318f112a272238e0256049b9c9552d73cf16e6925758e72768b396e316ecc01ddf6da46d868a0236d84964c61d7caef383cd29619e355196bc3110b3921bc5a142f3aa9aff19b3d4785fdde7349661579c1175f541cc7c7c4b8f82f2b532e98650c14c090e92f549208d3898c737a5782e1c009043bf1985490b5700368a3194eb4d09539fc4f27a52b4f62be6cd486c66a33824d3091dc398f9c3a48c8ac034254645a4767be9f43974b3b160ab3219c2f727d0a84999e8552ddf49ca114a463a440b6aee3bd9512b9c955ad2ff0df4ae12bf7e18588b7d01fc4ef9c2464638eb8e26c57257d205554563749224931415a8dc9a7a9963d2254c1a85cc0593f9ae612111e96b5b3aade0e56b09431303b54e3e4add75f4ad69f2f624561968768b7af2fbf1e2bac5d116caba5271ac4e37696104a0fce27d03d256775f6a2a1ed5d7923079791edc6f7402de9c1cb7d523e363123c8f7a3ef89a354f96f509157ac3232ad8b8dc926df294ae0860384f39b08ea91b88a72a6c71a29846b89f55e054e6b752828def8f5a4d0bde8177c922ba9eaf4d8f6d5d08ef181d1c12c71fef6dc6e012f45423d42c17cf73e4d78916e94d1609c936288f3c835443380d4c5bdf5b1d1013b84cb13fd265ca82c132b3b4abf45422d55d3d2a9307ad5cf8d160ff1bccf5d69b46a8b81d32a43fd8fa3df28ea91ec73e81e9acbc248022c7b46f86af234a24ff6f877c711d4588331e2e9066426ad10e4a012c7258bc3bccf4b9c133bfec018fb14716fca9c7c49bb9d253477e663476e3942b601f59e8d48fe281743aeb6c3c639a7ec7a783bfe6b9497ecd58a18cc7dacec7b7eb07daf2e865340d8a3575709f9e4254fea4c369d92b61557b82bfe0444503d6aa9bc97d17bcdd1e14341ebe8074d138c014f4ac222309b685eca31949219f0ee026a423babccd559ec80164e5bde5d74db47d6a6431646307ac8f709fb2571fcd025c6a284b62f35ca8ff1356b5c7d44b8ce8b03c685b709edd2a980257094009effb17ac80bd084ab9479c2711345679d5f5c85f759923eed5139a343f6c5da9bc6574fd418396042408bc77f59c5e1cd0b23b8aab9757576de40c559c66c53b2e8fce6e633afb547e442239e796874557c9307b0778404c18777e90ae9510beef0efc8748f918b9d5383acc29f8a0f243edfce938be1ceed44e3f62afb50394ac16b8941a6a8fb6c3fdc675bbb433c02f1adea737a37eea002922da929566aa180d3af4541e5d475d3d85b15b10be281b4818b4811de2bf11169bc252cb48972a3f1381fab63a30fe0a8088bd237daafcde79469d20e0922e433f5d80f3356e43be92e527548f3cc08921dd924706272d3aaba3d9d90b0ee54f2a7fc7585f1b032b3e90914f13c3216a19285ca5141e8b66c53a671e6c55da27a4a5172a51728c9c14b8cd3b7a36e329376f61573bd08e94ee8ae78f99a0ce5a304bb379f1a154defe976a07b5686a2630be946fcc90beefc282230e2e4f7753a160647a9e35a14f9b907b22443523b4be2749cbc7b5fec8093a79d7a2378114ba2378e61d20150ba16c70e7e26613d3bdc6df20d2481ce035e72580adfa87d247c8a22d0ceffcfb0f97696b626bec8fdb69f08e3e2d6eb4c70c489b9cc37cd3201addbb2f1711f0d7fa36f558cd2c4e7936401a72cc5711f85cffc70edcbcc6e54f4f750f8485eec7de7babab15079ee3de9fd5f2da32ac97be477dcf11fba0ce67e168f1a2f1ab526781f8ee402da4d09e51ff187310b04e629a47d400673ab43bc76b853ac3af208207bcbd35573e0d628bee7706eff701461c304326c553c9e9c780243e2cf9bd39ecdaeb419fe1b1e61288c47e8a041a67f3dba59292032888c7d579bb8cd69c433f2b58e896147bb294baf4742a6aae102a9f111a49bde8fd93a675841a72c54abd10dcc73f3d8bafc0d702eed350964d03c83f504b20285a2da55c01d8eb4f982120d52b3ea90c2e5e2a7363b92c77160fa9b77be36b2089ff014d2e3b6b3c0f06615572fcb6a04a137dae73040eda0fb952e42c1c6bb129eb44af1fe210a512c78f7dd2d9833ca10383363e9f6395fe82fa96ac3f29797573057f0be76ca1ecdca4c42d4f815229789f900dea095fd38564b7ff57c867226a9a9743b323314818d577d30be7c3725e451582193cf6bea3e84eeb78969b8e55c05cbbc482dc289aab6c04b0e7315b30cda85178d89d9613f8e9d191ca61793e72a4c8a9c895acb6069ec6fdab2b852edcf4052251100462ac81320f3bb992dce62c80113f237b4ca4d5f444802c4955cf77031908fdadda57b0aa2170893f29b27857ccd2e80054b830a9767cdebdc9f9351bf09b6e73a6506f4d7fe00970a9fd5f15b254bdf23953deda2fa1926954c7b64bf644a6b6e7a899d686b6da1830309ec37ea67a4bf79cb9f700d932904abe8ccc0017f7ca93748a04a5214bdfcf0f72323aaefafe69e565823c1a936a04b233eebfae79ea8778684001709b2fe5a8b7a1fec20496c8de31e44ed0ffa73ddd66ee54ab80310f26b1349af03712e76dca9b70e01b71694efd568a5c743a63479a8e685c4023a56abd68a47e4f13c3227099fdca401e8f013916756169b37957e6b478f82b30f38b060501b2e6f3f0b317b7b443d318c01fe1d9701c9d448154ec1c77128540ac8fca9b480d6af4c9790da3fcd742e987c699508cd2569bc8ed30035ce739dbdcf94bc2ad9f04a69243b5c1f18ddead9fff380661fa939e2a9d718a7f6164e7914a6d2798179f260fca4bd0bebc8f64c6c36fd91412669bf0331f711414f37e1336ec041729336035a6bf64b750b019ea68a0c9aeb150aa0a42722c5fb1c40aa8216048ed5ca4926b51e06f5afcbe7f4cdceb64f7a1baafad931bbcb0d9d1bde9ad0b4e50fffaebececfc48fefabe47c18cf88bb7d6913a961dab6afe06de9e6bfffb3d8003d1e840e35282fb0a481cc86a970ceaf6a7c7b254305aa35d9ec583470090dfdc84d34d109a99d8aa4043056b5e11edc4244539063530f4aa0177000f0a5a6f0caaf205de10b19e543a20eb18937b827a689bc171cb867b996d55e270972b1aee4c940e6cb6dacbf293f0e17bc0496ed92432828748d7130291415a213247411b8d7084571e83c9a2dcb08b673fb1a8c561f4f687cd65d9bb6a69bb776e91499d528f4d688aeb43fc15473644e06381f6e6fd5a6bc1b0ff25c357695ab51fa9b822f9a8695725801da4fd5d86fc8fe980c6f959229cd7b401b2a528e5b3721bd1baeadf4b579a622a24c959a3a50b27828f44a978b8fd60f6c551bc4b919dac03b6604a0950e518f9054883d0823758136dd59a74d1123174f5d09530aa987d86268d6f6af62f1ca8f367a4b52b4e61de84c2b0b3feef4458db5069b79ff90124d70bb304a1a6100f1c6bc5fe6695b6e4470d3aa06d780ede77e08aa98138f9d18d2cbd310bc850bbb8fd561b870c8c84a2c5ebf4212ed3f722877be780c2fb55cd14e6993efd1ae71a52613bfaa263de600ec4707396954ee28840560287bf12b92a6e042aca3c1ba5f12f55c8fb649f391a7d7e6be7d37dd8f14182078d02859c79400f2cb33dded36256a260171a3c564d971af3d686e5043648cbae94a689a7d5c3a5f25b944365796998bfc885826caa1efebc6cae56a937ff46a8bd345be3c5eb69dd704d100fb0ba5c14404ffdadc0a2bd35af97dd03ad6ae3197094fca6d8267be32c0ef0f341ad8194a1393735d3208b26a608ee65dc14af037b4d5bc970aeadfbfde903a09cdc624357d0935f6d295e6ea0adefae876bc13be69888cc87f08c23688356fb3f4a21b66b2fa1983f80ee8caf25ef813b4456ab66e91157efd5868ef9d8133a28f2daf96e861f9b071b1cc933a81c5e1b626b9569af0ed165ecd52111ead06ecea1d4d1850127ad7b9c398aa663aa708862c780e2eab0344787345937d9676db96c02cb756727b81f0089e63fb5cf202d8388e9a132a7acdaa4b59dbc796395909e877d575a087d9d5d910bcc16fead21f0d7290865d711b913a8ea0069c49ee07bdfa929b31b593d30ac19dd961068790a707cbef872f6552af9e2b5cc3cdb6134667202f15af5fffac352972dc1961b2760f3b073f422141e782588d12cb7bf80b9ba2afedd9f73e967aa5cf3af545ce86e00f05a86f3a9767944869ab2373158eef893f9055d67fbc29f54dc78279070f4ba33f1552e08a9761da957195625f06fa50c446dd307a2d475d351b463a4e092d3fa935e2b4e0bbdc3da42c4882319c8004c4ef61b0b05594d2ff062b0f978220dcb568e536bada802db621ca7c7a3e9d30d668c76203ca8622c2efcefe9a1edc4c7cb343c9fb83f860127d02181697d2b4d8092b5714b174c320b5cecd6e6a00f3c691332eba1885b47e7bcefdd76b8d38ea89ff28f387f8fbe7d41b6df62836dacae50949a4c5d6057bc6a73be1b6b8797fa4fbf8e6f1dd0699ad172232de3fb198c9830b8a5ed1ee7db933bffb3e6297832df9e4013dae5d4df7a64b7052876ee86e1a38bdcc6d8f76d035f0eb9fdae50ed08479667ab29dc649d60a214715e8c909fde84e2dfefad44cfbad4110496f46b26284f93d01d2597bdf66ad4f3eaf3680ede82b49ed25fd6f151400623e9a38ef3cb54ad795d70c9f14cf4e555ae99d41a7d0c9728c1d086eba2fa1a2f8e3c6defced359395728cae457eb1d4f4fbc1fbe7b4ba7cba23b406924e2c39a5c4be7663b57bb82722f1e85eb83edffe7da5b51f8a2476c2936037a2b8dabb8251064178fcf252c2ebff2584452a4f79bbd3fdde779c391b76926eafb22e22ef8d4d3676f9523339d1527dc98f747050dba3ea72964440dda4acc306110aaab3a56210a358d49b0b935e588b42cd7ddef8e504499b2e9fdda4e987d5ae097af512a09df1ed338f6a36e08d57c697f35bba7c2e45d71904961f5183fff940987744fe7859fd84835761c6fdbebe13405b40ae88e3b46c8b959ee514f7c76248f1ee9d10881c7ea5ffbc50e2a4e39af0713432a829c42cef100f7220122a4e2dde9a89e328279ce367d9d49ad7c12efd5637f919bf7784a77e2af41200a485bc35c942af3c61e201c9ef3efa30d04749695f0a912b447147e5db5f3a7a9044cee4b36d1775cfdfb949c1998b373a4b0b8847c9fb8823c77280791db991fe83c77040249b5fd242226bde66515d49c10a6f5c4090f0628d4aa34c4e5485d017572538d4df419747b903fe6a7b90648b1bae8a46a54f5d715a5f8a1f1d5652be5aa6b972e42d3d13179bc578f4f5dbc63045cff7a9e796b31984d5fd87b9497d507ccb6f68272cd8e61b3fbc68b622d7804a000e8173e45c6661c51b0aada9fc85d7ee7e986cf4e21ad8d3868b507829e9a7ea5ca74935e8dc25668c86d3907375e57014b711803eef7ce659582a33616416a79477cb76458bde4c26d03818e1786c9cea6b9eb8b48679c7a6c388bdf3c46b6c5a308757abdf37c74e541e413285d3a23e3746761", 0x1000}}, 0x1006) r7 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r7, 0x40047459, 0x1000000000000) syz_usb_control_io$uac1(r5, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="7701010a00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 8 (id=2104): r0 = fsopen(&(0x7f0000000000)='afs\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) unshare(0x2a020400) (fail_nth: 22) kernel console output (not intermixed with test programs): fig 0 descriptor?? [ 664.124451][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 664.134116][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.145756][T12993] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1663'. [ 664.155121][ T9] usb 4-1: Product: syz [ 664.159362][ T9] usb 4-1: Manufacturer: syz [ 664.163946][ T9] usb 4-1: SerialNumber: syz [ 664.196295][ T9] usb 4-1: config 0 descriptor?? [ 664.203606][T12984] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 664.218404][ T5931] usb 10-1: USB disconnect, device number 4 [ 664.271906][ T9] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 664.332193][ T9] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 664.347090][ T9] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 664.388824][ T9] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 664.464163][T12984] bridge0: port 1(macsec0) entered blocking state [ 664.471090][T12984] bridge0: port 1(macsec0) entered disabled state [ 664.478094][T12984] macsec0: entered allmulticast mode [ 664.483483][T12984] veth1_macvtap: entered allmulticast mode [ 664.494068][T12984] macsec0: entered promiscuous mode [ 664.502888][T12984] bridge0: port 1(macsec0) entered blocking state [ 664.509459][T12984] bridge0: port 1(macsec0) entered forwarding state [ 664.536285][ T9] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 664.584149][T13005] netdevsim netdevsim8: Direct firmware load for . [ 664.584149][T13005] failed with error -2 [ 664.596867][T13005] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 664.596867][T13005] [ 664.667959][T12994] fido_id[12994]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 665.660699][T13024] netlink: 'syz.7.1669': attribute type 2 has an invalid length. [ 666.177703][T13028] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 666.629657][ T5938] usb 4-1: USB disconnect, device number 85 [ 666.640053][ T5938] mcba_usb 4-1:0.0 can0: device disconnected [ 666.768605][ T5937] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 666.945086][ T5937] usb 10-1: Using ep0 maxpacket: 8 [ 666.983085][ T5937] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 667.001603][ T5937] usb 10-1: config 0 has no interface number 0 [ 667.045195][ T5937] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 667.074784][ T5937] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.117169][ T5937] usb 10-1: Product: syz [ 667.135720][ T5937] usb 10-1: Manufacturer: syz [ 667.154863][ T5937] usb 10-1: SerialNumber: syz [ 667.185922][ T5937] usb 10-1: config 0 descriptor?? [ 667.308260][ T5843] usbhid 7-1:0.0: can't add hid device: -71 [ 667.340128][ T5843] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 667.414052][ T5843] usb 7-1: USB disconnect, device number 55 [ 667.462257][T13048] netlink: 'syz.8.1675': attribute type 21 has an invalid length. [ 667.473663][T13048] netlink: 160 bytes leftover after parsing attributes in process `syz.8.1675'. [ 667.516644][ T5937] usb 10-1: Found UVC 0.04 device syz (046d:08c3) [ 667.541965][T13048] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1675'. [ 667.556462][ T5937] usb 10-1: No streaming interface found for terminal 6. [ 667.585207][ T5937] usb 10-1: USB disconnect, device number 5 [ 667.945137][ T5938] usb 9-1: new full-speed USB device number 59 using dummy_hcd [ 667.959203][T13065] FAULT_INJECTION: forcing a failure. [ 667.959203][T13065] name failslab, interval 1, probability 0, space 0, times 0 [ 667.975140][T13065] CPU: 1 UID: 0 PID: 13065 Comm: syz.7.1678 Not tainted syzkaller #0 PREEMPT(full) [ 667.975163][T13065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 667.975174][T13065] Call Trace: [ 667.975181][T13065] [ 667.975188][T13065] dump_stack_lvl+0x189/0x250 [ 667.975213][T13065] ? __pfx____ratelimit+0x10/0x10 [ 667.975230][T13065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 667.975249][T13065] ? __pfx__printk+0x10/0x10 [ 667.975268][T13065] ? __pfx___might_resched+0x10/0x10 [ 667.975288][T13065] ? fs_reclaim_acquire+0x7d/0x100 [ 667.975317][T13065] should_fail_ex+0x414/0x560 [ 667.975345][T13065] should_failslab+0xa8/0x100 [ 667.975369][T13065] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 667.975390][T13065] ? alloc_vfsmnt+0xeb/0x430 [ 667.975414][T13065] kstrdup+0x42/0x100 [ 667.975432][T13065] alloc_vfsmnt+0xeb/0x430 [ 667.975453][T13065] clone_mnt+0x67/0xae0 [ 667.975472][T13065] ? do_raw_spin_unlock+0x122/0x240 [ 667.975510][T13065] copy_tree+0x3d4/0x930 [ 667.975544][T13065] copy_mnt_ns+0x178/0x820 [ 667.975565][T13065] ? rcu_is_watching+0x15/0xb0 [ 667.975585][T13065] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 667.975605][T13065] ? create_new_namespaces+0x31/0x720 [ 667.975627][T13065] create_new_namespaces+0xd1/0x720 [ 667.975649][T13065] ? bpf_lsm_capable+0x9/0x20 [ 667.975669][T13065] ? security_capable+0x7e/0x2e0 [ 667.975699][T13065] unshare_nsproxy_namespaces+0x11c/0x170 [ 667.975721][T13065] ksys_unshare+0x4c8/0x8c0 [ 667.975749][T13065] ? __pfx_ksys_unshare+0x10/0x10 [ 667.975776][T13065] ? __pfx_ksys_write+0x10/0x10 [ 667.975794][T13065] ? rcu_is_watching+0x15/0xb0 [ 667.975824][T13065] __x64_sys_unshare+0x38/0x50 [ 667.975845][T13065] do_syscall_64+0xfa/0x3b0 [ 667.975862][T13065] ? lockdep_hardirqs_on+0x9c/0x150 [ 667.975879][T13065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.975896][T13065] ? clear_bhb_loop+0x60/0xb0 [ 667.975917][T13065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.975933][T13065] RIP: 0033:0x7f478b38eec9 [ 667.975948][T13065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.975963][T13065] RSP: 002b:00007f478c13f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 667.975981][T13065] RAX: ffffffffffffffda RBX: 00007f478b5e5fa0 RCX: 00007f478b38eec9 [ 667.975994][T13065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020400 [ 667.976005][T13065] RBP: 00007f478c13f090 R08: 0000000000000000 R09: 0000000000000000 [ 667.976016][T13065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 667.976026][T13065] R13: 00007f478b5e6038 R14: 00007f478b5e5fa0 R15: 00007f478b70fa28 [ 667.976056][T13065] [ 668.452265][ T5938] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 668.462980][ T5938] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 668.477577][ T5938] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 668.486739][ T5938] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.625507][ T5937] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 668.699384][ T5938] usb 9-1: usb_control_msg returned -32 [ 668.718574][ T5938] usbtmc 9-1:16.0: can't read capabilities [ 668.785077][ T5937] usb 4-1: Using ep0 maxpacket: 32 [ 668.801322][ T5937] usb 4-1: config 0 has an invalid descriptor of length 81, skipping remainder of the config [ 668.835094][ T5937] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 668.853462][ T5937] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 668.870041][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.905062][ T5937] usb 4-1: Product: syz [ 668.912152][ T5937] usb 4-1: Manufacturer: syz [ 668.921019][ T5937] usb 4-1: SerialNumber: syz [ 668.936199][ T5937] usb 4-1: config 0 descriptor?? [ 668.966056][ T10] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 669.112086][ T5938] usb 9-1: USB disconnect, device number 59 [ 669.146918][ T10] usb 10-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.174414][T13101] netlink: 'syz.8.1687': attribute type 21 has an invalid length. [ 669.192827][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 669.192880][T13101] netlink: 160 bytes leftover after parsing attributes in process `syz.8.1687'. [ 669.213908][ T10] usb 10-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 669.217932][T13101] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1687'. [ 669.240226][ T5937] usb 4-1: USB disconnect, device number 86 [ 669.321205][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.364016][ T10] usb 10-1: config 0 descriptor?? [ 669.765230][ T5843] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 669.815502][ T10] apple 0003:05AC:027A.0011: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.9-1/input0 [ 669.955227][ T5843] usb 9-1: Using ep0 maxpacket: 16 [ 669.995178][ T5843] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 670.022946][ T5843] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 670.033111][ T10] usb 10-1: USB disconnect, device number 6 [ 670.088059][ T5843] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 670.110002][T13121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 670.130277][ T5843] usb 9-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 670.143498][ T5843] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.159155][ T5843] usb 9-1: Product: syz [ 670.175273][ T5843] usb 9-1: Manufacturer: syz [ 670.209811][ T5843] usb 9-1: SerialNumber: syz [ 670.250558][ T5843] usb 9-1: config 0 descriptor?? [ 670.285920][T13109] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 670.331274][ T5843] mcba_usb 9-1:0.0 can0: failed tx_urb -90 [ 670.348246][ T5843] mcba_usb 9-1:0.0 can0: Failed to send cmd (169) [ 670.385938][ T5843] mcba_usb 9-1:0.0 can0: failed tx_urb -90 [ 670.418064][ T5843] mcba_usb 9-1:0.0 can0: Failed to send cmd (169) [ 670.435856][ T5843] mcba_usb 9-1:0.0: Microchip CAN BUS Analyzer connected [ 670.548408][T13109] bridge0: port 3(macsec0) entered blocking state [ 670.556731][T13109] bridge0: port 3(macsec0) entered disabled state [ 670.565077][T13109] macsec0: entered allmulticast mode [ 670.579801][T13109] macsec0: entered promiscuous mode [ 671.255095][ T1218] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 671.514612][ T1218] usb 10-1: Using ep0 maxpacket: 8 [ 671.566336][ T1218] usb 10-1: unable to get BOS descriptor or descriptor too short [ 671.582033][ T1218] usb 10-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 671.704433][T13151] FAULT_INJECTION: forcing a failure. [ 671.704433][T13151] name failslab, interval 1, probability 0, space 0, times 0 [ 671.730840][ T1218] usb 10-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 671.763794][ T1218] usb 10-1: config 1 interface 0 has no altsetting 0 [ 671.795537][T13151] CPU: 0 UID: 0 PID: 13151 Comm: syz.6.1693 Not tainted syzkaller #0 PREEMPT(full) [ 671.795562][T13151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 671.795573][T13151] Call Trace: [ 671.795581][T13151] [ 671.795589][T13151] dump_stack_lvl+0x189/0x250 [ 671.795613][T13151] ? __pfx____ratelimit+0x10/0x10 [ 671.795624][T13151] ? __pfx_dump_stack_lvl+0x10/0x10 [ 671.795636][T13151] ? __pfx__printk+0x10/0x10 [ 671.795647][T13151] ? __lock_acquire+0xab9/0xd20 [ 671.795662][T13151] should_fail_ex+0x414/0x560 [ 671.795679][T13151] should_failslab+0xa8/0x100 [ 671.795693][T13151] kmem_cache_alloc_noprof+0x73/0x3c0 [ 671.795705][T13151] ? skb_clone+0x212/0x3a0 [ 671.795720][T13151] skb_clone+0x212/0x3a0 [ 671.795734][T13151] __netlink_deliver_tap+0x404/0x850 [ 671.795751][T13151] ? netlink_deliver_tap+0x2e/0x1b0 [ 671.795762][T13151] netlink_deliver_tap+0x19c/0x1b0 [ 671.795773][T13151] netlink_unicast+0x7fa/0x9e0 [ 671.795791][T13151] ? __pfx_netlink_unicast+0x10/0x10 [ 671.795806][T13151] ? netlink_sendmsg+0x642/0xb30 [ 671.795815][T13151] ? skb_put+0x11b/0x210 [ 671.795827][T13151] netlink_sendmsg+0x805/0xb30 [ 671.795843][T13151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.795854][T13151] ? aa_sock_msg_perm+0xf1/0x1d0 [ 671.795870][T13151] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 671.795879][T13151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.795889][T13151] __sock_sendmsg+0x219/0x270 [ 671.795905][T13151] ____sys_sendmsg+0x505/0x830 [ 671.795920][T13151] ? __pfx_____sys_sendmsg+0x10/0x10 [ 671.795936][T13151] ? import_iovec+0x74/0xa0 [ 671.795949][T13151] ___sys_sendmsg+0x21f/0x2a0 [ 671.795962][T13151] ? __pfx____sys_sendmsg+0x10/0x10 [ 671.795992][T13151] ? __fget_files+0x2a/0x420 [ 671.796004][T13151] ? __fget_files+0x3a0/0x420 [ 671.796022][T13151] __x64_sys_sendmsg+0x19b/0x260 [ 671.796035][T13151] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 671.796051][T13151] ? __pfx_ksys_write+0x10/0x10 [ 671.796066][T13151] ? do_syscall_64+0xbe/0x3b0 [ 671.796078][T13151] do_syscall_64+0xfa/0x3b0 [ 671.796087][T13151] ? lockdep_hardirqs_on+0x9c/0x150 [ 671.796096][T13151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.796105][T13151] ? clear_bhb_loop+0x60/0xb0 [ 671.796117][T13151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.796126][T13151] RIP: 0033:0x7f43a6b8eec9 [ 671.796136][T13151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.796144][T13151] RSP: 002b:00007f43a7a54038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 671.796155][T13151] RAX: ffffffffffffffda RBX: 00007f43a6de5fa0 RCX: 00007f43a6b8eec9 [ 671.796162][T13151] RDX: 0000000008000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 671.796168][T13151] RBP: 00007f43a7a54090 R08: 0000000000000000 R09: 0000000000000000 [ 671.796175][T13151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.796180][T13151] R13: 00007f43a6de6038 R14: 00007f43a6de5fa0 R15: 00007f43a6f0fa28 [ 671.796196][T13151] [ 671.797138][T13151] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1693'. [ 672.139775][ T1218] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 672.236498][ T1218] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.244855][T13151] vlan2: entered promiscuous mode [ 672.250463][T13151] macvtap0: entered promiscuous mode [ 672.341481][ T1218] usb 10-1: Product: syz [ 672.375148][ T1218] usb 10-1: Manufacturer: syz [ 672.450237][ T1218] usb 10-1: SerialNumber: syz [ 672.585440][T13137] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 672.594465][T13137] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 672.705188][ T5938] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 673.056405][T13170] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 673.095179][ T5938] usb 4-1: Using ep0 maxpacket: 8 [ 673.104259][ T5938] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 673.124504][ T5938] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 673.197335][ T5938] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 673.345582][ T5938] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 673.401911][ T5938] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 673.450419][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.545164][T12872] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 673.632830][ T10] usb 9-1: USB disconnect, device number 60 [ 673.641753][ T10] mcba_usb 9-1:0.0 can0: device disconnected [ 673.733575][ T5938] usb 4-1: GET_CAPABILITIES returned 0 [ 673.768658][T12872] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 673.788664][T12872] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 673.810466][ T5938] usbtmc 4-1:16.0: can't read capabilities [ 673.841706][T12872] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 673.913842][T12872] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 673.925640][T12872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.947165][T13164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.965846][T13164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.983216][T12872] usb 7-1: Product: syz [ 673.999137][T12872] usb 7-1: Manufacturer: syz [ 674.016443][T12872] usb 7-1: SerialNumber: syz [ 674.032101][T13187] netlink: 'syz.8.1698': attribute type 21 has an invalid length. [ 674.043433][T13187] netlink: 160 bytes leftover after parsing attributes in process `syz.8.1698'. [ 674.063810][T12872] hub 7-1:1.0: bad descriptor, ignoring hub [ 674.071133][T12872] hub 7-1:1.0: probe with driver hub failed with error -5 [ 674.090950][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1698'. [ 674.110569][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 674.121630][T13189] usbtmc 4-1:16.0: Unable to send data, error -71 [ 674.163080][ T5938] usb 4-1: USB disconnect, device number 87 [ 674.338585][T12872] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 56 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 674.878524][ T1218] usb 10-1: bad CDC descriptors [ 674.957631][ T1218] usb 10-1: USB disconnect, device number 7 [ 675.717106][ T5934] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 675.877418][ T5934] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.890442][ T5934] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.900807][ T5934] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 675.926411][ T5934] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 675.945749][ T5934] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.972593][ T5934] usb 9-1: config 0 descriptor?? [ 676.340716][T12872] usb 7-1: USB disconnect, device number 56 [ 676.372595][T12872] usblp0: removed [ 676.436978][ T5934] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 676.512344][ T30] audit: type=1326 audit(1759317536.504:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13226 comm="syz.9.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682258eec9 code=0x7ffc0000 [ 676.542034][ T30] audit: type=1326 audit(1759317536.504:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13226 comm="syz.9.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682258eec9 code=0x7ffc0000 [ 676.604147][ T30] audit: type=1326 audit(1759317536.534:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13226 comm="syz.9.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f682258eec9 code=0x7ffc0000 [ 676.660645][T13231] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 676.700002][ T30] audit: type=1326 audit(1759317536.534:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13226 comm="syz.9.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682258eec9 code=0x7ffc0000 [ 676.763527][ T30] audit: type=1326 audit(1759317536.534:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13226 comm="syz.9.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682258eec9 code=0x7ffc0000 [ 676.859003][ T30] audit: type=1326 audit(1759317536.534:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13226 comm="syz.9.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f682258eec9 code=0x7ffc0000 [ 677.080892][ T30] audit: type=1326 audit(1759317536.534:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13226 comm="syz.9.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682258eec9 code=0x7ffc0000 [ 677.112263][T13239] netlink: 'syz.3.1709': attribute type 21 has an invalid length. [ 677.143919][ T30] audit: type=1326 audit(1759317536.534:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13226 comm="syz.9.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682258eec9 code=0x7ffc0000 [ 677.194180][T13239] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1709'. [ 677.209325][ T30] audit: type=1326 audit(1759317536.574:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13226 comm="syz.9.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f682258eec9 code=0x7ffc0000 [ 677.233381][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1709'. [ 677.296904][ T5934] usb 9-1: USB disconnect, device number 61 [ 677.334342][ T30] audit: type=1326 audit(1759317536.574:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13226 comm="syz.9.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682258eec9 code=0x7ffc0000 [ 677.515217][T12872] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 677.667479][T12872] usb 10-1: Using ep0 maxpacket: 8 [ 677.682169][T12872] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 677.704947][T12872] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 677.717755][T12872] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 677.728426][T12872] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 677.744181][T12872] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 677.761813][T12872] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.912046][T13255] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 677.920032][T13255] syzkaller1: linktype set to 774 [ 678.038564][T12872] usb 10-1: GET_CAPABILITIES returned 0 [ 678.151848][T12872] usbtmc 10-1:16.0: can't read capabilities [ 678.240732][T13242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.260892][T13242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.437689][ C0] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 678.447377][T13265] usbtmc 10-1:16.0: Unable to send data, error -71 [ 678.495169][ T10] usb 10-1: USB disconnect, device number 8 [ 679.135167][ T5934] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 679.194012][T13276] netlink: 'syz.6.1722': attribute type 21 has an invalid length. [ 679.205351][T13276] netlink: 160 bytes leftover after parsing attributes in process `syz.6.1722'. [ 679.237016][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1722'. [ 679.308544][ T5934] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.337368][ T5934] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.391345][ T5934] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 679.467469][T13281] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 679.623192][ T5934] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 679.633527][ T5934] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.660726][ T5934] usb 9-1: config 0 descriptor?? [ 679.945226][ T10] usb 7-1: new low-speed USB device number 57 using dummy_hcd [ 680.124176][ T5934] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 680.145955][ T10] usb 7-1: Invalid ep0 maxpacket: 64 [ 680.307560][ T10] usb 7-1: new low-speed USB device number 58 using dummy_hcd [ 680.485782][ T10] usb 7-1: Invalid ep0 maxpacket: 64 [ 680.509805][ T10] usb usb7-port1: attempt power cycle [ 680.850915][ T5934] usb 9-1: USB disconnect, device number 62 [ 680.885703][ T10] usb 7-1: new low-speed USB device number 59 using dummy_hcd [ 680.947743][ T10] usb 7-1: Invalid ep0 maxpacket: 64 [ 681.028189][T13300] bond0: option resend_igmp: invalid value (18446744072098938880) [ 681.062458][T13300] bond0: option resend_igmp: allowed values 0 - 255 [ 681.126982][ T10] usb 7-1: new low-speed USB device number 60 using dummy_hcd [ 681.200521][T13306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 681.260761][ T10] usb 7-1: Invalid ep0 maxpacket: 64 [ 681.266638][ T10] usb usb7-port1: unable to enumerate USB device [ 681.825355][ T1218] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 682.025146][ T1218] usb 9-1: Using ep0 maxpacket: 16 [ 682.074362][ T1218] usb 9-1: config 0 has an invalid interface number: 205 but max is 1 [ 682.119769][ T1218] usb 9-1: config 0 has an invalid interface number: 4 but max is 1 [ 682.169706][ T1218] usb 9-1: config 0 has an invalid descriptor of length 6, skipping remainder of the config [ 682.213020][ T1218] usb 9-1: config 0 has no interface number 0 [ 682.264256][ T1218] usb 9-1: config 0 has no interface number 1 [ 682.302596][ T1218] usb 9-1: config 0 interface 4 altsetting 139 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 682.330419][ T1218] usb 9-1: config 0 interface 205 has no altsetting 0 [ 682.340669][ T1218] usb 9-1: config 0 interface 4 has no altsetting 0 [ 682.368478][ T1218] usb 9-1: Dual-Role OTG device on HNP port [ 682.374730][ T1218] usb 9-1: New USB device found, idVendor=0eb0, idProduct=9071, bcdDevice= a.8a [ 682.395557][ T1218] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.403596][ T1218] usb 9-1: Product: 쥰劰稌耒᷄ﶀæ£á»‚㩕ꞗ銯⌧࣋í—䀎攄ã¥î®†æ‚—æš®ã¡äœµã©¶ä©¡é¾¶â‡ê•™ç–°í™‹â¿¹â¼æ±›ë«‘觴滾뛚茩䬙î­â‰‚ྙ똽ꦡ詨铻럮Ⱋ魔æŠã®êµ«á‚žì±­ä˜šë«½í¤å›Ÿâ¥¢é«œì«“헞久è¤é±±î²¸á³ë”ƒè–¡ë¬‹æ ’䪰䘼㉿숩蚩è·µã¶ä€”㘠ꦒ鴃ヷ䧎馯兖䚣㒂࿳㶛î”鰶ꆿ믚術馠枸ì®â½Žã³€à –ﲢ竜댤í–⨲问籗桤á§çŒžç„ž [ 682.475122][ T1218] usb 9-1: Manufacturer: ᥘ艿愈쮠暦çœä£Ñˆêºšç•çŒï‡¬Ü€ëŽ„é­å›¹è‘´ç‚‡ë¸½ë¶¹ê©‘熾ææ¢ãŠ•å‹˜ë¾£æ¶å¥³ï•´Î½î¦´â¹¦î¼é¤“⶘璺猜阌쉳ⴜ∀厛貅å«ìŠ“ᰩ긚᨞툺Ԇෳ넶ⱥè¸ä…®ç„˜à«œã™³ì°£çµ ï±˜æª¹ãŽŠé²©ç™€ï¢á´£ážá¹±å¶â³¤éµ’ꮯ [ 682.499965][ T5938] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 682.500213][ T1218] usb 9-1: SerialNumber: syz [ 682.598613][ T1218] usb 9-1: config 0 descriptor?? [ 682.762601][ T5938] usb 4-1: Using ep0 maxpacket: 8 [ 682.802275][ T5938] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 682.814923][ T5938] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 682.827364][ T5938] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 682.838435][ T5938] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 682.852513][ T5938] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 682.861718][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.308803][ T5938] usb 4-1: GET_CAPABILITIES returned 0 [ 683.335910][ T5938] usbtmc 4-1:16.0: can't read capabilities [ 683.505677][T13319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.545640][T13319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.676388][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 683.685959][T13341] usbtmc 4-1:16.0: Unable to send data, error -71 [ 684.351215][T13351] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1742'. [ 684.413280][T13353] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 684.593685][ T1218] usb 9-1: USB disconnect, device number 63 [ 684.670966][T13365] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode [ 684.709146][T13366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 685.295129][T13372] openvswitch: netlink: IP tunnel dst address not specified [ 685.353284][ T5938] usb 4-1: USB disconnect, device number 88 [ 685.441700][T13374] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1750'. [ 685.679450][T13382] input: syz0 as /devices/virtual/input/input34 [ 686.003755][T13387] netlink: 'syz.6.1753': attribute type 10 has an invalid length. [ 686.011959][T13387] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1753'. [ 686.025256][T13387] bond0: entered promiscuous mode [ 686.030469][T13387] bond_slave_0: entered promiscuous mode [ 686.037019][T13387] bond_slave_1: entered promiscuous mode [ 686.043124][T13387] bridge0: port 4(bond0) entered blocking state [ 686.073365][T13387] bridge0: port 4(bond0) entered disabled state [ 686.095994][T13387] bond0: entered allmulticast mode [ 686.101506][T13387] bond_slave_0: entered allmulticast mode [ 686.111254][T13387] bond_slave_1: entered allmulticast mode [ 686.118856][T13390] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1754'. [ 686.121550][T13387] bridge0: port 4(bond0) entered blocking state [ 686.134294][T13387] bridge0: port 4(bond0) entered forwarding state [ 686.134422][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.147530][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.158025][T13390] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1754'. [ 686.167692][T13390] (unnamed net_device) (uninitialized): option ad_select: invalid value (3) [ 686.185068][T13387] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1753'. [ 686.249584][T13394] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1755'. [ 686.414762][T13399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1756'. [ 686.441661][T13399] vlan2: entered promiscuous mode [ 686.451696][T13399] macvtap0: entered promiscuous mode [ 686.725239][T13410] bridge0: entered promiscuous mode [ 686.731565][T13410] macsec1: entered promiscuous mode [ 686.748913][T13410] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1759'. [ 686.760067][T13410] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1759'. [ 687.115168][ T5934] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 687.325371][ T5937] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 687.347257][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 687.391708][T13421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 687.420869][ T5934] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 687.425734][ T1218] usb 9-1: new full-speed USB device number 64 using dummy_hcd [ 687.578587][ T5937] usb 10-1: Using ep0 maxpacket: 32 [ 687.601390][ T5934] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 687.619837][ T5934] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 687.705517][ T1218] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 687.720348][ T1218] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.839298][ T1218] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 687.886298][ T5934] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 687.899633][ T1218] usb 9-1: New USB device found, idVendor=056a, idProduct=0219, bcdDevice= 0.f7 [ 687.914243][ T5937] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 687.924430][ T5937] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.999233][ T1218] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.005009][ T5937] usb 10-1: Product: syz [ 688.026183][ T5934] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 688.101570][ T5937] usb 10-1: Manufacturer: syz [ 688.111731][ T5937] usb 10-1: SerialNumber: syz [ 688.121904][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.143603][ T5937] usb 10-1: config 0 descriptor?? [ 688.144408][ T1218] usb 9-1: config 0 descriptor?? [ 688.245122][ T5937] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 688.358891][ T5934] usb 4-1: GET_CAPABILITIES returned 0 [ 688.364503][ T5934] usbtmc 4-1:16.0: can't read capabilities [ 688.566760][T13409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.596895][T13409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.828575][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 688.838656][T13423] usbtmc 4-1:16.0: Unable to send data, error -71 [ 688.942808][ T5842] usb 9-1: USB disconnect, device number 64 [ 689.345246][ T5934] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 689.495073][ T5934] usb 7-1: Using ep0 maxpacket: 32 [ 689.510684][ T5934] usb 7-1: config 0 has an invalid interface number: 235 but max is 0 [ 689.520543][ T5934] usb 7-1: config 0 has no interface number 0 [ 689.544526][ T5934] usb 7-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 689.549141][T13430] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1766'. [ 689.558370][ T5934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.572014][ T5934] usb 7-1: Product: syz [ 689.578107][ T5934] usb 7-1: Manufacturer: syz [ 689.583038][ T5934] usb 7-1: SerialNumber: syz [ 689.591069][ T5934] usb 7-1: config 0 descriptor?? [ 689.812596][ T5934] kaweth 7-1:0.235: Firmware present in device. [ 689.835497][ T5937] gspca_ov534_9: reg_w failed -110 [ 689.915738][ T24] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 690.003085][ T5934] kaweth 7-1:0.235: Statistics collection: 0 [ 690.010381][ T5934] kaweth 7-1:0.235: Multicast filter limit: 0 [ 690.018951][ T5934] kaweth 7-1:0.235: MTU: 0 [ 690.024642][ T5934] kaweth 7-1:0.235: Read MAC address 00:00:00:00:00:00 [ 690.039820][ T9] usb 4-1: USB disconnect, device number 89 [ 690.090689][ T24] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 690.114588][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.130121][ T24] usb 9-1: Product: syz [ 690.135086][ T5937] gspca_ov534_9: Unknown sensor 0000 [ 690.135201][ T5937] ov534_9 10-1:0.0: probe with driver ov534_9 failed with error -22 [ 690.152029][ T24] usb 9-1: Manufacturer: syz [ 690.157176][ T24] usb 9-1: SerialNumber: syz [ 690.180074][ T24] usb 9-1: config 0 descriptor?? [ 690.190867][ T24] ch341 9-1:0.0: ch341-uart converter detected [ 690.203904][T13425] program syz.6.1764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 690.391102][ T24] usb 9-1: failed to receive control message: -71 [ 690.398059][ T24] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 690.412645][ T24] usb 9-1: USB disconnect, device number 65 [ 690.422334][T13425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.431716][ T24] ch341 9-1:0.0: device disconnected [ 690.432240][T13425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.465156][ T9] usb 4-1: new low-speed USB device number 90 using dummy_hcd [ 690.608733][ T5937] usb 10-1: USB disconnect, device number 9 [ 690.628505][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 690.670640][ T5934] kaweth 7-1:0.235: Error setting receive filter [ 690.691629][ T5934] kaweth 7-1:0.235: probe with driver kaweth failed with error -5 [ 690.709151][ T5934] usb 7-1: USB disconnect, device number 61 [ 690.775166][ T9] usb 4-1: new low-speed USB device number 91 using dummy_hcd [ 690.830287][T13444] bridge_slave_0: left allmulticast mode [ 690.836640][T13444] bridge_slave_0: left promiscuous mode [ 690.842350][T13444] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.853407][T13444] bridge_slave_1: left allmulticast mode [ 690.861314][T13444] bridge_slave_1: left promiscuous mode [ 690.867390][T13444] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.878444][T13444] bond0: (slave bond_slave_0): Releasing backup interface [ 690.891788][T13444] bond0: (slave bond_slave_1): Releasing backup interface [ 690.911295][T13444] team0: Port device team_slave_0 removed [ 690.921130][T13444] team0: Port device team_slave_1 removed [ 690.929589][T13444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.937673][T13444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.945544][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 690.946972][T13444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.954921][ T9] usb usb4-port1: attempt power cycle [ 690.959490][T13444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.325269][ T9] usb 4-1: new low-speed USB device number 92 using dummy_hcd [ 691.350438][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 691.495329][ T9] usb 4-1: new low-speed USB device number 93 using dummy_hcd [ 691.516893][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 691.522569][ T9] usb usb4-port1: unable to enumerate USB device [ 692.165425][T13463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.285828][ T5934] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 692.455247][ T5934] usb 9-1: Using ep0 maxpacket: 16 [ 692.467148][ T5934] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 692.476363][ T5934] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.491724][ T5934] usb 9-1: config 0 has no interface number 0 [ 692.498510][ T5934] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 692.513247][ T5934] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 692.536736][ T5934] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 692.548884][ T5934] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.557186][ T5934] usb 9-1: Product: syz [ 692.561419][ T5934] usb 9-1: Manufacturer: syz [ 692.566423][ T5934] usb 9-1: SerialNumber: syz [ 692.579835][ T5934] usb 9-1: config 0 descriptor?? [ 692.585646][T13462] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 692.592968][T13462] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 692.812191][T13462] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 692.822451][T13462] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 693.234077][ T5934] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 693.275114][ T5934] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61 [ 693.351572][ T5934] asix 9-1:0.251: probe with driver asix failed with error -61 [ 693.596095][ T5937] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 693.785141][ T5937] usb 4-1: Using ep0 maxpacket: 8 [ 693.814544][ T5937] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 693.836029][ T5937] usb 4-1: config 0 has no interface number 0 [ 693.915429][ T5937] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 693.924824][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.941926][ T5937] usb 4-1: Product: syz [ 693.950709][ T5937] usb 4-1: Manufacturer: syz [ 693.981877][ T5937] usb 4-1: SerialNumber: syz [ 694.023871][ T5937] usb 4-1: config 0 descriptor?? [ 694.269442][ T5937] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 694.316395][ T5937] usb 4-1: No streaming interface found for terminal 6. [ 694.354640][ T5937] usb 4-1: USB disconnect, device number 94 [ 694.496030][ T9] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 694.739716][ T9] usb 7-1: config 127 has an invalid interface number: 238 but max is 0 [ 694.756053][ T9] usb 7-1: config 127 has no interface number 0 [ 694.799345][ T9] usb 7-1: config 127 interface 238 has no altsetting 0 [ 694.828707][ T9] usb 7-1: New USB device found, idVendor=413c, idProduct=8193, bcdDevice=fb.23 [ 694.847256][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.909165][ T9] usb 7-1: Product: syz [ 694.956030][ T9] usb 7-1: Manufacturer: syz [ 694.993391][ T5934] usb 9-1: USB disconnect, device number 66 [ 695.005593][ T9] usb 7-1: SerialNumber: syz [ 695.453986][T13487] program syz.6.1784 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 695.573179][T13508] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1791'. [ 695.585673][T13487] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1784'. [ 695.648343][T13510] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1791'. [ 695.649586][ T9] usb 7-1: USB disconnect, device number 62 [ 697.126010][ T10] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 697.355074][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 697.368682][ T10] usb 10-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 697.512528][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.524742][ T10] usb 10-1: Product: syz [ 697.538607][ T10] usb 10-1: Manufacturer: syz [ 697.543653][ T10] usb 10-1: SerialNumber: syz [ 697.973257][ T10] usb 10-1: config 0 descriptor?? [ 697.997375][ T10] ums-onetouch 10-1:0.0: USB Mass Storage device detected [ 698.082163][T13546] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1802'. [ 698.090867][ T10] usb 10-1: Found UVC 0.00 device syz (0d49:7000) [ 698.117178][ T10] usb 10-1: No valid video chain found. [ 698.218901][ T10] usb 10-1: USB disconnect, device number 10 [ 698.626511][T13553] sctp: [Deprecated]: syz.6.1803 (pid 13553) Use of int in maxseg socket option. [ 698.626511][T13553] Use struct sctp_assoc_value instead [ 699.713742][ T5934] hid-generic 0000:0003:0001.0015: unknown main item tag 0x0 [ 699.739528][ T5934] hid-generic 0000:0003:0001.0015: hidraw0: HID v0.03 Device [syz0] on syz1 [ 699.959914][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1809'. [ 699.972941][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1809'. [ 700.015092][ T5937] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 700.177646][ T5937] usb 7-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 700.205274][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.213389][ T5937] usb 7-1: Product: syz [ 700.225525][ T5937] usb 7-1: Manufacturer: syz [ 700.230149][ T5937] usb 7-1: SerialNumber: syz [ 700.260230][ T5937] usb 7-1: config 0 descriptor?? [ 700.875311][ T5934] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 700.972473][T13568] syz_tun: entered allmulticast mode [ 700.982900][T13568] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1807'. [ 701.009446][T13568] syz_tun (unregistering): left allmulticast mode [ 701.055296][ T5934] usb 9-1: Using ep0 maxpacket: 8 [ 701.067391][ T5934] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 701.087165][ T5934] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 701.107695][ T5934] usb 9-1: config 0 interface 0 has no altsetting 0 [ 701.118710][ T5934] usb 9-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 701.128366][ T5934] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.139325][ T5934] usb 9-1: Product: syz [ 701.143630][ T5934] usb 9-1: Manufacturer: syz [ 701.151764][ T5934] usb 9-1: SerialNumber: syz [ 701.172494][ T5934] usb 9-1: config 0 descriptor?? [ 701.189033][ T5934] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 found [ 701.395170][ T5934] snd_usb_toneport 9-1:0.0: set_interface failed [ 701.401746][ T5934] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 now disconnected [ 701.445375][ T5934] snd_usb_toneport 9-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 701.477305][ T5934] usb 9-1: USB disconnect, device number 67 [ 702.155516][ T10] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 702.183786][T13590] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1815'. [ 702.315503][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 702.360115][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.373661][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 702.391069][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 702.400207][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.415798][ T10] usb 4-1: config 0 descriptor?? [ 702.424120][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 702.454707][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 702.475163][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 702.672110][ T5937] mos7840 7-1:0.0: required endpoints missing [ 702.709248][ T5937] usb 7-1: USB disconnect, device number 63 [ 702.941694][T13602] FAULT_INJECTION: forcing a failure. [ 702.941694][T13602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.975309][T13602] CPU: 0 UID: 0 PID: 13602 Comm: syz.8.1817 Not tainted syzkaller #0 PREEMPT(full) [ 702.975334][T13602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 702.975345][T13602] Call Trace: [ 702.975353][T13602] [ 702.975361][T13602] dump_stack_lvl+0x189/0x250 [ 702.975389][T13602] ? __pfx____ratelimit+0x10/0x10 [ 702.975407][T13602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 702.975428][T13602] ? __pfx__printk+0x10/0x10 [ 702.975459][T13602] should_fail_ex+0x414/0x560 [ 702.975492][T13602] _copy_to_user+0x31/0xb0 [ 702.975515][T13602] simple_read_from_buffer+0xe1/0x170 [ 702.975542][T13602] proc_fail_nth_read+0x1b3/0x220 [ 702.975565][T13602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 702.975587][T13602] ? rw_verify_area+0x2a6/0x4d0 [ 702.975606][T13602] ? __lock_acquire+0xab9/0xd20 [ 702.975622][T13602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 702.975643][T13602] vfs_read+0x1fd/0xa30 [ 702.975662][T13602] ? fdget_pos+0x247/0x320 [ 702.975690][T13602] ? __pfx___mutex_lock+0x10/0x10 [ 702.975710][T13602] ? __pfx_vfs_read+0x10/0x10 [ 702.975732][T13602] ? __fget_files+0x2a/0x420 [ 702.975759][T13602] ? __fget_files+0x3a0/0x420 [ 702.975779][T13602] ? __fget_files+0x2a/0x420 [ 702.975827][T13602] ksys_read+0x145/0x250 [ 702.975850][T13602] ? __pfx_ksys_read+0x10/0x10 [ 702.975871][T13602] ? __secure_computing+0xe2/0x2a0 [ 702.975900][T13602] do_syscall_64+0xfa/0x3b0 [ 702.975917][T13602] ? lockdep_hardirqs_on+0x9c/0x150 [ 702.975934][T13602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.975952][T13602] ? clear_bhb_loop+0x60/0xb0 [ 702.975973][T13602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.975990][T13602] RIP: 0033:0x7fbcb138d8dc [ 702.976006][T13602] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 702.976021][T13602] RSP: 002b:00007fbcb2304030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 702.976041][T13602] RAX: ffffffffffffffda RBX: 00007fbcb15e5fa0 RCX: 00007fbcb138d8dc [ 702.976054][T13602] RDX: 000000000000000f RSI: 00007fbcb23040a0 RDI: 0000000000000003 [ 702.976066][T13602] RBP: 00007fbcb2304090 R08: 0000000000000000 R09: 0000000000000000 [ 702.976077][T13602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.976088][T13602] R13: 00007fbcb15e6038 R14: 00007fbcb15e5fa0 R15: 00007fbcb170fa28 [ 702.976119][T13602] [ 703.585115][ T10] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 703.735340][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 703.741908][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 703.753394][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 703.763706][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 703.773827][ T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 703.787018][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 703.796160][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.021347][ T10] usb 9-1: GET_CAPABILITIES returned 0 [ 704.027313][ T10] usbtmc 9-1:16.0: can't read capabilities [ 704.225678][T13610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.234730][T13610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.307058][ C1] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 704.317268][T13620] usbtmc 9-1:16.0: Unable to send data, error -71 [ 705.019591][T12872] usb 4-1: USB disconnect, device number 95 [ 705.492434][T13633] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1827'. [ 706.467562][ T5937] usb 9-1: USB disconnect, device number 68 [ 706.544130][T13648] macsec2: entered promiscuous mode [ 706.853547][ C1] vcan0: j1939_tp_rxtimer: 0xffff888068180800: rx timeout, send abort [ 706.862188][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888068180800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 706.876749][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888068182c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 707.483995][T13675] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1840'. [ 708.157410][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a6a7800: rx timeout, send abort [ 708.166029][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806a6a7800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 708.180399][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806a6a4000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 708.217836][ T5937] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 708.760736][ T5937] usb 10-1: Using ep0 maxpacket: 8 [ 708.864112][ T5937] usb 10-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 708.888528][ T5937] usb 10-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 708.902343][ T5937] usb 10-1: Product: syz [ 708.908194][ T5937] usb 10-1: Manufacturer: syz [ 708.912910][ T5937] usb 10-1: SerialNumber: syz [ 708.975121][T12872] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 709.003027][ T5937] usb 10-1: config 0 descriptor?? [ 709.021841][ T5937] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 709.035300][ T9] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 709.146594][T12872] usb 9-1: Using ep0 maxpacket: 8 [ 709.154413][T12872] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 709.166374][ T9] usb 4-1: device descriptor read/64, error -71 [ 709.184905][T12872] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 709.201186][T12872] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 709.212236][T12872] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 709.230360][T12872] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 709.240021][T12872] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.405964][ T9] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 709.427243][ T5937] gspca_zc3xx: reg_r err -71 [ 709.432171][ T5937] gspca_zc3xx 10-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 709.454532][ T5937] usb 10-1: USB disconnect, device number 11 [ 709.467250][T12872] usb 9-1: GET_CAPABILITIES returned 0 [ 709.474329][T12872] usbtmc 9-1:16.0: can't read capabilities [ 709.545228][ T9] usb 4-1: device descriptor read/64, error -71 [ 709.655441][ T9] usb usb4-port1: attempt power cycle [ 709.670914][T13686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.679717][T13686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.005467][ T9] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 710.027217][ T9] usb 4-1: device descriptor read/8, error -71 [ 710.215097][T12872] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 710.295128][ T9] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 710.325865][ T9] usb 4-1: device descriptor read/8, error -71 [ 710.399221][T12872] usb 10-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 710.420885][T12872] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.429408][T12872] usb 10-1: Product: syz [ 710.433664][T12872] usb 10-1: Manufacturer: syz [ 710.438450][T12872] usb 10-1: SerialNumber: syz [ 710.445814][ T9] usb usb4-port1: unable to enumerate USB device [ 710.452653][T12872] usb 10-1: config 0 descriptor?? [ 710.460569][T12872] f81232 10-1:0.0: f81232 converter detected [ 710.471781][T12872] usb 10-1: f81232 converter now attached to ttyUSB0 [ 710.661454][ T5842] usb 10-1: USB disconnect, device number 12 [ 710.670747][ T5842] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 710.679460][ T5842] f81232 10-1:0.0: device disconnected [ 711.204368][T13712] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1852'. [ 711.216293][ T5842] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 711.381873][ T5842] usb 7-1: config index 0 descriptor too short (expected 46945, got 27) [ 711.390390][ T5842] usb 7-1: config 51 has too many interfaces: 173, using maximum allowed: 32 [ 711.402995][ T5842] usb 7-1: config 51 has an invalid descriptor of length 0, skipping remainder of the config [ 711.414213][ T5842] usb 7-1: config 51 has 0 interfaces, different from the descriptor's value: 173 [ 711.427903][ T5842] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 711.438269][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.678621][T12872] usb 7-1: USB disconnect, device number 64 [ 711.713605][T13710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 711.845846][ T5842] usb 9-1: USB disconnect, device number 69 [ 711.917542][T13726] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 712.366061][ T5842] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 712.440902][T13742] binder: 13736:13742 ioctl c0306201 200000000180 returned -14 [ 712.495293][ T5842] usb 9-1: device descriptor read/64, error -71 [ 712.760560][ T5842] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 712.895102][ T5842] usb 9-1: device descriptor read/64, error -71 [ 713.016929][ T5842] usb usb9-port1: attempt power cycle [ 713.365146][ T5842] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 713.395749][ T5842] usb 9-1: device descriptor read/8, error -71 [ 713.569786][T13762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1866'. [ 713.665733][ T5842] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 713.707155][ T5842] usb 9-1: device descriptor read/8, error -71 [ 713.818619][ T5842] usb usb9-port1: unable to enumerate USB device [ 714.562198][T13783] tipc: Started in network mode [ 714.569696][T13783] tipc: Node identity 221f6919112, cluster identity 4711 [ 714.577896][T13783] tipc: Enabled bearer , priority 0 [ 714.585703][T13784] syzkaller0: entered promiscuous mode [ 714.591386][T13784] syzkaller0: entered allmulticast mode [ 714.608309][T13782] F2FS-fs: Conflicting test_dummy_encryption options [ 714.794240][T13783] tipc: Resetting bearer [ 715.075605][T13775] tipc: Resetting bearer [ 715.303182][T13775] tipc: Disabling bearer [ 715.725675][T13794] vivid-007: disconnect [ 715.737467][T13794] binder: 13788:13794 ioctl c0306201 200000000080 returned -14 [ 716.345290][T13788] vivid-007: reconnect [ 717.279700][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 717.279712][ T30] audit: type=1326 audit(1759317577.274:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13818 comm="syz.7.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478b38eec9 code=0x7ffc0000 [ 717.334452][T13819] netlink: 'syz.7.1881': attribute type 3 has an invalid length. [ 717.374563][T13822] F2FS-fs: Conflicting test_dummy_encryption options [ 717.398746][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1880'. [ 717.414551][ T30] audit: type=1326 audit(1759317577.324:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13818 comm="syz.7.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478b38eec9 code=0x7ffc0000 [ 717.456555][T13823] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1881'. [ 717.502878][ T30] audit: type=1326 audit(1759317577.324:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13818 comm="syz.7.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f478b38eec9 code=0x7ffc0000 [ 717.596893][ T30] audit: type=1326 audit(1759317577.324:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13818 comm="syz.7.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478b38eec9 code=0x7ffc0000 [ 717.619704][T13824] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1881'. [ 717.791493][ T30] audit: type=1326 audit(1759317577.324:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13818 comm="syz.7.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478b38eec9 code=0x7ffc0000 [ 717.821189][ T30] audit: type=1326 audit(1759317577.324:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13818 comm="syz.7.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f478b38eec9 code=0x7ffc0000 [ 717.854157][ T30] audit: type=1326 audit(1759317577.324:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13818 comm="syz.7.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478b38eec9 code=0x7ffc0000 [ 717.882615][ T30] audit: type=1326 audit(1759317577.324:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13818 comm="syz.7.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f478b38eec9 code=0x7ffc0000 [ 717.907114][ T30] audit: type=1326 audit(1759317577.324:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13818 comm="syz.7.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478b38eec9 code=0x7ffc0000 [ 717.943694][ T30] audit: type=1326 audit(1759317577.324:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13818 comm="syz.7.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478b38eec9 code=0x7ffc0000 [ 718.035064][T12872] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 718.105456][ T10] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 718.165319][T12872] usb 10-1: device descriptor read/64, error -71 [ 718.185375][ T5934] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 718.275206][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 718.292101][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 718.304354][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 718.317078][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 718.335962][ T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 718.353967][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 718.363458][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.403439][ T5934] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 718.415358][T12872] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 718.443916][ T5934] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 718.472183][ T5934] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.565336][T12872] usb 10-1: device descriptor read/64, error -71 [ 718.615300][ T10] usb 9-1: GET_CAPABILITIES returned 0 [ 718.627527][ T10] usbtmc 9-1:16.0: can't read capabilities [ 718.649095][ T5934] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 718.695468][T12872] usb usb10-port1: attempt power cycle [ 718.781908][ T5934] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 718.815963][T13838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.828784][T13838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.046388][ T5934] usb 7-1: USB disconnect, device number 65 [ 719.055069][T12872] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 719.066018][ C1] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 719.075350][T13845] usbtmc 9-1:16.0: Unable to send data, error -71 [ 719.105843][T12872] usb 10-1: device descriptor read/8, error -71 [ 719.120081][T13840] delete_channel: no stack [ 719.314614][T13849] dummy0: entered promiscuous mode [ 719.334506][T13849] vlan2: entered promiscuous mode [ 719.375378][T12872] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 719.412316][T12872] usb 10-1: device descriptor read/8, error -71 [ 719.527759][T12872] usb usb10-port1: unable to enumerate USB device [ 720.825258][T12872] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 720.953203][ T5842] usb 9-1: USB disconnect, device number 74 [ 720.955517][ T10] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 720.986775][T12872] usb 7-1: Using ep0 maxpacket: 32 [ 721.003781][T12872] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 721.018450][T12872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.342373][T12872] usb 7-1: config 0 descriptor?? [ 721.355299][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 721.367194][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.378912][T12872] as10x_usb: device has been detected [ 721.386034][T12872] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 721.396497][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.444270][ T10] usb 10-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 721.463197][T12872] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 721.471852][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.512651][ T10] usb 10-1: config 0 descriptor?? [ 721.553138][T12872] as10x_usb: error during firmware upload part1 [ 721.580776][T12872] Registered device nBox DVB-T Dongle [ 721.598734][T12872] usb 7-1: USB disconnect, device number 66 [ 721.651452][T12872] Unregistered device nBox DVB-T Dongle [ 721.656848][T12872] as10x_usb: device has been disconnected [ 721.963142][ T10] hid (null): unknown global tag 0x84 [ 721.970091][ T10] hid (null): unknown global tag 0xd [ 721.988098][ T10] hid (null): unknown global tag 0xd [ 721.993508][ T10] hid (null): unknown global tag 0xd [ 721.999067][ T10] hid (null): unknown global tag 0xc [ 722.004482][ T10] hid (null): global environment stack underflow [ 722.011270][ T10] hid (null): report_id 37147 is invalid [ 722.178772][ T10] hid (null): unknown global tag 0xd [ 722.242849][T12872] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 722.315184][ T10] hid (null): report_id 14587 is invalid [ 722.316557][T13862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.349055][T13862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.444243][ T10] usb 10-1: string descriptor 0 read error: -71 [ 722.471537][T12872] usb 7-1: too many configurations: 13, using maximum allowed: 8 [ 722.548859][T12872] usb 7-1: config 0 has no interfaces? [ 722.579637][T12872] usb 7-1: config 0 has no interfaces? [ 722.587560][T12872] usb 7-1: config 0 has no interfaces? [ 722.595939][T12872] usb 7-1: config 0 has no interfaces? [ 722.602899][T12872] usb 7-1: config 0 has no interfaces? [ 722.609988][T12872] usb 7-1: config 0 has no interfaces? [ 722.619749][T12872] usb 7-1: config 0 has no interfaces? [ 722.626891][T12872] usb 7-1: config 0 has no interfaces? [ 722.635675][T12872] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 722.645194][T12872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.657854][T12872] usb 7-1: Product: syz [ 722.663311][T12872] usb 7-1: Manufacturer: syz [ 722.678396][T12872] usb 7-1: SerialNumber: syz [ 722.683352][ T10] usb 10-1: Max retries (5) exceeded reading string descriptor 200 [ 722.692308][ T10] letsketch 0003:6161:4D15.0016: probe with driver letsketch failed with error -32 [ 722.705321][ T10] usb 10-1: USB disconnect, device number 17 [ 722.740879][T12872] usb 7-1: config 0 descriptor?? [ 722.975221][ T10] usb 7-1: USB disconnect, device number 67 [ 723.158120][T13892] syz_tun: entered allmulticast mode [ 723.212925][T13891] syz_tun: left allmulticast mode [ 723.454677][T13897] fuse: Unknown parameter 'roomode' [ 723.637332][ T5934] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 723.699123][T13904] fuse: Bad value for 'fd' [ 723.770043][T13904] kvm: pic: non byte write [ 723.805540][ T5934] usb 7-1: Using ep0 maxpacket: 32 [ 723.815130][ T5934] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 723.844664][ T5934] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.897030][ T5934] usb 7-1: config 0 descriptor?? [ 723.928017][ T5934] as10x_usb: device has been detected [ 723.939145][ T5934] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 724.106054][T13917] sctp: [Deprecated]: syz.9.1913 (pid 13917) Use of int in maxseg socket option. [ 724.106054][T13917] Use struct sctp_assoc_value instead [ 724.194384][ T5934] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 724.269424][ T5934] as10x_usb: error during firmware upload part1 [ 724.280747][ T5934] Registered device nBox DVB-T Dongle [ 724.291488][ T5934] usb 7-1: USB disconnect, device number 68 [ 724.305176][ T10] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 724.356404][ T5934] Unregistered device nBox DVB-T Dongle [ 724.359353][ T5934] as10x_usb: device has been disconnected [ 724.475600][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 724.486093][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 724.498263][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 724.508917][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 724.592364][ T10] usb 9-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 724.645489][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.661706][ T10] usb 9-1: Product: syz [ 724.739954][ T10] usb 9-1: Manufacturer: syz [ 724.751474][ T10] usb 9-1: SerialNumber: syz [ 724.782421][ T10] usb 9-1: config 0 descriptor?? [ 724.803480][T13914] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 724.875685][ T10] mcba_usb 9-1:0.0 can0: failed tx_urb -90 [ 725.012965][ T10] mcba_usb 9-1:0.0 can0: Failed to send cmd (169) [ 725.107974][ T10] mcba_usb 9-1:0.0 can0: failed tx_urb -90 [ 725.175312][ T10] mcba_usb 9-1:0.0 can0: Failed to send cmd (169) [ 725.277575][ T10] mcba_usb 9-1:0.0: Microchip CAN BUS Analyzer connected [ 726.447142][ T24] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 726.605664][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 726.633982][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 726.667843][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 726.915619][ T5934] usb 9-1: USB disconnect, device number 75 [ 726.922673][ T5934] mcba_usb 9-1:0.0 can0: device disconnected [ 726.956534][T13970] sctp: [Deprecated]: syz.8.1925 (pid 13970) Use of int in maxseg socket option. [ 726.956534][T13970] Use struct sctp_assoc_value instead [ 726.971374][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 726.994939][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 727.015072][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 727.099887][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 727.114461][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.357356][ T24] usb 4-1: GET_CAPABILITIES returned 0 [ 727.369765][ T24] usbtmc 4-1:16.0: can't read capabilities [ 728.125610][ T24] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 728.285286][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 728.292366][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58094, setting to 1024 [ 728.304085][ T24] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 728.314839][ T24] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 728.324758][ T24] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 728.338069][ T24] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 728.347692][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.356956][ T24] usb 9-1: Product: syz [ 728.361358][ T24] usb 9-1: Manufacturer: syz [ 728.366091][ T24] usb 9-1: SerialNumber: syz [ 728.580800][ T24] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 728.587971][ T24] cdc_ncm 9-1:1.0: bind() failure [ 728.598738][ T24] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 728.606405][ T24] cdc_ncm 9-1:1.1: bind() failure [ 729.182996][ T24] usb 4-1: USB disconnect, device number 100 [ 729.265434][ T5934] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 729.435077][ T5934] usb 7-1: Using ep0 maxpacket: 8 [ 729.442134][ T5934] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 729.454934][ T5934] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 729.474314][ T5934] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 729.489731][ T5934] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 729.503387][ T5934] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 729.517609][ T5934] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.595255][ T24] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 729.736379][ T5934] usb 7-1: GET_CAPABILITIES returned 0 [ 729.742042][ T5934] usbtmc 7-1:16.0: can't read capabilities [ 729.758474][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 729.778528][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 729.803900][ T24] usb 4-1: config 1 has an invalid interface number: 138 but max is 0 [ 729.817085][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 729.829583][ T24] usb 4-1: config 1 has no interface number 0 [ 729.840846][ T24] usb 4-1: config 1 interface 138 altsetting 252 endpoint 0x7 has invalid wMaxPacketSize 0 [ 729.857454][ T24] usb 4-1: config 1 interface 138 has no altsetting 0 [ 729.870062][ T24] usb 4-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 729.881356][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.900716][ T24] usb 4-1: Product: syz [ 729.910248][ T24] usb 4-1: Manufacturer: syz [ 729.917989][ T24] usb 4-1: SerialNumber: syz [ 729.939137][T14022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.947954][T14022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.063966][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 730.098957][T14025] usbtmc 7-1:16.0: Unable to send data, error -71 [ 730.283860][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 730.378897][ T24] usb 4-1: USB disconnect, device number 101 [ 731.007896][ T24] usb 9-1: USB disconnect, device number 76 [ 731.035139][ T9] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 731.220291][ T9] usb 10-1: config 0 has no interfaces? [ 731.232070][ T9] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 731.249999][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.264052][ T9] usb 10-1: Product: syz [ 731.271932][ T9] usb 10-1: Manufacturer: syz [ 731.282554][ T9] usb 10-1: SerialNumber: syz [ 731.285194][ T5934] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 731.291990][ T9] usb 10-1: config 0 descriptor?? [ 731.455237][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 731.472816][ T5934] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 731.536175][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 731.536219][ T30] audit: type=1326 audit(1759317591.504:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.9.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682258eec9 code=0x7ffc0000 [ 731.537880][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.545527][ T30] audit: type=1326 audit(1759317591.504:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.9.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682258eec9 code=0x7ffc0000 [ 731.657383][ T30] audit: type=1326 audit(1759317591.504:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.9.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f682258eec9 code=0x7ffc0000 [ 731.842741][ T5934] usb 4-1: Product: syz [ 731.854108][ T5934] usb 4-1: Manufacturer: syz [ 731.862669][ T5934] usb 4-1: SerialNumber: syz [ 731.886376][ T5934] r8152-cfgselector 4-1: Unknown version 0x0000 [ 731.892756][ T5934] r8152-cfgselector 4-1: config 0 descriptor?? [ 731.941051][ T30] audit: type=1326 audit(1759317591.504:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.9.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682258eec9 code=0x7ffc0000 [ 731.964896][ T30] audit: type=1326 audit(1759317591.504:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.9.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f682258eec9 code=0x7ffc0000 [ 732.021908][T14052] program syz.7.1943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 732.041774][ T30] audit: type=1326 audit(1759317591.504:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.9.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682258eec9 code=0x7ffc0000 [ 732.064926][ T30] audit: type=1326 audit(1759317591.504:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.9.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f682258eec9 code=0x7ffc0000 [ 732.093025][ T30] audit: type=1326 audit(1759317591.524:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.9.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f682252af79 code=0x7ffc0000 [ 732.163134][ T30] audit: type=1326 audit(1759317591.524:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.9.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f682252af79 code=0x7ffc0000 [ 732.255638][ T5842] usb 7-1: USB disconnect, device number 69 [ 732.312997][ T30] audit: type=1326 audit(1759317591.524:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.9.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682258eec9 code=0x7ffc0000 [ 732.340388][ T5934] r8152-cfgselector 4-1: USB disconnect, device number 102 [ 732.988873][ T10] usb 10-1: USB disconnect, device number 18 [ 734.435250][ T5842] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 734.682216][ T5842] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 734.691797][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.724588][ T5842] usb 7-1: Product: syz [ 734.734719][ T5842] usb 7-1: Manufacturer: syz [ 734.748795][ T5842] usb 7-1: SerialNumber: syz [ 735.249087][T14105] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 735.255924][T14105] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 735.362157][T14105] vhci_hcd vhci_hcd.0: Device attached [ 735.515898][ T10] vhci_hcd: vhci_device speed not set [ 735.549016][ T5842] rtl8150 7-1:1.0: eth21: rtl8150 is detected [ 735.585065][ T10] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 735.594476][T14094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.680174][T14094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.752025][ T5934] usb 7-1: USB disconnect, device number 70 [ 735.935631][ T5842] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 735.963785][T14123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 736.011706][T14109] vhci_hcd: connection reset by peer [ 736.023208][T11477] vhci_hcd: stop threads [ 736.034203][T11477] vhci_hcd: release socket [ 736.040892][T11477] vhci_hcd: disconnect device [ 736.109648][ T5842] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 736.117988][ T5842] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 736.132699][ T5842] usb 10-1: config 0 interface 0 has no altsetting 0 [ 736.143069][ T5842] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 736.152562][ T5842] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 736.164763][ T5842] usb 10-1: Product: syz [ 736.170047][ T5842] usb 10-1: Manufacturer: syz [ 736.174863][ T5842] usb 10-1: SerialNumber: syz [ 736.183552][ T5842] usb 10-1: config 0 descriptor?? [ 736.190788][ T5842] hub 10-1:0.0: bad descriptor, ignoring hub [ 736.198271][ T5842] hub 10-1:0.0: probe with driver hub failed with error -5 [ 736.209113][ T5842] usb 10-1: selecting invalid altsetting 0 [ 737.287241][T14143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.296497][T14143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.334511][T14143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.345425][T14143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.356611][T14144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.451030][T14144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.895497][ T9] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 738.066942][ T9] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 738.102254][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 738.114802][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 738.140756][ T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 738.154058][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.162663][ T9] usb 9-1: Product: syz [ 738.167464][ T9] usb 9-1: Manufacturer: syz [ 738.172239][ T9] usb 9-1: SerialNumber: syz [ 738.248985][ T9] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 738.276107][ T9] cdc_ncm 9-1:1.0: bind() failure [ 738.463278][T14145] delete_channel: no stack [ 738.467973][T14145] delete_channel: no stack [ 738.600526][ T9] usb 9-1: USB disconnect, device number 77 [ 738.815656][ T24] usb 10-1: USB disconnect, device number 19 [ 738.885987][ T5934] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 738.946510][T14177] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1980'. [ 739.039077][ T5934] usb 4-1: unable to get BOS descriptor or descriptor too short [ 739.047768][ T5934] usb 4-1: not running at top speed; connect to a high speed hub [ 739.057468][ T5934] usb 4-1: config 1 has an invalid interface number: 138 but max is 0 [ 739.066903][ T5934] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 739.077390][ T5934] usb 4-1: config 1 has no interface number 0 [ 739.083505][ T5934] usb 4-1: config 1 interface 138 has no altsetting 0 [ 739.092666][ T5934] usb 4-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 739.102546][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.110631][ T5934] usb 4-1: Product: syz [ 739.115520][ T5934] usb 4-1: Manufacturer: syz [ 739.120144][ T5934] usb 4-1: SerialNumber: syz [ 739.230121][T14179] FAULT_INJECTION: forcing a failure. [ 739.230121][T14179] name failslab, interval 1, probability 0, space 0, times 0 [ 739.244361][T14179] CPU: 0 UID: 0 PID: 14179 Comm: syz.8.1981 Not tainted syzkaller #0 PREEMPT(full) [ 739.244384][T14179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 739.244394][T14179] Call Trace: [ 739.244400][T14179] [ 739.244408][T14179] dump_stack_lvl+0x189/0x250 [ 739.244429][T14179] ? __pfx____ratelimit+0x10/0x10 [ 739.244444][T14179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 739.244459][T14179] ? __pfx__printk+0x10/0x10 [ 739.244477][T14179] ? __pfx___might_resched+0x10/0x10 [ 739.244498][T14179] should_fail_ex+0x414/0x560 [ 739.244523][T14179] should_failslab+0xa8/0x100 [ 739.244546][T14179] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 739.244567][T14179] ? __alloc_skb+0x112/0x2d0 [ 739.244589][T14179] __alloc_skb+0x112/0x2d0 [ 739.244605][T14179] ctrl_getfamily+0x3a1/0x590 [ 739.244624][T14179] ? __pfx_ctrl_getfamily+0x10/0x10 [ 739.244640][T14179] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 739.244665][T14179] genl_family_rcv_msg_doit+0x215/0x300 [ 739.244688][T14179] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 739.244719][T14179] ? stack_trace_save+0x9c/0xe0 [ 739.244743][T14179] genl_rcv_msg+0x60e/0x790 [ 739.244766][T14179] ? __pfx_genl_rcv_msg+0x10/0x10 [ 739.244783][T14179] ? __pfx_ctrl_getfamily+0x10/0x10 [ 739.244813][T14179] netlink_rcv_skb+0x205/0x470 [ 739.244827][T14179] ? __lock_acquire+0xab9/0xd20 [ 739.244843][T14179] ? __pfx_genl_rcv_msg+0x10/0x10 [ 739.244863][T14179] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 739.244895][T14179] ? down_read+0x1ad/0x2e0 [ 739.244915][T14179] genl_rcv+0x28/0x40 [ 739.244931][T14179] netlink_unicast+0x82f/0x9e0 [ 739.244964][T14179] ? __pfx_netlink_unicast+0x10/0x10 [ 739.244984][T14179] ? netlink_sendmsg+0x642/0xb30 [ 739.244996][T14179] ? skb_put+0x11b/0x210 [ 739.245025][T14179] netlink_sendmsg+0x805/0xb30 [ 739.245048][T14179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.245067][T14179] ? aa_sock_msg_perm+0xf1/0x1d0 [ 739.245089][T14179] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 739.245102][T14179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.245118][T14179] __sock_sendmsg+0x219/0x270 [ 739.245143][T14179] __sys_sendto+0x3bd/0x520 [ 739.245161][T14179] ? __pfx___sys_sendto+0x10/0x10 [ 739.245176][T14179] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 739.245214][T14179] ? __fget_files+0x3a0/0x420 [ 739.245243][T14179] ? ksys_write+0x22a/0x250 [ 739.245262][T14179] ? __pfx_ksys_write+0x10/0x10 [ 739.245277][T14179] ? rcu_is_watching+0x15/0xb0 [ 739.245299][T14179] __x64_sys_sendto+0xde/0x100 [ 739.245320][T14179] do_syscall_64+0xfa/0x3b0 [ 739.245335][T14179] ? lockdep_hardirqs_on+0x9c/0x150 [ 739.245350][T14179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.245365][T14179] ? clear_bhb_loop+0x60/0xb0 [ 739.245383][T14179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.245398][T14179] RIP: 0033:0x7fbcb1390d5c [ 739.245422][T14179] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 739.245436][T14179] RSP: 002b:00007fbcb2302ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 739.245453][T14179] RAX: ffffffffffffffda RBX: 00007fbcb2302fc0 RCX: 00007fbcb1390d5c [ 739.245466][T14179] RDX: 0000000000000020 RSI: 00007fbcb2303010 RDI: 0000000000000003 [ 739.245476][T14179] RBP: 0000000000000000 R08: 00007fbcb2302f14 R09: 000000000000000c [ 739.245487][T14179] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 739.245498][T14179] R13: 00007fbcb2302f68 R14: 00007fbcb2303010 R15: 0000000000000000 [ 739.245521][T14179] [ 739.346951][ T5934] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 739.675658][ T5934] usb 4-1: USB disconnect, device number 103 [ 740.027987][T14198] lo: entered allmulticast mode [ 740.079803][T14198] dvmrp1: entered allmulticast mode [ 740.087027][ T5937] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 740.110094][T14197] lo: left allmulticast mode [ 740.246755][ T5937] usb 10-1: config 0 has an invalid interface number: 217 but max is 0 [ 740.258736][ T5937] usb 10-1: config 0 has no interface number 0 [ 740.281271][ T5937] usb 10-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 740.290878][ T5937] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.315817][ T5937] usb 10-1: Product: syz [ 740.329697][ T5937] usb 10-1: Manufacturer: syz [ 740.335462][ T5934] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 740.357525][T14210] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 740.391002][ T5937] usb 10-1: SerialNumber: syz [ 740.413689][ T5937] usb 10-1: config 0 descriptor?? [ 740.430227][ T5937] hub 10-1:0.217: bad descriptor, ignoring hub [ 740.444822][ T5937] hub 10-1:0.217: probe with driver hub failed with error -5 [ 740.517553][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 740.544309][ T5934] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 740.615336][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 740.630188][ T5937] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 740.666936][ T5934] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 740.699709][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.722992][ T5934] usb 4-1: Product: syz [ 740.733681][ T5937] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 740.745020][ T5934] usb 4-1: Manufacturer: syz [ 740.753034][ T5934] usb 4-1: SerialNumber: syz [ 740.755177][ T10] vhci_hcd: vhci_device speed not set [ 740.770514][ T5937] dib0700: firmware download failed at 7 with -22 [ 740.804135][ T5934] usb 4-1: config 0 descriptor?? [ 740.852724][T14200] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 740.861412][T14200] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 740.897278][ T5934] usb 4-1: ucan: probing device on interface #0 [ 740.965619][ T1218] usb 10-1: USB disconnect, device number 20 [ 741.299361][ T5934] usb 4-1: ucan: failed to retrieve device info [ 741.309305][ T5934] usb 4-1: ucan: probe failed; try to update the device firmware [ 741.327425][ T5934] usb 4-1: USB disconnect, device number 104 [ 741.355584][ T1218] usb 9-1: new low-speed USB device number 78 using dummy_hcd [ 741.415220][ T30] kauditd_printk_skb: 171 callbacks suppressed [ 741.415233][ T30] audit: type=1326 audit(1759317601.404:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.7.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478b38eec9 code=0x7ffc0000 [ 741.496118][ T30] audit: type=1326 audit(1759317601.404:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.7.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478b38eec9 code=0x7ffc0000 [ 741.547429][ T1218] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.563049][ T1218] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 741.601917][ T30] audit: type=1326 audit(1759317601.404:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.7.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f478b38eec9 code=0x7ffc0000 [ 741.642454][ T1218] usb 9-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 741.659074][ T1218] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.667511][ T30] audit: type=1326 audit(1759317601.404:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.7.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478b38eec9 code=0x7ffc0000 [ 741.710686][ T1218] usb 9-1: config 0 descriptor?? [ 741.757008][ T30] audit: type=1326 audit(1759317601.404:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.7.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f478b38eec9 code=0x7ffc0000 [ 741.779408][ C0] vkms_vblank_simulate: vblank timer overrun [ 741.788547][ T30] audit: type=1326 audit(1759317601.404:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.7.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478b38eec9 code=0x7ffc0000 [ 741.825438][ T30] audit: type=1326 audit(1759317601.404:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.7.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f478b38eec9 code=0x7ffc0000 [ 741.847640][ C0] vkms_vblank_simulate: vblank timer overrun [ 741.856760][ T30] audit: type=1326 audit(1759317601.404:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.7.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478b38eec9 code=0x7ffc0000 [ 741.879442][ T30] audit: type=1326 audit(1759317601.404:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.7.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f478b38eec9 code=0x7ffc0000 [ 741.905678][ T30] audit: type=1326 audit(1759317601.404:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.7.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478b38eec9 code=0x7ffc0000 [ 741.962837][ T1218] usb 9-1: string descriptor 0 read error: -71 [ 741.972242][ T1218] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input35 [ 742.008225][ T5196] bcm5974 9-1:0.0: could not read from device [ 742.055233][ T5196] bcm5974 9-1:0.0: could not read from device [ 742.092828][ T5196] bcm5974 9-1:0.0: could not read from device [ 742.102380][ T1218] usb 9-1: USB disconnect, device number 78 [ 742.111391][T14229] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1998'. [ 742.124796][ T5196] bcm5974 9-1:0.0: could not read from device [ 742.204109][T14231] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 742.385061][ T9] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 742.565154][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 742.583568][ T9] usb 10-1: config 0 has an invalid interface number: 151 but max is 0 [ 742.601460][ T9] usb 10-1: config 0 has no interface number 0 [ 742.625127][ T9] usb 10-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 742.648485][ T9] usb 10-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 742.658097][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.666353][ T9] usb 10-1: Product: syz [ 742.685256][ T9] usb 10-1: Manufacturer: syz [ 742.690437][ T9] usb 10-1: SerialNumber: syz [ 742.723945][ T9] usb 10-1: config 0 descriptor?? [ 742.895180][T14248] binder: 14245:14248 ioctl c08c5332 2000000002c0 returned -22 [ 742.966617][ T9] usb 10-1: USB disconnect, device number 21 [ 743.050402][T13176] udevd[13176]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 743.825075][ T5934] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 744.015785][ T5934] usb 10-1: Using ep0 maxpacket: 16 [ 744.059206][ T5934] usb 10-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 744.125101][ T5934] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.133231][ T5934] usb 10-1: Product: syz [ 744.175940][T14264] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2010'. [ 744.183886][ T5934] usb 10-1: Manufacturer: syz [ 744.196421][ T5934] usb 10-1: SerialNumber: syz [ 744.213824][ T5934] usb 10-1: config 0 descriptor?? [ 744.232301][ T5934] ums-onetouch 10-1:0.0: USB Mass Storage device detected [ 744.258135][T14264] fuse: Bad value for 'fd' [ 744.448384][T14256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.547217][T14256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.643033][ T5934] usb 10-1: USB disconnect, device number 22 [ 744.689789][T14281] netlink: 'syz.8.2014': attribute type 8 has an invalid length. [ 744.702299][T14281] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2014'. [ 745.818743][T14295] trusted_key: encrypted_key: insufficient parameters specified [ 746.011547][T14299] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2019'. [ 746.042780][T14299] CIFS: iocharset name too long [ 746.405821][T14309] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2023'. [ 746.431658][T14309] fuse: Bad value for 'fd' [ 746.691563][T14320] FAULT_INJECTION: forcing a failure. [ 746.691563][T14320] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 746.737432][T14320] CPU: 1 UID: 0 PID: 14320 Comm: syz.8.2027 Not tainted syzkaller #0 PREEMPT(full) [ 746.737455][T14320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 746.737464][T14320] Call Trace: [ 746.737472][T14320] [ 746.737479][T14320] dump_stack_lvl+0x189/0x250 [ 746.737506][T14320] ? __pfx____ratelimit+0x10/0x10 [ 746.737531][T14320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 746.737552][T14320] ? __pfx__printk+0x10/0x10 [ 746.737572][T14320] ? fs_reclaim_acquire+0x7d/0x100 [ 746.737605][T14320] should_fail_ex+0x414/0x560 [ 746.737631][T14320] prepare_alloc_pages+0x213/0x610 [ 746.737662][T14320] __alloc_frozen_pages_noprof+0x123/0x370 [ 746.737692][T14320] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 746.737737][T14320] alloc_pages_mpol+0x232/0x4a0 [ 746.737766][T14320] folio_alloc_mpol_noprof+0x39/0x70 [ 746.737791][T14320] shmem_mfill_atomic_pte+0x528/0x9c0 [ 746.737823][T14320] mfill_atomic_zeropage+0x4b1/0xb80 [ 746.737861][T14320] ? __pfx_mfill_atomic_zeropage+0x10/0x10 [ 746.737894][T14320] userfaultfd_ioctl+0x26dd/0x4c80 [ 746.737930][T14320] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 746.737975][T14320] ? kasan_quarantine_put+0xdd/0x220 [ 746.738011][T14320] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 746.738037][T14320] ? do_vfs_ioctl+0xbe8/0x1430 [ 746.738060][T14320] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 746.738094][T14320] ? __lock_acquire+0xab9/0xd20 [ 746.738134][T14320] ? __fget_files+0x2a/0x420 [ 746.738161][T14320] ? __fget_files+0x2a/0x420 [ 746.738181][T14320] ? __fget_files+0x3a0/0x420 [ 746.738203][T14320] ? __fget_files+0x2a/0x420 [ 746.738229][T14320] ? bpf_lsm_file_ioctl+0x9/0x20 [ 746.738248][T14320] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 746.738270][T14320] __se_sys_ioctl+0xf9/0x170 [ 746.738291][T14320] do_syscall_64+0xfa/0x3b0 [ 746.738312][T14320] ? lockdep_hardirqs_on+0x9c/0x150 [ 746.738329][T14320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.738347][T14320] ? clear_bhb_loop+0x60/0xb0 [ 746.738369][T14320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.738386][T14320] RIP: 0033:0x7fbcb138eec9 [ 746.738402][T14320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 746.738418][T14320] RSP: 002b:00007fbcb2304038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 746.738437][T14320] RAX: ffffffffffffffda RBX: 00007fbcb15e5fa0 RCX: 00007fbcb138eec9 [ 746.738451][T14320] RDX: 0000200000000000 RSI: 00000000c020aa04 RDI: 0000000000000003 [ 746.738462][T14320] RBP: 00007fbcb2304090 R08: 0000000000000000 R09: 0000000000000000 [ 746.738474][T14320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 746.738484][T14320] R13: 00007fbcb15e6038 R14: 00007fbcb15e5fa0 R15: 00007fbcb170fa28 [ 746.738515][T14320] [ 747.616683][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.623141][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.938733][ T9] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 748.150795][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 748.275959][ T9] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 748.292140][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.307760][ T9] usb 10-1: config 0 descriptor?? [ 748.547031][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 748.558003][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 748.667179][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 748.685420][ T9] usb 10-1: media controller created [ 748.863964][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 748.981888][ T9] az6027: usb out operation failed. (-71) [ 748.992570][ T9] az6027: usb out operation failed. (-71) [ 748.998418][ T9] stb0899_attach: Driver disabled by Kconfig [ 749.004499][ T9] az6027: no front-end attached [ 749.004499][ T9] [ 749.015179][ T9] az6027: usb out operation failed. (-71) [ 749.020923][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 749.048025][T14355] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2038'. [ 749.059076][T14355] fuse: Bad value for 'fd' [ 749.089697][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input36 [ 749.224928][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 749.262765][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 749.327152][ T9] usb 10-1: USB disconnect, device number 23 [ 749.517722][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 750.001216][T14366] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 750.030428][T14367] RDS: rds_bind could not find a transport for ::4006:0:20:0, load rds_tcp or rds_rdma? [ 750.615233][ T24] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 750.872640][ T24] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 750.881984][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.893364][ T24] usb 4-1: config 0 descriptor?? [ 750.901653][ T24] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 751.104806][ T24] gp8psk: usb in 128 operation failed. [ 751.160465][ T24] gp8psk: usb in 137 operation failed. [ 751.171730][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 751.184938][T14379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2046'. [ 751.796562][ T24] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 751.817334][ T24] usb 4-1: media controller created [ 751.872435][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 752.022774][ T24] gp8psk_fe: Frontend attached [ 752.030576][ T24] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 752.047019][ T24] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 752.098561][T14396] FAULT_INJECTION: forcing a failure. [ 752.098561][T14396] name failslab, interval 1, probability 0, space 0, times 0 [ 752.156429][T14396] CPU: 1 UID: 0 PID: 14396 Comm: syz.6.2051 Not tainted syzkaller #0 PREEMPT(full) [ 752.156452][T14396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 752.156462][T14396] Call Trace: [ 752.156469][T14396] [ 752.156478][T14396] dump_stack_lvl+0x189/0x250 [ 752.156502][T14396] ? __pfx____ratelimit+0x10/0x10 [ 752.156519][T14396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 752.156538][T14396] ? __pfx__printk+0x10/0x10 [ 752.156561][T14396] ? __pfx___might_resched+0x10/0x10 [ 752.156584][T14396] should_fail_ex+0x414/0x560 [ 752.156612][T14396] should_failslab+0xa8/0x100 [ 752.156637][T14396] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 752.156659][T14396] ? __alloc_skb+0x112/0x2d0 [ 752.156682][T14396] __alloc_skb+0x112/0x2d0 [ 752.156705][T14396] netlink_sendmsg+0x5c6/0xb30 [ 752.156734][T14396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 752.156756][T14396] ? aa_sock_msg_perm+0xf1/0x1d0 [ 752.156782][T14396] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 752.156799][T14396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 752.156819][T14396] __sock_sendmsg+0x219/0x270 [ 752.156847][T14396] ____sys_sendmsg+0x505/0x830 [ 752.156874][T14396] ? __pfx_____sys_sendmsg+0x10/0x10 [ 752.156904][T14396] ? import_iovec+0x74/0xa0 [ 752.156929][T14396] ___sys_sendmsg+0x21f/0x2a0 [ 752.156952][T14396] ? __pfx____sys_sendmsg+0x10/0x10 [ 752.157015][T14396] ? __fget_files+0x2a/0x420 [ 752.157037][T14396] ? __fget_files+0x3a0/0x420 [ 752.157070][T14396] __x64_sys_sendmsg+0x19b/0x260 [ 752.157094][T14396] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 752.157127][T14396] ? __pfx_ksys_write+0x10/0x10 [ 752.157146][T14396] ? rcu_is_watching+0x15/0xb0 [ 752.157171][T14396] ? do_syscall_64+0xbe/0x3b0 [ 752.157193][T14396] do_syscall_64+0xfa/0x3b0 [ 752.157211][T14396] ? lockdep_hardirqs_on+0x9c/0x150 [ 752.157228][T14396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.157245][T14396] ? clear_bhb_loop+0x60/0xb0 [ 752.157266][T14396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.157283][T14396] RIP: 0033:0x7f43a6b8eec9 [ 752.157300][T14396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 752.157315][T14396] RSP: 002b:00007f43a7a54038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 752.157334][T14396] RAX: ffffffffffffffda RBX: 00007f43a6de5fa0 RCX: 00007f43a6b8eec9 [ 752.157347][T14396] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 752.157359][T14396] RBP: 00007f43a7a54090 R08: 0000000000000000 R09: 0000000000000000 [ 752.157370][T14396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.157381][T14396] R13: 00007f43a6de6038 R14: 00007f43a6de5fa0 R15: 00007f43a6f0fa28 [ 752.157410][T14396] [ 752.158780][ T24] gp8psk: usb in 138 operation failed. [ 752.442204][ T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 752.461461][ T24] gp8psk: found Genpix USB device pID = 203 (hex) [ 752.504349][T14399] tipc: Enabling of bearer rejected, already enabled [ 752.591376][ T24] usb 4-1: USB disconnect, device number 105 [ 753.075118][ T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 753.572135][ T24] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 753.763793][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 753.777794][ T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 753.844894][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 753.997059][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.025475][T14402] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 754.040932][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 754.247718][T14402] fuse: Unknown parameter 'rootmod' [ 755.035252][ T1218] usb 7-1: new full-speed USB device number 72 using dummy_hcd [ 755.165112][ T1218] usb 7-1: device descriptor read/64, error -71 [ 755.235090][ T9] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 755.385103][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 755.391697][ T9] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 755.400023][ T9] usb 10-1: config 0 has no interface number 0 [ 755.406414][ T1218] usb 7-1: new full-speed USB device number 73 using dummy_hcd [ 755.416980][ T9] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 755.426583][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.434678][ T9] usb 10-1: Product: syz [ 755.440953][ T9] usb 10-1: Manufacturer: syz [ 755.447522][ T9] usb 10-1: SerialNumber: syz [ 755.459614][ T9] usb 10-1: config 0 descriptor?? [ 755.548151][ T1218] usb 7-1: device descriptor read/64, error -71 [ 755.655857][ T1218] usb usb7-port1: attempt power cycle [ 755.669953][ T9] uvcvideo 10-1:0.31: probe with driver uvcvideo failed with error -22 [ 755.685190][ T9] usb 10-1: USB disconnect, device number 24 [ 756.041292][T14429] FAULT_INJECTION: forcing a failure. [ 756.041292][T14429] name failslab, interval 1, probability 0, space 0, times 0 [ 756.054585][ T1218] usb 7-1: new full-speed USB device number 74 using dummy_hcd [ 756.061730][T14429] CPU: 1 UID: 0 PID: 14429 Comm: syz.7.2062 Not tainted syzkaller #0 PREEMPT(full) [ 756.061754][T14429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 756.061765][T14429] Call Trace: [ 756.061773][T14429] [ 756.061781][T14429] dump_stack_lvl+0x189/0x250 [ 756.061809][T14429] ? __pfx____ratelimit+0x10/0x10 [ 756.061827][T14429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 756.061847][T14429] ? __pfx__printk+0x10/0x10 [ 756.061869][T14429] ? __pfx___might_resched+0x10/0x10 [ 756.061887][T14429] ? fs_reclaim_acquire+0x7d/0x100 [ 756.061915][T14429] should_fail_ex+0x414/0x560 [ 756.061943][T14429] should_failslab+0xa8/0x100 [ 756.061967][T14429] __kmalloc_cache_noprof+0x70/0x3d0 [ 756.061987][T14429] ? io_drain_req+0xa6/0x560 [ 756.062013][T14429] io_drain_req+0xa6/0x560 [ 756.062039][T14429] io_submit_sqes+0x1132/0x1d30 [ 756.062092][T14429] __se_sys_io_uring_enter+0x2df/0x2b20 [ 756.062133][T14429] ? ksys_write+0x1cb/0x250 [ 756.062154][T14429] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 756.062171][T14429] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 756.062188][T14429] ? __pfx_vfs_write+0x10/0x10 [ 756.062209][T14429] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 756.062231][T14429] ? __fget_files+0x3a0/0x420 [ 756.062259][T14429] ? fput+0xa0/0xd0 [ 756.062276][T14429] ? ksys_write+0x22a/0x250 [ 756.062298][T14429] ? __pfx_ksys_write+0x10/0x10 [ 756.062316][T14429] ? rcu_is_watching+0x15/0xb0 [ 756.062341][T14429] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 756.062367][T14429] do_syscall_64+0xfa/0x3b0 [ 756.062384][T14429] ? lockdep_hardirqs_on+0x9c/0x150 [ 756.062401][T14429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.062418][T14429] ? clear_bhb_loop+0x60/0xb0 [ 756.062439][T14429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.062456][T14429] RIP: 0033:0x7f478b38eec9 [ 756.062471][T14429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.062487][T14429] RSP: 002b:00007f47895d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 756.062511][T14429] RAX: ffffffffffffffda RBX: 00007f478b5e6180 RCX: 00007f478b38eec9 [ 756.062524][T14429] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000006 [ 756.062536][T14429] RBP: 00007f47895d5090 R08: 0000000000000000 R09: 0000000000000000 [ 756.062546][T14429] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 756.062557][T14429] R13: 00007f478b5e6218 R14: 00007f478b5e6180 R15: 00007f478b70fa28 [ 756.062588][T14429] [ 756.394114][ T10] usb 4-1: USB disconnect, device number 106 [ 756.413200][ T1218] usb 7-1: device descriptor read/8, error -71 [ 756.705257][ T1218] usb 7-1: new full-speed USB device number 75 using dummy_hcd [ 756.747934][ T1218] usb 7-1: device descriptor read/8, error -71 [ 757.210026][ T1218] usb usb7-port1: unable to enumerate USB device [ 757.585496][ T5934] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 757.614196][ T1218] usb 7-1: new full-speed USB device number 76 using dummy_hcd [ 757.755389][ T1218] usb 7-1: device descriptor read/64, error -71 [ 757.757178][ T5934] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 757.774938][ T5934] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 60793, setting to 1024 [ 757.787123][ T5934] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 757.798636][ T5934] usb 10-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 757.809122][ T5934] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.827065][ T5934] usb 10-1: config 0 descriptor?? [ 757.839404][T14442] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 757.853833][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880556db800: rx timeout, send abort [ 757.862492][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880556db800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 757.876968][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888030b02c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 757.917243][ T5934] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 758.012895][T14448] kvm: emulating exchange as write [ 758.523300][T14456] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2070'. [ 758.535172][T14456] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2070'. [ 759.153550][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030b00c00: rx timeout, send abort [ 759.163129][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888030b00c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 759.177550][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888030b01400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 759.891099][ T6627] Bluetooth: hci0: command 0x0406 tx timeout [ 760.115109][T12872] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 760.443458][T12872] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 760.463063][T12872] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 760.488915][T12872] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 760.567608][ T5934] usb 10-1: USB disconnect, device number 25 [ 760.578576][T12872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.639922][T14476] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 760.692073][T12872] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 760.871074][T14476] fuse: Unknown parameter 'rootmod' [ 760.948291][T14489] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2078'. [ 761.858564][T14495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 762.755120][ T1218] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 762.873635][T14515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 763.004570][ T5934] usb 4-1: USB disconnect, device number 107 [ 763.022360][ T1218] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 763.050775][ T1218] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 763.084481][T14515] netlink: 100 bytes leftover after parsing attributes in process `syz.9.2085'. [ 763.130264][ T1218] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 763.190466][ T1218] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 763.259582][ T1218] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.387545][ T1218] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 763.525223][ T5934] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 763.583812][ T1218] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 763.721044][ T5934] usb 4-1: config 0 has an invalid interface number: 249 but max is 0 [ 763.773418][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.778203][T14506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.799348][ T5934] usb 4-1: config 0 has no interface number 0 [ 763.813749][T14506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.851967][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 763.851984][ T30] audit: type=1326 audit(1759317623.844:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14499 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a6b8eec9 code=0x7ffc0000 [ 763.853779][ T5934] usb 4-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 763.898816][T14506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.913421][ T30] audit: type=1326 audit(1759317623.844:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14499 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a6b8eec9 code=0x7ffc0000 [ 763.945659][T14506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.987771][ T30] audit: type=1326 audit(1759317623.894:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14499 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43a6b8d710 code=0x7ffc0000 [ 764.010616][ T5934] usb 4-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 764.029536][ T5934] usb 4-1: config 0 interface 249 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 764.050470][ T5934] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 764.060179][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.135093][ T30] audit: type=1326 audit(1759317623.894:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14499 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f43a6b8eacb code=0x7ffc0000 [ 764.146827][ T5934] usb 4-1: config 0 descriptor?? [ 764.170522][ T30] audit: type=1326 audit(1759317623.894:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14499 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f43a6b8eacb code=0x7ffc0000 [ 764.185511][ T5934] port100 4-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 764.258809][T14527] netlink: 'syz.8.2089': attribute type 1 has an invalid length. [ 764.337116][T14527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 764.343806][ T30] audit: type=1326 audit(1759317623.974:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14499 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a6b8eec9 code=0x7ffc0000 [ 764.366390][ T30] audit: type=1326 audit(1759317623.974:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14499 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a6b8eec9 code=0x7ffc0000 [ 764.389063][ T30] audit: type=1326 audit(1759317623.984:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14499 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f43a6b8eec9 code=0x7ffc0000 [ 764.411632][ T30] audit: type=1326 audit(1759317623.984:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14499 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a6b8eec9 code=0x7ffc0000 [ 764.418265][ T5934] usb 4-1: USB disconnect, device number 108 [ 764.434557][ T30] audit: type=1326 audit(1759317623.984:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14499 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a6b8eec9 code=0x7ffc0000 [ 764.464596][T14520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2087'. [ 764.503345][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2089'. [ 764.619458][T14529] bond1: (slave veth3): Enslaving as an active interface with a down link [ 764.673022][T14527] vlan2: entered allmulticast mode [ 764.683972][T14527] veth1: entered allmulticast mode [ 764.694350][T14530] mac80211_hwsim hwsim20 è: renamed from wlan1 [ 765.225411][ T24] usb 7-1: USB disconnect, device number 78 [ 767.317003][T14549] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2095'. [ 768.019675][T14562] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 768.455432][ T24] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 768.625531][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 768.639398][ T24] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 768.662063][ T24] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 768.710098][ T24] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 768.749723][ T24] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 768.770050][ T24] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 768.784333][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.033365][ T24] usb 10-1: GET_CAPABILITIES returned 0 [ 769.039486][ T24] usbtmc 10-1:16.0: can't read capabilities [ 769.145063][ T5842] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 769.236883][T14565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.246399][T14565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.295274][ T5842] usb 4-1: Using ep0 maxpacket: 16 [ 769.310934][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.322376][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.364772][ T5842] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 769.384513][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.393294][ C0] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 769.401165][ T5842] usb 4-1: config 0 descriptor?? [ 769.414707][T14572] usbtmc 10-1:16.0: Unable to send data, error -71 [ 769.645282][ T10] usb 7-1: new full-speed USB device number 79 using dummy_hcd [ 769.797433][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 769.814405][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 769.826106][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 769.839812][ T10] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 769.849121][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.854842][ T5842] hid (null): unknown global tag 0x84 [ 769.857332][ T10] usb 7-1: Product: syz [ 769.857349][ T10] usb 7-1: Manufacturer: syz [ 769.857365][ T10] usb 7-1: SerialNumber: syz [ 769.880318][ T10] usb 7-1: config 0 descriptor?? [ 769.886700][ T5842] hid (null): unknown global tag 0xd [ 769.890224][T14574] raw-gadget.5 gadget.6: fail, usb_ep_enable returned -22 [ 769.892019][ T5842] hid (null): unknown global tag 0xd [ 769.903881][T14574] raw-gadget.5 gadget.6: fail, usb_ep_enable returned -22 [ 769.905119][ T5842] hid (null): unknown global tag 0xd [ 769.915915][ T10] usb 7-1: ucan: probing device on interface #0 [ 769.919580][ T5842] hid (null): unknown global tag 0xc [ 769.928739][ T5842] hid (null): global environment stack underflow [ 769.935157][ T5842] hid (null): report_id 37147 is invalid [ 769.940824][ T5842] hid (null): unknown global tag 0xd [ 769.946168][ T5842] hid (null): report_id 14587 is invalid [ 770.060522][T14571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.070494][T14571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.089595][ T5842] usb 4-1: string descriptor 0 read error: -71 [ 770.125574][ T5842] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 770.133752][ T5842] letsketch 0003:6161:4D15.0017: probe with driver letsketch failed with error -32 [ 770.148439][ T5842] usb 4-1: USB disconnect, device number 109 [ 770.326029][ T10] usb 7-1: ucan: device reported invalid device info [ 770.333803][ T10] usb 7-1: ucan: probe failed; try to update the device firmware [ 770.372390][T14576] FAULT_INJECTION: forcing a failure. [ 770.372390][T14576] name failslab, interval 1, probability 0, space 0, times 0 [ 770.385370][T14576] CPU: 0 UID: 0 PID: 14576 Comm: syz.8.2104 Not tainted syzkaller #0 PREEMPT(full) [ 770.385395][T14576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 770.385406][T14576] Call Trace: [ 770.385414][T14576] [ 770.385421][T14576] dump_stack_lvl+0x189/0x250 [ 770.385449][T14576] ? __pfx____ratelimit+0x10/0x10 [ 770.385467][T14576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 770.385488][T14576] ? __pfx__printk+0x10/0x10 [ 770.385505][T14576] ? __pfx___might_resched+0x10/0x10 [ 770.385525][T14576] ? fs_reclaim_acquire+0x7d/0x100 [ 770.385554][T14576] should_fail_ex+0x414/0x560 [ 770.385584][T14576] should_failslab+0xa8/0x100 [ 770.385608][T14576] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 770.385631][T14576] ? alloc_vfsmnt+0xeb/0x430 [ 770.385655][T14576] kstrdup+0x42/0x100 [ 770.385682][T14576] alloc_vfsmnt+0xeb/0x430 [ 770.385703][T14576] clone_mnt+0x67/0xae0 [ 770.385721][T14576] ? do_raw_spin_unlock+0x122/0x240 [ 770.385750][T14576] copy_tree+0x3d4/0x930 [ 770.385783][T14576] copy_mnt_ns+0x178/0x820 [ 770.385803][T14576] ? rcu_is_watching+0x15/0xb0 [ 770.385824][T14576] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 770.385844][T14576] ? create_new_namespaces+0x31/0x720 [ 770.385868][T14576] create_new_namespaces+0xd1/0x720 [ 770.385890][T14576] ? bpf_lsm_capable+0x9/0x20 [ 770.385910][T14576] ? security_capable+0x7e/0x2e0 [ 770.385940][T14576] unshare_nsproxy_namespaces+0x11c/0x170 [ 770.385964][T14576] ksys_unshare+0x4c8/0x8c0 [ 770.385992][T14576] ? __pfx_ksys_unshare+0x10/0x10 [ 770.386013][T14576] ? __pfx_ksys_write+0x10/0x10 [ 770.386032][T14576] ? rcu_is_watching+0x15/0xb0 [ 770.386063][T14576] __x64_sys_unshare+0x38/0x50 [ 770.386083][T14576] do_syscall_64+0xfa/0x3b0 [ 770.386100][T14576] ? lockdep_hardirqs_on+0x9c/0x150 [ 770.386117][T14576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.386135][T14576] ? clear_bhb_loop+0x60/0xb0 [ 770.386157][T14576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.386174][T14576] RIP: 0033:0x7fbcb138eec9 [ 770.386190][T14576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.386207][T14576] RSP: 002b:00007fbcb2304038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 770.386226][T14576] RAX: ffffffffffffffda RBX: 00007fbcb15e5fa0 RCX: 00007fbcb138eec9 [ 770.386239][T14576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020400 [ 770.386251][T14576] RBP: 00007fbcb2304090 R08: 0000000000000000 R09: 0000000000000000 [ 770.386262][T14576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 770.386273][T14576] R13: 00007fbcb15e6038 R14: 00007fbcb15e5fa0 R15: 00007fbcb170fa28 [ 770.386304][T14576] [ 770.386611][T14576] ------------[ cut here ]------------ [ 770.573581][ T5842] usb 7-1: USB disconnect, device number 79 [ 770.576670][T14576] ida_free called for id=2187 which is not allocated. [ 770.586748][T14576] WARNING: CPU: 0 PID: 14576 at lib/idr.c:592 ida_free+0x280/0x310 [ 770.679628][T14576] Modules linked in: [ 770.683537][T14576] CPU: 0 UID: 0 PID: 14576 Comm: syz.8.2104 Not tainted syzkaller #0 PREEMPT(full) [ 770.693019][T14576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 770.703124][T14576] RIP: 0010:ida_free+0x280/0x310 [ 770.708143][T14576] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 71 2c 0c 00 90 48 c7 c7 a0 7b 76 8c 44 89 fe e8 41 11 54 f6 90 <0f> 0b 90 90 eb 34 e8 85 a2 90 f6 49 bd 00 00 00 00 00 fc ff df eb [ 770.728289][T14576] RSP: 0018:ffffc900175a7b60 EFLAGS: 00010246 [ 770.734897][T14576] RAX: 3aea96b38881d500 RBX: 0000000000000a02 RCX: ffff888025790000 [ 770.742984][T14576] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 770.751023][T14576] RBP: ffffc900175a7c60 R08: ffff8880b8824293 R09: 1ffff11017104852 [ 770.759542][T14576] R10: dffffc0000000000 R11: ffffed1017104853 R12: 1ffff92002eb4f70 [ 770.767967][T14576] R13: dffffc0000000000 R14: ffff88804a1eef00 R15: 000000000000088b [ 770.776641][T14576] FS: 00007fbcb23046c0(0000) GS:ffff888126373000(0000) knlGS:0000000000000000 [ 770.786001][T14576] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 770.792627][T14576] CR2: 0000001b34163fff CR3: 0000000055c92000 CR4: 00000000003526f0 [ 770.800710][T14576] Call Trace: [ 770.804006][T14576] [ 770.807028][T14576] ? __pfx_ida_free+0x10/0x10 [ 770.811734][T14576] copy_mnt_ns+0x197/0x820 [ 770.816209][T14576] ? rcu_is_watching+0x15/0xb0 [ 770.820987][T14576] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 770.826479][T14576] create_new_namespaces+0xd1/0x720 [ 770.831707][T14576] ? bpf_lsm_capable+0x9/0x20 [ 770.836471][T14576] ? security_capable+0x7e/0x2e0 [ 770.841440][T14576] unshare_nsproxy_namespaces+0x11c/0x170 [ 770.847365][T14576] ksys_unshare+0x4c8/0x8c0 [ 770.851898][T14576] ? __pfx_ksys_unshare+0x10/0x10 [ 770.857048][T14576] ? __pfx_ksys_write+0x10/0x10 [ 770.861915][T14576] ? rcu_is_watching+0x15/0xb0 [ 770.866767][T14576] __x64_sys_unshare+0x38/0x50 [ 770.871551][T14576] do_syscall_64+0xfa/0x3b0 [ 770.876151][T14576] ? lockdep_hardirqs_on+0x9c/0x150 [ 770.881368][T14576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.887569][T14576] ? clear_bhb_loop+0x60/0xb0 [ 770.892265][T14576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.898293][T14576] RIP: 0033:0x7fbcb138eec9 [ 770.902723][T14576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.922426][T14576] RSP: 002b:00007fbcb2304038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 770.930917][T14576] RAX: ffffffffffffffda RBX: 00007fbcb15e5fa0 RCX: 00007fbcb138eec9 [ 770.938974][T14576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020400 [ 770.947013][T14576] RBP: 00007fbcb2304090 R08: 0000000000000000 R09: 0000000000000000 [ 770.955067][T14576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 770.963054][T14576] R13: 00007fbcb15e6038 R14: 00007fbcb15e5fa0 R15: 00007fbcb170fa28 [ 770.971126][T14576] [ 770.974186][T14576] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 770.981565][T14576] CPU: 0 UID: 0 PID: 14576 Comm: syz.8.2104 Not tainted syzkaller #0 PREEMPT(full) [ 770.990946][T14576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 771.001014][T14576] Call Trace: [ 771.004317][T14576] [ 771.007349][T14576] dump_stack_lvl+0x99/0x250 [ 771.011963][T14576] ? __asan_memcpy+0x40/0x70 [ 771.016571][T14576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 771.021792][T14576] ? __pfx__printk+0x10/0x10 [ 771.026410][T14576] vpanic+0x281/0x750 [ 771.030405][T14576] ? __pfx__printk+0x10/0x10 [ 771.035004][T14576] ? __pfx_vpanic+0x10/0x10 [ 771.039523][T14576] ? is_bpf_text_address+0x26/0x2b0 [ 771.044751][T14576] panic+0xb9/0xc0 [ 771.048494][T14576] ? __pfx_panic+0x10/0x10 [ 771.052939][T14576] __warn+0x31b/0x4b0 [ 771.056933][T14576] ? ida_free+0x280/0x310 [ 771.061304][T14576] ? ida_free+0x280/0x310 [ 771.065651][T14576] report_bug+0x2be/0x4f0 [ 771.069990][T14576] ? ida_free+0x280/0x310 [ 771.074333][T14576] ? ida_free+0x280/0x310 [ 771.078669][T14576] ? ida_free+0x282/0x310 [ 771.082993][T14576] handle_bug+0x84/0x160 [ 771.087231][T14576] exc_invalid_op+0x1a/0x50 [ 771.091730][T14576] asm_exc_invalid_op+0x1a/0x20 [ 771.096570][T14576] RIP: 0010:ida_free+0x280/0x310 [ 771.101500][T14576] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 71 2c 0c 00 90 48 c7 c7 a0 7b 76 8c 44 89 fe e8 41 11 54 f6 90 <0f> 0b 90 90 eb 34 e8 85 a2 90 f6 49 bd 00 00 00 00 00 fc ff df eb [ 771.121545][T14576] RSP: 0018:ffffc900175a7b60 EFLAGS: 00010246 [ 771.127608][T14576] RAX: 3aea96b38881d500 RBX: 0000000000000a02 RCX: ffff888025790000 [ 771.135569][T14576] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 771.143528][T14576] RBP: ffffc900175a7c60 R08: ffff8880b8824293 R09: 1ffff11017104852 [ 771.151494][T14576] R10: dffffc0000000000 R11: ffffed1017104853 R12: 1ffff92002eb4f70 [ 771.159454][T14576] R13: dffffc0000000000 R14: ffff88804a1eef00 R15: 000000000000088b [ 771.167438][T14576] ? __pfx_ida_free+0x10/0x10 [ 771.172133][T14576] copy_mnt_ns+0x197/0x820 [ 771.176591][T14576] ? rcu_is_watching+0x15/0xb0 [ 771.181363][T14576] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 771.186737][T14576] create_new_namespaces+0xd1/0x720 [ 771.191945][T14576] ? bpf_lsm_capable+0x9/0x20 [ 771.196629][T14576] ? security_capable+0x7e/0x2e0 [ 771.201574][T14576] unshare_nsproxy_namespaces+0x11c/0x170 [ 771.207290][T14576] ksys_unshare+0x4c8/0x8c0 [ 771.211793][T14576] ? __pfx_ksys_unshare+0x10/0x10 [ 771.216805][T14576] ? __pfx_ksys_write+0x10/0x10 [ 771.221646][T14576] ? rcu_is_watching+0x15/0xb0 [ 771.226414][T14576] __x64_sys_unshare+0x38/0x50 [ 771.231170][T14576] do_syscall_64+0xfa/0x3b0 [ 771.235657][T14576] ? lockdep_hardirqs_on+0x9c/0x150 [ 771.240838][T14576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.246891][T14576] ? clear_bhb_loop+0x60/0xb0 [ 771.251558][T14576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.257440][T14576] RIP: 0033:0x7fbcb138eec9 [ 771.261841][T14576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.281437][T14576] RSP: 002b:00007fbcb2304038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 771.289847][T14576] RAX: ffffffffffffffda RBX: 00007fbcb15e5fa0 RCX: 00007fbcb138eec9 [ 771.297808][T14576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020400 [ 771.305765][T14576] RBP: 00007fbcb2304090 R08: 0000000000000000 R09: 0000000000000000 [ 771.313721][T14576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 771.321689][T14576] R13: 00007fbcb15e6038 R14: 00007fbcb15e5fa0 R15: 00007fbcb170fa28 [ 771.329659][T14576] [ 771.332967][T14576] Kernel Offset: disabled [ 771.337290][T14576] Rebooting in 86400 seconds..